{"type": "bundle", "id": "bundle--8604e254-4378-4b77-84f3-9dad3e2fc76a", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--c65ff51f-c07f-47b2-8aae-d718d8686c14", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--8906c0e9-f1d7-47f5-bc67-479abf8aefea", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e1698276-bb15-4940-91df-6d80d8eb1e5b", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--af09259d-761d-4d74-a957-2d42137ee558", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d320051-257f-489d-9788-9f41f2441900", "relationship_type": "located-at", "source_ref": "infrastructure--af09259d-761d-4d74-a957-2d42137ee558", "target_ref": "location--c65ff51f-c07f-47b2-8aae-d718d8686c14", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5c7d6276-5107-4f26-a90f-1acd017cca5d", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6931be07-b5b1-40ac-a95c-e234b9485644", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ad98d07-1086-452f-a8fa-4d6309743b4c", "relationship_type": "located-at", "source_ref": "infrastructure--6931be07-b5b1-40ac-a95c-e234b9485644", "target_ref": "location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--39bb23dd-a508-4684-8104-8221b2204eec", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cefc9d50-9728-4351-8024-0ad495f9313e", "relationship_type": "located-at", "source_ref": "infrastructure--39bb23dd-a508-4684-8104-8221b2204eec", "target_ref": "location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e78aac74-9d04-48fc-8a38-05056328129e", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9724a14-c657-43b0-ae96-bd228df39ed0", "relationship_type": "located-at", "source_ref": "infrastructure--e78aac74-9d04-48fc-8a38-05056328129e", "target_ref": "location--8906c0e9-f1d7-47f5-bc67-479abf8aefea", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--5f6ea998-22a4-45e2-8e31-6371eb528ffc", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--22a67071-791e-4936-942c-ca234854d76d", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--bfeebea1-c16b-45fb-849e-8c477676da6d", "name": "CVE-2021-21985", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--7bf0f1a8-1d80-453f-a615-3408394ce317", "name": "CVE-2021-22005", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--193429ec-8440-4d7a-ac62-66efcb65bb2f", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--4b33b2f9-6677-4b2b-a841-9fda3b4cf66d", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9a840f3f-bcf8-41d4-9062-26bbed85c1d1", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--36e30756-e384-41f7-a2ca-9f8b14b80402", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fdf581cf-e394-4740-9126-8df12de94ee8", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5cb465f2-8138-4a10-8a3d-386189d53c0a", "name": "Container API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/007/", "external_id": "T1552.007"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e1c6e5-3216-4616-b7bf-107126c3803e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.10.185.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3500c450-229e-4c0d-aab2-38b08ec5d4e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.12.70.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ebd2c2-ee7e-4fb0-8ccc-dfb63112ce05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.24.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5232ad-2e0e-47f4-97e6-36ef3da404b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.162.18.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45b3dbc-127a-46ae-a433-8df1df9a6c3b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.164.242.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96cc0b2-5121-4004-aae8-f16b63f3d75a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.181.190.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1a3517-9999-4775-8f4b-834a60cdcb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5deccb-2858-4795-9c03-d4fcc7b1eafc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.53.89.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0566f13d-6a27-4363-a3d8-89618f6b3ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40aee4d-37bd-454b-bc28-3bb0bd4ad489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.18.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a696635b-27d2-4e32-9335-100e2d4c5da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37448038-19b6-4079-8f15-c7c2245fefee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25130ead-9a24-4f43-93f1-99a74c0baf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7565d86-b39a-4cbd-96b9-13d581d79d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5beafe-3143-4aaf-ba35-c83efd8c18a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fab8e2-7234-474f-9b07-a314303236a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df660b0-fbec-4bf1-b99b-cd110df34b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05475e47-3a64-4a45-8ab0-377696437886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77951ea-12ba-431a-b04f-d293d2d36d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c23a97-d02f-4f1f-ad16-f14b9ef8edef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20f6f2e-26a7-42ef-a1b6-8128a34841f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68beb27f-4654-4043-9b00-80178971031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85722c06-0ff5-4f46-a483-60f82d5d8ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf5d36e-5903-4d44-93ca-ff01036644f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514d064b-6a80-4334-b6c6-48ffbdda8e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b307969c-3c4b-4a22-8365-c8d7edfe5dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b909f392-4fb0-4b25-a7e7-079501ec8b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221944d9-a4ec-457f-aa30-59bddf529992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28bbef4-b99d-4b98-8e0b-d7b6ec3936c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e97ea0-fac4-4cf4-8bf4-6c9500369ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f04ddb-9748-4f64-88dd-6b8a46ad6d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ad3166-610f-4e2c-944f-396f2108db60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be084b2-da99-4963-9492-148260b44b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab698f-6cb7-464a-a027-dcf4c7872777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30611a4-0a9b-45aa-9d75-cffb52b692f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190acfab-c750-4f1a-a804-d5415be9aa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1c2dc9-0b3a-43e5-adff-7fe84b7c09f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daa371c-b5fa-49db-93ca-d2b1e391c7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3118f28-8475-4e01-b26e-1401b25b5f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec7c856-326f-432d-896d-a337e52fa55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fa2b29-e0fe-4260-aa12-054df913fbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19940ef-f886-423e-acb0-d0d6cb02fde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f96206-dc0b-43ff-bbed-353119a5a7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2154ce-60d8-4c1d-9f83-8cb1595e3dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20738895-b964-4c8c-9b44-070c50920790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb86cb5f-34ee-470c-b07e-0d9e94757e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f04e94-b1f7-40e2-a8bd-f01174e2a50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42945b7c-f152-4044-b764-2d12b8914fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72f33a7-0621-403b-9edf-1a0d103cbdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1421f2c9-8159-4a3a-b214-667cfbab9c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af68d3d8-181f-481d-ab50-9f5ecfdb93f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d8406d-51bb-4098-935f-3b31640383bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519e3cb-0e6d-464f-9584-b0196ed2afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f6b307-da03-4eab-a7d1-8a5d3d60462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e1982c-1a1a-434b-9e1e-8f70e2fea30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1852a8ee-c8da-4bfa-9b3a-74cfb5008f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2b7cd4-24fa-4ea3-bbc7-046133984f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b00fdac-5557-49d3-be5c-9cac46b65203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eac8baf-659c-4e61-8cc6-4d22379067a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c44706-204a-4e69-9d97-376cf1979587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac39d177-f804-43db-a82a-56b70abfa41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c453d00-08f6-472d-98e0-5e63cf65e93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cc15a7-0152-4b1d-a8fc-e73842248832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cfa350-7066-4780-98de-3cac14ffadca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.1.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98aff69-34f5-4a28-91b4-486c613b8570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.0.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d462c5e-d075-4527-8bfb-ead3fe6cdc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.196.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e4db33-e673-4a15-9058-786bb69dc30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.51.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f1624f-ecca-43ca-93bc-f928b6b23399", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.61.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf525a67-0eab-4fe7-8301-3864fe0b3683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.54.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e57c983-6168-440e-b50a-cd225e328095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386f13ad-168e-4e5e-be9e-0d25b3b0095a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.67.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686f5b26-769a-42d7-b0fa-64fd94461701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.82.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3646e61a-f815-4b04-85ca-6644ed8e34e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af67a3c8-2b5f-4a8d-933f-3df43acac715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d94e74-5615-4ba8-b1df-c1bab43edd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.109.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb31989-452c-4470-8aac-a47bb82a5090", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.15.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910b5c1c-7996-4b21-af62-6458485a2008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.35.214.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b876927d-8953-4aa5-80b6-16c1e5592f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dacea4-20a0-45c5-beca-ba6c83e609b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424471e5-c9d7-44d3-8398-8d42f9f44251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147b4a4-9546-4153-a8d1-a63bf082a4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475f9ce3-aeda-4781-aa5d-a7e97cb3643c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2632b84-db5b-40eb-a746-2f10f7614a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496cedc2-9629-4eec-ae05-b0c164ffe8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36b8eb8-4cde-427a-8465-19d1a62d11a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e20f27-230c-4a01-b4bd-eb7dee3487e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7908aa0f-26a5-49f5-a78c-40e63439cfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ec57e-509f-423f-a9e6-5b4eee83209b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bd9553-890e-4d88-b0c5-c6e63e741b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a45e3a-cd73-4110-b3c0-bfceda6fc935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19f05fc-ceae-430e-87de-6877dbd28f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4553f220-e9b9-485b-bc42-9d56847ba56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c809b1e-3fbf-478f-951a-6129a4b94799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ead3802-0ec9-4e58-b550-d64a86f44474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a00fd74-630d-4a0f-b573-96d050fceabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0ed12f-03ee-4e1d-a6ad-9b5621f80572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c149f5e-4803-4575-a7a7-cfac7e362e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eb2304-d1d7-44a6-8fe3-92566845807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92e84b0-1168-46fe-977a-d89777aa836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7492057-61de-4222-91a1-bffbb059b0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0893fe-f27c-406f-9bfb-1803ccc7ed1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4166089b-a2cb-4263-a8c8-bf82ed9a8d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf8a0e8-b5b9-4a88-9cea-37bf37da1420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f82e31-2195-4cb9-8c79-455b7890c0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28afc581-7819-4bbb-a46a-a46dda805944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd874ae-3d97-444a-b9ec-0f55d14a14e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d351554d-e792-4d55-b6b7-7bbc694f6c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5dbaec-c9f1-4607-a6dc-aea252d26aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.172.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f142b1-c5a3-4aa6-9b05-71e37fb2ed66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4ff71e-fbab-4ea0-afbd-1ad64d70aaee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.4.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7934d1b-b0a8-4b08-97b9-236400d82f34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.79.165.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698b1510-6fad-49bb-b282-c0158137f382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.203.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f03dd5-6c62-4355-8721-576814ab6fca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.227.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986ecb23-915b-4cfd-8b0f-0db32d6aeace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.234.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5ba709-4dcb-4007-8780-5efb60084baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.0.3.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb962109-e84a-43cd-9fdd-ef54092e8a28", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.100.6.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57c8ee5-cfeb-4bc4-9aa1-a09679461575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.235.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbffb56-b363-47a7-8461-4f07a6a2e777", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.209.35.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cff283a-e58b-4f23-9f01-27472e9508d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126cc21c-2101-4e14-ac4f-aee37d36c8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff01148-fbfa-4d03-945b-95088d430ed5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.254.34.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3821fb42-4133-4866-aa71-766cdba5e21a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.37.22.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6cddd5-934b-4cbd-b132-4f924b486d70", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.64.160.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92ea518-4df9-41ae-8606-6311ef8adb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.64.219.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac9d596-9ef3-47fd-b37d-1f005797eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.69.167.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4fc7be-e482-4a4f-b9da-598abfdcecba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2e7f07-b6fa-4255-889e-09144a74e828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1fc6a2-9d47-40b9-b57a-afd95d1de228", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.10.194.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811358f3-572b-4b2c-8b9f-cc48baf56488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.10.87.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50665b1f-86e5-4546-85bf-0a9f2a8dae60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae36a24-f845-45cd-963c-6c30ad906665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.102.31.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e04c41-7de1-4913-b93f-03768d3e247b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7351da44-f0af-46f9-824b-ecf98f3264b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.67.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3841fbcd-8715-457a-ada7-ff2780567b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.212.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d02b8d4-fc21-4a2f-bf23-c4f2fcb9ffd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.244.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064376a1-1e1b-4f3f-a0c2-4da2797cccb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55d6d66-54b1-40b7-9df3-10ac7db958a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d94245-c965-4577-9cd9-8188fdb77379", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.129.134.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b7e2f5-8c43-43af-86f6-ad78385a9628", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89196bdd-ea6b-4740-83ad-1ca0f6b608e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.98.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba237cae-904e-4ac6-aa5a-40f4ced8a2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.231.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e68537-47d1-4f8e-b46b-91ef33886b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.231.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e443beb0-2340-4162-819e-85c732ab6ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0207b9-7c59-4a94-bab8-847dfc98c8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333c0ad4-dfd1-40a6-8ce9-41663fa3ed7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.142.72.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c112195-a6fc-4165-a66c-61768fe0c74e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.231.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c3d6af-0607-4591-9893-bb8b0caaa662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c3d465-4b84-4002-b105-a7652a439d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7d5285-f7fe-4b3b-86b7-6324592562f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc330a08-cd43-4470-bde0-7d0f00008b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c468e8-0633-4998-9088-4606e4fa4347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeffa24-476d-4d74-9ada-cd90bb482c58", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.172.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6c7466-c126-4599-910e-741af7cd4092", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.172.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db076d8-aeb6-4089-b905-129e68df24b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6ac223-8910-40bc-8be2-224090f5e360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.119.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fee0fdc-b7fb-415e-bfbc-597ab17d5b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a48d42c-2147-4030-8933-664d01c91d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.206.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4b2adb-0e4e-4fa3-b48e-4e972056cf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d694d25-de70-481f-a1a0-bb1d9e0c5619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.19.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140f882d-9ba7-4e9e-a1de-5475c9f0bde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0446a2da-354d-4267-98e7-01567ff5170a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.220.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fe36e8-25ea-4fb4-beed-b1a51c2ac304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55050abb-4d85-444a-a9cc-5030f34dec0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.248.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09956b8-f6ff-4c15-9964-b407e9d67c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.190.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf23cb16-c230-4e83-97f9-101d3065a81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79930be4-9064-445e-86e8-95209e805ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.19.252.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a8444b-f973-492c-acf4-aadb4ea316c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f7dd61-7979-4328-aadb-63ea92d655ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989bc5e8-ee83-4029-be2f-e6d376207e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad2c252-2eb0-4887-8f06-bb4545648a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e760e03-1a39-4890-9ccf-bd3e3ef38396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27f93c4-4a71-4069-80c1-003bdc0d9d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402265a2-de7b-43d5-b834-d24b2e862bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25f9606-a168-4a34-a504-080cbaa8d8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff2dd85-315e-4d6e-9904-af353f03960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93e1ec6-296d-4e25-b342-0a62026b2129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.21.84.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adc7dc6-fc2d-46b4-b900-2497f455ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.112.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3292fcd-54e1-4149-bae7-84e7dfdbf099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.95.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc69751-9fc7-4c11-9a00-f7ac44fb3e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.158.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798a9fae-b772-45fa-a437-7e6f335c77a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.201.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6fa618-7e22-4880-ac2c-dbd2d00e63cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.69.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c3cb7b-7e4a-4ca7-9181-8c8c2baa8b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3757691-6150-4a60-85cc-e4ae32c3f927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.246.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bfa244-b8ff-400c-8c9d-4d310516b138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafcc7c3-fe27-4671-b3b1-49432efc236c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c43af5f-c62b-4a84-8c9d-0ffaa6fb4761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebe19e8-60f4-412c-a627-63ea3ca948e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a210f2e-5af6-4af6-8892-3cdbc978f532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99990ea3-2107-480c-a02e-8439d73b45b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b620b95-1f65-43cc-9605-0c692d859577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f57ef8-dd5d-4b30-a880-64a86bd5db49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe13fda-9806-4778-9588-da483443e644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.201.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4120ea-8623-43c9-9a3e-a2f94f6cd573", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9495b9bb-51e3-4ec1-ba53-a880f5bf3b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbbfcf4-ef17-460c-9d64-e0233fa853c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9595558c-480e-4159-8999-9bcade5f5019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27e22b8-2bc9-44e7-8a25-948e4bdcc560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715936c9-2f11-4673-99a3-86db94818f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.234.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070945e2-1115-4b99-8291-0f6836df6bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec179587-a471-4751-904f-cef6d8e41971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.182.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23208a56-696f-4c33-8dac-1e5739e69545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a282946f-ef21-4b60-bf39-6935c281d7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.187.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c69906a-df72-4beb-bf39-825a810e875a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b36ec7-8308-478e-bace-2f61e19959f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a05e4c8-b0b8-4054-a8be-5a11ee21864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.84.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7b2c1a-f025-419f-915b-87673588cf01", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.121.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82094618-d77c-485d-85e0-0b38950737e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.122.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a3dbf5-abd4-4610-9312-b10484d1a818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe93609-a7ab-48e9-9fba-3a38c9974cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3799bd2e-9a4e-4743-b513-84a788081ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.36.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713da011-567d-4bc4-94c4-bcf2ae2824da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.92.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309ce07b-7fd2-4c6f-b823-64b943aa1269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98066166-bb11-4c1b-abb5-972960629a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbca442-f32a-48ae-918c-c5749796c3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39393d3-7527-4ec5-889a-741bbe71f469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94be2b6d-0de1-475a-aa73-78745e0844d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dc600d-57ca-4328-9043-fdf5dd8ac9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a207b45a-6338-4fc1-9327-bce780b3bf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62a34d6-0c32-4ec1-addc-5d48f128c7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4d2fc4-3c08-41a0-b4e1-58a34cc60644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac23b3-77ab-4d11-b72b-d5c3e4a94b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.235.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc3f2c5-250f-4037-89f7-85f1440a99b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf5a33-be0a-4f69-a003-3c9c6b1f3b99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.30.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15565bb-0a8f-48a8-a773-0217e85bf1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.184.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d576d3-6e11-4ca0-9bb8-b8ea4521dc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.185.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc5fd19-65c2-49f3-aecd-c50c0938ea1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.34.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04051d20-1543-443b-bab2-7fc67fd15b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.66.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c64a51-fe9b-4178-abbb-8e8d66527bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.143.77.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f06379d-e96a-425e-8d2a-fa3c4c6436a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9deb1652-d879-4d12-be35-4e038d8529e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d19f0b2-5d4c-417b-8d9e-5d7684139dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7441bb96-1576-4de6-a96a-cd360735bc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068ab334-dd20-4904-8516-cb4057397d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3815b8ab-b603-4cd0-bb90-2c1214962e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f11dfa-18c4-451b-a695-d01e9b8e9aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eff784c-daa3-4ff0-bb1a-24b6def74b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbef52a-92b3-44d8-85be-92fdaffdb01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11815f9-2184-4e02-8066-1099395ad117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318750c-de72-4ef4-8a59-0cffef991588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac303efa-d63c-403a-a95a-c012769aebdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c2c64e-256c-4a25-bae3-532be58dcadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb07b4ed-ad40-45ec-8288-0dcde3a72234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4462fd-7ce3-4173-8851-7ccd6b0b1342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061be28c-8feb-4833-99df-54c532c579b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd499fd5-e878-4fa1-957d-39d778abd32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ecd1d5-b843-4518-970e-eff350f65382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0940c328-cb47-4408-8104-7c06558833af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.17.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed280fa-231f-484f-9d43-a8cd12fc2af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.51.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123da19f-df52-4f2b-b8f4-8ccb76d7396c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.75.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99941a17-f55a-46c6-8aba-e96ce2d1490d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.117.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbb6f14-f366-40b1-a03f-132f50a75fa3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.3.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c776de98-2722-411d-b676-9a6bed1fecde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1439528-c7b7-4a10-afe7-b0b164b40333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.204.222.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d119a180-0c8b-4867-9701-53719141d803", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.110.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8415c3d6-53f9-421b-8ff3-6c004a7a102a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a05784-cae1-47c7-af30-ee6d60133f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01727133-4274-43cc-bd89-7c3741e2ef1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf9a2fe-0dd8-490a-9dfd-f44d21fd138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.119.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0e6424-aa7c-4a03-bc56-4760594e1727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5799998-dbb7-4f33-bd9d-66f06178bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.108.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca9bc6c-dbc2-4565-8355-70b7b4a6409c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.226.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56939482-7af2-468a-a5ef-66a65817398a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.244.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868df2d2-a437-4211-b1d1-cc050870b71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.3.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58519e20-d2da-48de-a6ac-ca3db36ba60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8bdbeb-5e86-4011-828b-3b897fadeedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2311f1ed-992f-45b3-ad7f-fd58d121a962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.120.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be45cbb1-916a-4ec2-a58e-3959e5f684e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80562183-6465-4269-89c1-480e91f4dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f701b2b2-2e7c-4707-8da0-aa8a0cc03a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.166.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130c59a5-b83e-4a6c-9b78-a1f1c6a8a880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.199.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1fe9b6-e74d-40dc-886b-4b677f516d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.224.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2a741e-210a-4773-b011-71ff6360d95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69e7523-b1e2-4bf8-96a5-f048819ae9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.254.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e583d3f7-6189-497b-ba60-6e45535c7378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.27.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674c7228-78e2-437d-bbdb-4e8cda30f5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.3.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86928a6b-12e1-4f0f-8714-734a113d4ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.50.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285390ee-700c-4b84-80eb-20abab9cab33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.52.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21d1496-6df6-4e79-9992-c85d586df532", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.83.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b45bb7-c452-450a-ba80-c130a7127e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be6c60-5f13-4851-b43c-51af99e6100a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d354e1f-6071-4035-867e-1f578a90861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f888cb82-f758-4723-90a9-899697642892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee41aaae-0111-417e-b01f-e68bdb88e62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.195.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11cbd31-cb8b-4298-8a71-0e29dd0238ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.186.85.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1b78eb-02b9-429c-8d3a-bbc127f946ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.74.195.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9775f8-4512-4deb-a7c0-5e6892ad4fda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.97.68.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297c7756-9df7-4baa-956f-3f660e2ba28e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.15.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6172346-f4ab-4077-b1f9-d434a0864aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.100.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ce91a0-e2a4-4ed9-b7cd-762e3ffd3840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.66.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf823cc-3625-42a7-ae4f-d69bd13cd01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.15.238.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fda6d2-96d3-4b73-9f7d-e84761d2612a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.228.18.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe5826a-430e-4731-b854-8f21c3c0e0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.253.71.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb11de2-98d4-4c0c-81ed-f88461dd7c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.37.72.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb58dc90-f214-47c6-942d-00012647a7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.38.195.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00df9a64-45a8-4ab2-95e5-852d665b266d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.195.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060407d4-f8d5-4518-9aca-a8fca86ddebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314219c4-f88d-4fff-a760-a41aab7ce590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3756e4ff-ab43-4782-9078-2ef718e6c51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9df013-df5c-40ff-a3dc-49ab04b014c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.145.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bf35cd-ab7f-4478-85aa-e6ff746fe1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.153.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5375f57e-a332-4423-a67e-440a4f0af046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.164.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8ad9db-21bd-48e2-a535-f627c778a1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.166.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04214483-9deb-4d6f-95e6-912b33566d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccc0c7a-06fd-4420-8b97-9c5716ca7366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ec9521-ed74-4228-b3f4-815324de8877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c2bdbd-c131-4cd6-af52-492e648720b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac938620-c36a-469e-9160-53ca65263387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3021b7-60b1-4f5d-87fc-45956b9a0b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad82c20-f7a0-4b00-97c3-f21584b105cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065f1c3e-503e-4797-ad71-40bb1757a610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f507811-ea58-448a-8682-1b4484ab5a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b935d5-718e-4326-88ce-b9d3cb62438c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea67caa2-58b8-413f-921d-b1fc31397dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d8de4-2da6-429d-a3fe-551271bed500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.9.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a0f124-6196-41ba-b2a6-de1e514bba9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.148.158.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b8bad3-03c7-4d39-ad88-6037e558947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0df989d-04e8-4cc7-9bda-5dd673577041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091f4ab5-129b-46da-a16e-0a2eefa7091c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8075336-2d3a-45e0-bd48-2ce21d0cf68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3729a2bc-421f-4cd5-951a-eb473762dd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f33779f-82fc-4b71-ab29-8d2080dac330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b731bd58-8180-4cf4-b851-1c2a8ee4f233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18776ae8-a6d1-4899-a33f-479b603ba5df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45481bd8-aec9-4e5e-bd57-8919162dce16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cac5f2f-47e6-49d7-8366-bc259d1ca766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd73f3d8-5008-423e-b3fe-5962fd232736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8845986c-bc46-4c7a-b9d3-354e71356e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b3f0d6-5f11-44be-a64f-a6fb031abeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0471c6c0-2276-4eda-b5d9-0e3877680c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15368b4-5346-42a2-b492-617828ba4317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2b6c67-1161-44ce-bb5e-e587d487d3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216c76a8-c10b-4fb4-9c84-d9e8a75e8549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee901c49-4bf1-47b8-9849-ac1cd63271ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b1b672-468c-4903-a5a5-20e77cbc5a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edffb4b-3836-4c3f-b94d-1f1fb1f56e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3912f577-07d6-404a-92cf-ded23ffd007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b1acb4-a9d5-42ac-a69a-6cc3370e560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc7b48b-aacc-4e42-9f6c-da6200f97024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5581e0-3f5a-41e8-8cca-860c61b6d73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3c48ad-52ce-4aab-8864-01144dcbcf75", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.116.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8b2709-6694-4396-b470-560d05df1c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8936c3b9-8fcc-4db0-9105-67cf07a932eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949c392e-75db-4b76-9c18-166bbf75bbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.37.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85831023-514c-431a-a013-ad744d90c9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.212.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce83acf6-e13c-4e31-a07c-cb88399b8dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.27.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e769d2-3e62-4d3c-ac7c-1bc348078ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.20.121.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aae343-77f6-46a6-859f-a34ff1f30bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.135.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c845d663-23f6-4acc-ac69-2094fa891ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.191.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1a2807-4883-4139-93f1-6fbc797b68fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.211.37.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33873dd5-95d4-433e-9525-0ee1aa22818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.139.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1bba07-1e18-497a-bc80-76b3e08bf58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.137.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58519382-97de-4121-8aac-a8e49f837dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff82508-23bd-4ef6-b0a5-0da0d5a825dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb3a831-69bf-48c7-8caf-ab68d81d1e0a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.132.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9829f58c-f7cc-46e8-bc77-b4bc0f51004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846e79f0-d198-4745-a75d-197dfa2c93cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073a5a31-244f-453e-a263-c5fdccde0e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1386e4f-0e07-46ff-ae06-f3a0f106e6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce07a0-a8f9-4909-bfab-67c915df4dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d0e1c9-0ca1-40f4-ae8d-e7632688e242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ab0f70-7f86-4f62-bee0-434bc8a8d0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fccb40-ce6e-47be-b269-60d5787dc4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8df79-aac8-489f-a4ef-e1f84da6e25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377c9b4e-d359-48ac-ab65-63de7eb7ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059702df-ec89-4ec1-8a79-a8d85d1bf234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8da8c7-ab6d-493d-9f61-3235b2ac40d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469eb7b0-6f01-4a4f-aa89-d3c7c6bbfecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324581c9-ff7c-4aaa-84ba-6fb2279ba7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a179abad-9f1f-4e53-a946-09e848f387b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.122.247.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affcb219-3bbb-4253-9c5f-7f4ef56801f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b130b4fd-e7c6-4d51-9367-9f88ca325eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42eca97-593b-4134-8ea4-0d0e7b20667b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.243.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427bb3bc-b13b-4289-879c-2f8372de64a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.166.129.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741e7b51-cd4c-4cc3-8505-0122a1159900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.8.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743d8210-9ae2-4aee-8c6f-ad35ad1ad007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.195.209.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c41f097-a154-4a10-9572-f9a120a0e3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b38eb3-a17c-4bbb-a211-83e17547487b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.203.213.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d1d9ee-0dac-4ee0-b5df-5c872d39b900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b82d51-591c-472b-ac7a-04634fdfed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71cf815-5833-4e24-8022-b279ba62f350", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.229.28.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca13a5-2330-4c1b-994a-a96196eb4479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94721e87-7279-421b-9a3a-63b890f2b75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.247.190.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46c28ff-5e3d-45ab-a1d3-e41233619144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.254.254.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43caf0b0-789e-471c-b959-3108eba94f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.59.97.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cd9845-e4a7-4f60-b683-8bcac4ee545b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d3b6a1-e0db-4a7c-b7e4-035e6e7994a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.164.64.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b428d579-e791-4691-b62c-a0512f8387bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.166.67.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e694c519-9074-4c7e-aa0b-759d9c881fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab85011-3cba-434d-910c-a3ba16873031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a774c4-3199-406f-8482-a3c05fed36d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca41d83-9010-43cb-b3a3-1a2f850edfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.180.246.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e0d78-463b-4ccb-83ae-d23fb2114669", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.232.142.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429fc5e4-e817-4228-9253-5ca2a93da1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7419872-a22f-41a2-a5de-ff0cf88e8d96", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.30.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8671d6-2978-4049-a60c-6329723c2aa5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.208.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ad9873-b402-4043-8145-dcf530b54693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.78.252.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b241c113-0e6f-4faa-b075-8b2a1ab999bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.240.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192ddf0c-dddf-44fb-bf9e-82960d0c1a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.11.95.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365ee05e-eb1a-488a-85ff-0e173f7d93b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d4ca8f-ee82-41e1-a9b4-528b2e1587f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1673a40-d795-440e-a0e6-22408352585f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220b24bb-39d9-44ae-8966-c80edd239e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab2f9dd-2f25-448a-8085-eb47b4cc2cb9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.172.196.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d062b6-e405-4688-8f54-a796f7633fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.175.88.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9fdf3-ca86-4972-8247-c882f9cbecaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.21.215.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae87556-aaca-4e7c-9838-6e89bcae37e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5204f7-6afb-4879-aecc-bff060a91d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.46.20.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed677959-d763-4b9a-baa1-3618ad3e41db", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.47.243.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c7397a-e2a7-4c67-8f4c-aa8ebcc84fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.157.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9789b73-c9b6-4399-bf49-53232a96702d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.157.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c635af-938f-4329-b4b7-4a9e858fd35a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.123.59.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52eada6-21c6-48a9-8a8c-80ddcc10867d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.187.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd7c082-05f0-4420-879e-8885b767bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.157.207.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a467ac-6d8c-4b41-aa45-a9db8ff1e831", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.158.200.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0e0cd4-6a30-4e45-a9c2-7af07100cb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.29.109.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86f9c50-7733-4b10-9e52-8f11cdd9eae1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e99a44-3925-416b-bc27-b6400f42a3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f227920-5737-4c24-8883-38bd5ac36acd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a650f2ee-0e98-4deb-9d65-347230dc2ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ca99f-bf3d-443e-b12a-933d3131c24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f46439-0f81-4705-863d-2acb93e0ae38", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.242.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c253249e-b037-4447-b08e-c6eec6ff454e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.78.187.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb999db-6e88-4fbb-9e05-374e24dfc08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a452b4e5-e7cf-482a-b249-68fb614adf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bc22a3-626f-4673-af2b-15e2b7cc0e9f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.102.236.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a884c630-1dd3-4dfd-9b67-250afe5c1e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.182.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b94bc4-5d54-450a-bfe7-baeec45c01e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.164.66.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76cfe7f-ef86-4efa-9f5c-baedc4e57254", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.173.187.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadb2f9d-dd8f-4509-be4d-d68da043a8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.174.246.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87feac52-e98d-4b7a-8c7c-f74bc68393f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.192.12.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afda3d43-cc64-47bd-b1d5-02bd05754f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.199.226.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7f2f1b-0991-4651-a795-4e356f4c9d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.72.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4778e3aa-7ac3-4e8b-b487-dba6a366c4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0220c5-9ff1-487e-b773-ca8c8073da56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.254.31.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fdad40-8d6b-4532-8026-4e320ce369eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e4a10c-69a5-44e9-b5c1-ee767a0b011e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e2c70b-51e8-453d-b8ef-0cc6f8c5d9b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e61f4e-096c-4147-b603-7ed2b948f0ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17f87c3-433a-4396-8ee0-dd95db8de817", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b466f5-31a6-454a-93f7-9cc6d5796d60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1d092e-b75b-40cd-a7ab-6e1fbddea425", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535f6e7f-845f-401c-8bd2-a80206af4fd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a024e1f-62f8-461b-8cb9-93501a04918d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7b053b-4141-479b-83cc-afbe9bbe047f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3120adb2-978b-49b2-853b-14def75e85f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ccfef5-020a-4a77-8e9d-5c79e61d7259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.132.82.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b26d15-9cec-4613-b37b-30c552ff951d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.215.190.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864ffa9a-d259-4179-8fa0-ae55e7f97382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.216.211.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd5087-0737-4019-9c1f-7ed741057fae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.241.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2182365e-a733-4023-bc36-e9cd0cdb36a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508fb810-610a-47d2-a253-8641305d858b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba179c91-4e95-4c73-b852-0af2113dae02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.134.211.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5e998a-4bc1-4129-b943-065ebc303df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6738df-6cd0-4a4c-b808-97f800ac0a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.155.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11f5fea-ea4e-4a08-8e65-4255520d53ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.174.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfff952-7e83-45bc-80a0-7c45d7237905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475ee569-1101-4a67-a855-a012a0d392f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.213.96.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadff580-830b-4add-ba1a-ea8a15a47a99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.215.10.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd46c0cc-19f9-4458-9d9a-4715f1d94729", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.216.128.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e6fea1-0318-460e-a98e-8970ade18f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.22.123.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19736469-85fd-444c-873c-6dc7ac4dc53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f1dc4b-a798-4f92-a846-645c90d0f09f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.41.97.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54a58fd-cde9-427b-929f-caba44b20167", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.11.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8b2f6c-da03-4249-8ef3-6889c35b8483", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.145.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d5c8c7-c2e7-4443-92ca-566b499d0274", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.15.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751cd16f-1e71-4dee-9df2-b6bc7914f17e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.158.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0371e506-ff10-4a7c-8791-9e8f66234794", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.218.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51877be-a8b8-40ce-92b3-0a5f376e6736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.153.81.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58de7580-cdce-416b-8e8d-5f73e8a9c86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.177.172.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47e62df-ae75-4f73-ae0b-e530fadedc21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7e638c-6404-4620-9e38-1024ac5a8574", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e510cfe-b3e1-4be4-a3c8-94e72d975af7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b647a59e-9c47-4c1d-a32c-ab5814e2e794", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2a2040-1fd7-426f-82b4-9daeed588edf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8842164a-2657-46e9-95ed-f9b9b530d1cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c975130-d68c-43f2-bf80-efebd9431174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.181.10.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbaaadd-14fa-43f5-a749-ea2ea02d82a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.181.10.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b92d11-4a8c-4b39-8827-4ef366127e69", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.206.193.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50581d73-7be8-44b1-8493-0cfb601c0e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.49.147.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d87c8e2-eea1-493e-8009-078bf8ed36c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.152.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3c1fbf-e54f-40ef-85c9-1586bc145fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f5305-9557-493f-bffa-b66b00771e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.246.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a40f8a-7e65-4fce-b688-91a162950a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.54.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc9ed14-1bee-4bfb-9cf3-04f43b5d7e42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.68.196.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c7ab4c-2362-4355-aac4-fb84963ae218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a20793-3056-412e-8a6f-2b37ebc48822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.226.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f814e9-7b45-4430-a451-b8e505bc3620", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.173.65.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a577cc1d-7427-4f98-8acd-78611d16e59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.180.221.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d678ed-70d4-4b24-994f-97c496815dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.9.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd88099-2e86-425e-90db-0360f2e3154a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.252.86.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8603af1c-fb98-4177-9ad3-0fcb99519e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.27.135.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5557b806-c8a8-4325-bf49-8212ae425a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.30.37.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5ec07c-5cde-4842-bb9c-9ddba6d4492e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.34.85.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cf7a90-67ac-4df8-a934-c0173f46217a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.114.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f98e7f-89d5-41d2-aa03-c58758db10e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.43.216.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d056c8-0994-4130-8514-22fa7c43d9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.184.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0175c7c-a048-4e22-b85d-22b5e6d74e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.215.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44754021-e045-4a3e-8dac-935c8d73435d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.54.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01db7992-6079-422f-907f-9fc258d4eb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.53.45.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c3667-321e-4bf1-816d-298865404e85", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.88.69.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48229ed9-7699-4d7e-bf8a-b059e3ed8de3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.10.225.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac3d0a4-f113-4673-b1c1-1c7c93e1cbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.142.8.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce09b5e-831c-44a9-8d2e-c9496db66827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.104.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e999813c-0801-42ef-8090-55eb7474d1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.239.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10365a85-c453-4a89-b74f-ee77c3bb2261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.242.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a43ed9-0310-4d63-aace-fc58e90d66aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.165.157.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee3da60-adf5-4dbb-bc38-231728bcef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.175.68.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4916c91b-ed89-441c-8d84-99208c111b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.178.144.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756c56be-f3d4-41e1-851e-b3a59920e57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b3224d-ce67-4a3e-b87d-9f04492eec4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afeffeb5-6ac8-49ed-962e-027ecbc1e674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4936b75-8e40-4f7d-8b02-4ddc5c6904c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20514af-dc30-46b4-82ce-0df1d03e6a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88faf9e0-9d3e-438f-8f20-28448b6496de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319a50a4-8d30-4bd7-ad0d-c106a2799714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032d1a4a-bdfb-43a3-9156-fa9697bc9be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efe7381-b2ab-4b52-835b-ecc350bb750e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18f90de-15f3-480e-8148-2c92683c46c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a296855d-ba0f-4724-91b4-8dbc2a11bef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c83f00-6238-4b44-883a-c20d86c19817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5544c5aa-2507-4f4c-a5b8-1ebc9267f5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3688321-8fdc-4498-b326-ed0512c1af48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dfe57d-f56f-4a66-bde4-2aa238fea509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46740fd5-cbbd-4e34-b341-ad9a58a99a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2e738a-8ef9-419b-9eb3-4495b78fc083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc44a4f3-9b36-4f13-92a0-f41c041a49c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39113f3b-953c-44d2-8c81-d6cd61403c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351fd104-ccda-438b-a0fc-c858c94fddc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b42f9fb-1f19-4f16-9a81-f18da927f91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c49d1d-0d19-49f5-8928-05889fde9bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c341f951-1b03-4b40-a7e5-0d876f623311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acf1f25-d3f1-413d-97eb-d8864d789cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3888e4-a921-494e-b731-ad4de8be6d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2937c0-2973-4e67-8e8e-1ae33e4ee9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fdc7ee-53bd-4aa2-a086-e2667d0416b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626d047c-5e02-435b-948d-51bcaf5fd46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bf338f-3794-48eb-8f01-763da97146c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02266b01-b269-4068-a3e5-013f0b1545ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42a8833-854a-42e1-b0a7-ef7e09715d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64156adc-b638-4b12-85ae-5197ee6bf740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fbccbc-e978-481f-bc48-572f141a37a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb7d31e-dc43-4537-9351-61e5f0bd7948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37549a0-9e5e-4187-8df5-eedb465e5bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a58d6-80cd-49f9-afe6-2cc38e4f61f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085164c4-6328-4e68-a0f1-86f9efe5ffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3abd301-9eb9-4cc6-97b8-646656184378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e1bc18-6c0f-4091-bd04-ba407d14e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36855293-c9f6-45d9-beb8-12cf8ad3039e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1766d399-5784-4040-b2d6-3f28546218aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db872ba0-c54c-45cd-a2d6-bd8526230e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc72d0b1-73c8-44dd-a0ad-1fb8a079dd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89c3528-1cb1-4722-8a07-3f6cca62d472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0188cbcd-8d14-4568-bae1-6bf8c80c01ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcc8286-8053-410c-9ee5-8933d1c3d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48c07b6-ce6d-43a1-8782-02a5cc9cf95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faddfd5e-656e-48b7-be47-c616bde5287e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfbfa2b-fc1c-4db5-bf96-5832751808d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ac4161-b771-498a-8bdb-890f4a4431b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e27c2c-92d1-4499-a8d3-2cf57ff39b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5769d10-b836-4ec1-aeae-2bb4cfdaf0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6593b3d4-dfd1-4a31-91c5-6b3e9a5a73d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e039230-d14e-4701-b55a-0f98ee057b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebf6fc7-daf2-4ad8-8d55-5efd1b1252cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb0b6c4-2506-494a-8d05-e917d9f453c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dd68ae-ad34-4971-a7d3-22a206838dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08fb560-76b9-4a44-917f-c8c48ba1c8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e171aa-be62-4ada-8418-da44758f01c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bac487-78c2-4307-bfc6-e5a96744f112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b37c789-866d-4239-940b-1e1129d699c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e24014-b1ac-4fc0-a7fc-c14e21bd18a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e5a9d-0221-4814-8366-39843c401f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fd8b63-1c36-4da0-b390-9b1cdc38b3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9374d63-37ea-4744-9d18-72f6ed173d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c9ef99-c18b-46c0-9120-cf41dbbe067f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ddbc21-6279-47b4-867f-f26f8254c91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8e5dfc-c6b4-4f9a-be1a-3d4e4986ac1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac8e33e-d82e-4aef-859d-78d22b7a15b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164f63f8-16c4-4f5d-af07-f5f4a80c821d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76e9c1a-15ce-4a5a-8ac3-f786ef41ce9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9152a881-af2f-4792-983e-dbd1bf55ba6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e521b325-91ea-4f5d-b11a-12c35c04441b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3401cb77-0c3b-4641-9402-e5bc1e5a7724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94350ff-983f-4435-9b90-aaef7587a5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.26.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e9b2f9-26a4-4277-9aa6-0c707d004003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.56.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dcca17-7c9e-4c49-a5d8-aa391ae9d350", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.86.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a9c2d6-18e3-486f-8ab6-34a48f3a11cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.92.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e8ad00-b57e-4d18-8a1e-9d7d20c8f410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60afd83-6c9a-4614-8cec-4a9a388f758b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1c3a0b-66b5-4f79-940a-0de61edcff3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbef81ea-ab88-4c3d-85f5-6764218fafca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.216.188.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec4ca52-1a62-4764-a3f9-ddecb975f563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c19534d-fa3a-4288-bdd6-3e527d231382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c773d0a6-28d4-44d3-87ca-c3cfa04008b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb1732f-567f-4fef-bf9a-19bb0cf55c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd93d835-9c40-42d5-b630-04745e6f1c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6ef497-fccd-4056-8fba-94fafb2d27a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba7e516-dc3e-4af0-aa3c-f21552e3d741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed05de3-9421-463c-8729-52a5c51b369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64d16cd-b92b-43a4-a781-89b128c1366e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeeb6ab-c979-421a-8f71-048bfee8acf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3177abd8-854a-4dd8-919c-daac1c96e751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3488d4-a1c2-4dcd-afa1-76798004eef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.38.44.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a36891-a4f7-40c9-b0a7-ae1f89d7bbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.239.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ed8706-1262-4ff9-8de5-671947edf63b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.91.19.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e4b455-9b54-4790-b56a-ecd71b04d6cc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.112.240.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbadaf30-cd04-45f7-8cc8-628d1641a5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.148.49.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4a6220-65f7-4bc5-b525-f98a4c56430d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.157.76.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db578a9-f9ae-4bc0-b453-a3435c2b7ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.193.230.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18336d53-ce8c-495b-bc81-64bfa67eb7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.197.111.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67662f6-6b47-422f-a17b-9d397f991ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.206.114.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6946adaf-a50b-4c30-9e68-9561d8e675fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.23.56.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee0bff3-c387-423e-9ba0-ea1d9428ee78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.140.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3bdab5-804b-4a73-ad3f-90ca8ac4e984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.173.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97995b2a-4ec1-49aa-a8db-324a06b653c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.154.188.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8685db2-6879-446d-aafb-d42288e53ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.182.212.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3362b7eb-ebc5-44c6-b7f1-35692bfc22c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.137.149.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50336ee5-6e32-4a83-add0-42f66f177412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.109.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191767fe-f775-4ec7-b7f6-17c90285f5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.171.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9eb889-884c-432e-9794-a524692acfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.95.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4aeee5-cf50-474d-9b46-5cbe32c8cf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.100.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36cf489-7ac7-4528-b714-4d61935873d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.67.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad755fbb-5d13-48e2-931b-139434626f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.200.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6497e0b0-bdf1-4caf-8f46-931d96faa3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.238.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a54146-9c81-43c8-867b-949698e4e883", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.220.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c91b0cf-5afc-47e9-870d-39ad57671709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.85.115.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fdb4a5-4374-4e33-a3bc-93acd73a2c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.92.16.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e011b8f-21fc-4faf-8eaf-6efecbdc5b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.57.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6453c4-bd72-44ab-abb1-46eefb347e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a82876-7d37-4e88-88cd-8d0b0dc304f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.185.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a74608e-babf-48ef-a493-bbdb5e9a396c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.31.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8edb350-9ac2-483f-9016-1d7c4ccec323", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddf4425-ed4b-4407-ac8b-96106c853f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3328214-5733-4a16-9c1b-125ab644796c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80323401-f8d7-47b2-afb0-1c6f3766ba58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c482c48d-c909-4efa-b40b-e00fba62d0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a579f32-37ac-4aac-9966-e54803fc18bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6e8628-357b-47a6-ae4b-56912c017c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad92eb7a-7b08-4abe-8c43-61a77afd1659", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01c98a0-60bf-4024-9e86-f956a0bf55cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.20.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2e896c-b4b2-4c93-ab90-94ef11e6d62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36675a00-b598-4c1d-a1b6-2905ecff6ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.46.230.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed7400d-7c0d-4fdf-9802-4eb99a8a65be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.10.24.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179c8723-ce7a-4b34-b7c4-9f4baa9c5bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.165.124.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f23a8e8-94ea-4cad-b078-58f64656bccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.101.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917448e3-3fab-4091-8115-5e2da9c1593f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01685546-a68d-4903-85a2-15504a9b0c77", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.235.88.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ea7e54-1745-46f0-9470-28a09b731c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.242.198.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd56d062-d3c2-4d11-8272-05b299d4c35b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.246.154.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921bd0c0-a2f2-4c07-840e-1cc3626d9417", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.247.86.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f8f650-d5c8-4a61-9d36-b6365829c052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd4ada2-c105-4d59-acb8-e0392a8f43c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dd83d6-ca3f-41c7-b7d9-56c59aa9cd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6162614-c5e1-4211-9778-b4b01cfb4fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.129.217.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78190d41-9acf-4041-bbe2-118fadb3db41", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bab477-7bba-4b20-8035-9739e1747f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.79.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a58335-1afc-4fac-96e7-33fcbbf37c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.17.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cb80f0-3952-4347-9245-6c4d792e8603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.153.106.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4317dddb-f18a-408e-a0cd-947fc8a174e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d25e727-7599-44b1-9191-3b9909fcafc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.235.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc4681e-b40e-4782-b8da-3243a1e1640f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1953723b-4376-4e82-9589-ccb7ddfa7f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492f2c37-e5b3-4ca8-9883-bed22e2e1d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1400e2-2876-4451-941b-144c7057f23a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.65.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11169ffc-f1d0-427d-bc35-c0b82a1b3eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bd7aee-0a85-4c46-9913-b6393005a48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cfbf85-387d-4539-a5fc-76acc64f178f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e43c552-e570-46ae-8124-fa374452a360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbb0a3b-6316-480b-b7ed-812573640856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.218.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de25737a-b66f-45dc-a7a3-397637034e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343367fd-0dc9-41e5-b6e5-2e727e0abd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.52.202.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b738010-54cb-4acf-aa69-e39e1d5f8e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f5ca37-1be8-4ceb-8b23-3fcddd139aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cdbbc1-9a47-4bd1-9fc1-0f2092a2292e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2939e88-88d9-475e-8e3a-e9a70b105dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ddec73-592f-4ed9-b171-6b7e76ff74da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac437192-7442-48a7-a977-d1ef298fbb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563be777-79f3-49c6-8820-4b81fdee9af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc65fe98-e03c-42ab-8302-ed11c2cff416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e88d630-fa57-48fb-942b-15914a2b6193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f590da-5d8b-4d1b-87b4-a4f556dd36c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214cbf75-54b7-437b-9633-6b58e8e9dff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bd43c3-1fe1-4b41-9a52-c85c0069aa07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c8eb19-5e78-4b02-892c-bda30e6e820c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfc8312-b06c-4f19-95b1-2d157393f12a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.96.49.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe346ca-ee0f-4ab3-ba41-422a633cc829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387743b7-08bd-4cb8-8961-c93f24a18cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136656d4-e17b-4be6-81f6-afbc6c5fea46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6866ef18-71a5-4089-bbcd-4b958e9bf419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.120.200.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43afd193-49b6-4f35-b4dd-5e8031efdace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.123.92.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d9e8ab-9d6b-4c1b-8401-5f1b93c4cc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.11.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1784ee-3689-41f0-8ffa-201e875cb44c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9361987-8512-4570-9277-b2cfe2162f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.104.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185930e3-61c1-45ad-b5cb-9dd3076e653a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.105.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e53e2-a033-4686-8358-42e6757014fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.106.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfc4db-1e5b-40fd-969d-798d95dcba00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc053a96-009f-43f8-bb7f-6623b157b7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f32f1b-b4c3-4743-8e2c-e33c2f63a249", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.117.171.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0899f6-dc7e-45fa-b228-fd83c799732c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.118.208.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00c68f8-4815-49fd-8d10-b266759d8471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.119.112.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae838187-0091-490d-9c93-78666f02941f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.121.241.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c361f223-affc-402e-b40b-2ccd42cf45c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.134.3.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5bcf4f-2350-443d-a2cf-dbd69cc01b07", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.46.197.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ab1cd6-99d0-4377-ad68-bf5a160f76ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.71.204.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83faefe5-40e6-4c9f-a6f8-b152c4374426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be3b60c-7353-4c6b-be8b-0a66ea74d369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.32.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d165ba-b955-4ac4-b257-70b71489585d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ac33e2-ce5b-4e27-a44d-53e82d2d5035", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.48.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336f2d85-1605-41d8-bb1a-f13b5a3904f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.225.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6f17d9-91e0-4b77-9d54-3609b80af627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b47ced-52df-4ba1-975a-cc461ada22d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09583e63-f0ad-4412-9169-3a902e623795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99bf341-5e89-4b23-a513-1e0716b58665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f1ae5a-6612-4ae5-ac2a-e6608a52af29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1b4133-fda1-4159-82af-f4876755036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f4ca65-d841-48b7-ac24-020198cea67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813ecc35-8f9a-442f-a9df-5987ac521d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500b648f-8dd5-4d42-8046-8f1c95034998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e02093c-e94b-45b5-bade-e3d7000a2a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79d1aea-fb8b-484e-9cef-eaab93045b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda1abf5-0b84-426c-aec9-9d7ad2374075", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31548d0c-9798-4f4c-9c44-1753335512c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389ae63f-6615-4b3a-9989-d949e34a7254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a5955b-94e0-40b6-9a54-498c448261c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482c3047-3821-4bcc-9920-82f9d89c6fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c4059f-8d0d-4882-b00d-707390f96996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fda520-ad50-4246-bc16-10c783a79cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61c0ab4-37b0-4364-b652-4d51b079a311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909847ac-f06e-44fa-b8fa-2dd8d720e5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407d0653-7d85-45de-a373-2ca968101444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832e0108-daf5-4128-bbb5-351d58b98026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16efd46d-9e10-409a-9deb-c56d7fb17cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.114.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611351c7-716b-4f08-b216-48bc2bd683b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.93.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4b7056-9df4-42a7-94ba-1cb07406494e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.182.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9472aa31-2b80-4faf-9442-6773f5cb8786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.154.246.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257759eb-a7aa-4585-b459-6796dc5c3251", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.172.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821d9c71-4746-46cc-83e0-5ae93c386388", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.205.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cae0a4d-5248-467a-834c-8762b543c814", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.174.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f8b587-a0b3-44a1-b23c-204ec4006835", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.147.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd21c392-f58b-4fed-84b4-517e5a63ecea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.165.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64846f5-1f4a-4e25-a7fb-01e6645b509e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.224.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590e6bf7-016d-4053-bbf4-58edefb27764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.231.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4b500d-01ea-4a8e-a72a-c83cb0c72bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.56.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0d1911-8459-4939-9875-e76b1b730784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.90.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ac2fb5-9d4d-4398-9c92-fec7a7bb311a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.107.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c520ecc9-f51d-47a5-8c66-935d9c5ac785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.108.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cda673-9113-4af1-8939-1ca6128de740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32668d87-954f-43e4-acb0-3a0aa7ca5433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.2.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b0511-c85e-4886-8bf5-4093829d30b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.61.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29fef66-efec-4f72-8ae1-202abce6f6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f08d1c-306d-4c11-9743-59f2d430930a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0023bc29-2892-44c9-88cf-02589cfe6f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5e9887-d9db-4502-aa67-4698e88ee81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.112.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948b9587-4ca9-4f2f-bae0-c424ad06434a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e0a10a-764f-4b46-bf79-6c947b970987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6819135-8065-4a89-a200-efe166ade4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c801eb8a-4276-4328-969c-6d1d95688d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087cfa0d-5b39-4e64-99bb-178c04fa42b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec5b2b2-3bdb-415f-bf73-403648ac3194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41067c07-e362-42fc-94a3-52967f0f125f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd5a693-5c58-4d65-9e3f-569f935f5c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e424a035-17c2-4697-863f-f25bc72d5c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ed9d42-286c-4765-921d-0ac1c5999cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb09479-710d-4a8e-bfc9-7bc059d3869d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f9be2b-ef72-45c9-a4a0-bf36ecfe5d06", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5594a73b-d933-4305-bd42-1f6117a9e6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0403b760-a57f-48fb-90f6-28de0970e85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd70f206-d749-4321-b96c-4c51727cca43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4292f38-751a-4b48-9ea5-15388b570833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720d8b56-6c89-4dce-8e9a-de236af58560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013f247c-18a3-4176-b89d-253a9c429e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508223a7-9295-43dc-b2d8-952627ae4c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b92e2f-0f84-434e-956e-7313d55f8cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0fdb1c-5e20-48e8-85a2-140d112db285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d19a4e7-0b2c-4c00-a0ca-fd0a8d0601ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067678b9-b0bb-487d-92e3-b10846ca9c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c34630-ef05-4991-bb25-00e84453ea73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079e522f-8b90-4d5e-b835-cf239d53fa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb5d2ec-6afc-48ef-be9c-1c5c740428c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6c8737-d11e-43b5-81b2-bbb97b9ff785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b165c1c0-0dcd-4a34-b6de-70bf49bc227f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ea7aab-aa1a-44fe-9609-4d02b6a5f950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da068cb-22cd-4986-8a29-931cebe24cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94d13a2-ded7-4298-9104-dd88f2fe8110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50db03a5-54fb-43ed-b45d-e8e0838c7bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4664e44-4a32-4ed5-9807-1c2d32c87d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a910df-ef8e-4036-8547-257b86abd1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2673a6-3b83-4147-a7ca-41a1e6edf529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b80484-2bc1-41fb-8abe-d818be866f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.193.25.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3ee6d6-d1f7-4251-8e48-f21b726b95fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.195.212.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6ab90c-2015-49cc-b2d9-ee53660e2bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.54.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4defad63-874f-4d14-beef-7e4dedbf091e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.78.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0af507-0b0d-4e85-be98-ad55b6efc9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.22.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cc0958-6cc7-4238-8794-ef291838550f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.42.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32277c56-3b00-42e8-9ffb-02ca702f7e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.166.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eba218-f53d-4b8b-bf4e-bb7f38f087c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.167.122.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b94fdda-91db-4dbd-8009-b8b30ba39da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74784de-844f-4214-bfd1-51c750698443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.18.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfa718e-aab9-45d3-be4c-806328dfd736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.3.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20346ee0-e927-4661-8eb6-928a22bd647f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02390557-abe5-49e8-87b4-32de58fca2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.41.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c97dfa-2b9d-4590-a4bb-b8dabc35b8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.45.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935d5d5f-184e-47f7-b0e0-3cbc195318ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.63.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50815e98-bac0-4da8-bcfb-fa78f7f19b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.94.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eabdebc-6ab6-4a28-bd42-fa9d77abc83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.175.54.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b838e76a-dc27-46d2-8b36-a2abe05fa769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.148.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c1c43-873a-45eb-863e-617e6a40b0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.202.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9277094d-e2ab-4e6f-b1e6-da8ec664a967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.210.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b5dab5-d932-44c3-bb9e-b3007a5fbb4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.231.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b2ce72-4e50-4a53-8e55-978536db85da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.202.171.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd8d86-e670-485d-9efa-aeb13a1c2d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.118.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56739370-9f01-446a-bcf2-adbf1fa03f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.125.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df02e197-df0b-4c1c-9a49-45cc82a5a3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.126.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8873f469-908f-4453-9e59-77f8d359d0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.173.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97b5a21-0b58-4471-b884-843a414b5523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.208.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fe780d-ad4c-4f41-a090-c6784da38e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.210.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e765e70f-1617-4dad-93e9-52601a425488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.68.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebcdc16-f652-46fb-b56b-8871eba76999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.73.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18325ed3-13d3-4ac1-9f81-893b7556a29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa2b237-3e9d-4393-a9c3-22c27de74de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad2255e-4075-4768-bf5c-f9487ab7ddec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.104.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21a8017-73e1-42aa-8279-3c9d7cfda160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.106.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95a81fb-38d3-4608-9a97-74dfd14e41ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d830c15-c0ef-439c-a0b7-c9d0d1dd04bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6564418f-8d10-439a-b98b-7ff34e5f80e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e3b12b-eba6-4a74-bc79-44b43d045c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93251fd0-1c27-4e64-90c5-2e5d8511b85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d2baa8-ae0f-4898-b3a8-4606745ba459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875b81b8-178d-46b4-a7bd-94a0b4c25d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85699a41-2c16-4b56-ad89-6e0537958685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd21d21-581a-4d32-9598-e7d054e69135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c591fab1-94ed-4f07-8b4d-a470fc6a1bee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e580c124-b546-4a37-81d2-6522e702244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff9d3fe-fd9c-43bf-b05b-7190b2ed027a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.131.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b331a-ab1e-42a8-a9cf-94ac81d87f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e3b453-427b-43e5-9ca7-829ba5b8f549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ead51f-49da-4631-b531-6463738985dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30552c96-2417-4ab7-a29f-5763c6b67acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c4f8a2-5b93-49eb-baf3-f368d18910ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b356ced3-ef2f-45c3-ad8b-046c304d275f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002b37dd-e476-401e-a639-4a5d5b106090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3181b4-ab39-4983-9f4f-3e84e4f959bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56b83ca-2455-4e2d-bd2b-d9440c255ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5944e29e-437c-41f1-b962-3759235df679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9926f0c5-4eda-4fb3-8032-396c97e65770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5c39e3-2f20-4471-b9e1-ea77459e57b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d278ff-8bb0-42a6-9626-db07f5529329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af2fec2-0678-47e2-8dc0-59b48b17b479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d927b771-7ae6-4f08-b101-2b9cdd402b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85c67ca-d533-4fb5-9acb-495a12620153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df70e39c-9168-45e0-ae8e-0f74b5c01c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef43abb-d5dc-47b5-b49c-8490bfba5789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0fee90-4779-4971-8e43-472a78d70fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f820714a-0702-4a33-8951-f96a2e103a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a222239f-da04-41f2-858c-9c0ef0f066ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaafbd7-4db0-49d1-8779-f07851088ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345832be-7ec9-4b50-9d04-d1dddd434a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da721cde-28ba-4bd4-a956-ac27001aa0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6191e719-d2ab-4a79-82d2-ae0c9d1d1b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f295c3-3815-40ec-97f6-1a98af791366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413f90e8-ce97-4220-a211-88df87ee1961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2e4c5f-4cee-4c86-98e0-b0c17b83773f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3470ef8-f36d-497c-9fa8-a48f787224f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29814587-17df-4f5e-9208-aa40e5e7a338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f478ff-7758-4796-b030-61d730bde0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465fbd06-1bc4-47de-a513-5da652f704a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38808d6-880c-40c6-9b48-d6bd26d1ef1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a5fa4-e7b7-4810-808d-8cddaf0b92c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6ad525-e04a-457f-93bc-471f80c05209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25339395-41f0-4618-b583-0732a4e96882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ebcc7-9ded-4a01-a343-51f45f8fac9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c25f129-34fc-46a9-82cc-e6d5ffa059b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954997a3-f1e7-440e-8328-67c596ae7475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a075354-3fca-4281-b969-d42eb93bd750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c9d6e3-27fc-4414-85fe-85e3ccffeccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e389d118-f4d6-4a2d-bd2c-fb16b5c1937c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dbb223-50bf-4071-9074-002013867018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ff04f2-8631-457e-a815-01f4ac427c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69840585-973f-4ec3-b952-d088329add26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe1bff9-3383-4b43-ba10-3251a4cd7ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0522456-0219-4b04-8a51-7c2b42d01e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccf2161-c8fc-4826-b993-bcc918c22e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b33cb1-12a0-4f86-be75-b30098b6cc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f48595-92e6-4095-8463-94827fcd5e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066cd434-8688-4328-866d-fc900cdb6196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d4ff81-b36c-4ff3-b056-015baf2e7b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32d2eba-90b3-469f-af8a-bb9c131da634", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda55aff-e3bd-4734-b27b-058dd1253a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0b1700-3b42-4f14-b36d-ce6c11e577a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bab2eab-86be-437e-943f-7e90fa0fce4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a56950-5518-4ba2-836c-0b996f4ee391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7010353-3533-4172-aecb-209be561eadf", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.71.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792b4be0-7679-41aa-b4a6-b9138a65c85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.117.212.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bb65d6-2707-4c40-9e8c-928014958c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.43.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f808655b-b85a-476d-a72d-4e3cc1e382c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.70.124.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10f8a35-7cec-46ca-9828-e3aa0b6e508f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.70.96.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e474094-fd89-4e50-8867-c2fa618b5863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b755e08-9c55-4108-801f-d7295c363954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.11.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255bd0bc-e45e-47f6-8852-17cd928e7b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d538898c-7f88-4250-86b4-4f28632538a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7533e8-4093-4b99-8a60-635dff25ebac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.127.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf9734b-a698-49b3-8970-b71bfdd6ee97", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faecbc44-eeba-4c3e-942e-02df9566eada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.140.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bce724-3301-4350-9e0c-12ab7b743bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.15.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99670095-836b-4290-a074-402f8d7d64bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.152.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39b9c96-d54c-440c-9311-6f7618c3119c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072132f6-3e82-4f20-a78b-356cc8f90765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.170.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aed469-399f-47fe-a809-48a7a11bc72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.172.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cea912d-7d4e-4f78-b09b-9f2c2679a555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.18.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c7362b-a062-419b-91ef-80fd9f070d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.181.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960af7f3-927c-4824-a7c5-03e633add405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.184.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4781689-5c84-414e-82d2-7e0fa536d6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.185.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f50695-cae6-456f-9afc-407b883e8d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409c3ba3-1d07-4292-a005-408ae54d4be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9907ef-4cce-4439-81ec-d2d06a5f2038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988d82e9-5020-4982-97ab-46fe7be4af92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.208.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d29e0c-7d3a-4798-bb10-39d3c52aa014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.227.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9f9ae3-bb7a-43a1-bd7c-e17559d8d474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.231.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1818261c-7202-425b-a929-e4c91e88795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c39e1b-165f-4556-9cbe-1a957e2827a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13621c1d-f2fd-4691-9941-e9affb51f98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f6809f-906b-4075-9e8f-c3ab27577240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.34.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0aaae9-f5f5-47c7-8f67-f4b4d84c16ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.51.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ba8b77-3248-4547-b383-b501abdd7a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.7.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283cd4b8-67df-4180-9e23-aa2e024829df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.78.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbff0cc-fa8e-4ba2-8365-bf37c8195235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.79.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d72ef6b-ad99-46cb-a975-b7bd4ae2f561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.83.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbb4fc4-d424-422c-9b7d-b86099bf044e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.88.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fad243c-a429-4474-afd8-637d1dbd1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.89.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bc7b4b-2227-4da2-981b-6a68b96ad312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e57b76-87c3-4dd8-a093-bcd5d94198b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.255.13.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d8100c-a4d3-491f-9521-b815abb46cba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.255.13.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7e0dd4-4032-4006-a881-870391439763", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.117.123.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59559b07-92f6-444a-81dd-cc17762726bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.117.43.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618c5cf6-b964-4dac-9d9d-cf3fa929582a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.135.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a17998-7a92-497a-aa73-b2947d4cf527", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.217.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95df475e-9c54-4d99-b0f9-c321bcb5a407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f8b616-9603-4d2f-99c1-31e7a3709cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15edec1-f8c6-46ed-931b-b149750728d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.161.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810fbac3-5734-4356-b7de-0ca1ffd7362e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.172.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc75d4d-1554-4da7-b5c5-494f54918591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.202.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63f23e8-421c-44a4-9bfd-49b20f83ecce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.205.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761193fc-87d6-4580-b61e-0d1fe6d3dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.39.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4210e7f-91fa-450f-bc2c-76c543552c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.83.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47efa546-6b48-4592-bdf8-1893d2c92030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.86.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a86a04e-d599-4081-b5e9-325df0a53807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2e87b6-716c-4083-870f-31d01326ccf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349c3768-4af9-4135-8642-5053233ce7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd9f75c-3579-4ff1-a880-d7fdb2cdd0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.59.208.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f934fa9-7ff6-41e8-8964-fc1738b43390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.143.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9639cd7-f51f-46be-93f6-5c53a671de8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4fd2fa-be79-48c1-923b-198608c99c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.164.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c249f991-c5f9-4162-a4d7-a01807db437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db57492f-7078-42b9-acc1-697c6211391f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.93.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29f427-5967-4f51-8360-bc780a0f2ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.196.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d610f9-bb7a-4a7c-8795-64e54b5b689e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eb914a-5fc2-4b91-858d-cf4412f4381a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.109.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440944d8-8882-4f44-b98f-6e2a805b05de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1930f208-828f-45b4-aafc-1650455bcd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8607a09d-122a-4bbb-9922-5fc7195cc00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6faa861-5480-4074-ae6b-dafea7caa695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0872feb-2a74-422d-8786-3ac32ca4296d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c1b19d-f66e-4615-852f-a050d8a0a3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008adca4-fd04-4bea-8a68-35244c0bbf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43166e-9581-4367-826b-3915d8446d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.88.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c4331-adf6-432a-b6a0-b5520ad66c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.206.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fe58cf-d815-4586-9202-f5436b916822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.147.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e3a1b3-166e-44c6-bf06-b439a48de7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a31df19-7dc7-454b-a3ed-0d096c284fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.199.191.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378341c0-4d8e-4b0b-9ccb-c01592fb5e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43d9288-dc80-47a0-a16f-f17b349162d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.137.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c97de1-f359-4dde-a5a0-32e3b34689d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.140.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f107ad-c631-476a-820b-c5194b21b666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.152.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f96619-cbef-4e2b-b712-8886eb93f112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.154.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b9e81f-e2c3-463b-a5aa-c98fb39832a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.163.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd876911-c259-41dd-b504-36fabb397bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.166.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be31bc11-bbe2-4d74-b796-5b152caf38d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bc8f23-6cb5-4915-ac72-70a19da71ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420d2854-1294-474f-8dd7-75ebb73e13c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.177.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ab68d3-3bc3-4fa1-9a6c-c629628ca97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.25.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1948de-1e67-4dc4-b758-4ae6133f1147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ff6707-69cd-45b6-af5b-3f95a054374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a9abc1-bf92-4ab7-9186-d246f62cfc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.64.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47128c3b-8b67-46f4-8eaa-fa4686e86fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.18.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a43446-0293-443d-aecb-e07b2f9f51a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.104.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574b222b-e9e0-4bc4-a488-0678ac1154cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.102.77.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d218c0fa-ed69-4f38-83b5-fec8eb5e042d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a13de2-11e2-440c-9d2f-be2646741764", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8dd549-f1da-40c9-95b3-2b94fade74e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e780f476-e663-4a6a-ae5d-8e8102545c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7142c960-d402-4969-be38-a39d3bbb7d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0b92e9-8904-496d-8d62-99856a4019ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192cb0dc-7a43-49bd-bd41-d53bc48e08ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f74623-1969-4fae-ade2-891043d6ce9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5204e13e-d698-4269-88c0-d0e7d09fbd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d24530d-c736-4e06-84f1-779636a0bbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.218.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51398057-a7c7-4291-af53-94c86c482c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.152.90.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf6a9b-2556-44fd-9599-e11b14e4f784", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.153.196.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad94a3b-8785-48c8-a094-40cfb2538340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.155.35.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a7aea2-d650-45ff-9be3-c5a04b3e53b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.161.32.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed382afd-e893-4dea-a583-06e3b26b6333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.158.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe56668b-0c7f-4264-ac2a-ff196c6e271c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.194.112.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc69e97b-8528-4815-93ff-7c4688fadc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.218.35.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d323079c-ef62-42aa-8c84-5b36146c082b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.89.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cadee18-8ffb-4dfe-8db7-0cd641923157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9703424-94ca-4dea-8750-69f273592ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.214.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a987260c-9909-4640-ac40-049ba9f96330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.33.48.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec07432f-39bb-40bf-9d5f-90096a5bea0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.196.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910a0ef2-df54-4dbc-a49b-c2019c297a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf43f00-d529-439c-8f33-aa13427b21df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.53.171.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41d4773-abda-44ed-8792-e0a09afde264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.63.198.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8657e8a-b9bc-49b5-88e5-8731015bf273", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.97.3.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdcb9a6-32cf-45fb-ad8c-c5dce6a44b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8e01ea-23e9-4b2f-826b-180e02028d62", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cef6fe5-db10-4318-8542-8803506273e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.76.94.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75eb9c20-8094-43df-a622-e200971f33fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.76.94.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b64c38-d9cc-44b0-bad5-7847222ce3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.76.94.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bedad92-58d8-462b-8682-bbd2bd5f30a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.8.37.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b72a2aa-be02-457b-8001-cc07774091af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943962cd-9500-45e7-aef8-f01edf09b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f1d2f6-f389-4b7c-b741-f723c7729d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.82.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423678db-88a0-4a9b-ac48-b085419e1699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.82.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d75261c-67b4-4f63-9694-e4cb4bad0289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabc48c6-58dc-4786-9a21-d5117aaa832c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f9213e-8b31-46cd-902e-d14179536e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebf253f-3adb-4807-a47d-ea9a5ebe3144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab3a280-aeb5-48b7-a05b-bd810d58bd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2fa8ec-b43d-4501-9d5a-a8cd73064821", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.132.253.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0530fb4-7aad-4b70-bcc4-cc695625c5e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.172.12.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1ff537-2f16-4f97-9d98-a55169b5300a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d28d0ad-54b4-4f97-a9be-04b4b392b98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b1ebf4-a3ff-45d7-b64f-1474699a8b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.112.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8273381-ccdd-4e14-8a2e-8591e822a090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.115.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ba475f-5516-4e9e-ad8b-e557a2703d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.117.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0466bf-1b02-4b26-8baa-80d07b144809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.117.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b0cccf-16f2-4864-a360-98daf7667230", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.140.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddc0e32-3939-4eb5-82c3-3a67e989da77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.15.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf6b517-b9cb-443c-9712-cf4f85ee6df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.159.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b9cd23-a57e-4218-b3a8-6790e05a10ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.172.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a34b1-8b2e-40db-af5f-17910dac8ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.197.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dce19e-4f95-472e-a9b6-7204a31b33ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.222.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87d52de-90a7-4054-996b-af54b8d6b445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f3e4e8-82f9-48bd-94ea-f57f3aa76622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.247.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77a997e-13bb-4afe-983a-a53d484f1127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.49.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c196e656-edb6-481f-89eb-7e41562a68e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.63.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8301d9f-8b52-4d3c-be4e-59dddaa7eb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.96.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3a7c49-63cc-49a9-8619-c12b517ef9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.149.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfe54c1-b7bb-483c-a25c-ec1d7e280b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.157.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7a08db-d729-44fe-bd2a-a9549bbfede1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.164.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c87cb2-bb26-42c8-a447-92cbb56fc10e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.178.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37965651-fed1-4a74-8122-a31709917636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eb6da5-312b-4f27-ba88-fe8f19223744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.208.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755d4113-d7df-4617-a496-4373f6bbcb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.208.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a495f193-10b6-472f-83ff-9d17906c06fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.228.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe1b591-7c2c-4da5-8fe6-246289732074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cc8d1c-2763-4c9a-92bb-9fcdfefba943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.101.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7e91a4-f9e1-47aa-a909-c92ab1a81913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.102.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a1fe01-9eb7-4a00-b304-231bc1301190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d2f33d-e2f8-4cc5-b6cb-fa620b5812ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.122.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c29f72-483a-45ed-8e81-932282460f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.131.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a053b83-0133-40ad-beb0-c2f5f2079ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.142.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e9e202-4db7-4d48-b8e3-23c3016906e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.148.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a2ac22-028d-47cc-b34c-09c38bd6b46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27343d3a-3f44-40e5-9d45-ddd7958b9fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.154.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf67288-32e1-48ae-b32b-fd7be1a7fa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.156.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5312004-decc-4f33-8e9c-7d86b0d02975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.169.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7febcfad-acc8-4389-83bd-dd1db004ed26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.174.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093ae24b-4183-4f93-8eda-5e5e51889ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.177.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7959bc-6f4e-4590-a2ff-073f74a0251d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.182.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f337bd8-61eb-443a-bf7d-a804a8b8380c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.187.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b5cf77-cd09-432e-9ab5-9f42a683f0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.203.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e67467-51e5-402d-a775-f1b6264f57c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1642e9a6-e2f8-4ac7-bbaa-51e2a096a429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.23.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec19ec1-4408-468f-89a2-6054210f71da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e913aa-210d-47c1-a8d5-e789c6f1fd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.41.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e561b0ab-8462-4ffa-9e2e-cc26af67290e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.44.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616adbff-4f6e-4cfa-80e4-441776997b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.53.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398fa14d-e6ff-4762-9d89-68ef815507b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.64.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c225327-bb77-4d9c-846b-2aa7c0aa9259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.131.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2606d869-c3c6-4087-834f-a34c712ed856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.149.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1ba4e8-917e-432e-93f8-69365413237e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.154.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8030f6-f5ba-4f4e-8d8d-ed19dc68b160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.166.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13de2114-b282-49fa-8f12-91d272b116c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.175.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fa097a-310f-4c03-9aa0-960bf75ef2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.175.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e46b9c4-d7c1-4567-bdf6-63322ec41062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.177.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90aa292c-ac98-4c7d-b209-3932a767b7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.179.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086fdb86-2323-449f-bc2a-9e1b2d52779d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.190.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f593f0e-64b3-4568-a3c1-7642e40eb19d", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.57.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346b70e2-172d-4016-8e08-eaf5aeb3e76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e65a495-6e94-4825-a266-db51b613db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe3d6ae-84d6-413d-b176-198e4890142f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d99eac-40e6-4381-b182-0545fc1a977d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bc1b5f-7850-44e1-83cb-3700070a8afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7424b7db-7a69-4727-b9f1-5b308b8136b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5ab434-53b2-417a-9187-10b838bc1ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51aac6b9-8d56-4c9a-a6ed-ddb4d58b4e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7113caa-be94-452a-b3e0-a911afe5a989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fbf809-ff93-417d-8764-88fe82a9aef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba89e27a-3c97-4d38-adce-956a1279eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274ca528-debe-4d9a-95ea-1b84d3c61c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3653d462-143f-45fc-b8df-673e0e39268d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837e939b-9544-41e3-8676-357cb9f902ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b62bced-f973-4a71-88d8-2d71743ce2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9705baef-5c85-4bb6-a4fd-1c02242dbb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7b29db-1161-4e96-bec6-53c99450050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928af24d-2481-42ba-a5f1-9d21b8f8bb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965bfa36-8931-435c-8df7-ff6f866c18f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cb19c0-6e82-4326-b514-eef7a8575d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71be4eb9-d329-4b9d-89fb-a7b782c8603e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.144.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc925bc-6124-4a66-8976-b4a375fbe19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48d4a5c-9744-48e3-bdc4-14c12c91c86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410dfb97-d8d6-4d79-bab3-d4a16971a262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a437ab88-7f3a-4ae6-bae2-00899ef694e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2ada9d-9ba9-49e0-931e-1b14c9a3c306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6553a7b-d7e5-4098-9eca-dbf6fbe26294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dbf2db-bdc6-4e46-8022-a425ac477ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.139.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6002ac-9759-435d-90e0-0646cc677f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.208.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc129e91-5b42-4869-ab1c-1c2351d15624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.212.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72960f4-e246-4e6d-88b4-937636bc0b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.215.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf58609-aeed-4dd6-a6e8-ce9851592c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.216.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df351004-d2cf-47c0-a693-fdfd3ef43d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.220.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c5e41f-d7f4-4e6b-90e2-e6cb300ddeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.223.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f910b82-05b5-43eb-bfd6-4dbab44ef151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.100.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1823108-b5ba-4711-ac69-0e6a3f26edb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8640f4-4cea-49b5-a908-1161add5d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.112.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2606e9-495c-4686-b266-7be6fcd479ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.117.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691f5a8b-3214-4f9e-9ede-1ac4effc37b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.117.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba054172-9e29-4346-8c89-cf0ff0a6b087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb524ede-d08a-4f41-8df9-e05e94e684fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88193c45-2c82-4e27-bf37-bb3bcc02a5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f153ad9-876b-48fb-842c-600d61ffb109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8155cb-76df-4154-8a79-40fc4dacda50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99613861-47b0-42f9-ad3c-fa1eec06e307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f25878f-7b19-4632-a2f3-3ed182e00bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1620d808-7455-4164-b1e4-5c6468b2b08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05e3d6c-44ce-42c6-8f16-a21756b49b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aafd8ae-0e28-4f13-95c5-5f767eac3716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd4cc5c-2813-4754-ac56-1820cd027073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35bc4c2-6485-4896-8580-cb1518db6e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ad7ab1-bb2b-4096-b5f8-f3c063191826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b5c53f-85a0-4609-acec-a66a80f5318a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da154a94-9ceb-4df2-8350-8020098ace10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9357ee-281d-4b6f-ac41-23f89c25202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f58074b-18ca-4c49-a6d8-1bfe603b1136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2701c0-3aac-4e9d-96b8-04b43f75f5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d9be53-16a3-46d8-aea8-91942859ffff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2d996b-397c-43f7-bff5-2c5be041d494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268b676f-49f1-4622-820d-511b46bd9688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6bfd79-93ff-4bb7-8333-abe6695f02f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d9186d-ec36-4e78-8ba3-90a9c5b2a024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a2446d-92e2-4d6a-89c8-7c70adc476f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37067721-cf1f-4e6a-986b-8518318a9321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9349a8d-35e4-4659-bc04-ffcc068b6d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e177ff53-2d89-4652-aa3f-805349c518df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c8cbc9-47fc-4730-80aa-107eaf0b5c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8b3ced-b370-4450-9f7b-3b3bdfed3189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f120db-a809-4fb1-8179-c0cf4f592172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c35b985-57ad-40fa-bed6-54756de93ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75895398-d213-4c05-ac36-44853647706a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c8fee8-384e-453e-b778-1c8be3a1b328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2106b4-c71d-439a-b96c-0b4bc5e40521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8af9fd1-4784-4595-bfc1-4e4aa9153736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7553cc50-c752-4d46-8777-615afc719530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2118113-fb85-4873-8a53-2e7eadb708e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c607f78d-6c37-4e6e-8c78-0bd82cb30425", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.220.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e953200c-3db9-4455-a40a-d69675d830cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.118.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fafb5cc-4a77-4820-8fae-d222a0309be1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.158.126.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff47bf8-bd1b-4bcb-b80a-28df59f99ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad56e44-1a9c-422a-868e-aad7dddc3806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6b2dc0-f3a4-4000-9632-be01cf4efde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.126.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55937c0c-e14f-4d11-af18-0664675bb059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.136.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5665537c-c59f-4ea2-ba0b-9e545dee4db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.141.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217014e5-7146-47cc-83cc-32838f540519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.144.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7556d99a-971f-4d57-9e4d-8b3b0cf6ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.144.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362763e8-81ab-4c16-8b4b-fa216b8bea5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.145.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c729a2cd-99f9-4c64-ae8f-5dabbf935da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.146.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044e11a3-be3f-4dd2-a411-1a89b023f448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.146.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1829605e-5525-43ec-9952-ad8e01dd2795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.146.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d46ba74-cde1-4706-8b34-eea08f263258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d00e6cf-0bde-43a9-9481-df33bf822299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcbe889-c01c-48d7-9119-e7c362b34871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aef85c-9c8c-41e9-b123-a4e04df212bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.163.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ceaa054-0051-474f-9410-489c621033a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.164.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b251121-b8a7-4ea5-b73c-f757acd4beee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.167.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69ed49f-e258-4567-abd5-1878d5d6917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.214.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df685b3-9040-41d3-9588-4bac75b095b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f784bcbd-0f9b-4f0a-9aea-e493f4d62c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.79.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b7b425-494f-4cec-a1ce-ae2986383722", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.255.74.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d39bda7-6c78-4f07-b3da-92b1e12741e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.194.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3935562f-8670-4749-8519-90564effb74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.247.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328c68e7-2ec3-4240-bf10-5bd177261fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.94.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef4e514-be98-4de3-be10-86a56bc49346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a12f324-fccd-483f-8ad7-88ca86b35065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fa0115-3e6e-4ab8-8f83-b3b07e003cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec599598-5a7e-4a3b-b726-35978fd0660d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfb9b72-7ea5-42f9-971b-a31ba6ae329d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ee984-7073-4cb1-bfd3-7f7afe87ff7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ae52f0-20d5-4f5e-a76e-90b1163ded0e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe5ffa2-3995-4e98-bf78-4dd30e38619b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b483c57d-09b1-4ea1-a016-9caa08dc9516", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.140.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4b87d-b6cd-4e79-8e1b-13c5e8409905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c491baf-0118-4bc0-b961-d66f3de69144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.158.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636e92c7-1aaf-4e14-9050-6cb10b3f485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.164.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5907c92-3eb0-43a2-b605-d0d8d6a110e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.170.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859d444e-222f-487a-af08-61d959b2d85d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.177.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88128c0-55c7-4547-858a-8fe30ea2f05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.180.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdf03fc-eb70-4b75-aa54-d18541db61f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.195.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d073fc7-2448-4544-a802-61dbb705e446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c4266d-86b6-4159-8966-9534cf063119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.198.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce881985-b6a4-4b25-848d-8a5baef25cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c566b4-0c08-41fd-8611-aada79a5cfe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6991a30b-bbc3-466c-a245-495bbd0cfa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.203.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a627623-23ae-44ed-9dee-c9a2680ccc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.209.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655702f9-78d2-4f4e-aeb6-b2734be5663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.213.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe18141-ea16-41ea-ae68-3cd71ed2a88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.223.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4da178-d357-4ae7-89a7-baa2945a2bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30392c0a-df5e-45e2-aff9-2c2744892afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.235.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3524d3f-e94b-444e-8bd3-ed4d1f8342e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.238.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a2368a-c7f2-444e-ba63-b6c1fb60e22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e763969-96a9-4144-b939-4b0e9eb7d568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.242.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c52f940-cb94-4257-85ce-5c9eef581998", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.242.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba18bbfd-96cf-43ee-add6-fbdacd3752c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4599609-6be0-4368-8be7-6a203b862dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85833065-83d2-4068-a377-d8aea8e402ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.252.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e83821-c56c-496c-a2a5-83deb01b0c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18712e2-fa9b-4fdb-908d-316e5ef5ae81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c0bc10-4012-422c-b4ba-f627255e0e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72eab6f-3b56-47c6-acfe-626a295811f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd527a39-b1d0-4aae-8f03-0e81ef7c960d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef593518-a0d1-4532-abdf-518bead363f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34a99df-35d7-4341-b4a1-ab951b29f21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd312fdc-0bdb-4150-bf1c-20c7e7a6e94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc77f47-4d79-4609-8ac5-fabde80a79fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ff8e13-56f7-482a-ac72-a1fe69395a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d3fe5d-516d-44e3-80a3-0564d047fb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42e6ae3-cb3b-459a-a771-6ea8c684b038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccbfaf1-ac4a-4e54-9109-89861bcc6680", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab590fd0-62ad-4b6e-9c58-9b73b346f98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b06deb-aba1-43e7-875e-d3a498717659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0983ab5b-8180-41be-b0ff-75461c80d46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e296a1-416c-495d-bd3a-8417a43efae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccd714f-dd84-4d1f-90f3-1c494bb6bac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00612e33-67fe-4087-b588-ef094d431ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbb6388-0be1-4cb8-b354-4c1e0edeb2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2752524c-32e5-4738-bcf9-8fa73fe0fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5fcf4a-2acb-4140-9181-66744cc75e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eec5e72-aa2c-4826-bdb7-3a2fc7c9931f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d825448-86ae-4f43-90f9-721591972065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b308005f-cfc4-4149-bb31-0235a77d277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c08a781-19a0-470d-ba05-67e05702d536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7811827d-d4b4-457d-befe-5178eca5f399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a22b2e-774a-4d5e-8c42-b0df1a660dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126b77ce-2979-48a8-9db0-3f45ed1eaa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4737ecca-67ff-4568-9233-818824a7ac79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a3d30e-b2b8-41f7-b38c-523b42bde909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e386ac1e-51f5-4222-87d3-2fe73a7687d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bfb6b4-43e1-4b5f-bb29-30ab72661bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92796a6-c1b7-4db5-b2de-51d280c54a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dd9733-8101-4430-92e9-5fda90247381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f79e725-22a5-460e-8f88-309bdadd3de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e13c280-e045-4ac1-8ccb-3578e69bb05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e9281f-0dec-4f1b-a356-890e2d8ef843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f25c21-a227-42f5-8931-4103fc598f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84d1ab8-896e-4446-9f1b-3e45955bc1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc651eb-d9ff-49e4-98fe-ba4cba71b2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f640103-1e83-4510-aec1-37754f0a83ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0ece02-0efb-4db3-a84c-76bd944d5f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2713ac47-8e71-4136-93b0-a001e746fe68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a113c5f4-5cb4-4754-8625-08de9ef27bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c4f73c-75b9-4452-91a6-267cffb000c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34868b3c-4129-40a7-83e0-25276507ec80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179c8c6e-f5c3-49d0-84d7-65311e0d9ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944f5c93-0a43-42b4-8d32-864b427011d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4264c9-c832-44f9-b4b1-b27c87acb2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa7d657-2934-4fad-945f-e4632c660bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce5d645-fab3-4d4e-bbac-a707874a6d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4673f3c-f0a3-4438-9403-5fb4ca28a596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fb98ad-34a1-452e-abfe-db29078186ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3603596-4852-4e1b-9303-971e2fc2e781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c713457d-ea8d-444c-8395-5e0948e458a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27633a4f-5b84-4020-8166-6744ff2b8553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38901e7-9bca-46aa-8d5b-3ac8038c8d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026d79db-8876-40b3-ab9a-d9e40c1ea0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15651332-dd08-449e-b170-00128e721fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36d56a2-d3da-490d-906b-6c2cfd4eaea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f302333c-5c7c-4657-9b5f-f32c9e7680df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e874d26d-7005-4875-a6a6-9f1c4478d029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08cf4c4-044b-4908-8dac-225409a715f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47113893-56db-43c0-8d7d-804156837192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3236ce5-bdc1-4079-bac3-53ed83b1d5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e1ab24-28f0-4943-9466-6beb6a6f9dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a74f09-8a58-4133-aa92-1c3eabb881d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc317825-add8-4c7e-af01-12337c976b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac63196-3d05-4b67-ada9-05aabff69d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5421b804-cdb1-48c1-887c-e6a844e3a0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615fb164-6d72-4122-a577-2b47afe238cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3585b9ac-fccc-4502-9001-260016c0185e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d7ded0-6607-4117-9d36-bc058f124e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc302864-d4ce-499b-871c-0c51c0627ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b073d14-43a9-4c4a-bcd4-cbfe42845541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f0b920-6c29-45b9-810f-3097a148dada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdeb5c34-3c2c-4373-a688-c37056c002f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa22eb3c-9111-49e6-b20b-6f2c44cae56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dcf296-a328-4db5-9b3e-21670f8678bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78853119-51e9-4b47-a9db-757c426de606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ca7b1b-36e7-4ce8-9552-4f64bbb9f500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c5b989-bc8f-461a-b58f-b6643c891c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe722a7-2fae-4bc9-b786-0510c91f4266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679f0bc0-50eb-4278-9545-c7afa1460ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaf8c34-6e44-4470-9541-40014b99a42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6196fd-aac0-432f-a31e-23db3cf0948d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5b8fe5-8e79-4345-8805-b46f70c5d913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b619ee-6045-4d4c-a915-6ad4647a7e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1c0042-147a-4aa8-a5dc-5b9fb372879a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f5d518-62e6-49f5-96ca-72145ec4f4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307c30cc-5185-4f4a-8eb9-a304d885a324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f48579d-a098-485a-a873-f6a4b6d834fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e8516a-179b-4aa9-a9ab-0fb6f3270cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ac3b8c-8c55-4a1a-bbf9-4a64a5da782e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50eb0b7c-1f8e-462c-b143-68f644b3d3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381df70a-7760-43b4-a720-7a0ee46bc35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3081fa4-2dc7-445d-a889-91bd19789701", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9371c478-5999-4b22-954c-c88e7d538854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7f2f37-eb6a-4651-a311-a0eca7dd9a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a97dc6-977d-430e-8a50-d5e0ec5eb3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8181c750-5b43-41ea-aec3-dbacf2ee942a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bec097-627a-4abe-9bdf-c10f47b357d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecbffac-d429-4d98-915c-841eb87e09dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2053e517-6fbd-4141-8d4a-a3d83cf57059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d93c242-fa9b-43ab-bd4d-dccd861899fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa167fe1-037f-4cd1-b0a8-594a0d6bad52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7e0877-8723-4160-8e9c-e52de3b47cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e074af4b-5e35-4c71-b749-7c307a78e9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cb6c5f-7678-427c-a5e6-5297c6245c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e936ccdf-1f16-406e-96ab-bcef06ca05ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc08a3a-3e7a-4b1c-92f7-57705e9c1e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b2ed54-072d-4632-ac85-477f75601d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed88f743-c840-497c-86a6-9c88c7f51a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6422e632-c130-4896-81ee-b59c5baa7471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce4a9e9-7171-4c5f-8309-b8333f10f9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e05478a-44ff-44e0-a5d6-5064b58447e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13d1e3d-c76c-46d4-a483-07917f7ad932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df3ce89-63e2-46dd-9eec-e0106b187916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ace897-42b3-4984-afc9-a2e437d10ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4e0f31-9c29-4d3a-ac65-b0039b7326bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac8acd0-f8b0-4e57-a53d-f9eaf0f67bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ed6737-3ecc-431e-8cad-fab8fbf27839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff99af8-9371-44b6-902e-ae27c17c1aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df4a71e-6d03-488d-ae37-486fbb17b471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc56d0f-c4f2-4dda-aaa6-2161502d5527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32d1ca1-afd6-4724-a79d-4a1e359efc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540c5f21-d243-42f0-b464-10a931b2110d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe7f4dc-bc5f-4b9b-ad55-0e538870df9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65142a05-b91d-4c73-b814-2106e6d06a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f731d39-c12b-41c2-a035-25b1f0687f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1422879a-34d9-4e18-b334-55729a8ca6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c8c8f6-6a18-47a4-b541-22eefbadab50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2258d8-c4af-49b5-95f1-d1fa6e50458a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635904f3-ede0-45f5-94c0-46bdf40aaec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ec8ebd-abdd-4e4e-acd1-bd750edb9d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3985ee-f82a-4a51-8521-06d01b0c48e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefe2f58-f85c-42d1-88e2-0506726e7d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1468001f-0a40-4a18-bff3-74ec8a3d4d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7be9b5d-5f84-449f-9fb5-1e111c6ae9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd1b16c-6b31-4a26-ae59-b5c1263a98d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674b758f-f655-4dff-9c5f-afca4fca50b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac29df7-cec7-44d7-b26f-c6be26abbf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55e12cc-c269-4a1f-9bc7-99d624056787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3ab956-b629-438f-a6c5-c9dddbdb0c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd2330b-591c-4016-97d6-ff86ed15d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1684c45-70cf-4202-8857-08e9b140d2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af27df3-c401-46af-8393-ca8ab92aadd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93200c0c-267b-4db4-a703-405c0507e0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894967a3-c151-4609-8b7c-af49b5abd915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4a15a2-0cbd-4e40-ab4e-070f92009798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b68b30-e259-468e-88a3-50c97a13f09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d2220-8c3f-4385-9d8b-8ca06a699533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188df277-725c-448c-bb54-a707aed4d272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3ff66b-0344-4e5c-8e4d-56e117825cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e4fa31-5f5f-46c5-96e6-dc6272ccbf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e1f7b9-beb8-40dd-99eb-df487a66b843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3442f8-04ff-4bfc-bf10-597d0cd442be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2744043-4af6-4758-bccf-8956ae812268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e92100-4d16-410d-97fc-892104261483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ca6b7f-1d09-4414-9e9c-467ed10059fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971df401-444c-414e-8cff-28ee56f76e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cb4ffb-c8b1-46f1-8083-b47a9db93287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8f5620-b249-4cc6-b681-a3085d9a7e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730c845e-3036-492d-8f90-5f43a4e8a825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7043c4c8-eb00-416c-adb1-38176a67cc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4064dd65-a978-4913-a534-6414486e967a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92b879d-3d79-46c0-b26b-5200472818d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b077a812-71e8-4c17-82df-513f09817c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d6a74b-66b0-4a00-a25d-4ae77de39943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb80bda-74ed-4591-8709-a0c2f4245202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9cfb0e-3f96-411b-b7c7-7a9110ba27c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c2cbb1-f33a-4c40-bead-3e5e5efa3249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab1de58-9d35-4586-9641-22ce4debd438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fc9f51-e9b3-4076-91f8-b1c2c1ad7c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941a1190-6495-4cd3-98e7-a088cb11805d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2044291f-a475-4a53-b303-91501e9b640f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b3011a-a56b-4277-aec7-9bdf4a5e1bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb68e46-bf76-45c4-9c74-7bc329ec607b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7573b36f-864f-4a9b-8a17-7e768af59f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9f7e00-b837-4987-b7a4-e89763168ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50859a7-7d05-440d-b3c3-5f57711abe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e9c4e0-c2b5-41c2-b6a3-2e9386d20af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15813ddf-c1aa-45a9-ba57-1cfa0738b90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c5e9f3-3487-40ac-aabe-da279f9e6637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc44340-1237-4712-bac8-436463a86bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b76d82e-224f-4b74-aec2-bace25ebd5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2106b3-3ead-475d-b815-479e37e61219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7da4e9-efc4-4dfa-a9d2-cba57df08fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86186e7c-01da-4cfb-80dd-5700bffdde76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26463208-ba1c-4373-b3d6-dc56952e79af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9a9e44-32fd-4341-9cfa-9d42bf3f6ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ce7db8-8048-42d1-826b-39c7eff0dedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38069b57-ecfa-4afd-ba06-8c28722eaacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb3ed8-c109-4a7e-a141-2dbec4df7ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223a17c8-7964-43c7-b0b4-3700aebc17d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cb61d7-822d-4f95-ab0c-43804d564c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b08db-229b-4dce-9731-9014d68e7f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23ca983-4050-4fb8-9b8e-c49f2c4f8ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5bcdf3-793f-49cb-aa19-14a4ab5af847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da170cb-10b6-4bfc-977c-4777f90da199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abd4491-f672-4ff1-8815-65ece80f7b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cabdf64-baff-4202-b16d-ed3e0e686d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494818df-cd44-4da9-b1dd-ee6bf7a39467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a74ee69-a24c-47fc-855f-bfb12aa0d19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2758119-3dd6-4c1c-894b-2956f5b7d46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf504b9b-82bb-4f73-a4e4-e86ce31d8747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d459b7-3824-4f71-924e-00198aaed129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5aea82-090c-4eeb-a0e9-081e72877c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170a0043-38ef-44cf-adc9-636d3a315a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9602f62-27fc-4a0a-8bfc-d8e0a9af2578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec28645-bea0-4a6f-a06a-92d432c98588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08eaa29-2a0a-4284-9c97-4806dec14a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324228e6-fe5c-4b90-afc2-8fd068bf8d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00d081d-62ad-4909-afbd-821ef3d64552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b094faac-4da5-43af-8437-7f7e6a0570a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73064877-9a26-40c6-bf5c-d80f67def973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c084f46-7bb1-4140-9669-87633e85cef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5f7baa-6fec-4153-89c8-aba1f19109a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78b95fb-a408-42fc-8cea-81dd56b4dbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce1bd85-1833-4f90-ba2a-b1fcc87828c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c7d98c-6471-437f-9287-3e1dd81ba536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5483abc0-a4f2-4a38-9371-07793f3a9dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2830930a-afed-4e9f-93d7-3dbf71e91da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4d5427-c7d7-4980-b3e0-659ca49f78d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeef855-0748-470d-a511-4deed0f53481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc9737-889a-4cff-9b36-23f8fcb05bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c74fd6-a09f-47a9-8b24-266b14b552a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329d6902-424f-4001-b68b-889572419828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc63a63-ae42-4f7b-9f7c-7a0adc467d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f372cc2-2a1d-4d31-b3a1-d8a146c002b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6c2a02-36df-47b3-8320-9d61328c9ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0701f1-b028-460d-be37-bf983184bef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acb3d53-f7ab-45fd-87a6-066f237022fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e0909-3f97-487b-b4a9-aaafe66230ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d9de3a-583c-4524-83df-618dbd7d4fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ff9a37-7f94-4497-a3da-d372e001d99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7133ffe5-a38c-423d-85f9-bb584502b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed6004a-4aaf-4803-a827-1fcecfdafa16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b96ea-8d8d-4953-8ca0-118bdba3bc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a18e10d-190a-48ea-9e14-cf9317d81e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37878db5-fac5-4942-9ce5-bc9d9099a021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d298351-9c36-48d1-9da2-4b6ffd33fba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdf1eb7-1e4f-4da0-834c-f8753e2a3d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97266ff1-b55c-426b-910c-c6b99d0c95a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f236a9-876a-42f9-a273-e9dbdf477a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5aa01b-5b9f-4f98-aad9-000f5b8dfa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f9781a-8cd2-4ebc-893f-6e7be827bd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39e7a07-ab0c-497d-a93f-634463f74541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb434f5-64fa-435b-abbd-8881c090a13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f808b4-a975-4f67-a58e-5f68ff70be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a7b4d2-67d8-4821-a2e9-42d8ece793e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b92fc-e9cb-4e77-84b3-be241d28fca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec1f9da-981d-46d1-813e-f38c3f17ec51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458788f9-93d2-42ee-9042-6d5b97032a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac323da-464f-4d61-a51c-794e38e79045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910d21cd-f441-4e2f-9a24-94585733a24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb257a1-2c20-4916-9ac5-33e0d8dc0fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823cf4ea-0cea-46f2-850d-3f416b26caf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fee89d5-6bb0-4550-962b-5de10da27bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142eb4a7-6a1a-4d67-9ded-6e7a95d5938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da81605b-3e61-463b-941b-e714ec4cad4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712c1852-6d46-492a-a950-dd2dfbb24b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a89491-3f95-4b6e-8dfc-35ae4f57093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2579d47-0c77-433a-8ee6-8223448062ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2d2325-8a44-4ce5-856e-81e0fdafa1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448fe2c3-0adb-4418-91ab-41c3d793c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d5cb13-c85f-40ee-b756-e70377bff629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c438cbc7-4c05-476a-b972-4792cd981af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe2664-8676-4fa0-ac51-68bc5085d56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1ca45f-249c-4b6b-b96f-bee029eac834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9bd22c-945a-49c5-bed6-5d62ed8519d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb5fe1-7cb3-4ae0-a030-32a69328459e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9fb632-baea-43bf-b7cd-dc749e86f1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363cf273-be51-4424-9aa5-3b21b80c8ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d1a570-8b1f-49f2-835d-e0e1651f77b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3ffb20-6129-448a-8e1e-3fba63c727ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4141fc19-88f6-4dd0-bec3-11b520ff9a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61496359-1546-47b3-b8e3-bde409e90ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ad48bd-bdbb-4e73-b579-d927ce2e2c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e054e6-b2e2-469a-96a0-72bbb4983729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bcf8ff-46f2-4666-b825-25d2eecec43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5a0223-27e8-4b0d-9985-e92676a4bb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dbd8c6-be5b-41c3-92be-42e5aac049ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637b4dc5-fc39-4660-84f1-845381763b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50132546-3e40-4f6e-a718-a5fa20b265e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868247c2-4169-4074-a334-631aa7060811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab90a0fe-d0f8-42b2-88e4-1cc61ad59575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fc5048-89eb-4497-867c-15a01a87b986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a81708-0e18-4f26-b67b-0d1521a32cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159085cf-8a72-4722-8fde-f5d8aaa01455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01933ca5-7b55-4550-b1ed-141b2a161594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34359a50-f92b-4b82-a1f4-28022b39ae5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d469c613-ca87-4414-86a3-ece173e67e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbd083f-623e-4c26-961e-0518f9914ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d1ab12-c8d8-4c18-9d7f-d15c54bfeb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b48479-6abd-4e82-b462-a3e4c74fc7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b0ca2e-c0e3-4bac-97d4-8d0ef507007a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dec0a40-471d-4d88-965e-000f587b6e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41240d9c-a69b-4bb3-9c1b-c4865057fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d267eb3-a736-4bfe-b748-43e4b478c45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a099bcb0-dd6e-4eea-b53f-298f9c00409a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1155995-6fac-4245-9ffc-431e62a444ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7160a6-0862-47b8-8611-76830d2c0c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c052ae2-7552-42a5-823c-1497454fe6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d05baea-7981-4880-975f-3792695646aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e417f0-0870-48ec-a479-ce16f3a0d9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12bb432-d623-43b5-8e89-fcbaeeb1de79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da61f9be-57a9-4343-939d-417f59cfae5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c972405a-d092-4c30-a725-b08581d07aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61954d3-abb7-4ef8-b4e8-20f64138cf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de5a511-bc30-49ed-941a-88523db29332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a6df71-e94e-4c31-a8f6-9a63a2b73b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6b74ee-3bdf-4a03-ac62-d013b8af69f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe476bdf-ff8b-4e38-be5c-2d7c0ce7a447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ecc2f-2c9e-42b9-9a2f-731cb7cf4059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee156f66-7221-4479-959f-2fbe7adfcf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2aa04-1849-4b00-b0ab-618b4a2496b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc73f65-b8f7-476e-bf68-802fb31df222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0af8003-82d5-4b5b-8863-dcf339488966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ea83e-48d9-49ca-bfc4-e5730507560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c340d327-2ab1-4473-b110-e72501a24dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9a455d-38a7-4589-9957-ca69253ece56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f094d2a3-108f-4c1f-a143-68bde112ab56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e33672-9d9f-478f-acaa-fb551780285b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de4605d-e3f6-4a34-8e43-55b7210ef401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7af4ff-d39b-4ed4-bbc8-370b8b782a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf76c6-e556-4526-86d1-3f4b877d2808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3c79cb-09a0-4269-a190-ec95638139c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7afacb6-b2d0-4fbe-8dd1-4d858f0490ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55070022-b83a-4609-80ab-b97d55f31bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9893cbb-21f4-46e4-b8bf-6be80034f396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe8e296-00b8-4fde-920a-326bfb6db29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918358bd-6248-47c0-904c-96eeb8ecddf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f42d42-5987-458e-87b6-7554e1ef9d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d0f1a5-53e9-41cc-803d-d8c7f6b60c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a3b038-9c88-4736-8374-50f0aba47a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61219e8-2949-402e-9d8d-5333e45dbd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9961231-2a54-49a8-8589-4c58c89fdf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb8ea65-2ec9-4ebe-83ce-3620e06fa75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196a020e-37b0-405f-893b-77a7778122d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c14d7e-ce4f-4d42-bd23-1559bc6d2388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f2efd1-1945-42df-a117-31def8001a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ff1143-3d03-44bd-a916-574bf66846f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b63ad1-f1f6-45b0-a59b-bfcd3dcfc131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8b6aac-546f-4830-936c-dd4878e15d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9b8bcd-d8a1-4972-95c2-6e227a05672e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f196f77-8f6a-4aac-89e1-509dd7a5e412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cd2c52-cbf6-47e6-a222-1b8ca390571c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce64de4a-357d-400f-a569-c69f555e7414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf0f277-662d-417b-8ea7-f1296018f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ad9ab3-9eec-4f96-9360-70b521d5bf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a01616c-aac6-432b-b95d-0799d04821e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65eed406-e9c6-4fea-83d0-d3032a702de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cde24a-172e-4076-8247-c49ddb98b9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62adc30-13d6-4e20-bbc3-3cf6aea341ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b671bb09-d342-4397-a7e7-4ecccaacb650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d7b485-b145-41e8-855e-f5733cadb722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1c79e4-8de4-4cf1-ad12-33f0ed67e4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f11695-8734-4f0c-9ea5-06275567e32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3781427e-2520-44c2-9fd3-063ac932b4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11dac01-40d0-4228-9de7-e0957dd32870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35998386-8976-438b-8ee7-68d6d06f609d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2ab69a-340e-4f46-a1cf-127e0563651e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2984090-dafd-4772-8402-b351bd3fdf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f509672c-f904-49e2-9aaf-55d0cb8f63e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a844e6-65ad-4ed1-8a22-068b8f0a3e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e11c3d-7a79-4f59-9eca-73e73f2aef1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3688fd-722d-4ee0-9366-ae9228acbea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48705b13-795e-459c-b658-72ba6fe63ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097fb962-7a31-4fd1-a4ee-6421cf1aed14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec055ea1-1284-4fbd-b3b9-a589d0fab138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11db84c-8449-44e6-8d16-867ac242f277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e304374e-82ca-421b-af5a-22d8d4240d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7f3cbb-02b6-43d7-be23-f8164dbc1e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e997ffe-8668-453b-bcd2-8120bcd9221e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f3bcc-625b-4426-9900-e64a230b00e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a71bae5-e0b7-4bbb-9966-6f7bfb5df76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c6971b-c518-4569-8102-c97875d07167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b7d5e5-9703-4432-b649-72d61fcd0f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1d3875-a84c-45a1-a536-191c84c7e50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c4eac1-fc7f-462b-9e9b-0551e89d0f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ca37fb-8856-4830-b3c3-53593ae7fdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba044583-991e-453e-8fb4-324414637779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331d125e-0b95-4987-82f1-68021389c42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a26537e-3254-4feb-a69a-79f78ab52660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3202b775-d0bc-4328-a8a6-4a914cda7955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6c669b-9ff1-4fdc-91a7-d842e2e98ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec229844-8587-4a59-a607-f722549835e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70817fb4-e3ce-4e1d-af55-d5f1224c003e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceed9b14-9eea-4cbd-b6db-f4ffbe51da7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82940a9e-75a4-41a5-9aea-c02b236f71ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43673cc2-2960-4d24-a922-2b19e0353d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42b5a08-dddf-43b2-8912-d7630d4a97d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4de9ed-f375-40be-8c63-c659f1294007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbd51de-439c-4e3f-8e27-c4cd45f0f272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8813a875-306f-4a84-9f97-79ce60cacdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b12257c-4fd1-4aff-aaf3-a38ba03f43be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4b8fc-d4b8-46ca-814f-4e5ab4602a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f85ea72-1a07-410d-b68c-b7dbd0c69eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df5a07f-c9ed-43bb-bd41-3de7a7668d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e9ffe7-9314-4367-adb1-28427dcc66df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb3be58-5d16-426c-b502-8b1966196f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a59bdcc-7f9f-4ec5-867a-9d3d1d28589d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3889a2e0-7154-4afc-b911-56a3f86e43c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf1dcc1-ea70-476b-806a-835732460979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67162563-454b-43bc-97a9-273ea56b3bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c872969-fe73-45f0-b0e9-db5fddeedf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90445957-bc51-4c30-8613-3f2cc26ab021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bd70d9-d416-45c1-affd-93f61159c35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66349690-d690-4f79-a1e8-ca79c6434987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f29a45-328c-42a8-bb6f-0ee33c7664c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2ef2ca-5c16-4841-86ba-71d734eb939b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b733b3a-90c5-4d7f-9d8c-a96947cacd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff06dd8-772a-44ad-98f8-a08cd0814c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.227.103.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83d72e3-fcd1-4fa2-bc45-0708b0812d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.253.35.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff2e151-f608-405f-a645-ec77f5462781", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.13.96.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb60125e-f9fb-4463-9f07-e5d50337d403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.210.79.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654734bc-54b6-4b6c-bef2-ff7d63db35e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.48.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35eae65c-f8df-4486-b15c-53045116ec4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.129.8.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28859c1e-0406-45ed-a7c7-15bfce7c8d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5569b694-1498-4e5c-b2a5-0788d987d396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23012e9-48b9-489a-8032-684ef9e5cff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dd585f-0d07-4f62-9bdf-fc8331ee6dc5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.5.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed639b2b-a7a2-40a7-ad4d-beceb3669000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc3c12-f021-4765-934f-5947993f03ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bf6aa5-aeca-46fa-ae0b-29047ed4dea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a110f86-66a1-4356-9add-147da0a16cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3517b0f1-41a1-41c0-bdd5-7df6504623a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9dcf03-5025-4a71-9001-da1a4eb86937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a6cede-b857-473a-9ac3-6c7542802621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855f43f6-070f-4c4b-9634-7d97010f8c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bed2625-d1e5-4b31-9296-e1b7207b9d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d130da-6b70-4e79-bbb4-7ba33eadd2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fbdc95-3de2-42d5-b2ee-e89a5fd236d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f6e70-0729-4f68-8eb1-493cccd55f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d25abb-eaa8-4b5e-9ac3-e7dd155ad6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bba1ba-5a88-4e25-bbc9-4442d9f97cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ef940c-36d0-4699-ad06-fcc4e4c258fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2e82b7-e918-4589-bfe9-f0a206686f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef75d73e-8558-4aeb-ada6-914fb1115347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56941fb-2d94-466a-a30a-0485e9ccc78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad7dff0-ba42-494d-8023-3dc1abc81084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8dbb1e-d0aa-4fab-8208-1c13044d8680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda589c5-e29f-4b24-a690-7c38399734b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df689c89-8778-4034-b2a7-dbdf689ab75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a277e187-8780-4f78-98f4-2c148a8c6ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1153ef5e-1b73-469d-b6de-4ff92f45e808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbbaea5-0146-4b0a-9619-3421ca1d9590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d9a067-3e2a-4944-b5ae-527244a11ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a377e3a6-d0e1-4a36-a08a-fef41234b19f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.10.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783c5169-3bb9-4f11-aa7c-9ad6c5946a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.230.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a3e1d0-097f-4bd3-b940-3bdc98f78d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.254.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d02d843-7f44-4a80-9dcc-c1edab53e01e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca93158-3db8-4598-8cab-1d59d1ced16b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0d4023-dc2e-431e-ac4a-db1942dc9980", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.141.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bf19b2-e8df-4a3e-b959-853a8f2f569d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.20.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68742e4-3532-4666-9035-4de420a1360e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.66.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040b01d9-c8b9-4788-8298-26acca0a0f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.94.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76cfead-9593-422d-a822-3fafb3d2e74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.234.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562cc853-92f7-4db7-a897-d3218de1c463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9ad878-f147-40c9-8056-9df9dadae917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7c74ef-171f-4f7f-b78a-0e405a5b076a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0ffaa7-4756-49c9-8ba0-704666f23deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b606be6-0a50-467a-a66a-350c9dccb7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fff5c3-30b5-46f5-ada2-3026cdb008b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdc6e93-975c-4148-9656-f138147a3afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb8867f-efb3-4d58-a6fc-13765d09f9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f22c17-c2a3-446c-978f-1eab0eb2843a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.252.85.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36a1eea-a109-460b-aaf4-c452f910da28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ecb478-1e0d-4877-87ff-b5328430c942", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.200.205.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a982eefb-8389-4aeb-a054-5c6a38ce9b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b108b3ea-c395-42bb-b768-17c6e26a1d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d51a51-c3a7-4a06-935b-6fe691837e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20098f3-5b12-407e-8ae8-3fd8f3dda153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1472566-7f23-4a54-ab45-a6877a75a792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c53538e-a6f9-4ae7-af1f-e48f5335505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e3f6bc-9f11-40b8-adf2-a0752442f60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446d5c41-d833-44ad-b7c9-3896bde6f28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06471dd4-47b3-4cbc-b143-9ad4ae468325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bcd499-dfc1-4755-9ee1-fadf4114cd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a03ad5e-6238-4acc-8fab-0b40dbd9f561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4c5e7e-d79d-43b8-9d56-15084578801a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf92f69-c8ba-4cf6-aa1a-c79e91d5afb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc919a3-9508-47d6-9ca8-a6200eeca1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398ae6d5-1460-4765-815e-d4d3110dfe47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ded5e0-acdf-4f3c-aadd-9db785206f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f191df1f-7b6b-49a4-81ef-cc4870450959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba09058-befc-4c27-8bf5-4280e8a04eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3758db65-06a3-4521-b081-ec119daa6ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10386527-d07c-4126-8435-e303a2c234be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093b4739-9d09-499e-bec4-a38bb1646a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795cba58-09c3-4fff-b385-0780c0da1fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c372d268-dccf-4aec-bd94-56a0d2471cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba51602-04ae-47a4-af7f-c9fc33540132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b890a76b-bf2f-46ee-8b5d-1aa8adf6ce90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fb9226-bf1f-4343-9519-03af5d421925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efd0b32-0b82-4ac8-8f7e-05e4e95101ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfca665-200d-40f6-a972-aa618aa8e79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cba084e-4566-4d29-b183-cf9b8aac1ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1f4445-c3e0-4459-a422-7f207163d615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d86399e-55e0-44d7-8616-3e255e95729f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eccd0a1-90d4-4b15-bcca-53eb2f15fb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2d314f-b791-4091-ad5f-614deed75b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af4364a-0450-4c7e-aa01-e4e129ae91b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48e5a4f-460c-4634-b478-078ad6ddfd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9561cbf1-18bf-4166-8cd5-6a9650233533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be53f64-d951-4e92-9dd6-049db0b591ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df8ff38-d11f-449e-95af-4115974924be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0115ae2-ff59-437d-91d0-cbf76deef18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c52afd0-1faa-409e-a649-ddefe22f8b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8535d24-51a9-4d87-a68c-7cca381bfa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c35ddad-5ef5-4d79-bcdf-62445d1475f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb50eb7d-5915-438b-9024-d90f44c873a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405c81c1-d685-4767-9b89-a80d7d6da445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e83d27-b48c-4b26-81ff-d2a94a1736a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708c04fd-ea3f-4d64-aea1-edbe2c8082f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aa9e85-2509-4380-9c4d-dadcd12a42d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7baecc7-7f0a-4127-89b5-409739a95b66", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4946a88e-0300-45fb-9d4c-3f348f185445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7207b677-fc11-4ed7-a33f-56d31fa8c712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7a264d-03df-4b12-a4ed-398d408bf7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c530621-73ee-4ac3-a56c-f92da7d952c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38adb368-724a-4023-9572-28301f292a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58985814-2650-43eb-83d1-f90d22a49613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320f5e8f-d719-4e8b-914f-b3b7b1199f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1695c226-7088-44ae-8480-89587cd34f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784b903e-35e7-4dfc-9bd2-afa5c67bccc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c9af45-9f28-46ce-a1f2-800680fd3dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b986fe0-aa91-4e12-b5c0-9bf459ca2513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a276b6-6f93-4800-b7cc-f9706383944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dff743-a2a2-406e-82d0-85b56db6b6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43243222-72ca-4692-b062-7b0c33103754", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abb4044-8a48-4d73-9308-9d5c6a4935e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69473849-3ffc-4e63-b69b-a396234f1bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b498cfe-b4f5-4f97-a24d-6dabcd24ce0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.176.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2de819-da8c-450b-bc59-3c61831adfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a2eaf0-af48-4570-87db-1bdd96474535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57bf737-49bd-4e6b-9687-1b53e1c96b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85561686-8b49-45ee-b68c-21bb71b57353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e8e620-093c-46e5-9d0a-b28f63e35ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30dc8ac-eb43-4b50-9a62-bcae0b7e4d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd154cf-4b03-4feb-b048-e5f4688d9094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da25fb7d-4a21-4b0d-8bf6-52e5303181c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed6d64d-2360-45ec-bb25-fe0e4453e2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dedeb77-91bd-498a-bc5a-e4382e7b0bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4c8fdd-e897-4c49-b742-9e51f8db1877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdd8fa5-0549-4914-b94f-530c34dce66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd81ed1b-feb6-403c-8806-5b020ea33713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f8fcf8-7e7f-48b2-8274-14ffc67e0973", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fe2a1d-637c-48e4-a3d7-493a218e3441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00861a1-367a-455a-bab6-8033583400d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432fe988-a93e-4d20-b7bd-e76833257911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70887304-995a-4907-806f-b3391de2a2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6832a80-dbbe-43bd-917b-eda3aa092cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3f046f-e325-49d0-8e3c-854a787644d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08cd64c-a825-41cd-ae95-00a4194f953d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b34f9b-d6f6-4a4f-8e06-88c7f3a31e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0b35e7-a515-4e58-b110-397346bb7cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d0feb3-70e9-4350-a621-d29526942940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccb9c9d-dfa6-443f-8a2b-f8349ab99381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e827701c-878d-42bc-aec8-03c1751a6a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9de8e3-f620-4355-a588-4772e9d12ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab9e9ef-7b88-4136-a28b-86a615f06dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6614d40a-4d66-43c3-b6de-fdce0d5a7253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea825ae9-1160-4c30-9b77-9a10bfc1f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c58e7c-e95c-4db2-b376-fcf7928bdda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2763d563-e7d9-4f98-a3c4-944f3e4c5295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b4a8d1-6af1-4427-8b44-f968a0430e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.204.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b21d001-fc1f-42b1-a93d-5c73630b3ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0cb95b-b568-4e6b-a9ab-bdc3028867c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8bcee6-3c27-4c29-8018-988dbf95c577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e16446-0f0d-4781-a87f-4713a45af9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfbbe60-9af9-4b3e-a479-e9749d169c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937bdc30-debe-42e1-8075-8eec1cf9bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b20fec-4542-4bd4-acfc-1a16a6ec495a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890cbd98-74be-4e1c-b256-a28c062fa86d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df1ad7c-3231-4458-baaa-7efc441cb44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b52ce89-f133-434a-8d07-346fb73abdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9d6c34-ae51-4dcd-9290-f0975b40f8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe583d75-1073-4187-a608-980d788fbc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47be18b9-28f2-417a-8c59-6f2138286009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637d52ae-c11f-4f25-bbee-68f1e9703e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b8dc2b-ba5b-4634-a142-74a515552601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc774b7-2ff3-464d-bfeb-f30870a2a5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952d8a98-71c7-4f3d-b36d-bd9a1d724fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d543486-fb1f-4cf7-8d62-77ca0e5f74a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69702d3d-f81f-461e-95a3-bfffc9d3396d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b69936-54f6-477b-a8dc-04182acf09c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c65a79f-8f7d-480c-8aea-d080de4df073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844e5f59-db84-4784-b26f-e132094d6095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a044b2-8d7a-473c-9def-66ea2ba62fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e36028d-fcd2-411a-9c4f-3d2ca8d38ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd07d2d-c69d-47e8-9486-84e0e680634a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30b134c-fb30-4074-abc8-f14f886387cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a5e20-7fba-40f5-942f-fc5d728a7add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf41b4a-43e8-4a84-a874-3db90a2c2b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bd6a97-bbb9-4270-a6bb-48a7db6c110d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caaf122-6d61-490e-b2e5-5c2a76212217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a80104-facf-4350-8f00-6e6978aaefad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04e8013-6a81-4f22-a389-2d683d90d519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acbd8bc-1e8f-4b28-83fa-797eed05fa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bab628-f0ed-4d51-9408-bb7242b0d03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a4bd84-a76f-49c0-84c3-f4937cada540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0477ba4-4b4b-45b4-9ad1-399104855ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70446fee-cc89-48b8-b299-78272aeef42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cce11cc-d05f-4ed5-be8c-67bf21f5e3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5695b87c-b616-440d-9594-d587347db025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5b06e-0b47-43fd-8047-fbdd4b19a39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29161617-0d20-431c-aea5-045f2810ff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f2b237-5e16-469d-b5a9-12e97faa7952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16741a34-2ad9-4f0c-b89d-927c5f4b33b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73ef452-7c67-425f-a755-1a8fd1f74dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b5646c-28fd-4c75-b7f6-87565dec3e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d1a464-51f6-4b49-9b39-0a8844a7d508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9294d5c3-ebec-4540-9d7e-5309afee6c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a879e5f6-3643-477b-bf6a-64ebe3716f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4eb8cf-b353-4aaa-bcb6-dd65715f6130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a4e730-f5d8-4933-8b4e-ac3623cfdde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14a999e-c7ce-4eac-b5d3-ccb6b0fee7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a67e1de-b014-4e5c-81f4-43fe5fbe8eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2892b66d-08ac-4461-b475-38b1a666ed99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4748d82-64f3-44da-b0c7-ff0f28eccb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeae6cec-7e01-4e70-8924-c368a79e961d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e59026-676d-4acd-91d5-00fc1ff83ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a145380f-af13-45b3-bb69-46f4ecc905b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cfeb3f-25f0-4f5c-8a63-b17c33c8d988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4dcba3-9a7e-4ad2-8655-f9f29deaeeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f23db75-70bd-4031-b191-e2e00d2e1e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec630f7a-75be-4d00-a2fe-c2501ca2027a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7007765f-15b4-4d67-9967-39ac963a589c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17a816c-6a94-47a8-a398-b59b16123c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85de8f0-6cb0-4c5f-bf95-7a4e86f2ce0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82430e57-5e53-4f79-8d52-ca00cc8b8303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71c8071-2f97-4db2-a5d3-50324d602b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b211834b-7750-404c-8a1f-f8fe3019505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14aeb44a-880d-40d9-8a0b-77e0b39de79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd07384a-b77e-41c7-9b6d-2115d399bafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574f25c5-4a4d-4e5e-8db1-18d2e5313ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161dcacd-f7d7-457d-ae9c-dd7cb69eb9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6150db72-65bb-46ea-a950-f74eb350aaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0af7dd-adf0-40cf-a230-6989a82b931a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c873cc-1e0a-4552-bf5e-b14c69e2d23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cc0e9d-f312-4fac-975a-517975d3ae7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.254.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7456b349-f7b9-46dc-a019-ac9538685240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.170.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c95b6d0-b5c9-42af-ba1a-a01395a8bc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.218.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec8b8d5-8f58-4b28-ad34-80f1c65b5a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae96bf67-2561-4f99-90d1-ddbdd8533ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.186.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cabdcf-2321-4fc4-a294-0e8ba7c7e1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df0fe07-a861-48c4-b823-93352b55b94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.208.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f2e170-113b-4e3f-98a8-8fd88f821139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e29f08-e8c5-4bf5-a41a-b402a2e1c79a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.79.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c3a25f-e6c1-486a-b154-532dd4ce5c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.1.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da51919-e5dd-4a59-ac5d-3557d9bf106c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.14.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe77260-4d8c-4577-bc20-0057fa6fe8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.50.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2827a1f6-4d00-4a55-b802-e35adc554d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.203.76.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92189cbe-2b5f-4c5e-a61c-23983aca3b93", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.66.103.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8419ba-ff75-44a8-950b-12ffc80362ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.99.92.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364655d4-5122-4255-ab6f-7f76ca889b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdd49e5-5c25-4945-a835-e90d9f0ccef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.29.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69bb9ff-05eb-4df7-b068-bcf829d82d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.120.235.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a22add0-2aea-4585-be36-01416d08b61f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.95.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00996980-559f-43ea-b5ee-dc41ba6586d4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.22.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a5fe8c-48b7-4d67-b204-9e4f49d34f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9617c32a-4b11-4bee-b478-057bcab7aa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb209b3-34ed-445c-ab2b-44e2a8ac2d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b925c03-d747-4d05-bdef-294479f82186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fded740d-73da-4748-9349-8b50028f39fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d569ec29-0005-4a02-b661-c190f02d0d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3dd8a7-14d2-442f-b731-ea2798004bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661f5583-a4d0-40eb-876e-1556e3875f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.123.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7092613-68f6-4369-98d5-f2b3ce689b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.20.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325a788d-d2da-4381-aff3-356337c26e31", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.26.133.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7550fce4-752c-441b-967b-4bd6cfb8d334", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.27.133.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d548be-9b13-4af3-80f7-316ffa143414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c74e71-9f1a-4627-886f-8f815b4120bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250be33-48d1-443a-8c43-f75f753a1627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f020a65f-1539-497e-bf1b-9fb9a84f5dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbbeed4-4f6b-425e-9c8d-f129eae4aaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a5ac65-e9f9-4ee1-917c-647b67b0bcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69add143-8d7a-4ffc-b132-5340c341419e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd108eb-f332-40f3-b728-7432e85e980d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca222403-465e-4d21-814c-189150519b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e454be2-f83b-4a17-bc46-ee4cb03c781f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8802f7f0-739c-4ef4-8dec-89cbadce2d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0cfb64-cbd3-4f15-9aac-63205cb83d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83263ae3-af9e-41f9-b26d-346f72356097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69681673-e210-42b4-a2c1-f50e2c00dc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af78405-ddac-40b7-aee5-ce02358d92dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0bed9f-5998-4195-b178-ce2ded03b811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.120.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe64917-7832-4775-9662-a2da91a9e536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a69feb-f998-48b8-9589-ff8aef6e3a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04559bc9-835e-4ad0-b3e1-8de8d107728a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a15dbf7-3bfe-4f4f-8015-5a4d42bbad2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cec58b-19cb-43e9-8c43-4ab6f22cd427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eac2130-3cc8-4923-8863-cdabfb649b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70b2b0c-8b20-4f2d-9020-db42c51ef682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de12b1de-cd34-42d7-a890-3ac0674d332a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216d063d-ca38-4c80-a874-48208a5195a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df1dfc7-811a-411c-8fd0-cb69f86d6fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510e0cb6-6fb0-4588-af40-53157176e3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.5.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6f52e2-f153-490e-8c5d-52593c408cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6588705d-f109-498f-8da0-be5bf6344b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bc5b7c-761b-4653-8cbc-681f98fccfad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.182.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e6acf9-569f-4fd5-84ae-a26b9021d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0518771-ca9e-43ea-a23d-cc44fde25d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.53.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ea4a37-8b2d-47f3-852a-4cf86c407b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.58.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649b272d-31ad-4c17-8f6a-6c89b32e946d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5bfd4b-f270-4da4-8ab4-e2054fd40182", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.165.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73272f86-e750-4bee-8758-868da692466c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.176.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71131a7d-99fe-41f6-a1d2-e41b4246619d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.186.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a796d624-a3a8-465b-99f8-d14a50207bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.222.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01bffab-48db-4678-bce3-613b4905ae53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.232.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b77ca4b-91ff-4411-af9d-b2c505a67928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.239.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1586646e-d4e7-40df-8c7c-6db13329661c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.242.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a744b5bb-cb47-48f5-92a2-1eb3874925ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.3.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fb5eb9-73e8-4c41-92f9-1ede40fdf7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.38.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fa0953-c6e1-4dd4-b7d6-96b0cb0b1cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4884d240-8207-4f52-bb52-085ef92ec29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.59.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e0f541-dbf0-4a95-ae67-948c0622272d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c118c6a-23c9-410b-a405-dd6a9b6714d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.88.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5497ffe-78f8-483d-ad33-6d7baef9e0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.89.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e26721a-4d6d-44c5-9bf9-1b06e94d074f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.92.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8459950-e9e0-4905-9b7e-17cba5349e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.113.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1f5756-14f6-4962-b570-ed313c40e67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.125.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb7e0e6-5706-49a8-9966-519f0ec265ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.147.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949f096f-a313-4193-aefc-d7ff28bfe21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.167.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9e128d-47fe-44d7-b92a-ef02f08b6144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7c4a00-a904-4c99-b7b1-2ca062a818fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.239.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d53f43-09ed-4090-92f6-95a59a98aed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.252.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d22fda-e585-4fac-93ef-c98d3da1b41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.41.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1e1601-18f7-4c27-8d63-7b7916b6dbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.87.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771a8c33-e92d-4944-9ac6-bc7d46f79feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.91.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec908e9-8f62-411f-a38b-9a8e23658089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.92.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9afa7f-28ba-4697-aedc-d960e8304f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.93.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17192722-ab0b-465a-8120-0b6d5712b928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43197b4f-a286-46b3-8a1d-2da896e46085", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.48.103.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2991005e-b4da-4730-a90a-8ac49589454d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.49.228.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847f7f8e-ce5f-40a1-9be1-7363f0fcb6da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.158.38.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629f9265-e555-4c7d-8b32-84dd82d1c460", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.174.210.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cc53f6-7ae2-43c2-9cd7-0e78f92040ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a561d4-ea59-499a-a43a-5ec47d94eb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07144b0-a395-433d-927f-dc000f81eb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.51.78.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0967ea9d-99ee-4d40-ac7a-af163ba5fa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64584b6-cfbc-4e58-a7e5-406558654b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3cef21-6b06-4e9c-ab07-1c58a384a3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577b6a89-5d4a-4282-84b3-047e022de89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4eab3bf-4bb7-4e69-ac9b-c91febb364b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.156.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea61bcf8-78c0-4435-887a-eb9ce4599a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.102.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b4a137-e3d0-471c-b664-1d8061e4cd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.15.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33649b5b-f43a-4c3e-aa90-1221fbb8a1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.168.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4cb20e-88b6-43ff-b0b3-be2ef7e0d75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.187.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a314f5-bc4d-4824-887d-fabc28f536f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.27.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0382e7-18fb-4f1d-958a-005340b0491e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5548b193-c693-4f71-8e91-2fbb9c8de85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.110.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fd922b-f7e5-436b-a1f8-ab766c3183ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.134.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa75df1-c07f-497e-8fac-f89209480a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.138.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206e51c6-ff3c-4a48-ac54-30fb5e726cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.140.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638999cf-8a5e-41b5-9135-470c305a722e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.140.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c888496-e55d-4c33-9ad2-699b13bf606f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.148.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b9d031-90f9-4b94-9494-4f8f882358d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.167.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5d96bb-915f-43f6-b155-a2be5d0c934e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.173.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89245778-efa9-4753-98f2-6f2f60fc1ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.182.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7638274-8667-4e88-933f-332ccc863c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.186.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648c9fe7-4395-48a3-91d7-8218590eafa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.187.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007d607e-2b87-43b0-9527-3d9c2f0e7029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.191.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c129c59f-5fee-4e2f-aa64-d929b502ecb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.193.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa9b89f-91d8-4c0f-8ae8-4942bcf782eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.195.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ff23a5-5d92-4272-beac-de0b68490ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.213.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0772c341-13ba-45df-8fbf-26d762f87c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c952c8d4-74ee-45c8-b9ab-3c5cd4d3ef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.218.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d01b5a-0dff-4a8f-be4c-5fe2d597708b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.221.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34e61cb-f4b1-4a61-b67d-6b6824e7d869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.98.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471ef2b7-6c14-4fc8-a1d8-d09f19e967e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.143.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb7e954-c043-4e33-8fc4-9a461f7ff8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.148.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f5e1dc-c79c-4aa2-aa16-85cfd93dff97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.155.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55f5893-9087-40b6-9e19-da6d3575de26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.17.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fbc2f1-81a1-4d2a-85a6-c311d2c0e479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.184.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1fb395-cb9a-484c-b7eb-1e28d6a32a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.196.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7e8228-b5b2-4622-9d06-55700a2b7da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.199.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c84649-5f41-41dd-9057-37ca6e9c3b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.216.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3048b1d-38e3-4bf1-bd4c-03bbf78f60b3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08b8573-ba8d-4930-870c-3a9c407e827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fc68cc-4a8c-43d5-8d9a-d816944881ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.250.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4ccbbc-46f4-4ffd-9bd6-b60dd20e58a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.40.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37251260-683c-4a26-9af2-18507f0043c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.47.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90c0227-9ed0-47c3-920d-51a50b3c37cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.88.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e328ef8a-72fe-4173-8011-67c10ff884f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.90.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e529c31-1054-4538-9066-5ca6ebb90c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23d6e56-6af3-4336-aed2-228cb92b5e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.114.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc0035f-d514-4e1a-ae15-4e98915cf551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.115.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204aa675-918c-4eee-a187-8f11196a3c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c620245f-d338-4032-8ce7-21123ef3e5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.152.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989ee0fa-a907-47b7-b8de-c72ec8a3c745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.173.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02f93df-8f7c-4a87-b424-4b5e6e381ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.19.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8f1380-57d0-4130-bdbd-4ebee4f98c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.35.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0776f6e3-c713-419a-bfb0-d6273826c406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26523c1-cfed-40d2-ad1d-33e89349eea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197daf7f-8358-4995-8db7-fb86989e0688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84bccd0-14a9-4d2a-a8b1-e8820f6097f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda5b0e5-a201-4f2b-8a45-689926ea8a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf602d6-f093-45b5-8541-4f79805eb492", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c41869-25db-4c30-8a5f-01efcaaa7467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3442d41-52ec-4b5d-9608-f72ec19ada5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa0719c-7ee7-47ae-9878-a08a49cdcce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be15d577-ce17-45e8-9ed1-88c1e155fce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6ac4ab-4dab-40e6-bacc-bca8782abca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.153.245.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196a610d-4fa9-49ce-bad0-523512575a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.21.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3e7616-72dd-4e6c-8c3b-93caacca06a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb469937-0993-498d-aaa5-bd43eab159c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.14.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fefc3c-b5c1-4287-8088-9d6925deefea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.14.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ad119c-1b96-45db-bf09-9d46247d39c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.14.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad2c096-c622-4bc4-8596-2f8c99a83e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.108.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243f0d16-bac3-4d3a-9fc0-9e3506f11a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.111.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94c2b23-7eb7-416e-9994-c5ad334cf8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.119.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b1acd-07ba-4af8-9e17-5f97920f339f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.125.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab2a1df-a7e3-4ffc-9db6-8f77462315dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.162.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3a3017-ee18-4af2-9cbd-cf9c74fc0f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbadccd-245a-42ff-9083-767a9958763e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.179.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e40160-7567-4007-b6d3-9f3f5cd5677f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc265b27-e48f-42a1-bde3-c9816649109a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.198.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4651a20-7e59-4bba-ac7e-42f2e4e7e88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.210.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99db74b-a249-438d-85a5-59b41696da8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.228.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1770587e-2cb1-44e3-a175-0cdd4aeb134e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.229.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0699ab7-cf55-4057-9c5f-2bdd922f7eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.229.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d8cda5-5d68-4873-8979-6b481437adf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.23.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf170f27-db72-4829-b9d5-c5d03421338a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.230.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef5acfb-325d-4cda-92b2-a7112c7ae31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.3.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97158036-2258-4435-aadf-a7a2fba12c63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.34.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae2305-22a3-4128-a3cf-23bd8c3ba56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.48.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c1d33d-6d0a-4602-85a1-10a41a828efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.59.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9913a201-b7bf-4569-bad3-e2d75095d093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.7.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eb30b8-e91e-4b03-8a03-6f0775221c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.70.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.76.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4f742f8-53a9-48f4-bc7a-2c8af79e9c6d", "relationship_type": "indicates", "source_ref": "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "target_ref": "attack-pattern--36e30756-e384-41f7-a2ca-9f8b14b80402", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--205f2a04-af69-495c-99de-16cd4a68db72", "relationship_type": "indicates", "source_ref": "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "target_ref": "vulnerability--bfeebea1-c16b-45fb-849e-8c477676da6d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1f26d22-3710-4165-984a-b11165da9b0b", "relationship_type": "indicates", "source_ref": "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "target_ref": "vulnerability--7bf0f1a8-1d80-453f-a615-3408394ce317", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2a999b-095f-4152-a294-13f333a9921c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.128.160.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee0f5cf-c6b3-405c-97b4-4e57236a762c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.109.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f488a89-b12f-496e-820e-215ad98f1ec0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028f1c28-c3cd-4a53-a9b5-36a032f9ac89", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '162.141.167.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f867d535-f2db-4a28-946c-39bb4c0462d3", "relationship_type": "indicates", "source_ref": "indicator--028f1c28-c3cd-4a53-a9b5-36a032f9ac89", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677b1a09-585c-4f41-a6fc-7c30208f94e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335c8791-8b7a-4025-98be-6fca858e9887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14193c4-f146-48ff-9e0d-120ef200852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fe87f9-fb6d-4b33-addd-2ad8b9d8e045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bb6bd5-7ffe-48e3-9891-9d9a70f55e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ba04a9-6708-44d1-be8b-0ef309a3ed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59dfbc6-2314-4266-9847-2b3b0377ac7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87df6e9-d2d6-4207-9499-9ca286e85d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510e54fb-0f42-4167-bf9c-a89977657e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095d5ddf-cddf-407d-8b5f-7acc5cbd9d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e34eb1d-a6b2-4008-b7e1-ec85f661c4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056bf5a5-7326-4ede-9047-49fbde101adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bdf392-3db7-4a7e-a87c-d94b00d47b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d798c6-9488-467b-b691-1d7a907db114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f218cf11-6e43-4cc4-94f9-1569fe4be713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043065bd-49fa-4554-be03-af7e802da134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9508d53e-7aa1-4ecd-8937-3ba57fe1a817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3d0f2d-4b43-4f52-b287-1fb7f4057f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb85f9f-7b23-4db3-a58a-2ea508b702b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61202404-1166-4cc2-93a2-c6c4ffa40d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e28fb9-4bd1-436c-a16a-eaf06176200d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70348e5f-e17d-4b9f-91f3-702cc66baae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe91b0a-5dbb-4756-a85e-316bcc159dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef153a0-cdd8-4f93-a40c-4b7cee6d8863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a01e2f-f09d-439d-a902-c7767e048f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32727a03-e011-484a-92fd-b287998e6c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d1ff4a-74cd-4c7f-9bb1-1bc2a5e851f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0176ac43-b90d-429b-811a-ab20bb24b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a070679-0369-4086-80ab-6d6ea9f0bfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85d1e2d-af7e-4580-b4d9-61c7c7db59c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6735df35-0500-4cd0-bc30-6248f7b61c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b764a417-dfa5-4249-aef2-326b3ba188a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aeff04d-ae47-461f-80c6-7bedb1b2512b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034b9d70-ba91-4810-80ed-06aaaebb05c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6df944-504c-4c99-8043-5bbf21c81ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902867d0-af1a-4588-a794-afe7b4b9f061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7c458a-ee0c-400c-989e-23b609a8a779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fcf03f-fc29-4c16-be13-2358fdb70d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b067bc77-4aaf-455d-823e-bb54b4933c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bd2809-9ea1-4809-8caa-f42a2c7c157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfc6f4e-1ac5-4478-8334-9671b4f64b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6901762-236c-4f7f-a318-a66626d86f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fe4184-df2a-4de5-babc-fa2c06d1c3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7d2131-55a5-412b-995c-a556c3a87ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f4d2fc-68a2-493f-b7ae-541fd8ad48c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb32b2c8-fce2-4c8a-8f7e-24d406cf7d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a59259-f01e-4595-bc66-a3e03a7ece8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262f2911-ef0d-4b5a-96f2-bb56f592ba00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f79a1f-b8fa-470e-8757-a17959f12cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5650e5e6-063f-44cd-a283-0b2a2af60d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2b4cd4-bca1-46c1-932a-a1753b45c70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601d454b-1c32-4f55-932b-7c98217d101d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d450fe-a4fd-41be-83ac-b0f6f43e12fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c5249-749b-4647-8255-5ee90dbe0b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be8855a-8962-459a-9c2a-0451d83306b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec50c8e6-24f3-4c56-ad5d-2eb87ec95f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658c3c8d-25bd-4381-96fb-b5023cb23649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874c3c41-abd5-48fa-8f87-89ff53089b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98faf70-cb15-425e-9c02-414f7b35db77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a7b29-6101-4449-a942-ea29f8b414b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b122837-5fd6-4a5f-884b-0426c09093ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d54cee-ea54-4ff8-a0be-f91c4f90d296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df69690-473e-4eac-9355-ee6dd38dd867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b4f23c-766a-40ee-adc1-2a28cba30beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3111c5-0ef5-4487-b1cf-ee9d35978472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852bfc75-deb5-4c7a-bfff-3f4471920678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebff560-dd00-4020-8eb6-fc2e5b764a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5c9d14-7dc3-404d-ac16-f2bc2b4df273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b171bdd-b341-4138-88ba-2e483f180a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a61b3f-3b3e-45fb-aae3-aa5f4277f314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0babf8fd-e021-475b-8c14-665aa819acfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d942d77-b90f-4f26-9426-de8c63015547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43618122-3d80-445b-8665-e8d5b6ef04ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b8055f-d4a6-43bf-b985-33d552ccc8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ae2d78-f893-45e8-bd09-a40056057e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c2b37e-a8a2-40a7-ae9a-c041401ce4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037edeb1-1b56-4db2-80e8-da40666a057c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6ffb4d-a575-4a4c-9a3d-be30065cea5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079a07a3-c024-4df3-a05c-89b0f65d5de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5436f0-2b94-4f95-97ff-a878fc2a7b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba5a48-18cc-4a3c-af21-11d8e8b3e303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cabfc40-3c19-4e32-9620-55807a97ac6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d36aa4c-b2ec-4e0a-b90f-b4ea15843a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90487530-1a6a-4929-9fc9-980633100d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c017ee90-b51e-4b8a-bfb1-211afd0e0814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4a4aa6-2949-4562-b5fc-db195597799d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b698c6-e22c-4727-a882-d651a09808d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3b1582-540a-4e03-a1ca-ed60ed361326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b855b6-06c9-4cde-8d9b-819c4f7c7ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128929db-b329-4e17-af64-7e94754250d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05573d5b-163e-416c-8253-76755bae080c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a27cbb8-64c2-49af-8a25-3de1af3796fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f974850c-3f7c-49e6-ae09-92665dd22d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594643be-615d-42dd-98ab-d86a3df8d21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32226ee-f826-4241-8502-bd201464cff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3966cc4c-dad9-4ee5-b3e3-c791040264f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc551a-e6c6-4ad1-902c-a995a36afaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9644448-e961-4c93-a5e9-d422f2975b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993386df-79a8-4f67-9dca-1bd61e11d66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5995a4-ac45-4329-a003-a6fc05076e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ef6769-1df9-41f8-ab86-2729570daced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f075c27e-5996-44e6-aae5-a836e2019b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a0929a-2685-4fc0-b60d-5a4da03200d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee6d76c-0a15-474e-b982-b1837686827e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f92ca5-67c2-4433-b412-4716d48a3769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c041cf5e-4417-4144-bb17-bc0353e1daef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2783ac-5f2d-4b24-9d14-fa803cb52a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cc55eb-63fa-4779-bb4a-f204941b69f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f159f4-5874-465f-9956-b7a4143f62dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c1c238-46cd-41cc-948f-feb76c790ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41714ba7-ba29-4435-99c7-3db853ebb380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5a7b2e-61b5-4056-998d-5bca7a8fc495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bea7fc-6a42-4142-8188-85bf937812a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0950d7a5-76f7-4110-b348-08ebe73c7617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5ad652-7e00-4f19-9327-5563453307a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddf683a-32be-427b-90ac-0c15f0a2ee40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10e7d21-07c6-4fc4-9abd-7961483c28b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c882bf5-ee41-4fb6-af9f-8c858edba211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa28c12-6841-4e1d-a21b-ac4f1b342368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8b1ea6-e329-49eb-986a-700d4646285a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ecea42-b8dc-4e1f-bf8c-a4449f2c5cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cd258f-e67c-4328-8a1a-25510fdf999e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5c99ad-b4ee-41ab-bf43-245bbafbbd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41438a90-1026-4ac4-be56-dec253fdbe81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6752015-d171-4fb5-9d5d-d89379492e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d700eb1a-dc6d-4086-8b19-21eef3518199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a9cc39-f7cc-4efa-8a32-a3c4282bc12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51634f1-dc72-4ee7-bc52-c6fb363dd69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fdd83e-2014-49c6-a6ff-7340dbaca10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc248229-9e53-4864-b99d-da9d80dedfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4fabbc-4707-48c9-9f9d-f8aa057fd050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b98f74-f58f-4048-83d7-e7bba99d6197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9d73ee-f525-409d-b562-a941f2fd0d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917b11db-62b8-4a1e-bb4f-837d91108b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5add9b49-3c17-4133-85c8-b4733cf4b825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d87d49-47da-41aa-a0e7-6e9ff94fbe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebab0fc-d5c8-46c8-81f9-236e075bb4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eb6461-a49d-41f0-87e4-cab8dc19ce9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aa609d-d565-45e4-af93-a14faa76ba89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f695fc56-8480-4056-b98e-593465be778c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcd88b2-4c06-4017-8dd9-5aa9583ecf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4374b07-4213-4424-b050-422d84f518a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ecda99-57ff-4d72-8049-42cb29caf7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f696a-a3f4-4c12-990e-39785f90084b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62da06f-ca2d-44e0-ad25-9ee9e2be473b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615417fa-2af0-4041-8b95-514148ab0f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75e5fb1-8124-45a9-ae9a-1a8c3a38648c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645132ae-5473-415d-ba72-6e7401c3fb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e2dd23-8cb1-43d1-9165-afa3d5323202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b65572-bfec-4b50-8aaf-289176e7833c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c89118-ae46-49fb-ac4a-ef0d539bef3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1fa8f3-00ec-4630-a295-c40dfdaab01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddba4377-a6e2-4808-8b78-b495945f421a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9edd47-3ae3-464c-bfaa-ef7c71706a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237ac03b-875c-46ed-951a-d7e88b831fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d90b5a-7f08-4530-b046-57122a27dee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c44a51c-1680-416c-bddc-0425512f99e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a8a842-1686-43c5-a8db-d15abb772053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9c92c6-0aff-4e67-a62a-c279f3ffc012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9391c6-0d19-45dd-a3bd-82f1e6d96377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00139d9-f49c-4323-80b7-62363b04ec0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cae7cb-67f2-4cbf-9e57-b758a9819f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cbc14a-2da0-4e14-91df-f90da58f15dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977fc2f9-6498-4dd5-9043-07c635ae1004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd1a600-bb35-479e-b3c1-ed41e228892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38c10e6-54bb-47ec-9b70-8da72187c824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ed10c9-9127-4865-a5d1-0bda231fb581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc303156-4a46-4edc-a81d-593f6926f594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b11be3-3da0-43f7-a776-1abb3d4cb747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd2fa93-d60c-4a5a-9eba-12015c69d93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bac4af7-83d2-40f4-8540-9826cbf6253d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0e4a5a-da0b-47a4-bb48-427e9423ac42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624f91cb-cfd8-4df3-a0d8-6f9d6048d4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5589c4a5-9bcb-40bb-b1d5-9a83d7e8c6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971e8a30-5dc3-4a7b-b488-c343bf28e62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85b3c30-3834-40f7-a6ac-11ae3e8bcf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053102df-40a8-46c0-93ca-0a432b6c99ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9212e9ef-b4f8-4e86-9d71-bdeca0ff4471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fac6caf-6080-42b3-a429-1f47eb038b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c85bfce-ff78-4f5a-bf2b-2f566da422c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bf22a3-f538-4840-b91f-97b888d130b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5668256e-293e-46c3-8678-01afd3239097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe48204-6373-4c8f-a4ce-496092d7c6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74abd7ce-0881-40da-9015-c4bf6f79ef38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7e648c-2cc0-4ea3-a2aa-c0eacf5a2c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c63d5-b100-4131-9940-16e4b86185c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136e68c1-d261-4838-975a-11ef1d5dbd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70130620-cef6-4ba0-974f-b6db2e4ed41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1142c74f-dac3-44e1-b991-f09f8be6a3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e07c5be-11ec-49a9-9b49-fbf6549bc83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fd0341-ef7d-4e5b-b9cf-3a22d551c7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae27b67-3b44-4ede-a376-0e0de87f456e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc076300-1818-4742-9d34-fc953894450d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c89b4-dba2-481f-930f-264569943b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57772d0-1691-442e-9c69-03bad9de5ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3c9c86-3e26-49eb-9b12-1aa06d24e82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26994a7-d343-491f-a488-b4932ee3c4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cd6823-9696-4650-8d52-5164ef45699b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe30445-46bc-41d2-be07-dceb604e8ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecef04d-ddc7-4d97-8a54-64233dfef96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f1751f-36ee-4a0e-8daa-9c36da5a605b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d446f9-493a-4f7d-8553-8c22e5a13269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37da2b97-77dd-4de0-8b1d-77044ed6c9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61c52a3-591a-42bc-98c9-d52e5f03318c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d3bb3f-f142-4604-9405-9612e5f142fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5c1c91-47d9-479e-beb8-12af465c4591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5556536-b994-4f40-82a2-ec2760c92d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b314c8-bc2f-4d10-969c-bb6fa38cdae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc46c7d0-5e38-4169-9f0c-e02e454c28a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42479f81-955d-4205-99d0-be82ac61cb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec297f7-0e89-4938-8e18-26b84dcb9be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da718dac-72bc-4447-afc9-474c6c048007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b08abb1-c066-48f0-88b5-42466105dbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f74774c-b4d6-4cb5-bb0c-b95aa6f8363f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad5ba87-869a-470f-8db0-cdfc89325b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24e47ae-caac-4a93-85a4-6febd5e8252e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b788a84-0315-42e9-b60e-437478d9df37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c331877-c1ca-4f03-938b-007a672b06b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275f1d2e-a416-4c0f-9967-d521664c4fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1810c778-3400-4117-888c-7fa5602d8b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a35f036-6cfc-4cac-9d65-9efd328d37c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b15fec-ca4e-431b-95b8-6339d959f45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a69ac0-cf28-4923-a997-273e66dbd66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c906f82-92d0-4590-9dad-c28f9ec3ede3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e9823c-0b4c-469f-b2af-137e652843c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3b5729-f2d2-47ff-8213-c5bde81b82b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61099a2-3733-4dc3-a2f2-5bc174230134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de587612-42ab-4efd-b07f-c7f1fda4b6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bfd8da-18a8-4d35-b8dc-f316dc3d5e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c578fed-e164-4e1e-9fe3-50ffb6f92ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097834ea-a247-472f-8ffc-c8ce8335631f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfba706-6e3e-46a4-9f7f-772c63bc8a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80786f5e-0148-455a-bf74-0bf6d6ea4771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713b979c-1e96-4c06-a8dd-591e606cb429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf458f0b-336f-49dc-8f52-d7315f244ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f126ff41-1bba-4425-8c6f-b89c8cf7cbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa538492-f521-4c79-bd2e-08ca93f53353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c1bbc7-4148-47e6-b3a4-f6c753d5c066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be910347-6651-4cde-ab69-aebd417e50b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1917aa-c55f-490c-a24f-ff1cd05a5f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fff026-6d16-4fac-8447-846a8f2d165d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be95c7d4-2aa9-46f3-bcd7-932e0b4d28f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ee5b89-6cc7-473f-878c-b6ab37382d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058789b1-3dbd-4790-8d76-4a82838e382f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b3bdec-33c3-454a-94f7-04191641057a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd197b9-799d-4485-9f67-7045bf666313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ee78ae-df55-4839-9aa5-43fb011e8135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8bff6e-9795-483a-8acb-8e1c0a488081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b473b64-f5e6-4274-9a87-ecb465b40958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeda81e6-fde8-42b0-b06c-8173a19daf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cb2055-9c51-4595-a370-bdfc48f65205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20807be0-e652-4c93-b4c4-13f94e698c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001c6d1d-c175-4fb3-b17e-590945839f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebb30e5-9189-4cc2-be77-73a21f3cc90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4707bb-76b0-4764-81b4-7939ffe95a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5b4fbf-8c53-46d4-a8d6-18a67cecb7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa72ff2-40c9-43bc-a65e-aed7daa7b01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3290f8-8cdc-4500-9862-9b0bc9e875a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2403e043-4f74-46e6-939e-ab76b127a659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3ecb5f-bc8f-4e91-8599-e84117376e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cee56d-fe29-4867-a728-e43525b39dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3466e980-3bfa-4f7e-aa17-d97c27bacba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a2ac22-947d-40aa-a4b6-44abd17ec0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d95fe9-e3f8-4a31-9f9b-bc6a26768e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8b6c79-b18d-4f8b-b21b-733d0c3c8ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9b2e00-4c1d-4da4-abfe-bf08f840eb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2c84fa-0d02-487c-b91f-5c433348076b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cea048-0d1a-4074-b4f8-767fe75d234e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0bd6f2-e8d3-4298-aa3d-ee8d8287b2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ae587f-7f13-496d-89ec-d0da2af482ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dcfde5-cf51-4ddf-9f5f-6dc9d86c02f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1907630-ff95-46ff-9527-3cf0bf6e29e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ab741-f21a-4e4a-a51d-68d8883987e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d683d19e-0e40-4c4d-8184-68f74d622d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a9a2cb-97a0-43c7-8c80-17d227daa38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e48f5-7423-4b64-bee9-43d2c1b221f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923f6049-b04f-4bf2-b98e-aaa46f94c982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755d33b1-eaa3-4fa2-a734-29b548adc4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064401ff-77a1-4f57-8755-e9f78e220556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9207ea7f-4a56-4cf6-8035-91a5f8a3ee39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5973989-e469-4222-ba9e-7a2dd6a8f610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9425f716-f021-4076-96bc-74ecf2c278f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e81728c-6199-4f4b-b4e6-b81c9a511946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995151ec-5c54-475f-9445-d240d3ed74bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9c1071-d91e-44d4-9d14-9abbcf6f91a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec34e71-12ba-494a-be7b-b68deae2c5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bc6a20-3c3c-40cd-b281-cd50eab718f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c39a3a0-9605-4281-a716-3d9df66b3f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9befb902-12cc-4d16-99f3-3ef51e41a406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f28e858-800c-4c05-ae66-e558321c68c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9571bf37-e774-4f56-b7aa-e1638f448629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8930d10c-2adb-4254-aa3d-855af81d1484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbed741-bbb9-4842-b741-76660549092b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eb5ddf-5788-4477-a7ea-aee05b41d96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd36d58-9519-48ea-855f-23ac0c252aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af06139-dfad-48c4-955e-f06139b51dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c28257-1daa-42f8-b6e9-e535129dd6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf6526a-c823-4529-b16b-fc8880418e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb0bcbc-1363-4c18-86f2-04340bce9b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b865f559-b63d-4d24-95a4-5384f8b16426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ffe3ba-d5e7-4a7d-baad-9f9043fd453c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5f7fb8-4915-468b-8f5f-1787a8656576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d89bf7-40f0-46fb-8875-5f8178cbd8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690249bb-c272-46a2-a4b2-0a2b29f0b503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd890f0-b8f6-40bd-b2da-c6badc55238e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350a2f1c-70a8-4aae-aad0-9328b724ef5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d97540-2fb0-49dc-a840-f2b1569e7c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c7a602-9c00-4449-a6f1-4555a0e2b879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12686269-688c-4cb4-989d-1eb404d87435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5383a2-7a15-4620-a2be-0c8efa3bc372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a316658-51bb-469e-a1ed-99784a35f1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41937865-bec7-4d28-b017-9f52bbf57c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf95703-12d9-48d6-9e96-bea962adde11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03008f51-b625-4bcc-91ce-0413e8db2589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd12d553-113e-4eb4-a9e6-7f4cbf97ff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d259fd-790e-4040-8ea6-f95ddfd8d1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc252ebe-298b-4b4e-baa0-a5493af71b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e304e6-1405-49db-baa5-14444b9d487e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9ed010-b92e-4455-8aa6-bbda32cb5054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363793c1-35c2-40d7-b20a-2b9cea0c92f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc02374-0c6b-4944-92e2-22090ff23c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5af6db-6c6e-41de-bbe2-dffbf14ee121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b95e90-58af-433a-be94-1620ab3ecb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a353a47c-4d59-4710-ac11-f7af4f3ba5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc66e07-f05a-40a6-b9ec-b23cb21fe306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7bb62d-fbb6-4a80-8e26-f494342b6641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc9baba-08e6-4827-bc61-2a71aa49fba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776071a1-2a23-47e6-9f9a-3d5040be9818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92c3068-5a0e-4e68-ba69-b6a991cd817d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24459c99-074b-4285-9c02-524ede15af5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b880b6-58f8-462b-81bd-10559ceaa7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225507ef-d077-45c8-9b67-6b2d663163c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab7a61-5e10-4a54-93a2-a6bf3daf4155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7004a5-2212-4728-9f97-1c60ec1e3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850c7ea5-dc8d-4c66-b66a-61395742a285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c445101-721f-4232-b940-a9c53b416214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a666198-ec71-4b40-a243-2a0f88bd0269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7cd22c-1836-4030-8298-1783b3b3a1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d865c5e-ce7d-464f-8a8e-4d0fcd1fda60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af503b21-417c-47be-9f7a-14dd22aca8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced938df-b9e9-4b02-9bd5-9cb012885172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b23ba13-281b-4cad-9a49-cabcb22535e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4e2157-b6eb-406a-907b-1955c04962c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecf47b6-d9b0-4e67-b9eb-e56a59ede49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2069aa4c-baaf-4197-b0c2-3b0b05c71fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22e347b-8c99-4762-9347-874e34342c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41bf207-3768-47bb-b90a-dd8d42b7bcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50fd686-e7e4-478a-ad97-5b74bda98598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdaed97-6ae3-4b84-b1a8-0f3d06813eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51bdf8e-2477-4e3e-807a-4bfe46457ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ea08bf-1df5-4b19-a492-d839c6d60617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674bf528-8006-4a3d-a5e9-eeea7be5e64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8483b79a-57aa-46f7-8b80-ff8d558b6e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920f1edf-61bb-4253-8a4b-f1e70e1c1565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba468a22-3c0d-4370-8cd2-8a54174573b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d53b93-bbec-48c2-ac94-509711e5aa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1194400b-a917-4fe6-b98b-975844d8bd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6235358-53db-4d3d-9064-dea1b0336247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1766d1-a390-46d2-a9c6-31127e7e1502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5e2516-d4fb-4b16-96c6-0eca6d3a02fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdd7b73-2d18-4a95-8153-39b1afc72764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68ff01c-759a-4cea-8a7b-cfc06f5eac9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466eb603-0805-440f-957a-2f67524431e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc42426-603f-440a-8881-724fe4dee3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e47b6fb-6d9f-45bf-ad9c-387706264989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60449ca3-11d3-405e-a638-b2dc0ce1581f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96f8e86-912a-4adb-80a1-896b67367d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b172c6-6bdc-48be-937e-4e3ffc2e41a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a671842-6a14-4642-b592-b6bfc46f6133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8066b3f-7d75-45d4-8af4-9b253cb6694c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10f0b46-c7a2-4bad-aa54-ac60cd4165ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2647286-ba85-46aa-ac42-69b8b70de41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b363bee6-4543-4139-8f6c-02d3eb4eb92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3d83de-cfd1-49bd-8b9f-c2c6b842a3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e1e77d-2862-44d8-aefc-7f11c31ffc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acc11dc-b55c-4de9-ae65-062ae89e29cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753018a8-15ef-4f17-96c3-d701c04734a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b974a2-c4cf-47b5-83b0-36a80d21b65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec4c0e9-a601-492f-98d4-362c727f73e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa780d8-e48a-42be-962f-5d293debe047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1dd1a-1b69-416f-bdae-21143d33c611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3401ae1b-beaf-4f9d-81df-537f39b1bd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0d59f6-3697-4229-bb72-94a155df680f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6efcba4-5b36-4112-95a2-c8c69f73873f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd67b51-c9ff-4bb5-ac5f-3627e880e61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692b2a10-dc1e-41ba-ab3d-40bff60abfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e65133-a72b-4b18-b3bd-b3d1b6d4077d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6f2294-8a2e-40a1-a0db-620771692c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6768727-8e4a-4e61-8511-a249846de65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f192a-4b44-4788-aebc-1dc16744f2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ba5b50-3de9-4b1c-8f39-989b568913ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3617d78-e1a7-4ab8-b5da-9fc3a85e63c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfc6484-bd2e-4af2-b58f-f89731a4a2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3447e52-a1c2-4d65-a095-36a42dcea4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bcdb02-69b8-43ba-be4f-c703caf3de57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee5d380-2d99-4888-804e-8145b3449989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7fd655-54f8-4e85-bfbd-f78ee12b61cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f21d95-6690-4a82-aa4e-8e7b25665a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1005585f-d896-4f01-8891-978c10a79b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce06669-c7c3-4953-a749-621629a92161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b745404d-971b-4395-9f50-3017375ab956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a0b506-f4b4-49de-b7c0-5b058396d5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb49acb-3140-4241-ba80-0ebd0d1f682e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df47f84c-5527-44a5-a34c-5cc06ee6191a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25b84b1-3dba-4842-bcb6-c309b03fff6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2045686b-fc52-40a9-9342-cc2752eeea3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d374420-b586-4f1f-9b93-0f603f4b9980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40781c71-f61f-48d2-9403-a2964a7ea7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9e72c7-b206-4453-a262-5599cf19234f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b6678-17de-4373-b78c-2174ef868485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0a7491-9a04-4feb-867d-cf1cae036932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c281760-421a-4739-aa24-df8ffe57b512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdd7b25-e73d-4fbb-9200-1cf777da006c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22abdd88-d713-48ae-a5ad-7182d648a3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f454680-455a-4a66-8a77-56bcd5419464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1211179a-29c8-47e2-82a5-77a0322200a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80afb9ce-5aca-49d2-9c7d-3d3847b85f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12eab98-d3b2-4e3c-91b5-4a3ad0429841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e907d4d9-3c7a-4b28-ab0d-12c041e72363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebda87fd-fcbb-4006-aebc-a743183045b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9fdb52-0e1f-4a56-a2c1-7882747896c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c22dfac-c9ed-4d27-b52b-7344e94821c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde19ad5-5521-4d6c-b706-beacbe5bc396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c32ac7-b53b-43ed-9151-ec64a63a58d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ebc232-88e0-4a5a-b41d-5dda07c7f957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308ea936-bf8a-486f-8fa3-1a534eb519e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3b0882-ecb8-4dae-a80d-37525697ef15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8e85f5-8dcc-405c-9148-5ad51192c273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fe41e4-8218-4d2a-8a47-00121d7ef7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c040c3-4655-4834-bac6-b12dafc11128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78bb79b-0cdc-41f7-a472-1658b486c70f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1fc297-7b36-4178-87a4-9c4dfb287d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.162.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8594e68a-739a-4faf-9bf8-4e9335114f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.174.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a1d8a3-dd96-4859-9055-1cecbdedcd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.242.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98aedb7-00f5-41b6-be58-7411aedb4a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da1ce57-90b3-4890-a75c-24a72d296199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.176.140.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a5ab8-48bd-4f4f-989e-b0aea95add5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.47.148.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9156fb4f-7aab-41fc-875b-a41340c5ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.28.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a2be13-bfa0-404c-b2c3-b692a00f263d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3928d54b-244b-44ad-a811-04e40a280205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e51598-7c70-4b58-8abc-b6d665b0ce1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ff66b3-f6aa-4f55-a077-d29682b8d3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.165.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7702a718-dcc1-4f83-9c03-bf37447b62a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.195.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851ce6e1-1e54-4596-9418-5ea64a9c0dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.234.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1a2987-d34b-4e87-8944-863d96762088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.102.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41582892-c42b-49ac-917b-487a4b0fefd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.104.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee53442e-7311-4a77-b838-dc341fd8b73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171cf289-2f92-4363-8f3a-10a5b1e29fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae829aa-8ce3-4d05-89dd-1216ee380047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.118.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36f003f-45cc-4851-b20d-129c226748fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.120.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6eea77-4224-4673-b6aa-a83b55749c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08f2ddb-a907-4298-b698-adffd46b5fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1d024e-a8ae-43c7-bcc2-422404b19a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.163.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc37179-3cb0-4136-8b5a-58ab18c72665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.71.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cd875a-4c2f-42eb-a5b0-af5102108fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.71.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe3953a-8267-4cfd-9e6d-1e3c5005c705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f807ac2-3d13-4349-b584-5b1de1b4fa94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.75.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4759a942-ee75-4da6-a7cd-32cd87825ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db26156-dda0-409c-8855-15f5f1d70b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f02533-613d-4519-9583-b9be21556526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939f9405-2ec2-4d60-85bd-d6b856ef7b7e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09c8dc1-1309-47f5-9063-0873268d2d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9868f68-5062-4b52-acd4-7fa5cc0ff1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94683269-2e8e-4936-954b-7f29a745d0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c774299e-836c-4870-ac1f-1c745fa35b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761c943-9587-4ff0-805a-0e712a4509a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac49655-5198-466f-a358-ab91dcff41f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4548c8cc-8ee2-47e9-a662-7becb6381778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b27058-2718-4f0c-8321-e5ba4f9b71de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ca7f7d-205c-4694-9448-f1f38a9aa079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31482a72-d66b-4673-b0a4-5ff2bed6814f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52d3d92-8add-4f42-8de0-2008beae10eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcf48c8-7555-4ca7-866f-83eb11f545f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12d8405-9728-492e-abfa-20661d913aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9192c61-4d4c-408b-949e-c56381ff8026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb81ea6d-67c3-461e-a070-6169ee2a7d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0fb071-7c80-4066-a15a-3a04bc568dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf48dba-31cc-4b3c-9b40-b830d8a20080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccb16cd-4df6-4be0-a3f2-7f5ef64bf658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819e298d-5c79-45c7-b5dd-f41c94b1e2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d331174f-d6b2-4f73-ad9d-edd1ee07c201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25949930-6890-425e-b9e2-81095e1c3ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ac6ed-7f81-4154-be43-84b0f3284cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ee0f11-44bd-467e-8c81-15988f70571e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b084188-d012-490c-96f8-5d7c4a14ecdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff33a7d4-bcc2-4976-92a4-5951020369d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b7a8de-d589-4d09-820c-5865f3e130f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f276b1ec-f81f-49ce-a1aa-687b0788d698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147af086-38e3-481f-bd9c-9dc68a8ff179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0140dd-d830-4c8d-b063-57ff1807a72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96527c98-0b60-4cc9-a826-13d7c2b5944e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad63eae3-8b7a-4707-a44f-0b6e7cc9da67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44780ac3-2c8f-4075-9867-7d28654c91e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559eb58d-4d91-4486-98b2-6632aa914d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616f479b-b7d9-4c39-b7c0-aedae49dc42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638a1724-a90c-43f5-b457-24331b86a396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ea9b09-0d9e-42e7-ad94-465249be8d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e159d09-d3e8-4864-9f07-28189d89a778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdfa731-5db0-4ac8-871e-3e813e4848d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01603995-151a-42fb-9a26-bb0b2fb5bb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafa4bd0-402f-40de-aa52-54a63cb415db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d006fb-d4fd-48d6-825f-21664295bcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823f3ffb-7616-4030-8042-4fd2c9b506ee", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900cda20-cf3b-47e0-ae66-16dc81996444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11accc7-d5f1-4113-9669-c8121feba0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12badc54-fe11-4abd-97e3-f6921e335645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a844be-8ca5-4604-b391-7a3917a8bd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b73aa3-4796-4c1a-855b-173258884328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ba7764-5ed9-4504-a050-0fa09175faa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbcbf30-0c50-4de8-b21b-10d62db8f1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe8a826-8bb8-48a6-9b1b-4f9bf1724e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddfc9c4-2dfc-40a5-9370-f1373bf8f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a3b49b-ccbc-4bf4-8b73-cf8c4c0f25f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25702a9c-2a3c-4282-8e94-acc5ac493118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dd7ec9-3431-4311-ab6a-c901d16e9436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d062520-4548-477d-8433-978b374d72a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd995e0-90cf-4c15-a5b8-0834ac9f4cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068dc295-520c-4121-85c3-bac74f90066e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786378b4-4013-4001-98e2-4b67e60f33d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd1b7ad-30da-4fd2-89e7-838204d6d91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd98d4bc-8aa8-4b0b-8e5b-daedd5c80fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb641f7c-94a2-4867-9710-17741bbe40cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a53025-252f-4043-b506-29351b63083c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed532c9-49c1-4b93-925c-48c0653b9215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d844b86-2194-47c5-8707-e63a67c9053f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2980a8-45d7-433f-85cc-3b098ddead72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e730d89-2b6b-4972-99ae-a722fe2260cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e70611-53be-4fef-b316-f681bba65f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fda35b-5652-4a9a-a56d-e9a81cf68a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee56ea5c-99f1-43ff-a79d-780112f914c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964be26f-f0a1-4a8e-a944-19c26b2e3bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92eaecf2-993a-45d8-b989-fb052e6a7725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b280f9a-3e64-4865-9ad8-38499bb574d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8675a79-f5d8-4a6c-8c0c-ee325e13b9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e0de06-9e86-4d36-9a74-c18e2478af08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cceec0-f32e-4733-a8d8-185cef4d96fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc78e7ce-55ce-444b-bfe4-fba8115a0901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3eed423-4e2e-434e-80b9-dade0e5ce712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a31f1-dec8-4193-bef3-de5834f26db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2d4e5b-94a5-4c94-86ba-c688ebac51c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5edbce6-72e8-4f0d-8f11-27e28e7dfb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaecd6a7-a130-42c4-bdd0-979d8a14c17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9a58df-4d29-49bd-a646-9eef1d0728a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397b0822-4a3b-40df-b10b-15a594cf2fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b5aa96-abc4-4980-b6e1-c025fcd65d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2040335b-da64-485f-81b2-712fb9ab91eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a433cd-7c1e-4d29-a555-8c3ced657ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83217c60-c27f-4fde-8e10-36b3bd3dc6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c94279-0c23-419b-adf2-3ae8fed8433d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64639497-90a7-4a70-b786-ae3f7e32fb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ada60f-9fa4-40f0-abf8-3ff51d0841ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747b712a-6b62-465b-9bb9-8e119c647405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4828fac-b1d8-40b6-b261-6725219dc345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb83160-3d8c-4e94-9f2c-aaa0a0a277fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907397ca-86e2-4139-8956-7c5044df7f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9674f051-8691-4671-915c-7c8e424bbd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc195ee-f9ed-4df4-b02e-1cb181b7b0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2884190-cb0d-4867-ac06-098aa607d33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328438ea-6759-4292-ac48-5134f98d19bb", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37c5fd6-5bdb-469b-b4f9-d72d7fcadd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee8ab16-4af1-4285-bd5b-4dd5ad732035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f50ae6-98d3-45b5-9b3f-e7ff93b06a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c02031-4ed2-4bed-8acc-02fa3297d963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1735a7b0-c3bf-46a5-895b-23bcd313e5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b214beb0-8370-4007-8c0c-eb7f606d7332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791f6707-6409-48c6-b764-d7b46a3e5a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff8fb71-4fb1-4c6f-827e-92ddfb0ab6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f43c432-8a30-43d2-b1cc-f1c3a2d1edb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40baddab-6ff1-4606-8a53-5be0d5519d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9346b929-2e5c-4b54-87ac-38fb1cd3db4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c1e8ed-028f-4627-bd9d-e7b014ee8177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ec6527-1aa7-43a1-b547-9769ef8cbb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf19bba-b10c-4f27-a3c6-3871d9fd28c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ca029d-f4b2-422d-b754-54d5e3daa6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d69444e-91da-46c7-8934-02c2cdda486d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1c427a-d735-444c-94fd-30a438aa1683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f382ab4b-4087-48ee-b4fe-bf62882d006b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8650d610-8f85-43fb-9264-5dab01617561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ce9248-1cc8-48d4-bacb-9cec3906d013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd97a7d-511f-40db-8619-56b4cb18a916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49029016-9c78-402a-95ce-1c5de62102b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d757139-4758-4359-aba4-406cf06efe50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be596efa-c92c-4318-83fc-0fe3d7a6dbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.232.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef93d1-0f1c-4020-8943-5b89a3a00393", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.255.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0b3602-5b72-49af-80e2-16f51f4213c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc4b5c8-ad52-4b15-a8e7-7714dd30794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcd02ed-0eff-4d4e-9024-03890b05cd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b55fab3-14f6-41aa-b250-aa5ba561d422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433aeb11-0ddf-41bf-a2f1-d3274c260ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729b7cf0-e4a0-479c-9fa8-3bb4cbdb1b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b01d371-8529-46ca-9fcc-e49ffc688ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834d5a85-36ab-4531-b1eb-0098485e761c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b683f820-83d3-4193-8b51-1bd33896f56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867894a1-c8f3-40a2-a8e6-5c0a7e9013a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8e3dfc-9396-4dee-8295-cc0c195550e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4b82a3-d2f2-43b5-8c5d-ca26f8198b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0100f92b-e23d-41bd-8684-d5934d1ed7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29442b-6adc-4b6a-9c6c-3e9bda6af6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91c22f5-79cd-4a2b-abae-aa6855683152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b7f427-b45e-46a9-a1c7-e5e55c14a100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9561e865-b32c-430f-ac57-3864e8f3a0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c801547-832b-4b64-a7b8-b57134de2bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7df89e-ac72-4320-aaea-69c63a149f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6ff153-b43d-4ef4-94d7-3ff6f0588e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3f9223-6ceb-4eee-a444-76a172cfdbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8550a3a-b0df-4fdc-a7ff-aa45076ff72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bfaba4-90a2-4191-9a4d-b04ca1296acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817fb6d8-4025-4f1f-9269-cee0012d2bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e5a495-abfc-4ecb-ba25-6c0550f7eb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe42bec1-c296-4574-9167-c3c6de2e7367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83019492-f705-4ddd-be3d-1a77160c16ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f55bd-de71-4c4e-aefc-f1e216b1080d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6797defc-a9a5-4fe7-af98-c47fe5f96c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3eaaa7-c5fc-4850-93a3-cd9c68ea17e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fed9a32-263f-4cb5-a2b2-ed7d75f08fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d79f35d-439c-497f-bb48-244f87d2bb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72d823d-289c-4c47-81a1-afc608694589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc984921-9624-497c-9686-7837e581bf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971ec43f-3add-4817-8faf-eb1bc51698c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a860ff42-b7a6-42f1-8093-6dff5e5f0f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3449f026-7bcf-48ca-8174-9ed658ccf99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636d4205-78ea-46f0-aa1e-ff5ecdfb6644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3713e54-92d8-489c-9f35-3e84d8203832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d32f68-96e4-49f9-a820-ec6a21a86078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e888df3b-3f61-41dd-9d1d-89fe23e745e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebd2fc4-da10-4541-8874-ab4b34773dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b9674e-625e-4bcf-9c46-458d9f4e0371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf455de-7f41-4a1b-ae4a-24d669fb1cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487c6aeb-88a7-43c3-a66a-142df28987e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.16.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2ccd3-2b5a-4e41-b27d-77b5e3b29529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.17.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fc9dcf-758d-4709-8251-a6d80664eb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.201.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7749310-efeb-4d53-9198-4709fb5b2bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.225.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfe2a88-181b-4030-af94-f73b178f3554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.226.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4275e5a-a014-4052-852c-5737ae83ecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.33.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47080528-9048-4199-8608-d840465e1ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.41.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761ade3-c44d-40b8-9afb-c83b3e660f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3562070f-1d62-4e7c-85bf-15cb94ee3dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.5.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bd81ae-11bf-41b6-bb97-30f9a45772ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28deac1-63d9-45a7-9717-8a4177d298c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.70.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b7c0dc-56d5-4901-bc39-f863bb5080e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.80.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dffb18-e216-48b1-8697-d35eef083348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.9.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1d3f1c-0d4f-41ea-9ce0-a1652507571d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.107.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a9851a-08db-4ab8-a8b6-0c277120fce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e38a4c-074d-4759-8495-919878ba0b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.129.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5bead9-1667-486c-8061-d4ec96b58796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456abad3-e1be-40ee-bb73-c7aad16649bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.178.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c5e376-a7ed-4c3c-8a68-a8d348d77f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ab530b-437f-41ae-a6f8-89596c1a3f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.207.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b25d2e-e8b3-4ec0-82fa-51d6005edcfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de290c5f-a9d9-4a6d-8da6-556c996f8a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.228.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197c5a17-b79d-41b5-ab28-0f71d49ff846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.33.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485e968e-909d-4781-b962-673af13d2670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.55.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf69cdc-02fa-4de8-bf15-71a6e08de3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.129.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe68835-9046-42bf-b352-8ba424ee4081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.130.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260a7e21-0687-4cf8-867f-95a2ad0f92de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.137.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5fd33a-8862-44fd-a7f8-3736c52c3100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.139.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d801f7-f991-4aac-ace6-19762b194c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.139.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875e1218-0c32-43f8-88b2-1d8e42606317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.140.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef45f4f-47a9-42c0-ab73-c303d213a050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.152.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3452fd82-4584-44b5-906c-713e7a1d721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.152.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222222c6-a173-4b31-aa8a-6eeb595e933a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.158.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a043671-b19f-42b0-ac9a-89496386dd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.177.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da381d99-337b-45fb-9fc8-9446ce738ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.85.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92371df0-3101-4100-8c76-7e7f3a060549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.209.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42870f51-ba5c-44c9-b900-7d8a2c5501db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.234.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df864aeb-cfe3-4eaa-8bc2-c50e368c7f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.255.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b7d31a-f536-4bd9-8b00-06a610a8973b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.181.89.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8718dd-4a7f-4d62-b0b3-b126e55f307d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.100.247.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b72d51-2d32-4371-b095-266719d298b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.161.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f857813c-d013-4814-8317-9723ac7423f3", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.106.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87e7ea15-b4de-46bb-9d66-ceefe37901b2", "relationship_type": "indicates", "source_ref": "indicator--f857813c-d013-4814-8317-9723ac7423f3", "target_ref": "attack-pattern--36e30756-e384-41f7-a2ca-9f8b14b80402", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49178067-f991-484a-9814-d601e1382364", "relationship_type": "indicates", "source_ref": "indicator--f857813c-d013-4814-8317-9723ac7423f3", "target_ref": "vulnerability--5f6ea998-22a4-45e2-8e31-6371eb528ffc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a498e238-312f-41e1-82dc-aedd0ee7b808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.122.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24821fb1-4011-4602-af51-62832bbf4585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.130.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e077237c-3ab4-422c-b131-320238a43a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.137.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5c4be0-26ce-46da-acea-49a63c555993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.140.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac63268f-5123-4385-89b5-856e341cba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.169.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca7d3cc-cab9-4ef6-890b-53eed9a790aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.177.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06df205-18e1-42b9-8aa3-f9dd8c4c6ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.40.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36389b73-8cfc-47c0-adbd-1a76debd51e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.51.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3684b31c-0657-46ed-84df-c7e895c0fbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.61.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f199760-3c16-4df9-991a-5135472d12b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.202.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7d25ea-e307-4db7-9e33-bf78c3fdb71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.56.200.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7382fc-fe1f-4459-b466-597fe3bd7d24", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.57.107.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0975c0b6-e345-4379-8e2d-9a2885e31111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.60.7.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891ae8dd-9be9-4c47-b2cf-62abd15fa3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.20.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc773525-09d0-4faa-9d4a-ad8c8f138cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.231.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02827152-d479-4dd2-a4ef-a3de64aece25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.245.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46dc80a-ac7c-4d77-9ab6-1be3e7bbdc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.61.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c818da11-b01f-4a48-8e39-685909ffe8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b856532-5714-45d9-bd12-32fb3984398b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffb9961-3890-4972-9769-95cf3d2f9053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae848bb-3fe7-4e7d-9fdd-ea9c9198b3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.166.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce1f2f0-aaf3-4b55-add0-e770fdfc8d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27494b0f-fd95-430f-a5f0-566d035a668d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4673fb-64fb-49e2-a925-0c4c8b622bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dff43d7-2bbe-4167-bf6b-e57832ec35b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb5c5e2-af98-46e0-928d-42eef70f0052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b345b-0010-47ba-b290-69ccf78bf94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5e0277-45af-4df2-9b08-c410a22e16d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87af48ce-950d-461b-8a49-280af22fc30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7d10b3-27ab-4049-b472-00d5fa840060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a66fa4c-9a18-46fc-9dfa-6cb821b42fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cde7e09-a225-4d37-b14d-6cd4d3135fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f0f6d5-c81d-4792-a0e4-725ad1920b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1f1684-179e-4d56-bd73-e641715a4b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdab63a-9fa5-40c4-a2f3-3645d8bdffe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fad011-1254-4b2a-af87-384c9e7e1871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480a7911-8aa3-4660-9fb4-61e8ff9b8abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cc4752-5e46-43c1-af13-4d59682fac9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efa11d2-8445-4299-8a16-7564c68f66fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e430bfce-2a4e-47ed-b378-d6a3d8277e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ac23c-e817-4722-8532-1354d3fef217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd463173-f901-46f3-bb6e-73df30d1458f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6a382b-6eee-4485-8059-014df216f8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12df4fbb-c0eb-4e32-b2e7-d5734697a5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feabe3c-005a-4b37-9f8b-2b6e551ece74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed971c9-3920-4319-b7d1-38bcea46774a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03d3ac4-0a1c-4bff-9583-1ee37fac78e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4b2f23-5010-41a1-b166-88d24362113e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb1fb5e-f448-4ac6-a377-16a66975c397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e495327-18a6-4d8d-9e2b-52e90e6a3fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b63cf9c-3c11-4f00-9c1e-57fef8e4b9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d850217-b298-4e64-a407-713fd15b4f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b142798c-4b3f-4393-935e-77ed2db8b5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c89ae3-2815-4a8b-85f6-82db2d58718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06617427-910f-4e31-9588-299a45ff5964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b1e23d-24eb-4126-8a15-d8bc27db0512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd74098d-c93f-48ce-8606-0b0d059a8cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaf8bba-d03e-410e-a083-2cca12e292d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ed14a4-ff8e-4897-9738-8c4be86b8766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b86b65-557c-4d31-8989-86e6ae28b06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9026c8e6-de9e-4645-b8a0-c95d6a2fe538", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af62884-4422-43f0-a44c-385a2ea7678c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55380ba1-5827-4a66-aa52-fd0526f7035c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c190837-f10f-4318-b433-c367b178163f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daaa8c3-8836-4fd3-9c09-1363d92fe765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228af160-ad71-4a79-8efb-251e1c661a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485a8fa-af0d-4182-b83c-734aec495950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231a067c-c45c-4039-99ea-26abd3704530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c822bd71-fcdc-49f0-b5de-7d58e4602a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ead872-c2c9-4c1d-9eb8-358fed716091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6504b2ef-7a8b-4757-a269-664d105cb42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369ac14f-7b39-4c65-a00f-c41cf758549b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0d85c1-53f6-403f-be9f-b99a9cd09f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcea93c8-c999-4a6e-b2dd-8a5663e8a7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7273d52-45b8-4263-b458-41329330d320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2492468-2ef6-4a67-ac8e-28f7e8eca1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13eca6ae-095e-4711-8f93-d78b3e7f1dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e5e018-b9f1-4971-bce2-c52fc1083b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.1.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cefab5-ea08-4713-b1f0-fb29b4169bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.11.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d3f6bb-120f-412e-af80-0778cfc8243e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.120.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc351fc-883f-4583-9b88-84834dd18b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.15.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a9a37c-4dac-47c3-b77e-292a66b33d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.151.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7153524-0c7b-45b1-9e6f-597877baa919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.152.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e484cef-32f5-43e5-a96d-e01afcea1642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.184.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1fd0ec-240e-4e64-b052-a271770b7af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.210.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692530dc-3816-432f-abc6-9f87dba113ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.224.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7755036f-effc-45f9-a912-3c16814dd947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.5.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e8d178-ec1a-4682-9c78-cd3e197e0cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4bb4a9-13f1-4051-9963-654fc4ecd8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762d4844-fca6-43e7-b34f-7c1b8302336f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.121.221.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd04c02d-ad1a-4c51-93d6-e6cde191821e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d2b4e2-1e2a-4dd2-8ec3-6ee9153603fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.9.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd57cc4-0924-4adf-be13-35add3b67450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.116.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5b4a66-a69b-44f9-8009-5656e11a5c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.162.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d5197b-05d9-4189-a26a-29a55ff70408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.164.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32948410-2195-441f-98ba-248fd4cd4473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.168.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b91bb55-781d-4859-bd97-e3c4c8f0f250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.168.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd86b8f6-3ce1-467d-9b45-d9942ed688ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.20.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a6312d-a6fa-4e01-bbe4-385da15a59ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.21.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25900794-c78e-4878-8439-9b825d9dc606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.213.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714ceb6c-2e3f-4b77-b513-6fc185a0c21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.26.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed0814c-8018-4bec-a697-55b9ade8a1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.31.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3fe795-df54-4721-94dc-292955e8dbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.89.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e0cef9-539f-4e3f-b78e-af6d892e5f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a543e08-2c3a-400f-96dc-b6cc462aefda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.232.24.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a466ab1-0abc-454d-801f-a55bb715c3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.33.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddc4fb6-bf2b-4a36-91f1-100307c7bbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.36.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550e798b-a36a-4596-a06b-082be6bdd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.0.53.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ad9763-cbce-4908-a1c7-1d14043062d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.113.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0905a74-7373-4a30-980e-988bbf7b72c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca37dce2-38af-4a89-8bf5-75e812ae16b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1f6f79-0ff6-47f2-9b78-349f58132acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebd1e75-a179-4835-933f-6660196262cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1845117c-0976-4024-bf69-0b10054bb971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19291fef-0295-4537-8b55-8264002e1c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a160b793-b73e-46a5-bfd6-437a3d1f039d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060fd0c1-c7a8-4e16-a59f-107de44e1a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f61068-849f-44e6-817f-8794b64647ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f26000-321b-4873-b920-8f06b4462975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d5e508-408c-442c-bc8f-7da4184ce49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.90.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2e55d5-61e4-402f-8486-864b6d597f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0befd3c-8d56-4506-aeec-e6d4f79c2d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0955bb-61e3-4391-b256-b2815ca5bc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64bfab8-8b9d-43e6-bed7-062ca2b1a22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.140.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7203f894-0512-4fa2-ac49-b292e9818e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.149.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d59e0a2-44da-4d0b-b9b5-d7634641e6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff10cd8b-0b55-4693-aa9c-69ed8efe37bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.163.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c34748-35d9-4765-8b8d-d0c77a7a6bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.166.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847b9189-f78c-4020-930a-d851c025e071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5949d7-fe85-4e3c-ab96-bb85bbe72949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.176.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8a54ad-e159-413f-bfda-8dc536406e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a4f006-dad8-4312-8db5-d3cee4ad134f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.179.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa23a78-9721-4085-8b01-6ec45472d41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.179.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496d240a-8972-48b1-a436-f60ba66b49a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.186.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd552e76-facb-474f-80a2-f0a86281be60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.189.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193a1094-fc4d-43b4-9242-2cccd170bc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.228.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad704f96-abdd-4907-9ed5-a46b344b630e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.230.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d2cb48-1927-4713-a80d-74febb190090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.75.161.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67af7f5f-ba4f-43d6-9649-2d286ad41ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.113.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31e53a7-10d2-4b33-a874-a1bcbfcf90d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.81.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd0d2a7-d6d5-4403-b9e4-988d369a1cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.81.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f4609a-951e-4e71-93ee-c2290a94e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a03f5f-098a-41e0-9f8e-525967db0163", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.232.87.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef5d092-98b7-4307-a961-12640a7a80eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.151.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8b20b0-b1be-468b-ae7b-a7063bca1e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd9edf5-1a66-4eb9-a9d4-dfa83417d1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.137.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcab24e-2c20-409c-88c7-8ce53ba9e091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.214.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86975c08-c588-45f1-aa84-9e83ef1de6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.78.153.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f756c3ea-36cf-4989-be61-ebb47255020f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b953303-04bf-4ade-9f4f-3b4ea4c93cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abdeb75-4fe4-45e4-81f1-26875303df9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c6c5b-98fa-4d79-a335-52cc92783580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c2df77-38fb-4f60-a5c9-356c172cb5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120972bb-12b4-4c3d-8ee2-2dce455db54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.146.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c4fd1-d94a-47f5-8b5b-d1aa7cf9121b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa09a7-6748-4b0c-bfe8-64bcf06cd348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419c67c5-8206-4f4d-a827-7acded4f8483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417af029-55f3-4d0e-acfe-f9afd5e3c98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1022fa2-e4cf-4811-a423-de376a4278b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9411a76b-cc45-4588-ba30-c32462ebf352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e03a6c-e66f-44de-b93d-67da2a9613ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c165704-f2d0-4a3a-8741-c5e684e371eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430ad5a6-1d54-4556-8450-bc229e822a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fb9f83-cc2d-4fb3-b76f-445e0ccf3053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b3c034-8aff-4250-9062-87f0ad62b7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b478787-e984-4fbd-864c-4602d3f29919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da8b71d-9720-447d-9387-e2e1262fd2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2ceb07-372a-4b84-b9e6-e043d391e621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58bc8af-2af7-48f5-8334-fac208ca58eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.196.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f32e0dd-2c94-4f8a-a1b9-fe62f5091337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b649e87-9baa-432f-826d-ab6a80fd55be", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c509044-126d-4be9-9aac-51ed407567ce", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc9fd08-02bd-4206-bd92-ddfe6b47ca8c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c502fe-1dfb-4dbc-805d-5c978dca6fcb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415a26f9-e990-4bd0-9993-c88025f9342d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d63978-73d1-43ce-8e0d-bafbe5c6d7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c08e23-bcb5-48fa-afc5-275796ac42d5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702dca72-f219-42a4-af54-2e678aa1d3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d685897-fc57-46da-8cd0-fc56af9666c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94494535-d6ed-4fa2-9fb8-c0e7eaa2e102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ed3550-1332-4319-9614-b803f4c0e4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.225.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cd1a01-cc4d-45cc-afbb-df0ef9c8fcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd8d5af-5203-452d-989b-5398d0d6e6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2702de-d2f4-44f7-bdee-47eafe0bd4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9c16be-1d49-4c13-b33e-8b9e172e19fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d0d742-2432-4bd5-8886-88fd6ddb5654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce967342-66ed-4aeb-811d-54ba81139283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ce18a-c2c9-40e7-a92d-dc466899c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310189a9-6c8f-41ed-b1c8-5646080d9e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d8af7c-6f04-4bd2-9643-c26127f353ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c23637-f294-423e-ba15-b9f000da691f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ef38c-a0aa-4135-b9fb-48c33351a477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32f69be-b43e-4b14-8d04-24b237d526e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4aaca7-e962-4033-9e19-dd0c09255377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fece4f1e-266c-499c-9a36-3e8fabac0130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358857e0-5282-4f49-9448-cd7bebe63fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251c970c-86dd-458e-af34-ddc54333b16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678a8b03-c3b5-4611-a6db-8ab174ba7ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbcb8cc-fe97-4f11-9d76-0572d9e62b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b7482c-824b-4547-8a99-8831eeba9046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f3f0da-a7a1-4097-9477-c2955317a244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.234.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d7f0bd-c31f-41ea-8416-b5b405a2a711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cf0498-1d55-4700-a723-f8212ced53b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679d0020-9ab8-4e0d-a757-4efe1ba149fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4f2acd-8e07-48c6-ad5d-93304a944550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20afa06-63ea-471a-9b00-d830fddd3332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a144d976-8dc6-40d5-ae89-b4b08a3cacf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599a41fa-9a7c-4d16-bcfa-bc8652144702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030b0389-e944-4cce-8d1c-2e9ae57dd595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6375cf64-785a-4d20-a70b-b7236c0de6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28a2962-26d1-42da-a293-c4893684b78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.65.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34fb272-b2d9-455a-9a5e-fac3f59cccf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085a36ae-a251-407b-8265-04da9b8eb1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f3d9e9-6b13-4fe8-9217-e31ea23c4678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3b5c29-cf35-4b13-bca0-74e37f2e5e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42b355-2d9c-4636-88dc-44fe8ee1be7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed285ce8-71a7-4375-b121-f359d94004c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10659ced-06ff-41d4-804f-89db4ff02279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.213.216.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edc0e25-6307-437d-babf-5517c7b76ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.5.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297c1215-6fd2-4ccb-b7e5-cfdaf8dea291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e573f02f-bfdd-46ef-b39e-7f861a90a649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aee72f5-06db-4894-822c-21857c84bc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f29550d-c5d5-42a3-9279-836c028d8dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a19076-e0af-4a0d-b0c0-c10613b5f7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488bf11d-1bdb-4f38-a257-c67d32d07bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9396340b-3864-4e1e-a86b-03abb76bd804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e265571-495a-4555-830a-9f15b3f52a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed71367-e21d-4d6f-98e6-5c92444e34f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.137.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7248402-8366-424b-9270-68b94efac4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383c1111-c9b4-41a1-ab0d-3473b1506c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764b5b6e-03f4-4048-a470-d4e708e718e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c346864-6e6c-4913-b137-8f2024e3b2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9027a5c-52a6-4efb-b222-49ffeb3f35ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236db97b-4525-49d6-9947-a230addea0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506d0555-53bc-48f0-86d4-3416a9c2450b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3755314d-1323-451d-b9e4-fd86490532ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276a2bdb-705f-470b-ad1a-09de35eb1c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40763683-bc8f-4d4c-b3f2-6aaa34d516a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cefca79-7ef8-4a86-a26d-d512520c5b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20eb1f92-a3c5-454f-a7de-ff743373124d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1366f038-2803-43ed-85bb-704acdb43fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3f7db8-10bc-48a7-806f-48f04704f490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac13aa3-21c1-4f4b-bcbd-8a9375179fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a847ce8-ad4f-459e-828e-6c5c6d8627fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0e72a2-bb6f-46ef-9c13-595037f72880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1220d40f-426c-4c8e-b8af-4f4191057c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d1724c-809d-4e09-acd7-9b6b5f9fce73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dfba76-fa7a-4975-bbeb-47a44e6cdb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce0b90f-2245-4248-9716-7d4bad331ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2201be5-59bc-4321-9673-f6f650b4a72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac0f310-679b-466c-a63c-9acd71fb96e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514034ca-307f-4c79-92af-26511a4252d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7457f18b-3106-4318-aa52-a4e6825d5902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262925bd-9d65-4cd7-bf1a-4fa92af9c5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebb22d8-1742-4931-8cf6-376b63c21b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e54f8af-9cb6-4f81-8055-7c192e56c3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.13.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7a7ce9-a18b-451c-9170-d3347841691e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.16.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa08fd7-8171-4605-8168-1c43ec396ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.22.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ede764-c004-4412-afa3-6a4865c3e432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7a499f-8194-498a-9ab0-d8e45b7268bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b78c085-dcae-4be7-aee2-9c9c9b9222da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2a9e32-2127-49a5-a5cc-4ce9ed39a21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d865d5-a93d-423b-9a58-260bda92102d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9a3457-e14a-4795-825b-df47edf09b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17c91e9-f2ff-4241-9af4-e4bc182cd6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa4dcce-15c6-4b0f-9e43-563f18ae1da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86827b68-7abf-461e-9d9f-7e517fbe2259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.114.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6971ad9e-1f7a-4158-a3f5-ccb2c3d0b473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.116.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e9668-c02c-493d-9100-966d085e1f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e1e24a-a1ce-41d3-b214-a4bf51193ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c703cb-f84f-4fff-ae71-de9e565048ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d920fbb-ddc2-410e-8934-5a3934b945a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2410263a-f09f-4be6-865b-2f82031e2a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb15e696-8780-4848-949e-784cb94cc27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe586de-575d-49d9-8f77-ae9d43776ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bf4df5-3d83-4870-8b38-90f13d2f6396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1328ee3e-e966-4eaf-94c6-ca9a70ce3128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.46.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d2c541-2efa-4fee-adaa-8ae96e82ea80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.81.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1cb9da-b363-45b5-8185-fbc762b5cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6bb7ef-a35f-4e46-b1f8-c6e15c71d3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29176532-4c8b-47b2-9f4f-d4e2aebc27cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c5a013-2d37-4821-bf37-fb4839b959f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1f3543-c89d-4771-8a94-77a216a5db31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95aead4-e227-4205-908f-132cca33b375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233e5668-8d06-4e72-abbb-fb6aa81fec4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20ab0a3-e06c-45ac-a45e-0cf44a4e0fda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.58.240.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fea2752-bdfa-40e8-862a-c71d2db8efdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.113.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12813488-eae7-4458-a0bf-80260c90e775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.116.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23d2d5e-7bad-4fc1-9c14-995b619b5c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.116.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e13fd4a-585d-47d7-8ace-9d0b03ee0b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.116.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afb0349-c124-4a65-baff-9b6b6e6277f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.123.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92941a7-702c-42cc-8dbf-3e2e99a4aafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.90.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4fc7e4-ec88-4623-b950-be5ba23d9a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.91.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596bede-ef2e-4cc0-837f-d75170fc5552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a55b0d-52bb-420e-9dd6-b87965b73ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a53f9a-62e0-4886-b8b9-7735050bde58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bedc41-48b2-434a-8f5f-79ff5390136c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e842be-fa15-4483-a16b-0de73b007146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85e5ee3-c4fc-4256-b4c8-2fd4b5aaf2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef21838-8fec-4615-8cbc-17c330c1f47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d76d25-13e8-44d0-bf66-d6cae5a019fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.13.13.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d437de04-5dbd-469e-9bb4-f869653f9830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a872774d-d3d8-451a-8944-4d24c13e691f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.44.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc515bed-754c-43dd-b3ca-52d0a52087c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.45.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0ed25a-7eec-4cdb-b28d-97481b59f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.47.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9cc7ac-777d-4dda-9a66-e2da9ad22e15", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.208.201.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba941f0-c6ff-489e-91b8-37626e1897cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12e665d-67bc-4ea8-8cf5-1d77b61b3564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be57c8b-c8ed-471f-8e05-95a9adacc551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.224.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f3abac-b561-4575-8324-a79780f6017b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.247.226.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12ac9a9-c9db-4df6-85df-7750ab68a8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafcb6f7-41bd-4ef6-b688-9afd2ddbc46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bd5ef6-1086-453f-8a9a-977a87530eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e4f457-8a80-4006-a5fc-658f227490f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c50f694-0165-4457-8ec0-7c022438b43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e221af-5c4d-43a8-a9f5-37108e1d26a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae00135-d6e4-46df-9363-5e55ab27f014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42456fdd-3485-4e86-8621-d300116a5dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2c7381-78f2-45c5-ab7e-38dcb381f088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37a76df-e0f2-405f-96bf-0a076ca4bb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cf4d9e-bdb6-4285-8b89-674c4632d095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2fc2ef-3d01-4328-92a5-e931cee9b946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4cc04d-6d8c-4da2-b92c-3e55929647d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c5ab73-1b56-4277-8f97-d1331c306b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f973e385-add5-4faf-b835-525bb853a44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb74292-db70-4b2f-8515-edf900e20501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e2ca99-29e9-402c-87fc-e7eed2cff3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcea0d0d-809b-4e8c-8c5c-ac865ae42af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97b914e-e7a1-4bad-9e74-d5010e2df394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.94.6.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b21476f-1601-4b95-9a70-954d2d655acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.27.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7725bf-8fef-461f-b888-cbfaf17d8b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.3.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3607810d-96ed-4716-b8bf-6642b7065f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.8.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0751fd6b-65d3-4fe0-9e77-4634efa310ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.82.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f3624e-3ff1-49a9-84ff-dcd6a81967c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.95.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b992d7-4f9a-46d7-ab7e-99a0e77cbdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.100.53.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c6e426-ed3f-4fbb-a95b-d52e6d7df68e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.205.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb8fcde-8cbb-4832-b95d-fa2d3ad8b24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.208.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5877fd4-2b4b-4250-a04a-63c88e38e496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.195.5.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aff0b2-da12-4ccb-a546-4ae583b3ebd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.206.229.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcb4e05-21a1-44e7-a868-c1560db9a3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d333d36-864d-4d7a-843f-b20f88c7bdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.215.203.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a704b156-b9cd-4a0b-a776-3a7217f7cf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3d8b6d-d2f2-45af-bd42-33050b64dada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b27caa5-7937-4ae2-9b13-ba543e36bee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55504b0a-9f16-4dcd-b657-33faae59f871", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.113.208.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daf682b-6228-40bd-a7f5-d878ec535cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.114.189.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badffd5b-6bd6-451c-8109-a20daf8b38d1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9bbe48-5e66-4920-917f-4a13565c60c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe2392e-a3f0-46ea-beaf-8dba3e35c0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c88fa3-aaf6-4465-808a-96ae373db691", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80a26da-1b7f-4ef7-9126-2ec4f1ab1dc2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661de781-eedd-483a-8232-98aeb84fdf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040da3e8-c986-4424-9c27-11d5dc46fdb0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c3ae4e-27b1-43e1-838a-c83be6358c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.63.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39185f3d-c011-4784-8b4c-287f933b7f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.122.109.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c705d-2fcc-4357-af4e-5cbb5418a8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.122.120.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8745b8cf-2895-415c-9e00-72d89aaf4c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.6.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13c512f-2437-4c3e-9d66-e965a6ee0d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.193.243.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1376a524-adb2-428d-b1ff-23e89f6c169d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb21432-3be8-48cf-baf1-3bf09d62a672", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.51.115.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d8510a-c5d3-419f-9a59-76ce6d62eb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.52.30.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a5c433-0070-4ac0-86a7-b79f894f3c99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.52.97.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e690a1f2-01ec-4237-972f-3f0a4a91903d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.62.80.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8e680c-fd46-4b5f-a517-27894e0480c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1138329a-bc2b-40e4-b6db-04bca5502e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f19bea0-cfb0-439c-9443-63e836a889b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974d7e3b-09ba-4600-b74f-a7cf83f25537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89d8f48-ebc4-47d8-b5ce-a6873c4fea62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed817a48-04a5-424b-a398-751c512d18db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9c9e1c-9d5d-4b9d-a994-d6b0f633a200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd332467-1027-4704-af87-299977935b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510137dc-7519-40f8-a7b8-ffbd5154546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68018e65-9db4-4b56-a74e-619fe4d7c536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c5015c-5790-47a9-9550-d0523b36448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d4e813-154e-4581-b676-56c2412e8925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17525a90-9c2e-4f4e-a005-553dae485548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310c3efd-eca7-435e-ae97-9fafebec9107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65971157-e791-412f-83ab-d3f5d621f7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c19ce8-2ad6-4565-b660-2fa0008a689f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f7ad32-7fe0-4e67-b8ce-0c9c423976ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19598eb6-3a72-48d9-bb8a-e7f687303db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90978b1-73ef-497a-a68c-6afe1656a8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea92de-b1da-46c3-95cf-2bc32cc6cb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78f0dbf-2928-4d38-aae9-0ba4f07d7805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877b6e5e-edac-4945-a994-098c014184e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feba9d6f-a11c-4ceb-ace2-0aa5dc263804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207b8f4b-9c95-40d2-a23c-74390ba735ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044cf923-a552-4301-bd79-f1c1201e846f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbc89b0-0455-47d2-8ebd-a738128de22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2342b2fa-4630-4046-ada9-7d44a2be22eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b909d40d-08e0-4b24-a386-1816b7cd95ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4218063f-9954-4f07-92fe-dc8e62259b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.1.89.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cacbb52-a5b6-47cf-82eb-7be0182f3331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.13.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f99233-920e-4211-aa7e-59b3768be743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.174.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a704ad-f949-4a88-9d10-6be03a4b74be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.181.7.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d1444-db75-423b-b8ab-74f36a00392b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.229.197.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d101c2-9fe2-418c-af51-870b9744f149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.52.136.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec2f4b7-7b09-4810-b6b6-6cdfd400f399", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.87.32.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f437689a-28f4-4b14-a81b-201085f53a56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.126.231.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3adff71-cdb1-4cf1-b13f-c07e6f0fd9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.231.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52681c04-55ca-44fd-8bf6-c2c6ea6ac02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339dd9d5-8b85-4e3b-b8da-630988b799c5", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.47.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a6b81c-5b41-47e1-9e51-634002b72ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.210.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3926ca-36d0-472a-8e73-2311d52c8712", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.211.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611da415-94d1-45cb-babf-3bc3ea387748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.221.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8623c503-6c9a-46ac-9871-8b0c84bd402d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.225.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821f6c3f-3d7d-4a06-8204-9e56451f651c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.40.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400f50e0-0d4d-4f39-9d44-2c5328bbf94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.172.204.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ad5fd3-5232-4762-8539-9f0dc11a80e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.178.103.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bcc58a-7819-43fb-992c-f0031765b8dd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.185.129.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dc0df7-d85f-4869-bdf5-a4edc23b0a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aee356-6e80-4d0c-b1f1-91d2f5f9cc83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbfe503-ec73-407c-bb1b-042af74485c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.204.123.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0a854f-f905-4d84-9f63-eebb2cbe5554", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.45.130.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb757e1-c918-4066-9fe1-eba06df2bda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.83.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d401a33-ea86-4c81-9153-35df7dbec984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.17.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c8b479-5a7c-400f-8eef-9c87adf87ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.27.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1199e354-8597-4169-a901-8b4bd859897b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.24.212.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603c3e25-63b3-4c5d-811c-a020b6549ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.186.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321c8ad4-a1a0-489e-a05e-ac3b9aa5c260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.5.178.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d64a8a-2c2a-4e9d-bfde-f42e29894370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.125.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6401ad-a99d-47cd-b8cd-c83c4a0400cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.6.164.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbca9be9-7a4d-4bd7-98bf-6af15829569b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.6.74.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0c8a5e-6981-43f8-8606-dd162e1c5524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef460da6-320a-4de6-a7f3-ce79b9766951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7009c0a6-4a01-43ca-8604-99f8642a9a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9ea8bf-42e3-4b3d-8d2a-b98ed27453e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18085c7-8da7-4d49-9a36-3223200646eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b890a8-fb5a-486f-ba24-a6f0de9c144e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc329607-d89f-45cf-aad5-e0598d54e18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.40.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4460d1-c32b-40f7-a422-8b3a06d3d583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7a828a-c9d7-4349-ac56-0a1773f7dd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.163.170.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12626602-8ec6-4050-89b4-505430b58ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d612dc65-38ab-48d4-ac25-4d8c3b5d7cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3710b5-b311-4000-ae51-257f72d09d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.157.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d4eea-4a8e-4f07-b013-adf8c93705d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.208.214.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6982fc-fa7e-4753-9392-37dffa9da801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.20.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee561fa-974e-4b6b-8fde-bbab44e723e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.153.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708ea594-d9c2-48dd-92c3-79301bd21848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e4fb4c-34ad-4a6a-ae51-e550ed3f982d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ade82d8-ca4c-457e-97e1-cd1f9e582d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fa71fd-ae6d-46cf-96f4-989890479b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.232.121.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24315b6a-6803-493f-a06e-d490d9914aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.52.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412dc6cd-625a-4b73-b51d-8fda7f631f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec18890-c3e8-4903-bb62-90ceb0e0a4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.131.167.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9819637-8885-4336-9aed-87d827df7ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.219.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be3947d-046e-4af4-af24-eb680eac48e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a04055b-de14-4048-a52b-037e1a5bac65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed20ed63-9e6d-4ca3-afa0-03265d2bbac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.46.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1d8854-088f-4e93-9f83-b60bff3935f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.180.217.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fd4005-88ae-4df0-875a-271fd14e6574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.229.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7e4570-707a-432d-b633-d37f72ee7fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.194.222.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cf8cee-07ba-48a7-b838-c917da172199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.20.232.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e43062-9ffa-4f3f-aa5c-98a654332fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.200.37.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f4e2df-c197-434f-812f-fafdf411f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.213.218.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd0c7ea-4da9-4df4-9996-eff3b9dbb4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.242.15.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3b60ab-57f2-4457-b532-62068a5d2318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.245.185.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22aad05-1bf7-4500-af47-437188ad02b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.75.234.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabcd795-8c63-4e99-8639-d24f99a1cad6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.103.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d7a300-1956-4398-b07e-6a6cc19aa893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.105.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b93230c-b7fe-4910-afb0-37e00e4b11f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.116.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d863b8cb-fe49-4ffe-aeb0-80fccdeb3195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.146.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454b3941-bba4-4d30-bda4-4cc0d8d9ce83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ac25e6-2a9a-4911-8bc8-676f60e22714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.57.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d71b08a-34b2-4424-80f5-10a76add5396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.115.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa8c09c-4e96-4f59-b615-9d8b2c586bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5ac6b3-c8ac-4bd3-9113-6c4e88791452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d4f0d6-fef5-48a7-a92f-d351f7622e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2138ed5-187b-44aa-896c-8f34b3b213c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.166.208.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81de4763-d714-44da-b46c-4dd4f2a0f8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.174.229.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65e2fbd-4919-4259-a991-40c1fbf909a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.189.247.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d1e90f-1d50-417c-aff1-ce7300706947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.136.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff5d311-61e8-4b48-b881-ca95b0640aca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.224.66.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8f4b2a-f64d-4f1f-9c32-e803cb751048", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.26.246.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0ff0ad-0917-4771-87a8-b2ede6514ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.43.215.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5695cf2-99fe-4a0b-802a-fcdc0e853366", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.65.180.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a4ff72-dcdf-4e4b-8582-e16e5eeb6060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.103.210.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40dcc21e-dd67-4e92-a2f4-20cc027f3dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df40938f-3697-4f93-afae-9270b827047a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.118.64.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1c6e55-1376-44e4-968e-17959a19f249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.229.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4616fe16-d3b9-4fc2-9a63-891e1c9a4997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e25e2c-e6f6-487f-83dd-008aa0e4ded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.63.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c608fcfc-a418-4970-bedc-a7b0fc570245", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.184.211.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30deaba9-d97a-460d-bc1e-829a8ab6d198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.216.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5c30ac-5a48-4717-ba1b-ffcf5861cdce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.23.54.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0de4b5-d1fe-40fb-9ed2-44224621b26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab54169f-ffe4-4497-812a-f957cfeece1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce4d400-c6ab-495b-a4be-eef2c61b31d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d562268-5838-4e91-a859-bcaa8a540157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fbd63b-9c81-4db0-835c-86c966b393dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.40.103.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4790125d-228e-4185-a099-417ea90e78cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.76.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e265d72b-40b1-41c0-90ec-5833a1f97fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.76.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a783ca0a-41b0-4b1a-adac-a21e45985fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4341f84d-a676-450a-af1e-68e19a63555f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.22.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cc9564-137e-40fa-b244-7546b3bcbd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.202.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7460d3a0-ba48-4d62-ae92-336703a14f79", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.106.20.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcc1794-0a9e-4466-aa1d-6705f3064938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.11.229.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c41a178-b342-45fa-a376-dd2426e28146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.149.117.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f66f501-20cc-4362-bf12-98206839bfa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.152.209.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee10233-eefd-4601-8312-c1021438378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.230.204.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b205df-560f-4d5e-918b-cacc360d4170", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.252.115.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa05a537-039b-4928-9372-0eacb7edfd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.57.177.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf25e22e-59d5-4534-95af-9a344f934af6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.60.225.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed951ce-dc63-474b-a5e6-5ba13287151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.76.83.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd570e1-2a41-4e50-8062-8479dae51370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.168.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345b5f66-5c36-401f-b54b-4647735c4c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.115.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3718c0a-385a-40a0-8f0c-915f0ed972b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7655b50d-4d0c-4610-9c59-928ef9cee0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c23a4be-66f8-4027-9ed6-adca62d0ac21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd0d1e0-8b8b-46c7-9ecf-7acfc4a71fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf66b0ee-d47a-45f7-ad42-2f4ccc1d42d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61d9f38-cc87-470c-a947-e72cbd4e64fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eef0547-3dfb-4600-b2ff-e0713f43d682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9dee53-8f09-457b-9f73-cf1a7c77bf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36a2573-dab3-47fb-a947-6e651366d77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262459fb-2241-4fd2-8191-e0d4a716b52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66c4742-5ff9-4610-bb6e-a0980f9f081d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fefacdb-b849-46d8-8a0a-32d3cb09ae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdbdfe6-1836-4579-8747-6a354d6b7921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86770d59-449c-4faa-bdca-4bdd851e4a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d7d123-db28-4ffc-98ab-89e3f3f8717d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7851d731-5594-4431-96d1-e15150c21375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b60dc5d-b883-4ded-ab0e-2a02b16e050c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cebefe3-f467-42ff-adb3-3a5c1792f55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d67cc1e-bc20-44d6-b5cc-04e48351c326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f073ecfa-3093-4531-9a07-212cc9abcf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbe7bf0-4049-4c8a-9ee5-7d203398682f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1745dbe3-c9f2-4fcb-86d8-07e509baeee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c108ee-d374-4203-844e-4b7f7a20f4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd7ceff-9930-44aa-912e-0bd49cad6678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdb9280-266c-424e-ba4a-c5447614184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481a7c14-9593-4b10-85f1-a3254d9364be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28b2efa-0f2c-405b-8f45-d2faee0eed95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30036455-a894-408e-9042-d910f63cddfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323f0b96-d17d-40ae-817a-d1f7272543c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0e75b9-7fc1-429d-a1b4-6cf7b718a8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b568805-810d-4974-beb9-cdeac9bfec98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efca338-d964-4683-b2a2-b0231ad674df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72cc0bc-1f6c-45a9-b940-7ea26fab422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e322c15d-b337-4585-8c6f-eec0c4078bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591d563a-d9fa-4635-b974-2daebf9a44e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0016e27-6cfc-471a-85f8-072a902e0ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e26da76-e586-4b0d-90a7-eb2d33c3fb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dfab35-bc30-46c5-b39f-5d5d09418fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4930e13-6d88-4f29-8cf1-2bfd7b37ec2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac17ce1e-b03e-416b-8aa7-c0124e7f07c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bd59bb-9f39-4466-b17a-7608cb583505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba585560-e646-4b7d-8174-fb34e17fa334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a2e073-7b4c-43a6-85f4-13c132ea8e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb7d691-9236-479f-81bb-754ae141005a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c18b6-8dc6-42f0-a877-d62cdd2a2cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d375e183-927a-471c-b575-0851e3eb3cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7725e62-f9d4-43eb-9f2d-0666adfd8eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85409ade-1f39-493b-865e-645eadec5a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8adf63-b909-4ab2-8f86-daf18f89df8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8157a3-e848-4a02-98df-2a02b02bfe20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d766a9-8c89-492f-9772-f8f89a99ab56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ec2f2c-cc0d-4455-9144-9ee4dad83766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae74411-ba8e-486e-875a-22e0e80fcacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2276d8f3-ca0d-42a2-a7d3-8a96416d8f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00bf032-2a5b-42b1-bbad-e8c408d0580b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7311d48e-afad-41ec-bc25-c86fe67bf999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aaa730-038a-4d97-bef1-22ee44093be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8acd82-6a4a-4077-9f60-fd0452d61252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e9a8ab-b062-47d1-903f-3a21c5631dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506f1c60-92a1-4daf-9c0d-f69d29e0a282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b0ee6a-756d-4b56-abe6-0454eee6bb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb63f01-c088-401e-a5da-7652836da6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d51e0d-9068-4d83-88f3-a3427ec8868f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216aa210-0ee6-4232-be04-e0b9d31cd8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd18f2d0-112c-4733-8c51-15aa3243dad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f6d102-ea5c-4b9f-abac-1817458b2e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10fbc63-2839-4ee8-af24-f3ffec2e2d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252cec7f-3b6b-4fcb-85af-503729727d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.160.169.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb30801-df97-414e-b476-c6d98e3a352b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.22.135.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2913610-1b12-45c9-8132-3442dc82e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.121.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efeb93b7-1612-494c-a030-d962e6ff130b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2f821b-67be-4501-8f85-84a08cad0590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.104.184.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4ca37c-c3b2-4770-837e-c455c17567d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.29.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa15b7e4-53fc-400a-b3e9-522faef7f7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d54736-9098-4ce0-8231-5e3acc74f47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f30fe9-b234-4953-9f98-dce9c4cf2566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516a6d42-3c38-43bb-80b4-b1d25fc7c1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6041814-5154-4bbd-91ce-072bd9301b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bbf0fa-1979-4a39-9944-f4a7fb626f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb8c54-fa27-4b31-a18e-9dcccf2efb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.138.196.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7f630e-c419-4f22-bd73-f54f9755d1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.4.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad74d81d-de89-4bdb-bd62-180232500328", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.151.84.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec2f28a-ed60-4d7e-a0be-89700bbab37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.171.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f95aa76-ec29-4909-b9d0-d95ab8f9ec91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.168.196.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f16d35a-c9fe-47ad-a9fa-6e8657d120da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc7e76e-cfe4-4825-9878-cbcd0343de2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae89dce-e095-4670-b9ce-7b9c4139cefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.127.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72db38c-5de0-4354-ba48-d111063dfde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aed847-7ed7-41cd-8762-caaefdc0eac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ace3d9-7ca7-4d4d-909b-62fedaf7259b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbd14f6-428b-4cbd-9481-38d0b573a6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fe280e-a92a-4982-b06a-9532740f5221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffd17bc-d1d2-4dd6-b83d-99af4a40a928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ba4186-ffc4-4456-86bc-12e0f2a8a559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410207e8-1c6b-4008-9c34-84feaf0ec2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce1de7d-3c47-43fa-9654-99e70cda2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43045d5-5457-4478-b360-63598f3b7153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.182.217.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a03b93-1a39-457d-b1d0-51c2649bab96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39bc5e6-4145-44b9-96f9-119adff796f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d721ed95-cc29-499b-acbd-9f9aa9a9e979", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2e645b-d25e-44a5-be30-7df213271f35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241553cc-e5e1-40c7-861b-f6d040005e09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac89d0f-bf75-4c8d-a35d-9d50c62bcc9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d15e31-a6f8-42af-b15d-783b3f507c97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3850f9-16e2-492f-95f7-f81114a29f16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175db251-a515-478e-8fad-809dd0159ff3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aff8ac0-f14b-4bc2-9483-4aec6abd44f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c94955e-0fc2-49fe-8ce0-f3f15624f726", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4490fcc5-19f6-42c1-913b-41cd303e996f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0226d159-742d-40ea-9cbc-ac6c1ed0646d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ee1050-c6aa-4593-9072-8d08cdd4cb11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34461f19-11bf-43fe-b52c-e4aaf1e5a773", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434067b1-3840-43bf-abdb-27097e5a030c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce593ba-c7f0-4292-afb9-d29b78d81024", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c770b9a0-2e08-4b2f-882b-5974805d02b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b232f-b05d-4c1c-9a11-193a292523b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5583c2a-3592-409f-8395-3c0482765a6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1fa6b7-e065-44ac-8218-b26ef02c80c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61456a95-3eff-4e74-a6af-bcbb8368dd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f6aa23-619d-4ba7-8451-faba44c1f059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0d8b82-9e78-48cc-9bf8-e988e70d21a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7470ac00-a13a-4294-930d-c20b68ef3f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29047b78-b270-4bd4-9afd-62758b236e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49403272-54c5-4580-90de-cba73e75d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48062fe4-a68f-438d-89f7-c524ef740a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.36.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6652877-ca71-47ab-81eb-d8b7bdf2cfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.209.196.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b386ca13-4bc0-41c7-82bd-d5beaef6dc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e67bbf5-8b04-40d4-a8a9-e4764ba64b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427bb615-f4f5-4aae-b712-93c1a027d057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfaa3cd9-9df1-48c5-a65c-0229f33745d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f18cc4-5106-49e6-9d54-92c9b0115870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5470a94-40f8-4f99-94fc-666fea3a1ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b09cab8-5610-4438-b552-369e008b12d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af9588b-bfd9-4d6d-848f-d0ca0a253e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8c0ba7-d375-4fb0-95f7-9f7aaf6e2efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed63c40-1e03-413a-9c71-74f8240fe5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525270fe-00c7-47ca-b825-c608644898f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b794a63-9e3a-42e3-a713-5517218e0405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4802f53e-336c-4bf6-97b9-ad5e8c602422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12652e8c-b90a-4c39-9cfe-ab3759e9e436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a31c963-adbe-4370-b14c-1815ef01cea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e204a5-cb3a-4ac5-b5db-537555af2a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8e3b5b-091c-490b-bf5d-c21e2b320601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6426ef8-0f50-4de0-8ba3-bdadaf76972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf58b22-d459-45cc-94e3-5a1eb043a73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7072c09-fc30-4fe0-9584-e76564892510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af0747e-445d-4660-bcb3-4668a11241bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfee2a6c-5696-42d6-a877-135e9d9587e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6fe982-06a2-451e-91db-f056a8a8bf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4994195-d186-4aed-9f66-ee05e7a10476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c95aed-02e0-4f3d-b37c-83ff142b3ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685e0962-9be1-46dd-b525-217150f8c0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6085f1c3-75d2-4fe7-acbc-3b0331995de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb0c151-8deb-4ac5-b6f3-229d6295a78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e734c4-e44e-468d-a11a-a3c8cb1e2f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37677d4e-32e7-4801-8e5d-f22b798daf0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63560b0-fd1c-46ba-9ae3-50397b5ddede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f549bdde-770a-4322-9798-cb19a7371d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6f2c81-2a8d-432e-ac12-86380a838550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd198807-45e7-45fe-921c-b5f04b9f7e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78d8d19-e079-42b9-b409-2cacc56d9282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501da9e6-2e5d-4b84-974a-1fd403d32655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c461b06-fb84-42bd-91e3-ed4050d39ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621dd4a1-7d60-4117-9809-18abfdb6a5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97492e3d-48e5-420e-9180-6ce9c2fb037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97479f5d-1ea0-4eeb-99a1-49010095420a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.152.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8689d7-4917-4d3e-8926-1791cea318f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac021cc-ef6d-4f0a-9080-8b7d5a070e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d70549-43e6-48f6-80b2-388a169ae75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd40760-5e43-4411-82f3-5b0f9100725f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4365e36e-4ae4-4c5f-bd63-7df7accc1b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675ffd9d-d9e4-4f4c-87eb-e7b64b457b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d64ab66-ae3a-443d-8b44-8e2025d690d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ce1aed-59bf-421d-8283-16f2d0efa9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff04de9-632f-4cba-8af8-53ace55fb9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a238d829-f488-4382-8297-b2b36fb5cbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffa9437-20aa-45e2-909d-4acf83357d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d7f9b7-d0d7-4259-948a-bbbfaa0e44e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf23b4-9df9-46c9-85b7-adc020ddb978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf00e8e-34a0-48eb-9243-072fdef9161c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.231.33.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba705b6-c51d-4cc8-ad2f-7aff29082178", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.247.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caab400e-8227-4753-9028-a1bb74d106f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.234.63.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d7766-6e19-4adf-93fd-9acd09cd246d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318f8a56-e1e7-4aa3-85c2-24edb44591bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2f692e-f2dd-49f4-b740-cd2fbfde984d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05552ef3-9cd2-4e42-8791-1d450d8311a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b235527-6bff-4b6a-beac-ebbdd13e0afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ce3779-78ac-46db-b741-2ffb64d9179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc896995-9d70-42ae-918d-2ee57f4b6231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffe163a-0650-491c-8cde-13bf0f35cfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed80c8c5-ee46-4089-9b90-c01678a11a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e5dc26-825e-408c-b528-6d273a708415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dca342-f005-4dc9-92a3-1980121e4431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6551a65f-7dce-4559-9b2f-b0178b7c6803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8e37da-2fc5-4175-ba68-8af29bf7dfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5096a337-956b-4ddf-b088-1a3244dab845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f36b0fa-62fb-4142-83a7-ab98da52bf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56c4e90-21c1-43a0-af64-10d8e664a4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedfa886-1ff8-4cde-9e5c-513e3155a5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc427e0-8c78-455f-bc95-c2ff70b6d2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d289e2cd-510b-4336-9f87-c33e4d5f24c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8194a8-c541-4d54-9e2c-706ea309c719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1ab89-caff-416c-959b-c2f1c43da4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4850601-34ca-491f-8d73-d6e1228b9f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9019b13-ac93-416c-b582-5a7dfdf76136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cac1945-9c03-4d3b-a7f3-e40e10fbde81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307cbcb2-7553-449b-8131-5069775f5abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d283b3-8692-4dbc-a655-e9c9b400d2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc6cfea-59ae-4929-aa03-ca678fc3c8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2201577a-59c7-4b0b-a82b-92acf62ae571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd63423-2168-418f-a32f-c6bebf6b2db4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54650e8f-7498-4b58-a865-e2e5a93f9299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1447cb-c124-4e3f-a11e-da0d8f43d3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5b9c91-bf39-408d-8bb0-06ea35f6eab8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3c98a5-d950-4994-b180-8b8348afd7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fbd1e2-84ba-4b54-906b-502e941b5ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e8adff-5814-4a3a-b237-736228efd321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.34.106.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef41e2f-0b7d-47f7-b865-9a9d577fe237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.34.108.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d063e5-a7ad-4c40-9945-5deccac12171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b30084-917c-4f73-8dab-712aefaeddc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.66.88.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abc5d81-f7bd-48b2-b6c8-e50b268ce73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d85086-b59d-4b1c-8e6c-1ad7ef3fa0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec945bee-af73-4e5c-9149-d7f24c5f143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7caf12-d5f2-496e-8342-a6cd3940ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ac4f16-0aa3-4994-aec8-87a4bfecf7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e3c9e4-0e2c-432e-adc0-4a08cc2825e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133f2040-c7c9-422e-89f1-9a606e1e6e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efb179c-330d-4cb8-9856-7967cef45c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533ca672-4363-43e0-9677-18491cf4f9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0c7d4c-7685-4337-8cfc-fef8dbf409ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf93895-7908-40ee-bb8d-327cc23d3afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67654acb-be19-4973-8592-35796ff3d096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b752f6-cc3d-4c62-b5e0-7dce98941ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068defa7-1a75-40e0-a891-2f5cf87d4358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550fb328-2025-4ca3-9f9a-254b4c5bf353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293e7ed0-b0e3-48a9-b872-0dea3902e01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb3318-cf90-45a7-8193-c16435ed7d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134cf67b-8153-4c57-940d-c4d2fd856fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfda4e4f-22cc-4cf7-83e3-920db87c1ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0373f3f4-62d7-4816-b0b1-9f56a36c8ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d67cca-6e4c-4b98-8304-272640b6fb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f6e7ea-f9d2-4241-8c60-c05eea414d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b60463-7749-4c00-90c5-ce79277e6b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01033800-fca7-4b8a-bbf8-c97af7841492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e9fcb1-59a6-48dc-9aa5-d912e6b49b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae679f90-d0e9-43f2-96ca-0eca6bd0c032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26ff8fe-2d77-49b1-8bce-730a0ea8ffdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2444798e-becd-49fd-9128-45c68f072ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0293cead-27fd-46ae-8fb1-4d08104e632c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8e89f0-6120-4439-87c5-9b160553cad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9550fbd1-9a2e-4569-9f45-79abf289477d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcef6487-4ec0-4a59-982e-b8cad7d9c6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b195376-7354-4866-9c73-552520f24f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a8b963-5656-40fb-a746-0c4537055136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f61995-df84-4f83-aa80-cf982f3f8fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95db201-448d-4a55-8a64-f08f9576cf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13445036-e9cf-4479-acec-f7650af71833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c573acb-84b6-4404-8aa4-de4f08df890f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b489e23b-4330-461a-9560-53daf74caa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38ca222-cd92-44bd-9099-dbc1df84b8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05639714-babe-4443-a87f-fb73aeda182d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b995a6a-88ee-4773-a524-a7e3bf7514b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31780896-cf82-44e2-b775-8e621ba14b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaaf84f-f695-47a2-b6df-736ed1e5c17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16c4852-cc9b-4f7d-af34-5973223a07de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ad9b24-1c58-45d4-9c74-5d3581769f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5413c2-53f2-420e-b6a9-4dab07d6a674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf22f40-f4bb-4b70-872d-ecd1c8a35060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715c30b2-5063-4190-94b5-71ff1a551a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e444c8-f7a5-48dc-942c-ed1ed408824c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb7982f-9ee2-466f-b4f4-a280c9a6cab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5428ad95-6e69-467c-a6ac-843eabb81177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b68b2c3-d953-471b-8a02-6326aa7b62b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c66f773-d70e-4d6c-9b18-211fd8e8e75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373fc0cf-156d-404f-a43e-66bfb088c476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04807f7-5645-4f4a-a81a-9d8e39443ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f466a5d-1ef1-4fa5-9527-81203fc3963d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95e80a4-51d8-4273-a720-4d2a81a06f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4440adc0-5480-432a-a3db-103e10a82f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f910e4-fded-43c2-a7a8-9587e00f4ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b0f5de-f37a-4b85-9265-1de8459e08c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b585fb7-89c5-4fab-8fce-37e04a3873de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e166cef-5ceb-4af0-8002-4178957a7c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fcd66c-5b77-4c36-b372-eb11af081d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f978e494-9ac7-4f76-b2ed-8867496805a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd06caf5-06aa-464e-963a-83d65b9f21ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5fe56e-d5d3-46b7-a062-64e81260b1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacd599e-8ece-41d5-9893-84c3ecca7668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f770be-91ec-42d5-a497-7584a1d02b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6f31b5-29c3-44d1-8362-3a78728aa351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d05b7c-6c2a-4901-b800-a44b027cdc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fd6ec1-cef0-4328-996e-dda9b08e4a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed7cdda-c624-43cc-b39b-72a558278504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66ab2e5-73dc-4f80-8cf9-61a4c105f868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c5f321-9358-4bbd-bba7-1f8ef0fe7ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0b33b0-7c24-43e5-9720-38c11de87deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ad83a1-dfa0-4a95-b5bd-6a2d25b4ffa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de60bf3d-bdd8-4813-a4f2-0ae673ee371c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be25625-c73b-4134-a5f8-b0a9103db4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eafe69c-bf9f-42bc-a7a6-9772bf92e9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1b4230-14c7-4c3f-8287-e85444c783f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e810d201-d59c-40d3-8c77-3130a8c6d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346d3c7b-6c2a-42a6-a010-83719251eaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ba82c6-e40c-4577-a2b4-c2e4cbd6d6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e57820e-f2a3-41cc-be77-a55a2ab547b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee434f4-0a7c-43f8-949c-a629e279ecfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354db6f6-8175-4f92-9e2d-0da5e73a5800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d283ef6-ed96-4ade-acc0-2cfd6008be5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d69402-ec5f-4150-b73b-35e20343acda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a779d79f-020e-467d-ac67-691dd36f6de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070e99eb-c334-4f8e-b5e5-bf7cd8750611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11638f05-db95-4df0-8f8f-16f7fd176f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faaeb945-a322-4447-b170-09bb7b20c7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789f2397-9d59-4d46-aeed-3047682d1acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d6fcc8-f09c-418e-8b7d-4f70694d6ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8374832f-4421-4111-b434-ef2bab6c144e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290f2a6d-999f-460c-8417-37fc965fb306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef150d3b-5a8f-4bdb-96be-9ea1a7d16388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3864e11-2cad-4c80-93c5-74d6fbadfcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3370d6f-810a-4265-abb2-16718f40b6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bc5717-a8ec-4b3e-8f6d-4ae972ea5263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bc5ec4-881b-4841-b16f-dac47dea6dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f28c94c-893d-4cfd-a54d-973a124fbf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7daba1-84aa-4e35-8d21-7c8325164d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b07f198-1684-4faa-b817-8a73710519e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60a271d-cd62-4c11-8b16-6c53f084900e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4034c2c-73d0-4876-a0ad-81461e182ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a091893d-ab16-4b7b-b85d-b61b545bcfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7f09c2-d453-49ec-b1bb-4b8fb5550951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e772e4-aa9b-4f3d-b653-d2dd3b0b2218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7352f9-e881-41ac-99a0-aaf4c0ad6bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b069bb-7a0b-4b37-9a7f-f365e67fa03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34be93c-6753-414b-a9d4-c74f4d511e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3af671-1bce-4e6c-8775-1e85136b0495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a620b976-6d49-48f2-84fd-413aadedb2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fe834a-49d5-491e-a30c-c0fbf4092b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7e2694-c989-4e34-ba46-471cec4a5e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507aeb8b-3dbf-4abe-8d09-6bf89e38ad68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca21322-0a63-40c7-9535-a1ebf93873b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023000b1-325f-4a28-8dd3-59e99a566c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f478ea-1359-43cc-811d-bf484808f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ad16b7-33a4-4cd9-91b0-7b2f9a1df208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963143e2-c819-4c6f-9c04-60c3f40b705a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b25921-0534-4c06-a4d1-6147ea0b020b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdf0c54-60a9-4f7e-a9ce-ddbac52b70c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a384b53-c5b2-42fd-ac8e-6dd08c955fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fec49d6-bd9b-4f24-b4a7-df130b3063f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5b7e49-855d-48c8-972d-64d68ddbb809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f581547c-4553-4dba-8fec-8a0d2e4f96a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb38a99-f35c-4024-a263-856e41b6104e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bbef01-6bbc-4a1c-b057-235b98e094e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b76bceb-4e8b-4b9a-b980-cb6e95b367b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587f6bea-41b9-4c07-bdaf-9fef3c18b03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6a018d-221b-4c6e-bae3-48551fbe6c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8ed8f3-8724-43ef-bde9-a05c77b80fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02abba8-84ae-4417-87ab-45cc81e45996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11db751-0718-49d5-bb86-d56c5c44284e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0724157-b527-4712-a387-dee77d13aa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd588a0e-5a4f-48da-82c4-4bc6101525ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dfde0c-b989-4c88-97b4-d68138905c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e120bc7f-fb69-438d-bf3b-b74709f939cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef347c-9a13-447a-ab25-d94474649a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5134bfbc-a23f-46d8-a868-141230cbb281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e35d9d-46b2-4468-a2fe-719fa0886d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f1a125-dc2c-43e3-b500-70ff86081122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdda09c4-9369-48cd-aba4-507ea569a7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d47615c-831c-4860-bf66-7faaf7e2fa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080ec188-7933-4734-b417-3b1e86f6be92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff8686d-dfaf-4acb-ab38-be95314574a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0210abe4-214c-40f2-acc1-0e31acaa9fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91c1734-bd56-4076-9dee-e026ff2007de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3602187-cf74-436f-a5ba-6354fce7ff41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03523639-5d14-4527-8341-409cd85c5c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8287a27b-066d-420f-8f42-ec4a1656e829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb91098-eb9f-41bf-a8a2-daf83dd9203f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce4aea9-a314-4aab-af5b-cdde6b24f2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3598986d-6c80-4e59-8451-d27fc20205fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ddaeb3-1aad-42e5-980f-db41ee327725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4e6c33-43cf-4862-b88a-b0e9b2ad607a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111cec37-9e27-4bb3-a45e-710d95581005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984134a1-1d97-4a48-8cf5-cadcd6c85cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537341db-0275-4a9f-870b-31a80a8d94aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf06213-37d9-4c5a-9a82-61544b4b684c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956f434f-ef01-4db3-b1d3-2005cf099ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ddc36f-59aa-404a-9b2e-5bf8ecbb2a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d235249-7ecc-4d18-84b6-cae9d7481bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7749aac3-64e3-47f2-98d7-8f067c549003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df004408-e22f-45d5-9638-6344b127ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea2eb55-3ea5-4703-a800-3576ba93d97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a626c2-8d31-42dd-9158-860a208be634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dbce82-6527-4e3e-bd3e-a96c523370b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832f0e7f-c80d-405f-ab7d-436c8b5b7a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2c1d84-0ee5-40e2-8378-090c32ca1eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0c2bd4-18e2-43ec-8d19-fe17e2612d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537f4cac-fc64-414b-9cd0-5a9ed78d2c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992550f6-8402-4f35-9082-2aad90bfdfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e689b7-facb-4b5c-a735-c7fab6e43c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3375f4a8-85c7-4a34-aa92-6a850e8eee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38de4e6a-a2c2-43e5-b4ba-2128806e6943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1016cf55-7d4e-4ec4-b20b-804bb926128c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b45024-09fa-49e0-b78e-7ab8547cae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6233c014-d6ca-4c26-966f-b2c9aff123fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886b3e67-cca6-4eba-9165-3debf020df92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a23e932-63aa-471d-996d-b2f865f766ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a823879a-457a-4e44-a6a6-1d6e6f7a4ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d8ba95-20b9-4eab-9bbb-33cb86f6c5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568a3341-328e-4d64-b3f1-88ff4d76be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287449c5-be97-4c41-b6a7-f82b9a5e58a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6059cf4a-ad17-443b-acb2-5628f2754c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549b36c5-b718-447a-b4c8-c7f8817c6722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c602c2f6-80d3-4ba9-b48e-c733fde967a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3fa6d0-751c-4d65-a63e-a56d4b2b8665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c60b37c-ccd5-4606-81f8-8887f5ff58a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87ce36c-8577-49d1-bae7-3e84056e1330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15e87f1-c236-474a-9748-d7bd0d114faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61748d7-3ad7-4779-a599-beddb96f23ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4669892d-09ef-4d5a-bca9-7d7d66f75c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9102021a-0396-42ce-82e9-8dd4b4af52a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cff35a1-c2c0-4607-a2c1-86fd0f6dde34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6cdecd-53e7-4df7-ab3d-8a5f97f7381a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be97fa-0815-45a2-9a82-e93407c7b2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bd0509-d3e6-4c50-a29c-12c96bab741d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5649c76-a760-45db-9a13-31cc46594e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b533ea-06db-4308-8931-67ce86754c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e643e3-5b98-4cb7-8bd7-31f7c8093a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bf4f44-3226-4ff7-8707-5845fc1dbb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046b3ba9-44db-4fe9-bd59-cb3f42c8c6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c865f8-487a-429c-9b02-49e8c3fa237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaec4ae-816f-428a-91a0-e3431633fe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b88d1fc-a1dc-4921-bd31-918a53915b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6470e9ee-ca9c-43b1-a5ea-4c80739fa22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8066a9b0-3c4a-4312-8166-6529bfea61a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af0592c-840f-4f1f-a178-afda53c1de3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceaf0b3-04a5-4ae8-af6b-982c1a607c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9393e68-253f-4617-9036-7bc606a965b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4415e18a-fe80-4c0d-82a9-9c56ef416859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac6c63a-a3c8-4b27-9f0f-ace77774799e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c01009-a417-40ed-9fda-7351bc0063ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0eceb2-f25a-499b-9614-bcde3f1f86d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f1a080-b50a-4527-be9c-fadb1a5c19cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e199463-014b-4eba-9016-033a2c25f0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52e1064-af89-48d0-b43c-bbf5b81bf65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6a1477-5493-42a9-9618-186baa523f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc2ac1-fb29-4835-ab32-4bdfe4f6e5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b52e09-4ce1-439d-a02c-797eb155ca30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69fb261-2d3f-44d4-a0aa-e3ac08809009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c855a3c2-08ed-47ef-afc1-89a983f6553c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad1e648-c8a5-43b9-8a24-353acc833b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cb1251-7a93-400e-a4da-c527ffec57a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b07be6f-c391-4a86-b9af-14d3c0813d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ed0f9e-93f8-4183-a339-493f9a7e42d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2b1c7c-e3a6-4e4a-929c-ca05d7694d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23b1855-b80a-490a-9f68-f5d6414ca702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1dc448-d0d2-4d9e-9a05-e827dc233836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187814ad-ff03-457c-99cd-630c9d33cacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f61e16-2bed-48ec-84fc-2b96d1aaeeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b36b2c2-b53f-449d-8e5a-e9193b9098a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f348223-316e-4395-9307-5fd56f2d9ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9681ef04-25fe-4aaa-8298-12435ff1f2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cccc4b-d0f6-490e-bab6-2fd11500582a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b610f8-4aaa-4cc0-95d7-761ff17b59a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3866b32f-1370-4891-97dc-30d872c7378d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef1603f-e912-4c61-9c2e-63bf1a508068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c551f88-5919-4aaa-90f9-9743afb96c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1821f-16e1-44fa-a20a-4e37c0f9c091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e809f7b-fb45-40c8-8032-cf3b06f2a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb26806-950b-4b7e-8dc4-eeb186b2bfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3932db6-0fc5-420a-9099-9050dff9c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a5462d-5558-43ca-abf1-8ebd8da74090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c69659-cad0-40a4-86ba-6a752973b674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357a1bbc-34dc-472f-98a7-1f9e5670cfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0e75f-b84d-4ea3-977f-f68450d89652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.180.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e2f21d-abfb-446a-98cb-6eea735e0b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf4b60c-b11f-4766-a4b9-1ae808342dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caf7e19-0880-46d6-b14b-c843cb01367c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4615657f-9032-45f6-bcd2-bf7ce2c3a84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3ee56e-f331-4b95-a591-d06de3f49582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0321da3a-cc69-4860-89ff-3b17cb69c678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5e528d-0883-4555-b2a8-efdc15ac5b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529673c6-26f7-44e2-b792-6bbe9ab42e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d6e880-b0dc-47ce-a511-dc4c554088a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cfb279-dc33-49cc-a7a8-a17e57a8657a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2ecfba-28c5-403b-9336-ba4b64925173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a7bd66-1fae-4d66-806e-bc8fd830026d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcaf00a-813c-4a19-8e7c-bce66f577af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c86edf-7f57-4f77-9499-5e4ae30f3657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c86f0a8-a6bd-4287-b55f-eb5bce74fca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2876d8aa-15ad-487a-8e16-cef88c990192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132e4f6b-e933-43e2-885d-ba5df1905420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce27653e-4288-40b6-a36a-5e83bcf1c0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de78d557-c6d0-48d2-9ad5-e688837a1199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac669219-6405-4b77-9bf6-13c7f3586d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1bc122-c211-49ed-a8df-986fc92a8a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a22e02-7f24-4c19-b050-14286c789634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac65fe50-909a-40ae-8a28-040c3010af6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493c3202-7cbe-455f-bd4b-f0dab85faf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e3c083-e430-4875-b7d9-7c36eb7f2030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b935688d-b40f-4ee9-ae56-ee58296bd2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743d4d97-efe9-43e8-8261-34a377f40539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7effce0d-b957-4531-957b-54b8369fea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784c4b08-945c-4cd5-82c4-c9b59289ff49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b159a9b8-a057-4418-9bb7-b059a2431d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc503755-0706-4871-85f2-ebfcdd43ef81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f297eef-948e-4c26-b4ff-09f8fbfafb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c121ce-96b5-486c-a145-809b0c1bc0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc72d0d-9ff6-4908-ad8b-3f52cb716b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da62afa9-c4e6-41ce-8e09-b027fdbe8f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9941595b-645a-4c68-a74d-927801000f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0b6f9c-f384-43e2-beda-9422a48331ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2210546-0b5e-461b-89dc-4da31cba63ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2bb72e-e85c-4a5d-988d-8e16466818b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb51960-2e8c-4cc7-8259-2dc0efd78acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e171e-0d3f-4a0a-91a9-cb6d0be197f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b87fd3-60e3-4b2d-beca-d2d355d0eb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a09c30-c07e-4051-a25d-36805fe4a65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cdd8d3-621b-4518-b478-107188c12f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8354ae-549b-47f2-a7e7-ada8f1112068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bb289a-7ba4-4717-87e9-a0b2eda5c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb75b26-b083-43e0-ad44-624a892b1337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54c8cd2-f4ff-4ae2-b4c5-8001d100adf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6228101e-6dd9-4165-97e3-0a3b2648cd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7516d307-a4a1-4924-90c7-a707904af84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608a98d-5cd8-4aee-ad94-82ec4725d484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d218fd-7aaa-44c4-9073-dbbbfd323817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c216059-db3c-41b5-8ee0-73d8828a04b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921e5bec-9087-454f-aa27-2e81d2ff999d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e074ad-5743-4993-9eb9-969a775a656f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614e41b0-73d7-412f-9fb1-ccff5e4ae6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f9e04d-d210-476b-85a8-ac117fcf1da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc28a05-dc9b-48ef-8734-b8a320e05527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b0c227-2151-4961-a4bd-7e96230fa4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e58519-a3ba-48ec-9ef1-a0722e231a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed5c14f-7ad1-42e3-b8f6-968e38fc2559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d3a70b-c55c-4c23-81e3-8684517d4858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f76dfb-7848-4a5d-aed8-2b5d029832bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6737d4d0-44e0-496f-b1be-8741c2abfe7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c508f40f-9a00-4b72-aa08-e956fe789d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f469cffb-1a15-45e9-b9af-7dbea42c6714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ccb301-57d8-4047-9326-056ad965ad08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024e0a85-1e58-45ed-a639-0382484ec0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6671a3-7a3b-41fc-8d33-2fb1ec46f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d9bcd1-d04d-4034-a009-25d53371886f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54fb5fb-708f-4cd2-92e8-8cbbca650797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21b239c-3eac-4a48-8ac4-114c1eb241f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e634266-fed1-4a20-8f0a-66e0d3b77d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1321fd5-ab94-4d15-80f0-35209656bef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0874eb-cfdf-4de6-939c-292e4ef33d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb59d463-4a90-44e2-930a-1a62f369a991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6ef190-1757-43da-90f2-f19fcbbd40e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd02d608-a321-4895-85e0-5f15d6ef1700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61966cf3-5206-4713-8deb-1861eec570b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30208106-7956-474b-8e04-de79097b8edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5058f6a8-5491-4e99-b084-81845d0bcc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef54ed2a-ca0a-4cf5-aadf-9285d8e5b08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07fefff-5bdb-4c27-a7db-4e2a721bf1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25219bb7-8796-42e8-adbe-273bb26b061d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d634e53-b664-4491-b296-9e759a644f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd56c4-cc6c-4993-991d-210d7d2b4482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a554dd3-bf43-480b-8470-4e6358491afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5144d918-4db9-4ef3-9e75-46cbb5bd6cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b31296-4b19-4c6f-92a7-0d329afd9049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80d055e-e6c1-4623-8de2-d919292c471e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9775033-aa27-4a1a-8f3c-4c28dfa92b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e18a80a-454e-4a4e-98c9-59923a199615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6ce734-f10a-485c-a845-faea13764b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5fd859-a2de-475d-a83c-644385526fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6fe7d5-c598-4fff-b0ff-dcd711c79fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cab5c8-eff2-4764-a154-dc6bf21622a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e429a57f-9c37-4b14-b6d1-26b3f4bf759b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d636bd-f51e-4fdc-8b43-900b283b230f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0292ad7-45f9-47dd-8cc7-956badd846cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a3cba-8c67-4396-a969-da1a229103ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdbbe73-3021-483e-a29d-e1a06345ce76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8870f8-b52e-492e-83b5-33fe7af69c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e729a-9018-433f-aaea-85f45a88eda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceea03aa-6115-4e41-9da7-614009f49c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7b7d75-13c7-4f4b-8bd8-4e704ba53f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e3045b-a13d-4c4f-bbb1-7f940efb61d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c437e4e-3830-4a7f-a3a9-afe42094e871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fbb678-64a3-49a7-a9f4-9d0fe6371e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc90a5c-63ef-44c6-95df-62c8fc02aff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a663198-5b72-4fac-be9d-b94f06fd376a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017f09b0-954f-49e8-8f95-edf5ceeb27aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab0f93-d95f-4133-b31d-514768ed2081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3768bf2-b5cb-49ac-8fa5-4d11e3b27837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99324761-32b2-4dce-99f3-a602f28658d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dfb548-d113-476b-86b0-8aed25eda221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8bdb02-9963-4c5b-886c-bb48bc0c84ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90947b5d-f6ad-4dec-b195-47474cbc9a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb18794-ad20-412d-b781-f2a1c1f604d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c945ee16-04a7-4c44-b967-e08d2b2ba158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb3613c-43f7-4e73-a6a5-d120aac87e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4955c0cc-c287-4d0b-8754-02ee56ef9443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9315d426-2fac-4550-9d9d-7d7883aaf9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be2d811-40e0-404c-aee4-811de17c3195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d54c09-9ab6-48a6-a96e-029dccc00c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51de1faf-604b-431f-8de9-133b4c9bfb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b65e6d-65cb-4aa4-ba3d-f40306660d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cdaa5f-0130-4452-9549-ce25ee19e06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0456f413-38da-4dcd-ae76-fc9a1e65926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1c1b5b-cd49-488c-b731-56af0606c076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ccf943-3f62-47d8-a09c-36c8b995907d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceb1fb4-efab-46db-8ccc-09717e72603b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a2bff0-bd02-4d30-a08e-e9d15df66e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cf5d53-a1c9-4cd4-9953-b3601e3ee0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81e9ba8-400a-4d04-8681-b4730b65d7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a8ff43-8728-4815-a4ac-e96db36fb7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee22914-bbd0-4450-8f6d-50b9b3750909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e896dd56-d6c6-4018-b1d0-48d043e2bbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10d638e-9fb6-40d8-a444-f3d9fcbc1561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e450f8ce-d302-4ee7-9bc0-ba4eac3b122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f74cc43-6492-4136-a873-9e0b387c1932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2bec41-3b95-4f65-837f-aa6e049857ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899cdef6-e613-4ee3-b9d7-973b3d1b6daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50620dc4-f276-4404-96f8-e62539de19d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cdca02-7b60-4942-aeea-dd6c0e86b01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7653c406-e5ef-463e-ab78-0dd075be20c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a77f4d8-7fd0-41f9-ab9b-c07abbb9e4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5af38d0-b7b4-4ceb-a358-638d708ccbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f82c50-535e-4ea2-b4ea-11e41f197dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a42857-dbc8-43dc-99c8-14d6557d9a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c5751f-c830-4358-a968-4f6d9694ee03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6a3bdb-b962-40b5-b412-6c8d111b2a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1814af-95c6-4c02-bdab-f38cd16b98aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60edc6a7-6592-4398-8163-58329ec30ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398ee756-658a-46b2-ad87-1ba48898aabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad26617a-52a1-46bd-b85c-da97626dcb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c74f281-8f3f-4fee-ba54-7b8006d1094a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5963c986-cabe-402d-9472-497a1535c9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5727a85-ef9c-465d-a55a-b0099eded3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29f3bdb-9a43-4aac-995e-59b4417ac5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d785aa5b-c946-492d-9b01-6e63c671be05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af590258-6083-4242-882e-9d753baaf3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a063b7-e21c-4b0f-a812-26a8c8947b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4f7781-1eac-48a4-8bf0-7eae1e2f86e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601e858f-2586-4f97-bf55-a72169813784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30d9f8d-fa9d-4877-99a8-8f90d93c1b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c1b49-92bf-4266-b2b2-01fa3ae5807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06df62e0-8db9-47c1-96bd-e2bda5a38ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4d14bd-c1a5-4b99-a039-bdb1f3604230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e4c455-4e98-4293-b434-c44f5739757f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc59f8bd-a9fc-436a-9f2a-2f41369ad892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a089ac-7c07-4262-a874-5d1e626a15b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58faec9b-997a-4a20-a512-dcff1e8866f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df68e35-c864-47e5-882e-0993ecc108d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e47e1b4-0687-4f72-844e-4b0606ddbc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2173e8-2fb6-4912-a06b-1b3e39deed3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86c671e-2c85-4339-a99b-63a2ff77029b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a38fae-52f6-4359-be7f-325caf486a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28de0fbf-047d-4d83-b337-17c0cf52d83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d3cd3a-a2e2-4f4f-8af0-210a3cf906f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54568915-b1e9-4eb0-80b6-53c851a6dcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27d910b-8f75-4e1e-897e-75cd01dbcb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3623d6c6-187b-46eb-8734-785ed894889b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267e50ee-8e3f-4dea-8c1b-31f6c51ba048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b054549-d5e0-4271-93e6-7f556cf4a038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792dae12-a1f7-4ff8-8bc4-693624e4089e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc4ba9c-f196-48e9-aa9d-91c44a952bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5b8d33-2c2e-4bf0-a560-1cb4ea02ffee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79177a62-81f2-47cc-9122-3db89df261fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205a8740-dbb9-42bc-9c61-756cc784f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fde9e8a-9be8-4989-875b-bb7682e4ed7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26231d55-08ac-4bea-9e87-52d84cd28bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfcaa20-6a80-4c52-82ca-642d23411c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c897754-a072-404b-9499-31aa40373edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3160eb-e477-4fd4-bbad-33a1a32469d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b16d33b-9480-4b90-9186-f1ecf9acf8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac4ed57-bfca-4a2f-adff-9f906d7cde73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665e226e-557b-48e3-9c28-48add98618a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabb08c0-f937-4b7f-a65c-e6f8e0afa1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0b1a3c-5576-41f4-a3f6-054a018772c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ee7edf-1182-42fe-aa1d-631b84e37c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e827fa3a-c14d-481d-9170-a71643125962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed5e6d6-26b0-441e-9097-8fa0671bf354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c929c7-6e3c-4f8b-bc54-441cdd3583e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51209efb-97a5-471f-bb80-c32239f7badb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fc5014-631b-4353-8ea8-4c22df8a633b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297f82d2-e1f0-4ed2-822c-0516893b7375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a975ccee-e59e-4b7e-a266-a0487b63f8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8879cb8-8644-49da-bdf1-f5f8fbf207b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d396f1e0-d176-45d7-8639-36db94713729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f4da04-ac0b-4a93-be9e-ede436df58ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4704833-7dda-423d-9b24-de5f3e2c36c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec27d3f-7a1a-4dcc-8872-c16b9263563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cb561f-aea3-4505-977a-85fa6cf4b687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38e495a-4e7b-49fa-84ad-e7c8ddcb7fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48145870-3626-4aeb-856d-01d62920b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d84362-8f88-4666-ae76-d8661b52636d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734ae599-ae5c-4b06-88e1-4924be939597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7c9107-fee3-433b-80fa-8ef39169a774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4135b4-e667-418a-ae51-451220a4d3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99764dce-5aa6-49d6-8d9f-d8f4e8b3a11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412bb555-942f-4570-a0a2-49e53a587ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21d1272-164d-494e-827e-d9f1e37f999f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f677826-4a73-4675-a6be-d55423a9fa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40900f7-dc0e-4760-be67-502c31a14a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dfc322-6b1e-4fc1-bd5f-9de7d1d624c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2290b62-d828-40d2-b3a1-5c7371615604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693c7092-3170-496b-b0c6-e227cadbc14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c68983-15a2-424e-81f4-2162338ac39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acde9df-d6da-416b-9686-653eb9630101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dcba0a-b028-4d82-a7d4-8f750d1a428c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76937d0-1dc1-4440-bcf2-0fda36c0a071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464993ec-dd6c-45b7-8398-cde403666373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d22dc15-1307-4c96-9bcc-2179439665f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b984efd8-1bd9-45df-8825-148b88e30620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e512b0-adaf-4cf0-835e-b423f1ed9038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4234c492-f4b9-4082-9296-6d962b84a799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07aa568-f564-48f6-8e68-78a5c0e59fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7746d1b4-ae41-405f-971a-ac8525bc088c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d8a7cf-c72d-4d96-a21d-7efb84365a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f39f674-c0fa-46b0-a567-42249dcea6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78efbaf1-0aa2-419e-bbe9-a0e97c76e19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74e6435-b5c7-4885-842f-8de3bc7abe7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494b5744-d1c7-4fa5-8c93-58fcf1068102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969eac7a-97ce-451f-b61c-57df5b9fa0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e192d48-fad9-4d22-b8b6-1b27dbccdceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b609a593-16bc-4e3d-8c67-4f388cee5b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37c41f1-9491-4781-9258-9ef5d5c3ff13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53150aef-66a4-4f9f-898d-cbe64f80772f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c23c7e-c229-4e95-87cd-939f029a7237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e294c7bf-23b5-4589-9f19-c0038f440731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.181.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fe0720-0b62-49bd-bdf1-9129abe900e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cfa44f-b9f6-4eb1-96f7-faa3b105e01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9fdb2f-d441-4882-90cb-d237dcf412dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bcee23-bc9b-4965-af20-386d7f27cb00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fb5db9-9ba7-40f0-9d8b-9f1ab3eb1745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907e6707-2352-45c5-b1c3-af5369876805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f705bc9b-e427-4458-bcff-6c900f1cc133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39fb5b8-c3fa-4fb8-a3ff-90699fc158d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e72e27-34f7-4ede-9de6-523dc3934fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9ad144-687c-4e9a-966c-46713bb87f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3911dbd7-8b02-4270-810c-e7c6afa65c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836a17ef-2bbc-4187-a50f-65afc6ed2106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb6b623-dc54-4f95-ac3d-8875ba7e2804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4f24c8-76e1-4425-b94d-fb408fbd0c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578ac94-001b-406e-9377-55845704a007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c159270f-91b5-44f3-a4fe-569b2cfbf23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b63a4f-9836-448c-9173-11880869b715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7c9026-406b-4362-82fa-02dd8c9fcfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b093dcb3-fcd4-4cf0-8a7f-52575d17da30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d126cd8d-c788-4f1b-a5fc-f4e128636c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9c7e15-0891-4f5f-a843-bcdade9abd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ab2e0d-6752-4319-ba9e-aeda17bc2e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0a7738-25cc-459f-8f0c-3e7785c65ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd33eab-b424-474a-8a6f-7d04689fc73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91a4ae0-857f-46d7-84ae-8f86c0774270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e69891-535d-4851-bb14-452120fcea9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fec7641-5206-4bbc-8986-615ad7e31303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed44da3-4f0f-4641-b9dd-2c2fa8c5fe48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f78990-e852-48e1-b48a-53b84e85a978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d228a872-43af-49ba-ae34-7284d1a74b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68030fc-b8c4-4655-b2cb-4e8986f6c478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bab0475-5adc-4f43-a89b-49912dafedd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b3dde5-d1d9-4df0-8ea1-5ede6468cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f111cb-58be-4a30-a2b2-db93edda018c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9546a54b-ed9f-4df9-a5b9-df583271e6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2625bd-3f0d-4fb6-a939-0c04335b2acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8724fd-0744-47ef-81a0-772ee22e288f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8120f898-f3a9-4756-af9a-48be39dbd401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db51f9c4-1114-46de-bd82-19013d7db291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9406c821-c3e6-4296-92fc-55cfe917b3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6829d33-7114-4abd-9d98-1e0dbbdf9b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9fb5d9-d65f-41d9-8d07-5c2f88baa012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414486b6-3122-4fe6-8c9f-68b689a904c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2b20aa-2d0c-4dcd-8df6-16b1a3dbfb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afe977a-28fa-4623-8558-c5d2da3bc9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90283b4d-6892-492e-9c55-a99af961c28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d5835f-a660-4525-86aa-da90f7845f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bae533-236d-43bc-bfcd-7cf9b90ab8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6a6fc6-9473-4e67-b7d1-88482fff2c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9e59b2-c353-472a-b8a4-fa892b13e1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23be55c9-87aa-4020-aed3-fda38be3b0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eaccae-e54f-4d99-91ff-da25e6007ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5556203-031c-4b5c-a077-a28f99627c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ea9596-e4b7-48b2-96a2-150c0763d696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d19f286-9f4e-4ba5-befa-e2c8ce0e6e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5893b43-1df0-42d7-a70c-34878380c6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e946ad5d-2ec3-4bcd-a721-b720e166d66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b992e50-1394-4b4f-966e-76004e766547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383187ad-fedc-41d6-b9bb-c570a1c41ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f634749c-5f81-4264-b4d1-17335d219fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d655a788-0234-46f1-9099-0e9008abc22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a1f770-ede7-428b-b39d-0527b08fa88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fd3753-96db-430d-9edf-21e5ba5ec18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf171ce-6f70-4d2d-9f7e-577afea4f50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47038188-0ba0-4997-9b73-875d5d47e0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78625d34-08e7-49a8-b50d-ab725768755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd883293-6915-44ab-ac38-e6c09fa99c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebd2629-7882-466c-bdfd-0548b64de150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadeabb0-1112-42d2-a09f-cf35e6e133eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b1cb1d-3f11-4728-b290-e8f655089fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362ac749-d3eb-431d-aabb-36ea96942e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0d6b03-852f-4e7c-83db-6d2a122e91bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4a8df3-bd47-442e-a5e2-6d91e957063c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acecd35c-247b-491a-9234-47c8f4534808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f53137b-ba95-49a9-bb1d-ba4a1582a476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fdd9f0-a5bb-4f4e-85a6-af526938fb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a67985-e435-4798-9020-2d605975d1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b75e7b8-6216-4ce6-9d0c-38836bfe1685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f1c10b-f239-4d6c-bda7-c4de0e516d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d74f421-3936-4ea2-a5f7-358e70ad48fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2394ad40-2970-46c3-b4c6-97637376a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91cb9ac-0c53-482a-b2e5-11b8c809ba9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2cd256-9fea-41e6-ab91-5185e92b1e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ee12ba-6e2a-49e2-8729-42a8af554598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991b3914-0bb6-4509-a78f-8f19553228c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d708ce-f907-4756-b17b-9788c924c7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf388d3a-928f-407f-8289-f49b0f2f69e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822d9ea3-4960-42a7-b3eb-81e1b6217801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c8343b-15f8-4a52-b754-dee4ccc22000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6237f9-5d7f-45a0-b466-f8a03407cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4310e83-ac52-4510-ad72-be396d379f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab6d896-2ebb-4e83-a951-ef55a014cc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3be475-1405-4608-8161-1fe4090f8d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f12c53-180f-4983-98ab-a4d7ab068192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4a8eaf-82e0-4516-b3c2-beae01f89b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f32c73-6a21-492f-b32f-5e8035ec1152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002e5d51-8f88-4ba8-aea3-bd4008c0cb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f2c1de-0481-42fe-9113-b169820fce59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe278ed-b73e-46f9-b386-e04e4289165e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dfb30d-3b8a-430e-ada5-e6cfdf96acf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24997ba1-c972-4409-ba38-9fb4242a2aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fc3598-0a34-40e8-868b-64a43db25e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7940e783-5765-4ce4-b143-6d294a32a4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f993db-a4e0-4b19-98e1-485739b8a7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278dcabb-4e1c-48ed-a808-1dfb436f3c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19928138-b3ea-45ae-80a4-54a30a17d940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff7c312-5fd4-4a9f-87e0-84c7380811c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343d95f6-eab1-46dc-9d1e-39b551e4b587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97814fd0-0862-49ae-a01b-2b4fc2f12fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2611b6e0-c03b-4d46-9803-682168ea3101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af65d44-5324-49b5-8516-4726f5f8dca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af60df2-25d8-43cc-a216-13ac23d71da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fe3c02-a6a7-486e-a6ae-0009f98ecbc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62772ef9-cf2a-4e1b-b915-b14b8db69705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e081f9d7-0966-4f30-89a3-2239f7f2d4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0a9932-95ec-4d1f-9feb-88ecb0beb804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acd28f4-2a4f-4cd7-a575-1f96e77e9017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cc418a-2d17-4db3-b79d-32a4d5fd78d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28253d6-8ea8-40c5-94d5-35328934f074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f934e24f-02e6-4097-8746-f6a64f1574f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e353c7-41af-4615-bcc4-970aed2198fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ccd441-e1f2-421c-8eff-84a70491c080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03c9b26-093e-4117-837f-68d2deca3e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998610e8-9c24-4e88-a66f-805625bc20ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cbf09f-1693-4b8a-8b3a-f450af67863c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a64a0a-5f5a-42dd-a828-e715bd29ce60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbb76b7-aa8e-43f0-b9d9-0c32fb599de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.182.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53af3642-8366-4036-b6a8-f6a467c3e18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512bea4b-914f-4e82-9003-a17a1e947d4f", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50fd51b4-d237-4d7c-a38a-1f98e0f1933a", "relationship_type": "indicates", "source_ref": "indicator--512bea4b-914f-4e82-9003-a17a1e947d4f", "target_ref": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a2e988-7d18-449b-b3e0-1cf6c9087c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259f4a9f-ed33-45b0-a6ae-9cafce67c704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a43fbe-f03d-4cef-a02e-f44f345a8c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4ab283-003c-45d7-9c84-92d76ae870a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.167.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aca4f35-43d2-42b3-889d-e13e86c21a3a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.123.162.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ddb85a-a72d-4d16-bd57-a3bdb73d1220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.208.238.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f67f196-8b8d-423b-a39c-16badd2e5110", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.235.188.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb0475b-96c7-4cb9-91a3-284f2e827aec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.235.188.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32506e9f-8263-467b-be3f-68b7d3cba134", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.251.71.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508a8333-8201-4d71-b209-0fa36c050b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.33.28.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396b4d55-5d74-49b3-8deb-41bdafd7db78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.216.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016c1619-dd1a-4767-b12e-dc494c577ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.78.128.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0c4d89-8963-405a-ac93-d1f0c45dbe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffd431e-1b82-477d-9018-461ddee908e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.165.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dabe8a0-93e2-4420-b916-bce8b473aa53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.50.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f84081f-ede8-4f20-8552-67b3beea0ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.245.215.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8822f6-73a9-4311-bdb7-ba4d69f4f7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.32.30.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ceed0d-507d-470a-b44f-4ba8732b7208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.33.152.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269f7da0-3a04-4d50-9d7d-9367fca2a17f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.85.188.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5dfc84-2b9a-4aa4-8974-6a56b104edac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.94.169.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036d8881-463d-47a2-adfa-19c19fa41f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.112.131.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4faebde-0c87-4644-9eb2-fbaa39658826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.119.190.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abc542c-6c7b-4c21-9c27-0a9d61a231b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.107.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dccdba-baed-4e0a-bcb2-0ce1e1e7db38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.14.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef76ac9a-0bf4-4490-aade-c75f938924c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.158.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7bff2f-9af2-4e9b-adb6-7c545b771285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.19.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6164278f-47f9-4ba7-a206-45a71e8f660e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.29.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83acdd1-f7d6-4ea5-95fc-9d6141dcfa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.169.196.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afa1284-de66-404c-8168-e9777327715d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8df95c4-f0f2-481a-bd80-70b578b87922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.253.3.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e7a854-42ec-4d46-9739-0555d6d35011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.43.18.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb0b9ed-6847-4e47-9b1c-ea5f64c52d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.70.33.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01734b49-3fe7-405c-9d88-04708b3bb85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.110.220.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d364fc-79d2-4df3-b836-57aa2e59b59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.29.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6cac07-de5b-4291-8c03-21eeebed4288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.219.74.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cfef35-e3b4-464a-a743-e56d51518bed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.46.3.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0ea192-8909-4c4b-a39a-cc9459ee46a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.0.95.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dc6526-1ab1-43a5-9f86-fd42ec0cba94", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.191.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd0520b-815e-4055-89db-6109ffcacd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.121.86.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520ab51f-050f-469a-935f-3891fe8282dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.13.0.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7cdbfd-aac0-4c21-a327-5aea66a627d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.140.121.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f08ebbe-c565-464c-8cfd-654fed261ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.151.34.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56313e32-22fa-4186-80b7-1ccfa832e170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497e1e6a-eefa-48bf-9fd2-d12538c032af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431dd0e8-a871-4979-bed5-0f806b0c2a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8487283-6ab7-47c3-a632-d9d9100b696f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.253.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b12b30-d96e-4e6a-bc75-c88effcce1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.35.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fcf61a-5e93-4a1f-bbb4-33fd68477cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.216.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7ca9df-54dd-41fe-97db-10687d3a212b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.55.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3530f37-759d-4b0d-883d-257a487d38cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.40.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcb3542-92ba-48e3-830d-1fe49ff537b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.46.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d72759-e1af-4e36-ae03-beb82b6ba250", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.232.199.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d73e012-78f2-4dba-8787-d33055653499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.31.165.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4134131-e991-4ea6-b122-d900306d1f2e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.121.135.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588c6bd3-8a77-443c-90dd-d1ec1b541688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb109a0-b5aa-4d27-acce-edb2f3e83572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75f0648-e32f-462c-954b-ab8f1e73c944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6529b5-854d-4896-ac9f-c75717304b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f120bc-560b-4e42-87e1-b4e4eb41ef40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8bd060-e440-44d5-9b85-5a4449e1fb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bbb121-f0ec-4b8c-96a8-ea8c1b10cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.166.230.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3c0654-1a83-41c1-bfe7-fac4afa64cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.236.205.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4118ad-392f-443b-b40d-d7f4a4332a92", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.236.222.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3845e63-0417-4da5-9cc0-bb69e68602d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.145.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ef82f4-37be-4e93-8871-108f97178080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8e2eac-74c0-4242-8d79-b0aea78d8938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a576034-1fa3-4bdd-a33c-a2381c7e52ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b170c6a1-3207-466f-b9b1-ddbc922931fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b38f96c-6ae3-43b4-9125-b6f22bc29a6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60d691b-db31-4ca7-93c3-299370be40b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0b4aaf-5325-4381-93f6-7a405b29fb75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.142.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ba21f-fe91-4d98-988c-b0f817efa891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.210.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d62b48f-1d25-4f0a-b6b4-55d2880a8493", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.177.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee43d712-615f-469d-ace2-dba37d78a248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec20a19a-cda0-462a-b6c8-80b9390e7712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e010a2-9013-4f4b-b061-1891f3d660ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc011d7-a1bb-4c24-8c17-c34d5d1884e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6aa913-af70-421c-9d20-c4bf8af3a6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ecf771-dc09-422d-9af6-089478fe84ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b19ea5b-5306-427d-9542-757daf9595e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1e5c15-6197-4feb-828e-d50a8e4eff39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad6db0d-2d91-444d-a48c-8d61ba8ae162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4eff95a-ff98-4fc9-af59-d65208cf328d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a0fce6-74e2-4ed1-a2ae-9c674e9c1f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632f5a90-2dd4-4cf4-9738-138d263b96bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aac34d9-9223-4905-806d-3e0b95237594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd237b0-86f7-4b63-9764-8ec824422d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67f9c20-f019-4aad-9e74-fd9a162303df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.138.195.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7215139d-baad-4fee-a611-fd4503e32b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740a84da-a229-4a5c-8cb2-ea5c9da51019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e0c36c-5c11-4db5-89e9-e00b1e32353a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13e5254-7ea8-496d-bf3e-fa52c80bfea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a460ba-4c67-48a7-a7f1-89e00df1e197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2d569-b7c4-49ab-913b-a85099742529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c872cf08-7394-401a-a659-61f8869241cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516390fb-353e-4fe2-a6b2-554614863d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bc4f57-6445-41ad-a861-93a52ad2550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f7436f-3f22-47e4-a37e-6f54695a7335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23f5f63-8a9e-4f1e-b81f-9e7958d75366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be72919d-779b-474c-aafa-99347e6e427f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c099d8-31b0-4496-92c0-cf6ed037b561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b1618f-4747-42db-b581-83790c99e3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab557d81-9b62-485a-8563-ca9d846b9bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90011cd-aa1a-4ea1-b333-22a4c3e5fef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9ca5d9-89fa-4d85-ad3c-517a0386cdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef598f61-a3e0-4124-b72a-2432ef59be80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf4b206-0516-4aea-a6b3-ea679731d6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b81e374-d038-4aa7-bbe8-804b5f2313e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ce8b6a-83c7-4ece-ba43-815efe6ba1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1da1a0d-9745-4709-aff1-261033023574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7497b55f-6020-48ae-a6f5-21560d66a2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82f8775-0ea5-428c-91af-f73f3214ed78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb35ad-ae2b-484c-b506-93902bda1118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445faf43-8310-4a54-a149-e2f8be345507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38492ba7-2373-4c6b-a605-f8571515baac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfbbb7f-49ee-401e-808e-e01e1b04a0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b185bb71-fa3c-4cab-96da-6347dfe08a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c00b30-465b-44a4-aa99-cc4cfc44d78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece9d65-7371-4c30-950a-07b42e27a239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec9b21c-1d3b-4d7f-80d5-967c587cf924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40c2962-0fb1-43f7-815a-ddf45f830606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fa3e91-6db5-484c-8103-9f3268c596a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c6897-8ba9-4d09-9691-3dfd7e257ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728c6f8d-2530-4ed8-842d-d3a17e7e7912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53110e81-f658-482a-abd8-2404ded890ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeec7c2-46b3-43db-aba0-fa9980382f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806c6177-3f8e-4d6c-830f-14073e784a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc9e12a-df14-47f3-ba7a-f43516ba705e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888449de-1deb-4eb4-956f-f1573532da2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605c986a-7e9e-4b0f-926f-fb8187b2dbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f21fd86-0707-4a51-ae42-9c1245c9d23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf975a8-7f91-4310-9e2a-42ae0fb6a833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfc3b9b-b076-4dc1-977e-c76dda005d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2be3dc-8651-4a0d-b053-2a22e166ff30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5744817-5f53-4981-b083-c34269607fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f84b6f8-09d6-40f8-9ac7-0d01f94e701e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1e9aab-02fd-4162-93b7-a28ac81c218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac95a77-1855-4b30-acf3-b5aa3f42ba01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3914ba3-3f03-42ab-9dd7-dc7a1b38dd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77917a03-dcaa-448c-a798-3bd16e459428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d767cc9b-1580-4e0f-bb0f-a164443da143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fa13e8-5d60-4d63-b6db-e8e0c123a851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4ea0c1-b6ba-48bf-b321-6c39891a74a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ce6178-db90-4243-930c-7ef9fe7be626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8161383e-35bd-47cf-8051-86579c7201fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06c0afb-bdf3-4d55-a812-82c4aa3f7ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae43992-f98d-45d8-a063-aa7e9bd6abac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce18232e-76a9-455f-8bea-685be52cb2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291590a6-ed2c-457f-980b-ab8d14a81095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f5c0c7-7fc9-447e-bdf4-1231e0275837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bc2585-82e4-4a87-8c53-1632e4364b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d43fa4-a0b4-4342-9beb-fbe5db91f563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27104555-6421-4c95-9c79-b86ccdf8c207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fdf50d-28a8-491b-b161-780c8b56df44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac41f2d2-0d79-4391-bdb8-765715b84bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11da6188-6bf8-4582-a6c6-c8fbaaa29e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7397dbed-0881-420c-a0df-b0afd4964ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd8e1c3-8299-4b04-85f4-a7315d1c48a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4de0e87-18f8-4549-8391-79cc97574ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e681d796-924a-4021-a00b-a3769b12da84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7142955-b554-4abb-b4ff-40c70fd7f275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d3800a-ce84-4105-980b-8e98889ae94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5b4a2d-5a55-4767-8e23-f78307c3815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb28111-5183-4188-a611-ee745f23d1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c21c8b1-ecd0-46c1-bdc6-323db4a1690f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500a3247-6a65-4b48-a682-f7d77a720fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb677df9-2e75-46bf-a9d4-b5463017db0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afccfcf3-2edf-458e-80f4-2736bd75abed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaf6d0c-3b95-4910-8eac-d7ab45ef720a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639c244b-1c25-4df4-80ad-f9f1ac4d5434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e13139-f462-4b87-8fb9-f6c5bcc3a48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839a9c81-9f20-46b4-afee-00f7f83e71c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0085d0bd-f3eb-49b5-885b-5fa64450ed36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ca7802-d676-43f4-b1bb-60eb631050ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a60a59-6cc7-4f98-a5c8-958857af00d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9734e497-7c69-4c64-aceb-df2d139bc728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef5d613-4421-4763-8273-8e49d33fc412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd3fed0-303c-4457-8009-9dcd38b2796f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b14440-5291-4bd3-b241-7ccbf648af5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6401cc8c-f211-4486-97b4-64af801337a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6fb874-f3d2-412b-8ef0-ebf2673a3427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fbd2eb-3bca-4673-9f36-361ed2fab505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7dd1eb-6f41-487c-a80e-a36c137cc4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f02585-8311-4d3a-a835-db27e6d10d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4c3e1b-dcd6-4090-ae48-e87b66526eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16a935b-1fb2-4f5a-8988-50104ae2b425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13c6f16-01d8-4aa6-ae82-cc7e70fdb7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc884de-19e7-4034-b33e-ed5d2ad0b81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b3b3c1-5202-426e-a334-af40b565f113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d551fd5-cdc9-4ee6-b52c-21a29ba562d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2a74d0-05e6-444d-9bbb-c317bab235a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde178d6-a634-42a9-b074-53119e7036b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecd4d98-de97-4044-bcae-f915d1ec75ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e925d5-cf43-4fcb-a5f1-3faa5d80967b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db389fac-3c89-4741-b295-72ab9f9cbc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cc3cff-0414-4363-93bc-c79a3f6bbfea", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664e38cc-d679-4ed5-951f-22705845421b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b6575f-c7f2-487b-b483-e0bb7cefeb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb878aa9-5389-4a36-b76b-8ccb4c7487f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edae3c9-c53d-4053-a75e-888e63eff006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fef39f-755d-4bc9-a862-43a8adaf2492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be264dbf-a11a-45e7-a370-6756a2769780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f174c404-99e7-4839-b52a-c81106813e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e0ab4d-1d89-4e3e-bc3f-2c19db0347df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7742a7c8-c263-4110-82af-d0277e089a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.227.16.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f097e1b1-0a56-4b68-aa48-1b377c2602b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.48.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8661285d-f4f7-4d31-a5a8-6c909ba47db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.238.32.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28918408-ca2a-4dcf-8d6d-98c35335b483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.238.35.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a23f236-4f87-45a1-86fa-56aa09828302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48e0183-f426-48f5-b322-1ca99ebe730c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2d6d52-d6aa-445b-b90b-634d3cfaeb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f8e015-ea48-45d7-9227-0426d0b388a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af8f2a3-a170-4e8c-a880-200bac131504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6bfc2f-05f9-47cc-bbd5-81ca3d881063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebcef61-451b-4cc1-928b-b381fabc4154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f539fe5-e698-4c01-a112-eeb45cb88bea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.242.162.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecb7e08-3d05-462e-91c8-958a8f2272e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91754b55-6fc9-46ad-9f59-13981adc22fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a195f06-ec11-4ba3-b0c3-48021498e1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c9df30-da82-4e4a-b418-23ed1e70c0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485f59cc-9e48-48db-b9bb-aed9441377d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a27c09-29d7-480d-8379-000587b03e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6588a817-9067-416e-981e-acbc43db8e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7528d50-287e-4bc2-85f9-e29f97f4f456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b149f6c9-0146-4350-9cce-857f6079f137", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e803c5c2-9c92-4318-9c7f-b4cd0c6a1fb6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df6226c-68d3-46e9-944b-9dfaf96d7120", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01af842-aedf-4278-bb9c-ad388b27bd6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f2865d-46a5-470c-99bd-fd0214382702", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.90.12.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42381f12-f8c6-4d9d-b1b8-6d6943e9c81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.102.104.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879e395a-1276-4c6b-871a-636d891c4849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaaf75e-227c-4a93-863f-f247f604940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.157.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7fe325-18bf-4128-88ff-997592f96b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed8a46a-6ed7-4de0-959f-9b4ef37540da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad429141-244e-48e6-a27b-f22a46acd095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484a45f2-c95b-4057-8c82-dbfc7f7afe31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.59.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50340a85-17a4-4948-9d3b-c694a414b920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.96.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0191e756-f81e-4dc8-ab21-ff1acbd7c40c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.11.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0020cd5-e551-4fbe-9523-e7d4a8225d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f888d7ca-d7b3-4c34-a7d1-6995fbd52871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3583bca-acb0-412c-a913-7204bbfda022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6477c2d-d1d0-4904-bb6d-281dd2e96567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2616c2d0-e270-4b09-8158-23ce207d2a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778dbf82-6e8e-4b7d-9c2d-4ec24b90959d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc9edab-7d64-45a1-89a8-9dd577ba066d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a952e4-f4b0-436b-b664-50dd3541b9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc4a6b2-c0ad-4f8e-add7-a15f3eea9ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98a3b06-a031-4526-a94d-0e65b9e270cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35dd163-90a8-4c90-af1b-1a6598fcaae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3a25e3-0e64-4b01-8f8d-4804b1fa5e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cd50ab-3ea2-42f9-8cc2-03908402bce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58e04d1-a866-4c06-8460-20fc62fe66f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa60a4c-2ccc-4aad-8381-e7ce2b377eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6ff36a-14e1-4182-bf4d-789de0a576b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8e09a5-3355-40bd-a5f4-79fe1f0143f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6a81fc-a9a9-40c9-b6a9-bfb267ff8f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b20921-bcea-4136-8116-84be0e4c7666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b1abd4-9b42-40e5-8f56-b22557fcda65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06d2b87-8e14-420b-9c85-21cbd1d9dd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d63b91-4cdb-403a-be37-d3fa57344b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bb4078-7d8b-4a56-a7a6-b155b0bea0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b23bb91-b1ea-4282-b430-2e28642d7323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf2bc74-5420-48bd-b2ca-36ebc49916be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e4fcbc-b708-4113-978c-b71d5071f48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fc6866-8650-4403-bbf1-ab0658d5c859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d702d521-74cc-49b5-9f29-0ea8678e9c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc79ba5-6bd3-4721-8aed-257d05ccac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27266bd9-ce7a-49d4-99c0-99b18b242bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10e1f0d-7b10-4d52-8ece-25a68f033c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb25f2e-1d9e-4e68-9dbb-e1f2219002f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e20c0d-f365-4b90-a9e3-0f69660af2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353be5ee-a115-4b76-b57b-38457fe1d874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f35aa98-bf25-4865-8ee6-8255e681543f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad9fc4-3e70-4585-ad55-315533a0ff17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627094f0-a9c9-4686-856c-94d959171bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.230.74.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e4abf3-c70a-42bd-896b-c041df25ee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.238.56.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22641c61-fe53-4a3c-990d-5979a6d8a0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.4.70.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12d73c1-e43f-4928-ae3d-5e6acbabf6da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.27.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d30ee7-18f3-409b-9c55-ad82d6eec0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.8.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f404e9f-6f4a-48d8-a20f-238a1a77af7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.97.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347b92f4-043d-42cd-8641-fb0bd7f41c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cdc769-b8e1-4105-ae66-db13f3e77699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.85.235.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971f93d8-2ac9-4eb4-8e13-89b05249c523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc08ee8f-c71c-493f-bb7a-9e4a893a4ead", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e7c5c6-8e37-4a2d-8fc6-61ffbc1767b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58c9278-55dd-4e4a-93b8-1a85be2527a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db45784-6885-41c3-958a-5ce2cb648c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61de29b-e8ed-4288-a9bf-368affe145af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d182a6a-8989-4d98-841d-0ee9705647ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdaaafa-4a9c-44fb-91e2-ead36e282d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972714a9-ba3d-46ba-a34e-79234a33d2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03ede32-3f06-4f54-a729-41c6581a9b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebfee6c-3b2c-4b62-913d-20366ed56db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f844b71-51b5-4b3d-ab12-390f5fd6437d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b205479-cdac-4ccb-8a4c-df0d969f2d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb98d838-6afa-4976-beba-565cdbab7d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211c4a8d-8c52-4af7-ad05-e7716c556bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285f8d55-0b79-4865-bf1c-c59126ed3c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6203527-ce9e-4b37-915c-fc40ef13cb8d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.112.228.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3b4dce-8032-400f-bb86-3eef5548042c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.114.145.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af4163c-5009-47de-a7c4-606de474ea81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.128.248.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7785361-61ab-474c-a762-70bbd0ea94cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.55.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b90f69d-2246-4f10-9f6f-8b314208faeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.93.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9484c65b-364e-4461-9798-fe1cead50d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffbdac9-b587-45dd-aaa8-baa9b16da799", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4186da19-c340-451b-b33c-750d9daa4e15", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e573bb-b07a-4d98-ad45-fa8eda065b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3874c54-260d-4557-8b89-96f2eb22ed7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d3758d-530b-42e7-90d5-7435bee7bfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9171b9b2-0928-4b25-89d8-2f4fccee9942", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361a25cb-6c14-44f2-a221-7da9c7e68acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f5f9ea-30e8-46ac-b144-1bcf0b89e685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ea16cf-b850-490c-b10b-80519a981641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f614e7-8c32-41fb-a86d-ce08f44b3ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e785aa7-cb2c-4869-a792-876c26f8a513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799f4799-432b-473b-b665-49f9bfe79a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb4980-78e3-46ac-8dd7-40640adeb819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e199c8-85d3-4ac0-bb92-09565a04517e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fa13a4-aaca-4f96-bc28-453470d2174d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86e028e-3f29-47a3-ad3b-fc25eb144483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3227fd7-934f-458f-a264-c79ec1b93d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24643c69-df96-4850-be64-20f3a357fc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fe2bcc-433d-4efa-9f56-708d832aba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7192b906-9df8-461c-83e4-81b3d948ec5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09940a68-8e00-4c4e-bbef-55f246dbb35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fef7dd5-c47b-4487-8a0e-adc16b8e5771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da258ede-014f-4c16-90e0-58fdb2ca378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7388b734-0fbb-4915-80f8-b54e3d2821a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d3a842-38a3-4be4-95a8-6376425140e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912f2179-43a9-47c0-afc4-95107c68ab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31008bd6-169d-48df-a09b-fa00f5036bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed2047d-ae20-486e-8936-43a05fe7e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5702ace-6d0d-4c0b-afb0-a81657eef31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d19f67-df68-42a7-b4e5-fb283301fed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd462ac-d9de-48ef-bbe8-7dd25499ce8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435580ae-5e62-420c-ad58-8a1a5383a4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54189284-9601-4106-8e4b-2a67442f634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652bfa02-b1f6-4165-b7dd-29ca4683164b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d97ce44-53c9-4805-804f-23a79b3c0c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bdfca7-6f2d-475c-8caf-3ec1cde47049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6be398d-6e21-4061-b0a1-a3afedabd10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d413385-5a59-42af-9a13-64a5bd1af3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fbd62c-5846-4f4c-817b-c8bcb2872a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ad5145-d63b-493d-872d-395f4f1bb0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8b0102-7904-40eb-bff4-2a264746549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a134863-de1a-4b06-8b0e-065ba02367c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d41651-009e-415f-b260-13ba60d258a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a05cf5-3eae-4ff9-8332-8233e76efcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcb03ba-2425-4461-a71a-96c95d566f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561efbe2-4fb6-423f-a4b7-f746b538c81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a4c788-496e-4603-9bb1-10f42bbadb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c8f2eb-3ba6-4987-8434-deeb5be84a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e5986a-28db-4910-b200-e3f5dcebf572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8409f9-c415-490b-9646-e3c7a70a3e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0a2e70-a1ef-4e7a-bba4-915eed74de39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab584cd-c0f0-42d9-9172-e8140eca95c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f2d09e-980b-4323-bcf6-020fb103c6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4421ec0-fea5-4afe-9c6a-322d0588c40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c147b27b-7a8a-46f7-9685-b5b4cad4536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f213797-746b-4006-8041-4af68406432d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e508d55b-8910-490e-a704-e27ea5b0bd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e8e60c-fe7b-4d88-a30e-c27b1722131f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b503c06-de54-469a-b90e-6f4532d8fefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcabfe4-872a-468b-828b-26dd5cf92e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4653db50-25f4-4c07-8bce-77a39c3fec28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14595655-6baf-49f6-88bb-19bda67bc138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96027cb-5254-4cfb-9a19-ff251862bd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce63b19-6c1f-40a4-a222-f2bae07e7549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1c1c4d-2960-4c5b-bd3b-48f25a6ff4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5e4942-1896-4e95-a87a-ddfded0db6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fc2452-3483-40a7-a07f-50c6f961bfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eee8140-51b1-4cd3-bc9f-5f621a1a9b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef39593-13d7-4740-9a2f-660158e07337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fa41b6-e584-465e-a1ac-1bdf3b916c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fdb8e6-cb6f-4f72-b9d4-05b7c417ebbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8be7491-8da5-46b2-9726-eb86d4e7c06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e973d8a0-9317-4e96-b7cc-fa46c068a942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d9bf62-b44c-4e25-ae0d-dc1431333a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb14d40-ccea-475c-9d1c-dab545b57ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde61fe6-a5b2-435e-a8f8-5083477a69bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d042511-c8e6-4a88-a2e1-a52e1b4f525e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582882c3-4c34-45f1-b1fd-0115420567a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3f94fe-59b0-40c6-b071-2849cecdf132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6d1ba1-f0fa-4daa-8090-960bd87196c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90385018-12dc-4bbd-9ccc-6d1df8809729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b700a3cd-f1c8-4ecb-89a8-6b650756278f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebff765d-54aa-4b9b-b0e0-2d4fd1f7d674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7e24a0-41f3-4d3f-a935-501882e8a7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b6d28a-d2cc-47b6-8912-e6489f2c3014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26e6b90-d20d-44bd-8bdb-860daa49b37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d49234f-c17b-4afe-879f-7b1f45f03c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7bfb70-882d-4bd9-9d9e-b4e662663232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afce0cbf-bc5c-491a-8d63-0f5de7e93cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fd1816-4fe2-469a-9b0e-3bbeb5f9fb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549de579-a31d-42df-aade-4e8a0a3333a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a348975-c670-40d7-9595-137d681701e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4734b1-25e1-4237-bfd6-ab9e4f7ca968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f210b0-5196-4119-9948-7388fca9a068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182352d8-527d-4fa3-828c-5eee25cf8c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b997cbb-5f41-4b32-9530-d0d14b79979c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97878800-504b-460a-8e75-dad36cbfae54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5be18d-bf0a-47a9-8c98-4955abb79d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ae5a74-3f19-4827-af1b-28ffedec3bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bdfc35-182a-4264-a14e-abe206f322e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbe9b39-514a-414a-8498-a2a076f1995a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da58df8-f04d-4492-9386-46a5a198a60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5d0be7-9239-4964-b17b-c602a987600a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f352d9a-caa0-4f19-bcce-cb28e0f99ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4a4899-18bb-4f22-b799-2e177f73b51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0dfcb2-7e59-4a1b-b7c9-348b225f144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b0cd88-0063-4252-9cf8-4293ed75dca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2449abd3-85cb-47ee-a03d-5bab783e7c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2e8a07-273d-4e50-802f-82ee0fc5e505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2b9bb8-8883-4792-b00e-1c36f43d3b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2eda0a-1015-4e9e-8cff-e148b65329d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19237f83-4ddb-4fc5-947b-c7adfef8cd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ec38d3-8d6d-4398-ac14-e8d6a82e1b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830c0957-1e1f-43ca-883e-7b49a24362f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c748f19f-cca3-4c02-88c1-d33b0a22df54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfa7e29-9ea5-4773-aa84-9c72f535e3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350a3d92-9be0-4b15-9177-43222372d568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d787c806-d24e-4c83-a2b0-84ccc175904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dfec3b-c610-45ae-af11-492a1cdc0457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fc3694-9eda-4c0d-967f-dc05437753e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b5c2f6-1c03-4d24-a8ba-9df27cc30727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c7405d-3d47-49f6-9b12-da1fe69a908b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d38037-7714-480c-a297-9f638b74de40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb510d9b-9c9b-498f-9ab1-1298d828eca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c093025-2598-4c2f-a323-3b3b255fbfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a6bd75-66a2-480a-bceb-da0d95f82159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bbb283-6969-401e-9b1c-5c2af3669ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c48596-0640-488a-8cab-1cabe2b0ad32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7306ecc7-e48f-49d0-89ad-92fcac00ea3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453ce46d-9ef0-42c1-a269-45eb6fd4af0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8325989-ffd0-4d71-a4a6-261be6041d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77783eb6-68f6-4ae1-9cda-1f5f16c7b638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4838dd1-644a-478f-8161-6f9e32734ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c611c9a-9bf0-483b-b2bf-ae0d2f540947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbfaf37-71a4-4dae-955d-0bba51620496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73666d6-62cf-4d2c-b00e-609e98c33e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9804013e-6ec4-447d-a98c-a616a00c59ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3fe574-dd6d-4f0a-b837-160fe2f35fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0916115-f36c-487f-9d33-fda20f544d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c5ffa5-b1ab-4dd8-8068-582120f1ec0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66be98cd-43f5-4794-bc04-0019992f0611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81d2d2d-896d-4c72-b146-46af790ed722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b9d6df-b60a-4615-939f-3e68c97ae910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94996ba-41fd-48e6-a458-247c69c6f84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35b35e6-27ed-4778-a621-1e837a86ba61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fa8086-ffb2-4154-bd94-edfe0c31c811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a2032b-03b5-472e-93d5-7126864fe135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc15a34-a424-4223-a403-7e09610741bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f383e4cf-1c51-4ef6-a24e-6a543b718605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a666fa95-ea87-4afa-b7ef-e220b97c0338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dff7d07-d70b-4b36-92fc-359d5844903c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf21f75-d0b9-4aac-ba56-cdc20e7310db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d814a85-53b7-43b7-8989-ffa7c024aa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b480a8f4-0a16-4309-b21a-d4bc16388ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a65c74-8844-4cf5-845b-99329a107b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63706ec1-5092-4645-8c5f-73bed38e36c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c17f7bc-4a42-421b-8249-0118c2c06db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38e87d5-53ae-4b2e-991d-87b6199daa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7906cb7f-cbc0-47dd-b588-4b8ada708384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e0a377-5782-4b5d-b3e2-65e30fbc6cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ca64a4-ea82-4012-be03-51b9cf9de03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc6d973-3824-4f4c-b3ad-df2043edb3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90a3824-b577-4977-b7be-968d4dd06d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1effaa56-aeb8-4320-87f9-eb999fef2d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5fa721-96d1-4a49-bbc2-77c72232cd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a6cd86-5861-4aac-8015-031513b9803d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3114e872-32f4-4d3c-8a7c-643401b2c420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d392ef5-576a-48f2-b697-0039e723dc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559b689-beb2-4684-b935-5deefd2b2dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4f37d8-80a5-40ec-9604-b2bc59bb369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f95de07-574d-484d-ad14-16518898ea97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fc482a-1353-423e-bacd-0dce0f5d722f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cada969-27ad-4884-ae1b-f13af5a5dcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85f4234-fe39-4707-8854-265f5fe8b5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6675e8-9c0b-4e78-8176-d7735dc7757b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3871004d-a352-4e5c-91e0-6c2d3ab03899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba69aba-ac56-4f7b-ae91-2b280359f169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f05f16-cd14-482c-8dd3-ee0b8170e3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959e71b3-8ec3-4e72-9fcf-00e53e811a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44923368-d847-40da-9701-40f225c23117", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.36.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4f8f9-73d4-49cc-9920-00a7c28ec6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.95.147.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89aa813-8752-4f62-bc68-0b811d711387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c08a2c4-ebbd-4740-9fc4-73469720ad8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.11.184.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923e3526-30a6-454b-bca0-6c14c8cc4005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.100.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7863dae9-637d-4dff-9077-e4e5789947ca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.47.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f49e01b-d9f5-4c6c-81ad-0ca715cb6b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.4.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03ad4c-b97d-4234-a385-502ad1c8efae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.206.225.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2040c9c4-d3f2-41a2-974d-c6c68e4fcc1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.207.222.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0caee5b1-2a48-4e05-bcd0-55a0fa2bb595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.217.240.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdbffc5-2095-4956-aa12-7279d0ed6bfc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.0.117.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc75ad-5923-4d5a-98cd-93aa98840bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.220.92.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ddffed-574f-4c71-9951-36362aa78b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.48.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3c9335-5fc1-4d14-9cdf-dca3a0ba8689", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.51.67.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c606dbd-9c22-4719-8a9d-5f07fc79a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.52.81.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff5e2f1-f2ce-4bfd-bf9c-eb7d3df075e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f35ce6-61d2-4a2e-94de-8c8c9b767c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.183.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366b56ae-adc7-47d7-b342-d6a86c63f2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.108.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e08604-54a2-47a6-a883-2830e08e6ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.163.195.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafe1b48-9287-4fe1-8129-499057ee6d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.163.205.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7d944b-e289-48c4-8281-ed22e8520bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.122.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59763e0a-f442-41de-8f3b-cd8f2c21227d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.85.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc804279-249c-4248-bc2b-fdabe7498436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.87.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f65e5c4-5c48-46df-b30f-cd977a391113", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.94.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b4e702-3de1-4daa-ad10-bdb274ec0abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.98.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81e14e3-f40f-445e-b0b8-3a2e73e44a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.209.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4724ca8e-a8aa-4cef-81c6-573ddf4f9348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f620b65e-015d-4159-88a0-713e6cbcafc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86f68de-fa75-4fda-b77a-09862707119d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e48ff8-4be3-43d8-8705-4f7aa1c4a2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733dfcc3-f1eb-4c39-9953-d39ab0683fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e334909a-d113-468f-963d-99dd48f68d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b4fb1e-ed92-4520-a049-ac37fb6e6eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6812396d-28a0-4b6a-9a69-b4503a9fdf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816c7ab1-fdf5-4226-8300-99834af30dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be1afc4-1b19-4756-b9a0-b899d4dfa65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b9fedc-3aec-44f7-a7a9-e89344262804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31a1ba9-cb74-43b7-b3b1-e4ea80b6d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83090782-bca4-46ef-b6a6-68669fe4f666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710b0a5b-ad4f-4f97-be09-a2f0388112ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2196b94e-293c-4a0c-8974-f952901bd4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26428872-884f-4fc8-a888-325273272dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c5e32b-4dc2-4e44-b3a1-e02c5b10ec5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d58514b-75d2-4254-a26e-b55c7c7f61d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373a0e1c-8769-4338-abb8-ed8e5d707197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca68889a-c21b-4d38-ae11-1c9893a9490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfd04ca-9e9f-4322-908d-4a95dc753ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3d9524-443a-4125-be61-b194ae7ff899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323c0b02-41ea-46a5-a7a9-bd0c083c7791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f59a93e-6a93-4837-9e2d-833ca20b8cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e1c586-f92f-466f-96f0-1441e8f5784c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed647d-55dd-4f4f-bc75-7fb6211f4cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d1beb4-996c-436a-a255-b5a9ec2a0e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ee88fc-1db3-4be1-9ae7-f2d6dded6806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5a13c1-e768-4463-9644-b54d44eaa6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10f38c5-a3fa-4f65-af70-cd34b4ebb4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c68f348-4c3c-47a7-b06c-fa6c374c45fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6d6574-a36c-4af7-a459-2df0503534e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d64c03-2cad-4d7c-8cbb-266b6b73f0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6fb7af-be5f-4ce1-909e-03f89bdcfdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb71ed-b6ca-4bcd-a2f3-2ccf819f2336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5c51f0-e7c5-4e11-8e9c-8c6410823b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b304a68-1642-42bf-abcb-dae3e645acfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c213881-e4ac-42d4-b525-bd3619d136cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b3142e-f71f-494e-b81a-5ba8c7c10ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff33fe7b-5db6-403e-b59b-a8f56a875a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90913dec-70ab-4b71-9928-0b564ee74524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab36db2-2e64-4ca1-b308-6838ddcfd4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464a5eee-afdb-4d3a-a37f-70b6ee52af2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44aabd77-034a-4b7e-befc-ef55dab207a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f560f6-d905-463c-bb3d-cf9574f10f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d964ed21-01cd-44d5-a128-2636ce3238b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930e5cd7-9da0-4887-890d-c7a1aeaa08b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070566dd-611b-46da-9769-a12fde556c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f898f5af-95c5-49cf-a886-143a5fefccbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a7aeae-d818-4167-9a51-949b4800ec1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a379b1-895a-47dc-b058-6f5b327ccb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9ba16b-c17f-4a9b-b22c-0165092a6582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eda9fa-1e94-4803-a8e9-0f9565d8628c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463d802c-99d5-4467-8a11-7d12793d3610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef0a4a6-44f9-48a9-801b-82f4899f9a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa99cac9-03b1-48d9-80d5-2f9c0aba4cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c647570-8103-4ae0-8709-c375b946c2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb13127-d77a-4725-a559-0a438503b46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed7a26d-7f6b-4d98-a311-845673f1bccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691ed4ff-e032-42fc-8188-90c0d57976ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ea5e46-fa87-491d-90a1-27b2a5b8b711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8de7985-ce41-4f92-9558-e50558546825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6311f8-f1f4-4da3-bb56-8d01e5a024db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64909ce5-0c66-405f-b5d5-7136f0295a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faf5829-003b-4b94-9555-30b45a279d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a307c983-a1b3-4ef2-9e0c-8469575f9932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db40232-de5f-4664-9d4b-9870f861a947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aef1b01-6846-4a75-8387-bb54096f7039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc67fc-8376-4007-a6af-fe09c0ca0f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d609357a-5f7f-46c2-b2c4-aea2e67763f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac2d252-d784-4eb9-af18-571646beb98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f1f1a2-1304-4c4f-bbfe-36f96d98323f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fce3577-12f9-4df8-8f5e-1c6f0843428e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d6b077-f537-4a74-b72d-d9511ba01895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cee72cd-ef7e-4b5b-bd14-2d2d938f82e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3762fff-6746-4dcb-9c86-9f15c54cbb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad85438-8af2-4524-b920-a09e22d52e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43f827c-6d84-43a7-a0a9-f344573372da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8694d4-9ae4-4784-a34a-ef5c50c55de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2761b74-7989-4098-ac74-6713b366d4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64460c4-5b9a-41d4-b09d-dd81ea1432ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d85f58-88f7-46a9-8e94-e89bd225bf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbff303-2e0b-4335-8ae9-47e1255776c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8b819a-26fc-411f-a733-9d7e5683c494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56dcc6b-a786-4362-9c94-69f84636c310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ff3418-2c3a-45dd-b84f-05e0553ffd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f6968e-db32-489d-8a3a-df4ea951500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd6c9e8-aec8-416f-b4c0-43905a419873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7b8d87-122c-497b-bd16-9719500adc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19194de5-bbb0-4ff5-a16a-40e59522b9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c7eeaf-3be8-430f-b654-51c2920a4235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0364788a-32e6-4f70-ad29-44f804623204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9716cc0f-b66f-4a71-bc39-644b3e4514df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8dac43-15d8-431d-9c3e-125bd10ecc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d31cf9f-7f66-4cd9-ab34-bac6cfaa5460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ca0d9b-735f-4266-8935-2f90f548403e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1468f1bc-9f1e-432d-aaa3-6358554b694b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e2eb43-6de3-43c3-8e5a-dcb17cb5ebe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73563ab9-b22c-4e23-94ac-4f7af970f557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5c6a36-c7d6-4ed0-b468-1ca260d5e775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39aba25-f15a-40fd-a48d-5221f4cd41dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf89ba28-750a-4b03-9793-f8aa277420f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c99d9e-320c-4cec-9999-2a7f4c6c9afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab10d156-5e00-46d2-bed5-24a370128daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb34ae4c-58d5-41ea-a80b-4ccff3da4495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25783f68-3e5d-445c-9c8d-d18362d14e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f43ac4-5e3a-4f1d-a8b8-fd8c32aaf12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4217949-ca41-4e71-ae90-07987b6c8b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d923d2b-e342-4f2a-a6c9-5be9b8dda000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7727deaa-36c8-4d37-8072-961d9d4369c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cfe2f1-e757-493a-be23-dd9e09c02418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33b57c7-4e46-49f5-a4da-e5d85bbf3213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261cd7d4-2a1a-4607-a2a0-138abf05487b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34d69dd-0935-44b8-a1f1-25e8fbd4d557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dd3484-9eef-4979-95fd-fac6eb19921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7facd2-6e94-497c-b8fb-1c8104c517e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104fa521-58c0-4bed-84aa-d0347f0d2ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06345bee-4a8e-445b-ad1e-b5ecc758fec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb5cb69-389c-4260-8c23-e6f393421eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2c19fe-fa18-4a50-ac06-c135f2d1ede3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558881a1-0613-4735-9ff1-2775ca5d8d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82c58c0-137c-4162-b79f-1134c47240c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904457e9-b9cb-463e-a80f-e854cad110e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35680692-b75b-4249-b8f0-5b81abda0157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7e649d-98ed-4c72-b774-f2c0112f336b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2b8dc0-b762-442c-8198-57d8376b12d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89734791-3d58-4681-86fb-67af9aaa67ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4590ca0c-f41d-4045-8b6a-67e60439d33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3ef0fc-aabd-4b4f-9c27-eb018611a028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65623fb3-5878-47f9-8a9b-6a016fcac849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d0c62a-1af2-418f-958e-95b46d563616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae65060-e376-4e41-a0e7-f1c67249f142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243785a0-a6bb-4f5b-8aaf-83984a3e5b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da0c8c0-5b3f-47ad-b03d-59dee21936a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67012171-86c4-4b4f-8b91-81c79c072693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19ad506-f246-47e9-8515-f0314f8b1f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b467bd13-80c5-414d-a334-539d452fe8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980e942e-65e1-4c96-b0c8-9a161591c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e334eb26-85f7-490d-afe6-e50449c07717", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1e3b40-d276-4e1c-be68-95e7805535ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1768a358-9ff3-4b1d-84e1-504ae8616522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bb6d65-4708-45ac-8542-00e0ab891597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccedcb6b-319d-4737-bf87-a371b07f85d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f66a834-351b-4b93-8ee3-6db4d820e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f19a79b-38a5-490f-bd60-cc7b0528f043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bbb987-1d2d-4da9-98f1-68cc3ff5f978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de20b55a-9df7-4869-a3d3-6fcdb07ff4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63992251-2153-4498-b4b7-556abe81ba1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5177e3b-68e2-4ba4-a090-987fc5fbb526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1562c13-6780-4525-ac2f-3a83a649a583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d278e63b-767b-418e-b077-65a6da92a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92258c2b-d8f3-47c1-9de3-eadeeafd31d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411ce190-aba5-4cfb-a042-91815e3fb951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87099170-2c89-42ab-9ee7-228b34d150ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfd407b-8a87-4d9e-a8be-f64f1909d32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49b0862-cba8-4571-938d-aaf8a091571e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0640ec9-272f-483d-b415-c96acba636fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2377316b-d2c9-401c-9aed-69115f1c30d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55191d0-1fcf-4e9c-971e-0b3f52a5f9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf6211e-0f85-4849-afb5-f5827c7c8731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3da1ef3-902b-42bb-81af-b2cd984d4053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bfb400-4e6d-4462-bb80-ada792b2c1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb924dd-69e3-49d9-a2ca-95f39a7230dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1582a876-7e8c-4775-b9a8-d27f268a68ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7787f392-88ea-4bd2-9340-e3d2fce8d257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce00219a-231f-4ec8-835f-ac165e284555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed565df9-ba37-419f-8f20-0a0177f88b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2436cf47-4077-4a5a-ac80-df6e7d9ade32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6477f8f-6dc7-46f6-927b-5591068af8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588b33f7-f861-4b12-83e8-9e8c614460e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7c5641-2df7-43a5-9c2f-472a8462b2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ffc426-f1af-42c8-beac-39e07cc67d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab23e7a4-2462-452d-9313-c3199c55c850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe22a91-e10d-4025-8e78-f0169ec40be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9231deb7-d54f-43f2-b39a-9902f34b2aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e87fac-8e53-4d47-b237-17cf7a32fd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ea5e97-1d96-4fe7-80d8-5ac88fb3f944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0414c9f-ec04-493b-bb3d-ca6cb6824b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.200.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96f47a7-fa1a-428a-9432-4847fef42c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.100.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b261a45d-910e-468f-954a-2c4e5e12f013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.111.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac28af38-e64c-4778-b8ab-b0cd4714b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f2d3e7-ab7c-45be-812c-7f781ba6dc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887aec1b-5b31-4446-b950-b98833bdb499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7534a77-145d-4543-b227-f121a5d7ed52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edd4173-5150-4159-97d5-a37423845d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a93beff-6097-45bd-aac4-98d01bf386e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688d0a31-a1fa-49b9-98fc-492b26bb08b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.8.62.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a738ee6-d6ba-41f3-88d4-ef20150ada45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.96.94.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6806c06-6f82-4678-b104-cfc882a2cd1c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6823692b-7ec5-4691-9112-a120e1c17935", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.252.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0822b1-2521-40b5-b1dd-56e12bb54019", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.254.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80cd7e8-b6ef-470b-9d7c-4346c6ccbdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e27531-6369-45f1-966b-8c626be9536f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22629315-8056-4fac-b663-98745b797203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9557e94-661e-4372-bf07-aa0cea6a5d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ca12a2-24bf-4eab-a0fa-06610ae037f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626d1a3-fb88-4495-ad9c-46e6c52edefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd8f7a2-2eb0-45ea-bf57-af8829d552e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b057c9df-f888-455a-80e0-08db63adf3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dce37a7-d3b7-4443-bbca-d594331f3f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b41ab8-1476-4be6-9cea-8f11d0337a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fef4e78-c32c-478b-bb62-da9d73ff45f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0136bb-7709-4b80-8ee3-f90dc89c91e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e0f66f-36e0-4144-906d-d8db2e6f1765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84559a26-fe45-4f36-a193-862604766384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed27e6d-a65b-4beb-a6ad-36d3f148c195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878f7903-3939-4c42-a1ec-25f49474cd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c66dd3d-316e-4897-b75e-e3ecfa3efbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a41208-387f-4618-a851-73606a950b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bc1844-a8e0-4b38-b89d-1b6358436867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d320d744-f8f0-4dbe-bc26-0ce84eaee65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aaeef4-6828-4612-9c1c-7a3ed2666717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55bdcde-7639-4f8c-bc47-e74c520d7399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b360a4e-5882-42af-9263-871a99711d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bf1497-6943-44e5-8895-a9a56fb835a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86001765-8368-42d2-b97c-eecd3d24c2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f317ae-3b9c-4080-86d8-044ccd1ec90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0670ab14-bd11-4734-99c5-399206e09965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105ba084-8ce6-4bf0-a911-aa791d433d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35cd702-51d8-48fa-9072-7bb49b1ed1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4df57b-1ed3-4323-8a81-f725d69ee138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba324a17-8c75-461a-ab70-9022d2603946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a46949d-8559-4842-b676-8a25d7d5850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa27874-bfdf-4332-bb87-30d883326dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c15dbb-8260-4a21-8fd4-923eda4c032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af725ac6-d709-47f9-867b-b66f3e773653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5535d01a-a792-4bba-8b2d-8e993d227af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab53735c-c3e8-4dad-a29e-ee8d7c11c40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80251ebc-fe7c-446c-88f3-77d9f0c9b0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf855ca-1ced-408d-8830-e8d4575000d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ab8722-aac2-4c2b-bae4-fe809ae17bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4f6830-3ac7-4937-bb93-63b7df3cac55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2311bd7b-62b8-4375-8f77-300a3964cfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4471ef1d-76a2-4c8d-b0db-7539421cf384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1adc3c3-8732-4e1f-a980-95647950c929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd17dbdc-3f0b-47f7-8dc0-646012b2ffce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5627374e-d4fe-4026-b0cb-b892b0652631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71fb111-2ca6-4435-b877-ba76d3f3278a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.144.22.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c9d87e-af99-4417-b337-48bfa733e918", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.215.220.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5440f5e8-8e31-4447-beba-a86057875cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d2c23e-eb36-4313-93ec-ff9c78a9c6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3a60a3-cb8d-4ec8-9efc-6c095a31e187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be60eb0-3f6f-4b8b-b358-af92391c6929", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120b4363-4e11-4f5f-a9ab-d26fa9ac6958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ad1dac-9891-48e8-8d03-4890f212104b", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.56.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7b9a45-7eb9-4d18-b6c1-f1c956c04f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae307ce9-e43b-461b-834b-64c0de9f7ede", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.82.133.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f991b48-9c10-4d5f-92e1-7862a79b1165", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.169.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ebf8ae-2f75-47d6-a94b-6b67a379fbfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.187.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a7bb8f-fbd0-496d-a2af-ff197eeb3bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3740a10b-1fdf-44a1-97d3-c86bcca5a6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3b2d1c-1d8d-4b63-bbb6-d3b1a527df2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb49697-87d6-4746-b929-7ee0123f3f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.43.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaed7532-4045-405e-bf1b-2a43c333f9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a1070b-73a1-4edc-b7df-988b234f96ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc60813b-169e-411f-9892-849bd8277b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07000620-fc67-432b-8c2a-b6d6d9e984c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7e1ec6-44c8-4c46-8d88-79162cda24ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3251d447-40e7-4479-806b-d9c4098bb827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62803f4e-ab42-4dbe-a23c-6bfe67efa544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b807ac-0eb7-45b5-a1ac-34eef624e928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a0ea31-ab0a-4a94-a099-055462c62ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00ad383-77d0-4b7e-9132-dbc03ac7b8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549dd593-fb73-45b2-909b-87318cffd331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fbfc03-9f6c-42af-93bd-6d1ce8020bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42ccf5e-a7ac-4c51-a525-a4d78b57b93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdfc01a-7920-4e7a-95fd-b049d8736390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfd0ba8-6c19-4adf-863e-dae8a86ad3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce24ac0-8f01-4dd5-b885-326474b20dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaa6557-10f3-45f6-8c1f-56311ccfc551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfc44f5-782f-4aa4-aadc-4a960e960cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bd07c0-4d5f-4cb5-a980-0de47e18ee30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc47eba8-800c-4c64-b264-6a5904e357d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65801279-b919-4c08-be12-55351016dcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bb1238-dda4-43e5-bdc8-5884dbf95003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d9bbec-e34b-4e6c-aa20-adf90d00d520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f754d8-57f2-4547-8daa-876d3a860563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e26ed10-c790-43ed-a24e-8d589494cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286fc02a-51c9-4aa6-844e-04ac028fe105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cced2d6a-7259-4ae4-b909-19ce8f91150f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f46af2e-0b0c-4ad2-915c-6b9281a83878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2350262a-d008-482e-94df-b7762d7b823f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd565dd-88a5-4b16-9db5-4f50e5cf59aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaabb558-5895-4048-97f2-410ae4d4f5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a0e90b-caff-4e42-87f0-8f27fad27afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c1fd31-342d-4b42-9763-bff21e6fe972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf04733-5225-4f1b-b980-cf74c3be1c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85a1f96-df11-4087-b90d-5c9cc4130dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d0c17f-1d01-4bae-92c6-a99f02111334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3667704-72bb-4b56-a719-c98424b8db12", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490ac241-bc3e-4e6d-b64b-7731e9391c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e0d329-26cb-4628-b759-7604d5a9d061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809843cf-a3ee-46e6-bb21-8b51228447f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2eb4d16-16e7-4448-9575-f855c9020e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff14dd6-8cda-4aa2-ad32-0e21786002bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.219.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c37f24-05ce-47dc-9827-f4b8169d3162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f7611-ce52-4e04-80bd-8ecb0315698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3197ea42-0bce-4405-b3bc-62034f92ec52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2e0c5a-b506-437b-af5e-81b300cc402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf47ddd1-6048-4f35-8ce5-fc99430bbd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af96764a-8161-45be-978d-9f2b45e6aa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8838456-b51b-488f-a9d7-473728104316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d12111-193b-4739-b5e1-ada52918df17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c746b077-fe9d-4cf4-b77b-d09631f402f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e7f058-e4a6-433e-abe8-2e9458a941eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c21baf4-8774-4fba-bf8b-6cad2b4a295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a95ca8-9f5f-44d6-a681-d0a0966949df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6863ac8-bd31-419a-b594-b17a7882a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d3b922-fd16-4d2b-99f9-5a3d6de8a325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.81.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f27e44d-5ed4-4391-be0f-7879cddb240c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5537d88a-45ae-4374-82f1-18bc1e2c5a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66354340-3d0a-4cb9-bea4-81c59309e999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa5f370-4904-4469-89ea-7f31201086f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5903d8d8-58b9-4433-8116-702aeaab6d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2423dc33-377e-4e30-be5b-9878ab1c49f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e123caae-1f72-4412-884b-1395ac340467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c013a0-d3aa-4253-a949-d09f1522fbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e8071-ad4f-4195-b912-82968c1ccc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0f7731-2b05-4df4-89b3-af126492f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce45327-3cfa-40fb-85a6-1bbea3cced88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3dc84e-5ce1-439d-8f40-dbb773ee2f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246f410b-dba3-4c33-a13c-34d3e71af153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f85bc60-3e0e-4211-91f3-5c994feeb994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bda4727-e5e2-407e-b1a7-ca4f240aee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4be1f5f-ee51-4c82-8893-1ba14e57e436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c049746-38e1-45d7-ba80-c0194f3fe3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31ae30e-cc81-4995-b7df-79e8fc5faea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51eb73e6-06c6-48a8-ad6f-22bcacce151f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae1d99a-c461-4f01-9056-86c880635dae", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6801d5-80e8-441a-90da-39fd602941f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a0c70f-888e-499c-b0de-6597cf238db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666afd43-7e25-4325-8b6b-41efc7e1585c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db9672e-60de-461a-9286-bcbfbaaad6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c6a4f4-2ab5-4f01-ba1d-6ae07bb43c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3035e5-5f56-4452-b8cc-3cd79f4bdc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d241b1e7-c015-434e-b6b8-62a24c75af30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e421d474-ade8-4e2e-9bdd-c8e887c04afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ba23ca-7c83-48fc-ad8d-af5f2289809d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb512fc-7886-4160-b5cb-4eb919f0eb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ce189-0b82-4d12-ae78-28133654463b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580fc054-8f78-402d-ad9a-9c544fd5c186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0422c249-bbc8-477e-ade4-e5cb04ac30db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a518c221-3cc5-43c1-85b5-d66b634354b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09927431-1b74-4bc8-b70c-84f92df8ecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c583ac10-be53-4afa-a3d1-f31ea3d56a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24312b12-47f5-4724-9aba-ba6b0a7a33dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bcf0c3-6eee-4552-a890-b773a4a71970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.39.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426c1773-664c-4f36-843f-67dc650fe260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4413ddd-b6ac-4a93-bdcc-6ae79b2d4f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06816165-590c-467e-b9f3-eceb9dd0596e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f5da25-0f79-4f04-a45f-561428eff653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03954db-2d0d-45d0-a11f-c60051032d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25edd270-7aea-498a-acbe-9ebd7f455c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7495585f-1fc3-474e-8778-ef2fd7257258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0dd013-709b-4956-a4dd-cbf6e985a4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6537fe00-c23f-4e13-b491-bee2e0f486a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40313d8b-d1d7-4fb6-86eb-99aab9eaf041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01e5084-7ccd-4102-9484-cd2115547853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb0c962-6584-4a86-993f-b23d3f64dd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b6bb69-185e-4bac-bb97-80159cdd5445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91090de1-4011-4d23-a979-c7d39478f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612a960b-fea5-4bec-9cf1-0cc919366b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbbd2ef-f4fc-4f36-8d1e-871dec9a1fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.109.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c20a132-59a2-463b-903e-85b79ebefca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b55d51c-6919-4149-a74f-9c309fc0ba97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65af1b5-8a18-4fb9-81c8-63dfcc6a6d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b9861-9c9b-4454-a85f-d6491ce349c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a20b396-5a85-44eb-861f-8a62ab0b0e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d33d57d-e4d8-4724-87fd-8446cdaa132d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396af4bc-4fa6-49a3-9624-6f27ac5bb4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470d1723-c81e-44c2-8d70-96a00c613799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a7b193-ff50-42c2-b73f-cb02f6d18c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b5d90b-b254-4058-8e9e-14a7e175f758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec949152-1591-4d7e-843b-3bc3b90c23fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f597f-eddc-4a96-9c54-9a3751e8ddca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda2eb43-ffce-4610-a149-13ddeb788999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee51cd7b-9c14-4aa7-b8be-78297a50f9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c5aa7e-cd33-4f79-8df2-480bfa152510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152744ac-a23c-4704-8d1a-462d6e2d69b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5273c4e-e0cb-4802-a696-b9e294a3c2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8618f1fa-7f04-4cf6-91a6-5fe95a2c1668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3255ce-ad68-4c9b-8113-6a17fb3efcc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc1953d-a812-4f46-804c-4750f88a61b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737247db-d0d6-4128-b8bd-fceaeeee8c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0b59b9-2127-4444-8cf1-4df0b2715cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38371f2-b9b2-42e0-8f69-a190aa528917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b68e2-eaee-40bd-b4ce-b9faf5c34450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.14.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af5d401-89c5-4ddc-9f9e-96dcd9ca4b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9612ee5c-47c8-44e4-a252-091de2f86dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86009309-1f24-43c6-9f4c-4b5992b9ff39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb83315d-905c-44ac-bbb4-16f50b254e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c98faa-0837-4587-afd8-a8b5f2ffc87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308903f4-b5eb-4624-adde-1bca866c8e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287dbfdd-555d-430c-be16-dc5e1a1828bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ad57e4-740d-4812-a855-22467ef58698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2e4253-c540-4010-b753-4ec346ebddd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a14fb53-4113-4a34-bbc5-454b6c10ab03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea569cb-e30d-4d07-a6c0-d8ae105d32aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db99c78c-57cf-434f-8e6f-58c6c5635b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aabe2c6-dfed-4492-9797-d01e67fc626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6fa86b-d88c-4196-bf89-390830b2ca9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ab2648-2ee5-4d75-954f-08733bea0a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85229c7b-7447-4d1f-9e82-2de17481484a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce86e14-379d-47d4-b4d6-8b19881c4e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbd513e-8e67-42f3-a1eb-2a2286c2ea16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99e1652-6add-4328-bd32-2e1b0c453e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80277948-9243-4068-ac2e-023f0a8cae62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd43ba0-30b7-4dd3-9647-d98e019dea2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a27116-756c-44d7-bd56-bdff4ee80f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f90a26-2a8f-423c-9723-37d069568a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeb48cc-948b-4cfe-b0b2-8ad2204b09d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89422e0b-6ea5-484c-804d-4628d0aa622a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7718927-ea2c-4db8-9a3c-f8b876154c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71694e25-0ce7-4e44-b1ed-54d9afedb91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0996dfc-480f-4c38-9bcc-512bf6723ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f372ee-d4eb-4ce9-9f41-fc3ba4b2f653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8171f5a8-e8ab-430d-8ee9-9e4e71c8f9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7693b09b-7104-4d4a-b489-eb8f1c4dc332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a51dee-b201-419f-a9f7-d8e96b7e51d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc85af8-4a7b-4688-aa47-05d78a732177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa464c98-0558-4202-9266-4bbd013a1a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00b489b-523e-48e7-b08f-8450d06b73cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb0e728-e027-4eb9-9099-e82a18646439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82238f9-54e0-4405-aa5b-907c98d43030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e319e2-e447-42ad-8429-46f8d52d5f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060c446c-8af5-4cf2-9172-d03743810ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3052499e-f9ce-45ce-9ce0-489ebadc4fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b5455a-6f11-49b4-b1f8-e41e6c2c5f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7724ac-7475-400d-b45d-d2e59ddc2a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdb2aa0-51b1-4d38-96be-edd5e779a257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7c78d8-ab5d-40f2-aa9b-d8dcdc435921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dcc9e9-2931-4f92-bc64-3da36f6fc470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5e6a36-9626-4a06-a137-3b4e96996942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.156.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe5a4c0-a3d4-493d-a00a-ba3958f68ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bf5b27-4c2b-457b-8e9a-6fe69b11dca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e11b16e-750e-4bce-a359-92ad6bbb179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ff756f-1cd5-499d-8929-18450df65181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d7930f-2d71-4969-9287-8899d7a9df1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f93ecb3-a49d-4738-8694-52ed66744ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6b9f0e-f95f-4d79-9bb5-2336c713275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f161a32-070a-46bd-85fb-7d559998bd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2551c476-20bc-42fa-8517-0985ebf23b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a35f146-538b-4b2d-8f93-2bb9cdbf3043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc251ba0-3552-4649-88ca-cd32abff0114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262ac64c-6c8a-4a97-8951-65475a21efa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55fec15-ccfe-4fb2-a3bf-fd74f6a91084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6716151c-7886-445a-8e39-314122846b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9748912c-5a84-4256-b3ea-39ee3ca017b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77285c5-a051-480c-b42b-f88593626c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6fc9e9-07d8-493d-a567-e12dfa4fc7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fe527a-7894-4574-ac46-498f5f1a64bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.55.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb00b40-2831-4c4a-9488-4b4d89aa544f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468a51ce-aac8-4d62-8286-e5150defb740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e922ef93-1d7f-454e-b7b3-1d654b47ddfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b37384-2c99-4c9f-b1fe-076d3663772b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc227d1-3771-4e38-8f6c-30889c0d4620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2ae67f-52c8-44cb-b0bb-d0811d64ce0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.141.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761d513e-2184-4654-85ff-11b016153bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.153.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f5e24f-fd8a-4204-8ed7-669dded8b1ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.148.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c93099a-ff3c-4c5d-8958-33cda16d9e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85f2669-46cc-4d01-894e-f039f9cfddc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b6d8f7-4b62-4d37-a937-67f8b23471c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8516d410-0435-4986-babf-09e787c609be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db34ca7-9122-4b96-a229-5218c0116991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fba1ada-14b6-491c-8b85-c95d61087523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a633bc47-ed47-4c22-8409-126cb9826af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918db999-966d-4de6-94b3-4af15b9a606e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd671d6d-473c-4457-be56-a96833740a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f484d8-a6bc-430d-8edc-87a6155a8eb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.240.137.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3297a6-0619-4fba-b240-e817f69cb69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.45.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dd8c47-90be-401f-b6d4-6476d3f7867e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072c32a2-0f4c-4b20-b2d9-9a51e00bf25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53301e7-b0e7-40c7-8a91-faffc2ccd9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29072112-ba2f-4e64-a8a5-6fa3b3c18864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b252222-11ae-476e-8109-1a77e90fa1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd02bc51-c7f0-45b2-9477-bb2eee2443f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.129.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2116c2-9a4e-42c5-9efa-1bf4cd03f88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.32.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc4e38b-6e00-4de0-9a98-cf81b5887b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78b199a-89f9-4687-99a3-f90f623df965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e188769-60e5-4d7a-8ace-b072470204d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0816d8-aa38-41a3-88a6-14bbbb16c900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.43.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b178389e-0083-44fa-a673-7921ef4dee86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62733fd0-2b3b-44c8-96e6-80e10472fda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54adc0c-0c3c-430c-a121-d7d10facfeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619bb9fa-57d3-4fb0-a619-cfa67caeb676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685db73b-7615-4a01-8bb0-32c2a0a70b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215a0f1d-f631-4c1c-917e-97b6a954d9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11baeb79-54dc-448b-b437-3d116320b0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80325c52-dacc-43f5-91f1-d17cedc252da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f45c94f-592b-447a-aaf8-adc1f0abbae3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.84.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6521e03-eb94-4f98-a2df-953b4d35f8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.225.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fbe3d1-7ee4-414a-98bc-74d55364fd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67c1efd-d9dc-4056-afc1-6bb9286d4a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dd2656-86b9-4c13-864a-e5b3c7e15828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b323884-cc53-480a-8af6-6c7a481f5fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9fc358-51d4-4014-a16f-01cb63a43cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae24bd9-5a72-4a51-886d-838b0adbfd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbcd61c-e1e5-471f-b977-92c563faa793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a86409-372e-4944-86d2-ef3fadcf66b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.241.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a83261a-e6f3-4e8a-94b9-3016dfb9fad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142c51a1-b71d-45bf-a419-2118c25a93fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d10ed6-f74a-4d96-888e-8bbd808580c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7933ae-deea-40f7-a2af-c878f867bf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f3fb51-d4ea-42f4-b315-11e04f7ce28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4869fcc-2a61-490b-946d-238b5aa4da53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2e1e02-239b-48c2-95c8-a13920ac0f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2839fcf-1822-4e5e-9f63-0a22e6020665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.42.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9141a3b-2b34-4053-8788-f2aa6009cb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c718cb3-0dcd-482c-9132-b903e94a6b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bdec1d-78ff-408a-95c2-1b7cd6d902cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff43c26c-5d6a-48c0-8225-b085a3f743ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.194.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5a4461-4437-4af2-9d86-070174eca842", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.98.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2138605-c005-493d-a215-8672193cff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e498b6-4cf6-4566-9797-53974dc58d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4974c12-7995-41f8-b703-125eed01abd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f65bd5-835c-4912-96f8-2351c9c5bc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97766f1-87cd-4f2c-9797-b72b637a962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0a3831-e941-4f61-b632-bbf99fae6f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da2e218-528c-4f6b-8dab-a0b734a5e3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d10574-2189-42e8-8204-39e4c619b0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b79e2c-e27c-4858-aefc-9f017f1feca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d0c5f3-ec11-45a7-a312-9cbee25f65ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa78a83-df21-49f6-ba20-b8a03cb079af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c73c07-eace-4980-9405-81105f99658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ceeebd-b8ca-4fd7-8343-9a4feba2ffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d923e392-0c7e-4c92-8e6c-bd94f3ea34b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745ab204-c9b3-4b10-98ab-a822fb60ec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db7e5c5-2a06-41c5-b010-049c92c90087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824cc343-bed1-483d-a076-bffeca170bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bbb41b-3abb-490c-adba-7b2eda851270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f419722b-dd27-48e2-b8cc-62569a1ef466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bd74d1-c058-4ff7-b7a8-97050892c0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599662b3-5a4a-4a21-a517-3a3f7389a22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e3e64f-f049-46e8-8c88-0dd0154427b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40033701-e025-475b-84cb-3881cbe0b55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b908e73-245d-4dea-8501-c20ec62c7b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43bc021-0572-4fd0-a29d-60c68ee6848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81227b92-13ad-4e5d-9147-09ee8f69250b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60314f6a-4c4e-4447-845b-8b3d5953726e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01990ddd-e55c-42fd-bd20-c412386d588c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904e5368-067c-485a-a786-e0bd2d2f10e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adea12a-86fd-49fe-9c24-ccc21a0b9c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135d1138-b30a-4f43-9e22-c2ac9f2af287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93debfb-2bda-4089-a8de-eb225ac01522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceca675-4f90-409a-87ce-207e6a465c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f37512-f876-4ed8-8a79-a124eaf65b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b24f1d-3b72-49ed-8e73-40cd47b5919c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6dbcf8-f18e-43b6-9070-5a589b8bf34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb99352a-4da9-44c5-9c6f-a0d3e0cad8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ef5614-a3de-4437-884f-90fd36d6a94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d042c98-9fae-42dd-8c22-bc3d2aa00c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8823fbe4-2eac-44c5-ad71-607c2eea4f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d24d9f6-ab04-48a9-a809-7a8d8af57b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9829cbf1-b1a7-493f-8f48-12d773020c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dab4fb-3348-41d8-87d0-716024a3805e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f129d6b-e784-4d39-b34a-38bc280d5212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5dfda6-7510-4d4d-baeb-62366dd589d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5099d5-dbed-4213-bece-e32bd23be806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b999dee6-6de1-4a4f-87f2-2968e4a743ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d375ee-f071-4a0d-b2d5-74140b9171c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9abf0b9-07ad-42ed-a9b1-217365c18d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57806929-a732-4ee1-9772-d01a141a2a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843268d8-7b6e-4239-8f7a-d5caf74d1d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7faa3e2-e462-494f-8a01-df6077f77dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352097f6-95c7-4a65-af85-92dc9c019baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db37ee6-fec3-45d6-9f97-acbe95dd94bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b279fe-bf26-4ab9-8ab5-dcb0a0aa56f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2068f7-7b8c-4f41-a71c-692afb155911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80def07-3b70-4d45-a660-476c48216ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e32a6f-f031-4089-8cbc-8892c8825bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e30234-b859-47f5-af73-df61653a8c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08841b8-678e-4e53-bf4b-a3e9800ca973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dffe59e-a2db-4393-a7bc-06180b575170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035e298e-9f7f-460a-afcd-0588ae7716b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24659014-ba91-4de5-8a4a-ceea375038c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd504543-3e6a-4c31-9294-ed15e366c926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af6b4aa-3741-4b1b-8a7b-52a16be35a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b059a34-8c8b-4049-b3d1-11df2d337ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a167f91-86ab-4aaf-aae1-c1cc8f3d5360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdd28f5-d0e2-4f59-b061-46a522b20a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eaaf50-16e8-47b4-82dc-f19cc957bd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0588a0a-bb4d-4f4b-bed2-6ebfbb5f274d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae5315c-b50d-4b36-a251-6e3ead4a13a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed568505-2ceb-41e3-b033-4f376049923c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7796a7-9a99-4658-9753-0df65d6e67cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde1fd59-9901-40d6-923a-41a497306872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395c314a-7386-4806-9fcc-cd4ac4320732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6bfc82-8e27-47b8-a475-027ba3afe072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4664886-8789-443b-b26f-5109e1735b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9462915-dc84-4fa8-a48e-f5306b8bd3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb2fac1-f711-4ce5-8d3f-0914269ff87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014ffc75-9184-4954-a96d-e73ee4b95089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb31b69-9a37-4dbc-b892-fd7808e11baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163ba043-856a-4d45-b3c1-9e1dbf125d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f701bb06-a75f-49ee-b4f8-c79cc4ee998c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0accabc-c389-44b9-ae4d-286bca7986fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd16477-2c4d-4089-9c07-dcfc2b16a687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd781d1-2616-48fa-a3e5-41773bf11f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf3fdb4-c09d-4d60-8c01-17bc6cb6b163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fef9704-925d-4ed7-8d03-7838e886ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfc3749-c873-41c5-a8a0-890ff0758902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6225d9-0199-4ddf-8573-d93654662e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367517d2-7381-480b-a5b9-fc66bb89bb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a171e7-a0ac-4a44-a383-9a4d5a31d74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6160f0-7005-4d57-a6d2-8e67c3b53572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5326f56-3bbc-4a4a-bbe1-b998eb788663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042304b-7c99-4d7f-b64a-f4c84a428b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeecac14-5c56-4526-9e01-c8d360b65c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c20ffa9-fcb5-4fa3-b4d4-2fcab371379e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343c983e-b32f-4678-bfb4-3510945bfdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0025b2f-03dc-41bd-b96f-afc3aa261175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899cc834-25cb-4cac-8fc9-557f3c7a3a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75836a8-5e68-43c7-a914-38f06289d8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba89d38-e2b0-478b-b70a-7d3aade3d742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3ed989-0d36-4306-b7b1-1acd36c9bd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f08753f-40f4-4dfb-9161-37e8daed7489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6777a7a7-30fe-4349-a979-6698c85d64f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf63a72f-c9ac-4f68-b67e-349035e452a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690dbce5-937b-43e7-9c3a-d6c67c5597ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599c028d-6375-4940-bba4-01abf8421100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee37693-bd83-46d6-a3b2-fc24013cfa16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4fdedd-0fd4-4340-a4e7-c35bd6d39847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e8f7f2-24cb-4ee2-a488-af0a61582efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6bb029-9888-4f92-87e1-aaca863e826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954633d9-3ae3-4be3-9b16-8557bdf0ba5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cf754d-e7dd-4220-a2be-599227ee824d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb990b6c-628d-4960-8d03-a388d1bf2d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de85ef4-3382-4193-b3e3-8f5dde54296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0744a2e1-258e-4083-a10a-68fb01dc5158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57064dc6-a8b9-47ae-8e0c-67f4e7da966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afeae8d2-524a-40d0-a723-a41eaca86710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07363915-8bc0-459e-8f9a-c163faa164f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9f4aef-e76d-461c-b739-a8e4698ea636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685008cd-8678-4b19-b3b0-34cb681e5bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596ab9a0-1016-461f-96b3-a74fbd6aff04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdd7842-c3e6-4f56-8769-48b2fa27e5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b221457-ba29-46d4-bdbd-7eaa78134d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18e053d-7bbf-4ad8-b619-6be8f4c83050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7ddc8f-1277-4a9d-bd36-be2d2fe256d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8176ab-a0fe-43ce-9135-229b40cfe9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0e4f53-84ce-40e8-a20a-d2ea05113acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a2ee34-9276-49f6-b7c8-46d817d812c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0827e43-0ec3-4a1f-b5f7-1d9da489d970", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b660ccbb-0c41-427d-83e5-933bc2d5e6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e3791e-65d3-431d-8cf3-3c2ea747a5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac51ba57-2380-4c4f-bfb0-73f808c7b203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a14bed-2ec2-46e3-9d30-e0a3db3d1188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.104.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e220052-2ada-41a7-8ce0-d7e25c92e64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.104.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fa96d9-12a2-468f-9ca1-c8d483d6ca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bed14ba-56f0-4213-8c3f-78dca7fffa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def887b2-7a80-465c-87a7-90cf9ab68389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b11b733-80c3-47e3-a60b-f4a12699eb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c47e18-3d7e-4af6-b6ec-dbf2f1a7d4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5350ee41-1745-4b1b-9329-db3289535e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaefda39-f692-428c-9645-b2762a71b82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaead14-e86e-45fd-a9c1-e4fefbb197ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc329bc-4615-4bf7-a0e3-d78f62e4e472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c46ee3-ecd8-4e62-a0ff-4486e1b13a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1226aae-fbd0-44e7-82ce-3cc0d035761f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe1ef2-a34c-48e8-9a4f-2eb3efee1118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38906723-8887-4d1f-8123-d05b8269b9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d82b94e-58b4-49d4-a143-88a3d2c7c947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94832d62-90cc-4a22-9c83-7ec846a4210f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f4812-a3f2-4d0c-90f3-e159f16fd355", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd21b6a8-4616-4006-9a01-fb5e9d989396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eac7874-9b44-44aa-9c13-40d6310f55e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89402dd-7b2f-45db-81ca-445c397892e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc701393-3f44-4e1e-a4dc-b06763bc40a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841f6c3-44a2-4a2f-b808-6d72d72fc69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce361d03-a872-4c0c-9f17-b030f64d0dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34f7e1c-3058-48d0-b11b-ef3928c6585a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04a47ba-5aa5-45a5-bc53-e00e78f32b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475d503c-9362-4dd5-b7d3-8eee152e8bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f8e41d-eee8-48e9-851d-04db3a7a1a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.68.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8597c7-6719-4703-a97f-b0dc75ec6d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d4dd18-3fce-4466-b950-3dcc06364cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b054f2f-6764-4371-9358-a95b0c7e8ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0543512e-18c0-4083-b9b7-94252b896e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136d99f2-6ca3-44ed-8462-1543d2064e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69872ec6-4299-4349-b559-9134e51017b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c50bf1-991f-4391-a779-6bf4db6abe89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d36cab4-62a1-47c4-8004-3ec8fb8a6038", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.102.75.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f8d6e3-f44a-46ad-bebe-90b9ded6e797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.232.125.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aae6d8-c952-4dbd-8cee-543343fca5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.72.2.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65934b47-1f91-41f0-bb86-b8d4b23f02a8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.105.99.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dba2ab-f358-4f23-a786-7800578eb734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.137.165.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31d405-54b8-4ffb-af08-4d443e4ad673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ab944-de92-4056-95ee-bb859f294f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.147.239.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30ee444-01a3-4f63-99e7-1c404e6acaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.152.128.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e26bec5-edb5-4885-89a7-d64ea2a41876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.246.153.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc807e51-e14c-46be-a3d1-4d67192c8d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.79.1.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca1907-e3e1-4da6-b745-8b44503ae5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.105.58.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea50bd9-9603-4bd9-a9bf-2fd56cfda9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec78b92-5d29-45df-9c5d-ea45650aacb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.133.191.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36a0e1e-2b32-41b1-9fb7-461bcffd6ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.47.56.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c910b37-4b76-487e-a60f-ee4f9308b010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.106.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f918d5-4a09-4394-833a-f94a7414330b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.74.242.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d289757-3099-4d30-83d6-b9a79a379dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.9.127.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e245badd-3d57-4ffa-8e04-2cd38e2d1095", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.121.40.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e99ca5e-ceb5-48ea-8420-801b3c160ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.124.40.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f1e8af-1f75-4774-b600-91336b8afcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.145.143.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a815250-2e6e-4366-9f54-6000023a4e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fc9ee0-8c08-4d38-91d3-da28ff2e9104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.177.215.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af54f5c7-0969-4fa5-85d4-f1c7a117db3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.221.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4bf946-9cc4-45ed-9322-4cf391a19ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9bebb2-191e-4c31-adf4-9c2c505d3f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5fe154-4060-4dcd-b8ea-6303793fbd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015b15c8-6e05-4444-ad57-454000c5915f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29caafe0-9a71-4864-bf6c-0eda21f6ab5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205e1c13-c19d-4f88-8ba9-9b6fcd65cb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5378bb-803a-4637-9f2b-e5bdd3eeb094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe743a53-3d03-42df-8856-02b0d987ff1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.18.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485e7036-3b5d-40a7-b32d-8c3bcb2a5a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.23.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89634a1-f487-471f-89a8-55a2b073d9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2bd724-67c8-4d07-95f3-615a02f3177c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c47554-b8b0-4492-b597-4ce4726aec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c952333f-cc02-411f-accc-d7c25b25aa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99394032-022b-41a6-ab7b-a6dd24e77ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd56eb85-698b-40c3-8351-822c6c56edd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78822a01-2942-4481-9075-e1834f385a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fdb405-595a-4005-92b2-84c2d5ba9403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14eb06a-2ac1-4af6-b00d-13467194915b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9816bf4b-0d1a-47a4-a679-7d68d3513899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a48219-e651-4dad-ab34-7da6977288b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b244940-1715-4c45-bb02-7ba0641f8a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe5b76a-7a8f-4a1e-88a1-5d2cfc7af8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0458e779-3163-4a8f-9eca-99b814fdcff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcd5ea3-175c-4a84-82c9-5330a33d1678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d416fb99-2107-47a1-a465-fa842e86d50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8868010f-53e4-4c43-ad0e-f6d70f78d453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b86c69-6507-40d0-9a06-de74e9d29a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023abfb6-a176-4066-a056-07568a2890f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926f21c8-b021-44a3-ab26-bd90f4781559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff47c5c-7ed6-4dc3-92df-4b2f9b869e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c68a1-5a9b-43d4-8764-66d56b66c7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7968867-0e5a-47cc-b2f0-2969d6f9c0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510d8ff3-424e-4678-88f8-f77bcb4ad922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156fde55-eb75-441a-bede-093f1616ab61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c137badd-5ed1-4037-b71e-deeff56aad5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efd1fb0-44da-4d92-b741-0fbbfd3704d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6e8e60-556a-4fc3-9869-53e3d2ef4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6573f353-4373-4894-9509-5c9d89b2427a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ab96d9-0f21-4672-83ac-347c11ae52b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c0ddb3-c648-4759-8365-8fedee975cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4471cbb0-475b-4839-8597-503fa9403d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e83765-d7a8-43b0-bedc-21760038d9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b157cbf-d65b-458d-8f08-e24005d38308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241fabb5-7a72-4b65-9a8f-eeb8968c21a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5255b5cb-9cfe-4f25-a1b5-d4d06c69c5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f68f6c-9c1b-4ffd-8426-4f651056e8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c8a0ab-4f96-464e-904d-706a87ad0506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf4d419-269e-4df4-bf86-50a2e23fb671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f7e34-deb7-4fd7-9932-2465945a672f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a25223-81e5-4cde-8f97-f0d99faa1dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9df0944-059a-44fe-be38-65606154b02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab955fa-5f3e-460c-bf4d-f7db3e38f88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f1c591-601a-43d8-ab1a-4d19da9e3fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cc589c-fa8c-40db-a436-775d20dcc8da", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cb884c-198f-4fff-871d-acc889f1f515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b354ad2c-bedd-453a-9a68-46cd4b88489e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a80287-08c2-4d68-af12-c937389f82f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c08843d-8e1d-4fae-9bcc-2362c71f2f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be48003-8b09-4d17-9545-2ebf14130aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fdf088-66eb-4458-883c-85205d68b2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b96211-f6b3-4bf2-8d19-23e6729b4bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5832f2-6ab6-411a-ad4f-3afec27bc999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a0b2bf-37bd-4994-a082-5742bd6b50b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e20a83e-d891-434d-a236-a800e18686b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fa2b5f-8685-4578-8cef-345f7e2391ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171f017c-78cb-4c9a-b17b-6ac2b3a52d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b9894f-12a5-4aad-a6b2-458bf841f797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23df8daf-54bc-4037-a9b4-c8aebb7d8841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9315dc6-f906-4968-b300-83833cd3841c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff1a626-f0b4-43a8-84ae-517c4b157306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ad5275-28e1-4b61-ba15-124f8a0b8012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c708fcf-f55b-4fb1-b47a-6a184932eec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b381eb66-22b8-491a-ae1d-dfed11c3c8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b37de6-d9b4-4c30-bfdc-e93ca0e0863f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be784489-eb9b-4629-8da3-1fade1c30393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac52a5b-a455-417e-9b3d-d867c0aa7afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a1ad28-c5e2-420a-b320-7fef86a8a544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53076d50-a922-4874-b4ac-5801d3f01e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b99b034-a32e-4c96-8afc-2d2b71bd8091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293f4d21-4c28-4f00-a49e-20bc315be0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5375c7b-4998-4c85-87bb-baf2acc84356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3794d6-5dea-4aca-9188-133dd4ab8919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed8ba7d-5ce3-4a64-9c21-07b923163d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4027b7d2-9caa-490a-b926-fc42523f82a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce24cc9a-f4de-4ec7-8e71-f93a8a546588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ef35bb-b0d4-42ad-8b2d-91d47dc0fa8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bac443-9f57-4286-bbb3-35a75ce95ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d5032d-5f8d-42d1-a848-99eb903b14e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25d9ea9-5a85-4b99-9594-8f7cf92b0e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dd0b97-8d97-48eb-ace7-8652f667db45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47825a99-829e-4bc5-89c9-7bdb4a70cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112eadf7-367f-4269-b201-2f46937cc94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a7acc4-6466-483d-bb59-a3aa1e8910cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181c4353-7e21-4914-9121-c8b6bb252d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08efce81-9acc-4c8b-bc77-0234869f1b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93679cf1-28b5-4dfe-af9c-4af0df100e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97080eb-2094-48b1-b4b3-b0188c77c6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dfcbba-c743-4ea3-8db3-bc6a38379c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85075414-a881-4ea4-a515-9a87e7651583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d934185-c137-4215-b3a1-fbb3e51bdcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a5ed31-338a-485c-ba79-e83f1986debb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602dbf19-f812-4188-b4c0-4a422ca6cd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dd1058-d5f9-49bf-aa5c-21b1dd77673f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28108f9d-f911-4364-ab47-f79dc8e1e82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f42a0-1ddd-43c6-b7dd-c25941ee0c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434a5d3d-ffd7-4fe4-9e4f-e93f7e141e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7281077f-84fa-4460-af04-97ca6ba3048a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fa7443-5e75-43d4-85c4-c818ff075468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ab3553-b53d-43b1-b507-1d17be9fb7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c509eba0-535d-4483-8dff-20c5b5f4a33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287208eb-90a4-4142-8b7b-8891afb07d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8becbb1e-4729-491a-81b5-74299ebb4c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3f2dd5-0b16-46c1-ad19-5f5823a3adfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e87e5b-c20b-4bee-a627-edfc1010bdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b618b7e-59d2-42e9-b85c-466a5e4384e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939710b8-d2af-4f3c-81de-fcebdf0441ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f45bb5-9494-4b1c-b905-fc9f68c40d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fffe18b-f299-48c3-afdb-e9762882c264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c96fdc-d4f5-4f16-8bc0-5a40a42e2ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c8fb9b-4ac9-4ebe-bbeb-ef99572bcd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe50a5f2-58e9-4e27-a5bb-c061b7bfc171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bfa14e-9241-44e5-94d5-aa2b5b87edfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526bc428-e402-4627-8c89-44556be77068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f06dca5-27a4-4cf2-8e7c-9eab9c83e9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad418960-373d-4af6-ba4c-cc5c4929c9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8d52a9-5d86-4bed-8069-d8bd02793ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d640a88-a6ff-4e21-a0c6-4eb86e91261e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d954961d-fe9e-477b-aadf-aa524248764d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7153bcb1-415d-49f3-9e26-74743c344caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5372a2c7-3d72-47ef-b70b-662dea636513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71393a91-2ff7-453b-8f90-1a7a55f6a24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8761dc9b-1f76-421f-bb60-d65e7d9ad1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5732f9-b43c-4e7d-b178-814b27f3f549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217ffef4-c0a3-48a7-89a8-daafda52f413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d6a167-18d9-49ca-956c-147424a540bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cdc411-dd32-4e1f-b36a-28143f65d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c822135-8ef9-4ef7-a157-be7ecc253281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d18c76f-b656-4852-94ea-929424cf119c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3872abb-8005-4878-8d1b-e067f99c0ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c747d57d-854c-4265-bfab-824773f3f6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fa96fa-f2ee-4839-85e4-21c25b92bbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124e65df-417f-4bf4-b7e9-f64eb84a9863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2412b4-b3e8-4e2b-885a-ebe2175ff843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319e7271-6a61-4f0a-861e-179cc05c88a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441bcb1b-53ec-43aa-bdec-94a15dc4472c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f90d55-eed0-45e8-8818-74bba61193b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef42eb0-5022-4386-bce5-7aae8d52a6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce55fd4a-b5ff-477e-9b27-980d5f23af51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7bb94d-a4c9-43ad-9e0d-4bdc09d5a2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74b36b4-01c7-4b25-afd3-6ec644616a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77db9d4-4315-4a08-ae45-14c43fb24b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235bf775-1f8b-4f33-8d27-6d5ea8a4439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d781774-3b3f-4f02-bfdd-93cf4207f773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4a116f-87c3-4526-be0b-28b8eb995691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec7bd20-a98d-4f30-a605-5a094c3cf424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d38e84-46fa-4c63-85d0-449cda33728a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6452bca0-6f4a-48b7-8c03-727194b22abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0259917a-5003-4c33-b335-8d69a44b52e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc98453-3e9c-4263-887b-0db4662f4f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30894bb7-4843-49f0-aeea-b01dfc3206d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316500ad-7399-42f1-b986-178a34f23850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd63b1ff-ab81-4a23-aa2c-5aa5167e3590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eff323-0936-4a8e-8c31-c5c204c3553b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2db32c-d72e-419d-966f-da84b1a56189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ad4972-35cd-43f4-bc8b-dda691e4a4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7a0fbd-79be-47b3-9abc-6cf0b442187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc314d9-dd88-406c-82dc-128ef4d924c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c882d9b-d088-46fb-b720-a626b7d0f8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1e4187-ba44-4329-8e6f-faeda326ca7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331b9c9-6970-4996-8c89-94a3fe313ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96306d5-84b8-4faa-af61-20b685bf21b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d0a9c4-d039-4e28-9111-8c8f610c055a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4544db2-874a-44b0-b667-235ca8698ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bb9e70-2650-4d26-8584-a27b9fdbfa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307af14-eb37-4691-99a4-00ed0d4b4a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464b0982-1715-42df-9dd5-a28b7d6ccb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b94e82c-134c-486c-af40-ef240a41668b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.0.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51198dfe-5f43-4620-b475-3adda396e789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.180.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5b5051-c4bd-4a7b-b4d3-4b85e2a1c402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.184.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfecccc-ca91-4f40-91fa-dfc216545058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.185.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7339e0f3-7a0a-41e5-ae65-e97b46cda733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.198.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebe8010-a82e-4e5d-bd60-c2344db91f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.201.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7fc1da-c1c5-4c81-95e9-1db21bdf471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.201.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83336530-837f-4d1e-864a-caf66d3c376b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.202.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e7cb3e-57c8-45dc-a970-fa8348853f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.202.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4fb150-7c7f-4a01-b223-f8f9dfba4014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.206.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5645e4cc-2972-4c6e-9b0e-d3d566f9efae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb345e1e-eeb9-4267-8851-7ea4517015ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.71.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696ecfa7-f2f5-4cfa-b37b-d929a18c7f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.238.68.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a58a62-af8e-4a21-b149-324a4f7f0c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.5.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb311bca-7423-4838-8c88-f59b1e2f88a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.9.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc25e06-9bce-4d7d-a69e-1db3d4ef1926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.221.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6322c4fd-1f29-4dfa-8f9d-958ccba4e346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.222.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fafa88-8a6f-4bee-a7d6-ef0463cc20e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.102.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9263988c-60be-4cc3-967e-5bfd5f135f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.104.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ae815b-e29a-4999-bc93-214e5030f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.110.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21649ab-dca5-400b-a206-2f065ff66d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.121.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6efc4d5-5225-4a64-a4fe-9ce8e84c1844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.122.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb5c38a-bac5-4b61-b18a-3d38bdeb5ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.131.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eecdb4c-50c5-4699-8f79-d0e67d9ca0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.150.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf22d40c-9625-4fe1-8514-bb05c7f79ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.152.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4aee747-7403-4fbd-a7b5-3bd6f1cea088", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.153.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3409d49f-75af-4a7c-9298-b743313d9cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.46.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5855ccfc-01dd-4b2a-8b05-581f9fae4ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.182.143.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02c57e2-09b3-4850-8794-2b63953fe58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.200.247.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c99638-30b9-4625-a13e-1a4476853af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.89.18.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cfca9b-dff4-4839-98bf-9a9b5795d45d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea525583-8fb0-4359-bb3c-c2506d6b62bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf172d61-2eda-42f0-bff6-22f974117265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc7ea0c-cb10-489b-ab7c-f797e2224ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6774d246-16d5-48bf-8059-ac9017384b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8890915-6054-4507-9f40-29b53a20027c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dff111d-4d6b-473b-9334-16cc76e1244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec11574-ec34-42dc-a300-540d9ce84215", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50de728b-5360-4301-b8a3-c603c53d472f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ef8660-423d-4b9e-8b17-c1c3bd3e2413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f56bed-5bff-40b9-b5d9-2f3991964381", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f4a81f-4886-469d-83e3-711a29e195c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136a9785-864c-4f55-b7ba-19871805a094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58ae253-01c1-4ec8-b300-ab0b8d45f596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1790c066-2c11-4abb-8f44-c7f9dccd16a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f15c08-1416-4f3f-89aa-e17e8353d65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28daf004-77fb-4d2f-a5c9-4129fc16f05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae9bbae-4fa9-44b1-a653-07c43015293f", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fba6da-bbfb-4809-8b66-f807ecc96081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bc3148-3c7c-4a01-8a76-7a102097edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb4513a-aca2-4fa9-a455-a904ace3f9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a088e1-6aa8-46cd-b955-0a89f2b2c189", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.147.81.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96dac8b-11e4-4c0e-afe8-fb0408de8bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.105.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f0b6f1-7970-4cd2-94f6-36713566a055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30fb77a-3c94-483c-9791-5d231fb2a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.136.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2812b5a9-9614-4344-bbcb-e557ed93fbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.153.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace64d60-befe-49e9-a5e8-59cf1e70b78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.237.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9315cc0a-7113-4471-a831-e35677b82c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.25.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232e1c9b-9b40-4b1e-94e4-6cccf1910be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.29.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03352da-f90a-4889-b6fe-e7480d6ec816", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6406d0-282f-4272-bcc7-34e7dc7f3a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.75.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dd125e-983a-4f48-ab2e-01c9f742a110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.80.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac959bf8-df33-4e72-b203-f391a7ed0220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.90.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff5ddfc-f33c-4586-8f45-a8ac25ae2bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.90.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96892e86-72bd-4932-8525-22ed5a3a2dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.132.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e03919-a3ff-4807-9a3a-b10159465b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.186.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656ad368-ae94-4447-9f97-6a8d506cc79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001ad94-ab28-46e8-8e29-87835c0c1248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589573a0-6c04-4926-b57f-1831694c717b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6d9b01-01cf-49e2-8aa1-f165c9d2b397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.117.36.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4a7c6a-89ed-4676-b681-3b0fefe6dd71", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.129.184.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d47593-457f-430f-bc3e-8726870bc6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.211.122.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af635983-4cbc-438b-9ac2-b42916a7f84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.61.148.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6062f8f8-eb45-4f19-8b76-25e0897febc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.84.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62307774-b5d0-4ea6-b370-7277db361d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.101.236.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a4aa4c-90c0-418c-a073-1de2d023d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.138.170.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b7357c-021c-4b10-83d9-1087a5e615db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.25.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe7f243-00f1-43f7-8990-b04b07e2c38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.225.139.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaef885-18e4-4c24-85fc-cd60a2eaa464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.236.207.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b78683-9fbb-4b90-ac2e-62a72d941c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04579b36-1bf0-4b6c-b68f-b9baaaf35e23", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.254.212.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0a7074-3464-4a81-a1a9-5ff16e4f42d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a27f78-c486-4f2c-a68f-abb27427b923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.61.42.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a2466-7b85-4c52-9921-a9eb9f368d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e52f83-ec88-45c9-ae12-00e14eb91f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.104.141.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a621c13a-368d-4c4c-8e6e-1802fa016549", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.108.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09187e9b-0f8f-4e91-bdc9-8ad05affba4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.127.90.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4b1f08-a948-4397-9d01-0eae9a43f993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05051f00-17e0-4dba-b85e-ac2a7d71cfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.28.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9365004-53bc-4be5-808a-495c55839a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.193.101.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f062bdf-e411-48a3-9d95-f1982f499ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.145.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e923040-b491-4984-85ac-b7c4f1fe4e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.53.245.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcaa80c-01e0-4bcf-96ac-bbecf01f8ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41426bdc-c8ad-4678-ab83-6c97e3857a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ffb41c-177d-42a3-ba3a-016e936d78b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06159b1-a6ea-4fcf-982b-261678cad177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b0a582-36d6-45f9-a1bb-e108820bd597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8d243-e36b-4f9c-8d94-aac4d6ec900a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e69b198-17ab-40a1-b75b-7af098e10bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43eb5c1-785b-4a45-8902-783fc5e2f803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eeb5d77-b160-4acc-82d2-d3267ee7cba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dfd5ab-5611-48b9-936b-d7f44cc4795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5455f831-8d90-4c33-b365-a468c6d6c075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b55b180-7d81-433a-bd09-e8a1aff6590c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8385326b-8749-4fb1-ae81-ed4b17911c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1938fa4-12d8-417d-81fb-dac51d96dd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6b67ca-0966-4111-a8d3-34035cca989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4faeb-391e-4b11-b2df-924267dc882f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b85964-831d-4a5c-b769-b72d738e1832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f19f23-fb8c-4ea0-b9ee-49bd5d77a5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9015789-a8ff-4572-a2b1-9a649d470216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eba4450-29cb-4977-8c7a-95c8ae0f2d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8161f1d6-ba86-498d-adb6-ccef9a8c862b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebe637a-5cbb-47e9-9abc-6d72998d9afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26270f2a-c10c-4bad-87fe-ab611ec93253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da311ba-d1d5-4790-ab7a-f57ada232ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7969fc9a-d5e5-4323-bb32-65f2885f76b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7df2a9e-da1a-4a57-aab5-cfd232d5e8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad10f3df-6394-47f0-9076-3a51bc589e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6a13bb-6a99-44b8-a9d4-1737893cbd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbd1c31-d9d4-4217-abf8-3134737da8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c7c24d-8fee-4c19-9b2b-2c798ce22880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6f7da6-3b96-4a22-9573-342d1352cea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6aaee3-fb2b-4653-a651-55876e4d447c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facc3d62-5b2e-47d6-8cdf-a294b0ec5df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00eca3f-c8e5-4e34-8b31-bf1c27f81106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9ce5b6-4f6b-4be7-911e-99f8b6fa7abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a838a780-d83e-4f22-ac52-ce347354ab7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79d28bb-ab70-4221-84d9-e2593bbf00c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d03cbf5-9979-42ad-b447-a4ce03b4b48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9b52b-ccc9-4b79-913e-c3b3629af423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7fad1c-80e4-4fff-8c6e-044140cbb0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7e719d-1879-4a84-9990-cb6126a5ddc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95fb5f1-fcf3-4f0d-a211-18e0fca7e6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23d9c41-3947-41e0-a08f-a6abcc7ee890", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.74.223.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb59f3-2154-4e72-9768-919346f7758e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72984a38-e4ff-4557-956d-affc9279aefe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.60.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfab2d01-0bad-40c8-8c2d-68fa5cfdc47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.140.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089e5dfd-de33-4beb-9b07-5f5e0409baff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.163.206.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e15d937-b34a-4e8f-8bf0-61fce19d2553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec54edea-0b81-4006-8e48-f5f58038815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac76d9de-00f7-4c3d-9c34-d33377391053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d43e916-e2ad-48de-95aa-ea8b7d1af412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.60.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9f1392-22c2-43e0-b793-d3242545a64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63ea058-6360-411d-95fa-67dff2b02cad", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e5ef50-1b8d-4363-a3e1-44f60aace4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b2871d-3054-448c-8d74-7af99f61879c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ad6bed-eed3-4167-b1f9-fa227924f75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba063ba9-3294-40da-9cd9-b65717a7bcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5952220-62b3-4d5d-b31b-05e16cbe0b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0940889a-14d5-436a-89dc-98775499ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cca8c3-479d-48f7-bfd6-0180d5bb62bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c303f8-092a-45fc-af3b-3bed053b7ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.87.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc526f0-875d-4ae6-a424-6c47f9935130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.92.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d98ee1-bfde-4d31-8109-e61849d4eae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.93.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd67540d-0c0d-4931-86e2-d978ed71279d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.106.176.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692650e8-003f-4afa-9e51-96fa1914ddf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.106.176.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ced576-b5f9-4840-bf78-b738cec918d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.237.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b522ab58-3adf-4396-a695-75c1ed76d6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.163.186.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a492ca-44ea-4f12-b503-6208b1069c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.127.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d84dd4-0e10-40bd-9163-9eb9cea61eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.198.210.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d8e794-464d-453b-bbb2-60c3d9447852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08fc85e-78ae-4f3f-974b-52b5fab6d872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe83e04c-326c-42b4-a1ac-7ad89fc7007e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf598fa-5b24-494c-a2f3-040fce464472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d336aaac-486b-4ffb-a69a-518bcefba327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f1161c-bb65-40af-849a-ee82eea5ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271983c1-5f83-4b29-8b3c-331355d89bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971728b4-096f-4844-b55d-e42e337648b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00176b5-3e9e-411c-b5e8-45769baaf25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d818c242-85e4-4741-8826-41700bfd1538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf01e24-7aa9-423e-948a-aef2e235c80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1e344a-5e76-45bf-a6f6-8581e4099d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71460eb5-2fda-44e3-86ef-ce591bf937da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d4a5a3-2c7f-4bdb-9239-f6cfd31150d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7267377d-c294-45fd-9dd8-5fa795439969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f178bfb6-b18f-474a-a7ba-d0b166217a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eac664-bdd9-48dc-9d8c-dba2cb616b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d34dc8-ed89-4f9c-be84-366706480769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931803ed-6e10-4afa-a96f-937202a26868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897c2115-57fd-41f5-ae31-19e3f6c0e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f1a802-39ac-4e10-90cd-97f3a2ed652f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c03240-4730-488f-ac56-fdf9736859a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5fe3c9-9931-4859-b002-f8536e556322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f47ab1-3e70-410b-a998-d7eebc332e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5312ddde-da1e-4d1d-ab78-adde41e2622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3e3586-4b9a-4840-b382-ff3c825f50a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a06bd1-0d32-409f-b485-f4cb20a7a4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0a9643-c92d-4618-b30a-bbf6f53def89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0313af72-e1ab-4aff-814e-9d29cebd149d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efb3db0-a9c7-4bba-8df7-d198da70ce29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d625e818-1ee8-40c5-a5aa-1f7d92106592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae627bc-8585-466a-8817-7631f943ac00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4546dfa6-83b0-4a1d-a86e-10d37a0f1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623bb300-1cf6-4161-8da0-f7fcef8c1dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99472b68-8d14-4a31-99c4-7e18b9dda1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ed5917-e3e5-4727-bec7-a68e1b57e7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382908db-1abf-487e-adf6-5531de616031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c3aa2f-6ac3-4099-becf-b3fe0fb83184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a17e835-fec3-44e7-a26e-f50760fc1dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7459d643-f861-4bad-a654-ee0454f02c09", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe1921c-9c97-4c6b-bacb-97ad18b482aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff58e5df-8398-4b9a-8a72-d14dc9014aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a885e4a1-2084-47e6-bd8b-c14df663b749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2207c4-5ecf-4595-922b-c624999384ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f078ccbf-19ed-4d51-b313-a4072ff2650d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271299ad-bdec-4913-b017-cae268fee953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db6a621-a06b-42d1-a8e0-0bde7b8e9949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa451d9-d1d4-4397-ad5b-061da7dcf6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633a017c-f2a4-4054-86c7-8e0512db926c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b09d22-636a-4b25-8100-48d9300777ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54c94da-7d02-47cd-8513-eba8480d02b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e9b521-629b-43e0-91b1-69aa3fb528ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fb6c2d-da9e-492e-95d9-ff9041f22240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10758108-d88d-45a3-8583-ee300896b702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bc7d0d-9d52-48b8-99c7-e64561457458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2adb7f-1c5b-4f0e-8a5d-b3db9a2f98a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d2564-90e6-4a13-9b2a-ac85cea896fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c75f0fc-615a-4244-ad6b-d04f70e70ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8692c8-3fa9-40c1-9b0b-58b215abe3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c38f255-e6e8-42c8-bfb5-fa4f1e7d18b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d34fc6d-137d-4725-a9f0-18238ee90099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a00ddc-a3ce-4151-82af-e0f97961cd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004f4e94-2e81-4a9c-872d-5ea95a4efae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fda83d-3708-4532-b1a4-e5009ef0b0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a712822-db7f-4bc6-ac42-ad4d3c6fd907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f8c04-bbef-4ee7-ab12-c2e11b2cb6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2036123a-d064-41f2-b4a4-7c78ffba2cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825edd94-a013-42a6-9735-c342d1cacc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f2dfa-2b6f-4f73-868d-c9ff60933e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b6fd76-3b27-4686-959d-d9b83107124d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d5cb63-d15d-428e-a583-de264f1cc544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10298e8-537d-44d2-86bb-6644c39d1d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e14d37-6cc6-483e-86bc-50f1679003bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d45e30-7d2e-48ae-9930-3649e72974b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f71ffb-98b9-4c41-a9af-625184462887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a64b24-0bf9-4ca1-94fb-7446ba169a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76814c7c-8828-438f-abed-db0501a84786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808d1f0e-e842-42a9-9542-49a4173432f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6360d533-bfb6-428e-afeb-17bb5e0d5bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bd72f7-14ea-405f-a103-ad813f8a4dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c3ab26-74bc-4ef1-b10c-cd96437aa57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058a96fb-db96-4ee7-a9d1-0410a6234f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186d11b2-add6-4baf-b347-272c0a775060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f624fc-312d-4af3-bd0e-f54e3b029872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbd20b3-6d84-479f-b8b3-98a66c5b619c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c06b9a1-f0f8-4ddb-9fe5-a65accb97432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc207d53-e0e1-4ddb-8324-5fe55b2f0233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9a5e66-ea04-479d-8f99-18632cd35e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68420b2-becb-44f6-8142-51a09302f4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af231230-ebf4-49a4-b511-5e545bce0384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e67d4d9-1a1e-41bc-96ed-b8903d96e362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa73065-5740-42cd-872c-38fa6cc54d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe9721e-f5bb-4197-ad63-14c629ddb0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670f903b-bae0-4ed1-99a6-769edc3a3951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf920a0-06d6-4bc2-9435-4baee037f1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90cb6f9-15a9-4d6a-b358-856e50f41491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec4d995-7766-4658-a59e-d0cb29d93dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96775a73-8b92-4560-9ac9-a3020f83d47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60c7864-a7e4-4f8b-b394-e04969daca2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2e7359-d360-46c0-8156-23d59d83938e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086e5a17-8ced-4eab-a6a1-7594da638f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7261fd3e-f642-4f8f-80b2-82196d76a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcd69a9-b3df-45ff-a1dd-fa2d821fadab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52839550-957f-4929-8d58-69faddc12d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf10fb58-602d-4342-9b81-afcfaae272cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b64bcf9-88dc-42db-9208-896e90f5d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529ba75e-23d9-4507-82fa-561d3e848ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a870bf-f2a5-4f70-aae5-c44c530b5c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6ab491-234d-4037-ada9-c8cca5a826a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb455d91-f8e3-49a3-bc42-38ecb2a0d434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b14fc0-6dc7-41a5-801a-0f511fab5fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29538853-7935-4e37-892f-957d77055e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684da8cc-2e48-48fd-b2f5-d77e69aa8002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43af721-e130-4c90-ba27-ec281c90c51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cf0f47-e6da-46f9-8255-2076fb953ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5215572-8844-4c58-b52d-3221706f9941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d0f10f-543c-4427-a836-7e3e0d96b2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f6dc95-fdb6-4a8b-9e5f-d101049b494a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cc267d-57ff-445b-bfbd-f814831908a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ecd5a0-e026-4bf4-a2a7-53f57a74f49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb577a28-4d37-495c-b9f4-c06576cd20b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfc46b5-7420-4f9e-a201-d7d2a72c32ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e774ba7a-1736-408c-9e93-c21c6b474d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f90676a-ebcd-4145-a5fa-9f1166e408b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37867262-9d47-4302-90b8-c93a0f7bec7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8ddd1e-96f9-4c40-a0f0-85631b027974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea987def-19db-4929-8f02-a58ece72b3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f516b1d9-f1dd-4f97-9e18-c02dda2cb230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b8af30-1f91-4918-8ab2-47b564554cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5dbc50-6e7c-40bb-b9eb-b63ba0d47402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3824c949-ef0f-4048-a63e-5aa8b7e7bb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a73bb1-e35b-4269-80f3-be9ec7e02f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fba72d-9d7d-4e69-9266-49e0c87db174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87b8350-f82a-4006-8d23-322cc5a9f3fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cc6d83-fa3e-4b60-85c5-e56a00e2005f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3a010f-e8b4-4b88-923e-96eef995ffbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb7a1d0-a1f1-4598-95fc-31d3f12eb86d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab8dd52-3804-48ab-848a-325801b2afa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613d2cf1-f0f2-457c-bedb-0edec1bc0761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.119.129.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473d0d0b-e4c4-4e18-8188-d8f382fb72d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.185.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809d9274-a209-4493-b3d8-4678183a9996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806ee840-2f19-4958-b5b5-ac41c24a9044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e8a39-7a52-4d99-99c4-69b4447e70b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99dd3e5-fe76-41d0-aa4a-a08e5a580357", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.149.188.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398a2119-c8be-4709-b6b3-ba7692f6a40d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.93.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f515b11-a7f0-4fb9-8dd4-2d2d155f1041", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.25.83.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df260d49-0548-46a5-812a-a53e6b2a910b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5208236c-f5bc-427d-9a7a-7254ed48d735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0e2e66-447f-4dfa-a6a4-a4e451d95c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.78.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc8f1d1-3dfb-470b-bae8-0a247fee2d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.66.22.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752ef162-dbcd-4bd4-a385-c6b9d63f06fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.71.60.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a8b91a-449f-4f30-9fde-b4151a51421f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.95.216.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c27c32-b486-4a89-a8ef-8899b6130fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.152.1.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee84b3c6-5ccf-45ea-9a99-42b940f09d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e6dcab-f75b-42ff-813c-395c6c3e9f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.185.241.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140c8fb1-70a1-476f-9f6f-2b1d1461d1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.26.157.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92379d5e-9b8a-40d0-a72e-43aae47e9ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.6.224.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f8c154-7cd0-4c04-867f-0b9638387e9a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.60.252.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f18f0b0-c428-49df-84f4-bf723946c3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.72.22.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee05483f-d7c2-40de-9029-3727c1374c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ce8f30-a606-461c-967a-f91247942f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.87.194.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abefcf1-7e80-46aa-b89c-401be4f2177b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.143.197.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587cab33-7e58-4b02-908c-6833daf68829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd70ac65-8d78-430e-9a39-77a2c6d5f30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.250.188.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98a6ac1-72ad-47aa-b90b-3d92222717f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13da7880-3bdd-43c7-8ce8-c931db568b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.154.130.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b39c78-88ec-454d-a8b5-880ebf02a208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaa38ad-7eb6-4d53-a2b1-7d5efb859963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8669cca-ae27-4c68-87a4-2ace1599298b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318e8418-3d87-4807-8d9b-2b0601576010", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd8dcec-ad7a-47b8-bc80-d970b7e49492", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497982a4-861e-49e0-95ac-1aabc4520157", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934f6042-4ec5-4e13-b3af-f0e0cb6e891b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b45ed9-bcf2-493c-9120-f53206f8bfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74eb3ac5-fda1-4a47-82d1-9f69620f68a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe63ecbf-d9a8-4d40-be05-b9d075a4181e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed150d83-c295-47fd-bc27-704e287d6475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b99ea5-89e0-40b7-b175-ddcf140bbba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c89a615-0188-4e85-954c-6b7953cc2efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.243.133.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22be66b8-9a6f-4ed0-a805-31ff97a69218", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.224.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eaf308-5bdb-47a9-85f1-e560b16fff5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.248.173.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31eef7e6-9287-492e-b1ad-b787e46207dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.11.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d1865-b268-4fad-a0ab-0edd00299978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.60.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfe8d79-faa0-48a6-90e0-f268b20af533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccfe917-d51b-42ec-8037-d534a1b0fbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.158.61.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effdcbbb-89c1-46ee-be11-87095114901d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.180.218.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17092575-5011-4732-a537-788ba32c5af9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.195.232.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7970074c-290c-44fc-9f6f-63bf2c60135f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.196.60.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1867763a-9e48-4906-a1a3-fee71b6199b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7587d5-4bcf-4856-b16d-58e0545b0200", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.21.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbead0b-7786-4cf7-86e8-dd110488e62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.117.132.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fb5e00-b7d1-4bbd-ad93-a005dcb491a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.128.15.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b036babd-8ef6-44a9-99c9-a73ebf296df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756dec52-73d7-4a9e-8a30-5888ce2a5cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5f7fb7-b4fa-4ce7-8f83-acdfa87ddfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.187.115.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7752e9f-7a42-4866-96da-9d5230bb0cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.244.170.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc07785d-d6c7-4a48-ae12-61fb55bacf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.253.220.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ec7218-d72a-4230-beff-6893585fd6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.90.212.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5df256-0f43-4246-bedb-9fa9ec84e546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.97.112.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05b3fe1-6649-4184-b9ed-7ac4c1597de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.99.31.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49768d29-7ebf-4043-8b0b-0668e300417f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.16.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98612fa5-10fb-4e3f-b46b-57f35ab6bf67", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e86340-75d0-4055-bb75-aa7864c734c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.46.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e195642-5f29-4e08-b9f5-b8294a150035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.72.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90981d94-c8f0-4ef9-a2af-4327c5b92306", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506d5159-8564-449b-a942-b38ba2c10577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.15.228.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda58168-ca49-43aa-b72b-1f959256333c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.17.100.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0c5d5b-cc6e-442a-86c6-9343756c04da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.178.223.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ce9142-057e-457e-88fc-e8674f9cbe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.178.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d97566-15e6-447a-a463-616783fa41ad", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.205.67.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7d54d3-fbdc-459f-84e6-55110978aa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.233.86.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6748a62-22a0-41ac-8681-6f7c1b0b0008", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.247.218.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af745b03-3991-4a8c-a740-fcf5d1973936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.131.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8800174-2461-4515-82da-54088a513bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663f96f-cb8a-4461-92fb-c10406af7fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.97.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737e3378-ffe3-42cc-b798-b695d995c9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f98e77-2f05-4081-9d58-7080eed82f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8742c754-fe0d-4ae8-bdb4-5c907b367c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a94b0-6fce-436d-991c-cbcf08a5ba82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cdc399-3b76-49ff-91d8-7065136d92a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29056bd6-6069-4518-8c11-0ca7aab06508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773faad0-f0db-4c52-bbd9-30283676ab65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5385740-1054-499b-9f32-7b82b6acca24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc736c7a-536e-4bdd-90f9-984057aa49d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffdbd4c-1e23-4658-9082-43736f2f6349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bef4b6-9046-4aec-94b5-e5716acc93b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dace3740-3af2-4a05-9c35-b54c318bf6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.19.244.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0769b18-67eb-4afe-8e99-8f7a065828af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.76.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4475d68e-c735-4fb9-b1f0-283777372cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.242.193.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d1a0fb-21a6-4a4a-a3f5-689e2f0ab09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.137.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0f4461-2456-4c1b-b5ca-87cb14fc4fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.140.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba5a440-f151-4ad2-91a4-51ba7c1f795e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8507dd3-3f5f-4839-8405-454e3ada27ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705e8bb2-2052-4e21-9e8e-bd829a3fb720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.111.174.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fe1718-f0ca-4240-b5db-78582d79595c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.114.106.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab11ba75-a70e-4d32-8715-2d8e1d5f892d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.139.32.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe79ec55-fc9f-461c-b892-03c4d648f6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebb0007-ff04-4ec1-9f50-7bf79e4d5bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a2872b-d00d-40ac-a4a9-823ae42a51f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.87.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a5b110-9dc0-4bb5-8a5a-c204917cb213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.89.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c09f7c-4297-455e-90e6-45d32c9f5858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.94.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f33765-1f36-4200-b67d-9e1912b7cf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.113.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e52d79-d782-446b-bfdb-ad08540fd30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.113.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a89d495-e7bb-4b02-886a-7ebfe8783e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.119.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66d1723-2ae9-467e-afdf-7bd2fef5ffbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.119.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c175be-3bee-4012-ae92-109d0d5669e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.121.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27858314-3da0-41eb-9c73-f17afdc597a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.123.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce645246-3815-4ba5-aab2-e981d13158d3", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.124.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d70fd8-1db1-4144-8d8e-e476d772665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b075a5c-693b-4390-81a2-bfde4b4b2e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.83.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51baf8d0-12a7-42e6-946f-139dc0a06a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.83.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b41dc5d-a32a-44b4-8d5b-0fe7986e141b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.84.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1db7e2-5ae8-47b9-8f85-52a30a93613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.85.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c2cb0-b420-4a03-8864-b5ce795045a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.87.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a4d4d7-f446-46c4-8bb8-498eba455583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.87.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c09f63-b768-4ae6-861a-4d519d5ab458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.91.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b768a129-11ab-4b0c-ad56-8185abb2857b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.92.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d77e58-37bc-42a1-9368-92f5c6ae6855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.234.202.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008bde0f-3323-4447-83d6-1c3c572a1e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.43.161.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e789c3ac-8827-4600-8812-5159b36c6527", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1008::44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c70ba15-4238-4aaf-9d47-03f796b6f826", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1008::58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bb7149-7959-4066-94b7-2d2fe3337bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.143.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757537c4-a6ae-4e70-ad22-a563558e5749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.35.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a4fc83-b20b-4427-9df9-16d2eceb073f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.27.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3fda5e-aaaa-4feb-aaf5-84b81b936476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.206.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a69ad4-d6bb-40a7-b5f2-ba38c7c8ebc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.102.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3713475-d43a-4b67-9753-572ca99d51bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.91.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d98687-dac2-4eb4-ab7c-98d9fe85c20c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.2.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea431654-7dc0-4867-a9d8-d9272d9779b6", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2a04:c300:400::6f']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c01acc7f-f112-4687-818e-0a6838100c50", "relationship_type": "indicates", "source_ref": "indicator--ea431654-7dc0-4867-a9d8-d9272d9779b6", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cac8528-10e6-4088-ae71-972f17196513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.108.138.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612bbbfd-bb36-466f-8497-5cac83150aab", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c97a27-050f-4d65-8299-913ddb9d5c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2b4f05-7bff-4d4d-9e33-ed77874c9281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd14eb7-f469-4ad6-9e86-523dd28f8edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891385f4-ffd0-40a8-9834-b8862a168766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee2788c-035d-47f0-8bca-ea507e84feaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23e280b-8a04-468d-92b7-e55df42e6ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126f3628-24d9-4be5-aae5-1aa3fe914444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.139.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8df0c5d-e312-4cfe-8706-4c5702842244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.209.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82db79a-4518-41bf-80a2-2a70050880c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e822087b-eae7-4df9-838b-6c7c17a76182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.30.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd40ee00-e75b-4cf0-98af-440f0651ed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.239.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d65082-3b3b-4e25-9c68-3e9e2ce8503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.250.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c515b49-82fe-4373-a01b-28dcc01a6ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.186.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdc1f1c-87df-4e73-a599-f4d6e1c74f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.196.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf494470-19d1-478c-a1a5-ed58c395ec35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.203.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3606e433-9ab4-4d1c-8d0a-6a0e78eb1a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.231.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2bc57c-a039-4824-8e12-f5d3d64b9445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.61.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49de235-e11e-4420-84f1-f9b1a5e0ce09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.76.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e683a0d-9dfb-44b2-b82b-c7d53eeea124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.56.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fe6a68-87c3-4baa-ab5f-b353dd79d280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407100c5-9cc5-4dcd-97c6-b991e2e6e459", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.133.116.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9423a2bf-1d55-4c67-a129-6a084e1ee090", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.134.90.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b115a5a5-a7c7-4005-a66d-89e500eb796e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.135.61.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa09fc15-666b-45e6-90d2-c5b6841849e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eece303-79f5-43e1-bace-b94f6d9a7590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c06710-6576-4e15-87a7-6e32caf7b716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab988af-6a90-4720-9bd9-4da10d853b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2f5491-ee63-4c6c-a752-2e9e7d7a8a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deccec3b-65c4-4d89-ba7c-6bb1edb1b01c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.192.46.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3619190b-36be-4663-9166-6d25b3456ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e51bb4-c5ed-4572-9e3b-bbe7dfdda24d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.49.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b37c834-20a9-459d-976e-93a83e13061a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.60.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed04af4-a762-439e-9141-275200907f94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.53.147.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddd4af4-2235-4b3f-8b4a-6fcfe76a83c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30256e11-2c83-42e2-8903-37a3ae135400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad2c652-fd04-4b60-8b5e-c1a8eed8b9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c5ef07-a3d7-4796-9708-2351d432dfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe075415-a779-48ea-a583-9b0eb2cfa1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.107.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce8c6e6-18d1-4c7b-a5df-2aa03f422c17", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.20.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62346638-d1b6-4632-aea7-73e069464f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.149.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82917317-7d8e-4970-9dda-c185828b7985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549e644a-8ac0-4216-8dad-6b85a1de7e14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c94be-2ec8-4304-86ce-a2edc69c2125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908e6cd2-d328-461a-81e4-cf9bf14c940a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16738405-5a73-4c43-9c43-354e8d627222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.130.89.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f9cfed-af3b-4e4f-ae96-ad9cf09b2bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.241.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4cb8ec-fe35-4e35-b01e-0c70db1f06b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.54.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcdc32c-e576-429f-89cf-2f892136e102", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.54.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39afe064-da5d-4126-af4f-757fe60c595f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.191.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf42e82d-7fb4-438c-8946-cacb5a97eff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.100.252.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f88d75-982f-47b2-95c1-4d83b086f180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.31.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44ea662-114c-432b-85ab-5ba393e303cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.182.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d974a99-4cf4-45b8-834d-8a706a812c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.53.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a702cd0a-2117-4389-ba7c-29964824efe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.135.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6e5a52-b08e-4d41-9ee9-0531f8e5b238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.4.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e645a-b420-41c9-a304-df6570275d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.126.195.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.81.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff713d48-1516-4b37-9fa1-5c861d47b6cb", "relationship_type": "indicates", "source_ref": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c4b7953-a748-464d-9c04-cbbe4d36ecdb", "relationship_type": "indicates", "source_ref": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "target_ref": "attack-pattern--9a840f3f-bcf8-41d4-9062-26bbed85c1d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd03e2fb-4822-45df-981f-069082ee0e61", "relationship_type": "indicates", "source_ref": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "target_ref": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--753d50a6-7e39-4b82-823c-90517290500e", "relationship_type": "indicates", "source_ref": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "target_ref": "vulnerability--4b33b2f9-6677-4b2b-a841-9fda3b4cf66d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee44830-b663-4ba7-a424-9632ea5606d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f28403c-14ce-416a-9692-4e917ecb9b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.15.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4403c84-8386-44f8-9824-f5bc0534e12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.180.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85051681-7c28-4a8b-88c1-6e927c89ec42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.181.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ab0cf2-b6cb-4ccc-876f-318967870094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.196.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75ce6a0-cf97-4d7c-bf33-f5489e171f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.32.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f363550-b8b6-49cb-9db0-0b6c2a726151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.65.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd50b9-607d-4681-aaa6-5a9c0b963d58", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.94.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0ad370-043d-4143-a9ad-71543d86d31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.123.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b506c1-53c6-48b5-90a0-3c4d14b62041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.16.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424444ad-dac4-4b42-8c82-d5f44352d42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.170.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2caeaf-8131-4be2-9c7f-24c49bbd6f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.19.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e06c98-3175-470b-866e-13ab86bb9b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.204.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c3944c-8e96-4609-aa76-3a9aaed04d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.251.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee91669-28f6-45f5-a8c5-a8c535e587e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.51.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bab646f-5fae-47d9-b70e-5331ca5c6df9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.58.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c81c38f-c5a2-4b80-a9a7-ca59d93e7341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.65.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b4377e-5ada-47ae-9e66-59fb8b543b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.8.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e36f83-556c-4454-b0cc-90dbb6f5e6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.202.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a0fad7-32c1-457e-9157-d7bfeca65536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.26.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27db46dd-d429-4031-a2f8-fbdb7f7b8a36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.187.121.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb268b1-eedf-4111-8676-98f9ba54ea83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5883ad19-a66b-49c3-80d2-2ccacc82dbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.154.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35664010-49c7-4ef8-b505-4493c182c36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.18.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ed9382-28d2-489e-9894-b3fb151e59be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.72.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2831d45-0c51-4975-92d3-024839954e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1afc2a-de44-4582-b5ab-9cc57876f00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.232.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06128337-5a32-4982-8d0b-abb450379d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.42.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08faa2e2-aae8-4f62-9883-8bfe7569c80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.30.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d27e804-0c3b-4dbc-a69d-709ccfd1b18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426cb2d4-2d49-4e05-958c-6cb58da2b2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbd58ef-1647-448d-bade-9edbcc54ed87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865edc3f-707d-4915-93c0-c85277cdadcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.16.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1cddac-27b8-481b-b0db-ded10783aeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.132.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc0303b-5186-4706-98cf-41222fc98981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.233.122.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b73f01-a592-4a4a-a504-72d3ca84d208", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.110.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce44d723-2448-4d73-9a06-bd4fbc5489a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.235.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f17ca16-30ac-40e2-a392-51113c0757a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.31.40.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e7c297-215b-4688-905f-4b0c731e274b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.163.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c4478b-47d0-4113-8c09-ca601a1ca750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.249.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830a154c-116e-4371-8b7c-9c6e9b16ac5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.252.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817eade0-5c49-4edc-bf27-7cca3bf80416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.4.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9b6ef0-8ee4-4777-b1e2-318bb1d47abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.44.11.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ac77de-fe4e-4598-8e79-2930fca8e3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.164.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55ff99e-f9f9-4daa-885a-0fca27b6faf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.51.213.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadc537b-0ab2-40be-a5f2-13b425567db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.136.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6ac024-f8ab-4766-ae47-84424b67444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.164.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a856a3-aae5-4303-abeb-61e3f00a6ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.184.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d655a8-c3a5-440e-b18b-668ace9f00ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.188.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347922d3-9c07-4468-b33c-8571670f6d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.217.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14c0965-92ff-4090-b4a4-cd4025bead74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.227.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34971050-9dbf-49c8-a53f-8429de2025db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.230.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c798ccad-197d-4bbd-a12a-fe5e3ac4eaaa", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.233.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7eacad-0ed6-4285-bc34-33cdb3d29b72", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.6.183.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89e54563-81d2-4068-bbf5-00893cb479c5", "relationship_type": "indicates", "source_ref": "indicator--cf7eacad-0ed6-4285-bc34-33cdb3d29b72", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30497fd6-7f15-4073-95b8-72846e476b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.60.109.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6384238d-bdd0-4bc0-8651-fffa2bd59286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.61.202.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4bac7c-f730-48d3-894d-37f32ae71ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.107.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff07d56-8d01-46c6-9871-f5a998479947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.111.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6ae1ee-4fee-4438-8d7a-26c4d30914a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.149.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3023363a-f33a-4f68-a36f-ebbe2b427d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.158.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289a63b6-857f-4be7-9a98-03ab38921a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.208.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40890f97-0c79-4b67-ae87-de6ab754dd23", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.218.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58f87a9-cbc4-40ac-967f-2738d6c3eca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.251.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2bd9a6-a648-49b8-9e66-8c02966d2e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.35.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.62.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ffd8d56-7f89-447c-96a4-f331b729089e", "relationship_type": "indicates", "source_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d06a065-93ac-4bb2-b521-3bf2a6b296cd", "relationship_type": "indicates", "source_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "target_ref": "attack-pattern--fdf581cf-e394-4740-9126-8df12de94ee8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b1402a9-ff36-4351-8062-75de6d52a4e4", "relationship_type": "indicates", "source_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "target_ref": "attack-pattern--9a840f3f-bcf8-41d4-9062-26bbed85c1d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e33154e1-ac74-4dd4-94c2-492ec0079737", "relationship_type": "indicates", "source_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "target_ref": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55b48f9a-a1cb-4310-9971-1d13734132ec", "relationship_type": "indicates", "source_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "target_ref": "vulnerability--4b33b2f9-6677-4b2b-a841-9fda3b4cf66d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0599e1ef-960a-43ec-8efb-22ef982424f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.157.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd6d7a3-2765-4eca-9e13-8593b61caf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.35.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e82521-eada-49a6-a235-00d08a29bb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.97.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8091122c-5a93-4c5f-bd76-961da2596e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.54.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c29a8a-6ff0-454a-9c32-259a280a2533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.182.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f41481d-1363-4519-8323-71eaf220b843", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.5.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c602a88b-4583-4dbe-8c8b-876c58bef982", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.117.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c88d61-53ef-419d-b0a8-3c1a5e7e0fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.157.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d04e897-14e2-4102-9a8f-c2d3e4da113f", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.166.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca198f77-7fe9-47be-bf10-46676b484d62", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.193.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135785f4-8bf8-4938-af54-fd10c5ab98b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.61.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c4a421-1abe-4ae3-9fc4-9403f61f6cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.120.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99903e07-9d81-48c8-8463-434781331309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.165.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210226ed-1822-4fe9-9a5d-f906fdd1beaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.179.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811d3dd9-2863-41f4-97c2-81b28faf69f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.181.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a2b25c-c4f7-4384-a997-f08f280a4211", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.243.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced56fe2-5cac-498a-805e-3daa4d2df138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.112.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805f42c8-8744-4cd6-88da-d28db16ed445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.113.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3dec96-47c4-4257-9155-1788111ce0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.243.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efbe15f-740f-4677-af65-9bed3aba47a7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.138.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac8d221-dbfa-4863-a8f9-f1a62588b31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.82.213.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9360a20d-8e57-4470-80f3-6fc5fc8ae145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.83.174.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979f047a-1745-40ec-8312-7519b678e38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.125.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c17da3-f0d1-4ef5-8e91-af07695951ff", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2021-31207. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.103.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43693c85-2221-40f7-9a69-adea5246de3f", "relationship_type": "indicates", "source_ref": "indicator--39c17da3-f0d1-4ef5-8e91-af07695951ff", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88cb3cb9-5b9a-4ce2-855b-63940e3158f9", "relationship_type": "indicates", "source_ref": "indicator--39c17da3-f0d1-4ef5-8e91-af07695951ff", "target_ref": "vulnerability--193429ec-8440-4d7a-ac62-66efcb65bb2f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8ed8a5-d143-4e68-a112-11957eb40e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.59.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b2fe9-50af-4ae4-a7ed-28175609a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.16.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a38cb42-e816-4cfc-9bf3-0d35f3125b84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.153.221.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c1f0c5-c0a5-453e-b7d3-19e77c29de5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071cae68-ca1d-4116-9159-2f0451007010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.163.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef89013e-8dfc-4067-9bb3-43bec1fd849c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.172.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8b6ae4-c6f3-48b0-b1fe-70872dbac87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.227.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dff0e03-7b73-48db-9a06-28bef84004c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.185.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1186d3d4-d8a3-4e07-a94d-66dbc813f1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.224.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffbbdbf-4a8c-4bfc-b305-ee59abe61037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.33.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081e6c09-9ddd-45c1-8d0e-917d331dd75c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.201.163.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e8ae83-10d8-43fb-8def-91a10ce8d72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b501419f-5a9c-40f1-87b4-7c2cbbf824e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdf970a-7c1a-4fde-a550-a3d84eaf21a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d5e13f-3e11-4a03-a112-8897a8907e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c33aae4-fa2a-4295-b6cc-2dd043ad6e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cebfea-3ade-4c05-b1e3-41fad606c6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32bced9-4b26-417b-9c15-839b4f961b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f1fadb-df24-4061-b1e7-9edc2f28fc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65db6da-e686-4215-92d2-9cd0b2416d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e48f6c-6eda-46ee-871b-f5e92306e5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2734486-ff5a-4fe1-89f1-20550bccf685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aab3901-20f9-4e37-a6f6-e4c9696d9202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ef1fda-4cdb-4f2e-811a-353a68c7506c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5138a3c-c405-428c-a1cc-645ac23fe6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fbeb4e-7b69-46b9-9bf8-85d864534b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd1f2a6-77f5-404e-932b-ba6d73d0fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4561a9-0dae-448f-942c-810918eeaf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca843b3-e99c-4df0-9cc9-7380a1a455be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f96a8a6-24aa-4831-aa10-771172a0e8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9148de-eb30-4573-8eba-016e6057cf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7412f26c-c439-40b8-94d4-5b9cd2fcfce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2ea65d-195c-4429-97b4-0bf10553dc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0405d667-1106-426f-a094-2ba58587ae58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ea7b58-b398-4787-9f8d-e694a9569865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae5ab12-1abf-47a0-89e0-5c2f0896d88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20136f66-7e78-4d65-8a5a-dfbb6d7416ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef6c1de-f98f-46fe-bd87-aa07723fa5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea15160-9ef6-4955-b213-672099795700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61859e9e-66f2-4959-a1a9-408b3989b4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e3d58-cccc-4b26-90e5-8f53e729dc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b911abf-2e63-498e-bb6b-b5e4b39eeb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb21abc-1f49-4ce9-bfc8-a57fc8f267e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7e042c-a24b-4ad2-8310-4e45494514e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98dbc4-1172-46d3-bbee-111812ba4127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f933fd-2122-4adf-bb00-aa68a383d9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4946784-ff48-4c5f-af19-3042ff631fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7b3b04-2902-47cb-a81f-87ead1aaa43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcc9da6-5886-40b8-95d1-21769c6cd555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3505f9-c977-4bf8-8053-9fba7ecf5405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad183c9a-0376-4414-a7b1-08404834c906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad34352-dfd3-464c-9552-1d1a24853304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a014232c-2aa9-4adc-96a3-c10a6a8948bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e493b2-fd1c-4f1c-ba1f-f6085e3d4d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f18dde-101c-4809-87b0-9d2a3afbeb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619397b5-fcc9-4393-8ddf-18b0ef421b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c08d9c4-54cf-4dc8-bd0f-f0880d489249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bee64c4-d529-4938-97cc-6af110887a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79289e1-92b9-43b2-bf24-bc9a4a81f521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1c1663-aac5-4b06-876a-a5495be23d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22451421-89b0-4f3c-a92e-b50ab9edfd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fb1628-efa6-4a8e-bd5a-caabc5821cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d31e588-32fe-4f4e-928c-061e38aa5c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2755e3-76c2-4c41-9d2a-0dee84f4cf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d345ff-73ae-4eab-80c9-687c5c40238f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eeb3ae-29ab-4ebb-b8a1-2e91490f2903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7410c5d9-63ed-4e2c-8163-c944e6d7dca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650d0a66-3231-451e-b07e-3b8e29ceadfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea33992-301e-4735-8b9c-72365d892548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63276c3-5097-45c7-b7b6-ca610c11cbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84e4ccd-d1e4-4170-9068-c57ee72177b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74522ac0-8e7f-4761-8d62-f608c05e2042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c9a7f1-8169-49f5-ac1a-91f7aff6e1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42924c1e-d807-4a4d-b421-3edd5b16c76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249119be-537e-4a8d-823e-a8c4443a2110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23dc12e-fedc-4505-a799-7ad2f16d7caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94b13c6-32e9-406b-9263-c0db884fc917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5be932f-b596-4254-a304-4c25aee171cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178053bd-a5bf-4cc5-804f-2e6f5c6e425f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d16fdc-f997-4f1e-a614-6a11eecb4524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f0f72d-1317-4359-95f3-c6ad2c6af469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d255d0a-7dd7-4f8a-9c3f-fa3dd092e713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a641cedd-055d-4439-a707-8697c4a67647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069cbfa2-8797-4fbc-b557-5f1e2df96ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a24681-6ca9-4169-a1a9-13776fea8262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2277905-0f24-4778-bb57-4eb02d4b5b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a5d376-1c93-4cb4-b6c3-614511b8c014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f1c4e8-8bd0-476e-acee-19836a38628a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15bfb0-8c4a-4121-8b4b-b2bc6ccf6799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c963b275-0968-48dc-8264-c58080acf019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38640d09-6046-44b6-95d0-aa6062c9bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22444308-0ac2-47af-ae1c-c0c0d5dc4550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc00735a-3296-49c2-be7d-f78079cb6f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6dd8f4-92a3-4e50-9dc1-7221e523f833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e8829-dd47-4f90-bd5a-283b340b20fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee6b280-e213-4931-bd30-566e7db9fd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0396537-68fa-4100-91d2-1fe90555bfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792cbbce-7d55-40ce-b966-d415dda80e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52e9424-af04-4235-9bcb-eace9a23ec49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d89b06-7994-4d57-a2f9-80c267ec01c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aec7d89-e7f7-49f8-8d36-cef0494265a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d47ca1-42fb-4e8d-86cc-1ae054b52010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6443b9f-4f6d-4fb5-931d-65d697a5f036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d71fe9-7ac9-440e-98df-6e2145247dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03698453-f744-4c16-84ff-37af4ee3bf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93b21d1-1005-40f8-9594-8bbd8863ec09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3283bde-5908-4ec6-8461-9500ae41ea96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6861fd16-ac9b-4638-ae40-c5312c5d2c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ab1f80-c712-452b-9149-47abb3e7b721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573f39fc-c37b-42ca-a71c-95024e5c6d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8825f271-9e9a-4429-a471-d9a7cda71e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d000a4-9611-4b0c-9968-2d9cff780c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b068a6-845c-49e0-9b61-c56ac90c6f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5796879e-0948-43f7-80c1-fc1171d8d83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3784a5-5ea9-43cf-ae05-03f5eb891db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7477d53-20fd-4f3c-8fe2-14b23be7d052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab7b29e-208d-4718-8343-73833e886d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fd1f7c-878b-4052-8684-b209e8d70d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe00cc23-aa6a-4a74-8467-9459fcd504c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61656abe-8122-4ddf-a066-6c352faec53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe69583f-7786-4099-83d5-8c0859fcb106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5106778-04ce-42b0-81df-0a96c700c731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f508e92-131a-4aad-88f8-9e1fe2dcb913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e0339-b7c4-4306-afb1-782859cddfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aee978e-0fdc-4a6d-be54-c0dab100cd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3df516f-a2a8-4922-b69e-0e0407bfe965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed633d9-7dd9-43cd-a486-2b85c9f8f3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3193284-b3cf-4e10-a924-174dd8595bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158ff2aa-2129-4b38-9642-8f0c4bdd18cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a3374-fbc0-4ebd-8210-3c8f8c452d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624ba68b-ff47-49c8-8c5a-1434930b5060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a40a419-46ec-4214-9cd2-55a04b2531ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ffcd20-3ca7-4824-b4d2-d2a37ff91382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1004cdde-d477-47a1-9872-6f1777cc862d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598c77b7-af68-442e-a118-842183b0ea7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc6ab94-101b-4e06-b627-a497d03fe5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1917772b-b3b3-475c-906a-6e2a07ce0fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846bdeaa-b00b-43d3-b64a-1575e3abbfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747aa98a-a5d6-49ef-b36d-9fc4d3be3f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c923c59e-fab7-4319-a3ce-01272689bae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede13274-f5dd-4cd9-b338-eeed051378d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebc6d2a-8040-4520-8630-973be4730075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b35bdc-b851-4659-83c0-6891bdf259bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e13d7f3-e689-48d4-a47f-87ef034a6933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac959461-a1ee-4f44-b84a-9ff33c256f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae5c414-b788-40e2-90ca-a38f75741882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f04134-3880-43a9-9fc1-757ba041fa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8762c2d0-a6d5-4989-b801-93193fcaed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ceedded-1026-4d20-bb98-b19801f0485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23846a84-e2c3-4af4-b46a-e6e47e5bb5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f74db9-f128-4413-94f5-e81d50f19e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e22dd35-6ebb-45b2-a124-fd7e1524d419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d6cc04-64aa-45ca-b908-70d5d03cf4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04acd08d-9c40-46ff-90f8-f29eb639937b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d1ab34-a6d8-45c0-879f-59238971844f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65f6c04-8787-4d60-a334-07ff5ddf2a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c77f34-84d5-438a-baf0-3a6a1296cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce1d2c9-96ee-425e-b928-2e5f78e77872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323334cd-0fc6-4bd2-9257-5497884412c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80656f00-1415-4c05-badc-f5e36fc06d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99392c5e-ced4-4c26-8f9a-9e6a1bdce7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d0a4d6-aa30-4ec4-a3ae-f013814f8b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa217322-9f65-4f81-876c-47a48019c78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce9f678-a4eb-4271-aea8-37d06d9c0a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23418e9d-9011-4b04-a3d1-04f49812bee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521f4346-a257-4b5d-846f-50688da264d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc866e8-8762-4e3b-800c-5c4b5b308bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8e3e93-cc90-45ea-a9f6-f580e778fa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1222022-c5b6-4b49-8cda-42311668678a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712590e2-46d4-440c-9cf7-980f41c8963e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87658fb7-4674-4d0f-8cfb-a64d103db7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d96056-6c32-4f50-be1f-2a5f8c9e1356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df8d1f0-d7a4-47db-a1a6-3c40283f3576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2818c7ba-9ac1-47b9-8504-6e544caa00d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6ea14-92c9-4b90-a7f4-eb6e112c9291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a67e63c-307c-4e2b-8250-0ca6be564078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa0d787-06cc-43e9-ada1-6ad3ceed1413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b501285-d4f6-4f1d-b978-498030938b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a244803-052d-49ca-9022-cfbf5d2ebae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9dde63-ee8d-4fd9-a7c3-4b66daf08033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dd2b43-7346-4410-b08a-55348c5ae98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a304b3da-4b91-4649-b2cf-e036e0c47782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cc5e31-7e84-491c-b1f0-c05063bb2bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49c56c9-1ba9-43f7-a854-c7f562fa9a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b46555-2115-439a-ae6e-cce9088b4355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ad86bc-5733-45a2-81dc-b9ca1db8ea24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b581317b-d4eb-44a8-91ca-6a2e3816c835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff502a04-814f-4199-a8a6-e3963cdd6a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4676384-6433-43e7-8e63-bf19ddbef7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb7a453-05eb-497f-b203-007f2b3d9971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b0e47c-411b-4f5b-abca-fe6a94a010c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd82afa8-c16d-4c3b-8b6c-f94ffdd296b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37d59d3-0cac-40ef-b7ed-ce82e5757763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e01ff7-da8d-4d77-a477-4636652df90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d4ef9-2615-406e-ab8f-9e1663371ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7285dd-4b80-4bdc-b8a5-9c3991bf7d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296ce6b3-dece-4594-850a-5bc1166a1131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81be0685-ee2d-404d-b501-b831cdcfc435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab87f79-7ee8-4b2c-95d3-c8b2bf6194af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d23ff7-b582-4ad2-9a14-99eaffb9e1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020d83b-e265-4d9f-a71f-8379479eb5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aff957b-38e6-4199-b746-c0c746eb45fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2765d2f-adaf-429e-a282-6f66502d4f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86102c2f-63db-45b9-9f4d-34d87d8e883d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bdc5de-1ddc-4e13-8196-867223d53d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e52329b-c2b3-4ada-bd37-8ed9f2497cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f697f2e9-4470-41b2-849a-14c48049ae91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076587db-70e8-422c-a1b4-e56a454e900e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4957de-016e-4ec4-868a-7b91151f7190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1076541-9947-4caf-a5ff-2f7c9fcb1664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2384fa2-8c10-44e0-bf2f-6f88285f2216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bd2b2b-e64a-499e-b7dc-604ff5aa90f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2155b5c-031e-41d0-ba41-46b45d264c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c99cef-d61f-4a92-921c-593500d9b2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5bedaa-cfe2-4fc7-91e3-c2fda47bb4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef2a5e2-5093-4b61-8a93-5940c06953a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b64e5f-9a68-49e8-b6ee-983442e1a8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d3aab7-f0e9-435a-928f-b98965206229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f44bcfb-5a9c-4a94-bc30-c29a6c2874ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33a13c4-673c-461f-adcc-cb1cc068d5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ef5818-7a26-4e38-8784-a5676fe58e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b08c6c-0c5a-477a-995f-7ab7af4c07a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9b0454-b043-47bf-8ef4-8510ea327864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6051a0ee-aab1-47a9-9974-391590bf8e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1417ec-9cd2-47fd-b445-a9a6eff23048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28935ca-0cc3-475b-a23c-a966065560fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8faa8e-9e9b-4295-9c86-f52b018e1d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6813b045-920e-4814-8b1f-1b0230c3041c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91601fa-4023-4dd3-ac10-90967ba015bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3344bf-d200-46bd-9ccd-c69f78e6c12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a89756-a92b-41e7-b3fc-0e544cd636e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127aa072-6386-41ed-8c7a-1c02fc4d415a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a624d74-f633-4bea-8e03-505058ea273b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f83f945-2a33-4e5c-a851-f74d1e25a6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9afd6a-80c3-4cad-af75-21beea1dec5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47786c9f-5b3e-4415-9d86-6e5f73755be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ab0580-260c-4daf-9f97-675860cc47e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e840e45-4a01-4f29-b2f6-e433c773323c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06958fb-a492-48ae-bdf8-dd2595a6d477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec301bfd-2356-4d6f-b370-2a650749c2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad110adc-66a3-46bb-aca1-1f60d1f4a722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a6008c-4243-41ba-8517-588330a2f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2aa1eb-4fb0-4ce9-a964-925d93cc986a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afe8e11-23da-4542-bfce-c68a82cd510e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c31747-d965-4568-9ec2-4c0dded971cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebbfd9c-23cc-4f67-9dae-ee4628e778f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2244280-9ca5-4b88-a38a-e04e8b119eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7740ab-69e1-4f02-bc5b-3340e37106a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561505c4-0d98-494f-9738-fd4c18a48b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69d1c15-a9c7-436e-abdb-e03e73b93fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09347f5-0696-4b48-93bb-16979b8628c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a94a8b-8356-47d2-88df-387808046b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32943821-5f24-419f-b8f9-86f349add971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0b160a-ab6e-4d10-955c-ab1b7ba2bb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11f2ca0-a3c3-45f5-ad51-5e3764d92315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082da050-8c74-4a15-9bba-612a88b24b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f604ab6d-fd2d-4fce-8c80-32282acf80b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f59b75-333d-4489-826b-d6778ebdda27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f3d8cb-c80e-437c-a377-30f30eeaf7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82817855-8acc-45ea-bbd6-23aff2ad7cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789b0569-34eb-487b-a60a-c6bc8055b81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dd43fd-dece-472d-87ba-7498f619ab32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc3caa4-97cb-49f5-8b99-bb76e1166f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7feefcc-874a-4ca7-83c1-33316ae31c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a87da-34ce-492b-9c26-f6e393e33826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ab4103-0e6e-4939-aa35-19bd3b1c6b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2254a507-f13c-4054-af14-31c0d40cb56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041cc741-cc2a-4a3e-8b90-8ebbb1dfcfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa1f4b1-c2e9-4b22-bc2f-dc5e0e6b73ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47a7f06-c0b3-42f3-99bf-612cff8b4a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeae57a-5cbd-4860-b579-ae02acc9c512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf63a9-7cf4-483c-99ad-db12d1b5b38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301aefc5-f7e4-49c3-9f29-2af4a464ad10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f9b5ef-7b8e-4806-a54d-820d2fd18ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b86ba1-f27e-4e66-bc0c-7b2b7654cbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c3a273-3c7a-47d2-9ce4-3160342db6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83f3a5e-853c-4915-b44b-e70ee1066451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c4d2b-790f-4993-8a9a-b176aa74174e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aebb397-f798-4cea-8d31-ad8cd8d48e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a4f39f-2656-41bf-af01-0653fc5bb90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaefd869-b881-49d3-a083-9dbb35e4ca08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbafe3b-ff4a-498b-a7d0-f197c97c0bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966ad7fc-7a6a-4092-be9f-dbf98d04a3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c717836-7a5f-4a09-891b-dd3fca204624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326e5fd8-4c88-4aba-9ee3-894268d5d586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e34003-7b31-46cb-8ded-86fb4c8f53e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77c56de-bc41-481b-bf0b-d2c6332df054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562eebc1-10d0-4daf-9ead-842cb7ff6a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83319f1a-f73b-4668-b6ed-c43d1096ec85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac98e05-3446-4896-bff0-d145fab40193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1ac19c-0731-470e-902c-0c4665f5e279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d878cd-2330-413e-98d5-7c3bf1e0a0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c3abf6-d682-45da-b409-cee9bcee0db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568e8268-b18f-4a35-a198-2b2deddab69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ae8536-8494-41cd-a75c-ecbb68b23b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d5c384-6c53-4b94-bd8c-6865522531af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79abca33-010e-4fbe-8f74-75f6c47f850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b14aa6-1f7c-46de-8ab1-01e37ef19115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e262221-751c-483d-ba20-3051ee4f3766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fddb11a-5870-460b-8a56-075f11967a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3372536-2290-4084-ad25-f6845a74242f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e768aac0-2d4b-42a5-b798-0e70c757ea4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98a44f9-c0dd-4b89-bfc5-6810421ce0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf7e2ae-347b-4aaf-bc15-1e03e4cae473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58da695-fb9f-4a05-bb1a-6a51380079e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32384790-f68a-47e1-bb55-3b5f3e9aacc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958c0bd6-c4b0-4f0f-ae0b-0794848c2f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b47da2e-98be-44f4-ab40-fac3d1b5408c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40a073b-ec8b-4210-a499-0b0810c44d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8d39b5-6f4b-46d2-8978-ea25d9f4655d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4f31e7-ed90-4071-8a91-92a760c1b219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e80442-8657-4593-b8a0-ee68e0429731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8714f41c-eb78-4216-97af-5e00db1eb7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ea9d50-c597-4070-8e78-7015d066e3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c81b16-b8ad-482b-838f-7db3f3da71e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14549aba-afc1-4137-a939-342a4c55c4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5e0faa-4f92-41cf-b3a3-b5acbd8c723f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a44805-7e3d-4b2b-a938-52c0f35f0c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82769df-d18b-49ab-8c88-cdffb01e605f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d16021a-1ff1-4dd6-abb7-6bdeb4fb792c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f5e479-4ed4-4fdd-b949-9c7d9be756c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482c794a-aec7-4d23-8c1a-ed0874bf2098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f614cc33-044a-4529-8828-7c9f895e9e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163ce27f-7a7a-4d53-8e86-ced3bf29dda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d269994-5718-48d5-8627-4133d8643308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f404c9-3d3b-401f-8d87-a0d9de553ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d1f0cd-a1f1-4dde-9a57-bed8ec0c078b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a9e221-87ec-4e3f-a8d1-e88283ce1fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e5b583-7f2f-4bce-814d-ac6671709280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f77768-a594-41be-aff8-d77179365ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99484304-eaad-47ba-8c3f-388795f030b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d5343a-f3c8-48ca-9b52-13f25c18e27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b23aee-a5c5-48b2-8861-70aecfe2b91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6239fbc8-ffda-4ba3-96d3-911a2622e028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49a1cbe-be1f-4fdb-9e14-987033c58de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d51a81-2c5b-409b-9a68-cdf1c688d126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cfc577-2947-409f-824c-0ccf7b2a8fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9ffdaf-808a-4c39-8143-a08eb3c59667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fabd47d-0696-4b11-a6f4-b02dc5dbf033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f8c5be-0d33-4044-9f6b-598cd5ead76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60109ed-0416-40f9-83ee-cde4c0a561c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb32fbe-7a97-498c-90c9-fd6a0826a731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea93362-cc62-4aa5-8d1a-11f0239fffc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5085b4e2-17f5-4c60-aa8d-2af49409d381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b35a12f-2473-4194-93c1-0e8706e03821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8939d9e-f82c-4f33-94dd-6196eec7c401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa25fbc2-c646-4296-b0c8-e8e1f2f823d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dceee68-59cc-4e34-91f4-88a71d677e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336b9ca9-4e6f-425f-a652-1b18c8fbe173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55958a6b-7f61-4610-b356-386e44d2dbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44092fdd-57d9-454d-a45e-f7839fa2c226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e1cece-dd21-46d6-b394-1ed67e4a143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef74be7-f1e1-400b-95f1-39ead995e465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e09b901-9508-4994-9c61-f325c7fd4bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6636ebd6-13ec-47bf-87ea-ff2934c2aef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b215cf-8f14-498f-8eec-0d35748afbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fee69c-c779-494d-90de-56491afd8d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04538ad-6882-4641-b376-bd77153d61fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1a87f8-c083-49d7-a136-16eb9fcf679c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe25cfc-7971-49b6-929d-cb3cc422c995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bf5a66-6ec8-43c4-9528-bded7c4ecae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebc8cf5-9dd8-4b10-9769-3af182d00346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c662b5d-ce83-4cfa-8291-50689acacd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767b295c-3034-4973-abbd-4d3e4e7a1d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87472630-4d86-4349-9228-94cd9090b725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5ecc5a-26f8-4df4-b7f9-c98497269f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9306ccc0-45ea-4016-86a6-45f6587e6f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2d6a5a-4124-4c54-87be-598870d63b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cc5540-9e8b-4d41-b00a-e259903afdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82be9d6-51a4-481e-b575-00cc892bff88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e73413-e0c5-439b-8d3f-73d996b06a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50a2844-bcdc-4f41-9893-56d360962525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb353f6-f686-4875-8c39-85cbfb4279ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4a41f4-5d80-48e3-b5d6-765fd48e9f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e753421-e7c2-424b-b576-50a7ea28c974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28a26a7-30e3-469a-b10b-7395b65d2cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb2df27-a4a0-481f-afc2-d750247abf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9accb1a-c88f-41ed-bca8-0207cd5a3b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cacf6e3-0228-4930-8a4b-b3e153e1bb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576bb2d2-1a50-4c1d-a371-e2e5f071970f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14587a0-3bc5-42c8-b85a-c734228a7b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08637e97-09c9-4016-9dbc-94cae95713db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ac5d35-d7a6-4a97-94ba-3600d353959a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e0b1e3-d7ad-4199-9ac2-b0a2359a68fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd43330-2c15-4a33-9d16-c274fb2c4ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df78af42-17ee-4181-b056-7c7b76c9b26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb79f63-eea2-4e4d-b93c-e9f4f15005a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdae6ee-6234-47b1-92c9-eeca7b780a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc5da0a-8348-405c-8148-7623f00eaf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74143529-8052-4d48-a06a-6bbc30bd0563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21636998-ef5d-4202-912c-3b886611007d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2ce9df-0e8b-42fe-be41-3233e01dd205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e7e885-d588-4497-afb6-7c0edc6babd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12d1891-1b95-4b09-b48f-24937c64b36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a18f788-4981-4d40-bec4-d481c5c8a657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79d9dba-67ab-418e-bf02-1c03f54fc3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9882b35d-596f-4b21-8ec7-43b1525a981f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967d04aa-30e3-4b15-b2e8-a806001b5787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0c362b-fd99-4e5f-a044-d8eeadcc2af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058bb8c7-828d-4359-8f6d-bc055731a72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29900271-3efa-4f45-827c-2105e1157e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9c7e3f-4a48-400f-919d-6ae77f7aaf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b7c98b-76e9-4a99-9f6b-ad9ed5604da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87473191-904a-4593-9677-f1872e23bcd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f918ca-ae9e-4589-9bb8-566a000bcc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b4a14e-edc4-439b-8457-cbadd537506a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8654d6-7afa-49c5-bcd8-fbd07c2de380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ab3244-f535-4d73-97dc-495df5aa45da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0aa07c-f57d-4c8d-9ee0-ee57a3b092f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec55bd2d-d031-41d4-b45a-c0deb5551892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c7fed8-fd61-4fc8-a3db-3298615f27a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794459e8-4e06-40ac-923b-6868df57956c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee8ce51-7b88-4fc7-8875-efc79a657b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fea16e4-789a-433f-8d8f-0fdb2a4f55da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bb0806-eb21-4ed4-b080-9931fc179cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca60ac4a-5af8-4ee6-b132-0419a616356e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8861b83d-0010-4ec2-a140-f7309dc2aa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8635c1-2099-49d8-9f00-5bb30de76c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643f5d2d-e785-411d-a24c-6b9e5fc1f19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8001af4-270b-43be-b7cd-98089ea988e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76006b17-55c0-44e8-a61e-b26d8fa160f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37934898-9061-4af5-ad22-eac0d2e41e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c339254-3d7e-4e42-956b-bf264fe6410c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91398140-33cf-4116-819b-81e7015571dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e65894-dca7-468a-89ad-c1951fab7000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b08f09-f0d7-4259-99b1-4c702ce9dc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584af071-dad9-4a95-bc54-23bd8edd5531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0f5618-df4a-4b04-bf17-aa4b00e93433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca38259b-92a1-480a-ac50-342414a815ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d7755-b78d-4879-8cca-bdfd7cf317b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.140.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8380a3-a65c-464c-8c19-4a170d2b647e", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.114.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc910064-5031-4422-ba08-6baaa84d4bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.115.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48574514-94ac-4bc2-aa82-3ae6af76ccb8", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.229.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39948965-8c92-48fe-bfba-a90b38af194d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.246.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fc1580-f96a-440e-ab12-8eb36a1faa57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.36.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840c61db-e9ca-4d2e-a878-e1fb148a7fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.68.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5bf010-335c-42f3-b7ea-7aed991a3b2d", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.82.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b3a127-528b-4308-a287-4d1c4194f5db", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.0.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f9d84a-a171-4ee4-8c25-7e843f4aad95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.69.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3288f7-6fb5-4b85-9792-4ce67d5f7bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.7.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042bcd5e-eb86-4e16-a2ac-5e5a20c65da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.89.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01afda1-7736-4ef9-8781-91d7514639c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.204.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d122fe-d483-447a-9ca4-645d50f92590", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.103.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa11dc6-4169-42f0-9eb6-3613b0d34106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.42.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8ebe9a-7f6b-4490-bffb-32a28863a0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.169.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55380e94-1e77-4fd9-a048-c042c9342fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.191.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3bb49a-8dc1-460e-acdd-a64b648ff983", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.151.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ea88eb-68e0-4892-a984-dbc8c4319a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.254.10.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25962167-c639-4a37-92dc-7c0a4b653b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1034adf-b0a5-476d-9961-ae3668fdd9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf74778e-e307-42ed-946e-78daa63b6da5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eafb986-09c5-495a-a779-7b461bb71479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea03663f-9607-45c2-b369-3b1d1899700a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.211.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52a1565-1f77-4dd9-a1be-a25480695661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4cc972-b5f1-4765-9c8e-4603b7220894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.69.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31bb486-11fc-4a5b-9744-6d293e7d3057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.150.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb43c3e-1399-44ac-8159-93e70225d951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.161.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b253a1b5-3602-40a5-a255-dbb87c464847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.150.116.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2d8a5d-c919-4d10-b4e2-92c1ad215898", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.152.102.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf16817-1a09-491d-9d23-4bc7cbc35052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.153.62.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69150834-1c2c-43d4-9f2b-bfbeb8855b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.229.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e91cbed-f237-4d11-8124-ec3b727aa493", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.22.121.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bc3859-6dba-4729-9214-b376630fa427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.238.140.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c34958f-6d4c-46f3-8bae-db91a6eb63e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.33.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9932338d-f29d-4982-affb-5d3bdcead82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c2b21-70ae-41f5-bbb4-601d294c69bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.26.96.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3320843-fc45-4723-b9fc-766bb3e57938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.41.184.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f33e68-03ec-4601-8250-b606931e5e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.54.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7024a9a2-4ae7-4d6c-a359-259517bbab48", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.52.183.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428fe827-9344-4764-81e0-b95b54ed21d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.210.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4cfdd4-d46e-4811-a407-db647f8349ea", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.16.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef2878f-dce7-4f28-8f46-e7f25744e48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.91.242.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2d7a5c-35dd-4b6a-9ed3-11ac662d337d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.94.56.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617ecfce-02df-43ed-b073-e03e4ac83a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.1.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69e572-f3b8-4195-b583-74c42bc510cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.109.19.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dfea2b-c1a9-4d05-8ad7-ce64027d4e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f788c0be-9847-4fcf-8d71-bb3e71577cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.176.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5851dd3-4fb7-4eb7-88f6-220c7b3c6ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.151.93.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efe4937-2409-41a2-af6e-1686d208607d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.167.109.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582e7289-819e-48d4-8b46-54dc485a36b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.89.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a62e25-07f4-4ee7-b6ad-b2e8f18b591d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.215.32.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a83ee7-1282-49c7-b5b0-e37131335c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57db696-894c-4090-84b7-385ab281baab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.231.255.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c2aaf7-fb7e-4b25-b222-016d7fa383b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fd7008-4c85-40ad-8e7a-ea6b9de9b51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.28.66.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f56681c-e2ab-4c4e-a6bd-db9b826eb658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.46.199.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decbaab7-2206-4622-b824-0d1261b45e36", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.37.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be62588-b18d-4ab8-ac57-9853ae3e3fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.53.156.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1b892e-839c-4844-b4d8-4bf4d09d48a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.54.214.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fe7e68-1329-481b-be2c-9f699468bf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.55.90.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa3abd1-7609-4ce9-9d5e-5df0bf4bb864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4b34e5-49df-456d-bd52-e0fd766a0927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9984f4b-f714-4d74-803c-7e6b3f0e4255", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.171.207.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e90eacd-1cc3-4e33-8690-0ec76feac845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.172.219.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac8d8ce-84f8-48ad-b974-e5b76e3c6b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e870825-474a-4bdc-983e-f1483f07945e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.207.204.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c571d43a-f680-44d0-9e79-68cd71bf2acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.225.123.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57223780-3ad9-4cb4-8bc0-a89f56d1d0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.17.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e949176c-b363-419d-9bdf-b2417b9cba45", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.224.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aca7a27-0a78-4a91-9bda-5d07d962bb4d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.49.219.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f01052b-9ff5-47ab-a9a6-0dd8cb8ba1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.200.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3495c08-1b7f-4c8b-8ff3-c12c4eb1cc5e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.72.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de1375a-26b5-4bc1-9178-b9116e5fe0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.202.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a923d1-c5f5-4843-9f7f-fe9e49555969", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.136.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b63295-a3c7-4308-ae57-728c43712e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.191.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78af6f8d-8543-48b2-a093-9261e51c6e16", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.37.136.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f947b17-a1fe-4254-afe9-8146671866f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.198.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dec3ee0-9edb-4ee7-8be7-524841141e6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.184.185.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd509b4-dd53-47e0-970c-5a938ea23f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.221.162.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9895d767-2aed-49d2-b0c6-4fa9d7d4099e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.225.166.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f87f72-a16d-42ef-88ae-1b11e254337b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.179.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ec76f9-3025-4bf1-a0e4-fa95a8a6f62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.106.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac33b03d-3de5-4115-a599-40e79913d690", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.232.188.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55194ada-5db1-4cb4-91e5-6ff2441c611a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98658a4d-9ee2-4289-908b-c76e8f8edb67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.61.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea5d149-0d04-4f7d-82f0-80eb394c42c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88446d0e-0e07-4d48-a5a6-80c6fc4df80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68763684-765f-4bea-bf0f-7b6772cb8006", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe949be-e8d0-4a8a-b307-96fa835c6295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f9dbc1-8cea-442d-857f-a0a1a682852d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31cdd54-020c-43d9-af40-8f0895900e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097867b7-44d2-4e70-9bbc-06e56b1b77d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3547774-485e-4064-8c85-bae83019132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a171f0db-4f43-4cc2-9031-5fc761158a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.127.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059c9a0f-7173-40f0-836f-dea4ca05f47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad71affe-a99b-4585-83ce-73a0d8f5c4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f423f4a0-ce7d-4193-8d81-12a7f5c2a407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79be022c-53fd-4646-9820-b89400c7d99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796da6f4-92d0-4001-95eb-f517539fb7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5292331b-5c0b-485c-b43d-8dcc566f0750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fa9120-10eb-4cfc-8dd3-7c3b6526a6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4c45d9-e426-4102-88c2-cbaa16d47971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af9a1e0-26bf-4b15-802f-b3c4196f0972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbedb36-524b-4b1b-9d12-d5a48becc016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8bc36c-2e8c-437b-a99b-42f4e65af08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528494d8-c1d2-44c3-9257-a0db6172f100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9594298-a818-4139-b49d-e9919185c5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db18f076-bb5b-4504-874a-47ba76dd9bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3555fb2-177e-4b80-8ae9-75c8201fe332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b19445-606d-4be8-8b65-8e9136c6ccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd41856b-35d7-41fa-bb33-a5d580d9b1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b313357-2093-40a8-ac52-d7e7b76ecf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031143b8-99e2-4d12-8b0c-625538d45de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2dcfb6-284e-4799-b3bd-8528f8b5622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ab7edc-c082-4eac-9c25-a1a3bb78502c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550ee004-cab8-4a49-93ce-9df5657dbbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cb664c-8d69-4743-bebe-34605327bdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b66fa8-f7b0-4ab9-8983-ab7d82394f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0369943-c3cc-4c05-8121-b70b8b5e885c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd46c2c4-166c-461b-9142-8050a17c6aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc98cdf1-769b-41b7-be9e-526a3ad49d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61a3fa2-8591-4942-b924-80f0acc09107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7aa70a-e4c5-4b74-bab4-fe53c96c4c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd84310d-6a3a-41ad-b33f-07140f4d8280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0585a4-b60c-43c0-ab18-0e2cbc4cd85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d65c16-3340-4c5b-8991-ea35e4cdb870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b081992-7054-4527-b650-85ff0ebcb29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f3b614-2163-45cb-a3ad-004869c4cf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a54e7a9-04a8-477a-a30e-6ac01b602a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306a8b90-401c-47e0-b52b-10d516b49c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b699a21-3905-4818-8715-594e9f84fd9a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.160.62.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4123a26d-49bd-4cbf-a037-76da8f407735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1a589b-5918-455a-a1ae-f5fff8380734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2562fad6-2201-443c-bfcb-c5d4d2728dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.68.94.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb82504-60f2-4479-ac6e-c87ce80b39dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.71.90.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99a81dd-700a-43df-b7e1-7ad5fbf441ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6e429f-86e0-473c-8cb7-55e601b88959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323fe284-62ff-46eb-b108-750a9147a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcacad2-246b-40b8-a241-ce6483112d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e233c8-3f6a-4e13-90b1-dd2a71af3bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.137.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fcd3b4-b15b-4347-94ec-beb6ce4376dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e633c93a-7e0f-46ba-a49d-50dee64c9a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5792d9b6-3b69-44c4-a2b1-4cfb66554ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af37c0e-7360-445f-9193-e2bd2d120983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0072c3b4-e93e-4029-9088-ae67b2385338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a4be97-a1b5-4198-853f-4f5a2d9075ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b3e3a2-8801-4e06-80d3-976cc4b734a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efff852-9597-4032-86f6-3dd9653944d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74243d1f-a227-44a4-b5b9-2a69474f7cda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffdbe3b-fbde-4f2a-b3df-71cf533d2504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff3dd38-5042-4be3-a46b-81b793e2fe10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db17786-38e3-4e60-af7e-e7715cbb7a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d491cf-4275-459b-a3ff-417ab2326eab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.204.63.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290a9da5-33b9-4710-8ad6-69df0fd164b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.209.123.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f1fea3-d539-4df4-8802-33320bb73686", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.239.210.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3e6827-f0d9-4a58-8416-d0bcb8ccb48b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.249.210.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ee463f-ddba-4a35-b0f1-0eaa2c963b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.67.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e63a7f5-f243-4bec-acf2-f72539778702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.31.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9ef134-1b54-4641-87f3-402769b6cc43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.56.217.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd2b836-ee4f-4428-9691-0d78686b40cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.62.219.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47af05f3-0b4f-4cb3-98e1-496517f8202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.14.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3a0fd1-e259-4839-9c63-fcfc509eb3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.48.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2722f3b1-68a4-42df-819a-d41b776feb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeee5b1a-c914-4a52-9b21-21730701766d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.241.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fd703f-e644-4507-8811-dc35ba0a4924", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.239.149.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6369b1c9-e64d-4014-b583-61ad65122ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.49.168.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1a672f-7e74-4093-bd78-3ad50e13ada3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.51.49.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc950f61-1050-485d-8343-4d07ad434e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.82.224.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56331aa-2001-4a32-a9c4-19ee7a30db9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.82.239.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071f4665-24f6-47e4-8547-79729955fc01", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.87.161.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74879013-5c58-43db-beed-c9634cf67247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.110.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e397898f-4212-441e-9a7f-67b071566267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.150.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cd6b9b-c51e-4fcb-b3a2-fa3a3e29b14e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.235.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af10141-19f8-4bf7-bcd0-cdecdb5531f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.34.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694d3b29-03b7-45ea-b1dc-114b1073c347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.39.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d31836-02ff-4782-b26d-4aa296094599", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.67.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08e7cdc-83ab-4fa3-919e-9300d0df3595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.71.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20190bb-7e25-4ac0-bb12-719c4320d6dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.23.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c82c3f-5f7d-45e0-a098-719ee913acc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536d1ecf-a927-4e00-8d86-f81987f05458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.69.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e927af7-5817-4a4f-94a5-3d7fbea93c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00f3e45-ae1d-4da8-b0b9-000c609e11b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.129.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bbab21-beea-414b-8406-6e3e7cd97338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.15.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faff1390-c24c-4488-a371-148e1ebca077", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e232b595-4a3a-4d70-ad9a-b48183d1b506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699c0013-3e7d-467d-845c-4e3fe1e3f9d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.164.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a4fb49-091d-4a86-b469-bd1f837551b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.1.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c3518e-bb00-491a-8eab-d33895ce2df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.5.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb003a6-749a-40fa-b653-aa74e3c0b6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.113.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124318ff-e2bf-40f4-acf8-f05b77e0de25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.12.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4c69eb-57b1-4add-a9c1-9f2a36c17ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce91ea-219c-49c2-bfe8-e008fc5a6c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.26.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92feddf5-c37e-4854-9b26-37499e5a3e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.62.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68629e67-d9e4-4050-8a8b-6f281ab4766e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.85.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1a5a38-4bec-476b-8f53-792ab9c6152f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c91211-b4cb-40dc-ba38-412d66e5f089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.140.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7be1d7-7638-426a-9856-19d4c19f1d42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.134.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d760c5b-5667-4923-b90c-b950af4a8f3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.157.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13548624-e1ca-4ebc-a87e-55ba8080d6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.115.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9571542-baf5-4dc9-a9ec-53d11b6b7b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.145.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b6e73b-0885-4a80-b983-e9033a5974a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.212.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228bd807-54d7-4a4f-bfe6-db0af480bcdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.36.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7a7079-1ebb-40ec-bf98-765cc71be798", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.149.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34329c65-570a-4517-b5b6-19f8c03e222d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ad4493-70d2-4e56-863a-8923b359e7a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.172.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b6df79-eaf0-4332-b561-f9c77a7875a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.174.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d85e06-a259-49cd-9f6a-d0798cd7b5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd148fc-0d17-41b1-b54c-62a2b4b11c68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42024fb4-ff75-46cc-8719-46bc502c2bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.43.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08f20e3-8870-433e-8c94-f0d8e8530007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db672f65-5b57-49d0-91b3-fa4293c883bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.158.91.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107f5f81-18b8-4b4c-9199-996b871d11f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.138.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9409c2-6ebc-46d9-9364-11b827a7a2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32384b18-3ccd-48b6-aeb8-0797e85e22f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.230.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f043401-74aa-4b59-bacc-951a1fb1e4da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.34.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eedde76-e6f4-4125-ade0-6655345cb350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1baa4df9-9d00-4f2a-b0b6-17796fc9f77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.219.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2216ceff-3a4b-4dca-b904-4ea69bad8836", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.224.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3c9acd-9fe3-445e-a443-22528a2ea5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.109.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262636dd-e300-4cc0-95bd-6b00882b4beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23f4a90-89ea-4ad5-8791-ead41c60d6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.124.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba5409e-4344-43ec-9941-ebba1b3c4423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fa4a6-2181-4093-96ca-d3baedb94b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de75b9d7-82b5-438d-816b-d1754b315786", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d08217c-c516-47b9-a1aa-27774672d6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161938c8-3537-4726-ba8a-497b45ce9dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.126.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba6e3b6-1476-4c48-98aa-f1182a09e9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.195.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fe790b-4fd8-40e6-bdb7-a81e7cc45c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bffc104-9152-426b-91ed-7d5d947f770a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6af028-197d-47a3-aa9c-b3b139926603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.129.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7c1002-a13c-45d8-9eb5-d7f90297b5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.134.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974bddd1-9a20-4226-9cd8-2cba4f82dfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.245.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09c5ac6-b253-4dc1-967e-e0b7707159ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.251.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5e940c-a6ad-48e9-af74-8141a6ee6588", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.199.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7f1634-aff4-406b-96f0-a3430828625a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a54ae1-89c0-4c5c-86c8-b2c5fbf71ea3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0db233-df61-4ed2-8e0b-b7ebd1b4c558", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77b3b1a-0964-4eab-89ef-128e33185b0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f25d611-cb47-48a2-a933-5812681455ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7196a92-18d3-4902-ae2e-1b63305e8bcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c379a99d-23e3-4d20-a373-8f94d6316ff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75753de-1683-462a-ab26-6c41892b2b60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f7df1e-ad83-41f7-81fc-65155dc95661", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87b1eaa-980a-4163-a8d0-8f4b56befe1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf31e632-1eb7-4e4c-95af-4c377434b330", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fd0717-65ba-4cd6-aced-bebead5d305c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.136.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ba9e9f-21ca-47c0-9915-2756fe8d551f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399086d0-00f7-499c-8ed9-f0a790453a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dbef92-2f3d-4c20-99e3-a182d0e5ba94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31c5269-69af-4888-8c1a-ab31813dc393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827492a5-0d38-47c0-88b1-e859ce9fbaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea35cff0-d2e4-4920-9c31-7f017eb350a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7d69ba-49f2-416e-a275-f37896332bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0b4351-4964-418f-be17-279409a85d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dec809-770d-40b9-8993-ec2eb5d71087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d69e88-c1ca-44cd-9691-043d858e0438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65369cbe-4212-414d-ab18-c0481901ef6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f77f285-6d5a-471e-b0ad-b095758d5c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d612ddef-c048-4e3a-b7b8-3326473fade8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01d7bac-ec73-4543-9f8e-805afdeb156e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe59fc09-300e-4598-862f-46a7f0730258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.64.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e31aa-a863-4795-8cca-a818f10a4883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce600f6f-cc83-4932-a50c-c753d30215db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e20e7f-36a5-4849-ad15-aa7b482f4e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.255.158.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9657264-d03f-42a6-bf1e-b498416af976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.127.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b981a01a-c552-4638-8af5-12d55deb2741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.7.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bde3d4b-0c04-440a-a2c4-841cb693d77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.37.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e3a884-c691-4155-af7a-02a5b07f4ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c58d23c-d9ef-4d99-a816-8789032fde1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f4dca-6c57-4f02-a3ba-49a6501e7a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18aea01-cce4-4e7e-a785-848a4a42778c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0b7509-0666-4475-8e17-07978da602bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.116.3.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf06afd-a485-49d5-a7d5-258b5c5e8285", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.116.78.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb7ce32-9009-42bd-abc2-67832e4cf6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.24.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea7c7db-72f5-43bb-8b86-782cc5cfdcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0667ca54-f3cc-4c9d-8d3a-1343b35b8fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.17.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d3e92e-3798-4ced-9468-24ea428ca43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.186.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e822c4-a4dc-44e7-a073-c672dbf5d82c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.193.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96174902-307f-49e6-a924-23ad706e3f19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7699cee8-e1a6-4c4f-aab3-e79002de1fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d32c5d-a50d-4e68-869b-197b7645c75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6169fe3b-25e7-4aea-8563-da9112fd1b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad066d0e-e672-4ea7-a386-fd8346dd2492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55ba2f4-c5e3-4ea0-9026-952c1cb76df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.10.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50090d60-d100-4eb6-94f2-716b264d60c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.147.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072d9724-2a21-4977-8bef-a6fcff16d8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.215.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c445d1f-267e-457a-91c5-f5c7b2ff3ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d749b36-32e2-424a-9fc7-10f6c9a2106d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83712f27-15bc-44e4-82a8-f8303c39f49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be59706-ab5a-4100-a685-0fec635aaed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bd1642-2e53-49a1-8ec7-a9e7cabf0874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b550626f-5b6e-4d6b-93fe-ca884f70b5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42caf092-11d9-498f-8671-6cea8aa5c8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad16c41-2125-4a3c-bfba-b7f43980f8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65883e51-4415-42dc-8515-8d336aacfd24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.233.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f19dc27-57b6-42f0-adef-ccf5dbd594c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.252.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cbe35e-fcf7-4502-9147-2c3ced4d30d0", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c4b1c37-5a50-4104-9dca-724b8d729bbb", "relationship_type": "indicates", "source_ref": "indicator--c5cbe35e-fcf7-4502-9147-2c3ced4d30d0", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78e9913-b8a6-4942-80f8-c80f8d400c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2c4265-9651-48ec-8385-1273a33ced27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37388f1-a5b0-436a-b193-966e557a93a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9253792e-484a-4e5e-ab1c-1b4fa3dce6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae21ba54-ff75-46ba-90be-5be0d9298417", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a760df-068d-4fae-b682-c46f71966372", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911461af-a1bf-4cff-88cc-047c7fff36f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ce9ed2-73d4-4f8e-9fd0-f1bb8b168dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ba2d2d-2d33-4683-9da9-300ea8f3fc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a06868-a1a8-48c6-9b52-dc49a17506fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da2c3e9-7e7f-42f8-b8ca-a95489d06c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eb42fb-24ee-4168-93b0-fb83606fb38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa61c76-5591-4443-bbc3-a44d171fa185", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adc1cba-75c8-4b5d-9642-f8154e63f878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec727823-91fb-4c0a-b894-b2699a93eb74", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7caced1-aefb-44c5-b9ef-1bd9b1751744", "relationship_type": "indicates", "source_ref": "indicator--ec727823-91fb-4c0a-b894-b2699a93eb74", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a98f46c-7643-4079-a904-69471d20d98f", "relationship_type": "indicates", "source_ref": "indicator--ec727823-91fb-4c0a-b894-b2699a93eb74", "target_ref": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9691bf4-cbb1-47a4-9036-ecab9ca3fbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fdd36b-69be-4241-b434-b0b4bd743bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea8b4d9-6d2d-4406-bac6-202e4041a9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4114e5b-e7a7-47df-8c57-40b15c80ba1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df667fa-e036-4f0a-9d8e-3c5010c2a043", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac713f3c-dafd-4251-9dbe-1c8bc8e43f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b299ca-23f1-44e8-912e-f81e6d00d344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce9ea19-75fe-4b23-9fe5-7f269ab53667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b10281-a043-4aa3-b2ad-2d4a15a3a62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce109595-4b35-41d6-ac96-fcb4af4f3fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bb5819-0f5c-4e1f-8dc9-ae5731025c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a7377d-4d89-4a87-8f17-2b1a7b550ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37222493-3c33-4986-adf5-b2ff3a528397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d440a3-1930-43d5-b46c-18a8875c09f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fba3ad6-28fa-465a-8ae4-544bfd73bb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e27e52-dc9a-4b55-996a-ec2dfabaf7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146a85eb-1ce7-4215-a6ea-5ff41be629b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157b6909-354f-44b1-be38-20535f5c2fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf563cf5-b878-4a0f-a20d-2ffcf27a4f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dfb8ac-a1a9-41fb-b6e7-51f9e7864ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf016bf3-ed6d-4096-a65c-761dd3b74a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8957dc56-c999-42be-ba39-24584c418ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f168b1c8-dea1-48b3-b05b-468b47f004b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7484b53b-a685-4d61-862f-ea8974bd756c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0a08f8-dea8-469f-bb11-d21a6ffacb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2d2309-4319-412a-837b-ade47fcd083d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a641098-9558-43ad-aa4f-3af1edc6fb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3b09f3-b9fb-452b-a916-61f92ad878f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d59656-fe0d-4e0c-a44a-7f7100bac67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a459c8-348f-4ef4-829f-4a544b576f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1271b755-bec4-4862-80bc-b19af287ae05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb38260-e422-4157-ba05-fcfdb2f78482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60492a-522f-4134-aeda-0ce980a11f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d4325b-b914-46b3-966b-13d79fe11705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f7d616-57b8-409d-81e6-853ed1a80225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ba1b45-0556-483f-9349-63d570558777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4275f0-0749-4b39-a28c-5299eba7b443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a293ae-0672-4e75-a8be-77114fb034ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2c6eef-3bc7-4996-976c-a4da29f1088e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8b617a-e983-43d5-88b1-f1153350e32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce533900-7e8e-4173-b273-3796bb4bc184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b7d46b-ca00-4f9b-bc0d-a17df1c1d6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9023ebfa-96eb-471c-93d9-ea465f485442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7c5bba-1f2a-4158-9ca0-5734e92a67c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8490ff59-4ade-4d40-b91c-2dfe3206df05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc9b395-0ce8-4a05-96bc-012c5a23ce9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386911e5-6ca5-41d9-ad69-687e93e50d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88d4d97-3abe-4fb7-9358-13a57737b7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f77fcd2-b2c8-4944-952d-7031845e0d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89f1a47-94ab-45d0-ab0e-61326c34a5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a63e88-702b-43fb-b6da-f02d99dae0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503e8274-08ca-4a1e-b1e2-13a76d59a4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e96ba6f-2b21-4d41-b027-654a2ee17335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4c0844-9fdb-411c-95ca-ad1f0c700c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66af864-9dbf-49c8-a7c2-b9d9dad497b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e8f9aa-a8ca-4e20-a04d-3b943c55802f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a20593-8e14-4386-8b11-347ef96dc38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7204a933-33c6-45f1-b8e2-216bd8e4e08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38003ec4-c796-41a2-8b05-b315ec83d9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1159d7f9-6d96-4485-8b9a-b529986736a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cf8bfb-1992-4983-add5-b95e8f2ac8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c36c112-e1a4-4cf0-b1b0-613e95a88d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2592d30e-55fb-414d-8bf2-ea9da92feec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79ce013-061d-4e98-b64c-5e73dff0ee4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4871ed04-e776-4a16-a348-788505465d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de424c0b-bb3a-49a7-98a9-cfe85ac78ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bb3069-d93c-4e0e-8565-a9098ecb2d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284f506c-6323-4abd-bf40-048a85424206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1de636-f210-46f0-943f-05b158a1b6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf2c71d-2baf-4b82-952d-3d01216ff379", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b560267-4f16-46cb-a736-1241fe70cf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36fb4d3-5f3f-49ea-ba1f-3437c4c7914c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af01eca9-bc67-431e-a39d-5e99d1c25e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cfb427-095a-4e5f-8843-be6feeda2e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae5a80e-2303-432f-a95e-ca3469de5474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b06abcf-e353-43b3-b982-91229412195d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ad845b-e201-4931-9125-66799bb91aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a981aa45-c592-49e4-bcf0-ec2d402f83f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.221.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaadea83-c97b-404a-b21c-d4eae04cd03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.75.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7ed6c3-9025-4af6-b16b-3a1b8e429236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31007fe-d579-4d6a-a539-1eb257d844ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.185.134.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4322d98-9c6d-4309-b650-acccb2eb7b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ac5e5a-d883-4def-b13c-a61a9f13bc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ddbb58-20a6-47ee-a2f2-96c3df5a2ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8667216a-a3fb-418c-aa67-0872f46da90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab993b3-8f77-43db-848f-37691debd5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ce1699-0dee-4f2f-90e8-0c174c827b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274d2f9f-d394-483d-8340-149e30b15a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29644e32-939f-47d0-8133-989490d8a3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd462071-9935-469f-ac03-814bed2d6be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011e74cd-78ea-4b95-9a2f-2a8039e1e233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aac5671-c463-45eb-975b-893c9b75d4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5f8d7c-6e83-4a5e-b122-8349c7139ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46cd209-c575-48d7-9bd0-25b2a47832a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1a465a-c3b5-4005-9cf6-08c04992fa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca31a4de-5e82-4551-8e56-0c77ee6d7d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e55240-f7a6-440e-9218-20c6d699ec32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f7ea02-78ee-490a-8992-b07516513e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c5e3f7-43c6-40b8-8815-90202d68d998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f091e7-915a-4aba-99b2-076bd6b3e25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d69e7-34f8-4eb9-8d9c-0224d66b08cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06735c4-4f7c-4804-b4d5-7dfff49b16b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34127a9f-42cf-4297-8ca1-85ea8beb223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.157.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546cd612-c5d7-4e87-921f-58cd2cd5ea22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5234fd-4263-43c1-a43c-16675860bcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f1d45a-9dba-4022-a496-706ec7148909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.237.106.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe2d2e7-91fd-4cab-ade0-5937ae250f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.132.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9f51b3-4bb3-4315-8bd7-9b646527d9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.132.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf4c206-3145-467d-93ef-a8691319d975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc1ffed-7493-4d98-b6b5-eaa0eb5f69d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be5f9c3-9ba3-4d6e-8553-73ff4208c6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35939941-252b-4aae-aa2e-745620a2da08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de5ab20-aa13-433a-840d-9562cf6f04c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e115da7-cee9-4a2f-9b97-d0051a65afd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a12e417-7203-4957-9aac-358a2902e27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecafc84-e7df-446c-8b9c-e179d86ee8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f56d8e-eb98-4ca0-ac3a-a879a2f05d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64c25dc-4d71-45b7-b805-2e021d487413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee41e7d8-4490-4186-a0e8-05261dce6ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f92b17-ed26-4415-b5c8-95bdab76d959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe48547f-997e-46e5-9e23-7c64eea3f89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4415fa45-48a4-407a-a4f7-f3235fccdf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd57432-545c-4e57-b44e-000b615c2268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47e1ef1-b507-4076-9a0c-90b2c1994a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1edcce-4c58-4ff9-9639-ff75df9d1ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bf47c1-d7f8-4479-81a2-981c4444f9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5beb56-5728-41cc-9ba5-d2a2171ee8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf53d00-c6b3-4f9b-90af-766d6e5b3fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f4c36f-231b-4c56-b35c-94c65c9ff44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca7ca6b-5d14-47a3-a771-131e461c586e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d308bfe-6036-4b36-88f9-3748cf032fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e680ca-d7da-4e2a-8c0a-f18da68e1f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfbbb4f-878f-437f-9e3c-c4d3f2a53b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc261441-4257-483e-8b6b-ac0ce2db65d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d308749c-7c6c-42cf-94ae-f289497ad09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff60b5c-2377-4438-b396-b223a127c118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb58d58-e394-4284-9678-b05c54e47214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5c86c2-c69d-4fad-aa7f-e1d090d94981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6f1f80-2aa7-4826-ba42-40b30af64fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56fccb3-6776-46ae-a494-5c5b6be27885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4163171e-5987-4b71-85c9-cab083903d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dd6f9a-0752-4b43-8c1a-9f7c549b0684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9fd815-e653-49c9-9170-50511b973efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc4841d-e4fd-49c0-9af4-2610082d5802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49abe622-dd37-4623-b238-2d00f708386e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.37.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bdb35e-1f63-413c-a7b1-a9cb76b4f682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1e49c1-06db-4f2a-be5a-ea22c2773e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a77cc8f-e1d3-4655-a169-348b54cd07a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81161977-750e-4b57-8ce7-60014a7b54bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc11d5b-7c91-4c4a-935f-aeff3bf84a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f8ea21-2baf-4bb0-8c23-efde70d772cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57c7112-dc0f-431b-b077-d490aa5833b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c487e90b-b143-4aec-85e1-542d07ab4422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891423d4-35ac-47d4-bd3b-3c18847496d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ef433f-56d3-4a27-a436-6c770987f6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83b2312-dc12-4e0e-91a5-e4e3453837cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f7c45c-41d9-4f4d-a50a-85fcea543d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134c0ec0-5e52-4163-a511-befcbbbc5871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deee27cf-d558-4876-a6c5-59bb385b59e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75eeb6b5-28bf-447f-ac66-845384bcca32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fd1531-3e0f-45d2-88d4-a60e71f814a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddf1567-b7f4-4da4-a17f-ae26fc146e82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.65.227.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c91e7-dd88-4217-bbd6-3008f2987b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.250.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62caa48e-601d-4b72-922d-a8d748f62a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.67.216.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4888dd5-74f3-46a7-9d0e-b2f06daf78a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.3.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b33b84f-e2f2-46ba-abcb-73c34fd21b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.107.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4959a1cf-bf36-4a7a-b627-a2339976e9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.22.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b72f1-48c8-4128-8b2c-f02fdcba5531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.250.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e1aa4f-4d14-499e-8d80-f28c6989e6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.61.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf87366-3974-4361-ab64-2fbaec2e89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.235.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1441227f-668a-45c0-a720-e5267decf46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428d0b35-94db-4a0c-806e-1c2ddbe14a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57bffb-e10d-4261-8808-e9949fb9e9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b02154-fa43-41b0-848c-3e67b5eced8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2595e5-f31f-451f-8b0f-9f3644677f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53570a57-e745-43a0-9cd5-e0331f08b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbf4c7b-8d3b-44a1-a13d-d205cc2aeda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0936ad-29d5-442f-b545-d0ee0da21f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64b1abc-78bd-4858-81bd-9f4d25fe9129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc67552f-9288-493e-8950-da06acf509de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5450aa-fc58-4df5-832c-43792563dbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb3b31e-9477-4716-8079-972bb63a535e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beae6008-a32d-4913-ad56-21b31ef7b2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4555b7-b210-45df-aa29-504ffcd244fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8451611c-3474-4260-8b26-82dab8a77d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357336fc-dd1b-45df-a2ab-6dee35990438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a9a60f-c5cc-4d43-aa62-1c1c001f41be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72260aeb-c6d6-4648-b035-fe441bb844f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5caae1c-9f75-4c7a-a52a-41f8f4f8fb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c616949-5021-4e2e-85f8-2804c94aecdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752a33af-f1e0-477c-84f7-230d4b31e599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caa80bf-961f-45d0-8899-573dd34a031a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b86257f-a723-4186-bbae-05177c2f6e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fc643c-0752-42df-add4-07be808a15af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0696c3ed-6dc0-4bdb-a9d5-e378a2d8ef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2d43fd-6418-4dee-878e-38bc5636b8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8ba5a0-81d4-4218-b435-654d3e4825bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787b2c2b-8a65-4fbe-8343-03669ee31e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51d1867-c01a-4cc8-89a8-7de52464fa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ad506b-5a67-4498-b480-4462ff9729ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aaaa61-9b96-40db-bf55-652c7ba5dd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f0276f-1fca-4f22-bba7-be5affd67034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdb54c6-8f85-42c2-9957-0a51604f78c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6648d2f4-4674-4970-affd-dc32c594642a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c18284a-2bb0-44b6-9650-758160907754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816804dd-e4e5-415c-b04b-924e666be1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ced798-634d-4e84-bca8-962e7e92ebb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4cf4b6-3be8-426f-ae40-c4a6f38ca483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5dcf8d-c1fe-4f9b-b0c7-697cf8e29d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e2bff0-00c1-48dc-9ed2-0641037854fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a1221b-83c4-43d4-b0c3-8e5b92c9d1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0ce98d-ab6f-45d0-a3ac-c10f86dc239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebaec52-58bd-46d1-8981-6f21f6f4adec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aeedfde-5c8d-4cce-ab47-57d11c024b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bf1888-2c81-4a12-bbb4-7cc013ecf05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed128fd-5905-4556-9709-152dea9d2f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43f6c0f-9d21-438f-822e-78ad593c555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb2d944-119b-4ca4-80f8-bcd4577c5778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a23d752-204a-4b20-af5c-ec6ba3b0fd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d77ba7-b7ca-4661-91de-08bda3001b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2b6517-3071-46c1-ac24-becc48a2423c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c93d08-4a33-4614-802a-613e14bb0e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adb0221-6cdd-4cd5-a6bf-8f1f9b02f83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db537d40-276f-4066-95a1-5cfe70a3f91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc997bec-f032-4a51-9109-fce4300a9c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa7959c-1d2d-45e6-99ae-d86cfb079a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a5ea5-44e6-4039-8e14-b59b5777cf6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dbd9b2-8696-4451-943d-cf0b1b34c9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa37eff-8afb-4cf9-ab02-b0bc0a244142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ac9b9-deec-4829-b218-31ffb60b178a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7431b59-4b3e-42be-8e7d-099e9cf2d4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b304d62-bf9f-4b5c-8137-5b9ddff92f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffd558d-eed6-4320-a7a4-d2f13795064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3336b55e-eb3a-4710-9745-1e78912ae4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67bc83e-799b-42ec-a30f-9877bc7c56af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090dd3e8-254c-4274-9676-29a5448fb6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0903e470-e527-4f5d-84e1-f574e9cfed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bc74c7-4d95-4202-8538-ae4a41344b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ae048a-4127-4a17-b979-734142533136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.120.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f53034-399e-4745-bccd-d7c245ab5d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.89.223.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39db3d2c-6d6a-46f4-9cc8-fdae967b1435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af0b4b9-31d6-4908-8f90-05e522dcd032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb91efa1-62bb-4d8c-8e56-c587be6c1103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a34e62-a9e9-45e0-b282-3c953fb4f0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8f198a-4b3a-4981-9968-650443f9217e", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aad197-3951-4086-a7e4-f6191f65c164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.114.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04348733-458b-43b9-a79c-55add9c57130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e4bf66-9665-40c0-b62b-bb2f5d33a384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508c6b5d-a78c-4d9d-abde-81d46214055d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.54.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d7e705-aa4a-4822-9b2a-d8943381eb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c202be-a147-47db-97f3-79a55b36c6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.150.68.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d687fe86-863a-4f47-a866-eb376b150604", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.150.71.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360aba06-1558-402e-b25f-979799fe8569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a329e-2330-4278-b71d-ddf770b958e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca692f3-ae72-4300-a8a3-ce0e80eed83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bca84d0-b169-4471-8a78-ceaf3dda3e6d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.188.34.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df559ed-0aab-461f-942e-2f4483df9dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afe0640-6b7d-4e9e-aeff-5a22b8147b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.234.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee5770f-c428-4e37-916e-666934343ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03e2488-f984-4b86-85b3-929920c781bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.231.226.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51147a35-1a71-44f1-921b-fbf5f2715b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964d0db6-0e3e-42dc-b0ce-ab4ad44d595c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4025e7-92df-489c-824b-d4663c36f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46235913-11e9-428c-8a20-ce916e215151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf5d06c-18e9-4188-9bf3-83b9c428c3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218653e4-96c4-4e37-9dfc-38ced93802d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f00723-73e0-40db-8e54-818c877abac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc0b1b5-88e8-455e-8932-3c09458be257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49de70c1-b88d-4245-813f-350073445a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2ca9cc-7c33-4b8a-9d3c-2df7bc006613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6a1ee5-f981-4895-b886-db95c1a5e9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765fd6eb-82c8-47a4-b70e-ccd400f29c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bfdae1-3a85-4257-8b9f-9ba79b8a7e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab2650d-a9d2-4927-b24e-d2e279affc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01793e31-631d-4e3e-a02d-7199ed359515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b6636d-93f7-4810-965a-0408dffc3cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa709069-95c1-4a85-83fd-7583d4d7b3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b581d64-ba79-496b-874d-eefb044cebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d86018-c525-4571-979a-24f21282ba2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06deb7a5-1231-4516-8489-dd0517d78be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bcd7ac-0c91-434c-88d6-d547bb4ead62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d934f9-e47c-4546-858b-89e8ec463fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3996d37e-7670-4929-9cf4-91f41e873cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adb141c-ec90-4fee-8894-2929c9f0f8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aad611-cf05-4c3f-ba4e-0c0024bdfe92", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.255.66.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bc41a3-fc0c-4c1a-abd5-5b7928f4da11", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.56.76.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1791468-61c6-4941-88c1-dbd7d6395acc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.6.127.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104de924-29ae-44b7-8129-716491d89286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.140.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e725bd7-5fba-4c0f-b0ef-bba135af16fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.98.108.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8313044-5b9d-4664-b7d1-c9261b8cc9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.71.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5733688-18b2-40be-9516-5ad57c194851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.75.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2cb044-6d5b-4510-8734-35e97b5da733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.120.30.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be49696-3891-46d3-9de4-084d395ce98c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834d0195-5702-42e7-9046-3e3c0ffa20a7", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '47.129.185.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb31948-4517-4580-9f84-0ab92427ffe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e6d1f5-d7e1-4e0a-b60d-5c562850fc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.187.219.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ace311-daa1-4eb6-8f4e-64f4e391ab04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.208.139.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf295de-bec2-46ac-81d4-6d0a21c4c7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.167.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1a5346-9dbe-453e-b289-61ed5105efae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.179.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e6ae25-5ef2-40ea-bb86-15189fcf8941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.192.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ffcd51-21a5-435c-9180-3e54fa1c6fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9030c48-615c-4b79-ab35-8c9de095937f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.118.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b0bd8c-729b-4206-a430-c2ba7f601061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.121.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae5b3b-56a7-4c76-9ad9-41a995e6b646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.39.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8fd3aa-5be6-4d43-a899-80d6da3d3a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.109.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66fabd5-4372-4fe8-b987-75db1a430e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.113.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb07c896-e78f-4ec4-85c8-9bb7d941320d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647fdf01-d369-470c-b03a-d3169dd6cc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f30aa18-4584-4042-96c5-306a7625fdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683de0eb-cd57-443f-a6db-ab74aef51ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822d8ec0-b72b-4fa6-976c-d1af5c406d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5c802b-b7cf-471c-ad51-95e2c7d8b8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e783299b-851f-489b-859e-e921228d8e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0484023-3ae6-493e-81ef-545cd14f22c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b637b1-cb20-43fc-8a99-9682e8d0f408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fe7c53-d2f8-483f-986d-6706d815760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067042a8-57e0-44f8-9511-770151396398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af63965c-dca3-494e-a1ca-6a72a2fc9b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c295a21-06a8-4f3e-b5b8-1fb29bf653bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41495f7c-1445-4dec-b925-9f11e11b5f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9002f7-51b3-4ac2-8e14-964477d969ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509d9127-ef04-4344-99fd-ee2f19a255cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1063056-0679-46dc-87ad-fbd585806a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985cb4d8-00de-4bef-94fd-1ddefaae8f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9462bc45-7b75-4aee-ac8f-8e22b4cb1f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9af6b35-aed9-4812-b8c6-2d398975a53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21025558-762e-49d1-b48a-f14d4e8054e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd375b6d-fe88-4220-aa1d-7fbc5b451682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a1dafd-b3f9-451b-809e-96a78638ef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8366c13f-467f-432f-a61e-b02518767ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586141aa-febd-40da-b116-74fe300ef391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f883d79d-bb63-4a08-be5a-50e24f8db8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4983aa9b-b74f-4050-9c61-8eb84b11a99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a99797-65a1-4dfa-8d3f-85dbddedce87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dcdee5-5fcc-4d0e-9779-e683360758fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5cbf4a-677b-464b-9b04-e59760dd0514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e617f6d-3cc6-4960-ad36-404f3cd11e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d03678-55d8-444c-89d9-971ab3bd620d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4584841e-8d44-4304-833a-fd0c0e458876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e908a81-84fb-4de2-839c-66cb01317e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.12.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74db112-0e25-4134-95e7-00ba87c53a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe14c80d-97c2-491b-827e-a64e44ad8ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.121.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755922a7-7cc3-4088-91c8-f7d05238d00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35f1491-8ebd-4353-9f56-d6fde8038224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e8aea6-a4b6-48cf-bef1-d90615a28585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aa89da-6340-4488-bf17-ca66174974fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8536778-57d4-4b33-9930-69deef699835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2b7d4c-c54f-4220-8697-ddd4c6501dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f4d283-6ca9-40ae-a75c-1fd421945b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ff8a0a-bd63-426a-9300-a2e24c3c2848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.14.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36c6210-12c9-40ba-9387-69820014a259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c38ba2-04c2-4f63-a53b-e55f66bd0fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.144.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521450d4-61e0-404e-9301-8a5114aa3e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee9538f-79a3-4496-8bf7-06c0374df5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c8b3f4-d763-411f-98f1-02ff892ed086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b07fed-8dc5-4990-8db3-1218d9610425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b715dda9-75f1-490b-887f-9fa174b05094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.156.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881d0346-9794-4fed-8ded-1601e6312bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.157.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd375ed5-39c4-40e9-a5eb-29e7dd2dcf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae199237-f937-4077-a2c6-9405b06e24c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6384f9a6-fce1-4f0c-a9b8-fd43f6fb6601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00ceee2-68e6-4713-8c35-ab7593591182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15370566-7505-417b-8e6e-d9726c7a7e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5eded7-9674-4cbe-a754-39212dcbb943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f4e751-4306-4ab8-bafc-af18b6a9ad24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2542f106-186c-471b-808a-85187901677e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447359b1-e8da-4cfe-82c0-258b472df71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05791b4e-c47c-41da-9461-6e8166b30f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b40c991-e848-4636-8fe4-ab363a276caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbe0f50-a402-4a87-aa3d-de57b3573515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1a554a-423d-493b-aad2-6881ea2ca44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0fb5b5-2eda-44ac-8423-96d493513933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a12184-eac5-428b-9494-3e40e43e2fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f4af3-9f7b-4e31-aee5-865e873bd923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f9897e-d5bf-4c60-8e87-e11b85f966e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287ce6c7-bdae-4ee3-adfc-bc88e95e0c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7f5674-fbe7-4f91-a2eb-c9660ab111e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb185d3c-c51d-4272-b89f-708369b355e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8807c8-dedb-42f4-85dc-2fe19eb4728c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8058e8-f275-49ff-a44a-a038c2b02d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.52.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42dae2c-8c10-4d84-8803-9e534e14557d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999d928f-f003-44a4-82d7-381560cb0cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c689ee7-6593-424c-8cab-909993bf6711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394e5cf6-61a5-4504-ac7e-c8afe986b238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6535075-2229-4f09-8de8-5b54d0aecf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4628a94-0071-4067-bfd7-0ab249d4907c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0221ec2-bd13-426a-8fab-5f154acd5247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3680aca-aff7-425f-a8fc-63dd1a2799b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5b335f-9c94-4e9d-bb85-208a0976cf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c86dbc3-af0f-489f-af41-76215849adec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c811c6e-ab4d-4d25-abc9-a84848a150a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1a2a75-4fff-4d6d-ac46-f02b0ac386c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c656a9-6775-4435-8f67-ff43db88fea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb3e7d1-8b39-477d-94f6-0ae18cb3de36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee23ee7-ca71-45b4-a6f0-d6a114789dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88636e17-0d29-4d0d-8c1a-68b6fc10bebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f31fed0-9ea3-4093-ab5b-68871e40b6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35164ba8-e771-4298-9dfc-85026e248f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3a909e-8c8d-4ae0-93a8-835fc98ad06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5083fa4a-7bf3-490c-93b8-dda79969954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834d47b6-8f95-460c-9439-4cedf1cfdf73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b447be1-062d-4212-a53a-b382e88aae12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3addcc25-beb7-4352-bbc9-5a51d851ed44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80a8621-ac8d-44bc-be28-0f40e14584fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335fcf39-2759-4a90-a9f0-97c34a41d902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a3f972-a563-4a09-a3dc-ca7184a9a39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d090d706-33bf-417f-add3-a193ac2bace2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b798ba3-90bf-43e4-b742-ff8ffa6d8bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17584c4a-6cfc-474c-9d3e-7d5f14320bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff81779-199c-41aa-adee-4cf6d6998503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c13a67-e53e-44b9-855d-09cd71e0afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffa1491-1c80-4471-bb2e-eabb7f04d5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c242c2a9-1863-4cdf-b394-227fa080cbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eb569e-d618-471b-bb6a-2744745f6e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68cd3fc-0962-466a-a414-281d96e46b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68bf62d-c0df-436b-95fd-db4bbed9098b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f55d076-3fdb-4c3f-9f77-e4a6232f2d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7c9200-ad90-42cf-bcc5-d9173e42c86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d4ad6e-6b88-48e5-823f-8f966a9b8d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd9a9e5-94f3-405a-9cc1-76a87c64494e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6bfc2c-f5d6-47a6-833e-94f7d2cb10ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8248e2-95bd-42cb-b557-e95ab412a7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5253bbde-56cf-4409-8b18-97fe38c20139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0541ca1e-f808-453b-a354-699e13995f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d51f362-6757-4e28-adbc-10c6a0554f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe916d2a-dd28-496a-a5b8-deaf6bd62f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbc90dd-2f60-400c-b148-4bbc54cf350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b9cfbe-b56b-46fa-bbf5-a3576bb720ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65198ee-ae10-4cf2-9530-cbe6d0f426ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4084b9-24f0-43a5-a34c-145ec8ee7b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c682a56-7e6b-4a7a-ad73-38ef8e85dfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.178.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8875942a-f89b-4a09-9729-63fb6d60aefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d62262-405b-4e3e-aa8b-95fef0b4a6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7610f2a2-ce66-48ac-b684-e7e7d559be29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e32fde7-7695-4783-8f80-8f3ed960c177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.188.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770e088b-c930-4be4-82f2-42dc3d21f277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.189.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27053ada-382d-417b-920e-3aab669362ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e85ebad-d7c8-42f1-997c-2b7d01507017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7664aa-f850-4d8a-85f1-c1f45ca07c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7bc671-cde9-4856-8f21-7137045d10f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e225aeb-aa43-4119-bea4-abb6faf390df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.246.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183efc24-ef42-4e61-9ae3-534c9a87f46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001f8763-b0c2-4772-8c99-d411de35f5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f7e76-5359-4e48-951a-5fdfb6d56be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb6dda1-7b5f-46f1-bb26-52ce98a1156d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2badf3f2-b3dd-4fd7-9b73-ef07ef48d5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843fcbb7-9771-4266-9922-76d18e59408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3f142d-0857-4f31-bc82-f7c1fc7e5e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9407ec1f-8e30-44a6-9389-074ddf627345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66771a48-7c29-46a9-9e7a-bda8d9ccc5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262e2ea7-de84-4ba1-a44d-fe9f8dfb08bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c0aeed-7190-4470-9978-c033d7ed07d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7108d6a8-7d70-4a15-9114-1120223f0209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a603e0c9-2d89-454b-908f-9c59a94f3fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442bcd3a-ed48-4c0b-ba4f-d52dce231c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aff2e12-7c97-44dd-9be4-bf6f8fd2f45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c5c5b1-9ae1-4518-88ee-4f8a1fafec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe99feec-5a18-4445-8726-de950cc937a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6073a559-d121-4a94-8463-a31a2102ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62876db-0893-4728-9765-e8d1c6718dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4adbb70-c37c-4931-9a28-f54c889a9c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13495a11-e69a-4ae6-bb5c-4adf4229bb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.45.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7c589d-b394-49c9-ab91-58069378b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224d50fb-befc-4a9e-803a-275fcde5e5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7c0fce-da2e-49dd-a996-f9e305af1dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df57ce03-c9b1-432a-a4b8-40d44cf9a7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f404b9a1-da67-4d3d-a4be-4ddebfa0440d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d5e8e2-0d14-4d1f-bb53-9e4bf3538490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd761cf-8367-4fd7-82b0-9166aa27fa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bbb5a6-ddee-4c02-82bc-31fecafbe7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9d52b6-2b08-4330-9717-eb416737c4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b8f51-8b1c-4d4d-b1c8-2dd25c558c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f508c813-9381-448e-aaff-51a823c356f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a1b472-9553-4f77-b093-38f0bf88a980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd25acf-6ed1-43ed-88f3-cbf60f44cae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780062eb-28ae-4981-99f8-39100b9d90bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c9b4ff-8e1d-4934-82f7-87b104a153b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.75.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86aa786b-dfae-4700-a820-52f67cb9a5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba17769-6f2a-413d-9d23-1b281c7cc2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b0e152-80be-4ef6-8ab5-be5f9682126d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeb516c-cc9e-4b0c-a885-deeb3bc2333c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53d4677-7240-4542-aad3-c5d813d86205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67d2c56-f30f-4e57-b003-cc03cc0023c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e6198-d306-4cec-8c7a-06d5e5294a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cccf0b-9659-48fd-9d6d-cad048c0546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3f74b3-f954-4790-ac94-370f14bb62a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d40387-316e-4f6e-aac5-cc228b1eb847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e6079d-e8b7-4e99-97ee-99085d4eec46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbdbc81-a842-4a95-bf17-56fd5274ac0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dce61ea-8871-431a-a27c-ff9c18eb30c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2866a6d8-0137-4333-beab-54f52897425d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa87fcf-2d93-4424-aa34-2dbef4587191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa4b62b-dd29-4a87-8522-f4966d7e7206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1f384f-1702-4d58-86d2-6c65d9a8a8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.16.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9500e3a-7ba0-4bb3-bc0c-bf0d9f4a5d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf63900-45a1-46d7-bfd9-84b6acdfd21e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85f741d-fcd8-48cb-ba98-4b11291d9340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4794b82b-2fb1-4be9-8697-aeea31a21784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560bb92c-791f-4d33-9ff2-59c6ed485f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af556a6-499a-44bb-80b6-b8de2a3eddb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e75d24-99df-41d8-817e-44732abc9e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569303b0-fd95-4166-ab7b-976b2e93427a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87492550-3d91-4848-b304-3f7d675ca287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.152.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9ceb35-882b-41d1-8469-6961a0af9d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fe14d1-9492-416a-8995-3efd2d71474a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7016244-3567-4db1-80a3-c4b6a3ddfe54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.157.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bfb06c-df6c-4c64-8381-a5cf22fc9779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267dcfdf-2b3b-4561-87fd-eedca266ebb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ea1c54-6cf1-45e5-97cb-e4be02f4870a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dfa510-c160-4527-b349-b2336c269194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f02425-e00c-4c05-bdff-cf3b8d602a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7250cb-0fe7-4f8f-b916-2a4bbee76284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f3417a-282d-4839-aeb9-c38a8d0a7afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c78da2-de6a-4acc-80f4-0a6f8226085c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.174.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b815a263-2f96-4a11-b9d5-9f9d8960ad9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be5c549-0ac5-4b6d-8bd2-d0fb3be17f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e892fd-7520-40e6-ba68-0e8ee07a34d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548638d5-7c63-42b4-9bb7-e640e1c0c0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.182.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf638052-ed56-46f8-a1be-c1691f34a69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e8905f-7e8d-4c59-8aef-d912c6f430c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d1ebf2-b29c-427e-9e2b-b53ad6e95e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a45bcd1-1b6a-4bf0-b399-0ed6e5d3f3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e501a656-6b10-40cd-a670-3204a643f8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.2.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2201ee84-b93f-48fb-8d27-bec7f5eb4fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7d1d9e-9089-4d00-861b-ff8adbd4ea9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd123e7-db98-43b2-80f9-5f901b271a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1168fb0b-16cd-41de-a989-57dcce9bf8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.204.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00404deb-9cfd-4b6e-9aab-b23577d3ec82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7765e1-b550-46e8-80ab-bc5559dd2d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272a7e7b-ee4f-4b0c-aeae-1a15c06a7eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44d13de-fd4a-411e-80d8-8638be34f5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863f5ce7-6c9b-4139-b91c-c9dff54fd955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.216.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4116a480-2298-4c62-b916-49fd17521cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc196de-7b16-40f5-8be3-37c74ece4cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebff781c-9c37-49a2-a6f3-a613e4d2d2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f999cc30-70fb-4b02-a9fc-1a5aaaca22a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbae413-c6e9-4d84-a6a0-736e2adb7936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cb247d-f981-4667-8b7b-aa5a40a5b337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b245dd-19f1-41ac-be01-91c2f79d8c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.250.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5906cd6-f97b-4a5e-8186-766336ec3a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3be43c9-37d9-4478-bb2c-4055e2bb3731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.31.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6ba333-f6f1-4692-ba55-d9a0af03d9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.34.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e349dc-0c0a-4991-88f9-16d85cff900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d3cc4-26c6-42b7-8c33-95264deeb36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2411b7ae-6c9e-42f3-8da9-2a17a0fbc45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901eb31e-b7ae-458b-95a9-9608a759a841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd13d84-e476-494f-944b-16215c5ee587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a5cb33-fd21-42d9-93c6-8329ca76a3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034d24d7-c7d5-4f5e-9e4c-97a1a05a6da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66895ec-2a57-4584-8b23-75af83719e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.76.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc18941-dc73-4f6e-a3cd-ad6e453641ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedcc0e5-7fd5-4dd4-953e-1f9f638314f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.95.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe674ef4-5a34-4dd1-9810-de561d7f0b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45889612-dd60-4d0a-8fa8-2eff8e6f2a34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.55.188.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f14dcc-1c3c-48cc-bc7f-13eede7793e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5f0e6d-2c7d-4414-9285-67fac18cd1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.35.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a057f23e-d974-4758-ab56-4cd59d63e4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77311cc8-d4cd-497b-a7bb-7ffa903b22e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd855ee-1f1a-4960-9490-6eac8bf064b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e04a32-4af5-49fb-8e73-1c6acbafde91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dc46f5-47a3-43f6-89cd-5b677a09d628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b09911-e07f-4c3f-aec5-e0307551a178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b006d8-ec2a-4c42-b3b9-a1c69fcbec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedc1f9e-81cd-4cf5-8af6-7291e828f130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b042a7-0369-43b1-b3ef-0e74b96e1caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0320b1ca-b868-4309-be19-75cc64c442ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27844a74-c99f-4516-a797-a05766f3f292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16880087-3227-46bc-a776-1b186a70b784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c077a8b-7bd4-4952-940d-12c5c6dfbe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cc2395-a18f-4fbb-b9cc-bc6962872088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e19a4e-1c18-497c-a3bb-395220192553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b26e9b4-5556-47cf-8e6b-de75a070190d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed7cf74-5bdf-44c0-bfac-6490179e5c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e186df-53af-4411-9e67-6c000b4e7864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.33.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf9477a-76b4-48c8-8dcf-4b72535bfa67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d72359-0f1c-46c0-aade-442e4cdec590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc11ece-2126-4fea-a9d0-374c3752bf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86112996-05a0-439e-b699-d825625ecce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8839456-f4c2-4a79-8475-432d64fe3f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7831d680-5ef1-414e-a0b7-d890036b1b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df1ebcd-8ae8-45dc-baaa-e06ea07e4975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cad11e-297b-4f93-9b08-ee837b1a2a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c767135-b439-4105-9f3e-80309b20befe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bc7ff1-7ead-4803-a4f4-786793b5a9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6b775c-44fc-470c-b308-46b56f5bf544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd07e59-5ecf-4957-b445-bd6aa9967611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffe762d-9fad-4731-bd69-db047f6d66f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3ef48a-5cf3-4764-9d7e-4c660b2d7dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d43f57-1948-41bc-8844-7eae1b26df19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c922fb1e-cedd-4e4f-9f0b-e1c92e30f800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f8214-3f13-40c4-9dd5-6a04fd59f1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a257e6-5b79-44da-91f8-6f9d6d81bbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5311a-66f6-4c48-a375-3555aefe183a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15c1a7-8a79-45ec-81bf-9d156e50c6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad528bc-cb0c-46da-bdc7-04d3dff6f47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0317253-81f8-4849-a4a6-6da72d69d13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85cff8b-e580-4673-b397-66cc14a24a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c35a93a-8c3b-4f87-a34e-382b316c4a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.124.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2485a97-3844-4cfb-b6dc-557324cd6a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef599ead-8d44-4af4-a238-5b6ef59ba2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b45f2d-e2df-48df-83a3-e0f628c71ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c3aa9b-22d1-4b5c-a251-4c193ca30be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93f49bf-db4d-45dd-8356-ee916e4a2d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efcc321-3414-433c-960b-3c5df0dd69d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b69312-c4d6-4a6a-b470-fd2c86c76716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51eec102-7b39-4572-a177-7d11cae04b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771d867f-2fce-49b7-8430-19151dfb6b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493a10a4-3b28-4cf4-94f5-53145e96834f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642e6749-e666-4fd6-a8f2-0bbb14fb64ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cae19d-e0c3-4398-b6c3-c28d9294359b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef995dad-eee7-43a5-bd4c-f5da2f13f343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443731e4-91c8-4087-a237-c6f72d4ac631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce645e1-99f4-4343-bc70-2e0a760e0ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d7a5b0-2c38-4474-a6d5-5b80def09c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815c3855-6ac9-4c93-aade-cbc1ad281cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a909cff2-b1d8-4b40-8706-939b3f88cb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65287327-7721-41ee-8456-4469df2fccae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbd95bd-ffad-4a62-ac17-830cf04e8c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0ca1f0-471b-4751-bcdb-12dea7f842f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64c0c63-e477-42f6-a60b-b9e5ae40c11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5787671f-9973-47a4-8fd4-35b22d12f084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cac3df2-a9e5-416a-9063-30354461827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63179d3-f294-4f8b-b066-54ce898766c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf1c0a8-81e5-4333-87f4-75971bc3ce8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e7b5de-c492-4e4d-bf82-d4b48ab2cc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29df72a8-4b2b-4085-ac64-f56c4375b6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.176.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f44828f-1d3f-4498-b0a7-677fc54216d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce2c56d-faca-4dd3-abe6-10e7756ae901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa98b245-735f-4ab1-be4b-77ba7e3f4acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc72e1f-dacf-4eca-a4e6-676f1bd64bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e828a64-f6e8-4ea3-aacb-7cf249316853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71537fc8-e96c-460c-a746-e3fa87d5afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd1f900-0e24-4869-9add-01bae3fc7c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b028653-b599-4675-80bb-be72b81ae155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8beb20a-c78a-41f1-82c6-9d41b1333097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf94290c-0968-4000-9e8a-b1568098d1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5065c5e-f1e4-4259-bd44-a83d308084b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977fba7f-e818-43f8-9ca3-221628eb75c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcaf346-3c54-4d39-ab53-36109fd460b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e61af-d1e4-461b-ba8d-4fbabc603d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937a5ad8-fc6c-4d5e-b98e-8a4f76a6a1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e96971-e40d-4f96-875b-a0e2e2c6a0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1f9bff-1267-4748-a69d-fcba4dc9d635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2a70d7-42fb-4846-8af0-af6c64fa4905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.12.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4a6db8-fde4-468f-96f0-e8d06918716f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a64ed9-b207-4416-bcc1-475a9ae9b32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.18.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff1cd60-17c9-40f8-a7f3-80147414584c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1299ad28-7557-4b1c-b739-60eec0e8b241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.28.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e1a503-38fd-4f24-a735-d0e222514ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.30.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c87381-9f0d-47e2-b40d-c5262d808661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.53.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbebed93-810c-453e-9ea2-8c6a4f12511e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0030d1d4-490a-4621-b64f-553af90d5ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bc0b4b-6816-4fd7-a9e5-5747649e7a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.91.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4707f9c1-f602-4480-a73c-15dc302d0920", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.135.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e590de-a2df-44cd-b0ed-f346bb876305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dc65a4-521c-4ce9-a852-5a7d60fee7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.209.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7d59f4-9d5b-476c-8403-b2717597e1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b8ddc6-e4cb-4a34-837d-7e0761319578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2100ef02-1b2b-4662-a34d-d37c554fe135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7382b4b8-0e29-4fa1-a0d2-4c3dc251c1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47426787-5af5-45d7-a29b-2bc08d23162b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb06a75-ea9e-45a5-b84b-771ff6b3a3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b2c0f2-ab84-429c-8a5a-c278bff5e766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.67.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ebe589-9daf-49ca-8c01-f83cceeea468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e5f4a8-5439-4812-8851-f3b3cd06536b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8cbdc0-b1c9-4157-84ad-190cae35ecba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.79.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f0b0c3-a42b-4743-922f-7f3f0f32bb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.86.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fedd54-c842-4278-bcf2-4c0cc73e4b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.89.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9c23de-6b0c-474e-8bcb-1700e2b77a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.90.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53895b2d-a13a-46ad-a4ac-77401199ca78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67b6839-f2ec-4d53-813b-ae5a948fb533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f68ae2-b497-4033-8f40-1116971dfeae", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.195.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8679f4d5-564a-4675-a71d-d550f650622e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.140.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cb4b5c-b806-4b02-bc73-bbad5b6bc30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6136808-b07a-46de-8a92-224d0619e34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecc4f95-f6fc-480d-a0a7-3c621c314e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee1b643-b751-498b-8c8e-d1158e0befaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313fc7b3-5993-42d0-b86c-30e3ca8e3862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b3ab8-2468-44d3-a847-ef297fb048d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42714a0d-8779-49db-a65c-bcd5254d50ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c57c1b2-3a81-4149-9fc2-2e7071deff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f2527e-79d1-4df5-94f8-e186aaa07b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bc9313-3f2c-4ec7-a129-b628d9ea5244", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c1fae6-ac52-4ef2-b3cf-08d61dcc9bb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.178.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b67cdf8-0ac4-4d4b-a9ee-f811abe26fe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.253.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0b18bf-27dd-4a00-a64f-db2f3955e6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da88df1f-343f-4cd8-9de6-8b66e29a1459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.128.110.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a6246b-c52b-41f7-817a-9bdf102c1c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.130.237.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a6c1aa-ef0d-4c67-a078-f74b1fd17d52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a79dc33-f1bd-458c-9b6b-1764042847d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3283b9f-d4a8-4c07-b624-6252d151247e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6432e4ae-6457-49e9-9e17-82ccc8b92db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.97.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cd1e0b-12a9-4e69-8300-6adcb2ea48c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.211.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d18fb4-5450-4109-9590-4f9b5cd969af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.209.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5a501b-6d05-43d9-83d7-fa4d15819454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38717fe-df8e-4195-96f1-b93d21f6cb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d8422a-bd6b-45e5-978c-9ce849d47880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3448b41d-c745-45f3-aa39-bfbe71e44511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82f3a1c-0142-46ff-9fe2-7d7d88631c74", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.196.154.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb2fcbd-26ec-4185-a792-3a5cc87664a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8354e755-cd0b-4361-beb3-065ffa752f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7ac76f-c24e-4077-93c2-4dcbd60ae79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188bba69-7572-4ae4-a1be-2a3c3cdb3f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.123.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4cf6fd-acc9-4f59-a427-8d692a60b68c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.29.66.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb458c6f-a3ad-4f6e-86cb-5ebf7e84c3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.176.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ea8b24-7870-4256-bcaf-ce326f92263e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.36.218.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23583211-a048-492e-a35d-e8092058e207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.44.100.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98af4297-a82a-470c-8c45-a1e3f55f7dee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.53.113.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcfd57d-bb6e-4986-b298-9ac33d436e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b549b4-913b-4c0c-b9d9-f0a7a1849b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.63.101.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045ea0b7-c2b3-4c2f-bcf3-872178d8ec4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.75.224.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe6d9d4-ba38-4a6a-8886-46c7d8dfc582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.77.252.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc0b42-f4af-4fd7-acaf-ea9dcbdba275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cfb99e-01bf-4e24-a585-856ce0f8193d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.90.55.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608d57c0-b9fe-461d-a289-0cab3daf6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ad87ac-09b0-4002-9e28-26b930f7b297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.33.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159860e9-aea4-498d-80d1-3ac6ce2c6eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.53.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2312d8-3fa8-4a18-89c3-722bf3f975b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7419a3b0-3785-4205-9edf-4ff01796db53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97beaaa9-4e24-4b40-a57f-ccb0a6f3754a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c347ee-656d-4f7a-91ee-a4f156675014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdcef40-f49d-4e98-bf0f-1aeddada84a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297e0ef8-9ac5-4426-a385-b13d120ffc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df9c5a8-9592-422a-9c37-6b77f22f022c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86208c66-9933-4dfd-b966-19707db739d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618a5259-625a-409d-8e83-e1dab4966381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2aca11-bd13-4da3-a75b-691c9cdf949b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f057a5-f04f-4aaf-aeda-ac0ed2474dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716f511-18ba-47ad-b535-c6d097d8e98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.151.191.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bc5978-65ef-42f7-b9f1-9cdb7be1c9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.30.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eda7883-3460-42c4-aa74-f8acb7b5eea6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.183.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aa0899-1a14-41c0-8705-258486729147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90363e60-c661-4e3b-a9ca-8884f129ea65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.103.154.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72865630-4b80-4928-818d-d952c0666dc3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.14.227.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0029ef-b1e9-4d19-a1b7-52c79e706c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0edbe47-92a7-4c26-b4a4-879f36dc1506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c32aac-4d70-4eb6-952e-f4bf59189690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3beed9d-d37a-4cac-b8fb-46af8dee662a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.105.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bcf2a2-8cc6-4eb2-af0f-aeb754289fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.108.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f296cab1-f3f5-4ba0-b6d4-57dbd230a16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe1f622-82eb-4b14-bfe1-4f148dcee47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea0326f-4729-4e75-9c74-0f6d65b9f063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.95.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434220b3-3af5-4a34-8722-746ec9b92091", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "name": "Malicious Host", "description": "Web exploits: aws-credentials, kubernetes-secrets, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.91.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e07143e-ca49-441d-a6e9-15f5c850df25", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eec95d2a-b6a5-4446-9c69-9429f0ba7093", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "attack-pattern--5cb465f2-8138-4a10-8a3d-386189d53c0a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cedf2c2-6017-4d60-ba94-679a37030164", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "attack-pattern--fdf581cf-e394-4740-9126-8df12de94ee8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--820fd7bc-9f3c-4277-88b1-24af52e4a426", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "attack-pattern--9a840f3f-bcf8-41d4-9062-26bbed85c1d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e2169a1-7790-4d46-9363-bcbcb4545dff", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08066296-ccfc-4e2b-8356-cda54e734008", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "vulnerability--22a67071-791e-4936-942c-ca234854d76d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3251251-042c-4499-a52a-848c3f3d4173", "relationship_type": "indicates", "source_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "target_ref": "vulnerability--4b33b2f9-6677-4b2b-a841-9fda3b4cf66d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ec68d3-2877-4f6d-803f-02443b327a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1719373-c76d-4a85-80d1-6df8884b4ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.59.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c0c288-df4a-45da-adaa-20cb930d437c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8674d71-9cb1-4029-9d64-59e0a0cd70ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431e9ac5-cabc-47c8-b0f7-d74a41ad970b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7abdd3-a69a-4cd1-9b47-53b6fefbab96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.247.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239f5b37-d281-4828-afe9-13b6dd6b84c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.27.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a44e22-2531-4a5d-a13b-3d9e9be304bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.84.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0780046-e556-4149-b389-eb24ffd0b50f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.37.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef8571d-5e56-4a66-8d91-aa879d12fc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.21.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dfd803-ec7d-4121-acd2-a1de1e2d0103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d0999a-71c1-44d1-a0f8-82d6e728f3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80723781-a69a-436c-bd8a-689a2d3148f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f639a-3a68-4695-8e80-2a5edf972a0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.196.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfbc52f-66d8-47bc-918a-7d204e39d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8046d93d-2782-43a4-8bc9-f874425069c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2d02f1-276a-442a-a1b7-7c408d74dbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b22305c-8767-492f-8553-0f3dfc8d0327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36200cd1-a862-4820-9a8c-3c842469c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def754f9-df97-4967-a622-2fab3fc9c4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce421bfe-da4c-49d5-8dee-6800bd438337", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d094c400-57f0-419a-881d-fbccdbb6559a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9a5814-48ce-4c23-bcbc-64a8396935a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26a316c-0de9-4077-8e95-4ad989ce7808", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e81dfeb-92c2-48d2-934e-353b8a769cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eff965-08d1-4614-b0be-71b7d74f52ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878b9bd6-b6b4-46cf-871e-e26abafad10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2e569f-6578-4bc4-b3b2-17bc8fa6d822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b3a933-6340-47ef-b953-7e1922ae2fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cc6dc7-992e-42ac-bb54-37414bc318d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fbbe25-8163-4afc-973e-82e33f75bb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.169.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62346125-95db-4c75-a386-a04b72c2dd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a389ebe4-4d5d-409d-beda-47ab0b6bec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7c2c8a-6b92-4485-88c0-41b8496c5897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab55d44-c864-4ad7-b80f-cb4b7f311b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa736a24-3bb9-4a78-9b8e-4153779c9234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.199.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ea335a-7759-433a-8dc8-80ed93f7263c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626c6e3-3fa9-46b6-a62d-f257080a34be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923a370e-18ff-45cd-8045-4c1a821afc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2c3df9-0cd8-4d66-a4d0-e76ba0d7b305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc9c6b3-33c4-49fe-84b8-3f7389bfed7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1551e484-57bd-4e6b-a442-f93c2c36ab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106767e7-b245-4930-be02-0664b6ac0e9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.238.199.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bf5dee-394a-4b88-9b24-88947025d066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759053c2-4a5d-4adc-abed-8180c84b88d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.35.17.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c09544-0a7c-4513-a7ab-9b760d992afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.74.92.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9483e9cd-77b8-4652-a9b7-0a01bd894e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.113.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a41c6b7-dca3-4316-8bd9-f975be299bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.195.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ca4074-9708-4c6a-b2d6-09791658bc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f914ec4-5616-46d7-97e7-3cd1c027d2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.246.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa16d31a-192c-426d-b63e-28697d31adab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.134.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d955ac-b64d-44a1-8d60-079357fd5a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.156.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de267f0b-33f5-4ee6-acd4-78508ef6b1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.51.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1343ee-00cd-4bef-9499-c2c27aabaca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.226.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee567e24-7d7d-413d-ac0e-d6bcd9eb74fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.161.176.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e2f985-5973-48b7-b699-9457ea132f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.206.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b4c249-d91b-44a0-bde3-339b48c48549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.148.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d2d897-eabd-431d-84a6-7301673acd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.165.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ae3467-54d3-4067-979e-3edff0c98535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.234.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7b77bd-497f-4c8c-ad3a-c27eef60f488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.71.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42f5c1a-3dfd-4c02-bd6a-273bce78c87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f4ad51-953b-4b2b-9bf5-619efde7d04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.149.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee528a5d-43f9-489d-a39d-ed7f97ab1fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.198.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60c8b9a-a603-4a57-9ddc-2d48011dd0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.210.172.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4b7e03-0dde-4202-a286-1d3e0900a05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.141.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5bf55a-7f26-4278-af1c-678715657bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.135.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b893225-c827-4b82-b65d-7680d97373ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.237.223.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d413fa03-645c-4479-acf1-0d289cbdf1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.13.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187661b5-c144-48e4-b832-52ef06ba19b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.244.99.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2786fdb1-78a1-48f9-a69b-0ea21d0717f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.180.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc27931-a9a7-4dba-b93c-a91ca92e417a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.52.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815a1aae-25e7-48f1-95b1-e3092846c7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.81.128.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1848e6-7b0b-4a31-bbe9-d69eb1239282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.132.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b187a5-3d2d-4457-8621-859722eb993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.153.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106af879-0ea2-43fe-97e7-b9f306d5a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.159.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a34133-7c67-49e0-b72c-b92326c792b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.15.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac289ac-de66-46bc-b170-4c9d693f74dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82de1fa9-f4ab-4ce1-8ed5-4389e75618fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87233d67-8d5a-4bdb-b124-0989628e54a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e6335d-1c1d-41f1-910c-b69550ede05b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5ec365-5cd7-4eba-ae23-24ea2ec84052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce06285-9a91-4334-b90c-9fdee937d4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc02f665-935f-47cf-9f28-4a783e7ee40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af0c2bf-a3ce-4c93-a1b3-a0c8faff8ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.136.195.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d6943b-299b-4716-b37b-76320821eb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.133.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d380e880-e462-4537-b595-d8b536e41be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.107.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9828e357-8ff0-4b85-a08d-852b471ddc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.38.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9880e40a-e128-41dc-b0e6-3ebc1ca2ea77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.15.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57ed008-df2f-43b6-979c-1f645227e6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f80d03b-50cd-4886-a749-4811fb8ffd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe09e24f-e0dc-45f4-8b7e-117ed9d685b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16b25bb-49b0-44e0-8ac8-ff56770d91fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.229.253.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1463085a-4f68-4d8c-a1ad-0a289d990d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.34.42.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49d7236-3903-4ba0-b3c4-38c1dec940ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.204.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4587d0-2f2e-4e4f-bd5a-484a1b844361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.49.59.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a516ffe-a31d-47a4-8c07-41c245b7e0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.76.159.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f253eab2-25a7-4233-917a-af20eb45dcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.102.226.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46dac49-26f0-4317-8b89-a92901aa97e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.104.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95ec19a-2477-41a3-ab2a-62eb733f2dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de53e0-d369-432e-b9a4-a77a62dc8876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.83.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1353646e-efa5-4eaa-845a-5479fc4871bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.68.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f4b747-0d55-4007-ba61-1097f834b24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.177.243.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad20a97-6466-4125-9b48-bf305d4437a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.179.31.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9525a60-7e36-416e-8485-de4294ada48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.28.34.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3230f74-33b3-4745-8454-d577a0ec90de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.39.56.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6ac3f0-da19-468a-a859-6db9281d9ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.101.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5054f9ab-4e93-4f3c-a2ad-24b8aef562c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.177.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d62e53-26e1-48a7-a699-ea3357f0e418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.55.114.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46098b62-2644-44aa-9d90-78881b137091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.62.46.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4322a3a2-0612-47d8-ae44-c89e27b044c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.99.204.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e3e98a-46a8-4fe5-99f2-3371fb272856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.199.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74060373-c7a5-4c02-80a5-64d9c2a4d4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.223.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010122f0-1448-4f87-a830-fefb429cd7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.163.139.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fb97d3-c83e-44f3-9b86-6cce0ee28e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d0b7f8-946c-4d60-8cec-2eb6ef480341", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.171.24.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761f455d-dfb9-44f6-8c4e-eb61d03822aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.186.28.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbddd52-9444-4223-973a-17b4345426ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98099356-9c51-4e66-855a-49ac7196f606", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.199.224.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519ab50f-5380-432f-84ef-86d0fc4524a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.214.154.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f528c1-bf7e-415f-8a62-719917d31ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1b467a-9e91-42ad-b467-7f8860a53bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.149.15.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b38336-f6c8-44f4-aa62-3e55570b5308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.170.163.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3182b1-4234-4bec-abe1-1a88f019749c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.174.210.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89de064-8c52-4018-ad9a-f61702c0a605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.41.146.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625c7c7f-a78e-4d29-b6f0-a1e730cbb9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.115.205.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becc3a21-a87e-489a-b7e0-5d38a4b99db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9464e98f-36d0-490e-a532-c810e661202c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.30.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376463ff-a166-488d-aa97-01ed0092df4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697bdd8-9440-49eb-b661-156055faa834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9702d1-d5ed-4e10-888d-4a35721d2016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.115.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d228d3d-6499-42ef-9ec0-c7834230988d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.27.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a99912-fa77-4868-b241-0da172a96447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.90.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0832b12a-fb47-4aff-a291-9f56e7d04a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.249.157.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a382d0f0-0232-41da-a8b3-9bbf2a07e795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f2c907-9699-4c1d-8350-4a9d93918e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334723c3-5289-4c86-ac5c-0d5f32afd1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6fc27d-7575-4fd1-a52c-0f8be97f106e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8721f5-f32e-481c-99a8-4c83daa1a83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d769993e-eeea-49fc-9356-af447347bcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.110.80.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49350b3-02b0-4741-bec5-43ac36a5ecb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.176.194.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b0bb6d-e457-4ca2-befa-abd6df4dc89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.24.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880f3e2f-dcef-4d6e-bc72-8df8e8bf2894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97eb51e-d823-40e8-8c2d-27f569202ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4f4da1-bf6f-4457-9e01-84ce32b06892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca47f88-cf8b-4f39-9313-f4fe4718a121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.101.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568a353e-9e31-4a3e-9ebb-240c3c8297a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.105.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25e2952-1a92-4727-88a8-3944968dfc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.13.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35414945-748d-4910-97c8-4cf4b74e9570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bb8445-47b3-4c88-ad03-257f6d402129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.154.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a54507-cfda-4e21-8269-5545aa7644f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.190.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ba2c5-4115-4acc-9899-ac92340d6d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.23.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e67e68-bbc0-44f6-90a1-d58592305d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.24.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aacc21-6427-4901-8104-dc120b46deaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.8.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d71c15-129c-4dc2-936f-dadbaf870ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.136.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc306ef1-118c-4e09-9c93-f74469c17f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.156.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9caf68-5b5d-4fd0-b093-17eec643220e", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651bcdda-e886-48a5-8929-55b25fcb691b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.174.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6aec78-2f35-4bc7-9fc0-74b860751dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.191.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b5ffaa-39f4-4948-b509-2483d36dfbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.200.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b66093-86a4-411e-84ab-3c3568e8a185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.213.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeb9307-b230-4a3f-b0a5-86e291b28d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e8ce8c-e8df-4ca5-81f9-b451529b68ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.215.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a2019-2b23-4ac8-98c7-efa2da46991c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef73f8c-75ed-4723-81a8-dba2fdc23deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.228.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cc7fb0-1361-4376-ac62-4b10e9f5818b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.234.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee672767-a835-469b-98c0-f953da90211f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.242.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae41b726-d4d1-4d42-9425-a47005312909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.244.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84c1ccd-8807-41ba-bff0-489d4acae50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.247.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00567b1-7e72-448c-bc25-cfa408b879f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b958cebe-b5bc-481f-a5bf-4d6a43671900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd98b86-750a-4e46-a51b-eb49ededa621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf63dda-6387-4bae-94eb-f23ca7aff377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abe2f6a-1122-49b5-b4c1-d187ffd3cbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1452cad0-3bb8-45d9-8eff-19bf572bb0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11764d10-dc84-40e5-a32e-738f4a767533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffc4be2-0b22-4059-9469-6c8ba1595085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e164e8b-4973-4be4-9e10-27827100811f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640c4195-bf3a-4510-be8d-977e98eeff5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afc5c62-6594-41b3-8dc4-117775d005fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1023d5b-a874-4962-abee-74600f01607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cae419-67e2-4a4c-b3d3-e1e27b5def53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbd1c27-7b4f-4b32-8f5e-5467bc613cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a7fa81-159f-4f1e-9bdc-d58cd6e172c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a82201-3b29-4b32-8190-6622640a1a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d222ba8d-0d7f-40e7-aaa4-618f985c5464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4088d3d4-f112-4272-96b4-37b2724b7948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e616bd1d-e8bb-4c06-b47c-51a4c38e6b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdfa70c-1bd6-4a71-af28-57228bbea595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9451db74-f8d2-4711-80b7-c7849858d3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82899685-6942-4d22-b84c-4d7acdc39461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807b572b-a3b9-4300-abf1-5447ca57f100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c303fe0d-2017-4421-9958-c7b61154677a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc427d3-d7ea-4c41-b32f-1dcac679908f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14244fb-b9e6-47ff-ab85-548732ee52ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f987d759-13ad-442f-8dd2-0beba6decb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe6b43b-f410-4b29-8438-56deb884118b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1c5ad6-2da6-43a0-b14f-7447c99c4fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5738abf3-3465-47c9-90b7-b69e4d2c9105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a313444b-a21b-4233-a11b-d6466735a57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ca8102-cced-42b7-a6e5-2ff43d1290e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674f6288-973c-4689-b0f2-b8b0c867279e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038197a-e5b5-4652-8937-74bc3c22a3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1183fd36-876a-45d8-8a5f-409ac3bc6f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c10da7-691f-4f47-a248-a2b294cb7768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2878d41a-0b56-488b-9a2e-0583779c453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58ede1c-474c-4188-ab62-e661e30e2d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a1726d-ef02-4da3-ba06-07a8891d53b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c109677-248d-4c98-9358-f0f311fb55fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818ccaa6-f349-4c25-add1-cbe414624b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fd36df-c4d3-423d-ba84-526b76eb16ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0d13f5-c494-4cc5-b0f6-397775e6f42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d97e08-dfe8-41c3-bea6-96baf9e400b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5a4974-9322-4001-b1ff-691187da3484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b00f950-862b-4f62-94cc-5eb1e38c6389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afee2ac-5f2b-4fd4-8dda-d8b784b83ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f7ef3e-02b1-44df-8d73-4be7fdc55b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedfcb6f-0a91-430a-855e-fb38a7b8e782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5119c3-0ee4-404e-b854-f8b0085c15ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344df48a-41a9-4ba2-a752-187dab3afa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd98b573-e55f-41d1-89f5-235bd555912e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6ff8ae-5a83-4565-a5df-6375da025ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c0fdb7-f43c-4dc9-b9d1-5e19bfa982cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce624cb-5d1f-4496-819b-2d78e7576201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88beb675-5c6d-40a9-9522-9bafc7b4d14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b08c32b-5ba6-4f80-aa83-153397c876e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c83a79-c512-4f9e-94b4-e6337a0deba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b63c7bb-b54b-4033-a426-c0aac22a6d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b3fe41-994d-4576-8115-c2c483ce54b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999b6125-c520-4ffa-b630-20ecdd83ec33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97892c-7f67-4485-b6a8-9e2bc02f136c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480babc4-9fa8-4085-894c-8241407283f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4766faaa-c06f-409d-a7b0-64010c2a5c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91413ce-e858-4a61-ad84-ff11f8c663c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984fed7f-9f76-4986-9b57-bd02a1652da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367ebeb4-128c-4977-9d47-83d9a8afec65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec56ecbb-f44c-408b-873d-ea7e33cd408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ea7e94-0ae9-4f81-ad7d-c681325ea83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896ae882-6146-49de-9c30-f13b503d1146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b02877-d29d-42ed-8752-31e962e66cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fd96a9-eea0-44ad-8058-1f6756a773bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515edd3b-8bda-44dc-9d58-ecf67bfa465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02dbc2b-c209-4172-8130-9f328de6d151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baabc483-f79f-4937-a3d8-3a18c7746b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcb131e-a59f-4e2a-bcbf-71833463a538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5661429-1579-450a-9839-fb0376555481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7453fb-0902-4000-ac2d-c0bf1ec376ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e807962-a8fc-41e1-8e96-19b4dc64c496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d00e1f-bf1c-448c-870f-8d81efabf5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f986ff-d6f7-4988-ac34-3b880c77406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6488c95c-292b-44f9-a5c7-0ae0989daff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2f5a68-a082-4eab-bec0-09dd2393cbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7f9e2-cd56-4724-93d7-8d8f952657ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3a3078-acea-4775-9d68-793464db061f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a484a3-6b32-43d0-9d08-4c5924a2bf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21985ee0-f757-4b3e-b974-03371f480980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e41c25-452e-4818-92df-9d35e9f7e27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f7bc6e-be31-419d-a419-38d5e1cb308d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02522c20-41de-4d47-bc2c-4c59f219e1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba5ce5b-3adb-4ac9-913e-663bd782a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e3f740-7ae2-47d5-a119-435bba9c5362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247b50d2-32f3-40cb-b26c-359ee9a85062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032aabef-22d3-4dd1-9146-4dc6c133db7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a363a08b-6863-4e7d-94b9-081ddb7b9327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b63bcb-3ec2-4f5c-a804-ae618d50beda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac05bf9-a393-405b-9d36-ea5333bb00b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d7ce5-b88b-445a-bdda-1ed3bfc51a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05659b57-3fe6-4c82-a010-8f145f7a7b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f42640-013b-4a57-96bb-1c1a68edadb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe86116b-b2da-4fd5-b683-697fc62bd1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e315ccc9-3e4f-450f-958f-0a3b768b6ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa271aac-11f9-49d5-9612-98978cea3664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4c1a1c-aac1-4d65-99a0-8681b6e037b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eac847e-959d-4830-8172-6ce2c93bd88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997e70cc-0eaf-44d5-bbd9-6cc87a22c70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7985dca0-3b81-4405-b585-11a2236c9fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7872eb55-4b3b-41f4-8ee5-17ddfacd358e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5115882-1e28-4d0b-89f0-fb72a6cd020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43227e58-0871-437c-8692-63d4a0c75df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2681dd-f981-478b-94bb-e8d120d3493a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ddc8cf-2846-4039-ba31-04351e85e716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a9161b-dacf-4c08-9563-69d0247a1a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f8b861-7de2-4d65-a144-098809f57496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a6bd88-5841-41d4-941a-4fade0a6a390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b659812-52b2-463d-8113-70f8303f4415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c648a9-1166-40dc-acc1-6eb730e3a938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2681e1-a53a-429a-b0d5-0e91592f5c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54baf9fd-a4c6-4f11-87a2-835c60f16c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baced607-a6c1-4e4a-a7a6-edf6f7509d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb793f95-1dd1-406a-ad08-bc02a43074bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b36a037-2237-4449-998d-4098a28a8e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb46f1-693a-45d9-9abd-3bd2221cb680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b8037-42b3-41ad-9198-2e6b72e05b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb2e8c-bb52-4215-aa35-e1bcd8a01011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273bf3ca-c9a1-4223-ac45-b0f1affdefec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6917a8ca-cd9b-4378-97c4-865e3cc9f982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5d5f55-b384-4ac6-890b-0afe8858643a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab3298c-37ca-45ec-a1dc-a41801678398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c1a054-2394-4d38-a91c-33a94f4d5e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8e76f1-2d15-44a4-b32d-ace624208370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1f4113-01e0-439b-9d0b-f294a85ce0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6510ca1-029e-447f-b9ea-3619ae4d5c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3728a933-0aa3-4057-98b3-1dc8ba5c9c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07da4655-1c38-400f-99ba-f5e648c1f898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ebb737-e0cc-4ee9-92c0-e2f79970ef91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6c4be4-24c8-4cfb-9b8c-974205c7349c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d33690-0d44-4107-b700-b00fff01b7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b9e2e-a291-4121-a867-2ff007080280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb9437b-ec7c-41d1-9f55-3763432e91cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e48777-fbc5-4b2b-ab10-4622447b18db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d379259-ffe9-4207-bd18-b6830a0fbc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c4c6bf-6062-4a9e-92df-70bc560dd4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df49e522-a040-4b8d-ba57-0361025c2f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6c659b-091a-4436-b463-47e546cf3e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f932c19-e6e4-40d6-9118-f8b561db9853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316bbb46-ddf6-4427-97ad-732a95b0123f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cec50c5-3993-49b3-9ede-99e50ee02bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6425407d-7d3b-4db0-94a0-2a2930f6bd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51278a69-2445-43bd-a453-52ae9a792c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fb6b6d-6457-4943-8087-a1ad55a8b1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ec01f3-e371-4a2a-a0b0-b1d8b2861b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2963c21b-cd62-41c2-b60a-2e2362000de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f39166e-f279-4e27-8fa1-7a55d6043eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d327807-346e-4944-ad8f-39b8043677cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27749999-0a3e-4116-afc3-c9623aafdbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f849a49-fbf6-4acc-8169-190ee9cd4abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fc3e2f-f4ba-415e-9950-261fe7236e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aea81c-6473-4492-9a91-b9e2cd9cd14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8b0f82-ca2c-4a5b-9f3c-23037d820749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d5bcd-9c12-4878-a754-36accd2b12f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ccd7bb-10a7-4543-8103-eeac70e50999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffb1124-94fd-413f-8945-ae73dd0296ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74f70e1-43ee-440c-9587-e6595e9046d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c5d7e7-d161-4100-81e9-df7dcb5d5fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebed9302-7dfe-43f1-9add-bdc2a897ba11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aaa2da-2385-476c-b514-fa8f25c2a215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fd3804-e2f1-47b9-b4e2-e85e72a17766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded55e20-3d6d-40f5-83bc-fd2fea851ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901edcda-4784-4a8c-88c0-862aab0a2a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c08a0e-da1e-48f8-950d-906d2fa2ce3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f640373f-3a12-4933-ad49-707fbce873a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a15ad-eb66-4fc1-bb55-83145ed6ecd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b67a47-2476-4dcb-8b31-c0de249eedd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7332e2ac-c656-48ab-bcb8-7a4e5b315dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f9abbc-6580-4b0b-b78b-a416362047e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19c2256-dd98-42de-b3e9-5240ab6458d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2e9408-8fd3-4716-8682-cc06b07e9426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc891715-b152-44f4-be45-e6a7077126f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2663c4d-9a20-4f1c-80db-e0b8c474f163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3002b54-83c0-4a5e-a443-1147952f7450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15792c4c-7f74-498e-81c8-77732a5e42b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea347a2-a948-4b5a-9f1d-cc5d679e4101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8775497-cd03-4503-8cdd-2256630563ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2af01e-6ba4-4463-822e-f49a60d704f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af04d87-db8c-4206-9ea8-b0d66161d9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d650f5-2468-4af8-8885-3dde36255e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d57c567-2dba-46dd-9398-13e05b466352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323d3365-3bcc-4a3b-be89-2db2b1b7ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b92085-0b1c-4484-9948-7428b4a6e222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9b9163-ad00-4f54-9c80-cc9f902b33ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90486013-ad9d-4971-bcc3-42731f6687f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca4cbd5-3260-43b4-b77b-f503121c4810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07031af0-972f-4381-bc6f-038f295983ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67326d02-455a-4469-9c0e-04daef7c22fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdefdaac-9bf3-41e6-8de3-5e87ec52ba6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e874ac0-6506-4213-b9e5-44973c4ce616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4016785b-e4fa-4710-a0c5-591df8306ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3fa2d8-86cd-40de-a632-29df18823742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbc5796-882c-41ba-b311-eef5377203c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1074bc-6e4a-47df-b7c7-fcdbaafb7d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e00643-cf43-43b5-ba27-63584b48355f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cf585d-bea1-46fc-8ecc-dcd232157f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a642e85-3bfb-4d76-870f-8f07580e1759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d055e1a0-b279-4e09-bb82-780baa915e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9301034-bc75-4e64-a93f-d5005d442c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f08440-4ef7-477b-9421-294368063419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4a6a1a-46c9-441a-baab-e4ae71633a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e965004-7b99-47eb-95d9-8257118394e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e637e7-8d73-4505-b536-70814dd15a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a752890f-4a00-4aa5-b96a-212220495685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab6ab14-4714-4497-8f4d-840bba99db75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a5e24b-9751-431f-8679-cede0c89762f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c319ea5-40c9-4193-8804-5f2cbb245598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c72a1c-7adc-46ba-8fa8-2fbb176b37f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f84230-a8e3-421f-8de3-435229370d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56c18e1-0077-4428-bc82-7cf002231dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740204d2-0e0a-4848-a018-10c559557ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648de8d4-9abe-4765-b214-774b717b0bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6c66ce-1322-47c9-ac73-6d03f42e8ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53eddd1-33c1-4cd2-9029-abb294c3ed21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14291b4a-3099-427a-919c-cf12e1165cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f3fc79-176e-417e-a2a1-9e132e1ba6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85379650-c4ae-41af-a155-130768afd2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245f3d3b-94f5-4bfe-a3f8-12b788a79c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84de8daa-0e9c-4908-85ca-a37fa4b79208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e84828d-366b-4d90-9c1a-ab2c0f5f0ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e58e6b-992d-439d-b71a-242ae8cec459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c32144e-acfd-49e4-b134-8bb0c32f2e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdcb0f1-e0f3-4ce0-b75c-81fa7c2359cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84880829-36b3-4c46-a3e7-267571fff229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001b46df-845d-4f63-aab3-f510cc1c3857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd05f933-9ebe-4416-b6f6-7023eefdd6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ff43f9-57a3-4e94-9658-12e0a6576e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc23ce14-a1eb-4082-b273-29432a8d2fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cae70f1-d23f-4b67-a7b1-e2a8ae42d89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2744f9dd-49af-4aea-aab3-c49992d913ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758e2d2b-c75d-4f7e-afb6-f1937ce870a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3ddc82-f95f-4598-a211-d2f15120f0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70053c14-2784-4165-803f-8ac59dfaebf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ef42a3-bb85-47ca-ba2c-dd544c08f8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747a16a9-a6a1-477c-b233-cd6712dcf4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6ee4bf-7461-46ff-84c6-05f08ebae22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3f8b34-3873-4283-83b3-109dc2caa5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6a28c6-f4fa-47f7-bd7f-8b17401209e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f53004-afb6-4e9e-8160-e1c67f420bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd10ab9f-6ec5-40b1-8680-f222eaafdb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d41122c-8ecd-47d7-9c44-68ef3e1cd701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9904c733-b15d-4244-ae38-8006b8504d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0745ed51-b8d3-46e7-ade3-aa87acc7d5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8987cbb-da0b-4e52-a1f2-f2bc41debf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d57b19-5530-48be-91e2-6dc675f0dfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d802a1-7fd0-48bd-a815-f019ee10cc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39077bfe-41c6-4641-a76f-be396a89a3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae72d79c-c121-449d-8792-2a0f99e0eccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6a5588-c0c8-4bd8-9fd8-e94e86b8de4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c040ffe-1ea0-4c2b-b539-2a460afbbf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe265a0-fc68-4efc-abf0-6f4291729f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e602e1a9-a0b6-4b93-89ca-ecf7124387b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da92fda6-6e99-436a-9a41-94d57c366f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d9f8b9-9eb9-4067-85f3-513b2a3074a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e6fea6-5abc-4adc-b60e-07676d3709e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5f1dd5-6818-4361-b6b2-54050b279ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e200392a-84f8-47cd-98e3-072486271393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc455b66-2f8e-4fec-8ef9-973a69b1974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf61d31-1131-4802-970b-eff4daa3f01d", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78a3fad-b171-4d85-b01e-806c9a9703e0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cec6054-b17d-49e3-b87d-a54bd64597d6", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3f531e-c808-41a7-97fb-cbdbed0b23d9", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46a4970-94b9-45f2-86fb-f1ccde8368ac", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cab270f-0875-414e-9b83-c40edd458f6b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3abc7d1-a16f-49e2-a7b6-a259a5730a8b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2f6b64-7b18-4e0c-bbee-6d724bef07a1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c94de1d-e2fc-4aad-9604-9deac85d01c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b24d3-451c-4f8a-b341-53649419732f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91a4915-45b9-46c3-9436-ea4bf8e83205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d697b26-07f8-489f-93fc-7f16b9a692a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c590c8f-eccc-4858-9fc8-f39666e924e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65413fc3-04b1-4497-8617-083696de5226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a7151c-8494-4528-955c-571170cd930b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83484e4d-2d55-4893-83a8-40fe1d78382c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0ae175-98d5-4bae-b8da-97978e4d1df2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2a6edb-f68e-4f4a-8329-c5b4def19c12", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24a2d11-4b27-49ad-b3d6-328a3b41ee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.92.91.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9cd03d-e277-40a3-a755-57a57a8de288", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.254.95.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efab505e-2e85-484d-9c3e-b0ea3c2bb797", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b48729-91d4-49ff-90ab-9c868102cbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77886034-ea9d-4fb5-a814-24add1bc4751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b058a3e-2a70-42e9-87ab-70a3b025770e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce70c1a0-4fa3-48c0-a197-f8b35832fa2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7662ec37-0c51-4e6c-84ec-bfa3f38fc40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4c8913-b1a9-4f17-824a-136f54cdae25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25331318-aac5-4191-9fc8-c03c4e228ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f6531d-1eaa-48b3-a4d3-7c63301e939b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928e98aa-45d9-4b44-9cb2-1c2621c75a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5117ab66-d3e3-4f55-917a-f223f3af83ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f792f31-7e70-4a0b-9170-6904841ccff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18bb253-54f9-4232-bb37-18276e331872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2a77a1-56c6-4ebf-90c2-eda81cd2204d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86994ecc-25f5-4b6e-bc2b-3a0bf167b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b612f1c-39f8-4250-bfbd-a77a1203a4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e7ab66-e0b0-4f74-b14e-1c8e6909e31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21b1bd9-1962-451f-b5b7-bc577e523424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a1a205-ec25-42bd-bd62-3bc1d4f4bd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f80a1-8cb5-41c4-8d9f-809981d22714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bc58a2-f31e-43de-b510-e4e09753439e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623bd2f1-baaa-4498-a319-fcb77972a7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc612ca6-cf6c-409a-a215-8233a6d55a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdef3f5-7f8b-4064-bd71-c539e1d445d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b2f1b8-373e-4b49-9856-47fbf59848f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c61e5f-6c78-4154-835a-042dba00d41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d2f0df-03e9-42fc-b6aa-90538d7d7c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6033b0-f655-478f-9263-46e97cb353dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f013d5e-be6f-4095-a43f-67506a90b26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a6ec66-eb06-4952-bdbd-f1e2457e9d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508db384-5b0d-491d-9725-3ce6ac9dbc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c244e44-8c13-423c-8193-577270e73fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87bd38f-ae0a-40ec-afc4-ece293446659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5191a578-c679-4d48-a3ec-2c07878afb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b4ad46-2187-4b9e-8c46-aaef34c3ff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b524fadd-73ac-4899-997f-ea0a65a05053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55db2237-5b0c-49f5-b12e-4b7f3d9fc1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d45b0e6-6b06-4ada-8707-97c074e684b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bd1b99-a569-48f2-b541-93c9fd0548d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10702f3e-02de-49eb-9707-09ee02bd7589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c950c82-70dd-4d57-8e1f-fae7f7939bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d397775-a83d-4f46-96e2-d977c795fc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa10856d-b96d-4b1c-9154-8a0939c876e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b8297-1bcc-4ab2-be7f-0f2ebb7ee04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c340c384-9e95-4013-b711-03850ae67320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6d7ba1-1d37-464d-8aec-e560c8f12a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c77fd-335e-44da-a229-8e2e71f4a00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be52a9df-1234-419f-91d2-b34f23f0d232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbc303b-b7b6-4bb2-995a-8586af85424e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c67eab-9eb3-4113-86b5-7e9075338167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13790735-b6c4-4aad-a6fa-8919af20c842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306ef391-43c2-461e-88f2-d7a8338a711a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a92de5a-3669-473b-ad31-36a2d5dd2992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea09fc3d-94b2-4064-b36c-d38f208f2e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ea113a-bfa7-4ca0-b7df-0f1e93758e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0950c05-5bf1-48ce-83e8-1ecd0d5b60fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2d974f-af9b-4100-b11f-015233c128b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b11b7c-3faa-4876-a7a3-52e904066261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8258f05-a0f3-4f9d-b9e2-23a40d7b9d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aadf2e-b36d-469f-99a5-04f169196f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c5af95-76b3-438e-8780-5ee7520df6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8843fcb6-5c43-4ff7-b27f-41998e327b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a54b0df-cf8a-4c98-bab4-3403776c5202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01415de2-367b-4a6b-8c4a-ba74892cd16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a492247-e157-4438-80f9-9f23e461f4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ead3378-1122-4e37-b4ba-3d3e868145b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e33f8b-151f-4bed-815d-ed47ca47c768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1558fc15-9eb5-4c88-86b0-f2ce08c4c0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23159ae-e846-4c9e-b38d-a8b3ac7f4a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53507ace-cc72-455b-a0d2-4ec0933eaec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0cc0e5-d18a-4e8e-a6da-79f3a3476edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc19b1c9-c9f8-4f66-ad4d-4c01e270cf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97355313-44f5-4236-afc9-d0bdc7f78a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3bb4c3-bf3a-4d67-a520-f3e664629eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49c4a4c-748a-480e-bd71-07487323ecac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ff4a5f-7d95-409e-8e4e-1ac94c742b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b71227-6412-4375-996b-1842b94483b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ff7f98-4998-464d-b2f5-2f154595bb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814b46e0-7be2-4c63-af9a-f8fd146ad20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854db7d3-d5c3-4567-b1b6-084dfedb1f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108a2104-d2c0-4e4b-b27b-3a3e28c81da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140642e3-759d-4ee4-b71f-8bc9bb255e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e003d514-5d90-4dee-b7a9-a25743c210ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c805714-a570-4269-a9a5-7b7e7f1e3eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194e72b4-29cd-4e3d-9a3f-5ca4d4063e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f76584-b702-4119-b732-dd1fe491ab94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0b61a3-5da7-457d-94ed-4424857a231c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0272aa9b-5ba8-4df8-bab9-bbf32cacb9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e630c2ff-78a3-4348-ad99-e097fc110eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1fae8f-abe4-4d0d-a521-84afd85d10d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9ac626-9a1d-4aa2-90a1-fdabce87a77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04ee178-63aa-4fb6-945c-44f79fe8ea79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f6c321-6abb-4bd4-a2b5-33fee26126eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1f9dd4-ee4b-4561-972f-38593f2cc08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29568d61-b939-4db4-896e-957715d3a635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e2f81c-2e4a-482f-9697-c984e387de64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dcc351-afff-46b7-9232-d53d3112cbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad85a1c1-07d2-40d6-aec0-b4282d5ca123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4358b626-c569-4a69-b1ce-c34e0a4b14a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b090d520-7f39-4e3d-b385-f6089ef8359e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bf863d-b803-410d-8b81-545e9771356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5aae64-f710-4286-9c72-7d1832ec8baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da0556b-558c-4de8-bf07-a3b964a9df55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f286ad1d-2a72-433e-a4e7-910f48bfa927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c599a40-3f93-4b3a-a859-50af6d0ccef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb37739-ecf5-4d9f-88e3-aedd7a721938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4146e315-a718-4dc3-9b9a-a7878bfc3814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237ed22f-0e2a-43ff-87fb-ba33207bb749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25fe6db-6990-45a0-bf53-bf7ec6a89585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fcf99b-219f-4789-8682-90a4fb9599d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85d44db-382a-4b08-9353-df77492176a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529771ab-135f-43ec-885a-c555200ca764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3bf129-47b0-4f7e-8e09-b12904645d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e95f71-ff1a-4e29-a6fa-108493c44c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270db484-cd59-4b49-b8b3-af0a11e73b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5982d421-3cf3-4678-bbd4-6ace8dcbc3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba39d175-b3a6-495f-9c08-d0972ac22188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93156b55-a098-4420-8c3a-c57eba370a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71d976c-677f-4228-bdb0-f3832352ee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacf21b0-f139-4e2e-9a4c-15d1f1948cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f2d80-8305-4f5a-a2b9-025c121195a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1192171c-64e7-4ede-b338-f51eedec3c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef1629f-12e6-4ab3-b4fa-cc8fdb3fb680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe1cf77-5682-417e-af5b-e513694e8a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cee0dc-8bc2-4d83-8a44-8ef3485b4954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b3c410-ff2d-4d7f-96ca-8448d210c620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c41e54f-3fe0-4175-a6a3-c9ea1860e14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9921359-787c-4660-b208-98b3bc2c1740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10213b25-0d51-40bc-876b-eefe895bd62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb2d752-58c9-405d-a07b-26f414a8e372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d37581-1acf-4085-96bc-93b48b9aa9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963e09a2-8d16-4f9f-8cb8-b4a7d3e30d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4365f7ba-ab0e-4947-b6fc-1732524aa256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c736f8-443c-45f0-a98f-4d8dc28423d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2c0416-79f5-48d4-9d03-1d2b11eb0b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623eb334-ac03-411a-9dce-4469df5ad91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e8fa6f-2461-4953-9a14-5bb55fa566b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f098a3-d746-43a8-872d-373f99f376c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3140cb-f333-4383-8bef-68121d29130b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621148e2-b6b7-42cb-bff0-f8f3038856d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbf2957-c05a-4a4e-8bd8-e5923c99b296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d797bf30-fed8-4274-8ac7-9b9e39833ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae1e68c-8f1c-4513-ba8d-720eed4dce06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d9ee22-8610-4782-95cc-7bb4cfd5b020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df97cbe6-cfb8-4254-8b10-c0a65ccb4244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6933c65-cbb5-4984-ad2d-a994411fbffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9543935-d3b4-48c1-8194-4db1c6eb6b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e804fd-32e2-49ef-8c93-49a63bd41ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2363aa5-81d2-4cab-b80c-bcb55cd1745b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebd9667-a088-4c54-a716-0ecc281ce2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b76a36-c088-4721-a1d3-008ca0580f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2199b404-0975-4aee-a99d-950ea51a9d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a97629-5fa7-42b9-818c-fbbf22fc4f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482abb15-b49e-4520-b4b0-e7a4b574a6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a775bfb-0be7-4ecc-9d2d-3fad0d6e915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a926a9-533a-4c85-ad69-186d96c84fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5a4596-3bdd-4135-a48a-4905fc2de9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba67c38-9970-4d52-8ae9-4fb572c17c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93bed42-f2c7-4a25-b9a8-5fc6fd353eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484be653-8e7a-42d3-9c7f-500907747bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcfdf2c-eeff-4624-8256-24e05c000905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd576c4-83d3-437b-93e8-6265dca6261e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b10545-882a-4d20-887b-151d87b8f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c52fd3c-7080-4847-898c-b04678d7bac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e12520-8cbc-40a7-88ae-7abec6b414e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76d71e8-008f-448b-8c24-29bc66456849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a9269b-9cd7-40fe-8da6-52e7474e0406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430646d0-33e6-403e-8407-709e558d04f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbef632b-c0cc-4d57-8724-9744921fc89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f1c429-0130-4417-9aea-b5382094648f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9642830-c201-4b45-b38d-4fb5a758ef8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3b476d-16e3-4e0b-a32f-a76dd7c15336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ea33f-428d-486e-aaab-9cd863f14249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cba34ee-ebe0-4cae-bc80-b98b2d758dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255151f9-807e-44ca-a230-fc405e02e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365cc3c6-143c-45fe-8596-620e69d582cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150ef49b-bc7a-426c-942d-5e2114189fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eabaefa-0f0f-40c2-8638-a4e3c24500c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a43db4-cc90-4b40-9e80-fe7dbb28fc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97609ef1-766b-407b-8b5a-16e5ff3d8c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39af141-6625-4446-ae85-b0604fc38206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3418508-e88f-405c-b55c-013cef72cac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab6ace0-4882-43b9-8079-a9682d19d4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996dbb51-1f90-4a06-8eab-f3e3a03f6852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f3ac3d-86fc-41a0-aa06-fa291ffe9a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5c4b62-a9dc-475a-b93e-63aa755a9c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bb9a88-f5c1-47d7-87d7-984dc44ea20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dd38ea-7bb2-4790-bc01-e671b9b589ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d795e2b0-2dcf-422b-93f4-58b773df0351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba769d2-95b4-43c5-8be3-98e43855063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e7e79e-df58-4212-8182-51c4bdb74bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe26159-d8f3-4d7a-8eda-d947f232a4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc01d40b-4821-4da5-a17d-26b82038264e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952b9472-1c69-4e38-94ca-4e7021db0b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea285d4d-33ea-45e2-a024-db79ecaf17b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eea5a55-f811-4862-a7b0-a4651e1a617d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb5208b-788d-453f-ba5e-7c80ff2eb45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b75a11-f47f-4d43-b7c3-fc67f9f19a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe0ef9f-df11-4dbd-8b36-addd749aad51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444b3fc1-8922-4d39-a531-3e7a26e71394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941f8b15-08fc-40c4-812f-6f3fdb25c27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93cdef2-ef6f-41e2-bdea-05b1726568e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857abc16-91be-4acd-b996-e42b10a1259c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39660155-1be2-4cf1-be0a-068c0f95db71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f0684c-522b-4a57-93ff-e6f37843a10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8f9b3f-bef2-402f-9757-62c008d280d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acbdcca-99fa-4abf-9132-bf0d3b104c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebd0dd8-b26b-413e-a5c9-c23a18bf0408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac7cda2-45e5-49bd-bd4c-c7cc345a500b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd07d2a-be77-4109-a499-09319708bd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe47933-9099-4f34-bd27-985d9080cb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03144dc5-8f06-4c1e-8d90-459d9b48682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3703a2-1429-4497-9722-ea13ec6d8cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58aea122-2aec-4cf5-b0da-4ade43f53f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c5dd7f-5dd3-47dc-9282-731ef2815b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb07b8ec-7ecf-4c2d-9f92-d3f6c8c29c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307774a3-563b-4b12-94fc-f4c08bb20e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85832ac8-7ef4-4a70-a81e-b982bc44a8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba1859f-2a63-43f2-b32d-1e3a74728e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7177a602-0e37-4445-a924-61ca9aa2a100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7d058d-fa4c-4bf9-9e83-edc616280a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9863aca-245a-4981-9d99-1041ad2ff0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea39d6-ecb8-465f-98e4-d04d99560e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafd1815-4adc-4e3e-a158-cdea0f44d6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de62ba4f-0fd3-462e-8046-ff2be061433a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb446dc-a5d7-49c6-943a-91bae45000ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6771788-8a4b-4d4e-9fc8-8d4166e3199a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35a6022-cea2-4098-a9c9-29662f54c4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71012c73-db21-4300-bdbf-9183fdfafa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2c5f4e-6181-4ee3-a4e9-3fe2681ceec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8b5223-0dc8-47db-be56-369e2213f36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665946ea-bb25-48af-8f66-326967c2ceb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f77d49-5064-4654-9355-04c74b78a3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10edf0be-863d-49f0-8b92-3af26d341927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a366c62-cca1-4d4a-ab4b-7846f0f6a723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0530e8-c159-4d45-8cef-c025b06d2c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9034c5-0678-44c2-87ad-03a37bc4e89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae6ae28-3ee2-43d1-aa73-c541b50b2558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba376c6-2955-4719-a0d0-fab62d118cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9308841a-6ece-4097-88a2-a194968b1af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf80335d-1a86-46a1-8056-63d9f8a15710", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57b3a98-3136-4acb-9483-ef2a430105a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd958097-a605-41d5-9a14-48a75e3a90bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15f55f0-be83-435f-a7ea-a105f3b71518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c507736-fe66-4dea-a3dc-bd0ff047227c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6e63df-e725-4555-a68b-38c1ca41dba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4078dfa4-e0c6-4e34-abd5-f3d82f9f18cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe55c0-620d-4efe-ae15-15fc6bfc73d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3747885d-b7d6-4eb0-b261-341edd7323f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e42804-a4ca-459a-92d0-65ae546dd124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec31b90-3d3a-4b47-8538-99219f03a5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdb86d4-51d1-4c8c-a780-e498a392bfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aff060-0f3a-4b3c-93e0-ce2304682610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48e66ad-4f42-4bf6-bc01-0ddf7fac76e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c1a9ee-51a6-4a67-83eb-d44edc025868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc20b2e0-7c00-429b-9525-3c62d658cb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0942f4e-be32-45c5-95e6-32be24a32b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f561899d-2aa8-43ea-b7f1-9d76e78a4abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5540115e-b69a-4f90-8d7c-0be67d08017f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf238be-e423-4dff-83b2-08ba5ff6aeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9753588d-32f4-4bbb-9f89-15c9517b9762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354e286a-1b6f-4853-b491-123a14011e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8161d36-5163-4056-93bf-841e6ce8d88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb702fb-ef8b-485f-8cf4-262329298442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52cd9c1-51e3-4afb-8587-84d2c41db17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830f8dcc-d4bd-49c0-814e-65965eebc16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e68842-8d33-4734-8dea-71233b1aa374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20339c51-e827-44b8-98ee-f6f5671fb7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadb6129-86a9-48e7-8762-745fef111567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3538519b-4759-48bb-91e3-78754024f479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2152b4-c259-4ee4-9967-bce22c3a57b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ff014e-7b8f-441c-82b1-82763c627324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0967db6c-e4c2-4333-87e8-dcdefb42c83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656816ab-facb-44d3-a05b-1b804e906f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d3be63-90b3-48fa-8b3c-a3f71d2d9ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb908e5-77fd-4e51-9946-e607549c8d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedf3bf2-b5cf-438f-8af1-559231bded9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee9f98b-a293-4dbb-afb5-ea65e98d42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9a218f-4869-47db-8b22-b7eb16503fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e4849a-cad2-4ad5-9cb9-4e027e775e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f1155e-042a-4d81-9ce0-c1b389436e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb10f1a-3bdd-4e2e-aaa2-5f583abaf38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c73e690-414a-41d7-bfb0-7ce9ff667484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c781a9-915b-45a2-b2fe-eaabb5b5f1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5f04d6-b92c-4481-9121-f6a82b281f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f914d1-598a-42da-97e4-7b03f0e3e8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61487f8-eb92-4cf9-89c9-db7ae81cff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639f7e88-e825-4773-aa64-759a868cd3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5f84b9-6f44-49c6-b051-e2ebaaeef9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40c4dd1-e83b-48e1-bb8a-90a24ce846b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e6069-8e6e-462b-9d25-2344545d6e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d139bced-be15-4e93-848d-16f4abe602a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d6b6a5-eb32-4a2c-8e49-ae641ae5275d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9718fbdb-3997-4dbb-9da2-366d43714264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc948e0e-855a-4a33-8793-cf2b9bccb4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063a4c54-e56d-4fd5-a9be-79f1e70d59e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6db37e-02d3-4917-a1d4-11312172e6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d564138e-6fa0-4eb0-bb96-349c35b3d8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fc07b8-d264-451f-87ba-8e7ca1173a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1c3170-d9c7-476f-98f0-a6a38a56e864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc0a75e-f8c9-4597-a515-ea9fcdffa95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584c4404-784d-45a9-86b7-26c405bf9b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d0e0be-65e0-4e82-962a-0e269b5a2acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291d6b8d-cde6-468e-8fee-ea5228c2321a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2635ef-c80d-40a0-801b-203dff166c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e807b61f-6a35-4186-9cde-b692fa641f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b7f5ef-71d5-48b3-801e-d8d9ca075bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f9c343-caf6-4fc0-bf62-685e310637e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56028f5-833f-4887-aaee-c59c42507035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9aff39-59da-4fc7-93b9-c936b78b2e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c344f56a-0750-44a7-8bea-c65070a67515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aea6311-2167-4852-99e1-1197abdc8297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1f9586-f9f0-4612-8ea3-b76085f98738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f1cf80-3b35-4796-9f0c-614d1b9c7ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8370f49-890b-4af6-8832-8fbeefc8c6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c5b799-64e5-4834-a631-1ec5530e6680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbe7a9f-a66f-4e5a-9421-b09e5492bd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7f071c-0029-4ceb-9c6d-a8029f8c52b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ea18b1-fefd-4978-97bf-268ae57e3a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e480e4-3760-45cc-b565-725fc800d304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77fa10e-c767-45ee-86c0-7934663ba56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc873e9-8774-460c-8ba4-72a30e111653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981007e1-02b8-46a1-be95-fb11a00ed275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd908d-7d66-4ca9-855c-fa8120ec645c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c05dd05-cbc0-4954-a97b-60294488852b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b257c4-ad32-4c55-b5ab-1bc4bae67e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af21c568-26a9-43c3-90b5-68105dbaf43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abbd0a7-609e-466d-9938-a82b2dfc5cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c1f0e3-848b-409e-895d-1cbfbd59869e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846ceede-4792-43b9-aa11-e29d91e590aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933da2c7-0f02-4987-8af4-9f89afceb9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac59389c-1df6-48eb-a0a1-92e866ed9ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2d9b30-cd10-4f50-b26c-2078eb68f5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babe7327-0227-4526-818c-2321b30e6595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587e1071-6b2b-4826-8646-4db36b8ae1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b78d38-40fc-4ba0-838e-e6d35eb927a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e6700b-f546-486d-b0c5-bbaad74ee7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a009c729-93e7-4dfe-bce8-d364cd80009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3ebb90-37c9-449b-9dac-12929f6e92dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2505b16b-b4c4-4530-9117-6fe37c2b942f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c9e258-3524-44c4-92fd-4a7e50b89f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bac8dc8-3849-4de2-8ba3-7d868d8ee3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6986f6f6-759a-4044-9112-9eb22bfed6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63593135-35af-4870-917e-bb79432ec397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abaffed-c91f-4d1f-8b71-0a6953085d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c1be5c-65ef-4350-b7d4-cba9bf242ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61c513b-fb08-4709-9eb2-c0b53d124e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58282622-bf86-48a1-91ca-84ff713d90e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c054106-2758-4a82-bbbf-b448c5970719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b314c56-ff1e-4b73-9a17-2c86d93b89de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda50433-4d8b-42d2-bc20-8a69e7b80220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b172501-a15f-4af7-9157-58e2e50bcf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdf1203-8dd2-4459-8d7b-2dd6f9f91bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df3a755-f158-443a-a312-2ed27cb446af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ea14df-8a2f-4030-bd85-d9a522cbe0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff56f53-4e0c-4f72-b719-2e00853980a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e269747-b4d9-45d6-bfa1-d51e0e29f47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e4cd1b-8891-482b-a8ef-d33a2fd982d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0611a33b-c775-4832-8565-440683b0bf68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4244df4f-3c30-4a0f-b8df-035b42206855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51244331-c661-4bfa-b696-b744c65292e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac7f477-9ae3-4f98-a8c1-e9020b3c3b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a1b463-0866-479f-943a-4295ef230af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff6f411-a5d0-422b-8b1f-68dbeb767233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6908102-167e-465a-a540-fd3ec530a171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cc0824-b3cf-4263-8228-7ba1f52eb76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300bfeb8-81e8-4ebf-8d53-7400b9dccfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d1451d-f120-4017-8f85-f9aea235f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d0c786-ae6a-4f1b-bc6d-0ee6a933911a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d220719-a5fc-44d4-8c8c-798006ee3e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb48eba-2854-43b5-929d-565519caaff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5453fbda-f1e6-43aa-a9c7-4d7d59ad49c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470c60b0-e011-425b-9c9b-1f0aed840d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ad1e7f-1972-43e1-9029-eefedf63eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19ff231-e4a7-4932-a89c-1bb383ea9c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b5a2c4-501a-4275-9685-3ecc209e7141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c13860-0641-4d55-9afe-cce3224ad5e0", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3e1302-a9b8-4bfd-b647-5cfce1ddcf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442147c9-90bd-441d-b027-ead5ffd06260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599716d4-5654-4097-bc12-7e81967ffcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d59861-2d5b-4924-9b42-c006500dedf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dc5725-290d-4dba-ba8e-c4b7be47faa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4af732-f5bf-49c1-a16c-aa4fdb202d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5791297-ee78-4af4-af4e-f2e54eaa4fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2094a5-8ec9-40ef-9c65-e61bc9b027d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a31a14f-4a46-45d2-adff-f914d3352da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb2ab81-79ed-495f-afa4-376b28981c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f754529-bab2-40ed-ac1c-23a667b1b7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf0602-292c-4c2f-821c-d7d43bd111f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4cec68-2411-4c98-b8d7-63337c764fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cc3396-283e-4d8f-9e50-61f05b17b46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55140131-e4bc-4cfb-a1d4-5d727a2cba89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64c9aee-8475-4fbc-b035-9e07f39592df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b645f2-4d6d-477a-af83-606c49a8da10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc05144-2427-4eb9-86cc-994fdbef608d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b535f618-36ca-46f6-8acf-51a32ec92285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd61e023-e27e-4541-950a-1954e52568a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f24acc-eaf4-4618-8fce-e7aa65f54df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a576fec9-ee1b-4b0c-8d6e-683c785109b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d612f9e3-aa40-4c13-a0ac-f1b02c0f57fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5770c791-a8a7-43e1-bc2f-39ade975de51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e4395-f191-4d3f-a5a0-cbfd98014327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d8a40b-3e3a-4693-b92a-36ed2f8c6e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf20af0-c804-47af-9308-eee03b6c5887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029bf42a-da23-401b-8be8-3d665d84f2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1f7148-5205-4f85-a5aa-29ad04352108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8d9927-c41d-4069-bf4c-8ed59c52738d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a87dd2-e76c-4ed7-b184-c21eb43aa7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861d8370-3b4a-4021-9c6f-bbe97d265418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d24cea-1b11-4f75-a31c-400bf5f0ae35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e071132-060e-4e57-964f-d7708659f09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2af273e-28e0-42e2-9815-d70eaba5c482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd07b76-8834-4976-b032-67c4bd3eefd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cbc8a8-eeae-4cec-91cb-edb908b494ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90071988-4c83-408a-9507-69f6451f6757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdeaf42-f0d1-4f8a-81d6-97118b8b8940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59297c1-bd68-4542-afc7-153113fb5b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c268c40-c246-4079-9566-74db2a7cdcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984a3298-19b6-459e-8fcc-11c583dab089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587b03bc-7ce2-456c-8a7b-6bc970940584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70618a19-d831-449f-ba91-4caeab5fa544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a10fbf-0156-4a91-a990-af712f690b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22762e54-8dfe-47a9-a09e-64dc7e1312a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.163.122.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c51561c-c2d7-4b01-aac4-2bc4d4520a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ca7e23-7a5e-4d1c-a8b2-404e4b8e0283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af705103-5938-497c-9809-da51f3ad93b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c38164f-257e-4c82-a604-3ab2fac53436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb603a28-1ff6-49c7-87d4-563510b5df5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d45d6-9a72-45bf-88ae-9c546e1d4549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d70b5e-351c-40f2-9bfc-c21dac26d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5644fd-2ee4-4cb0-b86c-44302a9757db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6065b00e-62aa-42d9-a096-08c075bc2d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f678749-89d5-44e4-9588-c06bff53859b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59cb4e5-6c7d-4f21-91c1-5165a08c7202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e42a94-c482-430d-9db1-addd1ed71045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd25a7f-76c0-4e4d-aae1-3295ae7f8200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f1a263-f00b-4394-8d3b-612edd716ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7723cc-15c9-4cde-b986-4d41cd01726e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4808f6-00de-4666-ba04-ce2b6f9d76e7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ee10f9-6082-4e27-b874-74c8a13a8066", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.133.86.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a931b58-da69-40e2-9ccc-ebe303096d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.157.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784878fa-2dca-4e7e-bd93-0bb63f222d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.158.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de1f6d6-c987-4d06-bdfa-92785878d596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.165.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79085023-5da7-44da-ae1d-6946eda18e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.169.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9c872-e132-4136-a27f-7c9260a58a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.86.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9198682e-7bf8-4c77-a6ba-fff361e07456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.86.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15912cf7-955d-4874-93c6-e7c2deb320bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.87.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c825d12-f803-4468-ad1d-a27784769edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.90.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2583d1b7-4131-4406-961e-080b2b46f6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.105.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728eb9e2-2276-4ecc-905b-17431c823136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.122.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d2c388-9be4-4c45-9e5b-8fff82754c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.22.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d5a7f5-1190-40af-a913-018cf12a0845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d495a5e7-e95d-4881-a9d1-eeaa0dca1dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.42.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaa2f64-1ba1-4f97-989a-4a5e1950a431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.68.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee4d4b0-8e66-40c6-9833-97dd746f6476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.200.173.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d3bae-412a-41b1-ba39-e31b15b22e61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.207.224.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11eebc8-f446-483d-9607-73bae38e33d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.58.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78ad847-186f-4eed-9810-cd2ad195db19", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.221.69.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861df15e-9cdc-4c87-80c6-c6ad8601bfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.84.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f719e63-4c26-4988-a4f3-3135bc9433d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.205.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33c90b7-844a-48cb-b7d8-c6d7157f25ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea835fb-e396-4b0d-90e2-87852f64025c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7a8cad-527a-4a5c-a066-f9657491cc32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c157b0-dd30-46ec-bee4-a1db22b7399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.75.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a13e584-e4b1-49b2-a4b0-298bfa085f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2ae722-f62b-474a-9b78-16c89ef5ded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6560a5a1-341b-4893-a5c9-cfc85601adb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ffa31-737c-4266-9de1-362828b679ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28762251-3325-411e-87b9-6960a1d73584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4141f8-cb2f-4106-abe7-727efd1c2aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f19df3-3895-405f-b15d-a7f3c69dfbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac09d5eb-fa93-4ee1-a421-3bca02e813e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844a2261-fae3-4ac0-813a-cf9b20ad94a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad755c74-0cc3-4689-a6ca-11819a1fb069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d20f258-9c3b-42f8-b64d-1b685d4a8a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123b68d3-42da-4082-a207-eae884ffe5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a81286-781b-4453-8e29-846072cfbe05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0882f3-836c-4296-8a84-bf408c9b7f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faac7180-e04b-4d22-83a2-e66c4ef3e5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea924729-62a4-417b-8475-5bd0716f3596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d088ed-37b7-4af5-a414-8bc29bfc417d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b73fe5-af28-444f-b59b-15c11433aa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e5fec0-08c9-4af2-8a7c-fab9be42803d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cd2753-691a-4183-97a7-744e3c6ec840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c314b754-c6f7-4b06-ad52-1854a0ed2c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06410803-9178-4712-8412-0c9900914b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6217697-6e50-45b7-83f3-8fa03693a13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c614e66-adc2-4454-9f22-b0a12fe59e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41adb1f-ae47-4877-9ed7-095623bca7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce373da2-2b93-4d5f-9037-58c23f13ee8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7889e737-d304-4593-a864-651594ee18f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8289c07-82ec-47df-b26b-71d6b250f4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1bf9e8-a01e-490c-9637-af8ee6e08c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddfab51-787f-4d1f-9bd2-0f84da71c977", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.145.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f804228-594e-4248-8acf-f99dad02c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.51.234.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b342e77-8ef4-4498-897f-01c2893135ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.71.133.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bab0a2-d4b8-4f0d-9667-afe2ab7a02ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.204.84.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cdd173-4fcd-4745-ab55-1529cf49be67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6761435-185c-47b4-aa35-03549b87b02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ab12ac-8dbb-4071-983e-d7e46794002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5fc89c-54d0-4c32-aa89-3220a5cde099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c064b54d-234c-4496-8e11-0a8f6ce77ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d5c290-1063-4c78-91a5-296a0e5efe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c006211-fdb0-4bec-95ed-b2f26b16b639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e65e54f-8cb8-4fd1-adfe-9fa100b073e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3157bec9-d70c-4299-a663-c18f714e64df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfff3ff-03dc-468f-9c66-fee0f6553c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a35da2e-f6e9-4859-93b9-be4c028719e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97a8b48-4248-4238-822b-8223befb43a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49780ae-6a20-4252-88ee-244eb677e722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69239cce-cee9-4332-bd5a-73f352700789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b24fe9a-0a79-4002-bdf3-003d8a740fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86da4d4-a7b8-417a-9d1c-f99209e775d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409b697c-a627-42f9-8848-3db5172a2863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee52df-a366-45ca-90b0-25d930e704e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9a98be-d6a9-41b3-bc41-bde736a6523b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cef411-7b06-4987-8fa4-3d5143189e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e65197-8ed3-45d1-9675-b710e5b3cc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04d878f-2bc4-40e7-b901-a9c46eb2f8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c1747a-9cce-4982-9950-2f5823aaad56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e009de1-a347-4c04-96eb-06395296e72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c1b06e-eaf3-4d2c-9675-6cdc1a0123d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2ab816-e5fb-4ec5-b502-586297a9eb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51482e43-19e3-4704-ad5c-55581d43dcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135552fb-e2fe-4aa0-8e35-96e26bc6ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35c38dc-b1c0-4e09-a194-6fbd3abc7110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40ef185-cb05-4330-b3bd-d484cdafa9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef3eb7e-7f3e-4f4c-9d50-2b81f54213ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7627c5-0467-4c07-958a-2d8aa36b6d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3a60fa-5cf7-4d94-bf49-60b5390ebdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe2e421-8cd7-4647-9570-467cf2824069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b019bc6-f7f7-4b6b-905d-d08d1d4b45ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6d416c-2d81-4302-aeb3-457eebec8eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b2f77b-5038-4790-b69e-ce79134dc82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01523014-30ce-48e4-b7d9-28057af3e75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.54.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1712bb10-f52b-41a7-82d1-59c32ea14415", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.13.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b63d4a1-bcee-4cb0-9f3e-7b741cf62e7c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.13.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b7855d-1040-490b-92fb-e7b81975dff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.17.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fa97d9-0de8-483e-8028-70c6896d4f83", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4ccd60-bbc0-47fb-8552-b7bd8db7d31b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.47.208.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e90a181-964b-4cf4-b686-7d6bc15058d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.50.117.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4261529-631e-4ceb-97a7-2e9e94e4b7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.122.142.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e512f7-e785-4253-9ade-24ed9023a828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.212.14.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8cffee-2900-4277-8b39-0fea8e2fdd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.230.100.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a71532-cc87-47b1-bfed-f123660bfaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.243.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a4ca7a-e600-4c95-a730-fae292125d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc62c76-0d07-4ad2-9dad-aa265a926a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4084f8e7-1378-4b47-a4cb-a3872bc2a374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20e1268-f42d-4cb6-9ade-ea65504c5ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0908f24-a296-49f2-a9a2-d8752ac3a3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d093f3-edaa-4727-96bc-5654f0de4cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb26ab2-a9d6-4b56-9779-0ed488365cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d006594e-afda-4cc1-a22c-d6417349a7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.122.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aaba5e-584e-43c1-8aae-02dceaa3c5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf550005-e9dd-4fa4-8e07-afca180f7056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.162.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e47600-7181-4d2d-810c-bf8d0d99e9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1031358d-c6af-4710-8db3-1eb3ccb46ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4feb26-471d-47c4-bee3-7558c114ca7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d97cae6-19fd-4fad-9e37-cfd44f07c146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.205.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5ecff9-d73c-4d01-a4b3-a4f8522ae3ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.33.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4e1e9f-93d0-4b27-b8d1-21a5ffbb3ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.36.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5583f67b-d91d-471f-804a-600ee82dbc4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.96.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a52b7a3-fc96-434f-8f49-87a79f44d779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0241b2b8-5185-4c57-9100-44afead24126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bbc7fc-4bd8-47f0-9e9d-fad82c5599ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347978a6-91a8-4e3b-992a-55d24e138ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a7944-bf52-4f11-9998-a7de80d22f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6411ad75-aa19-4352-a77b-967bad3d103e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a46b8d-50a1-4579-bf6e-23c4dd62b4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dfb0fe-e881-40cf-b097-bbc1d1454848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e395f60-e3e4-45ac-b19e-117fd1d84401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.51.71.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf7cb47-0a85-4a10-887b-5919b8769036", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f729419d-9923-4a24-9a53-f9c70f773085", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.230.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e949d3b5-4f11-4f7c-9851-89e3fef007ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158c2e95-2588-4da9-be2c-413b543d20f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.243.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5a15f7-a1c9-4ae9-a166-8c77ffd02ae6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b125a960-792b-472a-9ce1-8eb7d1a81234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0e5303-77e4-4e73-8677-a730844ee683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3475afb-39ea-4c3d-900a-6a0b26f90207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3362b123-a54d-48a2-aeea-9f6b023c004f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd829c2d-e1f5-437d-b054-83bd13f7b21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71579783-92c3-4bc0-9ee0-86a050d5be41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ac3f1-1c4c-43e4-b72f-fa3f75a349c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839bda1d-67b0-42c1-837b-6af9f30032e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955ae1b1-6316-4b40-8d72-021d2503b23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a645dd-da3b-4898-a081-ee195debe3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32911b4-1665-4ce1-8d09-9551896a4024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6080b9-cb47-4132-b618-89fe3ac2ce03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744ac32a-8790-4cd9-a1b9-9658dced6e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e37b0f-bbbb-4e75-960d-f4ff4257876c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8492421-7756-41c1-8bc2-5016dc10aeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263bf135-4f21-4d70-bb50-a7d2c5737bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbf9bde-b3eb-47f5-9ae9-767377e836bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f06a5be-e894-45dc-b35c-45e1eb81ed85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a3a139-a31f-447f-ab4f-274545be9e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aba3ed0-e318-41fd-8525-54bad743f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96d11dc-8cff-448c-bd60-c4646fd68aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6465b081-ad4e-4f0b-b87f-4dca30263653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653238e7-d7ce-4466-bdcd-df302501a873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2879783-09eb-4671-9aff-252bed16b3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b132137-d4dd-4789-81aa-939a1476e8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6955f0-449c-4b80-8c3d-37e7557e3fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b836ffed-09fd-4393-b6e4-fc96dc407fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698cf039-d33b-43ec-b5b7-61af9f645454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cbf03f-63eb-4f2e-85aa-bd53693b7468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a286559-aad4-416b-abb8-30a394f0566d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60631f4-91c4-4c17-8a64-235ebcd99b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3652e2-ab51-4218-a802-e1cb6a25ac88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d655c98d-ecf5-463d-bbc4-6335c88806ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.156.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a96fbb-b754-4d29-a222-8b5a9dc30694", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.5.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691cd8e-a2f1-4d15-9ad2-82c1842df2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.112.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17866ebb-6581-4eb5-9501-0aa593638315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2244486b-49ba-40a7-9682-6919ab33a4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.163.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40510b9d-cca4-468a-8a09-00afd2c19717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.247.120.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eb05e5-4f46-416e-a433-a0bf008e7514", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.39.101.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bcb091-1861-4a0b-b7ac-2ee9f2b5f98e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7112af33-f630-4333-b6c1-9889696b6264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.3.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e016eb3-0375-498d-9979-c2d9f1a1bb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.36.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f283ca-0b1f-4acb-9388-c6f30e328a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466b67e6-f9f4-492a-ab60-3455769f80c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1c87af-6040-4730-9951-5487fdd56e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b44e49-de4e-44a2-a9b1-6221df1d003b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd98755-4dc0-44f2-a103-a6de8cedaa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ee0063-64b5-4830-9fb4-111ac7a24552", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0f3001-45e9-43e6-915b-68663f9dcb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eda2d22-817c-4661-af14-911afc5e6f70", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a3e23e-ace3-47d2-b679-d8e3bcfc4b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037fd375-fb48-4875-935d-3187ae45c07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17364097-b894-45b2-8984-f62df7e5c733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4d26f6-f6af-46f4-b5e5-a21926088266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d69cc57-84b6-4f82-a3cf-b2a6bc0573bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bad99e-1280-4fd8-9cb5-1c50d53f0130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e2d33b-25b5-4c78-bcd1-ffb92c5c18cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568a6a15-dd55-4550-814a-d9b46f9f4f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd1da9c-9af2-4776-b445-6b8e55df0028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c6ce3d-99d7-4050-8777-0621601b403d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.101.201.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64909207-ed81-484f-92c6-fda4eee8a592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.89.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5822ac-c21d-4397-a2a1-478e3dd736e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.112.191.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4940ee-33eb-4672-a48e-cc226dd90c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0801d20-01b4-4e44-83a3-944426511951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e304c3b-3073-4375-a83a-c4fd6c3226c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d6e718-999e-4531-b9f3-2edf4925c533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d824392b-3e5c-498a-b3ba-3059e1a14779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc9ab2b-6a8c-47d6-a906-64d00c9c9e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09482ad7-ade3-44c0-9709-7523ce24575f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dab479-22cd-422b-ade5-0368c4499ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c10893-59c9-4191-83c7-94618c6216e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98293c9-371c-4d3a-804d-512f9849e772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.87.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb103ad-76fb-413d-8202-e2007c575687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8662d2b-2046-4092-a896-8193de41ca84", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.32.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d70a94-f159-48e7-b837-660619d21e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.105.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3d3835-8e38-402a-92b9-c4e277270717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.46.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba8fe39-73db-4461-b519-2acd7ebecf20", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.105.48.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f73dba4-c3b2-48bd-87f9-521aa6877d48", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.117.224.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d99f28-dd7c-4186-87de-cb7061d91fd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.117.253.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8051733a-ebb7-435a-b7be-3bf33a9b557d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f348785-2b05-436b-8ce8-97730ac08c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb531cfd-c943-4498-b97e-7c2d5d5959ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327bb93a-c13e-4fb1-b49b-06253615840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885c79f7-1f0a-4b77-b073-2779c844a2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a395b2ad-b6b2-418b-b4eb-e3d0abd71702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb1a3ca-c91b-4c34-8a9c-772831c2679f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7cce8e-d406-4058-b01e-4080abb391aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cf59b1-bb70-4222-b30a-0a1efbdd0205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de455672-7ac3-417b-9338-0f02dc6d7ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fabd41-2a61-47fc-b6f4-7dcda8631aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b66d8ee-e075-40c2-9cb5-100083ab0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f782f697-4659-4053-a97f-117dbf810fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d390caa-3ccd-4c36-a2e2-cfb51c0ab71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.221.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c6feb1-3601-41a2-8151-1a47b8f4c242", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.177.147.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59301499-af80-4f28-bf0e-1ddeba284cae", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.159.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80d7d74-6a2b-4a04-b784-0c5b5b3aaf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.239.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273d53b4-6215-4e76-8321-d20b2fb8913a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633f0c47-e76c-4c8c-baf8-3f8e6408a213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.47.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c023f800-c7a0-4034-8d90-25f396cc04f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.10.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da90da6-8658-4e25-9366-b68a30e83eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.44.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd77d7da-a88b-4ea8-9166-587baf2e2637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba49ef7-140e-4352-acc3-917e0653f64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590b09c5-3121-441c-9c15-7aadabe7671b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4644137-c84e-4ff2-a099-2ad36968cfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01227bb-595b-409c-bb8c-bf2ceeae6c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53ef20e-8025-46ae-ae12-1b9e3e4269ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a974d532-2e36-4e3c-b4b5-a63b600920f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24de2f18-003e-4a53-bcb1-19891a50c5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81717295-21f4-443c-aba8-a36338fb77b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566ffa95-5b03-4268-b334-a82f32c92d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246d5f7e-32b7-40e0-8b50-fbd022751b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6dc546-c4b7-4874-bcb0-912ff1a5f845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.216.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce81cec-fa52-4766-b7c8-d816b10a6d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd365437-d47d-49a4-bc0d-0435521c12ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af949944-7a34-4949-8edf-1f092ab35dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d87770-64b6-4691-a21c-bc5ce71a6ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d647d56a-698e-4ab5-98aa-b6e155108ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.76.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fb2948-283e-442e-8dfb-d6a2b9d7ef5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a122e58-1c0f-4ce7-85da-0af1fb437723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd29ece-3101-4982-a0b1-f4fbd96307ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87f74d6-7c63-4eef-9c4d-3ae156ca7fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe56f59-6452-4edd-a999-8e24b9805e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd7ac74-29a4-4edc-af9b-f30dcf4b268d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb64776-32d1-4087-8fe6-109fef057e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.11.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df54f5a1-73a6-495e-9737-82800915c2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae13b080-cb83-4c71-80b4-afceb891254c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bafde3-f2ff-456d-be4b-2cc52698927e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c722b31-f106-445f-a564-3db354f76f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f027b4-51f4-42b1-a94e-bd5b12cf8f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.168.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6588e611-cbf5-41a3-ab00-16a1bcf74e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.169.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1425e97-3dc5-44ea-a7ea-6c7ecf198b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae93306-71e0-493e-9e68-1fb03d600fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd6ff13-e5d1-4054-86f1-c3515b9d8232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdf6882-2b40-4771-9559-72ce04ecf111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108ebd65-319a-401a-9050-5311ed3bdb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04281f3-deaa-4b92-9a6e-3d81e8297e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50120a3b-80da-4ccf-a1bf-b7c83ca06211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2423feb8-7304-41f9-b5bd-4723750f4bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c229a6-e233-4232-8c6c-ccb1ce02760a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f6d34b-bf03-4c52-a6eb-cfd388806907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610559ec-42af-4be8-b35a-5d01b2464cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f7d0a-eb5a-430a-a9d2-5f94c76cc2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab01e96-8196-450f-9d6d-a337ccda5651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4817d7-36f2-4ec0-9732-f08fa3abfd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b355a5b0-84eb-48a4-864b-7870205815ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cb8a19-6c73-4905-b1c1-04c75ac11e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.5.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373eb880-7d01-4921-a00c-7d4b12cc095e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eb7b14-0de7-4c7b-af39-048d918477a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92e231a-8e19-433f-9140-bf8ea05142aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14de93db-04be-4da6-a7f7-2bcce69328a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fe2245-8141-4e48-bcc6-78cbb0a6e5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd558def-16b4-4dd6-9ce0-99b013b5715b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddbdace-b0e0-4c90-9488-299d724ccc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a017de78-ef8e-499d-ab5c-5600b2e65a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be2ba69-aede-49fd-bf8a-aa5b5c085af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c86d55a-fa70-471d-9203-a450a0f9c962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6122b6-c382-4a24-837e-39024807ad52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c544e-7833-4a02-a200-8a604c4d65cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5a6dea-33ad-4f8a-9d46-931a45504f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad219e87-0a67-4f76-a7e0-f5cf0b5201f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b66146e-8594-41a1-902c-aeb178858cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2f6d10-7c1f-4dd2-aef9-03d5d4d54df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42329c2c-1c51-4115-997f-3b1181e5a704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df09bca-87ea-4726-a6d1-bf8282217593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc989bd-b6b8-4554-b396-33986d7c5f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b213defc-dc7d-42ee-946f-8bdd7dee17e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8485383-5200-45bc-9dbc-fb81715c4576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5420fe82-051a-469c-aed3-d9f88d80dd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4037e3-6b8b-46ed-ad7b-09122dbabdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8593439f-9026-4d1c-bc00-d1472977fbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46eba39-5244-4553-9fbd-657781dafe7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1a1396-aafc-4240-8b93-42c4a1b5888f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52ba87d-8306-47ff-9b40-6b5ec05fbb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519c3db-ca3a-4378-b3e1-9be1ee18d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e958009a-83ed-4e04-9c72-d2f4c9d3cabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6301457-0bfe-4450-b0e4-1c561e40546b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432c7d12-d0fa-426d-9dcd-81ec0cd25174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7df763-eeb9-4e13-8920-740687c9f056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230c0088-5825-4073-9eda-415acc997c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43740349-8a7c-4855-b1d3-892e383ce980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461802d5-d3fe-4aca-87c8-08b9ed2298ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9308a87-974c-4f41-b133-1e0fe0daf31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df7e54a-b4d9-4b52-a620-1c0e75457d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78277e72-c789-40d6-b0f0-9e7157123059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745f8f0c-565a-40cd-a0e6-1946e7e75495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5124d0-0015-4c67-bd0d-0f29d82d4992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384126c7-87d3-4677-b8e3-810060bae1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e297c4a-71b3-495a-aa41-24199a13312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd3f9dc-3038-40ff-bdef-3d31739dbceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f315025-7d30-4405-bf98-1ab1197f1e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894e084d-16fb-4b71-bb07-47cbc639d204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d35746-30c6-419c-aa86-06686d649880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8d1449-735f-4f53-b184-aaff57397537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d953d25f-02d4-4668-aec9-972517a6d4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9859ff85-327d-417e-bd8e-0c4db626c82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3c92ca-df31-4cab-8857-bd8c6485ab4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0297a6fd-6e2b-411e-b558-25f2019b9324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a55280-ac50-4203-b40e-531930278abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6051b0a8-cbab-450c-8a79-fac85266f4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aadf3ad-14d0-4d75-a0e3-69aa0b1286a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c68c3a3-f472-454d-a3d4-fdc5eef38823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c845219-b491-4c76-8733-f51e678aaeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dcb4c8-32fb-473d-8648-16b5a2a69323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c50b63-5120-4d6f-b1c5-21cc8b72fb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1afa8e-b8e4-4751-9102-57d9febabcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc237b5c-5650-47f8-972e-f710ad1d08be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cfdbed-ab10-4c67-93b6-927f3eecab95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2207bb6-091c-4cde-8d41-422ffdb7252e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be782e0f-f11f-4340-82c1-194f9afe7f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c61adb-3a0f-4dce-9486-4319d5c306f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3574dbc-5139-45e6-b90f-abac63f4f5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da76ffb7-a68e-4244-b34e-0a530e9f0835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cac95af-2b89-41da-b25b-e5dca7430a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fcf7b5-ba13-43bb-aabd-b755ee82be13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca151ae6-c38b-432d-bbf6-4c39399c6886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.81.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfe5442-7e05-456e-ac5d-ee87adf1b6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.89.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21aea6ae-bfff-486a-a926-fb1c4d64508a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace4ca94-0e22-46f2-bd5a-9910f8ed1563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775492aa-2bb3-477a-9888-9005c6948945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3bceae-8b60-4aa3-a494-aae6c84346d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd0fc5b-08b0-4cf8-9102-687ab64d5913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a08d4b6-f5fd-46ac-a2e3-c14718f5a613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.93.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4546e62-c43e-464d-966a-47e7facb1353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.160.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d62c4aa-767e-411f-b135-b60d7d94c304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.68.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b425a0-9d08-4824-86f0-c7c30aa9011c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.102.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01be1159-b75f-4c03-a448-b55bc8a206d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58dacab-8c83-4660-bcad-a2b1c08966ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.183.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50eaa25e-8888-4a00-aab9-2dc502696f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.223.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4433f82-85c6-45c3-90b5-7786c5ad9085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.76.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369b0fcc-a4a0-4352-874a-c4f1ab8d5565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a500f0fb-d64c-4f66-90db-18afd0b22521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9919177c-ac64-49d4-a8bd-9750b6d7e2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b16e60-dab1-49ca-b819-f03310ba099d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5925e31a-e55f-4a4e-9501-43123be193ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.13.68.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e43fb3-9afe-4fb5-b860-29cd243e04a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.193.204.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec60b21-3293-4fe0-bfd3-5aff93059983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.240.22.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3054b4f-57ec-481d-9a6f-0e62024d21cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.253.31.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098dacca-ff22-4b91-9960-b3d40ac34e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.40.234.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f6802a-0249-4265-9b6f-c9902466c9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.42.87.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6e969d-9576-450d-88ce-51d8f92a2961", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.64.82.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a332448-1c17-4c15-a3f3-3e9fe80744e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aa08c0-a4ae-4ad7-9ca3-d9c90f3f03d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0828b93a-04a2-456f-9d8c-52a3a134e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635de8ce-c054-49bb-b32d-9d7e2408a058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e810314-7724-427f-aed3-439d156e1c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d446a8-6afc-45b9-9e3b-ad9e58500ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f837961-c49f-4fbe-9772-cb55a6eebb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4171685-81db-4947-baf0-89500708fd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64795ac5-5e1d-4d71-8b7b-fcfd6cac7b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c993d0-9c69-493e-bbce-0ea9dd5365f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5e098c-afb8-428b-895d-7192ac4e1d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f750765d-08d4-47ff-a66a-b67bf3e30457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2415824-29db-4a1f-9f73-7bf25c45b148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0a5187-f5e7-4cb6-bdfc-a43fffae7a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436846ca-a380-4a30-9eae-6d86d3a214f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6600c14d-68e4-4b4a-aa02-123b0b4cbfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4159823-8ace-4f1a-aa1a-cc1c3fbf2519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27df2ed6-09e5-46ee-8009-a9e629e033d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d636a5-d095-44f1-8dd1-d27297bb922f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.127.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4efa77c-81d0-4b21-aee6-6c9e2414a341", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae52441-1c68-4caa-9920-e7cdfbd3cf24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e95de5-64d0-484f-b1ee-37230225aa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7b7619-2086-43be-b635-17bf3098c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1510d89-d43f-480a-a968-ee88e4238cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf5f346-5579-4b22-8578-62f9b333ca9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.95.45.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6ba7fa-d17f-4aaa-8568-1f9cbea84621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.143.6.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298257c0-2388-4980-8568-0e0d3c28204b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d80237-9dc2-4c5d-9a08-0b022f7528ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ff8b12-51eb-468d-b1f0-b2f005e18906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9db0ae-9e10-49ca-8f09-bfd61f52fe63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a633c-1163-4f08-8745-4e1fe9b45fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.193.74.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514f305c-47a8-49fa-b290-b3c4d7a2d731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.22.132.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34605c2a-bf6c-48d4-913f-b2e84ec3d978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fffc68-cad3-45c2-ae45-4e4b78ba7bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.69.97.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b993cef9-4495-4e56-9c0d-2f2704b6bce1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.2.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0591fa0-4034-4bba-958c-6d8b1bd486e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca6ba99-6a6e-455a-bfa4-5e09971750ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943ec47e-f851-4a4c-8c47-900466e6180a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf93daba-8b42-4761-82a0-f6bc13317393", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ece1ab1-b62b-4acb-8438-0f2484ab3da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6a4e4f-fd70-4785-b98a-4a8bad98a3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.148.21.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9027e41a-c287-4ece-bc8f-7868fd2d8052", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.132.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2302a2de-8cd7-4b8a-b7b8-ca593c47f723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3ab832-2fad-4a9b-bc2c-4a5e459493e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.114.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5d18c8-dc4b-48fd-932a-5128adf951b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.114.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c60178-c673-41cb-8cb5-6280ff031d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc6b5e-ab17-4827-8c0c-47b247119159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e93a6f-cfd3-4d1c-9fbe-48493747ab7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b441eb26-1427-4b91-8ca9-aa2f53005aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e133355a-c3de-4898-b76e-5334ee58eb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e13d98-fd66-4f90-b120-ab6cce7309c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e013b26-97c2-4fe5-bfe2-0e6bfe05fa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1251dec-7430-471c-879a-e3f40ef316df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8b5018-8e4a-4f00-9ce2-3d34e062bcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7eddf8-841e-49ad-8090-a3358050b877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48feb93-41b9-4f6f-8f06-df192fac200a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2dd30e-f592-4453-8f66-bdefb3cf456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5155418b-80df-45dc-aaec-9eb11afc646b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1e29c1-a805-4a5c-a7fb-ed04aca8c09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325aba75-9c47-4211-ba67-82f5562d4e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b70d01-01bf-47a7-a3c4-5b363e49592a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a211fa-cc03-4e72-a506-4e51b8926af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8de071-298a-46f4-9754-a251dc4c1922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d873cdb-191b-48b9-a90a-27fa5125d6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabe047c-a226-4740-b83a-ca311ed3c5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5f69d2-025b-4e90-978e-ce2f9e653905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75269a4-49e6-4dc7-bdac-17ce1c7f810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bd1400-e024-4c0c-bae4-732c4829741c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94b0402-77d4-4b6a-8c71-410214e65590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783af8e6-66a6-496f-bc10-71cc935bc560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2533a1f-8de5-4f09-8ec8-39de787e283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb4b01-ca40-4ddc-ae8a-be73095afecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bfab7d-f618-4191-ba65-d06bbbd43acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e3e994-46f9-4c65-b3c6-d7a5873bc648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58936542-9aca-47f2-baaa-864cc0e5cd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da363e50-4b5f-4b51-b97a-04a82332be93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6dedc0-364f-4a79-ae60-f416b9a592cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b2b5c1-ba47-4324-a11c-949d48aa5c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5579276-1c1e-4c6c-9b6b-8325b598a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f250385-96bd-48c5-9f9d-6fa7e1c6ba98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea5c68b-8f02-40b1-8a71-c8e227753ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047f7a6d-c9c7-4938-ab33-afbc3913213f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde6e54f-82ff-4494-8ad4-08e55791d6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68eac1d6-f35b-4619-b92a-e3b9d2410bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c4d5f0-5a5c-46da-8c96-e36b910975c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce47fc04-771c-41fb-8a96-abd66e94a578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6bfbed-a411-4258-892d-80077d905be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba62c6a-2fbc-4498-9a96-834d4b03b52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f7e89-d340-459e-b834-29a1d37ca785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155b3e2c-efdf-4e5b-86a4-d25b77b240c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a8a850-442b-4918-8268-ffa880ef9e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099d8fbf-b247-4089-baad-fe43a790094f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905fcfa4-f603-41ad-9fbb-b0820f03b353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76eaefcf-30ea-443d-81e1-29126d4a57d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0e03f4-fa87-4b5b-a0f8-544bb5fb190e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3270b6fa-b3f4-438c-8086-44867c436347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f72573-b9d7-4c6e-ace2-9ed0f046bad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3bb0d-c51b-4138-90e9-06ed5c06635c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ebbc38-6cd5-4018-8ade-0b957f11eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a3ce84-d7fa-46d1-9734-7af89d08e392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3e66fa-5039-4e61-a0e5-8194fd4c3107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a36f0bf-2335-411e-8d5d-f6fb7dbf4fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9de77a9-16fa-49ba-b9db-b140d0512264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b264074-cb08-4bb0-9584-74cecd9c9731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d9d61d-3d20-4efb-a995-5a1b892a0381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abfa34e-2477-4973-a685-5431281013bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a34dc3-85af-4586-8673-fc80fda8a8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b5a134-f710-47b5-8441-de6bcff59d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f30c59-8c2b-4b10-979c-3591096f726e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc1ba0b-a3e7-4a92-a334-8b75cc8a3ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade1c871-5240-46e6-802f-15c080191e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccb7b98-2e02-435a-ba48-ff14e38468d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017bad5f-e0ad-4c27-bac1-f6cb7faf461f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd7a06c-50d0-4818-b03e-6a2c7ef7afc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6563fde-44d5-4994-926a-fe8cdf8e81f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6275234-f9c2-42b7-a360-da83155dd222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c5cba5-f2f9-4834-afcb-fc365bca5608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc13cf-ce41-46a5-8413-e1e75d1844d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c1dc74-72e7-452c-8927-73920980d73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42de61b2-29ef-49b0-bdeb-0f70314d12d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c6508d-8ea9-46e8-bf2e-16cf66b0e0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d801596-1fcd-4f25-b54a-26a6dbf3f52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7614bc6-1f59-47ef-bc54-e34492a23e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1baed89a-3862-479e-860f-d384299b22e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582cfee6-cd20-4bdb-a6e7-a6637959cd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd76e4bd-703b-4734-b4af-e9da77088e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04438ce9-9df0-4685-8ab6-4bcd6521af91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138cd88e-a093-4ddf-94dd-3f92599356ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1925b01-4ebf-4992-9acc-de58c988abfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c618b429-89a5-4b14-a60d-64cc6d04b1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978751cd-39d5-464f-bdbb-ad9e5c9134d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf553d-da14-4f61-99ba-2eb52b7ab86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8f12d9-7490-4e04-ac19-564a58ac78e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1638e25-d611-42ca-acb6-569af09e3673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3969b40a-aef9-49a5-a484-a04081c128b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb286a0-a01d-4ac2-b2d5-498993ec1090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c7058a-0460-4a73-badd-da8f8d228bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890f5755-1ba8-42a7-b857-79fcf2024862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c120c1a-d5ca-4558-868b-9f5b87509671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42474574-2f97-431a-bb2e-7006e271b1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90298893-1262-4061-92d7-9c16cbc47fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aead88ac-74da-49f4-82a7-5f0ee65c6870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab206948-834e-47e2-95b0-709796d9e577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec0146f-e4f0-4918-ba26-7c934c3c45b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826d58d4-9570-4c3a-b34f-0806cdd9b433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7437fefe-d379-449d-a51d-d33ffcc33246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd375e5f-2c64-47e2-8c9b-27fe093b8680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6728199d-b415-46f8-a81c-33a68e8684d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1a65fe-2b42-4585-928d-0b438a55ad26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca1e2db-61ce-4388-b27c-7e1b9bec5106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff46ebe-0315-4cdc-8784-887ac6d25114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205ec8c6-fc86-4fcd-84ab-61abb63afd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389e9fd8-4b60-4ac7-9613-0167887bd3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cd51ab-50e8-4771-9523-d5c844f0800d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f826f622-e8ee-4604-abee-1221e6c9f144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294e997a-6837-43b6-8791-9d180674e91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e711c88c-d7d2-4dc3-8299-7d9b1961ebbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a99bbe-485a-425b-9089-35a964e4d349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad31b28-345c-4bec-ad03-178a947a901e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2721f986-4c98-4029-9c5a-4b80f9b62d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60212526-5d71-4adc-8ef0-5397a23bd3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47185a14-9766-4929-ac1e-4eea45258818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13437e5e-82ee-4502-96a5-ad4ea461497c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649f4da1-d570-42cd-bea6-3fae96263baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ae3346-0f20-4b58-93ed-fffc1f5bf34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1261d2-774c-42cf-a1fc-5bf782aafef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c4bcc5-f132-4347-a4fa-1cf8bcc8899a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5363bd-1736-4ced-9d99-32be7dbbc19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5836621a-ffe9-4e06-bd1e-e3bde5d78425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae293b6-943c-4246-98d4-19f177d4560d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b70da78-3667-413b-a8b8-54a536f78e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9f3211-6d87-4c8a-93e9-05d2d3a5e215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509fee02-a64e-45e4-a0a1-dd8b5f578ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6decd1a4-651c-4d46-a787-0088b083808e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b2c71-50e4-4866-9200-a074686b2238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10d0a8b-7d84-44f0-852d-7b1e68552604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d185a63-b94a-42d8-8211-f1e9646be7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eadfae-9416-47a0-954c-ce786c055d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f206a-c619-4ce9-8047-566846e1e53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0ada24-fdf5-43e8-948e-ce56dd396b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2228a04-3ab8-4145-b711-e7d15527497f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c908730-804b-49a2-a1c7-f12d6b1026f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77ae665-155f-48e9-8a27-0519d552bc15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1afd65-dadd-47c6-841e-0ac252357032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a5a17f-8df4-4ba4-9111-a230edfe688c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818a30fd-4e5f-4706-9608-166700072443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba85d6fc-3a38-4515-99a9-67f557095228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a368f7-502b-43cd-b214-8c604969294b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd515ac-05fd-4c38-8b6d-6a75a5226420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6601ef5-0402-4c5f-a4b3-17608d0ac38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b276c-c749-473c-b355-03d1b7c838c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8417ccf5-db0f-42b1-99a0-fa9dfe3f994d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31b183b-3380-40b8-99f9-2695c9155f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d325abc-ffef-4ad1-a7dc-15d6b9496b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcd651e-ca2a-418d-994b-32e2260c8277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc51d89-e3d6-4a03-8e3a-aab4f8a5c6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e0fba4-0b44-446a-a95a-6f15b250813a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c07bd5c-97b3-4f20-a569-c58db8717f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f700aae3-fef9-4d36-b1d3-bcfc27c3937e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212d79b7-d858-4dc4-9fd0-18c34008f988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9cb014-23f5-4dd6-8756-c044595b4b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61f69a3-e86e-4205-8994-6eb5c88aff4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a636cc0-2429-48a6-80dc-a359befe7ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919cb263-940f-48c8-96f0-d1138e093fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d99dd97-15d2-4108-8739-325451585915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e721f8a-fa8e-45e5-a408-ff9631563fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134eb7bb-306c-4c0b-9290-19a046aed23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f82021a-bb83-4585-8cc2-20acd9525768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301928e6-57c7-4253-89cd-a489308168d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecc3d69-34cf-4e81-9beb-764b5735b485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d252edb-1a4b-47db-87e0-1638ff3d2c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2b7758-49c6-4f06-bbf0-60c2d497c7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34324c58-ccfe-44ca-a8f0-d205e44ee475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ba675f-87d3-4a33-80a3-060096985286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad16089-8277-41ac-b898-e89dd68b8c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3999dce-89b0-468d-a165-a9370f1b92f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde45186-a3ca-4ab5-b4f8-604fe6a424a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9472db-9549-4ec1-91e6-633ff4ad6342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2012a705-7235-47fc-80e9-8316e463a4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a593f1-5711-4030-a7f7-4ca9b6c6d406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05893611-af33-4a8d-9413-334f7f8dc0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69ce3cd-47f9-406d-b5f1-e0642ca5598e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691183cf-592e-4c81-9f95-fd220528d023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfb115d-526c-4a03-babf-4e8feffb80ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b0ab0d-1777-4524-980f-1c3ba9da6b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ffbdc5-9ecb-4913-a342-2af264db1e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecee94bd-1e8a-4f66-9af6-d5c5bf58f8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c476389e-ebd1-4011-91fc-fc6acf83ef96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab6689-7a36-4fb4-8c07-64dc185037ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0197d610-6d77-478c-ad9d-9fc85ef02005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dabc02c-8de5-4d4b-bb8c-1fa4899509a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc4de54-d438-432a-9c80-7fb79d8bfbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24283898-89b1-45c4-a507-e067f1a79536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643163ab-498f-41ef-8a5f-18a3341498a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207f8a62-23b4-4f72-adc5-e65b862b75ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88d7c29-fcf0-48d7-b611-c8d3c1950f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af829389-3174-413b-83f6-4409dfc8c435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acfa5be-03ab-44f7-a483-4c6e42a2352b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db60dcb-9c41-4673-b886-f81b8fd6a0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6095413f-e2f3-4ad6-aa2b-34bc6bd366c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00db9a6-0d3d-4e23-8c54-e514746927c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd0923a-c6f5-4d65-967b-2e122cc8df0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db1d1c8-0000-4700-acb9-4d614bc3379f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c930959-9236-4826-8a2f-77b414e4e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df740303-7b28-468a-9320-7a9de145bf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f057fdc-c74f-420f-a71e-422375993594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4a745b-d28d-42f6-a813-5ea47e0041be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e6533a-b30a-4633-9237-428f1cd2539b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f255db7-5e68-484c-934d-8d6ed7457df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9901445-897c-4f6d-b3f3-b8d09136b260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895d16df-ebe2-4a28-a8ab-614455818481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f372b0e7-9bb0-452e-8b0e-7c8b140b7dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f3af06-2241-4fd2-8e7f-2cefa7d25f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f3ac6c-d867-4687-8634-cbd01e3e8326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a52b50-2fb8-4e9a-b3f9-6cc1c301cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49fedb8-6d89-4f75-baa3-7f810b1408c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a85e198-2835-4dc9-b004-c452c8882692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d498b3-7fd0-45ff-a9c2-a29332b88e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34460b1-d04c-409e-976e-021a35907937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712f9ad8-b63b-43c6-a8ce-24e84454ebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7570a5bb-fb02-4748-ae67-a2ef277a6fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddddc218-586f-4381-a52f-3e7b52a82312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d347fe-d142-4f19-8b84-bf2aa6185527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e49e2b-19b3-4a55-bef7-0dae284fddc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17998862-9dc8-469f-b783-06257744cc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0e8950-1585-44a3-8591-ded7b9f335f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d954cb-e922-4364-9a8a-3383054a6495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e764b12-eb8f-4d2d-a994-915623f95cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93a64b5-45b3-4a9c-aad3-06acc788c90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184a1f82-5d7a-4180-8e47-db8de29bae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f47618-e48e-4f61-a4ce-21ef5cfe3acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b465bb-fcb8-4d6f-82e4-5a16161689b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e93948c-c661-4a2b-810d-8f8cc2730714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01abbd21-8c57-444e-bc18-25e2a1ac3192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2265ef2c-c471-409e-a170-a963ff9883ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d76c09-7bb1-474b-ba03-dd6573d7417b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85deb58d-cbf5-48c1-ba90-47c609078afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375bfb38-126b-4836-91f7-57ed9380423a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb5df44-105c-495c-ab77-9a61b938c31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c488ed-e48d-4b8b-9ec8-b29593d97ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3af96f-9370-4131-98b4-f68cecdee2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cbbf84-38b3-420e-803f-5087bc6f77de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eaa00f-d200-4603-af3e-8a04f19ae1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5ffe2d-1a08-462c-b9d4-d05661ed04c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe2c827-aa2e-4149-8bf5-c8c1115f5a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ad9061-6b88-4d60-9a0e-8b98ad7ca8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8044b6c6-c766-4ef0-bbd3-3d79f96d1179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec030f39-5793-4bf8-8e07-a6c4399cdd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637514f-7cd7-4ee5-ac1f-edecf47c878f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a99f68-badb-42e2-b461-cc6bc52d2921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de68411a-9ff2-40ea-8c72-47c9d916aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a9e235-5dc1-47bc-8749-7c374e13e689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d17047-e8a1-46f7-9c21-24ff8b594cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805e7f98-6de7-4e25-973c-361512606efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.184.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4689aaed-2be5-4b8e-85a0-f13b2c4e531f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24506d77-e88e-43e2-be86-cdd71287f338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fd7961-c330-41eb-9e8c-8e5fb4c57095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1560ac-0f7a-416b-b9e0-d2285a1cf0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434f8891-6962-41e5-a9f9-7036d62dd6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45a7045-045e-4440-a5e2-7b33309cbe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784ca2f4-46f7-4f5f-bfd5-1d1917630fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439667fa-6b99-48f5-9415-1e9d9ec66b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a5d8e5-9f32-43a0-abae-69c9f40a1e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa23426-41ed-43f7-bc23-3d3f18312573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22991f6c-9e47-448d-bd43-b4f7494801e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc86807-c7c5-4c2a-9c2a-64fb75014870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe69f5d-69ee-44b9-9fb2-a3a5a526c9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a5b49b-19f3-40c1-b1ad-b82088090bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc02013d-2bf9-4b0f-bd0d-90c4db0fb6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d5760e-c50b-46eb-9080-6e86c4682408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1569d30-0f6b-43d1-bc3a-3a75d407255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136338ec-23ce-4a43-ab6a-a01bcf8a56b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9283a864-d5e8-4c6a-94ab-84604700469b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e98aa4-b661-423c-80a6-dfdd6edd1c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e90c30-5a21-4a1f-9191-c8b4ae4bc82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b64a30-51a0-476b-92b4-1d8d43cada8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3271431f-cec7-4193-b6fe-ca4e54d58ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209b502b-6f86-41d3-a989-be7a9191dd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da52955b-038b-418f-991e-da50b3059662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a45b08-9a4b-46a6-8d15-187e9433f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1f676-55d5-402c-a592-3f1a24855994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9785f12b-b2c7-49df-9063-972920310f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04d70b8-d8d0-4b9d-8657-249419c53557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc696bc0-c277-476f-bea0-2ab3cbd02cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0023fc7a-3b01-4ca5-8b84-d996a740f462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633812e7-b9a6-45df-a2d3-1360a4e48f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b26048-86c8-4dc0-8da7-6c7e64bc9c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a52348-e599-49ff-a1f9-08f859a53c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce079984-1fe5-4010-8250-162f5bf394d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03fcf43-10f5-4aa1-b3b4-a28b5e01b164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b116106-a40d-4649-8d8e-6a1cc0f374d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e38348c-7fd4-4dcb-90e8-216e5381961b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2136868f-4c76-43e5-ad3f-fbd621e995d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76a88bc-9858-40c6-9589-c32a02f5a950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484ca886-176c-4ada-b894-6d53d646827f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a17e51-d373-49d8-96c8-48f24e4e5451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a066bef-73d3-4c85-a5d4-69afbefa99af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7739022-d895-4a20-a8e1-79c9904fd919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77e9e49-48f8-4bf0-912c-3579a484dbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8555a2-afd7-409b-bda0-b169699debe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffcfec5-40d6-4b43-9424-5b972945fad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367ec0e0-22c7-4d02-ab5a-59339e6904b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef71059-8e74-416a-bc97-b583427dd959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7437c25b-03de-47df-a801-e697e0500dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418fd926-db21-4d3d-8056-0b7ebd510389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d96c122-093f-4194-9450-2a3d019444f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92bd93d-5b0b-4c3d-abd8-8c198889f301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd8cf07-9dca-4774-93a9-12a09c49902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab338bbb-bd93-4c60-a376-a33195cd5709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f6c582-c3a0-4462-ac83-20968ad74168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2510fbc3-8ff4-4b8e-ac9e-1722ef44b5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ecf324-ab46-43fc-909d-c2129fb3c8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8af72ba-d8a7-4eae-b593-9b675564f351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236bb2b8-e2a1-418d-973d-bee5707b1105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6df0c3-86d3-4fed-bcc1-de02dba17603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7526f3b-2e19-4277-9f11-396b299bab14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c80ba56-7069-4681-bf5c-1d2b448b2efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2ae42d-c2a1-4c05-9cb0-e5dba41b9f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d46df6-5eea-432a-af20-4c002ecd16ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c510763-1fd4-4921-a5eb-ef373676649c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa32ded4-44fb-495e-8c46-29b09b8c7194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629380af-afd8-4142-be01-09fdf761ce9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99ba21f-883c-4211-94ba-ed8fef74cb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b35d0b-15af-4c4c-8420-7be3bd109ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9db1283-ea58-4242-853c-3005e8c5eb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338e353e-8081-4cc0-8621-5a7e8bdb2d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f1893e-5e30-481d-bd7b-270b39430def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f446cc46-eab2-4dcf-9b94-2049e78efc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bdcd43-4eda-4a71-89d7-1d1945cf8caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f0270e-26d3-4732-8edb-e9c6f89c50c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7df422f-3bdb-4d59-93bc-c406da702abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1173dfb-6950-4634-ab35-3a6a3ff6a12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071808ca-51dd-4a3f-b1ee-ca8fed246999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc4f60-5884-45a0-9bf7-017bfefe1379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5e04ce-5aeb-4beb-acaa-538e6cf7c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4b8056-8960-4f80-8939-f1871e8157bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2731e8b8-e548-4788-9072-93818567e300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326f1fa2-f1fc-474d-aa62-e658040fe715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e0803-e8fa-4210-a61e-cb3be99229a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfe0d96-58bd-4750-94aa-e7b007c080ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c7d7ec-237c-40e0-b29a-98e6cd230693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4891cec0-3719-4ee9-be7b-2c1b7430c64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f04d3e-af1e-4ade-a6ad-d868fec2d1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccebb35-c7e9-4393-8cfa-a10291b2f3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57907b6e-90b5-44b2-8a7d-b12352bcc1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cea602-db4f-436f-b1ec-95c56958252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319e31b4-e4e9-493e-aa44-901ae953c270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e956a235-638b-4aba-8ac4-8bffe98eb6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd12719-38ef-4432-b401-28a749ed4a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3842ce87-3fb0-4fa1-af50-e75c05322084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9827f8-eec8-4f35-9a0a-ad7b11721fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791253d7-d6fe-4511-ace2-4dcc28138804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0c73d6-b9b3-4fc1-b9bb-ac045337401e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a30dd0f-3296-44fc-ba43-f9642131a885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c903bfd-93a6-44d6-8491-80d1d4ab08f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786f0970-513d-4dbf-9d8e-94e232b6bb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0301ac8-af43-4b9c-8f6f-125e77344fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e08ed8-d9fb-41b8-ac46-2682f064dbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb29efb-fbe2-444b-97d4-01d728d035c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5ae2e9-143c-4e5d-a9cb-b6a4ddb3771e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c69977-5f78-41a7-9151-8b7ad7a0c9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e418ffa2-fd55-4198-a53d-b0aac1b43c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2fe74f-c75a-46fc-822e-fae3325085a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928254c3-440a-4ea4-bb2e-65b7103a6895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101330f4-a4ec-4e4b-a82d-bbc78eda899e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a6546a-f80b-48ac-8ba6-c4ed9806b27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbef44a3-ea34-4797-a860-8a31a1d3d251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02a2334-6b0d-422a-b16c-7d87ab081328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b94fec5-2b0e-4af7-a394-34bc24103683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ad6d0a-84a7-4997-bd3d-d307a37ee9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734939bd-92d6-441e-8dd2-06a7e89fbae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14204d4-3f47-4869-a18d-21234451a6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2da2a85-7acc-42a4-b77f-f5de4d9e3a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53469e53-aea1-4f30-bbee-752d97b59ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c950951-dab5-4dab-8185-9c73db69bb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34070f94-f98f-47ad-a7b9-e3d0b635b96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ffece7-6a90-4626-83b7-c8791cc1ff7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2e206d-ca93-4b4d-a6d8-dd9ca9bf0f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6030fb50-476c-445a-a98b-e855ca21e03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ccb99c-e509-45bc-b746-6929568ca4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947ffcd8-2494-43fb-8d5f-7c1dc79f9db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42030595-6451-444f-92bc-b2d1b8a39d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17871fd-e34a-4e8b-9ffe-aed537080b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5c3035-79c1-44ae-af5f-c25fdee7cd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b11600a-0b46-43fd-97fe-dc4568651611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc02b39-2a04-4876-9d3b-37a4ac735fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aea163-d565-455f-af3f-7e97d70c48f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43933f46-c3cb-4b4c-a12a-6b7c5af579ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcc103c-17d8-46a0-8992-f6b4d7d2a7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61dc89c-18ea-4f46-9f5b-07c47fe183a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59aac1c-87c3-473d-8d94-eeb3e01fbbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2efe4c0-5a2e-4ea2-9fc1-639af08cd9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533676dc-bc0c-48d6-b5f2-5384934cb9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a6acd-b244-4451-80f8-68555326e85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4881c6c4-f6e4-4b55-a838-3513f8f0fa01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50b13d8-234f-4f11-9712-13a82244d2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6823691a-bf6a-4ec1-8b7d-1fb5ec71b02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc205d2d-5899-4529-8a8b-2ee3a55ce350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb0f1ca-d251-4591-a9dc-2a72310c3498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42cda3a-28b7-432e-9d9d-3844e9c7e300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d5fbf3-a8f1-42e4-8fab-1b2875136e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cd96d2-aca3-4fe1-acf5-b3c41eeaaa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7967e4e8-2ec4-4b72-952e-27b80adabab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c0e060-13ac-4409-b8c2-a8bfe2c1a049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad455d3-7907-43c1-8230-e4fef407f058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14726f76-3b0e-4214-81cb-21b686883724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c35ac9-c0bf-4845-b425-db292fbe0013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaf57b4-1114-4124-a48c-2f3f74128046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05e5663-9c00-44ea-a2fc-b1aaff2cd7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decd6006-7ac0-4bfa-bf3f-3a4e06880099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfa9457-9e72-402c-9e2f-8c59777da81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538978c-b409-40e9-ba8a-5533ec89fb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919949b3-bd08-40ff-b838-104486d9c13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e41fc7-41cf-4aa0-b8ad-98cdea2478c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7280d070-95af-483c-bdfd-01b403a26742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e0267c-56de-487f-b002-16efbb2136a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2b3a3d-8a22-413b-b22a-b7fe7f648c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015b217b-e5af-4ac4-84fa-c9c8b28bb56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d060e08-a0a8-4f17-b012-fa4f2492161f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c68d048-4534-42c4-bf0b-3a2714b5fbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbfbf85-1c9a-44ce-ba3d-8b6960f2fda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d15637d-f71d-4c15-81e7-7839e6b2a1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942b9b4e-061e-445c-97c6-887087afc8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b15554e-4d34-4fd4-983a-0aaab0e94e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe3b4c1-69b5-41e1-93ee-58058722f1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b552e8ab-4c6d-4442-af97-00039d661c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272e3bde-2842-4e7d-b418-438b4128f959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02f20c5-4b16-4f3d-aa01-ede888fdf131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412eedf1-4cd5-44d9-8dbc-08b36b268123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658f029d-d040-452d-97c0-81f1f786bb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776b1908-5436-4c0f-971f-1ef307f36ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385b466b-41eb-4237-9410-df8da9b35566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0e3f1e-7e52-443d-9a82-65a9a7445114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ed0686-33a0-409d-9c23-8cd916c6e367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad16f9c-7f42-44ba-bdd0-2d233cd19336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc546ca-8c0a-4ed7-a86d-c751d4abb34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba4d548-16fe-452a-a790-05f89f34d9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac46d7e5-0bb2-4f10-bff9-ac1f0af383b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3c1c7b-b272-4994-8c48-d99c24219566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20feff79-f30b-4007-a93d-1b2f57e94297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dccdd3-a352-4f0a-865e-1389c03c35fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3ad9d6-33f0-44fd-930a-97479c48a18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7153cdf1-2788-457a-b3fb-5aa8671b16e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2c5cce-f306-4146-80ef-356ce22254dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1cf860-1f16-4d36-b839-23f57b990098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09179c51-1e5e-464e-9531-754faaa50081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddb7c26-b472-4bf5-979f-423e2fc066f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c6390d-6c97-44eb-a93a-a0a44eb041f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45465020-6c2c-4eb7-be74-1e2ff1127f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faeea9f-f6a1-4d39-9055-2fd11f7c1128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e28d5a1-c126-489e-b685-23abd337d79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0184ed-f935-4279-88c2-fd88e9a3cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a5765f-1cbc-400e-b092-5d05c51a1682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1ecb0d-b345-4887-9f29-67a06b3d44a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16db567-f925-4f20-9568-2067a87ba867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b0c9e-bd92-4e06-9a07-3fb0f2af8f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5db02b-c936-4440-9f1b-614d7030127e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aab1832-9900-4e2f-b94b-139fe95cdd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8148b2f9-9e12-4ef7-90d7-bf21c4eb9b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b7b075-c90f-4dfc-9bb8-3f9e8e09e649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f46f4d-94e0-4617-9559-72a4ce6ec898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ef82c9-0d28-4f3e-8fe4-34ca9c41101a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f918deec-717d-4510-8347-fd77aefbee93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12289303-8a58-4a83-825e-6ab7a02b7450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b570c5-1fac-45d7-b038-59a94e5c7daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfb77da-c9c6-4619-b0f7-9824e6a2ab95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ec2c87-829e-4f5a-99fe-11754a041b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803e9cc1-30ea-4898-a649-b355b84e3c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539d85cc-8a6a-4301-856a-265f335511c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9531892b-deb5-4d1d-ab5b-b839b80994a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896b54ee-f400-46c3-aedc-7d4d38e32d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda27908-a421-4170-8f1c-5cac46759143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159a7bef-00f6-4e2d-9a12-593319ec2640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4d14c7-29c1-43e2-a935-2a156073cc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cf8633-3cf9-427d-8ac4-2a44bd248e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cabfa6-875d-4801-8f36-fa113b8e833b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b075bc8e-6736-4531-9f65-68b708fb9a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fb794c-c194-4de9-bf55-9c4451ce2659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f15113-9543-4ff8-87db-f40775daaa79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41006c28-c829-4ac8-bc3d-f8c7709e71cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6aade0-a181-4ce9-b789-b0fbd9b93589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04724313-ae49-45c4-ae22-00ac059aae02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3a9519-f6f2-4541-9348-7ee3a3930b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547a9447-cae3-40b1-8a4b-f005fcebd80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82346f37-f710-48ba-b411-709f8fe57f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3767436-e05a-4cc8-912d-6223998ac904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b048d071-1e31-4a88-a4b3-24bc0632cb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9721d245-c271-477b-9ca7-1c53b08320ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d31540-39b7-4ad0-aed8-a90304af55ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca94f65-88a8-4dcf-b09d-b8d4f4440eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace8ca17-3f4b-4f77-b060-b7a403946419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4909e7c4-aae1-47b1-863f-a6e93afbf403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9656fd5a-a31c-4f2e-b8b5-fcb3d2b9c697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa8e1b8-4ad9-4a0d-9ff1-50c62d6da1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7122c134-71c4-487d-84cb-85651e7d232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8686a7e-7d0a-487a-b0f6-9061c84b78b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.185.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72f79ed-d943-46fd-be0e-358f84a024ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a74fa8-672b-4504-9518-72da12d6c233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfa2f11-530d-45fb-8cb7-832eacaba81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4baeaa-30b6-430e-a032-c3bfb93306e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.101']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2d0d55-3de6-465c-aec1-15250b7bde7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22bd92d-dec5-4894-8d38-1e296e5dc100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80e9879-2dcb-4d21-9e3c-d9a500d403ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b5d2b7-9e3c-4700-94a0-721521ecd465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5a1cae-7f4a-46d1-b429-2e2a5165251e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690981b4-5a34-484b-a9d7-51f3f2a189d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3a7a88-1c4b-4205-9565-0eb4ef1a46ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e6bbe0-c86b-453e-814f-b3ecffc28d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3ffc09-3e82-4765-b98f-df39609cc02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754d0431-cf45-4520-a35f-9a3ce74b9920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9620aaf4-75dc-4c37-ad65-f7d6d0285603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bc1c11-ecb2-4649-9c22-118ca869277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94322b18-68b1-4128-9d97-3ede55989eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013b5e03-4a29-40a8-9732-412cb62340c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47700027-8f44-4d3a-8b6f-2898274ff794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e36be44-b0bd-4354-a35d-575be4bc86c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347665f0-9257-48d2-9d7d-67cd89f32c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1a12ed-7f0f-4868-b931-dcfb0a4c323b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1d7e6d-18a5-4c9e-907f-05c46e4ba7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6497cf7-7462-4adf-bf10-316ae37bf48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b117c8-c9d4-4799-ae7c-b20bbe3d324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b9c1ae-7441-47c7-8f00-8a37d445f1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f2479d-0e65-4622-9f4d-570f8e2084ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5985f30d-356e-4cb3-aa6f-020ff1bc06e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a9605f-2991-466a-b6a9-546309906536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b977e1-b198-4284-96e9-16e1834e8083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4640cc7a-6135-4050-84df-a20d10cfeeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2be1fe-4186-4fe5-9102-c09f266817fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b282d5a-5e44-4d3a-b0ff-1ab5d20ca7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d231eae2-95d8-48e3-860f-47779c6662ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c53813-366a-4d24-90ca-1ff67bc6c177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9f3803-6030-4750-b1a1-3ef08220b8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503a493a-864e-4ab4-9898-85e6e30c13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea92307a-0fa5-4a42-ac9d-107feb976be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3927fc93-619d-454b-b0bd-49d11b83ef32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a71d754-fd6d-4997-afdc-4d7fec19e22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9efeca7-cc25-4189-b077-160a766def27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa171dac-ad3c-41f3-a485-898d9ff9b8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76d1545-6f46-4e2c-9174-0bcedbfb228a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a385a17-3be1-48e9-ac97-8fdcdaa60049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad38c49d-277b-4e86-bd58-2809771f3897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb833bc-faaa-4c15-838b-25ba0adccace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9c7894-8324-400c-b43d-44b64ebf2256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e2ba02-50c2-42ec-ab9f-3a6abe39a1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbb7666-602a-4bae-a863-280db6eab10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08a9595-ab29-48f7-b395-fe0d3a1eb126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe671ad6-942a-4053-8cf5-8b80b5a995c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c06f5b1-3fce-4392-a1cc-8ca29ad7aaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1de2df-5b6c-43fa-8e62-3509deee8999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71299366-3f95-42c3-99d2-8d527fcd2f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b241b55c-e929-4962-b463-085b2131eb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53ff3c5-2b1c-478b-b867-976d57bf9f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b934aa50-382b-4019-b8ae-96f2a0713bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12693d44-247a-4d88-9a6d-f936b9924953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c5b325-a05d-4066-bb8e-3105635bcf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c32e72-e91e-4725-b336-23faf5fe2970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbd333b-7aea-41d2-a5b1-489ec6b8194b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f54ba3-66b3-414a-a09f-e879aeaf29b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bd3c78-d538-4408-925a-fd907419f800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eff3e9a-6ee9-4eb3-8042-48b3770eb3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e1bd2e-b5b5-4b06-91d0-ebdaf8f1f3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.160']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ce3ec2-3a3d-4c19-8f87-5f394ea06926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636781d8-e53f-4795-9b16-e50cebb49053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.162']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce73c16-fd79-4142-992a-598f3b4e69f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fa87cc-9965-48f7-8c0d-e8a1a27ec46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe315e1-a53d-433d-a184-e46ce164bad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de838e2e-bce0-4bd6-9da8-982c5465f132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f711f2-8226-4b8c-830b-380f36583e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e6d8ec-a9b5-4a3f-9d68-300dd02a8ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b6f2f2-bacb-470d-b685-13f4343b180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c69134-7265-4bdb-85cc-630cc6771786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b13041-dc4f-4779-b81e-978fbeeedaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb61d2b-d7f3-40f9-915f-0a719e89cee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8084a8-3f99-4642-91fb-37cd4faac0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a770248f-5a61-49d4-b292-115926220560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba56ca14-b5db-436c-b94f-94f38cd69357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5384d95-521c-472b-bcaf-c135a9ee1b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e06001-1f68-4014-b167-cbd6bd59e82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca39dab-5f1e-42c0-a2ed-101098aa2b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1688ea7-419a-477b-903a-36d537d08823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d52077b-f9bc-4ae7-9fba-d63d8c8ab7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.180']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b4ada7-7a00-40bb-b123-897aeb77888b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef18451e-da0f-4ce8-acf0-0aae12bcb428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.182']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff90965a-0c07-459a-8b95-d5278cf117da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93af161b-5629-475b-9519-a38814dbd248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2b2146-67f4-4903-85f2-3d7b49be8ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b599b8-3694-4402-88e2-63ec8de075ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f568fc0d-5754-4b4f-8c54-c10da87c8d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2359f2d0-3c3c-44ee-bf2d-163e3adb39c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d76df3-99bf-40f8-aae8-1236045e32e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e5b11d-001e-4761-9d4a-016b5e749a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2551026a-c018-4c8d-b698-90f706ff6a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ab3330-61e9-4b46-83d3-13bd86d4cca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cab554-141f-4226-8cf4-14a39213d0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a99813-9c2c-4dbd-9462-d4511e4b4e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69d157-0704-4e7f-90ae-e1846b7b63b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31875b2-a6c6-49d4-a1e3-ad957281d95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c94de-b353-4bca-bcbf-8c1d447eab3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c9f73f-8213-4e8d-a5cd-72ab1d35573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846e7fb5-c1a9-4fa6-beef-5b319eae4b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1545434e-5751-4f39-8de1-b8a57013cc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0159d706-9c7b-47e8-b7a1-70ea77d7c836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e401ae82-e563-4c1e-b3aa-c81784bdb73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a75529-294c-4c5a-b758-dea5c6a65319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76eb0d8-5541-4667-bb6f-b35d737be065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4214148d-989d-4d14-af14-e1fb5a5b547f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72278087-bff3-4012-abae-83b525276720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838ede16-be41-401d-ba9c-33d703055e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b14d406-f060-421c-b7a0-72f2994487a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f172f-5e8a-4875-8b2a-3ff94236b11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4a31fb-4bcc-44dc-a967-5229aafd8192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d56474-06ac-43b3-8664-9620b3dfa468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c4ac25-1368-44bc-b51d-b57cc313457b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34af69ed-26d0-4979-96ce-61871435a6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1011f8d-1435-4c19-8a7c-4fd7cafb1507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a85a24-c041-48e5-b46e-72c01d53b82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4246c61b-470f-482f-b50f-25eb23a36ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce6f991-5a7d-4e8f-9390-12f099b951ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29f276b-f4f3-4760-97a4-f67de2cb1394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f14f55f-1154-4476-8e4f-c3af6ef4b7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4c75f0-bce8-462c-9a8f-d670469992e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578103b4-e490-4924-8c92-444548d1951b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfb913d-ba24-4ddf-ad7c-acf30b3c5751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476f9e27-7345-4f83-8a17-388e1fc94167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9efbb6-9af9-4a62-aad8-4b43be92b1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73e97c8-852d-45e2-a292-ecacbd910e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7d137f-3b27-4dd7-994e-76014bf80b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae447fe-b4cc-4e2a-a152-bf3ed3e5443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fe5268-a4fc-442f-b9be-bb7ca5b8d1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2b462e-1a2b-45f1-8eef-fd0ce04bd2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eddf63c-e5d1-4425-9a59-9da6675788f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8afb686-e390-444f-b261-8aefb1648727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fefa71-918c-46ea-8eaf-5f8197f7b62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a380f9c-e3f5-4758-933c-c74319fd41d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7191c593-eb0b-4b97-96d9-6cdbcb267a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd4658e-6451-44f8-897c-85d014e489dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2445908-0c44-4910-afa7-40ebf7a07365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14229328-ac6a-4530-bd8f-371ac6069c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c628c-6af4-4624-8ca4-062ba4d31242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23538205-dd8f-4e2f-a380-d625672668d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c529b13e-79ee-40ec-b8e9-1df732d94c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fff29cc-31bb-43e7-88ee-c9534f7e1b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd8bbda-5d93-46e6-a7c5-7b847359af6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f553213-14cf-4e66-9dca-71bf7b99d6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a06ac1-6bea-428b-a679-df1ff8521300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6881b0-790a-42bb-9be2-a6fe76fb8687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c15d846-2579-44e9-b51b-7671a861ffc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68de937e-93c1-41f1-a112-1e2d70142e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68173b40-e307-46a3-930e-1de1609f2ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76688f7-fc81-44d5-a0a3-d17e67e8780b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2825e8b2-1b15-42ac-a819-440f9210a73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518a5460-1cb7-4436-9671-4264d9123b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c95fae-cf18-4f3f-87c5-cf8012893f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e833f9-126b-4884-afe6-285bf04e6897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57012cb-adfb-4528-9daf-e2b921a4c57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d026a5-7596-4bd3-963c-8b6ca53f9251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b54898-0f74-4d00-87d6-1f38742abfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e370cd9-bfdf-419a-b5c6-f1f70c4f3a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ac632-ba14-4859-acf2-8fe12ae8875e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feccec2-aa32-4653-8d49-499c1ea4f495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff4cacc-af80-4f8c-b602-476a41906d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fc74e8-a419-4bea-8713-4c9355825db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb20d865-5221-465c-966d-e425afd25c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a08edb2-0ac8-4b50-a42a-c71cbadc2dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b203431a-4dee-479b-af64-a99ab4668281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98e07c4-9d47-45b2-aef4-6b5a04e1a537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231fa077-044c-42da-a712-1a62f6802679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b100d1f-e939-4037-b6ff-3e37cd11160e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab5ba1b-c854-4c5b-9b49-87deefb8a580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed356de9-3e63-454b-b7f8-930f31354d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3ec35d-e67b-4356-b457-17e2f777f3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0be6f0-46bd-4ee8-89be-69955e2f7482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb8dfc-3a09-4ca3-828b-1721e884477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3e5180-6e9c-49dc-a777-809110f093ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6aa5e66-5b75-4218-9c18-a5c4a097a5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c643574-0a75-450d-ac43-bab7a32b6811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae729872-56e5-41fa-bf87-ff92cdcf0543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d63ad1-3a87-49de-b985-f7dac8b027cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0df7cbd-9f4b-417a-9a33-472d4c6a7f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b019a8-b864-41f3-869a-47bd1d53e9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e2e7e0-8889-4ed5-81e7-499a0c365065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb24864f-bd37-4bf7-af9a-36487e617e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f18a3b-a9cc-4d9b-b7de-1af11b9ce3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c6f000-4466-47d4-9f1f-c13ca1e87e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06a69e4-aaac-4767-aee7-99d0e8eb2943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46550da6-ee6e-4b5c-9348-a09a2fd38a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dd7c90-531f-4d3f-9927-dc2263e76240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928ebb5-3d47-40ad-9871-f2032a8e2e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a2752d-afed-4320-88de-5250607f537f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928c6c23-a370-4a42-8e3d-5edfb07a4914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b83dbc7-655d-4bec-9ddf-81e3e46ac33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674b3ef4-ef82-453c-8e09-c6595ef986be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c9c23f-9c14-4645-b5f0-c15d6f75d33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9215ece-08bd-41a5-b943-a6669b45c268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208a0552-ffed-440f-8b6b-ef8d5be5f90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be54477-48b8-43ab-b449-2b6850c9a53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.63']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331373a9-e07b-442a-98cb-632744a023d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca85d197-0456-407f-a690-6c5bdfc769ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2dc40c-90e8-4cfd-883d-900826c88cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f5d7c9-fea4-46a6-a676-d3b4ce8ef3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ff63a0-b211-4ee4-95ee-05726011162d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9f0132-a3e8-4b58-8d02-a08357ac8460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8abf8f-3ca8-47bf-8b8a-5640ddf4c084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7180e4c4-46ce-48f7-ba88-2f0f070d15e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6f8d54-319b-4e20-bf1e-a668906a40ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e9bb25-715e-471f-9061-906d8a4cdff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a68ad1-875a-480a-ad06-b87e927c07fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8613ab-3138-4ef1-99ae-3d897a11159b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3777f0f4-3544-4a37-92ce-fea2bf7808bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b20acd-b9b7-40a6-94a1-7cd055f96b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81754f5-0c4d-496e-82e3-5c7e32807f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f89808-c57b-4eeb-b163-8dd4d410c70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537df06c-3a92-4fe6-9d2e-3c53416fe249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be957ef-fae6-4c88-b01d-49109f37a30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec9f1ce-dfec-4a8a-9940-5ed240b09b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b8cbbd-7f45-4c34-aa8d-746ccbf9ebd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bf2342-e585-4fcb-ab5a-1418747bf761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87838447-dd0d-44e8-9c4c-c477a36ac8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9129d2a-9f0f-40f8-aa18-fdf0c1fb55ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e5dd7-66ee-4805-bb35-9e1b30407d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97882b07-2a48-45fa-acd7-b13520b1caf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07952723-5c53-45b5-b188-63cdeb94962a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4891bb9a-90f3-4e99-a609-ffe7413a1680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd175baf-9ef9-430e-bee6-ca9865fcb0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515f4e13-1205-4113-a9f0-b6b228e972ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5de1ab3-bbb3-4537-a9d0-8c2c0868ac09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed10870-f17d-43fa-aade-950dd0587719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7a514f-c55b-452f-9a45-15989a26ac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a910ab30-ec5f-4176-b3ae-add18000f84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f05b16d-3865-4cf8-beed-1d16b1fdbb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f254c18-f6ea-4d64-99a8-9f6c355f221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac427931-48d4-45f8-8400-f4bf90269478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.97']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8182b8c5-9ad6-4f30-85ac-a5be924e7667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a613ae3-f310-4974-a852-ba1222b282a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.186.99']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d196eaa6-c6d3-4a81-bedd-5673db01cd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.174.235.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77f489-0235-4dfc-902d-2f641d67d94f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.222.95.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3243d258-5a6c-4b0f-9457-0fe3dff08302", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da931d-0386-4472-8c6a-c8819f3082a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.49.122.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39406c9-3387-4c26-84d5-cd1af872785a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.84.188.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab00f442-b9ba-45be-81eb-baf8713ef613", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '84.17.60.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934cb7fd-e5f2-429e-845c-51258d02aa8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273ad2d6-9b6c-444e-b8e5-f2bd161dc168", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ba5e6f-7901-419c-9a1f-b3d94968a0d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3984def6-bc7d-4dbc-ac2a-486c7424eae9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16918353-4f3c-4ab6-8e41-ca208ea12bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57f16bb-1fe0-4b11-a86e-cc59376a645c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7924be-f9aa-415c-a181-a1e1c73d94f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.139.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1487b5d4-c5df-4db8-a107-5986cb2e7819", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.249.77.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc139c1b-e800-4c6b-b064-37936034a522", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.50.73.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2385d8-67e2-447f-b3fd-26f2ce909f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.70.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955efa4e-3fee-464c-bfe3-3066672ff6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.71.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1160b80d-248e-4b41-8b53-762cfaae2e25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.90.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740404e2-ac41-4f81-93ca-5485400c65b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb18746b-6d08-40d8-b23d-1045c8b4b6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552ae1b2-1de1-4ef6-8623-4e5d0ae92596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c57b57-5e3a-4dea-8365-ad9c70b06aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9070786-a060-4af0-b72e-6010ac7021ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30ca4ae-6fb5-430c-8280-9262eaf6f89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740a7ef2-cc6f-41dd-b107-a72f8b541e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.114.206.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6b8bc7-4d48-406d-aaa0-87a34201c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.5.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce74006e-820c-4206-9aae-218e4efb18bd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.185.55.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6986f4-d6b5-422c-8860-9634a9ffb48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.192.137.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6621f333-41e9-41c1-8093-4bbcf3d9240c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669b225e-2a54-4b1a-8cf6-03e9ab382205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e5bfd9-5d36-4a61-9966-8ae3b8b08132", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b06374-714b-4e83-b55c-a66055ced9a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4693053-6a31-49c0-848d-187d86d607c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1071c68f-8c86-41f9-a498-621753f0d8b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242a1b0b-bf9c-4ee5-9f04-d3fac05491ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31f4993-7a21-4f7c-825b-9b8b8659b0e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d65db6-2ff9-47fc-a355-be609d2b9838", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547f44de-378d-4acd-9872-59d98a3ae1f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d949a1-e028-461d-b83f-df3ce0279be5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bdedb9-3887-4b78-901c-7fa6a4b23afb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ff8062-a3bb-424e-bd1e-ed4b10ebf1ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32df9cd4-5393-488c-824b-9e9a61fbc5da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d911ccc8-4756-400a-9e02-0505a486e905", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc079b2f-dbb8-4d37-8826-ee89741ebc66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724c777a-b002-48e3-96e5-d86c913e81b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60ddd1-e8cb-4964-9d6d-c7a84ea7818c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b917b758-4c9f-4272-bbda-87e741ba6a47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f93a2d-92bf-4208-b987-42ffc99b1755", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b38d63-eb36-42b3-a669-65326f9aed98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568bf1c0-b1a7-4cdc-ba74-3857e7e9e073", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c6c72d-9b69-463d-99df-5b86c10c7eed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cb689f-c0ef-487b-8aeb-52299ce38c13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c83748d-f3a0-46e1-b22f-d51311bd7e8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b722d813-51b2-4c00-8c8d-5df56ab49bf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e94cbe-243e-4643-9161-883c619c1217", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdd5763-3d81-4196-8211-1b077d7dc084", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4286699a-dfe4-4299-bd6e-3faf33c5f8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.214.41.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2a31aa-f8d5-42db-9473-4619282c46d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.59.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08149d0d-09cb-4893-bc99-5294b4dd1006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604e1520-b725-4d82-a394-a60698989959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c195fb5-b2a4-43b9-856f-4e2406ad36b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6606b6c7-5078-4515-ba24-4312557362f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4588c3-3215-410b-ae5a-a02de98c6229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc43297-e662-4ff6-ab03-4e3dbc21f785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e63ca9-3cd3-43d3-8eed-bca7bdb0aa37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6027ff06-3b98-4fb0-87ae-103f8704c736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67749d3a-7476-4453-83ab-e539bdafbbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60a81b2-36e0-4818-aecc-d026b054c974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ec0b60-0432-4c78-b893-8d2f8cd5507b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6c34fc-1a18-40bb-9e77-628ca43e3757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fd5ba1-4d31-4bb6-b80a-b0257794066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb6a1db-a234-4b9f-b2b3-bcb0f5f7326a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d88496-8eb0-4f50-a984-e921ea47ff99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87ae093-f3e2-4b22-87a0-e166dbca5d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20ea75d-7cc4-4c11-95aa-26e5593a37d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f0f143-19fd-4747-9b29-6fec03d02cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a6f658-fcf9-41b5-becf-7f08868a1a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd058cc0-226c-4df8-9b6d-b883c44b365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db2ab50-03d7-449b-b746-0a190a164a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7917bc96-dac7-4a59-8fcb-f3d6259595fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf68c90-aa0e-4c4b-8787-a637360e88a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a1d4a3-49f8-4d06-bd6f-5e3c85e1fe18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f056a-2947-46f2-9bc0-78a665bb09fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8f2dda-9665-4c0f-b84d-18503e034400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8602fbd1-91ff-493a-9937-1c29bd86c511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f620f7b1-479f-4910-aefb-5d4ae38d5545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7072126-14c4-4c49-b007-741b1c9f60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aca862-da34-446f-9654-a652d48f5f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28893220-7eed-41dc-b6c5-557f4e5ced0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098843f1-5256-41d6-babd-6f8edb3368a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d897083a-61e3-444d-9782-f95a7107c138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6987f778-9033-41fb-befd-2e4e8d91b9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf9c48c-1ea9-4430-88f6-3a24d4ed94f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95aa812f-4c7d-462c-8930-232b9168e287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f373b7fa-95f9-4d95-ac61-548f90d33078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46544851-0cc5-4d6c-b9a8-38f95383c590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c099c53-2c46-44d7-b080-472703ecf0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba41fa96-7a85-4fda-a290-da31821c01d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519a9c86-38a3-4945-80b1-8c9df317ecba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecc022f-4573-4d05-b11c-979f395c4fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f48e8-7d7d-4f11-89e7-2944654ee647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9359b16-9e3d-4d72-a8c6-59125cd351a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ea0c9d-cd7a-47d2-a787-54af29f50287", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d480bee7-3841-4409-923f-96efb513c15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5b91d9-ccee-4cb6-82da-608e0cf071dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14efc13-1ce9-4230-8342-c3ef9258a4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04eb67f-394a-4b7f-82ce-081a83556313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd28b91-842a-4568-a2c1-1150193a438c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.244.130.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c069f5-160a-498a-8432-7bdb4b36b83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.249.7.100']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be6f6c0-35e6-4226-9828-c04a0015a5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.48.238.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c543fb38-4d8e-4ba6-8e93-52663c20e953", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.127.231.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eb4d6d-515a-4f7e-bfbf-a7d37907d977", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.162.208.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5639af4d-fefc-4fb0-a78f-ef52da6f4b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.181']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1dbe32-7475-498f-beb4-5399969e76f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d9ddf7-fc91-4ab6-9986-794e6852d99c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588071bd-ce8d-4ad8-ac53-a450396172c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0192e7-7a67-40ff-aeac-7936c7e8e62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a36bd4c-5a74-4823-bae1-6b59a3b50135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede29741-b400-4d86-8e2b-7a0b2edb4676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f72124-6270-424b-bdbb-c1ae687f0878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.198.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139b190f-861f-4616-bdfa-d3f3787cb4fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.74.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ea7cd0-1bdf-458a-b4a9-dc500fb4b7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905dd264-5761-46f0-a823-dc4ceaa5cf23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.248.44']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443296dc-7183-4ff5-9477-04d9cfb16f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.229.252.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa5247f-ae1e-4f76-a235-b061b76b59a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.161']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153f6cd9-954a-45f9-9704-c1e34f63ce6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.244.87.55']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689aff1f-144a-4235-a425-7d851fc9ed05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.128.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc43cb8e-2c22-4869-bd42-3465a9f4b3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.8.44.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8aa139-572a-4afb-a835-993e05c3a969", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.147.30.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44815220-371e-4013-8d2c-980bc3bd5ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.183.118.45']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14729f34-3b53-4104-b6bd-640d465b5373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.200.174.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839de1ae-d290-47e5-9124-99e97d419304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.22.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ae1796-6a80-4acb-a628-e3ddf9c3740a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.203.8.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8082216-649b-4e14-ab02-ac013d65540e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.204.254.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d637d1-f4c0-4d87-ac45-3271011440f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d7458b-e3e1-45af-82f1-db87123095a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.243.47.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d0c4dc-a8b5-4370-a747-ba420da3ff0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.5.89.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b0d3e0-fb00-43de-a72e-2e7a73303949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524c4cd3-e3ba-4f92-8003-85792994bfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8241461c-2890-4f80-a40d-5e2d228d00b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.106.1.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576a466c-b7f7-4f99-a1da-0c335bf92e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.124.104.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cbeb61-36fe-4acb-a480-29bcc8d8c4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.126.211.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77b48ef-7c40-43bd-805d-e805472e6699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.152.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e86408-ac8f-43c1-81df-0725f7add99b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.130.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10089497-c58d-40b9-841b-247e68cd52d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a035f481-f91d-400f-b33d-2ea88103edba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8f0917-5295-47ba-bb44-adc6d6aa26e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.211.145.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198f53a7-d4fb-42c5-9bc7-5bae5a76dda9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.214.148.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d657a9-96d1-416c-a734-5b7b507463ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dbf541-96ce-423a-97ee-79814400afd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a25a509-7399-4e9c-8dd6-ff274ef675de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e89eeaf-4a49-4a8b-8bca-1886260dafe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c01465-49bc-4526-9fbd-f16fa8f0ed8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a21540-94b3-4856-b316-b00eea33cd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3f9b2c-51a4-4b12-a48e-5ab2c8f4a8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9301ed0a-89f4-43b7-9a18-bb53dde7f883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b69c86-2173-4e01-b3f8-f8f05cad63a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8186622-b888-4902-9a7d-5e767c14def6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.181.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de97621-39a1-4fc5-855a-2d989d9670dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.6.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc6a70e-abdf-48b2-8e28-e6e0123ae3ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.92.21.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a51639-969a-4eae-8237-60afcf83d7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cb9bfb-e9e3-49a0-a431-58e02776a6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275f514d-8c40-4e02-9fde-ff0380444fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a175712-98f5-4cb6-a98d-382b38b8eccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.188.245.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be96637a-e226-4be0-a9df-c170e198408c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.189.42.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc3f052-9166-48fc-aca8-99a02b362860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.229.186.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbf4593-bda2-4770-b676-a29164f4c9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.84.168.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad69fc34-2017-4a57-ae59-f8d10a3d4d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.109.113.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e320f108-811c-42c2-8045-2d9de3002a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.123.154.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afcbd41-1002-49bc-91cc-840fd88304c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.124.130.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadd168f-5183-458c-b3f2-a17bce5268cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.138.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215b8bd6-a882-43b2-9847-0682367e5385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.146.34.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd337ccb-ac05-45d6-888f-0cc977ce5520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7e54e3-dd33-4d72-a928-ba251e904392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5c0e2a-6051-4d7c-9abb-f035367b830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8168e89f-a308-4088-8954-72f5c7eaf7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4f0110-7c3b-4b94-9a8c-a00aa9fd27c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.151.137.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe60292-89fe-481d-a5bc-d8fea047d31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.175.246.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf6cc46-0bc5-4f94-b306-b594f6aa8e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462ff395-26c4-4989-9c25-d7ff11427ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c76961-46ad-4b15-96f4-aba0ff0b1a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b40aec-e08c-4462-b13e-bd95fa9405a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d346c7c0-e9d8-43a3-b2cd-53e2f9e56c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e9e7b1-17fa-4fa8-9334-0514843ef78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505da849-e5e6-4605-80e3-457dcf3b93b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab046b-fa7e-4987-8372-32253dacda20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc811e-c151-4853-b017-88bc138aeb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a3b911-2caf-42ee-8be5-e3e7cb2900cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8ba71f-dc43-4c9f-856d-4a38031affbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932f6f6c-2336-4066-a868-aa20262f0251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a215b3e-f59b-4e76-a9ab-bde52a474f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d987074f-a936-409f-b30b-3e61d937235d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a7b4b9-377d-4b54-bb4f-e45c508d5272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a96f9e-8e48-404b-9bd8-8bbc085bb106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f65116-22ff-46e2-a471-f0688660b49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f1a3b7-0856-4c41-b53a-39b7cdfa88e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667c5cb5-8cae-4c63-a81d-4ad519467bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8173e182-06ac-4ad5-af69-4bc8a649c511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7edc03-ee38-4c3e-94d4-be59bad8e847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f50b12-4116-4db8-91a9-d1be4c34b3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf07df-acd0-4b9f-94e5-3b9f7921e314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63a2e0e-b767-4f7f-8159-f4ae29713f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e76c85-d5e9-48ad-a774-a54b69fc5d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d59e96d-5444-4cd3-a4e8-d7529368f3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cef039-24bd-4796-a616-0ff912af4ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773d681d-c159-4bce-a4f7-9176a7068a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1db00-1654-4574-bf2e-e15646077c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e68ebd-e35e-4c93-915a-a5f5f904244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b347201-0c43-4788-ab1c-f9b7b1b787ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591b7afe-ec2b-4024-bc34-b8ec3f7851b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7678c19-7f33-4598-9496-dfcf90e61637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e828c01c-e71d-4921-b235-ce571f872342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045b2b3d-b575-4feb-ba4a-8bb02e29e00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156634ca-8a18-45aa-8522-531dcd28b6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec1dc87-23dd-48da-ab18-c6a23c4036b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eceab31-30a0-4b71-9fa2-72392a58a327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f7690c-b881-4c2e-9283-711ed5d1780d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d2ec39-1ed3-4ad4-8589-d9f39172594a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85a2ed4-4b05-4d1d-a1a4-85ab15496c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f443dbc1-b1ed-4cac-8528-0dc7e12b5ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20404e6-1a95-43a6-a6ac-5a745a18bc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56b5a2e-046f-4c10-b350-b1d92792eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb4a556-0c36-4c8d-b233-89734f2e5df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eda9af-e9a9-4b89-97aa-bfddbb1a2da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b38261c-4a81-4062-bc65-b85bd8629ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af84f4e-a2f6-4c3a-89dc-7f4e31c3f220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c822f5fd-755c-4959-98d9-30b0e9724541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f8663e-e297-44e4-bdf4-b9d81195e0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd41a2a6-4f12-445e-925a-35ca47663576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3104c4c-8e0a-42b1-9de7-ca80b56beafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3419a0b-2300-46f8-980d-0e4f14f8fb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0c5b7b-29d7-4535-a9d2-fa0ec2fd57d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532723a-77a9-49dd-a509-19505639d16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a69183f-98f9-49f3-a369-f110911de4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f687cd9-2e5d-4ebe-abc3-00ba56aadb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713b7aa6-117a-42e7-a441-08b2c86ffc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68885d5-6124-4771-9db3-20370bdff9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19217266-355e-4ead-8813-041520e1f272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cccb05-c871-4883-af36-5930d74b238d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5506198-c115-4509-a92a-cbd4f6fd8506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7940434f-b660-4146-9577-f2ba99f4eb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a83626d-9665-4f67-950a-9f6f7f5f18a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c5cc95-23e3-4b74-8493-0f602c8b94be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd84a8f-32bf-4dd1-81d8-d7a6deb2ad86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca67376d-2be2-4f0b-807a-131a75f4dec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a160e353-b7c9-4305-854c-c25534dc19d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99574651-f23c-461e-a4fd-6f9329729bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9de151-9cf3-4424-b0b5-e5655e602e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc16a415-ff7c-4fd9-8ff7-598f5295d0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f98b414-5ebc-4b2d-943c-af0f9c5dcc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae89b60-ec5d-443a-b0c9-0835b4399ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3345cb-72a7-4cdd-8505-5626fc18c1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d97d4fb-e47f-49cf-8c79-4ebe750025be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a2548e-60a4-4602-ae70-c6ec1e228d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd93545-7c72-4c2f-9f17-31c783e42f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcf6cd8-70e3-4629-9e45-eab1c9789013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bd29ac-17b7-4bdc-9003-4d1fbb3c58ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b18778-bfd5-48a6-aed9-f841ba9dc839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3289218-6923-4720-bf8e-a5ff7bc3a4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.233.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3977de7d-b861-43ea-8f7c-c5b8260e4dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.207.105.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328056ce-ece2-48d3-8a37-2f46aa7dde59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562f3ba3-d5c6-4003-a091-c8166631b985", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.209.24.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5747fc29-20dc-4cb0-bf1a-67ab32859ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.210.251.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedf258c-1b39-43c0-bc3f-7d247eea1c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.222.42.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae1920-9b2f-40b8-9439-26beeeace423", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.110.244']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10aa51eb-5b66-4215-89a3-b3602cb5d066", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df1fba3-f547-476d-9d59-99e7bc13577e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.228.63.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62fa51c-70fa-456e-a990-fc936fb1d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac2433a-afcb-4bf7-aca9-2a7c4d76f579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2970b88-bc07-4095-9037-f6a4d1fed7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6d8328-ecfa-4977-ae89-653f30c849a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a069c0e-a365-4baa-b104-ec4afc2ea07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f2cb6c-9865-4a81-a4d1-e024af9b8511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cdd5fd-3be5-4999-a29f-b800bb33d3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8208a695-e5bb-4873-a5e8-e69547061653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927418bb-2d27-4ee1-8faa-1df1dbd11bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b2331b-d3fb-471a-8f6b-3095eace6b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b3bea4-e597-4bae-a2ad-9f697bc3b5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca05e50-6b35-4210-a11b-6fe37bbed8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d54baad-fbd6-4e20-8acb-8ac340ac2a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52793409-09be-47d6-8280-a37a7f6399ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d12d046-1406-477c-8589-7e1e190f010f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e740ce7d-9d74-4a6c-ace4-1a9d2ff5d15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295c3c4c-149a-4200-bc56-3fa3467f8343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333383e1-d48f-4457-b86e-389dc0e4dd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e60688a-015b-48d8-8263-7a04729987fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec703cd0-f40b-4eac-a5cb-bbc9515da350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d26fd9-b5f6-494f-bb26-de6951648d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baf8a41-4328-41e5-869f-d55e82b89664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a514fc8-5f9d-4421-8e06-fbfebaabbffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858cc379-fe8a-42c6-9a02-29a68c1c5b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e449d9ff-09a9-4be6-a3e3-ee97a8c10f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c358c6-c497-4a5b-833c-d168330e63f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c2c5fd-8bf8-4ccc-94dd-432f62bbc647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd534ce1-a308-4157-a586-318345fba8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83af30c8-51f9-4fef-9990-c13a81fdde0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc353d1-24b0-488a-b8d3-81871e23e91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4f726a-8ce4-4c45-9354-5d81cc46277a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9857a040-8325-48e4-bdf7-0dc752370911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009235bf-54fc-4647-a6e6-b4c89330976f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d6136e-af95-40d7-bd37-d5d20e4f0123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916f24e0-e95d-414c-8137-4d164901ed94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2785b3ce-db74-4ab5-8c01-d638a5c141f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e11c37-eff4-407f-b572-302e4c4a2df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5afc2c4-23b4-4b6b-bc38-1399ab3265ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69caa4f6-a6f0-46d7-a5fa-f5ea4718c5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1486c5c7-07b4-4387-9b6b-3b29137b242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cede316-5c83-462b-99a7-2b8dc5468a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830dcb1b-a197-4212-8e9f-2967ff1667e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.177']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaacbb9-8b88-4430-8c1d-401c240a341b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ae91f4-87d7-471e-9bb4-f6af295c782c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35869446-2bec-4212-871c-c1213f56fcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40621b0f-9399-4170-a782-05238b0b1dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f5506f-3a27-405f-9859-5879c591b486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7ba816-add5-4653-90d2-05201420f1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa84742d-29bc-43d2-8545-6306f32010a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c09789d-a5e7-4d52-97e8-716b55188542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad9fbd9-4e72-4c82-ad10-a6740f32ba22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a05b8b-2bfd-4cb2-bf44-06f38c85cba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1462cd24-7247-4b3a-b41b-2d88daa12239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51f5f64-c840-4e57-bb85-a7a9a6ea8aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1d35b5-6dd9-4463-8326-5ecabdf77cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749559df-cfde-4af3-9bb3-7c5bcf12f50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac40feb9-db70-486b-b4ba-8a66a274ca3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28622dd1-4628-4371-9b14-30577a8861e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9ed832-44c2-42e3-8cf3-085150e655cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafe7031-13a3-48a9-9ece-40f944c6e5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a510456c-e16b-4a38-8777-5a9676d61c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbe5573-e200-420a-af68-95c9d835aed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59caaf01-0f88-4d5f-8967-4061b410806d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d04532e-de06-4b02-8568-087735472cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368ed754-4384-443a-a13c-48695475cae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac9fa69-6ac8-4bed-9337-0c09e660cc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6419e18-8369-427b-ade7-3187bd429c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d4b0d6-e0da-42a1-a614-e41b5c99a524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a1a2d0-ff63-4598-988c-b8dad0a426c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9cc9d8-5b0f-4154-b183-46c2670b1f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9ef8ac-8c32-48d0-a50a-e7d16b4aee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d875381f-c2a6-427b-bbd3-f668d956c08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbafd5ea-7c07-407a-897c-43a55ca7f780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c630c79-f371-496d-8823-2bb704d3238c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef63eaaf-ac00-4c49-8a92-2b3ef6676db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa4126-ee24-480a-a0f9-567779a18bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b77887-cbd3-4024-b017-4160dbc5b9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817a60ca-beab-4b99-8fa3-56e07a9519fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a58b52-16d2-4235-bc6b-ce86a09d457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe80051-3640-4b59-ab9a-665ca9fc1466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf427fb-95d5-432f-97f8-e192d442f478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8751068-71e3-4b42-8510-696764f28287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdcf6a2-f670-4be5-99b8-b600ad39c732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a970bd38-44a4-4b25-8172-e11d808d8f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a71c24-2590-406d-89e4-e6db3d51b739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d58a6e-39bd-409f-8060-803da0c7a916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89698d3b-1621-40ff-bd73-dc2e4000259d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433421f8-c08a-4c85-b7ad-745de121c18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf19591-15b5-458f-8ab9-6515cfe818b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22989d95-3528-4b83-a731-c6efb939cdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ffd223-a2da-41a0-8cf3-330cfbe02517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b43dc97-71ee-4302-8f54-3d34e82a22c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decfa2bb-1fd2-4d44-b0af-9ed9e602c8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6095b07e-b4a0-41e6-aeca-b244d7ccf14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d850d211-8a3a-4f38-9cef-0bfed70711ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e5001d-0bd2-438e-8af5-3e58d05612b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eda4fd9-bee0-448f-9016-6d6d1a13ac45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.58']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a39366-8112-479a-9405-b8b848e9f10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f60da05-15bd-43c9-ad75-9ebbd6f7447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0ebd8f-74b0-474e-bd91-54518f91faed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f59bda-ab0c-47d6-a733-d8c0a658d7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc0a44-d5ed-405d-8b46-98ddbc000690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea93213-ccd2-474e-b054-634bf8df529f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a356a4-d308-4b27-97d5-ea01d7def513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda04f21-c770-4ac2-8c22-6cb56607e8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d584ae8b-f176-4d0b-a63c-905dad5c4624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac4ad76-2a9a-445a-81f4-a23a8e2a6ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759d8903-b2c4-432b-85bb-a97e929d8fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3ed648-495d-4667-abd9-12e01529b90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88f46d6-1303-400f-8c3e-23b5dbbb93f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7189684-bb0c-4705-87f6-89db2726125d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e465b43-87f0-4e4a-8bc7-de4a5cbf0eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfed188-3f78-4811-ad0b-93cfed565cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb41ac8-a70b-4a1a-8361-2b723d1a30aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba955168-dc88-422e-951f-3d96d732a1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bc1ee0-184b-44d9-8879-bd2963077952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8b7bbe-b5f8-463a-885f-bc2b17f8111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edddaab9-180d-4584-86a1-c62c29a05d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572c2e7e-7d1b-42ea-b4c2-5551e9522389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348bd892-f0ae-4ffd-bf8c-7e9853f2f600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96435b6b-f16e-47b6-912a-25e3bef65244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc104c5f-89d5-457d-bb8b-5919cb21e4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378eb994-2d4a-496d-a653-ef65a33396bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa40ead-813d-4395-9f2d-c321db81b79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a2446f-e3d2-49c3-9086-464cd7c55abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8767db4-68ac-49cf-98f5-5b269122f1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a89ebf-ca49-45c4-bc40-d323e566625b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f8781d-96a0-49cb-85c0-c4fa0fc832c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f83e721-0add-4ec5-89f1-e382c0366b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ff3887-aed0-4a18-81b9-6e7baa216fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857f2656-4af7-440e-9fe6-a38435dcd83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccbc4b1-9563-4484-89fe-3c3e1540a5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202856d3-927b-4166-a5c4-364abf53ec1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b49bb3-a2eb-4298-8acb-183741ed050d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8003f660-0fa1-471e-add0-94348b1eec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7769cd-26d4-4637-98d8-5fbcbd5d5010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cd831b-1fd3-4490-809a-de726af3b6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f795645f-1ba9-4bcf-8557-0518b85b01e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3694c2e-ab8b-40fa-b7b9-f78e72634aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2a59ac-a559-44f6-a338-bab3821e8b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a14509-c3ab-44a0-a80e-9a9d0ab3c97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beccad89-0f60-4fbf-890a-2391c2fdfdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f8d501-2285-48f1-a294-42ceb627746a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223b04d0-9c24-48f8-b8bc-142c6585450f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873a4fed-26cf-4ae9-8f85-99f0df822e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6f17c7-712d-4bf7-9b6f-17bf6ab60c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9d81a4-280e-4c9c-86c6-5823f612a53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6dbd4b-dc07-4d21-9063-fc753efc29c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6be092-de4e-4282-b06f-f259437e5ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a16bf5f-50f6-4c1e-9cea-44d1f9962e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87361da-978d-445b-abdb-8e9cb38d1257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d831c0-4cf6-4b06-a652-316f6c74dad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c10dfa6-afed-43a7-a362-c7cd0f2c7bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b85e3cf-7a14-4539-b459-934ba33addbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b8c1c9-4d45-463b-ba84-7c4aba5c9e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03784059-a6a5-4999-a846-fb3b3296d039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b5e7d4-347f-4835-8817-fdc31dc84033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f1a95-fe45-498b-ba5f-8e0d37ab285e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d600c57-2c53-4ca1-b095-6cb514fd1728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8dc8df-64e2-44cc-a39f-bdda37671e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752cbb89-fbba-4f2e-97bc-97908993fa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524a3d9a-8837-4314-b020-c43f60d91bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea786cbe-457f-4e11-b4b8-bb85b016e1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df3e4a2-10b6-434f-9e71-03b1bd3a5452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f88319f-0291-46ef-a6a6-a8ddd424b610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd97943-50ee-48f5-97e9-13de179fcfdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aac93e-682b-4b0e-89a4-8f897d5a276f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706529d2-4a3e-499b-bd36-7ddeb0186732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aabbf28-3664-45aa-a41b-81750e213721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e8f6ca-ca24-4506-be21-fc95b4afd714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58a66e6-f1cb-426f-a228-39eedf4d8839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcdfa23-2e45-4823-bb7e-27efd99099c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba53d20-6212-4fad-8c30-af8df3c822ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597bc8a0-66e0-4b9d-8f5b-fb4a39b8a1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f887529-9835-41f1-a91f-598470064f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5306913b-459e-4b55-88b3-cfad811a2d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c6f528-899c-4dc9-9218-587e2c02418f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163daf5f-e680-49d6-b6ba-b3747ae39952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9446d7-24a6-4d34-9bf4-b8942dbfe33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad55a04-d7ce-4032-8686-8f5024f27bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc06b1d0-2adc-48d8-9497-4a9fe1034523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8d9490-6092-498d-a02c-942629d92351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4e74f0-1a01-4567-b97a-02381663cd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c88d2e-f1ca-4322-b335-90febb2a4a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf1d606-e8b1-4a9e-b0bd-ac22dc9bbeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865785ef-f126-4ce2-9c6a-55b72a8d2cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f263d6-5128-4972-9308-195661606aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e2172e-bba4-4cd2-8b45-c5c4b23cc682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11001c9-c159-4073-842b-0dcb19183710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cf6a44-fc1d-4a04-a3f8-49f267ea8334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934e9afd-40eb-4509-89dc-99e90733a22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cea70d-9883-4aaa-b82b-cad69ba52558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38da9387-afb4-4544-b785-76ab175ca020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cc6314-e762-49c2-8341-3b035c500686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058b14ee-a891-4336-a52e-079c56d78d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f55822-aabe-44dc-9559-6ac496e4334a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ff8df9-e66b-4781-b1f4-4b28c1cbd6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf876c81-4ef6-4830-a5ac-3261870e51ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9910d7-dfba-42d7-b498-ddf9a12983c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80a6849-1beb-4b02-9cc7-c896863c7bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab6a866-ea41-470a-9861-18a8a3e5566c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82281a1e-761d-4d38-84ef-fb1e8237f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d77ffa-e35f-46df-a218-2e06b44a2878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e273bddb-7a33-43b3-917e-0cf93f6a6203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0738fb47-f2e3-44df-8dd4-9ca8d0b2a01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e694bf47-230b-41f9-aa92-8e0d62748c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d749c415-dec3-4fc3-938a-bc9d2d87aed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2133cafa-c088-4a2f-99f5-2a51581a9378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375c2858-dcfa-4445-a3ae-5947d347f3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70efd47-a862-4e23-824f-e7054e8583ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3b9cc0-a9e1-4e5b-8a42-59c972c19979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9ba23a-0a6f-4506-867d-ba5a35147e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9359777-30be-409f-9bd9-7aedc05a34cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353e7aab-9213-4612-8693-42c68841a9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6a8939-045e-4083-ba69-7dd5ab85e5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15542e0a-be46-47fe-8b2b-b4c0bc191c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2055077-84e7-4e59-8ae3-4ca1960b1126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0852f555-e1cc-4165-8745-26e56d87fcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7debb10-d487-4f8e-aca2-046b8e994f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb132bd-d8dc-4b08-9efe-8bdd247434af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bab735f-617c-4cf0-b055-fd2b678d3065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9745b57a-ad7c-4849-9dd0-d02ae41a7cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0cc3bc-57cb-4817-9a28-1506722c04c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721b88ca-2edf-4cf2-80fa-f25a5c2f0ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a734883-26c7-4ef0-a031-9130aa7460fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ae1547-84dc-469c-8307-0353b85b9811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2f5c32-93ae-4dcd-ae7e-287687e097c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ccca6a-a1f3-4ea6-b2b7-fd4b2afb399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d7e5d7-9f4b-461d-9d41-031b0a50f901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45b72dc-f5ec-4f92-ba2f-42fed50240fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9f0754-3c42-4c3a-822e-7259abdd32f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99790e95-3246-4073-a1dd-aa705d358fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.60']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0cf3f7-6171-471e-b5f4-2219f6d5ae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad624254-fdd5-436d-8ece-095420317beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012de241-63a4-486a-8af8-077a8af84ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825c3ad5-aa10-4f65-a5d3-7c0c046a5120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3c3bf6-515c-4041-9073-a7bb11ca845f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a35f5a1-5291-402c-94ec-7095c66a3a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849bf55c-f9b0-4e43-836d-8c0e6dc52ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84790b4-f83d-4981-9d72-6047641e29a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd512ac-d81a-4fe9-a4e1-e1e7d4eec727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db074783-e04f-4f7d-b584-3b7f68667eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5a53e3-b8f5-4f92-83e4-0ff8e620cbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb2c3f6-ce30-4305-b2da-95f6fc6e9382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f2f7f8-06f6-4bbf-95a6-5a513ebeecaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd14ba4-8c42-4431-affb-25086a934bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd5e334-eb78-415d-83c7-e6c2e38fe7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edde01e3-d427-4445-b2d5-14c65e0f8f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d086e8f-4bbe-45aa-aae6-3e8d840ee9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e89b26-ddfd-4278-9c12-08c6eaf6a190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e5e63c-d663-4732-b101-e1c93ce6d6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f12c43-4b91-4436-a69d-0903f160c190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bad7ca-153c-40d1-b903-32a2ba29a525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010ffbeb-6677-468c-a26c-6a38ec4f56a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13cf3ab-a951-45a8-8ba7-19bd56ab0b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b159ec62-d1f9-478a-b068-1d85bb0752fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a230c264-eb46-456e-9dbb-5104e7240812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1743cf4-746d-461d-9c82-ed3290ad13cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fcdd88-5d54-447e-bbc2-8ec641a28b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0326c91c-6e2e-47c7-8a57-7772c44ae3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39d64f3-3770-4317-ac2a-d748ed420dba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.238.82']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4406520d-8c02-4eb0-9704-c851ff0e7669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.233.238.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8211c72-fe9d-43b9-8be1-49e75c4ea724", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.235.226.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09efe213-a9f9-418c-8af3-d8fdc67f5d54", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.199.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb84acf6-ffea-4f63-b47b-1f29664c81e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.244.19.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f66ba7-6805-4e90-999a-9e43eb7ba63b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.245.38.192']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5a2a84-0dd1-4d05-8bb3-8f4e5dcc90f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.35.239.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c1c748-8b67-44eb-beef-9ac60ea2a700", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe0aef7-f61c-45a6-b133-5668919fc302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f342f0-c23f-4282-b5a4-0477c638d9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.57']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fa0a38-d96e-4ca3-bcf4-6c242ccbe049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.242.13']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7b8c30-d505-49b9-8dbf-b8db8d977599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43af524-cfed-498e-8194-fd25c68c046e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef1fda5-98cd-4ecc-859e-c76ba69e3e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612b8cd1-5b63-452e-94e0-2befaf10f98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.17']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597d828c-907e-4134-a8f0-7ea2c58b82c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcc3979-9440-44ba-b23f-d718e8bef419", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.18']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84c093a-2a4a-46ff-94f9-6330bf468609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91550c60-4969-4d5c-9576-351df62510f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.237']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e78d2c-31e9-4acb-82cf-87f7441fe8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.35']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccd8c3d-26f1-4f95-b0c3-81fbc4cfe028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6896926-ba46-4631-8451-d7f3b1b0a0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696fa06a-86eb-462f-a312-b75959334c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.90']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bc9dd8-909c-4896-aa88-513bb63832bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601735cc-888c-4cc2-88d5-fff3b5fa781d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dce00ec-990e-465c-93fb-880b8d0a0c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.172']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faaec14-7e3b-42c7-8c0d-b926c1cf6d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49b611f-8a13-4dd5-a7f6-4be674c65a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.61']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c64c02-8c1f-45f1-99c9-53eafd772d04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b8b9cf-7d49-41aa-9b5d-87b92a3899d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7f4136-eade-4c07-a3e8-caa1baf9ea9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1568380-153d-474b-b4e3-e868820ef26c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1329d416-de1c-47ff-9988-bc8b507f870f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.175']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122f5f49-5276-4d25-a993-9c2402ce438b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d5613b-33e5-4bb2-b555-f949a9e36f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.37']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efa8bb7-09fc-489f-a038-2a1d0a60bfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faba368c-ac16-49ed-a3a2-b15ba9be5683", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e85af19-72fa-42a8-9f3b-742994de0c26", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bc1124-ef46-47e4-9491-14721336f907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.72']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87be963-24c4-4ff6-bfe9-88be5d01ff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8718b6-45bf-408d-989d-ff8acfa4121a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf990ae-3eb2-4eb2-9aae-7736bdde64be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.241.233.255']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f00be4f-e724-419d-8ee6-582d129e1179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.52']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f7c741-6ef4-48f5-b2e5-b3d86ecb8a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.5.66.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fe9e9e-ed81-443e-942b-f5c5b4aa520b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c33f01-07f9-4554-b73f-dade095b42be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.114.231.111']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b93dff-616c-4c0a-b735-da8dfa020fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.214']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f48074-2f95-4ef0-b68f-2aee5ce1eb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.206']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe1bb80-417e-43f3-8212-f39e1daf8808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b24ba6c-3c85-4c14-9080-be8cd268d32a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.90.69']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdc1b55-3530-4488-b6c8-33c44dc9963a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.170.160.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5668eb7f-0e7b-4029-a7c4-6dcecac62b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab742e8-5d04-476a-aa9a-a7b3c3446248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d2eae2-3230-4639-89d5-7ebeccab3e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.93.113.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36d94ff-4a9b-496c-aee8-81d17eeeee8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cb5f4c-1e38-4937-ab83-d47cd4958fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9f59b9-d828-45f2-a996-39184c3902db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.132.0.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a326a5b6-e384-4cdb-9039-4fcd3541ce93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.139.242.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832584cd-88e9-4500-b93e-5e9ec1f2f2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568effa0-106e-4b47-a1d4-3587cda96dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.102']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c825262b-f7e1-4494-beae-416d391a4bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.103']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e09c64f-8e8d-4785-8426-b24c9772be70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.114']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c954e5-7d1b-485c-86ee-3e42666c4ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38740bd-9b7e-4cb0-8524-f3725c27e221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca83d9a0-1b9b-40e7-992d-63aa8eff19e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bdf8bb-89bc-4df3-b07f-61e052e9450d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.146']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54297546-146c-477c-bacf-154bcc48d1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.148']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92017f1c-dbeb-48d7-ba3e-6e5c2477c0a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.179']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe6fc06-fcaf-4b71-9e01-7579fc77c9c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.183']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d551cc4-d814-446f-a63e-d1bf25951a4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.187']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a8d856-b96a-430d-a1a4-1e42464c49e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.188']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7ca690-3527-4a15-bf0d-c48673de15f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc3def8-2fb5-4847-8cf7-60b09c1ec7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.210']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395b75f7-d19d-4b9e-8e43-6d420f8fedcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c938cc28-6689-44ba-9717-b6b2174b94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.220']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5741a5-f45d-47e5-991b-3d34ffd37a93", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.230']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2446309e-92da-4a97-94b9-e9618578c427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.233']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2655c50-aeec-41cc-bb65-311abf98bc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fde08c5-864c-4649-8f0d-9d13bdfb71cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c86e8d8-da07-4484-9bc3-79265ef187c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed81aa9-316b-4d8d-b7e2-74f57e882b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.51']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665e4e8b-5dfa-49cf-90a6-3e0ee86814eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8157561c-ebca-442d-b499-619ca8a744de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1886a359-2d42-4565-9c33-df6a3e439b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d393d-4512-43a1-8e3e-1eda838baa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.91']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1d0624-6702-4000-a03f-683a6ce14e29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.92']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891c4624-7c2e-4ecd-835f-b50197d7ef1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.96']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f40e006-793a-483a-9051-8ed620e0c513", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.16']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--951918fc-3e12-4aba-ae4f-944ad60f0d0f", "relationship_type": "indicates", "source_ref": "indicator--8f40e006-793a-483a-9051-8ed620e0c513", "target_ref": "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90763eee-17c0-417f-87b0-d6ff5f2e2fce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.158.58.167']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24dd5a2-b87c-4635-955c-14c139d51dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.158.60.109']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f3341f-1350-43b0-8864-61797b80a442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.105.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3da57f2-74a3-43e2-869f-49cfc24145e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528dfff2-8f5b-4b79-b23f-dff5451de8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.47.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdd6318-42aa-4493-a61f-bce6c219641f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.218.226']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ad93f0-fd1a-4ba7-9f30-e4c3ec68b63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d977ff-2bb8-4c07-9ab4-84351b0b2fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.130']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd813956-68f0-4d3b-a658-5cad69edf921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb910e1-8835-4f62-a963-77b9894a7683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0605f6ec-c4fd-4735-8d9a-ee38d269c16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.153']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2509cd42-f753-472b-917d-6e149cac9d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.155']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ee9b9c-50be-463a-a19d-25a0ef40ffb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.156']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b52c44c-f9c2-435d-b666-aa50ec41ab9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07994486-cff3-4dbb-892a-cefab3686100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247aea7e-c7a0-4e15-b06e-6c66393a501f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.205']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b812f687-2a64-4340-b58b-83e3334a8de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f712af6f-25f0-4873-8c0f-8bb735936107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.252']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1b63df-8d9c-45ff-b4fc-c454b8ec2dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a982b09b-14d6-492b-8476-b2b3519fb7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046b1403-9ef0-4721-8632-607e1fb4f9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.11.108']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993cbbdc-e368-415a-9d83-2d58e66f6acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.253.70.49']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2533f50c-0dc2-4e8b-a4f0-8f9197bbcabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d658c-2c62-4173-90d3-e1cb15620ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.229.202']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26021cc-a59a-4eae-a878-9ee03b145dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b61243a-69e3-4fd1-8c8e-ec7c03e0c90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad764daf-35dc-49b7-9629-4406471a2571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.113']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e0d0ef-0037-4496-9f97-fb5aaf0ffa57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.133']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54a96ad-ef4a-4843-9d36-f9566a753576", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.16.30.74']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c03561-9587-4352-8d28-7e698d3efa34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.217.54']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b75151-3315-46d1-9442-bf15c99fe849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.233.24']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d52ea9-b8dc-487f-be59-225d4da0994d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.183.20.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744231a3-3356-4822-aa6c-237cb5bdb502", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f026f44-3120-40b0-b482-1e53b4f72f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7315433-49df-44d5-aca9-4bfd5d106bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.26.249.48']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c543cfd3-ac4e-45a6-827c-6a9b7890c4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.33.214.164']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad86b19-37f9-4fb2-91e8-fac10dc83c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.37.210.151']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edf3874-f122-4dab-b985-31fe118ebc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.82.249.191']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83a349e-fcc9-4e03-b69b-4c7d76055e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.86.207.241']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfc5c9c-61e6-4e1e-97e0-b37643c57dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.9.191.195']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e9a12d-7b75-4d63-83aa-18e55d2f87cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.102.165']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270ee204-aa2e-46d0-b05f-03ca2db2dd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a228ea4b-20a2-4bae-88a9-04ee153e3062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.38']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2820ece-6d10-4957-a041-bf224cac0ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.46']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36147e8d-1fa3-4e2b-b8cf-7e47cf573578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.168']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0266ca0-37e4-4438-a611-5216b22e87ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.20']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f0db29-f78d-4e7a-bc60-0f3207277ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.250.15.228']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2727183-1cdf-4523-8968-bf6469c74b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.64']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e80be8-b6c5-4c77-acbe-27f90d51d35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705ed0fb-833f-421d-b024-7e1c975f67ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.250']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81d77da-017a-49de-b502-43fdaf51aed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a5fce6-1e8e-46a8-baf2-3d93db78c4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbee161d-a652-4c65-967f-34f60bb07c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.179.76.118']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd07d5d2-1c0e-49ea-a243-975d38f714b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.120.159']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41688968-687e-4358-87e1-7d8d7cceccfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.77.204']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791cb5d6-9310-47f5-81b0-86213ddae088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.22.227']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d42ca25-f48d-4de8-a59b-2286502516a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.61.21']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fca149f-98d3-45e4-aa6f-7221fe9f5b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.81.30']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12cc943-7a2a-4f1a-a2e5-3def1ba409c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.23.201.144']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8028b7eb-869f-46da-a647-b3fef51b4f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.43.17.176']", "pattern_type": "stix", "valid_from": "2026-07-30T00:00:00.000Z", "valid_until": "2026-08-29T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-30-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5f09e3-725d-43d4-80c2-539d39970f02", "sighting_of_ref": "indicator--d7e1c6e5-3216-4616-b7bf-107126c3803e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7190cd7a-0f64-41a7-b59a-d0fc39c16502", "sighting_of_ref": "indicator--3500c450-229e-4c0d-aab2-38b08ec5d4e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b104dcb7-5a53-4893-a0de-e6b8669b4741", "sighting_of_ref": "indicator--28ebd2c2-ee7e-4fb0-8ccc-dfb63112ce05", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d673e7e9-4391-4a42-85e2-51339cdbb4f7", "sighting_of_ref": "indicator--cc5232ad-2e0e-47f4-97e6-36ef3da404b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e8ae75-41d8-40ea-b3e0-7f822dcedfb5", "sighting_of_ref": "indicator--f45b3dbc-127a-46ae-a433-8df1df9a6c3b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bb915f-1398-42e7-b386-8475b3cd1af4", "sighting_of_ref": "indicator--e96cc0b2-5121-4004-aae8-f16b63f3d75a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff497501-bb21-49cd-9025-cd2f267b244e", "sighting_of_ref": "indicator--ad1a3517-9999-4775-8f4b-834a60cdcb5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17400e94-706e-41f3-a995-f9aac75aa8e9", "sighting_of_ref": "indicator--7f5deccb-2858-4795-9c03-d4fcc7b1eafc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4848b4e-2581-43ba-b69d-71c14871f8cf", "sighting_of_ref": "indicator--0566f13d-6a27-4363-a3d8-89618f6b3ec2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63983e5-52f9-49ad-bc63-f9078bc7d7b9", "sighting_of_ref": "indicator--e40aee4d-37bd-454b-bc28-3bb0bd4ad489", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e973ab-899e-4ed1-b63a-fadc55fc184c", "sighting_of_ref": "indicator--a696635b-27d2-4e32-9335-100e2d4c5da7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09d896b-6a01-43b0-afb0-8da02abdecbc", "sighting_of_ref": "indicator--a696635b-27d2-4e32-9335-100e2d4c5da7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98d6295-3c57-4884-adf9-bd612ebe437e", "sighting_of_ref": "indicator--a696635b-27d2-4e32-9335-100e2d4c5da7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfab29c4-9037-4689-b7c8-2db06b0b31c4", "sighting_of_ref": "indicator--37448038-19b6-4079-8f15-c7c2245fefee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff6643-5f14-4c80-8aef-a9905a7c69bd", "sighting_of_ref": "indicator--25130ead-9a24-4f43-93f1-99a74c0baf4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1570e559-46e3-4d47-bda6-d08c2d4e6275", "sighting_of_ref": "indicator--a7565d86-b39a-4cbd-96b9-13d581d79d6c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac0648-ba59-493d-972c-7b07e45f600d", "sighting_of_ref": "indicator--9a5beafe-3143-4aaf-ba35-c83efd8c18a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add321d7-1c69-4cb6-8506-50273756cf8f", "sighting_of_ref": "indicator--79fab8e2-7234-474f-9b07-a314303236a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559a898b-1a47-4342-aa58-54e07814212e", "sighting_of_ref": "indicator--9df660b0-fbec-4bf1-b99b-cd110df34b98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e4b746-66e8-4778-9759-30ae723b4dd2", "sighting_of_ref": "indicator--9df660b0-fbec-4bf1-b99b-cd110df34b98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86011c1-23e5-4386-a27c-6031ada551ea", "sighting_of_ref": "indicator--05475e47-3a64-4a45-8ab0-377696437886", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9301b68-8364-420c-bb28-c9b46e4cd38d", "sighting_of_ref": "indicator--d77951ea-12ba-431a-b04f-d293d2d36d6f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f087fcc1-9a4b-4b26-b5c3-57740d35f674", "sighting_of_ref": "indicator--a2c23a97-d02f-4f1f-ad16-f14b9ef8edef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef810e5e-ead5-4724-9d18-fd0ddd0aec25", "sighting_of_ref": "indicator--a20f6f2e-26a7-42ef-a1b6-8128a34841f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a474a69-b686-4e3d-9792-f55824315d9f", "sighting_of_ref": "indicator--68beb27f-4654-4043-9b00-80178971031b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcafc95-e72e-4b80-83aa-b6361ab733bd", "sighting_of_ref": "indicator--85722c06-0ff5-4f46-a483-60f82d5d8ea4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7aa720-5748-4728-ae09-17902b068c20", "sighting_of_ref": "indicator--85722c06-0ff5-4f46-a483-60f82d5d8ea4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab1664c-d90b-476b-90a2-93c5d39789a8", "sighting_of_ref": "indicator--85722c06-0ff5-4f46-a483-60f82d5d8ea4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbd8e38-a1b9-4e96-83e7-190760438c7f", "sighting_of_ref": "indicator--ccf5d36e-5903-4d44-93ca-ff01036644f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9f12a-451e-4e90-b80a-2807dc87ed00", "sighting_of_ref": "indicator--514d064b-6a80-4334-b6c6-48ffbdda8e19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb3bcbe-531d-427e-9cb8-c83407569cf9", "sighting_of_ref": "indicator--b307969c-3c4b-4a22-8365-c8d7edfe5dd5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4aa076-b372-4457-b159-b1fb5493a9dc", "sighting_of_ref": "indicator--b909f392-4fb0-4b25-a7e7-079501ec8b7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1184e78-2914-4bc8-b9a1-2098e708cb4b", "sighting_of_ref": "indicator--221944d9-a4ec-457f-aa30-59bddf529992", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf408e46-589e-4774-a526-b9fcf13ca623", "sighting_of_ref": "indicator--221944d9-a4ec-457f-aa30-59bddf529992", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76432427-b88c-4007-9f83-e5400e5b6cfc", "sighting_of_ref": "indicator--e28bbef4-b99d-4b98-8e0b-d7b6ec3936c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4840fa66-6b0e-4ad8-8572-18ff32551912", "sighting_of_ref": "indicator--79e97ea0-fac4-4cf4-8bf4-6c9500369ccb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f2a672-bef2-456f-bc06-75132af27bba", "sighting_of_ref": "indicator--a2f04ddb-9748-4f64-88dd-6b8a46ad6d71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c08ad8-ca3e-46cb-95c7-8376db85cf7a", "sighting_of_ref": "indicator--a2f04ddb-9748-4f64-88dd-6b8a46ad6d71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b78fe1-5485-49fd-a60f-5cac45525ab5", "sighting_of_ref": "indicator--05ad3166-610f-4e2c-944f-396f2108db60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b5e4dc-4b87-4c9b-ad15-07b00c4b6947", "sighting_of_ref": "indicator--7be084b2-da99-4963-9492-148260b44b43", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e01b842-2062-4163-9ff1-b1293eede632", "sighting_of_ref": "indicator--e8ab698f-6cb7-464a-a027-dcf4c7872777", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c618fc60-4864-4202-912c-6cbae7ebe057", "sighting_of_ref": "indicator--c30611a4-0a9b-45aa-9d75-cffb52b692f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fe05d3-476b-49d5-a402-4daf50a9e63d", "sighting_of_ref": "indicator--c30611a4-0a9b-45aa-9d75-cffb52b692f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb220fec-9825-4529-8cfd-099455dcea44", "sighting_of_ref": "indicator--190acfab-c750-4f1a-a804-d5415be9aa81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65429e66-4393-4cb8-9b21-36dfc5c57848", "sighting_of_ref": "indicator--af1c2dc9-0b3a-43e5-adff-7fe84b7c09f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929e4d33-146f-497f-a9fe-84df4f5d72af", "sighting_of_ref": "indicator--1daa371c-b5fa-49db-93ca-d2b1e391c7d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d418392-640f-4401-995b-496b243c7aa3", "sighting_of_ref": "indicator--f3118f28-8475-4e01-b26e-1401b25b5f44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3991baff-565f-408b-b0c1-bf4f663474d4", "sighting_of_ref": "indicator--3ec7c856-326f-432d-896d-a337e52fa55e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669f57ff-d685-496b-86be-20a16d8aa889", "sighting_of_ref": "indicator--99fa2b29-e0fe-4260-aa12-054df913fbd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3be8162-3930-411a-9359-39ebcbcd4eff", "sighting_of_ref": "indicator--d19940ef-f886-423e-acb0-d0d6cb02fde9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce3e650-d915-49f2-8f92-6b854560b305", "sighting_of_ref": "indicator--61f96206-dc0b-43ff-bbed-353119a5a7cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca280ba-3761-425e-be0e-1bd334dcdf2b", "sighting_of_ref": "indicator--4c2154ce-60d8-4c1d-9f83-8cb1595e3dd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b80abd-77f4-4629-8ab3-eebd0e575aaa", "sighting_of_ref": "indicator--20738895-b964-4c8c-9b44-070c50920790", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1246988-9580-4424-a9e4-2ef69aa8cfd4", "sighting_of_ref": "indicator--cb86cb5f-34ee-470c-b07e-0d9e94757e93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dded997-273d-4249-8916-997998ec8278", "sighting_of_ref": "indicator--f9f04e94-b1f7-40e2-a8bd-f01174e2a50a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4d5e83-a076-44ad-9dcb-c2525e0e61f1", "sighting_of_ref": "indicator--42945b7c-f152-4044-b764-2d12b8914fd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08af7a1a-d301-4bb7-a371-b20b440af324", "sighting_of_ref": "indicator--d72f33a7-0621-403b-9edf-1a0d103cbdda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21107dbc-20f1-48a7-833e-cb270c4dcc6d", "sighting_of_ref": "indicator--1421f2c9-8159-4a3a-b214-667cfbab9c7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288791aa-2ef5-404e-b7f1-44cc5d82f23c", "sighting_of_ref": "indicator--af68d3d8-181f-481d-ab50-9f5ecfdb93f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae00fc7-85c6-446c-baf4-07be7b050372", "sighting_of_ref": "indicator--75d8406d-51bb-4098-935f-3b31640383bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d34b18-aaa9-43aa-940c-8e53f0e07a4a", "sighting_of_ref": "indicator--e519e3cb-0e6d-464f-9584-b0196ed2afb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d1eb08-9439-4cd0-951d-f1041dfb17e2", "sighting_of_ref": "indicator--60f6b307-da03-4eab-a7d1-8a5d3d60462e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486d0b9c-0d04-4075-8c09-60bf8b33b305", "sighting_of_ref": "indicator--17e1982c-1a1a-434b-9e1e-8f70e2fea30a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aabbd9-bfa6-488e-961c-6571c8d83c50", "sighting_of_ref": "indicator--1852a8ee-c8da-4bfa-9b3a-74cfb5008f9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe10763-79af-4eda-b605-32a978baf150", "sighting_of_ref": "indicator--0b2b7cd4-24fa-4ea3-bbc7-046133984f78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cff458c-2d58-44d1-8561-56ed2a55c6fd", "sighting_of_ref": "indicator--9b00fdac-5557-49d3-be5c-9cac46b65203", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6d73b0-bbd1-4952-be47-83ac0dd7173f", "sighting_of_ref": "indicator--8eac8baf-659c-4e61-8cc6-4d22379067a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca53cb26-e625-4a02-8328-f0ef19176f5a", "sighting_of_ref": "indicator--94c44706-204a-4e69-9d97-376cf1979587", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eeb56a-8000-4e81-8e3e-bb0313884d09", "sighting_of_ref": "indicator--ac39d177-f804-43db-a82a-56b70abfa41b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8f6eb7-1c9b-4563-bb91-60614ed0c004", "sighting_of_ref": "indicator--ac39d177-f804-43db-a82a-56b70abfa41b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab9cd96-2366-449a-b5a6-dc6ce0089da5", "sighting_of_ref": "indicator--ac39d177-f804-43db-a82a-56b70abfa41b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38c177c-b260-495e-a182-5e305f963408", "sighting_of_ref": "indicator--6c453d00-08f6-472d-98e0-5e63cf65e93a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b7bd12-03b0-4987-b218-63823cc5c151", "sighting_of_ref": "indicator--6c453d00-08f6-472d-98e0-5e63cf65e93a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec08059-bfcd-4799-92d1-c213f3bedc67", "sighting_of_ref": "indicator--6c453d00-08f6-472d-98e0-5e63cf65e93a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996e55ef-4f06-466c-9c32-43c29888f592", "sighting_of_ref": "indicator--35cc15a7-0152-4b1d-a8fc-e73842248832", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fa5b96-9067-4269-9173-6eb4d485b3b6", "sighting_of_ref": "indicator--85cfa350-7066-4780-98de-3cac14ffadca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b18a62-b3e7-40a4-ad1e-4730be10e18a", "sighting_of_ref": "indicator--b98aff69-34f5-4a28-91b4-486c613b8570", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65a2fe6-6829-4a39-a814-6d0c6a99b6c5", "sighting_of_ref": "indicator--7d462c5e-d075-4527-8bfb-ead3fe6cdc0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7645f210-8f82-4de4-89b4-b959530283f5", "sighting_of_ref": "indicator--e1e4db33-e673-4a15-9058-786bb69dc30a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6132ee9-a0d6-4224-9f37-e79677862f09", "sighting_of_ref": "indicator--62f1624f-ecca-43ca-93bc-f928b6b23399", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99823ffb-2822-4a97-8d7b-49fd260101b1", "sighting_of_ref": "indicator--bf525a67-0eab-4fe7-8301-3864fe0b3683", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350250aa-a712-46c8-8668-22c71f8d7186", "sighting_of_ref": "indicator--8e57c983-6168-440e-b50a-cd225e328095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8855b21c-608c-4a46-9735-3aae6c37c6a5", "sighting_of_ref": "indicator--386f13ad-168e-4e5e-be9e-0d25b3b0095a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d36f2e7-9fb6-41cf-87a7-1d538d3f2d65", "sighting_of_ref": "indicator--686f5b26-769a-42d7-b0fa-64fd94461701", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e3294-267f-4ed1-8f69-7a0ab9b0b808", "sighting_of_ref": "indicator--3646e61a-f815-4b04-85ca-6644ed8e34e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255fe05f-3768-4064-8e2b-274761316b47", "sighting_of_ref": "indicator--af67a3c8-2b5f-4a8d-933f-3df43acac715", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce2a290-b656-40bf-91e8-9904a72695e1", "sighting_of_ref": "indicator--34d94e74-5615-4ba8-b1df-c1bab43edd25", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e411938b-31b7-4def-b640-3019abd59f1b", "sighting_of_ref": "indicator--3cb31989-452c-4470-8aac-a47bb82a5090", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e71b4b5-9054-4565-9bc4-ca643a4f0eaf", "sighting_of_ref": "indicator--910b5c1c-7996-4b21-af62-6458485a2008", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73aea35e-ca44-4352-8cdc-fc8d74c796bb", "sighting_of_ref": "indicator--b876927d-8953-4aa5-80b6-16c1e5592f0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0dbd09-088c-4e44-b157-631a768301d9", "sighting_of_ref": "indicator--e2dacea4-20a0-45c5-beca-ba6c83e609b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f6e342-3e6a-45a8-8578-78dfb1c98608", "sighting_of_ref": "indicator--e2dacea4-20a0-45c5-beca-ba6c83e609b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1441b2b-d0a2-4477-b9c6-6358cd5330d6", "sighting_of_ref": "indicator--e2dacea4-20a0-45c5-beca-ba6c83e609b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc62a9-c0e2-43e6-8e17-9688e6f76daa", "sighting_of_ref": "indicator--424471e5-c9d7-44d3-8398-8d42f9f44251", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b020d1c-ab6b-443f-90b5-481cd4a4ca33", "sighting_of_ref": "indicator--6147b4a4-9546-4153-a8d1-a63bf082a4a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3894709b-0da3-4b9b-bf1f-59872ba12174", "sighting_of_ref": "indicator--6147b4a4-9546-4153-a8d1-a63bf082a4a0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c37f017-a28f-4936-8226-69df1b1ce220", "sighting_of_ref": "indicator--6147b4a4-9546-4153-a8d1-a63bf082a4a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7477ff-7d48-4d3d-9ad7-e258d30ce943", "sighting_of_ref": "indicator--475f9ce3-aeda-4781-aa5d-a7e97cb3643c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d0e04d-94aa-4d19-9d1e-303ac03e96ac", "sighting_of_ref": "indicator--475f9ce3-aeda-4781-aa5d-a7e97cb3643c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5623267-bfd1-43cc-bb02-6122c229ef32", "sighting_of_ref": "indicator--b2632b84-db5b-40eb-a746-2f10f7614a4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc26f693-bc75-4641-9f05-88a49f0e1d70", "sighting_of_ref": "indicator--b2632b84-db5b-40eb-a746-2f10f7614a4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60d22dd-c830-4e39-ad84-92c69137c24f", "sighting_of_ref": "indicator--b2632b84-db5b-40eb-a746-2f10f7614a4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fadba1-b6f9-4ff9-8a15-c8c56bebf05b", "sighting_of_ref": "indicator--496cedc2-9629-4eec-ae05-b0c164ffe8ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e492cb-f5a6-45ba-9393-6a570fbaf8c2", "sighting_of_ref": "indicator--496cedc2-9629-4eec-ae05-b0c164ffe8ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4b5374-42be-4769-8eb5-c8c9fd905fda", "sighting_of_ref": "indicator--496cedc2-9629-4eec-ae05-b0c164ffe8ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70864ae-5714-48de-ab4b-2180c2127cfb", "sighting_of_ref": "indicator--d36b8eb8-4cde-427a-8465-19d1a62d11a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17411e0-ef30-4b05-9a41-6d599c0ee249", "sighting_of_ref": "indicator--d36b8eb8-4cde-427a-8465-19d1a62d11a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820b3bb9-a791-4448-88a3-31707547f886", "sighting_of_ref": "indicator--d36b8eb8-4cde-427a-8465-19d1a62d11a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ba5f7b-0cec-46c5-a210-a03db33c7d0b", "sighting_of_ref": "indicator--66e20f27-230c-4a01-b4bd-eb7dee3487e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d80f52-cb77-4b16-b233-f4e6d9554fdf", "sighting_of_ref": "indicator--66e20f27-230c-4a01-b4bd-eb7dee3487e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec3412b-dec1-4ee1-8db3-412fa8903d31", "sighting_of_ref": "indicator--7908aa0f-26a5-49f5-a78c-40e63439cfa0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e49a877-a886-424d-84ef-5a60304fcc76", "sighting_of_ref": "indicator--7908aa0f-26a5-49f5-a78c-40e63439cfa0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62855f8-c939-41fc-afc3-0436f3a225e6", "sighting_of_ref": "indicator--466ec57e-509f-423f-a9e6-5b4eee83209b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc44f422-298f-49c8-be65-c7ef53186c04", "sighting_of_ref": "indicator--43bd9553-890e-4d88-b0c5-c6e63e741b1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd68403-e67e-4ddc-8fc2-6a2f580a403a", "sighting_of_ref": "indicator--43bd9553-890e-4d88-b0c5-c6e63e741b1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6abf17-0410-43e2-bfd4-f1525904e94c", "sighting_of_ref": "indicator--33a45e3a-cd73-4110-b3c0-bfceda6fc935", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b8f390-48f8-4087-aede-6cdcd6af4b98", "sighting_of_ref": "indicator--33a45e3a-cd73-4110-b3c0-bfceda6fc935", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba324d0b-6eb3-4f7e-aa79-5df75d7380b2", "sighting_of_ref": "indicator--33a45e3a-cd73-4110-b3c0-bfceda6fc935", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fe0e1b-f687-4267-ad4c-ef4facac8957", "sighting_of_ref": "indicator--a19f05fc-ceae-430e-87de-6877dbd28f01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d2f415-0b5e-40cb-adf3-79113b10d314", "sighting_of_ref": "indicator--a19f05fc-ceae-430e-87de-6877dbd28f01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b22783-61d0-4412-bd2a-411ab3462476", "sighting_of_ref": "indicator--4553f220-e9b9-485b-bc42-9d56847ba56c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3e5e03-41dd-437a-bfda-93ee61a42cf5", "sighting_of_ref": "indicator--4553f220-e9b9-485b-bc42-9d56847ba56c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bff62f-0b8a-4721-a098-141ec0fce3a7", "sighting_of_ref": "indicator--1c809b1e-3fbf-478f-951a-6129a4b94799", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a00d79-1427-46e4-a712-900ac68acbcf", "sighting_of_ref": "indicator--1c809b1e-3fbf-478f-951a-6129a4b94799", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c583684-aead-4ffd-badb-fc5a1bc33319", "sighting_of_ref": "indicator--1c809b1e-3fbf-478f-951a-6129a4b94799", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df14dd3b-eb48-4b3e-8239-6b90a954fe93", "sighting_of_ref": "indicator--8ead3802-0ec9-4e58-b550-d64a86f44474", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee8eeed-faa7-4cb4-8e6e-96dd92e43811", "sighting_of_ref": "indicator--6a00fd74-630d-4a0f-b573-96d050fceabb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec5c757-0799-4252-8b30-ae2c1250c94c", "sighting_of_ref": "indicator--2d0ed12f-03ee-4e1d-a6ad-9b5621f80572", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dc6dbd-f539-4c42-91c6-df98806b1973", "sighting_of_ref": "indicator--3c149f5e-4803-4575-a7a7-cfac7e362e7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b3df2c-87d8-44ab-8f0a-59324dc2619b", "sighting_of_ref": "indicator--3c149f5e-4803-4575-a7a7-cfac7e362e7b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8851f01-e439-492a-be4e-6a93420fa933", "sighting_of_ref": "indicator--f0eb2304-d1d7-44a6-8fe3-92566845807d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b813b766-d8be-47c3-bab5-4870c583968b", "sighting_of_ref": "indicator--f0eb2304-d1d7-44a6-8fe3-92566845807d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723f4343-d163-49c0-ab29-19f0c843b87a", "sighting_of_ref": "indicator--e92e84b0-1168-46fe-977a-d89777aa836f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28ed7cf-991e-4a2d-b7dd-2fedbd50be26", "sighting_of_ref": "indicator--e92e84b0-1168-46fe-977a-d89777aa836f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312c47d7-47c3-4342-ac26-86bd5f57dff7", "sighting_of_ref": "indicator--d7492057-61de-4222-91a1-bffbb059b0f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f8c68f-6d8a-4582-9848-64bde0f579b1", "sighting_of_ref": "indicator--d7492057-61de-4222-91a1-bffbb059b0f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3b5bf5-f029-4be2-9c1d-d04ebf10f4be", "sighting_of_ref": "indicator--d7492057-61de-4222-91a1-bffbb059b0f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae09126-5ef6-467a-9b8a-494fc91c80d7", "sighting_of_ref": "indicator--fb0893fe-f27c-406f-9bfb-1803ccc7ed1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e8b00e-9f07-48da-8414-6cd267b546c3", "sighting_of_ref": "indicator--fb0893fe-f27c-406f-9bfb-1803ccc7ed1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55460f1a-8c7a-4e4e-af08-8d48d26087d4", "sighting_of_ref": "indicator--fb0893fe-f27c-406f-9bfb-1803ccc7ed1d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9937ccbf-52b6-4d48-a805-a246fd360e4d", "sighting_of_ref": "indicator--4166089b-a2cb-4263-a8c8-bf82ed9a8d1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f5be15-adb2-416f-b02f-27eacb573ab6", "sighting_of_ref": "indicator--4166089b-a2cb-4263-a8c8-bf82ed9a8d1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334ba9fd-b04e-4c09-ace8-cb83bc21d989", "sighting_of_ref": "indicator--4166089b-a2cb-4263-a8c8-bf82ed9a8d1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da71f080-f5cd-4695-b1e8-b03a3310c13b", "sighting_of_ref": "indicator--fcf8a0e8-b5b9-4a88-9cea-37bf37da1420", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17830225-99c5-4447-8944-ea6dcd655c33", "sighting_of_ref": "indicator--fcf8a0e8-b5b9-4a88-9cea-37bf37da1420", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9af724-63e8-4a96-b896-81a2f7e540fe", "sighting_of_ref": "indicator--31f82e31-2195-4cb9-8c79-455b7890c0fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499338f8-eedc-43eb-a3ca-e20930777b38", "sighting_of_ref": "indicator--31f82e31-2195-4cb9-8c79-455b7890c0fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beff157b-12af-4e18-b8e4-d50e402c1ece", "sighting_of_ref": "indicator--31f82e31-2195-4cb9-8c79-455b7890c0fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d0a9e1-7757-4b11-a1f0-eabae0d4ca9f", "sighting_of_ref": "indicator--28afc581-7819-4bbb-a46a-a46dda805944", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d279b38-9917-4047-a52c-03f37ef2a345", "sighting_of_ref": "indicator--2cd874ae-3d97-444a-b9ec-0f55d14a14e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04e58ee-17e6-447f-b2fb-37440547083a", "sighting_of_ref": "indicator--d351554d-e792-4d55-b6b7-7bbc694f6c32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b9f3d0-1d39-4b19-af77-1d41fa95ac6b", "sighting_of_ref": "indicator--d351554d-e792-4d55-b6b7-7bbc694f6c32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185398f9-0e7b-4a7a-8202-608fe496c376", "sighting_of_ref": "indicator--3f5dbaec-c9f1-4607-a6dc-aea252d26aab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125748e5-4d4f-4f85-abdc-04a2b6ca0c52", "sighting_of_ref": "indicator--46f142b1-c5a3-4aa6-9b05-71e37fb2ed66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2360c8e7-b597-462f-89ac-f15af471d76c", "sighting_of_ref": "indicator--3d4ff71e-fbab-4ea0-afbd-1ad64d70aaee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4216088a-4e3a-4bfa-818b-c0147e179121", "sighting_of_ref": "indicator--b7934d1b-b0a8-4b08-97b9-236400d82f34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f06553d-55e6-4196-8d01-5e9ec68a2dd4", "sighting_of_ref": "indicator--698b1510-6fad-49bb-b282-c0158137f382", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eb22e5-5c31-457e-8a3c-47d2dfc635d0", "sighting_of_ref": "indicator--c1f03dd5-6c62-4355-8721-576814ab6fca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1708c1e0-bd2c-46e3-af6e-61b99d29e1c2", "sighting_of_ref": "indicator--986ecb23-915b-4cfd-8b0f-0db32d6aeace", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19ca62d-fcae-48ee-a283-04198622ad4c", "sighting_of_ref": "indicator--6d5ba709-4dcb-4007-8780-5efb60084baf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36524428-1957-46e9-99b2-6a92787c6f25", "sighting_of_ref": "indicator--eb962109-e84a-43cd-9fdd-ef54092e8a28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888b5c65-42c7-44e2-bc62-ecfafd322a48", "sighting_of_ref": "indicator--f57c8ee5-cfeb-4bc4-9aa1-a09679461575", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24885b81-968f-418f-967a-b122ad2d69f0", "sighting_of_ref": "indicator--ecbffb56-b363-47a7-8461-4f07a6a2e777", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe32cce-e03a-4a20-9041-ef595c8c6f28", "sighting_of_ref": "indicator--9cff283a-e58b-4f23-9f01-27472e9508d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abae493-a300-484b-8bb9-2d71a996fcb1", "sighting_of_ref": "indicator--126cc21c-2101-4e14-ac4f-aee37d36c8ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfacef1c-158c-4768-b886-3e98285ac588", "sighting_of_ref": "indicator--4ff01148-fbfa-4d03-945b-95088d430ed5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263bbe5a-0ef6-4dd3-8131-f6441211f729", "sighting_of_ref": "indicator--3821fb42-4133-4866-aa71-766cdba5e21a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcfebc4-7972-415a-84b3-8932f3d72f80", "sighting_of_ref": "indicator--3821fb42-4133-4866-aa71-766cdba5e21a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa010faf-69aa-43e6-b091-770a9c2ff0d7", "sighting_of_ref": "indicator--cd6cddd5-934b-4cbd-b132-4f924b486d70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e5a57-9918-4339-b155-110811b50c7c", "sighting_of_ref": "indicator--e92ea518-4df9-41ae-8606-6311ef8adb58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac27951-486e-4ca0-964e-67e3c54fdc9d", "sighting_of_ref": "indicator--2ac9d596-9ef3-47fd-b37d-1f005797eaf5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99732b3e-1fab-4a72-a464-c84557342d75", "sighting_of_ref": "indicator--2ac9d596-9ef3-47fd-b37d-1f005797eaf5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d5b8fb-2310-4603-82e3-c76c50f5a5fc", "sighting_of_ref": "indicator--2ac9d596-9ef3-47fd-b37d-1f005797eaf5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb44f8d8-d5a7-45ce-8243-963115f11288", "sighting_of_ref": "indicator--9f4fc7be-e482-4a4f-b9da-598abfdcecba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e561cb2-24ab-459b-8db5-99d87ba013f9", "sighting_of_ref": "indicator--6d2e7f07-b6fa-4255-889e-09144a74e828", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5d80fa-2485-4ea2-9543-ed32d044e3fe", "sighting_of_ref": "indicator--6d2e7f07-b6fa-4255-889e-09144a74e828", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53d67cb-251e-4a98-b721-010b70ae0443", "sighting_of_ref": "indicator--6d2e7f07-b6fa-4255-889e-09144a74e828", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a8b5a5-c20f-4982-91d2-6673c1810295", "sighting_of_ref": "indicator--0a1fc6a2-9d47-40b9-b57a-afd95d1de228", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85775ab9-5352-4237-b395-d5d11bbb9988", "sighting_of_ref": "indicator--811358f3-572b-4b2c-8b9f-cc48baf56488", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9142d5-9414-456b-93ea-c2ff7b6261a1", "sighting_of_ref": "indicator--50665b1f-86e5-4546-85bf-0a9f2a8dae60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd33e460-9cb3-4a8d-b0d6-7fda6701d09d", "sighting_of_ref": "indicator--50665b1f-86e5-4546-85bf-0a9f2a8dae60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcc9f50-f0f8-4519-8748-f6b5e5075550", "sighting_of_ref": "indicator--2ae36a24-f845-45cd-963c-6c30ad906665", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ace7fb-148a-4a2c-ac87-d632ff43744e", "sighting_of_ref": "indicator--a1e04c41-7de1-4913-b93f-03768d3e247b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa022de-3b5d-4e1e-b431-9c5f83bcd3d8", "sighting_of_ref": "indicator--7351da44-f0af-46f9-824b-ecf98f3264b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10691848-3633-435c-a35a-c24236975fea", "sighting_of_ref": "indicator--3841fbcd-8715-457a-ada7-ff2780567b9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0014347d-7952-4213-aea8-80bc0f97013e", "sighting_of_ref": "indicator--3d02b8d4-fc21-4a2f-bf23-c4f2fcb9ffd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852437fe-108a-4f33-81ac-cad191366576", "sighting_of_ref": "indicator--3d02b8d4-fc21-4a2f-bf23-c4f2fcb9ffd1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edc26ec-a0b7-4dfc-b50c-8c952dc7971e", "sighting_of_ref": "indicator--064376a1-1e1b-4f3f-a0c2-4da2797cccb2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d59c0e-be49-4e48-ad01-c118c546fa3b", "sighting_of_ref": "indicator--c55d6d66-54b1-40b7-9df3-10ac7db958a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4647d9ab-1167-4bbf-9c6a-3da0ee923f7e", "sighting_of_ref": "indicator--22d94245-c965-4577-9cd9-8188fdb77379", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f282354c-2c35-4ef5-9efa-593cd1b16fdb", "sighting_of_ref": "indicator--34b7e2f5-8c43-43af-86f6-ad78385a9628", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f75da78-46cc-4ce2-8dda-0c9c9bf03799", "sighting_of_ref": "indicator--89196bdd-ea6b-4740-83ad-1ca0f6b608e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1931b61-782c-4deb-9cb8-38f42d224868", "sighting_of_ref": "indicator--89196bdd-ea6b-4740-83ad-1ca0f6b608e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d644d06e-c05b-41e3-a3fa-32530b823a53", "sighting_of_ref": "indicator--ba237cae-904e-4ac6-aa5a-40f4ced8a2f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc68a7e-2b7f-4966-9439-6d6fbf8da892", "sighting_of_ref": "indicator--63e68537-47d1-4f8e-b46b-91ef33886b69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317fa409-3979-4703-8d5e-c20b3eba788d", "sighting_of_ref": "indicator--e443beb0-2340-4162-819e-85c732ab6ff0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc275ef5-1b79-4f96-9f12-9c7c6d427f4e", "sighting_of_ref": "indicator--e443beb0-2340-4162-819e-85c732ab6ff0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765856db-00f0-498c-a313-d3d68169acbb", "sighting_of_ref": "indicator--e443beb0-2340-4162-819e-85c732ab6ff0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2cbe7f-a7b3-4bea-917a-073c230acf88", "sighting_of_ref": "indicator--da0207b9-7c59-4a94-bab8-847dfc98c8d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fee3a8-6f16-4129-8afa-5259e2877f15", "sighting_of_ref": "indicator--da0207b9-7c59-4a94-bab8-847dfc98c8d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f05742-018b-4736-b556-1c341614ea18", "sighting_of_ref": "indicator--da0207b9-7c59-4a94-bab8-847dfc98c8d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a309fac7-0313-4b7c-add7-729d8516b276", "sighting_of_ref": "indicator--333c0ad4-dfd1-40a6-8ce9-41663fa3ed7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b958ef-1a3c-4bc4-8e74-9ae841cb5746", "sighting_of_ref": "indicator--1c112195-a6fc-4165-a66c-61768fe0c74e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610fc2e8-6dba-4f2c-a82c-b8f8837b9d04", "sighting_of_ref": "indicator--13c3d6af-0607-4591-9893-bb8b0caaa662", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e98b975-faec-415f-b3fd-793ce635dbfd", "sighting_of_ref": "indicator--13c3d6af-0607-4591-9893-bb8b0caaa662", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e8547b-93eb-4ddb-8d8f-2f281fea411d", "sighting_of_ref": "indicator--13c3d465-4b84-4002-b105-a7652a439d8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f08717e-49b2-4dc9-bff7-d0fe1a963cb4", "sighting_of_ref": "indicator--3b7d5285-f7fe-4b3b-86b7-6324592562f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92de0ec-1f61-4ed6-adf8-9a1ff3980805", "sighting_of_ref": "indicator--3b7d5285-f7fe-4b3b-86b7-6324592562f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8502484a-c7d9-468a-9eea-7f411dfab3b1", "sighting_of_ref": "indicator--3b7d5285-f7fe-4b3b-86b7-6324592562f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcbf1ad-9c05-4808-aeba-8c8fc8aa8cd2", "sighting_of_ref": "indicator--cc330a08-cd43-4470-bde0-7d0f00008b5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579e7e0b-9d67-4957-940f-006a417058f0", "sighting_of_ref": "indicator--80c468e8-0633-4998-9088-4606e4fa4347", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c9f248-a9e5-4df5-b469-1121479a6e3c", "sighting_of_ref": "indicator--2eeffa24-476d-4d74-9ada-cd90bb482c58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75584cbb-fdd2-4d89-8b3d-dc181e8a44fa", "sighting_of_ref": "indicator--7e6c7466-c126-4599-910e-741af7cd4092", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b26be8b-2148-45e8-ab8a-0b8184967e48", "sighting_of_ref": "indicator--6db076d8-aeb6-4089-b905-129e68df24b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e14e17b-7c09-425a-bd93-a39ae737ade2", "sighting_of_ref": "indicator--6a6ac223-8910-40bc-8be2-224090f5e360", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb036691-373d-4719-ba5d-c471e9856f73", "sighting_of_ref": "indicator--3fee0fdc-b7fb-415e-bfbc-597ab17d5b73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6178b4e2-3be2-4b79-9d49-d788467cfc8c", "sighting_of_ref": "indicator--3fee0fdc-b7fb-415e-bfbc-597ab17d5b73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24560d91-8203-42ec-878f-7795e56ecb14", "sighting_of_ref": "indicator--6a48d42c-2147-4030-8933-664d01c91d36", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91329c98-7839-4c6c-989a-a68458e69a68", "sighting_of_ref": "indicator--ef4b2adb-0e4e-4fa3-b48e-4e972056cf4b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33bad37-bb9e-4718-8a17-cb8650267e12", "sighting_of_ref": "indicator--1d694d25-de70-481f-a1a0-bb1d9e0c5619", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6e2023-506d-4444-99a3-178bb73895c1", "sighting_of_ref": "indicator--1d694d25-de70-481f-a1a0-bb1d9e0c5619", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb093c2-8235-4eea-8e63-ee1c6f867df9", "sighting_of_ref": "indicator--1d694d25-de70-481f-a1a0-bb1d9e0c5619", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d8abc4-a412-419d-906e-7d23679a9f3c", "sighting_of_ref": "indicator--140f882d-9ba7-4e9e-a1de-5475c9f0bde3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c9093-e4cc-4a32-bb82-d74c0ff4d296", "sighting_of_ref": "indicator--0446a2da-354d-4267-98e7-01567ff5170a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c26039-c06a-4e5f-9e5e-ad7a13c24b27", "sighting_of_ref": "indicator--c9fe36e8-25ea-4fb4-beed-b1a51c2ac304", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a2633b-a6e1-483a-9be9-c6e6bc3afe82", "sighting_of_ref": "indicator--55050abb-4d85-444a-a9cc-5030f34dec0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f43e14-3d0d-40f2-9d7b-f14c6494b666", "sighting_of_ref": "indicator--f09956b8-f6ff-4c15-9964-b407e9d67c47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57025e6f-e66b-44ae-8261-59899d018a9e", "sighting_of_ref": "indicator--bf23cb16-c230-4e83-97f9-101d3065a81d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c096a51-bbce-4719-b978-6f1fee0ab9aa", "sighting_of_ref": "indicator--bf23cb16-c230-4e83-97f9-101d3065a81d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539589b4-c5a5-41b2-b018-9cce81d434bd", "sighting_of_ref": "indicator--79930be4-9064-445e-86e8-95209e805ebb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667f95dc-8f0b-4462-8d65-188ffc6c55c0", "sighting_of_ref": "indicator--67a8444b-f973-492c-acf4-aadb4ea316c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7025aa88-d0d9-4115-a147-119884988c18", "sighting_of_ref": "indicator--a3f7dd61-7979-4328-aadb-63ea92d655ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb54fe4-0162-4a48-8736-d434437ac73b", "sighting_of_ref": "indicator--989bc5e8-ee83-4029-be2f-e6d376207e15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7e67a6-1ee2-45cf-bd75-3f2e7956a2bc", "sighting_of_ref": "indicator--989bc5e8-ee83-4029-be2f-e6d376207e15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9212e65d-700d-4110-bff0-38ba78e277a0", "sighting_of_ref": "indicator--989bc5e8-ee83-4029-be2f-e6d376207e15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c49006-b7ce-4fa8-817e-ba5845d2a286", "sighting_of_ref": "indicator--4ad2c252-2eb0-4887-8f06-bb4545648a1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981275ad-950e-47aa-8ed9-0bc191218848", "sighting_of_ref": "indicator--9e760e03-1a39-4890-9ccf-bd3e3ef38396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caf9b4c-5032-4707-8d01-2aba1cabd730", "sighting_of_ref": "indicator--a27f93c4-4a71-4069-80c1-003bdc0d9d7d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbbb57c-fa8e-420d-a92b-83efa5c21885", "sighting_of_ref": "indicator--402265a2-de7b-43d5-b834-d24b2e862bd4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f389d565-3a5a-4c8d-aaf0-dd5dc96ffd84", "sighting_of_ref": "indicator--402265a2-de7b-43d5-b834-d24b2e862bd4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85194cc5-19ec-47d7-a31a-b5f30fc71cac", "sighting_of_ref": "indicator--402265a2-de7b-43d5-b834-d24b2e862bd4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ebc38b-267a-4cdc-8584-7c402f8f56f3", "sighting_of_ref": "indicator--c25f9606-a168-4a34-a504-080cbaa8d8e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd99d78-7773-4f39-a77b-c70c56c14628", "sighting_of_ref": "indicator--0ff2dd85-315e-4d6e-9904-af353f03960e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98d2e9b-d0cc-4b1e-a74a-714cb660379b", "sighting_of_ref": "indicator--e93e1ec6-296d-4e25-b342-0a62026b2129", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658e6508-0719-49c2-b77e-358284372bc0", "sighting_of_ref": "indicator--0adc7dc6-fc2d-46b4-b900-2497f455ff3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169e33de-5601-4546-9132-fbeb656f5eff", "sighting_of_ref": "indicator--b3292fcd-54e1-4149-bae7-84e7dfdbf099", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6087b12-d65f-4527-afdb-7dd2cb374060", "sighting_of_ref": "indicator--b3292fcd-54e1-4149-bae7-84e7dfdbf099", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efddf92e-ec61-42a0-a1cc-7eac0f1a49df", "sighting_of_ref": "indicator--cdc69751-9fc7-4c11-9a00-f7ac44fb3e46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d5d0e2-5561-4e1f-b61c-308acf2a9c8b", "sighting_of_ref": "indicator--798a9fae-b772-45fa-a437-7e6f335c77a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651a50ff-6d1d-4aef-9dda-8064ca408bea", "sighting_of_ref": "indicator--1b6fa618-7e22-4880-ac2c-dbd2d00e63cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd3c840-7f40-4d9f-982a-f0984e9f8521", "sighting_of_ref": "indicator--d0c3cb7b-7e4a-4ca7-9181-8c8c2baa8b70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568a37bf-00f9-4e46-a345-0d24e50df957", "sighting_of_ref": "indicator--d0c3cb7b-7e4a-4ca7-9181-8c8c2baa8b70", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b79751-b49f-47b8-86b0-30a2a67ba423", "sighting_of_ref": "indicator--a3757691-6150-4a60-85cc-e4ae32c3f927", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad892ef3-47b7-4d70-a47f-df653ed35e8e", "sighting_of_ref": "indicator--d4bfa244-b8ff-400c-8c9d-4d310516b138", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7291ea3-b85f-4eaa-9fa4-781834b0c4f9", "sighting_of_ref": "indicator--cafcc7c3-fe27-4671-b3b1-49432efc236c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87227a64-dc8f-4116-a832-f7e80a44fbdc", "sighting_of_ref": "indicator--2c43af5f-c62b-4a84-8c9d-0ffaa6fb4761", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b194477-50a0-4160-a3ae-ea2aeed8bffb", "sighting_of_ref": "indicator--9ebe19e8-60f4-412c-a627-63ea3ca948e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfbd1ad-f8c3-4551-bc25-ca1b7ce824f7", "sighting_of_ref": "indicator--9ebe19e8-60f4-412c-a627-63ea3ca948e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dc4b6c-0ed9-490a-91bb-29f4c7d1cfe3", "sighting_of_ref": "indicator--3a210f2e-5af6-4af6-8892-3cdbc978f532", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35bea80-e6c9-4456-9f23-70edaf3d7b61", "sighting_of_ref": "indicator--99990ea3-2107-480c-a02e-8439d73b45b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd243d8-b6ef-4ca8-8c83-b2ac404fe8ba", "sighting_of_ref": "indicator--8b620b95-1f65-43cc-9605-0c692d859577", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103771c1-170e-4d28-9212-8775aaa08986", "sighting_of_ref": "indicator--81f57ef8-dd5d-4b30-a880-64a86bd5db49", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940a1ae5-8c15-42ba-9396-358261ebe5df", "sighting_of_ref": "indicator--efe13fda-9806-4778-9588-da483443e644", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c21252-e983-4f49-8921-5efafc051f61", "sighting_of_ref": "indicator--ae4120ea-8623-43c9-9a3e-a2f94f6cd573", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4689e5cf-ac19-4ced-8a00-66e24656c90d", "sighting_of_ref": "indicator--9495b9bb-51e3-4ec1-ba53-a880f5bf3b95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64172a1-55c7-42ba-94c5-97abffd432bd", "sighting_of_ref": "indicator--fcbbfcf4-ef17-460c-9d64-e0233fa853c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70bd951-5772-4f6b-b520-ee76856e60d1", "sighting_of_ref": "indicator--9595558c-480e-4159-8999-9bcade5f5019", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f3636b-7730-4e4e-bd1c-0460901fc25f", "sighting_of_ref": "indicator--d27e22b8-2bc9-44e7-8a25-948e4bdcc560", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7583b16d-33bb-4335-a005-ba82604b4600", "sighting_of_ref": "indicator--715936c9-2f11-4673-99a3-86db94818f93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87cb7bc-f0f4-446e-9523-9294b4235749", "sighting_of_ref": "indicator--070945e2-1115-4b99-8291-0f6836df6bd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa230b4-2298-46e9-a156-c96c11af2ac6", "sighting_of_ref": "indicator--ec179587-a471-4751-904f-cef6d8e41971", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3138a5ba-ef4c-4b42-8342-4a3ae8b2756d", "sighting_of_ref": "indicator--23208a56-696f-4c33-8dac-1e5739e69545", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8a5e1b-5173-4e8c-928a-b7544b4b9bcf", "sighting_of_ref": "indicator--a282946f-ef21-4b60-bf39-6935c281d7a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4507be47-426f-4aec-8e32-4013f150f1a1", "sighting_of_ref": "indicator--1c69906a-df72-4beb-bf39-825a810e875a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590b4eb8-ca0e-46b9-baba-609141108eef", "sighting_of_ref": "indicator--94b36ec7-8308-478e-bace-2f61e19959f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfdbacf-b1f6-4d8b-bd2f-a0322695268a", "sighting_of_ref": "indicator--94b36ec7-8308-478e-bace-2f61e19959f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e17edda-988e-4a38-9af1-8dc8c2288d5e", "sighting_of_ref": "indicator--1a05e4c8-b0b8-4054-a8be-5a11ee21864c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de9d10f-968a-4e3b-8ba8-64b97ea85600", "sighting_of_ref": "indicator--ee7b2c1a-f025-419f-915b-87673588cf01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd5a45d-2444-4760-94a5-1e71695c6c48", "sighting_of_ref": "indicator--82094618-d77c-485d-85e0-0b38950737e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f67f2c-8a19-4f83-a23e-3e493648e98c", "sighting_of_ref": "indicator--a5a3dbf5-abd4-4610-9312-b10484d1a818", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7c4361-0154-40a6-ab45-743017849270", "sighting_of_ref": "indicator--2fe93609-a7ab-48e9-9fba-3a38c9974cfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133e9633-8d36-47b6-82b1-a3ab69097c58", "sighting_of_ref": "indicator--3799bd2e-9a4e-4743-b513-84a788081ec9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a110b55-4ad6-4b1f-8e96-568c757f5c3a", "sighting_of_ref": "indicator--713da011-567d-4bc4-94c4-bcf2ae2824da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a2e5e5-8558-47b6-9775-2fc9718d95a6", "sighting_of_ref": "indicator--309ce07b-7fd2-4c6f-b823-64b943aa1269", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbe6714-e780-4ca3-86e9-303a562e1396", "sighting_of_ref": "indicator--98066166-bb11-4c1b-abb5-972960629a72", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e397ea7a-909c-4baf-9501-b573d3e5e7d0", "sighting_of_ref": "indicator--98066166-bb11-4c1b-abb5-972960629a72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c17a08-1b34-4e23-a4cd-66710e0b25c0", "sighting_of_ref": "indicator--2dbca442-f32a-48ae-918c-c5749796c3c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceb7f82-7ac7-4f5e-ad72-4137433ef638", "sighting_of_ref": "indicator--2dbca442-f32a-48ae-918c-c5749796c3c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338b490b-0b5d-47ca-8044-549ba9efed47", "sighting_of_ref": "indicator--f39393d3-7527-4ec5-889a-741bbe71f469", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154f64e5-e433-4e95-89c9-0982668f7e7b", "sighting_of_ref": "indicator--f39393d3-7527-4ec5-889a-741bbe71f469", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfbbe43-ca53-4cff-9245-9e3a2c64481b", "sighting_of_ref": "indicator--94be2b6d-0de1-475a-aa73-78745e0844d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cae34e-f001-4430-a3a4-fe4683cf410c", "sighting_of_ref": "indicator--94be2b6d-0de1-475a-aa73-78745e0844d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e21387-2539-4b1c-a37d-b9e2d55f645b", "sighting_of_ref": "indicator--32dc600d-57ca-4328-9043-fdf5dd8ac9e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c52709-eec1-4b95-9023-7862bc116c91", "sighting_of_ref": "indicator--a207b45a-6338-4fc1-9327-bce780b3bf19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacf9936-28bb-4798-b6fa-f763b733f953", "sighting_of_ref": "indicator--a207b45a-6338-4fc1-9327-bce780b3bf19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04dee0f-a000-4c0b-8b36-6b827ad06063", "sighting_of_ref": "indicator--c62a34d6-0c32-4ec1-addc-5d48f128c7e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e37104-ca85-44cd-ab53-53af2cef50af", "sighting_of_ref": "indicator--c62a34d6-0c32-4ec1-addc-5d48f128c7e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d6b639-cb05-4fef-a253-52b05fc2c399", "sighting_of_ref": "indicator--1d4d2fc4-3c08-41a0-b4e1-58a34cc60644", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176c03df-5e37-4efa-ad13-5b3e58ab42f8", "sighting_of_ref": "indicator--1d4d2fc4-3c08-41a0-b4e1-58a34cc60644", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ea3fca-44fa-4163-92a4-41c159b76091", "sighting_of_ref": "indicator--02ac23b3-77ab-4d11-b72b-d5c3e4a94b6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bba656c-c203-40f7-987d-61a26d19557d", "sighting_of_ref": "indicator--02ac23b3-77ab-4d11-b72b-d5c3e4a94b6b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97246e72-7395-453d-a032-2c0b161b9dc9", "sighting_of_ref": "indicator--02ac23b3-77ab-4d11-b72b-d5c3e4a94b6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f15d4e-d0a3-4852-aba8-73021308befe", "sighting_of_ref": "indicator--dbc3f2c5-250f-4037-89f7-85f1440a99b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e21024-b5c4-49b3-8972-709842bf0961", "sighting_of_ref": "indicator--28bf5a33-be0a-4f69-a003-3c9c6b1f3b99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693681e9-ed02-4180-962a-b81b8b80a9a7", "sighting_of_ref": "indicator--c15565bb-0a8f-48a8-a773-0217e85bf1be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355b3aa9-d631-4028-8a98-32c546d3af65", "sighting_of_ref": "indicator--17d576d3-6e11-4ca0-9bb8-b8ea4521dc3f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ee01dd-9bae-4e72-8b01-9f008fde0049", "sighting_of_ref": "indicator--bcc5fd19-65c2-49f3-aecd-c50c0938ea1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65166fcc-775f-4dd7-91c1-b8e779c01f7f", "sighting_of_ref": "indicator--04051d20-1543-443b-bab2-7fc67fd15b81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a441c68-1c03-4fcc-9877-2a62f9b866be", "sighting_of_ref": "indicator--a8c64a51-fe9b-4178-abbb-8e8d66527bcd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2847f6-3269-4b74-94e3-a3b813f221b2", "sighting_of_ref": "indicator--a8c64a51-fe9b-4178-abbb-8e8d66527bcd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea3f034-068f-45af-be6c-ae2451ddd79c", "sighting_of_ref": "indicator--6f06379d-e96a-425e-8d2a-fa3c4c6436a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e704c31c-8d20-4882-85d8-abffc2cdeb3c", "sighting_of_ref": "indicator--9deb1652-d879-4d12-be35-4e038d8529e3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee67744-2e3b-4eb8-a781-d90dff70b95a", "sighting_of_ref": "indicator--4d19f0b2-5d4c-417b-8d9e-5d7684139dfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a79f5-05b9-4a9c-b18a-cd5bbf3d0f71", "sighting_of_ref": "indicator--7441bb96-1576-4de6-a96a-cd360735bc97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d49747f-c912-4109-a0e5-427fe0838da9", "sighting_of_ref": "indicator--068ab334-dd20-4904-8516-cb4057397d4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8130d7c-2b82-442b-902d-d69aced3809c", "sighting_of_ref": "indicator--3815b8ab-b603-4cd0-bb90-2c1214962e2d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c1a441-d8dc-4e5e-8c17-584baf45d15c", "sighting_of_ref": "indicator--81f11dfa-18c4-451b-a695-d01e9b8e9aee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45d8035-d0a5-48db-ac11-3517cec52dba", "sighting_of_ref": "indicator--2eff784c-daa3-4ff0-bb1a-24b6def74b19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052a1718-c5c8-44d2-ad46-0b3c7266061b", "sighting_of_ref": "indicator--1cbef52a-92b3-44d8-85be-92fdaffdb01b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec728ac-d769-4281-81be-f133575e4465", "sighting_of_ref": "indicator--b11815f9-2184-4e02-8066-1099395ad117", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a9dc70-93fb-446b-92f6-00510b362e90", "sighting_of_ref": "indicator--b11815f9-2184-4e02-8066-1099395ad117", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c247ef7e-1019-459e-9624-e140198942bd", "sighting_of_ref": "indicator--6318750c-de72-4ef4-8a59-0cffef991588", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8063a2cd-3a65-4e90-a73c-89573c1820c0", "sighting_of_ref": "indicator--ac303efa-d63c-403a-a95a-c012769aebdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c474d960-82ac-460b-b1ab-cb04db2901d5", "sighting_of_ref": "indicator--16c2c64e-256c-4a25-bae3-532be58dcadf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6675b6-dd97-435e-95fa-2e9832591b56", "sighting_of_ref": "indicator--fb07b4ed-ad40-45ec-8288-0dcde3a72234", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e8aa7a-cdea-42e4-8954-245689698111", "sighting_of_ref": "indicator--cf4462fd-7ce3-4173-8851-7ccd6b0b1342", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b4eead-f054-4be6-8a7a-39cdc374fbfc", "sighting_of_ref": "indicator--061be28c-8feb-4833-99df-54c532c579b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431801e7-3905-49bb-baac-bf9433cdd399", "sighting_of_ref": "indicator--cd499fd5-e878-4fa1-957d-39d778abd32c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffc7997-869b-476e-8eca-253783f863ea", "sighting_of_ref": "indicator--02ecd1d5-b843-4518-970e-eff350f65382", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc4f80-c3cc-4173-b8b4-9895fbad4a4e", "sighting_of_ref": "indicator--0940c328-cb47-4408-8104-7c06558833af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7857548-1414-43f7-9681-f18864c198f8", "sighting_of_ref": "indicator--6ed280fa-231f-484f-9d43-a8cd12fc2af4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23fa0d0-d6be-485f-8535-1f12d6e8c3ca", "sighting_of_ref": "indicator--123da19f-df52-4f2b-b8f4-8ccb76d7396c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09caf250-df4a-4e98-886c-0a6482d9729f", "sighting_of_ref": "indicator--99941a17-f55a-46c6-8aba-e96ce2d1490d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b38e6e-b342-41ad-84d5-5c1e33d7e67d", "sighting_of_ref": "indicator--acbb6f14-f366-40b1-a03f-132f50a75fa3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f6cd2c-3ba9-4d6e-a681-2d5e93b4631b", "sighting_of_ref": "indicator--c776de98-2722-411d-b676-9a6bed1fecde", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990da7a6-7349-4c0c-8038-f16651c4b460", "sighting_of_ref": "indicator--c1439528-c7b7-4a10-afe7-b0b164b40333", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfeedf6-3924-4513-b1a4-565f2c92d382", "sighting_of_ref": "indicator--c1439528-c7b7-4a10-afe7-b0b164b40333", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab14cfc-0858-41e6-a002-e0e2647b6a4c", "sighting_of_ref": "indicator--d119a180-0c8b-4867-9701-53719141d803", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce42659d-0501-4d5b-b137-d7f070025ae8", "sighting_of_ref": "indicator--8415c3d6-53f9-421b-8ff3-6c004a7a102a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47644d7-3956-4c20-9db3-d86235bb0865", "sighting_of_ref": "indicator--52a05784-cae1-47c7-af30-ee6d60133f10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b49047-b91a-48ef-aba8-32bbb816baf6", "sighting_of_ref": "indicator--01727133-4274-43cc-bd89-7c3741e2ef1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7510e09b-8f18-4560-8674-cb063a26516b", "sighting_of_ref": "indicator--01727133-4274-43cc-bd89-7c3741e2ef1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a74ad95-c0e2-4b97-bdff-72d2bc89ad12", "sighting_of_ref": "indicator--01727133-4274-43cc-bd89-7c3741e2ef1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af2fa3-de68-4d4f-92ba-5cb75f50815b", "sighting_of_ref": "indicator--acf9a2fe-0dd8-490a-9dfd-f44d21fd138e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000dc44e-78c1-43dd-b300-3a309f6e7278", "sighting_of_ref": "indicator--acf9a2fe-0dd8-490a-9dfd-f44d21fd138e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94293f6-0ae6-4e73-bcfd-13c8b255d16f", "sighting_of_ref": "indicator--cd0e6424-aa7c-4a03-bc56-4760594e1727", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00120c-1566-45cf-90d9-3070253a5a47", "sighting_of_ref": "indicator--cd0e6424-aa7c-4a03-bc56-4760594e1727", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cf2c71-ecc8-4948-9b1c-49f9a395eb23", "sighting_of_ref": "indicator--c5799998-dbb7-4f33-bd9d-66f06178bbeb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ea6ab5-4bac-4d36-b32f-897dc73d5b62", "sighting_of_ref": "indicator--fca9bc6c-dbc2-4565-8355-70b7b4a6409c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6369a383-74a6-4e48-a607-bb8019702e6d", "sighting_of_ref": "indicator--56939482-7af2-468a-a5ef-66a65817398a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c664b73-52cf-4c9a-9da6-e050daff9dad", "sighting_of_ref": "indicator--868df2d2-a437-4211-b1d1-cc050870b71c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a725337-d00d-4fb6-98a1-38a71c2e6e24", "sighting_of_ref": "indicator--58519e20-d2da-48de-a6ac-ca3db36ba60e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f116dee-4c8d-4a15-be7e-36a0dc40d98d", "sighting_of_ref": "indicator--fe8bdbeb-5e86-4011-828b-3b897fadeedc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de6e353-6d27-4b56-a004-a423f9b2bffc", "sighting_of_ref": "indicator--fe8bdbeb-5e86-4011-828b-3b897fadeedc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599c0afe-e1dd-413e-96e1-e8a7249ed29f", "sighting_of_ref": "indicator--fe8bdbeb-5e86-4011-828b-3b897fadeedc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3305dcdf-431d-4d29-97f6-76fc5fbf143d", "sighting_of_ref": "indicator--2311f1ed-992f-45b3-ad7f-fd58d121a962", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c8b1c5-9301-4142-bfed-a9de01073f42", "sighting_of_ref": "indicator--be45cbb1-916a-4ec2-a58e-3959e5f684e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c7ccfa-46e6-4661-ad51-ff1d2c110bbf", "sighting_of_ref": "indicator--80562183-6465-4269-89c1-480e91f4dae6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa17f52-787b-4b5e-8ead-57778deec21d", "sighting_of_ref": "indicator--f701b2b2-2e7c-4707-8da0-aa8a0cc03a03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca6a45-084b-42dd-a036-e94efeb91ffc", "sighting_of_ref": "indicator--130c59a5-b83e-4a6c-9b78-a1f1c6a8a880", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bdb072-9dac-4647-98c7-6ce80fa7833f", "sighting_of_ref": "indicator--2e1fe9b6-e74d-40dc-886b-4b677f516d8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d5f70c-d0c7-4a1d-b0ee-f1fe3be3e7e3", "sighting_of_ref": "indicator--2e1fe9b6-e74d-40dc-886b-4b677f516d8d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc097702-febf-48ff-abcf-29f6843842fc", "sighting_of_ref": "indicator--2e1fe9b6-e74d-40dc-886b-4b677f516d8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5eb84b-46c1-4225-84e6-1769bc5a060b", "sighting_of_ref": "indicator--6f2a741e-210a-4773-b011-71ff6360d95c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae11c9de-6f01-4f3e-820f-9394eb60717c", "sighting_of_ref": "indicator--f69e7523-b1e2-4bf8-96a5-f048819ae9ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b00e313-9a81-4708-9a1c-d225e8b4e5db", "sighting_of_ref": "indicator--e583d3f7-6189-497b-ba60-6e45535c7378", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be724cc0-d9ea-4bc5-bbb9-80e98fc665c0", "sighting_of_ref": "indicator--674c7228-78e2-437d-bbdb-4e8cda30f5c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ec1e38-ff90-49eb-aff6-3b5db2ac915b", "sighting_of_ref": "indicator--86928a6b-12e1-4f0f-8714-734a113d4ff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4505853f-7c7c-4596-9ebf-965136ed9a7b", "sighting_of_ref": "indicator--285390ee-700c-4b84-80eb-20abab9cab33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720fbcbb-0fab-4feb-a0ec-94ac72b2b4ca", "sighting_of_ref": "indicator--a21d1496-6df6-4e79-9992-c85d586df532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461c0e6c-e9c8-436f-bb20-c7ca0572030c", "sighting_of_ref": "indicator--34b45bb7-c452-450a-ba80-c130a7127e1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fcea8d-4df6-4d89-bee6-55a64542735c", "sighting_of_ref": "indicator--34b45bb7-c452-450a-ba80-c130a7127e1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199125d5-a59a-400d-a58b-3b7c6776926a", "sighting_of_ref": "indicator--e5be6c60-5f13-4851-b43c-51af99e6100a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e3f70f-4b69-4826-99ec-2f7652e78e2e", "sighting_of_ref": "indicator--e5be6c60-5f13-4851-b43c-51af99e6100a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3316359-fe78-4044-8c72-098ecedef141", "sighting_of_ref": "indicator--2d354e1f-6071-4035-867e-1f578a90861d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0250dd30-c8d6-42e0-a035-ceb0f1b96405", "sighting_of_ref": "indicator--2d354e1f-6071-4035-867e-1f578a90861d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09281fe-542c-406c-8b89-494d8fb32db5", "sighting_of_ref": "indicator--2d354e1f-6071-4035-867e-1f578a90861d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a8245c-732f-40c6-aa7a-8c0c40fac302", "sighting_of_ref": "indicator--f888cb82-f758-4723-90a9-899697642892", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd0d591-6686-4af4-a9f7-7db1cefb1600", "sighting_of_ref": "indicator--ee41aaae-0111-417e-b01f-e68bdb88e62b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3e9e62-be06-43ef-8ba4-ed2f884fe34a", "sighting_of_ref": "indicator--e11cbd31-cb8b-4298-8a71-0e29dd0238ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292034b-0776-4d5b-86e0-f937a9da0601", "sighting_of_ref": "indicator--4d1b78eb-02b9-429c-8d3a-bbc127f946ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ad4748-cc65-42be-87ff-7722cc6caf9a", "sighting_of_ref": "indicator--cc9775f8-4512-4deb-a7c0-5e6892ad4fda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84449d7-98ef-44d5-8b34-6f3d92ce9a69", "sighting_of_ref": "indicator--297c7756-9df7-4baa-956f-3f660e2ba28e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76029a14-5d72-459d-828a-558e5b9a2725", "sighting_of_ref": "indicator--d6172346-f4ab-4077-b1f9-d434a0864aab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd06052-5a10-418a-898e-56d4c5db2344", "sighting_of_ref": "indicator--80ce91a0-e2a4-4ed9-b7cd-762e3ffd3840", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea3d969-a6ba-4d4f-99df-84ac38804559", "sighting_of_ref": "indicator--edf823cc-3625-42a7-ae4f-d69bd13cd01b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5df03c9-3071-405b-a92e-8e6d44b17f0f", "sighting_of_ref": "indicator--88fda6d2-96d3-4b73-9f7d-e84761d2612a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78431ef-6a30-4c08-b85f-1baa652ee24c", "sighting_of_ref": "indicator--1fe5826a-430e-4731-b854-8f21c3c0e0ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f121c7-5d82-43db-ab46-510bb2c90bf0", "sighting_of_ref": "indicator--9eb11de2-98d4-4c0c-81ed-f88461dd7c4d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a5ca67-dc3b-4845-9659-f316b020f43e", "sighting_of_ref": "indicator--eb58dc90-f214-47c6-942d-00012647a7a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3afcc92-a1c5-459d-a3d3-1e3fe5ea78ef", "sighting_of_ref": "indicator--00df9a64-45a8-4ab2-95e5-852d665b266d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afba43e-ae9c-45c6-a82e-f18644a2a06e", "sighting_of_ref": "indicator--060407d4-f8d5-4518-9aca-a8fca86ddebc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5dfc28-2d5d-4599-848e-de814b0af411", "sighting_of_ref": "indicator--314219c4-f88d-4fff-a760-a41aab7ce590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268638ab-eabf-44c4-b357-69a6785940d3", "sighting_of_ref": "indicator--3756e4ff-ab43-4782-9078-2ef718e6c51e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431e4578-317a-4840-a9ef-a96746882bf1", "sighting_of_ref": "indicator--ad9df013-df5c-40ff-a3dc-49ab04b014c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f1a17-0842-4769-b3fc-4da83c7b2b50", "sighting_of_ref": "indicator--63bf35cd-ab7f-4478-85aa-e6ff746fe1d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6357fcba-4d8d-4c1c-977d-d6a77aa371f6", "sighting_of_ref": "indicator--5375f57e-a332-4423-a67e-440a4f0af046", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30656fd7-f203-46fc-858a-faca25e5f873", "sighting_of_ref": "indicator--ae8ad9db-21bd-48e2-a535-f627c778a1ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028034bc-888e-42dd-87ec-71986009b2f9", "sighting_of_ref": "indicator--04214483-9deb-4d6f-95e6-912b33566d6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af802c2f-5393-4d7b-b937-9fed11179bb0", "sighting_of_ref": "indicator--3ccc0c7a-06fd-4420-8b97-9c5716ca7366", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e0bf3d-3533-4bf9-a427-2776fd8e3ad4", "sighting_of_ref": "indicator--77ec9521-ed74-4228-b3f4-815324de8877", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb7f5ac-f6de-46b1-a7ab-4def4dd6dad4", "sighting_of_ref": "indicator--d2c2bdbd-c131-4cd6-af52-492e648720b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ba2ac2-cbc8-4284-8586-2ba1b6676ba0", "sighting_of_ref": "indicator--ac938620-c36a-469e-9160-53ca65263387", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc4b73a-0052-4a81-9caa-2662f153b38e", "sighting_of_ref": "indicator--ac938620-c36a-469e-9160-53ca65263387", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92390156-76ea-4c61-8530-ba09b6d2f005", "sighting_of_ref": "indicator--ea3021b7-60b1-4f5d-87fc-45956b9a0b9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67294e59-fe29-4fdb-a60f-16efc36b3c16", "sighting_of_ref": "indicator--7ad82c20-f7a0-4b00-97c3-f21584b105cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d53e79-cc3f-4ae7-9f73-ea5e757f0f6e", "sighting_of_ref": "indicator--065f1c3e-503e-4797-ad71-40bb1757a610", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0835d1d-9ca5-401f-b574-03041f0e3d49", "sighting_of_ref": "indicator--0f507811-ea58-448a-8682-1b4484ab5a0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e956afec-3cb1-4241-a8a1-a2d3706b6945", "sighting_of_ref": "indicator--0f507811-ea58-448a-8682-1b4484ab5a0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50077b0e-d0fe-4664-8063-1026e6967c15", "sighting_of_ref": "indicator--40b935d5-718e-4326-88ce-b9d3cb62438c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56374ffe-e559-42b9-b451-1f04050bd884", "sighting_of_ref": "indicator--ea67caa2-58b8-413f-921d-b1fc31397dd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aaac2d-1e37-455a-87b8-9e0f41d8e890", "sighting_of_ref": "indicator--d14d8de4-2da6-429d-a3fe-551271bed500", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d3187a-e227-41d2-a2b8-4a2348cb4e63", "sighting_of_ref": "indicator--78a0f124-6196-41ba-b2a6-de1e514bba9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7814626c-37cb-46f4-b1ea-c7ef23c1e1e3", "sighting_of_ref": "indicator--56b8bad3-03c7-4d39-ad88-6037e558947e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95448ccb-708b-450c-878c-b639f4075981", "sighting_of_ref": "indicator--a0df989d-04e8-4cc7-9bda-5dd673577041", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c8df12-4b80-49fa-80c1-83b1dac7f5f3", "sighting_of_ref": "indicator--a0df989d-04e8-4cc7-9bda-5dd673577041", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a3266b-eb76-4226-8e9d-e4c8d2d7a408", "sighting_of_ref": "indicator--091f4ab5-129b-46da-a16e-0a2eefa7091c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a88668-f4bd-4f08-a63d-959d5533c4e9", "sighting_of_ref": "indicator--c8075336-2d3a-45e0-bd48-2ce21d0cf68c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d992dc-596b-4ef5-a050-c89d7d28fc72", "sighting_of_ref": "indicator--3729a2bc-421f-4cd5-951a-eb473762dd50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f2cf2-7301-464f-a65e-098c8df25131", "sighting_of_ref": "indicator--3729a2bc-421f-4cd5-951a-eb473762dd50", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cde5fc4-24ea-4ff5-a25d-024e165a729c", "sighting_of_ref": "indicator--3729a2bc-421f-4cd5-951a-eb473762dd50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c8fe2b-d67a-46f9-8aad-66e5e1ee3e37", "sighting_of_ref": "indicator--4f33779f-82fc-4b71-ab29-8d2080dac330", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e3a8ab-db2f-4ec8-87ec-49b075c87806", "sighting_of_ref": "indicator--b731bd58-8180-4cf4-b851-1c2a8ee4f233", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7190e5f-e7f1-4143-9fd5-fb510c5a468d", "sighting_of_ref": "indicator--b731bd58-8180-4cf4-b851-1c2a8ee4f233", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baa7765-97f0-466e-84a3-df3b353281ae", "sighting_of_ref": "indicator--b731bd58-8180-4cf4-b851-1c2a8ee4f233", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2957f7a1-52fb-4b38-a68c-1f01bace4ef6", "sighting_of_ref": "indicator--18776ae8-a6d1-4899-a33f-479b603ba5df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a814af4e-2217-402d-8a96-ac5d34ef40e5", "sighting_of_ref": "indicator--45481bd8-aec9-4e5e-bd57-8919162dce16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a33318b-4fb3-4e10-9eb4-c6ffab4fecc5", "sighting_of_ref": "indicator--1cac5f2f-47e6-49d7-8366-bc259d1ca766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ee695-2af8-499a-ae52-a7697c486f68", "sighting_of_ref": "indicator--1cac5f2f-47e6-49d7-8366-bc259d1ca766", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9af03e-468e-48f2-9add-98dcbf780988", "sighting_of_ref": "indicator--1cac5f2f-47e6-49d7-8366-bc259d1ca766", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f0347e-92d2-4dfc-8673-25e9d3101308", "sighting_of_ref": "indicator--bd73f3d8-5008-423e-b3fe-5962fd232736", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e50bd46-b845-468c-b18c-d735d06b7080", "sighting_of_ref": "indicator--bd73f3d8-5008-423e-b3fe-5962fd232736", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbac7bf7-db3b-40f1-a581-edf630398682", "sighting_of_ref": "indicator--bd73f3d8-5008-423e-b3fe-5962fd232736", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c43bbf8-25da-41b4-96fe-9508b2bb6634", "sighting_of_ref": "indicator--8845986c-bc46-4c7a-b9d3-354e71356e11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78177115-43d4-4a6f-bca9-d59f619d808f", "sighting_of_ref": "indicator--65b3f0d6-5f11-44be-a64f-a6fb031abeff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d548f179-0378-427e-a2b9-b32dcc7a6211", "sighting_of_ref": "indicator--0471c6c0-2276-4eda-b5d9-0e3877680c59", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceefe42-a6db-4924-b449-d00be777fedc", "sighting_of_ref": "indicator--0471c6c0-2276-4eda-b5d9-0e3877680c59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f9368b-73d4-41d1-aa47-536f5047fd46", "sighting_of_ref": "indicator--f15368b4-5346-42a2-b492-617828ba4317", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00407479-00bf-4dd6-b902-8b3387048e9c", "sighting_of_ref": "indicator--1f2b6c67-1161-44ce-bb5e-e587d487d3ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bfbf0c-a29b-4026-9d24-ef5103c5aff3", "sighting_of_ref": "indicator--1f2b6c67-1161-44ce-bb5e-e587d487d3ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41901bff-1312-4671-9f0e-8972ce2a9deb", "sighting_of_ref": "indicator--1f2b6c67-1161-44ce-bb5e-e587d487d3ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cfe2be-020f-4069-ab3c-c8f49c48f07a", "sighting_of_ref": "indicator--216c76a8-c10b-4fb4-9c84-d9e8a75e8549", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01136153-4411-4635-9359-bb3b463be7af", "sighting_of_ref": "indicator--216c76a8-c10b-4fb4-9c84-d9e8a75e8549", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f801123e-3e48-4022-bdbc-e301d63acd78", "sighting_of_ref": "indicator--ee901c49-4bf1-47b8-9849-ac1cd63271ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e379b42-4700-42d2-a34f-149e9f63fc28", "sighting_of_ref": "indicator--ee901c49-4bf1-47b8-9849-ac1cd63271ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461efe6f-c62c-4d1e-b329-e50ca018d89f", "sighting_of_ref": "indicator--ee901c49-4bf1-47b8-9849-ac1cd63271ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b9aab-e2f4-411e-94c6-3b05248244ac", "sighting_of_ref": "indicator--a6b1b672-468c-4903-a5a5-20e77cbc5a9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e754fc-a6dd-4c16-b608-8bb1cc4c3993", "sighting_of_ref": "indicator--9edffb4b-3836-4c3f-b94d-1f1fb1f56e54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc29f72-905a-4ba0-b886-e4bdbc1da79a", "sighting_of_ref": "indicator--3912f577-07d6-404a-92cf-ded23ffd007f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dc8a60-876a-46ad-a36b-eca5d0e8452a", "sighting_of_ref": "indicator--21b1acb4-a9d5-42ac-a69a-6cc3370e560f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f88b7a-541d-4bfe-bef6-02f331ac37b9", "sighting_of_ref": "indicator--fdc7b48b-aacc-4e42-9f6c-da6200f97024", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec6fb0-6baa-48c5-be98-5036ff20317d", "sighting_of_ref": "indicator--0c5581e0-3f5a-41e8-8cca-860c61b6d73e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f235200f-6449-47ef-a0b0-78e1e2c40d82", "sighting_of_ref": "indicator--cf3c48ad-52ce-4aab-8864-01144dcbcf75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe56fdc-41ca-461b-844d-023f213a0449", "sighting_of_ref": "indicator--cf3c48ad-52ce-4aab-8864-01144dcbcf75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c800044-2568-4ee9-be95-396bb31b4848", "sighting_of_ref": "indicator--cf3c48ad-52ce-4aab-8864-01144dcbcf75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c43878-f5de-4d4d-93c0-9f8dfcc692d2", "sighting_of_ref": "indicator--bb8b2709-6694-4396-b470-560d05df1c01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1397cb7c-01ee-45cd-9c55-15c839fcbb22", "sighting_of_ref": "indicator--bb8b2709-6694-4396-b470-560d05df1c01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc1cbc8-5868-4fbc-b4cf-b9846dbc3825", "sighting_of_ref": "indicator--bb8b2709-6694-4396-b470-560d05df1c01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eea0a83-6745-45f2-be99-6e437f8e7c02", "sighting_of_ref": "indicator--8936c3b9-8fcc-4db0-9105-67cf07a932eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556344ec-ec51-4981-82db-0dc2123245d3", "sighting_of_ref": "indicator--8936c3b9-8fcc-4db0-9105-67cf07a932eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd4b9ad-615d-412e-8519-a3f088142875", "sighting_of_ref": "indicator--949c392e-75db-4b76-9c18-166bbf75bbe2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c16049-0c8b-4d42-a3e2-7b342ac9add6", "sighting_of_ref": "indicator--85831023-514c-431a-a013-ad744d90c9aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072a14bb-2f4d-4544-8ba9-b7e5aca5d05a", "sighting_of_ref": "indicator--ce83acf6-e13c-4e31-a07c-cb88399b8dbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661a21ec-f4af-40de-8fc5-721bd985c4ea", "sighting_of_ref": "indicator--26e769d2-3e62-4d3c-ac7c-1bc348078ff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32503fc8-6ea4-48d2-a036-4d1c748a95ea", "sighting_of_ref": "indicator--45aae343-77f6-46a6-859f-a34ff1f30bf1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa0080b-64bb-4555-85c9-ebf0bd9afd6c", "sighting_of_ref": "indicator--45aae343-77f6-46a6-859f-a34ff1f30bf1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2fe0cc-f8db-465b-9759-66cc8e1cdb45", "sighting_of_ref": "indicator--c845d663-23f6-4acc-ac69-2094fa891ddb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303b0a18-a60f-4767-a346-a814abf19e91", "sighting_of_ref": "indicator--0f1a2807-4883-4139-93f1-6fbc797b68fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b550794-5f64-4513-aa15-b20a093b8d64", "sighting_of_ref": "indicator--33873dd5-95d4-433e-9525-0ee1aa22818d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0633375-6e78-442f-850c-112aed841d23", "sighting_of_ref": "indicator--ac1bba07-1e18-497a-bc80-76b3e08bf58c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ccdfa0-9631-4d76-a0f9-2e1dda96f59a", "sighting_of_ref": "indicator--58519382-97de-4121-8aac-a8e49f837dc5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad775248-3442-4b00-8715-3bb4a4879d75", "sighting_of_ref": "indicator--58519382-97de-4121-8aac-a8e49f837dc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067dc8cd-dc37-423d-a5ad-c66c0faf42e0", "sighting_of_ref": "indicator--3ff82508-23bd-4ef6-b0a5-0da0d5a825dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7910ae80-d555-4ade-8d76-112cd9504ec9", "sighting_of_ref": "indicator--3ff82508-23bd-4ef6-b0a5-0da0d5a825dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ed5bb8-78da-41bd-ac59-693bff9d0716", "sighting_of_ref": "indicator--6bb3a831-69bf-48c7-8caf-ab68d81d1e0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a413f105-d149-4abf-bf69-480f3432ea33", "sighting_of_ref": "indicator--9829f58c-f7cc-46e8-bc77-b4bc0f51004e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a542ded4-0fee-47c9-9bfe-181e053b2509", "sighting_of_ref": "indicator--846e79f0-d198-4745-a75d-197dfa2c93cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729d7f42-4024-4ebf-9e05-9680ee7610ca", "sighting_of_ref": "indicator--073a5a31-244f-453e-a263-c5fdccde0e86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46587914-2dab-4fea-acf2-db0ab6316d59", "sighting_of_ref": "indicator--f1386e4f-0e07-46ff-ae06-f3a0f106e6ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe93e626-4b49-4009-987d-d866d0e6e951", "sighting_of_ref": "indicator--fcce07a0-a8f9-4909-bfab-67c915df4dd7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9131f33-b76a-4a62-bf4a-922c8d3a547e", "sighting_of_ref": "indicator--fcce07a0-a8f9-4909-bfab-67c915df4dd7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2125583-374b-4ec6-bc89-a2a37b2658fb", "sighting_of_ref": "indicator--75d0e1c9-0ca1-40f4-ae8d-e7632688e242", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9074c18b-62ac-4c25-8836-4bfa7b00db1b", "sighting_of_ref": "indicator--00ab0f70-7f86-4f62-bee0-434bc8a8d0cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e619663a-adc4-4562-8fe8-53a5252245c2", "sighting_of_ref": "indicator--f0fccb40-ce6e-47be-b269-60d5787dc4a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f4fd0-1c4f-462a-8af7-129054dad9d3", "sighting_of_ref": "indicator--f0fccb40-ce6e-47be-b269-60d5787dc4a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8c114d-bb75-4ee1-b846-598327164029", "sighting_of_ref": "indicator--91f8df79-aac8-489f-a4ef-e1f84da6e25e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e89e5-7ab4-43ec-9b74-dd05d49dd7fe", "sighting_of_ref": "indicator--377c9b4e-d359-48ac-ab65-63de7eb7ac8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff888394-682f-49ba-bdf1-9bfb84ed08d3", "sighting_of_ref": "indicator--059702df-ec89-4ec1-8a79-a8d85d1bf234", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60627c8d-ff74-4a78-b7fd-72a6bc8fa65f", "sighting_of_ref": "indicator--8f8da8c7-ab6d-493d-9f61-3235b2ac40d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30534f6b-a811-4209-bb7c-028b21759244", "sighting_of_ref": "indicator--469eb7b0-6f01-4a4f-aa89-d3c7c6bbfecd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b417427-c825-4530-84af-b733e7cfe823", "sighting_of_ref": "indicator--324581c9-ff7c-4aaa-84ba-6fb2279ba7fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f3da3-650d-4f15-b02f-edb27718b7d2", "sighting_of_ref": "indicator--a179abad-9f1f-4e53-a946-09e848f387b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65cb51f-64c4-4357-b54b-46389b45f825", "sighting_of_ref": "indicator--affcb219-3bbb-4253-9c5f-7f4ef56801f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93f9759-9e57-4123-be06-2e426387621e", "sighting_of_ref": "indicator--affcb219-3bbb-4253-9c5f-7f4ef56801f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e75a2c-f6e0-4d8f-a9a9-46b5210eaaa8", "sighting_of_ref": "indicator--b130b4fd-e7c6-4d51-9367-9f88ca325eb7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21048b40-980a-49e1-91e4-cef70c472114", "sighting_of_ref": "indicator--b130b4fd-e7c6-4d51-9367-9f88ca325eb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668aa00a-8eae-48b1-b841-ab293288d22a", "sighting_of_ref": "indicator--b42eca97-593b-4134-8ea4-0d0e7b20667b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1920a8dc-93ca-492d-bfaf-f8db97e2c514", "sighting_of_ref": "indicator--b42eca97-593b-4134-8ea4-0d0e7b20667b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f67db9-f85e-49db-b076-f89ffe2dacb1", "sighting_of_ref": "indicator--427bb3bc-b13b-4289-879c-2f8372de64a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547885e9-4944-48df-86b9-bd65cfc31810", "sighting_of_ref": "indicator--741e7b51-cd4c-4cc3-8505-0122a1159900", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0a5c0f-a0e1-41db-98c9-b6d1eaf40341", "sighting_of_ref": "indicator--743d8210-9ae2-4aee-8c6f-ad35ad1ad007", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1743690d-5ad8-4356-8e68-403d644ecd9d", "sighting_of_ref": "indicator--6c41f097-a154-4a10-9572-f9a120a0e3f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c1c219-00a9-4c14-b279-853a8f8fe700", "sighting_of_ref": "indicator--6c41f097-a154-4a10-9572-f9a120a0e3f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43294e8-821e-4aad-a498-e8d749b0b2d4", "sighting_of_ref": "indicator--22b38eb3-a17c-4bbb-a211-83e17547487b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2656bfbc-2575-49a1-b46a-a0824f1aef39", "sighting_of_ref": "indicator--77d1d9ee-0dac-4ee0-b5df-5c872d39b900", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3df2841-f96e-4ec8-b41c-5105b4e5850a", "sighting_of_ref": "indicator--77d1d9ee-0dac-4ee0-b5df-5c872d39b900", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6872940f-80e7-49cd-ba1c-4a2065166758", "sighting_of_ref": "indicator--88b82d51-591c-472b-ac7a-04634fdfed07", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fb6fca-d4c3-42b5-9b03-44679585c600", "sighting_of_ref": "indicator--88b82d51-591c-472b-ac7a-04634fdfed07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0a119-130c-4eb4-9427-5ee41838c199", "sighting_of_ref": "indicator--88b82d51-591c-472b-ac7a-04634fdfed07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9b5368-5589-4abf-a1f4-263c463e5c75", "sighting_of_ref": "indicator--a71cf815-5833-4e24-8022-b279ba62f350", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc8937f-0f2d-44f5-9a4d-df45f6beb750", "sighting_of_ref": "indicator--f4ca13a5-2330-4c1b-994a-a96196eb4479", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f2725-af10-4b48-b6ec-967bff79def6", "sighting_of_ref": "indicator--94721e87-7279-421b-9a3a-63b890f2b75d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e6669e-7d3b-4ee0-8e31-8e05ef872c1b", "sighting_of_ref": "indicator--94721e87-7279-421b-9a3a-63b890f2b75d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9fd343-3285-40a0-b588-fa7cacfb1b96", "sighting_of_ref": "indicator--a46c28ff-5e3d-45ab-a1d3-e41233619144", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbb3402-d31d-4d5e-9bfc-74a63f7a13f5", "sighting_of_ref": "indicator--43caf0b0-789e-471c-b959-3108eba94f3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fb94d3-3cae-4dd3-92f6-1c2de5d9cea3", "sighting_of_ref": "indicator--d7cd9845-e4a7-4f60-b683-8bcac4ee545b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff90358-0f13-4984-9b4a-c8760afc579d", "sighting_of_ref": "indicator--76d3b6a1-e0db-4a7c-b7e4-035e6e7994a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45610b8a-7aec-40c2-8135-ac0efd739f2d", "sighting_of_ref": "indicator--b428d579-e791-4691-b62c-a0512f8387bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3dc89-1ebb-4bca-960d-4ba731c86286", "sighting_of_ref": "indicator--e694c519-9074-4c7e-aa0b-759d9c881fad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4236a6f-1d2c-4bac-9ae9-3c1af4d9b84b", "sighting_of_ref": "indicator--0ab85011-3cba-434d-910c-a3ba16873031", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef6b1c5-d974-4dc5-b0b9-5762a835a7d1", "sighting_of_ref": "indicator--e4a774c4-3199-406f-8482-a3c05fed36d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cd320d-b6b4-4b93-a999-0a5799939cc2", "sighting_of_ref": "indicator--5ca41d83-9010-43cb-b3a3-1a2f850edfa1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e46ee31-6d69-465b-9eea-2f43edf46641", "sighting_of_ref": "indicator--c61e0d78-463b-4ccb-83ae-d23fb2114669", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9728eb3-c10f-4f58-acf2-2b1e5a915fc5", "sighting_of_ref": "indicator--429fc5e4-e817-4228-9253-5ca2a93da1af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cb81a9-7070-41e8-aad0-64e6b6826896", "sighting_of_ref": "indicator--b7419872-a22f-41a2-a5de-ff0cf88e8d96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72323a35-db30-4259-b8cc-6e171ea724b8", "sighting_of_ref": "indicator--5b8671d6-2978-4049-a60c-6329723c2aa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6fb0e3-cc3d-4091-bcd9-cb32e2dd3d81", "sighting_of_ref": "indicator--62ad9873-b402-4043-8145-dcf530b54693", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a77365-9253-46b1-b665-5bad24a43310", "sighting_of_ref": "indicator--62ad9873-b402-4043-8145-dcf530b54693", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c5a5ca-213f-438b-95c2-90fff6e460af", "sighting_of_ref": "indicator--b241c113-0e6f-4faa-b075-8b2a1ab999bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23c6d8c-d013-4928-9967-b918e59b8e7f", "sighting_of_ref": "indicator--192ddf0c-dddf-44fb-bf9e-82960d0c1a0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e467fc3-38fc-4660-baa6-eb07af184e4f", "sighting_of_ref": "indicator--365ee05e-eb1a-488a-85ff-0e173f7d93b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eb0f33-3fbf-4b20-b03e-84223fec8bad", "sighting_of_ref": "indicator--a0d4ca8f-ee82-41e1-a9b4-528b2e1587f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62136675-92b0-4075-b76f-72b9b9d3c3dd", "sighting_of_ref": "indicator--c1673a40-d795-440e-a0e6-22408352585f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc9b42c-61d6-49ce-9096-14e18dad5a25", "sighting_of_ref": "indicator--220b24bb-39d9-44ae-8966-c80edd239e25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744624a-1c03-4152-8940-310b49429646", "sighting_of_ref": "indicator--bab2f9dd-2f25-448a-8085-eb47b4cc2cb9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc222921-c957-4dec-acdc-8e6b3322d212", "sighting_of_ref": "indicator--d0d062b6-e405-4688-8f54-a796f7633fb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dc4c3c-d32b-4d08-b179-7de7bc31a513", "sighting_of_ref": "indicator--d0d062b6-e405-4688-8f54-a796f7633fb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac1c839-b40a-4d16-8609-be1c3e5ada79", "sighting_of_ref": "indicator--47a9fdf3-ca86-4972-8247-c882f9cbecaa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7227080f-1f67-4f58-a574-810198fd8433", "sighting_of_ref": "indicator--3ae87556-aaca-4e7c-9838-6e89bcae37e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cd21ce-ab4e-4a16-9344-d1792bb89cfa", "sighting_of_ref": "indicator--6d5204f7-6afb-4879-aecc-bff060a91d5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad84233-49d1-4b2e-a054-213c9f5773aa", "sighting_of_ref": "indicator--ed677959-d763-4b9a-baa1-3618ad3e41db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f3daaa-a2a9-47d8-afb2-48a80ddd3303", "sighting_of_ref": "indicator--ed677959-d763-4b9a-baa1-3618ad3e41db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab995560-123c-4611-9f58-67f6f782840f", "sighting_of_ref": "indicator--d3c7397a-e2a7-4c67-8f4c-aa8ebcc84fe7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19f63b5-3f0d-40a0-8d2f-ab9f85db1283", "sighting_of_ref": "indicator--f9789b73-c9b6-4399-bf49-53232a96702d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6892cca8-1822-42eb-a8ac-f92e329bb6ae", "sighting_of_ref": "indicator--65c635af-938f-4329-b4b7-4a9e858fd35a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228722cd-10ab-43a6-abf1-c780d0c8a3f5", "sighting_of_ref": "indicator--b52eada6-21c6-48a9-8a8c-80ddcc10867d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92fb4ee-f3f2-4e60-b8fe-b17379340b26", "sighting_of_ref": "indicator--2bd7c082-05f0-4420-879e-8885b767bed2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c654cd2b-bcdb-484a-8eef-03df8a52dba7", "sighting_of_ref": "indicator--e1a467ac-6d8c-4b41-aa45-a9db8ff1e831", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd5fdcb-bf2b-4ce7-baa1-c0cf2706db83", "sighting_of_ref": "indicator--8b0e0cd4-6a30-4e45-a9c2-7af07100cb6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b460e6f-bfe0-412a-ac55-a18e84e44c8f", "sighting_of_ref": "indicator--b86f9c50-7733-4b10-9e52-8f11cdd9eae1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd9e250-d29e-46fa-896d-1cc93d3ccbf8", "sighting_of_ref": "indicator--83e99a44-3925-416b-bc27-b6400f42a3ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14300d30-ad6b-4b1e-a6bb-57b9d949ae45", "sighting_of_ref": "indicator--8f227920-5737-4c24-8883-38bd5ac36acd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526052d1-2474-4114-910c-1d6595b8fa36", "sighting_of_ref": "indicator--a650f2ee-0e98-4deb-9d65-347230dc2ccc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0411b85f-c4cd-41a8-9424-62eaaef45d41", "sighting_of_ref": "indicator--685ca99f-bf3d-443e-b12a-933d3131c24e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920f9269-1f61-42f8-817e-9ad20e022638", "sighting_of_ref": "indicator--72f46439-0f81-4705-863d-2acb93e0ae38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba53e19-ae77-41b6-9599-fd11c9931faa", "sighting_of_ref": "indicator--c253249e-b037-4447-b08e-c6eec6ff454e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e8c266-c2ed-4265-9092-89aa36ca1da8", "sighting_of_ref": "indicator--0fb999db-6e88-4fbb-9e05-374e24dfc08d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073096cd-fea7-4e1c-b359-89cc4d9775e8", "sighting_of_ref": "indicator--a452b4e5-e7cf-482a-b249-68fb614adf3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6302f0-eef7-4fed-8418-0e9b1b877610", "sighting_of_ref": "indicator--d6bc22a3-626f-4673-af2b-15e2b7cc0e9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9825248-64be-4487-b904-c83d67d69b6b", "sighting_of_ref": "indicator--a884c630-1dd3-4dfd-9b67-250afe5c1e36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d10dde-b065-487e-a5c0-1188d04d5752", "sighting_of_ref": "indicator--23b94bc4-5d54-450a-bfe7-baeec45c01e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6d3a6d-0a22-4066-89c3-c8da834ec858", "sighting_of_ref": "indicator--b76cfe7f-ef86-4efa-9f5c-baedc4e57254", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d983ce94-93b4-4207-9be6-0c35238d7691", "sighting_of_ref": "indicator--cadb2f9d-dd8f-4509-be4d-d68da043a8f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494d478-0854-44e9-abc5-b5bc437407d4", "sighting_of_ref": "indicator--87feac52-e98d-4b7a-8c7c-f74bc68393f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8af2e6-6710-4e4b-959f-a3d11ea6363d", "sighting_of_ref": "indicator--afda3d43-cc64-47bd-b1d5-02bd05754f85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a738f9-3c56-4f3d-9462-3e3dd17ecbac", "sighting_of_ref": "indicator--4d7f2f1b-0991-4651-a795-4e356f4c9d5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae0d6f1-0308-4be5-86dd-4a25b4311743", "sighting_of_ref": "indicator--4778e3aa-7ac3-4e8b-b487-dba6a366c4d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01be7d16-8ec1-4e3f-bedc-a6d03d13c4be", "sighting_of_ref": "indicator--cc0220c5-9ff1-487e-b773-ca8c8073da56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa6e979-154c-4c61-a2ce-e004058a3db2", "sighting_of_ref": "indicator--86fdad40-8d6b-4532-8026-4e320ce369eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9dcdde-cb43-4d3a-b887-ed379243c06c", "sighting_of_ref": "indicator--29e4a10c-69a5-44e9-b5c1-ee767a0b011e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb499dc-2fd5-4b78-ade8-0cbf8a92e77e", "sighting_of_ref": "indicator--11e2c70b-51e8-453d-b8ef-0cc6f8c5d9b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2266944-4134-45bd-a471-a7afe4158910", "sighting_of_ref": "indicator--27e61f4e-096c-4147-b603-7ed2b948f0ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36a8ad9-adf0-49e2-9cdf-4b8eb487a145", "sighting_of_ref": "indicator--e17f87c3-433a-4396-8ee0-dd95db8de817", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9c7f6d-4b1d-4af0-a84d-af063f4c09ed", "sighting_of_ref": "indicator--c1b466f5-31a6-454a-93f7-9cc6d5796d60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c269dd-1517-4e10-a5b1-cf62cabb14bd", "sighting_of_ref": "indicator--ae1d092e-b75b-40cd-a7ab-6e1fbddea425", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c82307-c585-4910-b58e-b5e53e89e588", "sighting_of_ref": "indicator--535f6e7f-845f-401c-8bd2-a80206af4fd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff80e30-9dbe-4d20-b317-bf7966e2789e", "sighting_of_ref": "indicator--0a024e1f-62f8-461b-8cb9-93501a04918d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979c9e5-3b6b-4e4c-8d23-1b5e32ded162", "sighting_of_ref": "indicator--0e7b053b-4141-479b-83cc-afbe9bbe047f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0616cb6-d75a-4c43-92e1-2b44835cbd3f", "sighting_of_ref": "indicator--3120adb2-978b-49b2-853b-14def75e85f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ddbec9-e21d-49d0-876c-fdbe9be4fd00", "sighting_of_ref": "indicator--d2ccfef5-020a-4a77-8e9d-5c79e61d7259", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b5c25-93d6-464e-a016-c05b16f474b3", "sighting_of_ref": "indicator--e3b26d15-9cec-4613-b37b-30c552ff951d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ee221c-8788-47d8-b77b-b91c76716f3f", "sighting_of_ref": "indicator--864ffa9a-d259-4179-8fa0-ae55e7f97382", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ffa751-e756-40f0-9445-4a15158e0682", "sighting_of_ref": "indicator--16cd5087-0737-4019-9c1f-7ed741057fae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674fb241-18fb-445a-a037-f4593c1a86a2", "sighting_of_ref": "indicator--2182365e-a733-4023-bc36-e9cd0cdb36a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343babf9-25ab-4828-ae9c-de1516325263", "sighting_of_ref": "indicator--508fb810-610a-47d2-a253-8641305d858b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f310d09f-2e8c-48a6-a312-079adea634ea", "sighting_of_ref": "indicator--ba179c91-4e95-4c73-b852-0af2113dae02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0a58a0-5355-4f67-91b0-f2aa777ce201", "sighting_of_ref": "indicator--aa5e998a-4bc1-4129-b943-065ebc303df4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916ea18d-226c-478d-8536-b4183118c92b", "sighting_of_ref": "indicator--7e6738df-6cd0-4a4c-b808-97f800ac0a6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cad62b-3577-4be7-adc9-514ac88beb23", "sighting_of_ref": "indicator--d11f5fea-ea4e-4a08-8e65-4255520d53ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea48ba5-3821-4d88-ab04-2cb89ea87f4e", "sighting_of_ref": "indicator--fdfff952-7e83-45bc-80a0-7c45d7237905", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad292a-5a41-49e5-b305-c37193158c3f", "sighting_of_ref": "indicator--fdfff952-7e83-45bc-80a0-7c45d7237905", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cb0c7c-6f8b-4f98-83f2-6394a2e86eba", "sighting_of_ref": "indicator--475ee569-1101-4a67-a855-a012a0d392f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521bad4c-8602-48f9-a565-c7f28fcc9826", "sighting_of_ref": "indicator--cadff580-830b-4add-ba1a-ea8a15a47a99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5314eafe-ca52-486c-9cc3-e53d2481b666", "sighting_of_ref": "indicator--bd46c0cc-19f9-4458-9d9a-4715f1d94729", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f72ee-c154-476c-86fb-0d3d97ed5199", "sighting_of_ref": "indicator--25e6fea1-0318-460e-a98e-8970ade18f2d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c808a54-e4d9-450c-9f34-26fd9270008a", "sighting_of_ref": "indicator--19736469-85fd-444c-873c-6dc7ac4dc53e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a25aa49-7887-4552-8237-bb5e5f8f52a2", "sighting_of_ref": "indicator--44f1dc4b-a798-4f92-a846-645c90d0f09f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c014b2-bf64-4890-a1f4-d285455cbcfb", "sighting_of_ref": "indicator--a54a58fd-cde9-427b-929f-caba44b20167", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71e99d4-3149-425c-a37b-ecf9c63ca658", "sighting_of_ref": "indicator--ea8b2f6c-da03-4249-8ef3-6889c35b8483", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070b30db-7ecb-4a3e-9a45-bf247ba48332", "sighting_of_ref": "indicator--d7d5c8c7-c2e7-4443-92ca-566b499d0274", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86f9a36-dc1a-4213-a002-c93bea0ba968", "sighting_of_ref": "indicator--751cd16f-1e71-4dee-9df2-b6bc7914f17e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a61443-d9b2-462b-9e4f-b0b3f9a301aa", "sighting_of_ref": "indicator--0371e506-ff10-4a7c-8791-9e8f66234794", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d16bdc1-37d0-4537-8afa-4449561bd81a", "sighting_of_ref": "indicator--e51877be-a8b8-40ce-92b3-0a5f376e6736", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab237fd3-452d-486f-8e76-ee4a632a943b", "sighting_of_ref": "indicator--58de7580-cdce-416b-8e8d-5f73e8a9c86f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdb847a-2ee8-4b37-b8fe-f78cdf2ffd8e", "sighting_of_ref": "indicator--b47e62df-ae75-4f73-ae0b-e530fadedc21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed81062-7e14-49c5-b36b-6214bcc054d6", "sighting_of_ref": "indicator--fd7e638c-6404-4620-9e38-1024ac5a8574", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5462cd7-f67a-45c7-bd21-c8ccb00471fd", "sighting_of_ref": "indicator--2e510cfe-b3e1-4be4-a3c8-94e72d975af7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499fc6e9-9d7b-47c9-a5d1-d8c65be16659", "sighting_of_ref": "indicator--b647a59e-9c47-4c1d-a32c-ab5814e2e794", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a852d43b-d72a-40cf-8988-7c44e6bb95ca", "sighting_of_ref": "indicator--5f2a2040-1fd7-426f-82b4-9daeed588edf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f13654d-9552-48db-a053-b02084fdbee5", "sighting_of_ref": "indicator--8842164a-2657-46e9-95ed-f9b9b530d1cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a9e1e9-d5b9-481e-9943-9ad41be6241f", "sighting_of_ref": "indicator--9c975130-d68c-43f2-bf80-efebd9431174", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38d4e63-7355-4155-993e-87421f4e7290", "sighting_of_ref": "indicator--5cbaaadd-14fa-43f5-a749-ea2ea02d82a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea6e94b-2190-4612-abb0-036f558b969d", "sighting_of_ref": "indicator--53b92d11-4a8c-4b39-8827-4ef366127e69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893481cb-e486-4ba7-a5e3-b8f572250b58", "sighting_of_ref": "indicator--50581d73-7be8-44b1-8493-0cfb601c0e74", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd69cd2-da33-43e2-91ac-b4d8e6062668", "sighting_of_ref": "indicator--1d87c8e2-eea1-493e-8009-078bf8ed36c0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8613e3c-2b2c-4d5c-b58b-547f2c529f44", "sighting_of_ref": "indicator--8f3c1fbf-e54f-40ef-85c9-1586bc145fd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec876b85-1a3a-488f-b322-0ab983a83510", "sighting_of_ref": "indicator--e09f5305-9557-493f-bffa-b66b00771e77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fcf780-cd53-44b0-a6d3-f4a5372af616", "sighting_of_ref": "indicator--95a40f8a-7e65-4fce-b688-91a162950a98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5017e2cf-be2a-422e-90c9-ccbf09ce1eda", "sighting_of_ref": "indicator--dbc9ed14-1bee-4bfb-9cf3-04f43b5d7e42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13122355-dbf6-4fd4-917d-087adfb91a46", "sighting_of_ref": "indicator--e4c7ab4c-2362-4355-aac4-fb84963ae218", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed012f1-c824-4590-b6c1-828cea1ac061", "sighting_of_ref": "indicator--e4c7ab4c-2362-4355-aac4-fb84963ae218", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31716111-0d76-4867-906a-a196fc9db5f8", "sighting_of_ref": "indicator--b1a20793-3056-412e-8a6f-2b37ebc48822", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8199898-185c-4bee-92e2-29f61d11c919", "sighting_of_ref": "indicator--76f814e9-7b45-4430-a451-b8e505bc3620", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b66142-94ee-4674-9687-656cf0ce7f17", "sighting_of_ref": "indicator--a577cc1d-7427-4f98-8acd-78611d16e59e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb029317-b9df-4641-a8b8-7239841fea34", "sighting_of_ref": "indicator--f5d678ed-70d4-4b24-994f-97c496815dd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97d8dfe-82ec-420a-8fc5-e774d4ef4a8e", "sighting_of_ref": "indicator--f5d678ed-70d4-4b24-994f-97c496815dd1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc1ff5-3c53-45f3-bcd0-ec93979942fe", "sighting_of_ref": "indicator--3dd88099-2e86-425e-90db-0360f2e3154a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff8fafc-57c0-46e2-af40-072a98486358", "sighting_of_ref": "indicator--8603af1c-fb98-4177-9ad3-0fcb99519e12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555c0157-73ad-489a-ad8b-9c05a20ff694", "sighting_of_ref": "indicator--5557b806-c8a8-4325-bf49-8212ae425a0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db1b071-6d3d-470b-9a0f-808eab0c35b2", "sighting_of_ref": "indicator--0d5ec07c-5cde-4842-bb9c-9ddba6d4492e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70753fa-120f-4d1f-a262-12e3eeae137e", "sighting_of_ref": "indicator--0d5ec07c-5cde-4842-bb9c-9ddba6d4492e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e352551f-7d3c-47b4-89c8-a99ee1ab65ab", "sighting_of_ref": "indicator--f7cf7a90-67ac-4df8-a934-c0173f46217a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6adc06-5549-44b0-97b9-09387bf8d9c8", "sighting_of_ref": "indicator--b9f98e7f-89d5-41d2-aa03-c58758db10e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b89af0-56c9-4898-abb1-f9c9de93bb4c", "sighting_of_ref": "indicator--b5d056c8-0994-4130-8514-22fa7c43d9fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0befe171-6b3a-4ede-b851-239ee26e81d4", "sighting_of_ref": "indicator--b0175c7c-a048-4e22-b85d-22b5e6d74e41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0d1755-dc4c-4974-b487-6b1175cdea05", "sighting_of_ref": "indicator--44754021-e045-4a3e-8dac-935c8d73435d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddfe487-59e7-4b20-be9e-dac80d21ee42", "sighting_of_ref": "indicator--01db7992-6079-422f-907f-9fc258d4eb27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97385414-289b-4ce6-8132-721624d6bb2a", "sighting_of_ref": "indicator--466c3667-321e-4bf1-816d-298865404e85", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d34c5e-dbe3-4bd5-a567-9d2584d323fe", "sighting_of_ref": "indicator--48229ed9-7699-4d7e-bf8a-b059e3ed8de3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab4229-0991-4615-9312-d523bf838f40", "sighting_of_ref": "indicator--6ac3d0a4-f113-4673-b1c1-1c7c93e1cbc5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a07bd-f760-4d4a-8dbf-b5189a660a33", "sighting_of_ref": "indicator--5ce09b5e-831c-44a9-8d2e-c9496db66827", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543bf226-a323-49ba-9c89-f91a05a63b9e", "sighting_of_ref": "indicator--e999813c-0801-42ef-8090-55eb7474d1c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fb8522-d7fa-4ef7-8026-3de24689d727", "sighting_of_ref": "indicator--10365a85-c453-4a89-b74f-ee77c3bb2261", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87431081-d75b-434b-8f53-9f7867349507", "sighting_of_ref": "indicator--31a43ed9-0310-4d63-aace-fc58e90d66aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84bc924-02de-429f-8e87-6c0b81e904fc", "sighting_of_ref": "indicator--cee3da60-adf5-4dbb-bc38-231728bcef82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc299289-e303-4ce8-b0a2-d530b7a852bc", "sighting_of_ref": "indicator--4916c91b-ed89-441c-8d84-99208c111b6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d509c9-60b8-406f-8cfa-815192af482d", "sighting_of_ref": "indicator--756c56be-f3d4-41e1-851e-b3a59920e57b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733ee759-bd2e-4403-abd7-3ae88819c2b5", "sighting_of_ref": "indicator--756c56be-f3d4-41e1-851e-b3a59920e57b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8ea847-f5b0-4e5f-af84-fd2d2ea84ee2", "sighting_of_ref": "indicator--756c56be-f3d4-41e1-851e-b3a59920e57b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60508fa6-f80d-4df6-a98d-f5322856e840", "sighting_of_ref": "indicator--58b3224d-ce67-4a3e-b87d-9f04492eec4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9734cfd2-c803-4eb1-8dbb-b6c9ec36a0c6", "sighting_of_ref": "indicator--afeffeb5-6ac8-49ed-962e-027ecbc1e674", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4243a0ec-da7c-4b1c-88b6-f5a8adc313af", "sighting_of_ref": "indicator--afeffeb5-6ac8-49ed-962e-027ecbc1e674", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7fa229-d783-4675-95dc-4f8a60d81963", "sighting_of_ref": "indicator--c4936b75-8e40-4f7d-8b02-4ddc5c6904c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca19995-93e9-40ee-9ecf-f9736b9af241", "sighting_of_ref": "indicator--c4936b75-8e40-4f7d-8b02-4ddc5c6904c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c513a27f-1ca9-4d9c-8ca8-f06c2d9c54ba", "sighting_of_ref": "indicator--a20514af-dc30-46b4-82ce-0df1d03e6a87", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d11f196-fd50-4e9d-b7ab-3f635082353e", "sighting_of_ref": "indicator--88faf9e0-9d3e-438f-8f20-28448b6496de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c76561d-6904-4e4b-b8d1-4864a3a27302", "sighting_of_ref": "indicator--319a50a4-8d30-4bd7-ad0d-c106a2799714", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8097ce1e-74e2-43e7-8cd1-215b79c0beba", "sighting_of_ref": "indicator--032d1a4a-bdfb-43a3-9156-fa9697bc9be1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02148d54-4b95-41c3-b896-eb4f56c9c61a", "sighting_of_ref": "indicator--8efe7381-b2ab-4b52-835b-ecc350bb750e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d919a96c-d1ac-478f-af1a-2d6e42c29da0", "sighting_of_ref": "indicator--f18f90de-15f3-480e-8148-2c92683c46c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decba579-4135-43e8-93e6-7bd4e711b400", "sighting_of_ref": "indicator--a296855d-ba0f-4724-91b4-8dbc2a11bef6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f114080-e1e0-4184-93b0-a21e20e8a25c", "sighting_of_ref": "indicator--a296855d-ba0f-4724-91b4-8dbc2a11bef6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6feda36-21ed-43da-a81c-bc83ea5a07ba", "sighting_of_ref": "indicator--a296855d-ba0f-4724-91b4-8dbc2a11bef6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0623f9-076f-4fe1-b47f-24d16d151bfa", "sighting_of_ref": "indicator--41c83f00-6238-4b44-883a-c20d86c19817", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a586275-70aa-4dc2-a6bd-bda17d9c5042", "sighting_of_ref": "indicator--41c83f00-6238-4b44-883a-c20d86c19817", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e199dd-0116-41ef-b5ef-f18778278d27", "sighting_of_ref": "indicator--5544c5aa-2507-4f4c-a5b8-1ebc9267f5b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fcedcb-4599-4674-b3e7-de1298185aa6", "sighting_of_ref": "indicator--d3688321-8fdc-4498-b326-ed0512c1af48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2191c4db-4774-410e-b39b-a4c3b9887dd9", "sighting_of_ref": "indicator--d0dfe57d-f56f-4a66-bde4-2aa238fea509", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d918afa1-9d07-48a9-8602-2836220c0226", "sighting_of_ref": "indicator--d0dfe57d-f56f-4a66-bde4-2aa238fea509", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317e25cd-9c3c-46cf-8407-898493a71a60", "sighting_of_ref": "indicator--46740fd5-cbbd-4e34-b341-ad9a58a99a2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125f2ca3-dff6-4e4d-98b6-b949297c8604", "sighting_of_ref": "indicator--46740fd5-cbbd-4e34-b341-ad9a58a99a2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a8e3af-eaab-47cf-a0e6-8f011ef61555", "sighting_of_ref": "indicator--dd2e738a-8ef9-419b-9eb3-4495b78fc083", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598e122b-83e2-4589-a282-a458df60a333", "sighting_of_ref": "indicator--dd2e738a-8ef9-419b-9eb3-4495b78fc083", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892df055-54a5-4e33-a9a7-91aff1f55c94", "sighting_of_ref": "indicator--dd2e738a-8ef9-419b-9eb3-4495b78fc083", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893d4c3b-9297-4f96-8941-43105ab36056", "sighting_of_ref": "indicator--cc44a4f3-9b36-4f13-92a0-f41c041a49c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f362022-d07f-465e-8efa-8458caef40ca", "sighting_of_ref": "indicator--39113f3b-953c-44d2-8c81-d6cd61403c96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27d5152-ca3b-42de-a2be-bf8a5505dc4c", "sighting_of_ref": "indicator--351fd104-ccda-438b-a0fc-c858c94fddc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1a75fb-26d3-424c-b10c-6768d3cff23f", "sighting_of_ref": "indicator--8b42f9fb-1f19-4f16-9a81-f18da927f91c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366a6d64-d2c1-4a4d-a1bc-1997cca59267", "sighting_of_ref": "indicator--54c49d1d-0d19-49f5-8928-05889fde9bf7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643fb2b3-5f09-45bc-bbf7-2d32635265e5", "sighting_of_ref": "indicator--54c49d1d-0d19-49f5-8928-05889fde9bf7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b0c9e-799d-475e-a488-fa68f003adc0", "sighting_of_ref": "indicator--c341f951-1b03-4b40-a7e5-0d876f623311", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7658a6-ff17-4d8e-885f-d6b70d3e5201", "sighting_of_ref": "indicator--c341f951-1b03-4b40-a7e5-0d876f623311", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109bd2e6-cb5d-4c4a-b42c-ae4ce9af1b2d", "sighting_of_ref": "indicator--3acf1f25-d3f1-413d-97eb-d8864d789cc8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9a81c3-d04b-4159-a06e-2a081aa724a1", "sighting_of_ref": "indicator--0c3888e4-a921-494e-b731-ad4de8be6d09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd89406a-c1da-4a5f-8b7a-93e68d060d65", "sighting_of_ref": "indicator--3f2937c0-2973-4e67-8e8e-1ae33e4ee9d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d391e0c-8ab3-4303-97ab-c17f3a021c7b", "sighting_of_ref": "indicator--3f2937c0-2973-4e67-8e8e-1ae33e4ee9d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aee069b-4b77-41c6-aa6a-1497794cb5a1", "sighting_of_ref": "indicator--54fdc7ee-53bd-4aa2-a086-e2667d0416b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727cf74b-a80f-4df6-8274-f3f76ed02aff", "sighting_of_ref": "indicator--626d047c-5e02-435b-948d-51bcaf5fd46d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31f2ea4-d9e3-43b8-899c-521d6455b1ea", "sighting_of_ref": "indicator--60bf338f-3794-48eb-8f01-763da97146c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edab2478-f2d5-48b3-9a3b-8221fb813e42", "sighting_of_ref": "indicator--60bf338f-3794-48eb-8f01-763da97146c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a567f3-5085-4a1d-890a-1af4ffaa8a1a", "sighting_of_ref": "indicator--60bf338f-3794-48eb-8f01-763da97146c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc680f-4722-439c-8855-b036f5f35599", "sighting_of_ref": "indicator--02266b01-b269-4068-a3e5-013f0b1545ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e2c6f4-0917-4b08-8c69-5fc957e5d92a", "sighting_of_ref": "indicator--b42a8833-854a-42e1-b0a7-ef7e09715d12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87468590-a822-4b3f-9e6c-1c1273557e0f", "sighting_of_ref": "indicator--b42a8833-854a-42e1-b0a7-ef7e09715d12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff864461-065d-4eaa-b0f7-a4051ce8c779", "sighting_of_ref": "indicator--64156adc-b638-4b12-85ae-5197ee6bf740", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc330a8f-ceb2-4f07-8b86-f67791563d5a", "sighting_of_ref": "indicator--37fbccbc-e978-481f-bc48-572f141a37a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea9153a-eea5-4f7b-8f44-b9fce51ddb67", "sighting_of_ref": "indicator--37fbccbc-e978-481f-bc48-572f141a37a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e34794-d55f-4576-90ba-013bc5cd6f28", "sighting_of_ref": "indicator--37fbccbc-e978-481f-bc48-572f141a37a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabe8c97-6e16-4899-a5b3-1ce4602e545b", "sighting_of_ref": "indicator--1cb7d31e-dc43-4537-9351-61e5f0bd7948", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3a3a68-a04c-4a39-878f-e809884a3fda", "sighting_of_ref": "indicator--1cb7d31e-dc43-4537-9351-61e5f0bd7948", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9683bf2d-411c-4309-9afa-eea700198047", "sighting_of_ref": "indicator--e37549a0-9e5e-4187-8df5-eedb465e5bb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fef066-e89d-403c-b0fe-053393b65117", "sighting_of_ref": "indicator--e37549a0-9e5e-4187-8df5-eedb465e5bb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58414b29-a835-4eeb-97eb-1c1d6984cb68", "sighting_of_ref": "indicator--ba7a58d6-80cd-49f9-afe6-2cc38e4f61f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047cd663-0ce8-4c8b-86cb-d5cfa6af67eb", "sighting_of_ref": "indicator--ba7a58d6-80cd-49f9-afe6-2cc38e4f61f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268aabc9-8c27-4da6-b9e8-e08b17273f75", "sighting_of_ref": "indicator--ba7a58d6-80cd-49f9-afe6-2cc38e4f61f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c27cf7-dfe1-4914-83cc-219d80816bf9", "sighting_of_ref": "indicator--085164c4-6328-4e68-a0f1-86f9efe5ffad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a956f66-3c08-4daf-8a02-69f8dda99a50", "sighting_of_ref": "indicator--085164c4-6328-4e68-a0f1-86f9efe5ffad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c7a661-8bf6-401b-a3ec-040835f6a451", "sighting_of_ref": "indicator--a3abd301-9eb9-4cc6-97b8-646656184378", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab164467-42d2-40f1-a577-2b3e73cded55", "sighting_of_ref": "indicator--a3abd301-9eb9-4cc6-97b8-646656184378", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975edd74-51cc-4265-9f1e-27f3f538590c", "sighting_of_ref": "indicator--a3abd301-9eb9-4cc6-97b8-646656184378", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a69cc3e-4765-491f-905e-c02a3ecd5cf9", "sighting_of_ref": "indicator--66e1bc18-6c0f-4091-bd04-ba407d14e356", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50078488-dcf2-4034-84ff-81fa112f8ca0", "sighting_of_ref": "indicator--66e1bc18-6c0f-4091-bd04-ba407d14e356", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd0451b-52af-4fc9-ae65-fc4104e7b17a", "sighting_of_ref": "indicator--66e1bc18-6c0f-4091-bd04-ba407d14e356", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da3521b-30e3-454d-bf69-d3cb9e0b7438", "sighting_of_ref": "indicator--36855293-c9f6-45d9-beb8-12cf8ad3039e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d29a69-cacc-4fb0-9c6a-36d0077ac852", "sighting_of_ref": "indicator--1766d399-5784-4040-b2d6-3f28546218aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df80520b-6e32-4a93-8bb3-562d8054a017", "sighting_of_ref": "indicator--db872ba0-c54c-45cd-a2d6-bd8526230e68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea3f0c-7988-49a5-aa0f-cd1c6c6f2013", "sighting_of_ref": "indicator--fc72d0b1-73c8-44dd-a0ad-1fb8a079dd5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07251316-8edf-4f69-914a-a058bf982464", "sighting_of_ref": "indicator--fc72d0b1-73c8-44dd-a0ad-1fb8a079dd5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a1ca0b-21cb-4a22-a81c-015d0be1ec19", "sighting_of_ref": "indicator--fc72d0b1-73c8-44dd-a0ad-1fb8a079dd5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc349cc-4fed-4dfc-a5c5-b824eebbf22f", "sighting_of_ref": "indicator--f89c3528-1cb1-4722-8a07-3f6cca62d472", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aacaf1b-e303-4798-ab15-2569a72a10f6", "sighting_of_ref": "indicator--0188cbcd-8d14-4568-bae1-6bf8c80c01ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b896c798-6c96-4160-9169-8d0ab076824a", "sighting_of_ref": "indicator--3bcc8286-8053-410c-9ee5-8933d1c3d17b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b16b3cb-e66b-4722-b282-fdcb04fe60a6", "sighting_of_ref": "indicator--c48c07b6-ce6d-43a1-8782-02a5cc9cf95b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e29c292-1ea8-4aa8-97de-92f84a9b5771", "sighting_of_ref": "indicator--c48c07b6-ce6d-43a1-8782-02a5cc9cf95b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0abcc1-f664-45ec-a4e6-400d95bc508a", "sighting_of_ref": "indicator--c48c07b6-ce6d-43a1-8782-02a5cc9cf95b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd32919-db56-4238-96fe-a2277ca3b47a", "sighting_of_ref": "indicator--faddfd5e-656e-48b7-be47-c616bde5287e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbe1fde-fc6f-44ef-8132-5468fc6e2568", "sighting_of_ref": "indicator--faddfd5e-656e-48b7-be47-c616bde5287e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533fd052-17bd-474e-b09c-dba6406df6ca", "sighting_of_ref": "indicator--faddfd5e-656e-48b7-be47-c616bde5287e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6239947d-e513-4884-ac67-d159bbf264dc", "sighting_of_ref": "indicator--0cfbfa2b-fc1c-4db5-bf96-5832751808d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ebba4c-4d21-4eb3-bbc5-c9238670109a", "sighting_of_ref": "indicator--0cfbfa2b-fc1c-4db5-bf96-5832751808d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16c46ad-1287-4974-98db-9e62839da7ed", "sighting_of_ref": "indicator--64ac4161-b771-498a-8bdb-890f4a4431b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc4bc04-3e47-4189-a72f-c6efc1114ef6", "sighting_of_ref": "indicator--37e27c2c-92d1-4499-a8d3-2cf57ff39b42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97348b1a-010b-4d00-a605-95cc0c114ada", "sighting_of_ref": "indicator--37e27c2c-92d1-4499-a8d3-2cf57ff39b42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08dfa9c-a78a-45cd-95dd-9a852b72be83", "sighting_of_ref": "indicator--37e27c2c-92d1-4499-a8d3-2cf57ff39b42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d916f-3403-4746-a6f2-db8e276b73e2", "sighting_of_ref": "indicator--b5769d10-b836-4ec1-aeae-2bb4cfdaf0de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd09fef-121a-423b-9b06-3b86e3abb267", "sighting_of_ref": "indicator--6593b3d4-dfd1-4a31-91c5-6b3e9a5a73d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531fffe6-bcf5-4fdb-ae3c-e617d4a1ca17", "sighting_of_ref": "indicator--6593b3d4-dfd1-4a31-91c5-6b3e9a5a73d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33827ba4-00ca-4917-91dc-ba36e65be09e", "sighting_of_ref": "indicator--6593b3d4-dfd1-4a31-91c5-6b3e9a5a73d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f709d8-5122-4418-8d78-5a596a4917b8", "sighting_of_ref": "indicator--8e039230-d14e-4701-b55a-0f98ee057b07", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60ef0c7-9994-4526-954c-afb5d50c2375", "sighting_of_ref": "indicator--8e039230-d14e-4701-b55a-0f98ee057b07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84681ee-4603-40c8-843a-18988b6e0d5b", "sighting_of_ref": "indicator--2ebf6fc7-daf2-4ad8-8d55-5efd1b1252cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9cdff1-f284-4969-af27-a4f34a4a2973", "sighting_of_ref": "indicator--edb0b6c4-2506-494a-8d05-e917d9f453c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bb62c7-31b8-4bfc-825c-67c1f05f2d85", "sighting_of_ref": "indicator--79dd68ae-ad34-4971-a7d3-22a206838dc8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb0561a-26df-4022-a789-d0d9fbbb05f2", "sighting_of_ref": "indicator--a08fb560-76b9-4a44-917f-c8c48ba1c8e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d5573-3d79-4e3f-9a6d-2cbb012bdcbc", "sighting_of_ref": "indicator--a08fb560-76b9-4a44-917f-c8c48ba1c8e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc79201-ae30-4f60-a637-e54927860106", "sighting_of_ref": "indicator--71e171aa-be62-4ada-8418-da44758f01c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e796f0e-d81e-46a8-9d31-4005dc27d337", "sighting_of_ref": "indicator--71e171aa-be62-4ada-8418-da44758f01c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943c603c-381a-4372-8736-5df31885b4d6", "sighting_of_ref": "indicator--71e171aa-be62-4ada-8418-da44758f01c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f4f02e-c104-42d1-8382-d13f46da0050", "sighting_of_ref": "indicator--c4bac487-78c2-4307-bfc6-e5a96744f112", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c892a7-6600-46cc-b98d-b5420a7c3e29", "sighting_of_ref": "indicator--1b37c789-866d-4239-940b-1e1129d699c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7240cf87-7fb4-4333-ab51-b9a85201ee82", "sighting_of_ref": "indicator--72e24014-b1ac-4fc0-a7fc-c14e21bd18a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e7c3d6-81f7-4941-acda-4918fe5de7f8", "sighting_of_ref": "indicator--873e5a9d-0221-4814-8366-39843c401f3e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a30ebd-9182-4a3a-a631-901c2820d7a8", "sighting_of_ref": "indicator--873e5a9d-0221-4814-8366-39843c401f3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3533d887-178c-4432-9fde-337842908e85", "sighting_of_ref": "indicator--96fd8b63-1c36-4da0-b390-9b1cdc38b3fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faaf35d-2706-4a13-88cb-63ceaa3b87d5", "sighting_of_ref": "indicator--a9374d63-37ea-4744-9d18-72f6ed173d1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033dfddd-faac-4b68-bfb2-7f5acd1f3e1e", "sighting_of_ref": "indicator--a9374d63-37ea-4744-9d18-72f6ed173d1f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6dbedb-3db9-42d6-9e9f-1f647c0888bc", "sighting_of_ref": "indicator--a9374d63-37ea-4744-9d18-72f6ed173d1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba61e04f-e1e3-4bee-93ac-89e154a83854", "sighting_of_ref": "indicator--d5c9ef99-c18b-46c0-9120-cf41dbbe067f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0431a6-8149-4e53-9526-4de170b7e8db", "sighting_of_ref": "indicator--90ddbc21-6279-47b4-867f-f26f8254c91e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ec84c2-d8d3-4f1e-994c-ac93513f1187", "sighting_of_ref": "indicator--90ddbc21-6279-47b4-867f-f26f8254c91e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa71e37-9fbe-476b-bd60-18dfcd3d2885", "sighting_of_ref": "indicator--4b8e5dfc-c6b4-4f9a-be1a-3d4e4986ac1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec70f5-7b38-4cab-8907-2f5dc5dc333f", "sighting_of_ref": "indicator--5ac8e33e-d82e-4aef-859d-78d22b7a15b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d86686f-1133-4b5b-bdcf-b94ff3572897", "sighting_of_ref": "indicator--5ac8e33e-d82e-4aef-859d-78d22b7a15b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c734cb34-9879-4cd8-a63f-ed3f84827daa", "sighting_of_ref": "indicator--164f63f8-16c4-4f5d-af07-f5f4a80c821d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7318ea13-5972-467a-b25e-cb287174b1d7", "sighting_of_ref": "indicator--b76e9c1a-15ce-4a5a-8ac3-f786ef41ce9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcbd267-b809-452a-803b-da72a9f514ab", "sighting_of_ref": "indicator--9152a881-af2f-4792-983e-dbd1bf55ba6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f96db37-76b6-4cf5-8d5e-74b7c224d388", "sighting_of_ref": "indicator--e521b325-91ea-4f5d-b11a-12c35c04441b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0276641d-878d-4930-8e8a-25bfae27ec8a", "sighting_of_ref": "indicator--e521b325-91ea-4f5d-b11a-12c35c04441b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee8f4d3-0227-49cd-ac1c-4c52aeda5f9a", "sighting_of_ref": "indicator--3401cb77-0c3b-4641-9402-e5bc1e5a7724", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce2e15a-5783-4f0f-b8bd-bc99702d03c0", "sighting_of_ref": "indicator--a94350ff-983f-4435-9b90-aaef7587a5f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334a830b-7627-4e74-8705-fadc8f6e05da", "sighting_of_ref": "indicator--a94350ff-983f-4435-9b90-aaef7587a5f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0058ac22-5582-4e69-ab4a-a8b5cf913768", "sighting_of_ref": "indicator--11e9b2f9-26a4-4277-9aa6-0c707d004003", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8646d68-0532-4331-8f68-d2977727116a", "sighting_of_ref": "indicator--99dcca17-7c9e-4c49-a5d8-aa391ae9d350", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc05594-2da4-4aca-b262-cca44e63b462", "sighting_of_ref": "indicator--46a9c2d6-18e3-486f-8ab6-34a48f3a11cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5fda29-9cdb-4441-a5c7-63d2128aed4b", "sighting_of_ref": "indicator--c5e8ad00-b57e-4d18-8a1e-9d7d20c8f410", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d5d251-8d61-4a72-859c-09ac785e6537", "sighting_of_ref": "indicator--c60afd83-6c9a-4614-8cec-4a9a388f758b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a630656-4885-40e5-8d7f-d834f902feaa", "sighting_of_ref": "indicator--dd1c3a0b-66b5-4f79-940a-0de61edcff3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d41c8a-248b-4454-9b4e-349e61a7eee2", "sighting_of_ref": "indicator--fbef81ea-ab88-4c3d-85f5-6764218fafca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cf6a14-3663-470b-aa36-44dbc173d280", "sighting_of_ref": "indicator--2ec4ca52-1a62-4764-a3f9-ddecb975f563", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d8bfa4-c85f-4fde-b785-ac39104c9ccb", "sighting_of_ref": "indicator--2ec4ca52-1a62-4764-a3f9-ddecb975f563", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a2a1a1-af03-44fe-80f9-81946cb0bc3f", "sighting_of_ref": "indicator--5c19534d-fa3a-4288-bdd6-3e527d231382", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c34c77-c887-4511-9375-845c991d7e99", "sighting_of_ref": "indicator--5c19534d-fa3a-4288-bdd6-3e527d231382", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139f42bb-ce62-4dae-869b-f63bb441948c", "sighting_of_ref": "indicator--c773d0a6-28d4-44d3-87ca-c3cfa04008b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb63c520-db21-4a5f-a008-9ba588d1f3d0", "sighting_of_ref": "indicator--5fb1732f-567f-4fef-bf9a-19bb0cf55c54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c5bc05-35a8-4b07-9198-4e07078ee04b", "sighting_of_ref": "indicator--5fb1732f-567f-4fef-bf9a-19bb0cf55c54", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc722eb0-0782-4449-8be5-68a798638b17", "sighting_of_ref": "indicator--5fb1732f-567f-4fef-bf9a-19bb0cf55c54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262bc744-9b50-44e7-9560-b03deca5a587", "sighting_of_ref": "indicator--dd93d835-9c40-42d5-b630-04745e6f1c15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238ad05c-555c-4f17-8255-ead2a497db60", "sighting_of_ref": "indicator--dd93d835-9c40-42d5-b630-04745e6f1c15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b3774b-9d46-470c-b988-358073feea62", "sighting_of_ref": "indicator--dd93d835-9c40-42d5-b630-04745e6f1c15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3184c34c-4840-4f1f-ad71-04d813173622", "sighting_of_ref": "indicator--5d6ef497-fccd-4056-8fba-94fafb2d27a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7690e9d-c4df-4bbd-b233-eb21748896b8", "sighting_of_ref": "indicator--5d6ef497-fccd-4056-8fba-94fafb2d27a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb29c39b-51bd-402f-b400-b0d76546d52a", "sighting_of_ref": "indicator--5d6ef497-fccd-4056-8fba-94fafb2d27a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6fa0ce-1a07-4b3a-8681-f396b7899831", "sighting_of_ref": "indicator--0ba7e516-dc3e-4af0-aa3c-f21552e3d741", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedc1a73-efa9-4e3c-a332-3a1c0fab6c31", "sighting_of_ref": "indicator--0ba7e516-dc3e-4af0-aa3c-f21552e3d741", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195e6f09-f56b-41f4-afec-c1f977392d7c", "sighting_of_ref": "indicator--0ba7e516-dc3e-4af0-aa3c-f21552e3d741", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3573e0fa-45d9-49af-8fdb-3a212230792f", "sighting_of_ref": "indicator--9ed05de3-9421-463c-8729-52a5c51b369d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f110bbf-a164-4d90-b811-44c9990c1580", "sighting_of_ref": "indicator--f64d16cd-b92b-43a4-a781-89b128c1366e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b815f12-4276-4e49-9217-d4fce50ce665", "sighting_of_ref": "indicator--dbeeb6ab-c979-421a-8f71-048bfee8acf3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fff33d9-51ec-4ab3-98f6-495173b09ff3", "sighting_of_ref": "indicator--3177abd8-854a-4dd8-919c-daac1c96e751", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d56288-148b-493c-9168-efa228480309", "sighting_of_ref": "indicator--3177abd8-854a-4dd8-919c-daac1c96e751", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dea3a5d-a720-4265-9c3c-c5d6ca16e2a5", "sighting_of_ref": "indicator--3f3488d4-a1c2-4dcd-afa1-76798004eef4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5055f68a-59a4-4785-a4cc-e4498b858cce", "sighting_of_ref": "indicator--e6a36891-a4f7-40c9-b0a7-ae1f89d7bbb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe16875b-f963-46bb-98f9-88a8e07f5aa0", "sighting_of_ref": "indicator--a5ed8706-1262-4ff9-8de5-671947edf63b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f3c9e3-a5f7-44c4-bc94-bf49e89cae8a", "sighting_of_ref": "indicator--b2e4b455-9b54-4790-b56a-ecd71b04d6cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515f37e8-f5f1-4c8b-a7bc-96eafed78b77", "sighting_of_ref": "indicator--bbadaf30-cd04-45f7-8cc8-628d1641a5d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66589c8-e59c-4845-9330-1691975ac881", "sighting_of_ref": "indicator--bbadaf30-cd04-45f7-8cc8-628d1641a5d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6a5285-de08-4e03-b851-5470be867790", "sighting_of_ref": "indicator--bbadaf30-cd04-45f7-8cc8-628d1641a5d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff57369-e3b1-4367-99f0-3bfc7861d7b7", "sighting_of_ref": "indicator--8d4a6220-65f7-4bc5-b525-f98a4c56430d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f23c1d-cfde-4f8f-b678-48f0cc04dd4c", "sighting_of_ref": "indicator--5db578a9-f9ae-4bc0-b453-a3435c2b7ff5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68422714-5a88-42ea-9676-57e6f066c25f", "sighting_of_ref": "indicator--18336d53-ce8c-495b-bc81-64bfa67eb7a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea25ddc-1f4e-4b8f-b2a6-afd3499cd373", "sighting_of_ref": "indicator--e67662f6-6b47-422f-a17b-9d397f991ca4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e8c57e-51f9-4675-9b74-1d6e182ca7ce", "sighting_of_ref": "indicator--6946adaf-a50b-4c30-9e68-9561d8e675fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c291fe3-a0f4-4aca-9665-6e62973a34b9", "sighting_of_ref": "indicator--fee0bff3-c387-423e-9ba0-ea1d9428ee78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55521c22-b6d3-4e22-bada-e65921a4e422", "sighting_of_ref": "indicator--fee0bff3-c387-423e-9ba0-ea1d9428ee78", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71063147-8411-40bb-b38a-d7b62a7dff22", "sighting_of_ref": "indicator--fe3bdab5-804b-4a73-ad3f-90ca8ac4e984", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8bfd0d-9b75-47f1-8696-913603b7eb75", "sighting_of_ref": "indicator--97995b2a-4ec1-49aa-a8db-324a06b653c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f040f86-a5db-4f6e-9ff2-ee747999ccd0", "sighting_of_ref": "indicator--b8685db2-6879-446d-aafb-d42288e53ca9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2bdbf8-5cbe-446c-ba8d-6c05dc2b9589", "sighting_of_ref": "indicator--3362b7eb-ebc5-44c6-b7f1-35692bfc22c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8d857-ec39-4ffd-acd7-1e544b7e16a2", "sighting_of_ref": "indicator--50336ee5-6e32-4a83-add0-42f66f177412", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3da3ef-85f3-400f-9e09-2ec604f02d7c", "sighting_of_ref": "indicator--191767fe-f775-4ec7-b7f6-17c90285f5f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6398cd-0d82-4c04-892d-a94bd83910fe", "sighting_of_ref": "indicator--af9eb889-884c-432e-9794-a524692acfa0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b2d31f-d7cd-46dc-a525-af1135fa81dd", "sighting_of_ref": "indicator--4c4aeee5-cf50-474d-9b46-5cbe32c8cf5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d5b886-3fa4-4ba1-99e8-6990d2b4dee9", "sighting_of_ref": "indicator--d36cf489-7ac7-4528-b714-4d61935873d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6f41bd-c39f-4613-9359-e0c36e2557ed", "sighting_of_ref": "indicator--ad755fbb-5d13-48e2-931b-139434626f0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687a7c2a-aa07-4e48-82e9-93bd3d5c238f", "sighting_of_ref": "indicator--6497e0b0-bdf1-4caf-8f46-931d96faa3e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619b9f42-02c6-4ecf-9a89-afdaaeab8367", "sighting_of_ref": "indicator--40a54146-9c81-43c8-867b-949698e4e883", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab799d7e-9384-4e51-8c21-60ae65898fa8", "sighting_of_ref": "indicator--0c91b0cf-5afc-47e9-870d-39ad57671709", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfed1fc-6f7a-49ac-87ee-f5483267679a", "sighting_of_ref": "indicator--53fdb4a5-4374-4e33-a3bc-93acd73a2c5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77536c32-6fb2-4405-9d8e-da4b390bd576", "sighting_of_ref": "indicator--2e011b8f-21fc-4faf-8eaf-6efecbdc5b0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f02d814-01bc-4be7-a6ce-2a082056098a", "sighting_of_ref": "indicator--fc6453c4-bd72-44ab-abb1-46eefb347e95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c44ea0-5176-4d69-9c08-f0b3bd2be4a1", "sighting_of_ref": "indicator--65a82876-7d37-4e88-88cd-8d0b0dc304f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d7420f-a04d-4b43-897b-974d4b411beb", "sighting_of_ref": "indicator--7a74608e-babf-48ef-a493-bbdb5e9a396c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ed2575-a698-4464-9fb3-d952a017e39c", "sighting_of_ref": "indicator--e8edb350-9ac2-483f-9016-1d7c4ccec323", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254419ef-50ea-4e61-8311-c13e74ac2544", "sighting_of_ref": "indicator--bddf4425-ed4b-4407-ac8b-96106c853f6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3169bc-7283-45ae-a932-ba2a707f5c0e", "sighting_of_ref": "indicator--c3328214-5733-4a16-9c1b-125ab644796c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f4807-3efa-4675-b304-41ab587c9e39", "sighting_of_ref": "indicator--80323401-f8d7-47b2-afb0-1c6f3766ba58", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ead4721-73c9-42c4-ae40-361145be9182", "sighting_of_ref": "indicator--c482c48d-c909-4efa-b40b-e00fba62d0a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2599e7fd-2a05-482a-b191-84e7b4a4b893", "sighting_of_ref": "indicator--9a579f32-37ac-4aac-9966-e54803fc18bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffc07fe-16ff-462f-b175-4e7a09bb84ea", "sighting_of_ref": "indicator--1a6e8628-357b-47a6-ae4b-56912c017c63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd318292-8ae0-4b82-84bc-700a7c385d4b", "sighting_of_ref": "indicator--ad92eb7a-7b08-4abe-8c43-61a77afd1659", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a60f1-edd0-40ac-8a3b-1f256d1d216e", "sighting_of_ref": "indicator--d01c98a0-60bf-4024-9e86-f956a0bf55cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0505bd7-7545-40ee-a273-a07d0ebb466b", "sighting_of_ref": "indicator--8f2e896c-b4b2-4c93-ab90-94ef11e6d62c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f351ff87-fde4-4c0d-afeb-08816b2a8fb5", "sighting_of_ref": "indicator--36675a00-b598-4c1d-a1b6-2905ecff6ba5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b423b2ee-260c-4e27-9830-f2d4f29b9318", "sighting_of_ref": "indicator--aed7400d-7c0d-4fdf-9802-4eb99a8a65be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a09ab52-4f35-4b0f-9ca0-70a8a282805d", "sighting_of_ref": "indicator--179c8723-ce7a-4b34-b7c4-9f4baa9c5bb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f805ad00-49dd-4666-b6b4-a741e8c506da", "sighting_of_ref": "indicator--9f23a8e8-94ea-4cad-b078-58f64656bccd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c0ed21-12e5-424b-8417-7f6e22b1f3c1", "sighting_of_ref": "indicator--917448e3-3fab-4091-8115-5e2da9c1593f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6525ba-f444-4ee1-8700-2478d6255f2d", "sighting_of_ref": "indicator--01685546-a68d-4903-85a2-15504a9b0c77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98161126-e556-40cd-91c2-1b038e1fb24f", "sighting_of_ref": "indicator--76ea7e54-1745-46f0-9470-28a09b731c44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5229d51c-babd-4caa-94a4-e3abf9f38b3b", "sighting_of_ref": "indicator--bd56d062-d3c2-4d11-8272-05b299d4c35b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06506f0-4ce1-4f86-9589-234c8ef4174a", "sighting_of_ref": "indicator--921bd0c0-a2f2-4c07-840e-1cc3626d9417", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c239f2d4-f785-4500-bdb0-7b52b3f03df9", "sighting_of_ref": "indicator--40f8f650-d5c8-4a61-9d36-b6365829c052", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60986da-aff8-4cf5-bcc6-c8d4d2ae97a1", "sighting_of_ref": "indicator--afd4ada2-c105-4d59-acb8-e0392a8f43c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abcad72-6ad0-4b50-af5c-d41bcb6fce24", "sighting_of_ref": "indicator--56dd83d6-ca3f-41c7-b7d9-56c59aa9cd6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb83829c-1e94-4f69-91ce-0cf5417bcf69", "sighting_of_ref": "indicator--f6162614-c5e1-4211-9778-b4b01cfb4fe8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04357738-70e6-4b35-8e4c-b87e1508ddb2", "sighting_of_ref": "indicator--f6162614-c5e1-4211-9778-b4b01cfb4fe8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c8c7bb-11c0-4905-9100-e5fac3f07847", "sighting_of_ref": "indicator--78190d41-9acf-4041-bbe2-118fadb3db41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ccee14-4e58-48b2-a97f-575e66890728", "sighting_of_ref": "indicator--78190d41-9acf-4041-bbe2-118fadb3db41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bed9acb-f153-4442-9d8a-8513b71145b3", "sighting_of_ref": "indicator--b9bab477-7bba-4b20-8035-9739e1747f9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3d28b5-e855-4e46-a5df-e3d8ac0e938c", "sighting_of_ref": "indicator--c0a58335-1afc-4fac-96e7-33fcbbf37c8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90122d61-36de-4ed6-a60c-b0932db83794", "sighting_of_ref": "indicator--75cb80f0-3952-4347-9245-6c4d792e8603", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991e4c6b-d26a-4f54-a3be-f06a98b3cd3d", "sighting_of_ref": "indicator--75cb80f0-3952-4347-9245-6c4d792e8603", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b17f0e7-291b-4346-9e18-509d9f73598f", "sighting_of_ref": "indicator--4317dddb-f18a-408e-a0cd-947fc8a174e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d234fd26-9311-4196-9ecf-f9dff333db50", "sighting_of_ref": "indicator--2d25e727-7599-44b1-9191-3b9909fcafc3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03aebaf7-09ac-48f3-bcdb-7d1f43e6a1a1", "sighting_of_ref": "indicator--0dc4681e-b40e-4782-b8da-3243a1e1640f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58416f54-30b2-4440-b132-020dcc10a543", "sighting_of_ref": "indicator--1953723b-4376-4e82-9589-ccb7ddfa7f8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c982102b-0c00-4e01-b19f-5379f6152a9e", "sighting_of_ref": "indicator--492f2c37-e5b3-4ca8-9883-bed22e2e1d9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b290aa-434b-41fe-8d51-805f7e062b02", "sighting_of_ref": "indicator--3f1400e2-2876-4451-941b-144c7057f23a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186c37f7-b5ba-4887-a2ad-994b0ec4dd98", "sighting_of_ref": "indicator--11169ffc-f1d0-427d-bc35-c0b82a1b3eef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b42d15-9a3a-4f73-a6ee-bef74fdd3a26", "sighting_of_ref": "indicator--78bd7aee-0a85-4c46-9913-b6393005a48b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffe305f-4b35-494f-9dd4-d57fd7fe728c", "sighting_of_ref": "indicator--59cfbf85-387d-4539-a5fc-76acc64f178f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0e81f4-7b3a-4be6-9d9b-631c7be1b5e3", "sighting_of_ref": "indicator--4e43c552-e570-46ae-8124-fa374452a360", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedda5c4-6697-41b9-b7e8-7b7badbf3205", "sighting_of_ref": "indicator--3bbb0a3b-6316-480b-b7ed-812573640856", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c3a344-3cfa-41f9-8fc1-a7413d5a9321", "sighting_of_ref": "indicator--de25737a-b66f-45dc-a7a3-397637034e01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cb354d-94b8-421a-9bd4-744b4fc4a5a1", "sighting_of_ref": "indicator--de25737a-b66f-45dc-a7a3-397637034e01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797f12a9-06c5-4eef-aca6-7b8fffa466e1", "sighting_of_ref": "indicator--343367fd-0dc9-41e5-b6e5-2e727e0abd00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee725f-2d99-4262-aac6-2b385e1fbb9e", "sighting_of_ref": "indicator--3b738010-54cb-4acf-aa69-e39e1d5f8e2a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f09860-5f7a-4383-a091-9a2c35c1a3de", "sighting_of_ref": "indicator--e3f5ca37-1be8-4ceb-8b23-3fcddd139aca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccea0459-7e61-47b2-b2f9-af54331998d4", "sighting_of_ref": "indicator--e3f5ca37-1be8-4ceb-8b23-3fcddd139aca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146fc92d-a1ab-4a4a-bf5e-2099aba9c45b", "sighting_of_ref": "indicator--e3f5ca37-1be8-4ceb-8b23-3fcddd139aca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d0f766-40a7-4e72-b317-7275793a19e3", "sighting_of_ref": "indicator--17cdbbc1-9a47-4bd1-9fc1-0f2092a2292e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e7663d-b9eb-44fe-aaf0-3cf07b61a167", "sighting_of_ref": "indicator--17cdbbc1-9a47-4bd1-9fc1-0f2092a2292e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3482b6-bd85-479b-86af-91a638e51f63", "sighting_of_ref": "indicator--17cdbbc1-9a47-4bd1-9fc1-0f2092a2292e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34a3880-558c-43df-80f4-c5ae082aec0c", "sighting_of_ref": "indicator--b2939e88-88d9-475e-8e3a-e9a70b105dfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392b2330-9fc9-4788-9e3d-a7d186fed26c", "sighting_of_ref": "indicator--20ddec73-592f-4ed9-b171-6b7e76ff74da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036f4f7b-62cb-4282-9de7-e66209140959", "sighting_of_ref": "indicator--ac437192-7442-48a7-a977-d1ef298fbb44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d3b608-9964-43be-922b-6d2f343fa1a3", "sighting_of_ref": "indicator--ac437192-7442-48a7-a977-d1ef298fbb44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64e9e61-07e8-47d7-999c-d3ee824f9d81", "sighting_of_ref": "indicator--ac437192-7442-48a7-a977-d1ef298fbb44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a2d50f-0905-42b5-b224-9cb2e16e22d5", "sighting_of_ref": "indicator--563be777-79f3-49c6-8820-4b81fdee9af6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643e7e7f-c030-42fc-8616-f25c6fc54921", "sighting_of_ref": "indicator--563be777-79f3-49c6-8820-4b81fdee9af6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1859e80-35e6-4969-820b-1b86ae960270", "sighting_of_ref": "indicator--bc65fe98-e03c-42ab-8302-ed11c2cff416", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72bd8a6-0e5c-4165-a476-4f5c365c1d73", "sighting_of_ref": "indicator--9e88d630-fa57-48fb-942b-15914a2b6193", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07882a89-c5ed-4291-8989-5bdc85f9a02d", "sighting_of_ref": "indicator--68f590da-5d8b-4d1b-87b4-a4f556dd36c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f5d5e7-bb9e-4884-bc4c-a93b3054b089", "sighting_of_ref": "indicator--68f590da-5d8b-4d1b-87b4-a4f556dd36c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c05b1bb-0dcb-453c-9733-3a3d56f6c307", "sighting_of_ref": "indicator--68f590da-5d8b-4d1b-87b4-a4f556dd36c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09ff8c2-fc22-45cf-95d8-e42f615ab9a9", "sighting_of_ref": "indicator--214cbf75-54b7-437b-9633-6b58e8e9dff4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0cb41d-cf14-471e-a730-d1ba0e24b0c0", "sighting_of_ref": "indicator--00bd43c3-1fe1-4b41-9a52-c85c0069aa07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258cce1d-bcd8-4146-a04e-2bf53905b3a9", "sighting_of_ref": "indicator--a7c8eb19-5e78-4b02-892c-bda30e6e820c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c08ebe5-e1bc-4718-996f-97c66f7864cf", "sighting_of_ref": "indicator--a7c8eb19-5e78-4b02-892c-bda30e6e820c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b44ff9-76ae-41ee-b838-212949312eae", "sighting_of_ref": "indicator--bdfc8312-b06c-4f19-95b1-2d157393f12a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e538e6c-1f61-4f5f-8984-9121cadb09fe", "sighting_of_ref": "indicator--2fe346ca-ee0f-4ab3-ba41-422a633cc829", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f5909-77d8-408f-8216-b5ebaf706b31", "sighting_of_ref": "indicator--387743b7-08bd-4cb8-8961-c93f24a18cb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e65b5-344c-4f5d-8034-20003ca71666", "sighting_of_ref": "indicator--136656d4-e17b-4be6-81f6-afbc6c5fea46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1c4f60-84d5-4af8-af50-3752df300245", "sighting_of_ref": "indicator--6866ef18-71a5-4089-bbcd-4b958e9bf419", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ac393c-5ff9-464a-a136-f61f876a4c0b", "sighting_of_ref": "indicator--43afd193-49b6-4f35-b4dd-5e8031efdace", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253eaee7-a98a-4323-9034-fe6391d0856f", "sighting_of_ref": "indicator--64d9e8ab-9d6b-4c1b-8401-5f1b93c4cc9b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f050c8-40b0-4426-b1e1-5ae42b9d33e5", "sighting_of_ref": "indicator--8f1784ee-3689-41f0-8ffa-201e875cb44c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6490f40a-02ea-47e4-b17a-12e8b98788b0", "sighting_of_ref": "indicator--b9361987-8512-4570-9277-b2cfe2162f9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9945dd8b-6d7d-4b2b-ad9c-7780ca5c0cc8", "sighting_of_ref": "indicator--185930e3-61c1-45ad-b5cb-9dd3076e653a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df103e2-9e73-4359-a757-dea9e354605b", "sighting_of_ref": "indicator--cf5e53e2-a033-4686-8358-42e6757014fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063c5511-4c9d-45e1-911a-631541fd2fd9", "sighting_of_ref": "indicator--cbcfc4db-1e5b-40fd-969d-798d95dcba00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673a561f-4259-42fb-a539-5303515ad3f0", "sighting_of_ref": "indicator--cbcfc4db-1e5b-40fd-969d-798d95dcba00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4e1505-05a7-4213-8a2e-d516f75e2bf4", "sighting_of_ref": "indicator--cc053a96-009f-43f8-bb7f-6623b157b7a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfac6832-08cd-45d4-aa63-960bfab74961", "sighting_of_ref": "indicator--c5f32f1b-b4c3-4743-8e2c-e33c2f63a249", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f23ba55-62f5-420c-bb20-8f4de1236842", "sighting_of_ref": "indicator--ce0899f6-dc7e-45fa-b228-fd83c799732c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8a27c2-21e1-43ac-9bf0-5f34b56cd711", "sighting_of_ref": "indicator--a00c68f8-4815-49fd-8d10-b266759d8471", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c484a713-fcb8-42ed-b6da-4c267aaf6c85", "sighting_of_ref": "indicator--ae838187-0091-490d-9c93-78666f02941f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41467f63-eab5-4dfc-9abd-6d916a9fc73b", "sighting_of_ref": "indicator--c361f223-affc-402e-b40b-2ccd42cf45c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c90461-a15b-4c29-b3a8-755c9b4c00a2", "sighting_of_ref": "indicator--cb5bcf4f-2350-443d-a2cf-dbd69cc01b07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f5bf67-07bc-49f0-8bf7-9ce18c33e150", "sighting_of_ref": "indicator--f4ab1cd6-99d0-4377-ad68-bf5a160f76ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a45957-bb8a-4358-9fd2-47d7d977cd08", "sighting_of_ref": "indicator--83faefe5-40e6-4c9f-a6f8-b152c4374426", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4501ca-3fc3-4eef-b326-458c70e42af2", "sighting_of_ref": "indicator--83faefe5-40e6-4c9f-a6f8-b152c4374426", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c27e0c9-3e52-433f-ad47-fbc4ef87570d", "sighting_of_ref": "indicator--83faefe5-40e6-4c9f-a6f8-b152c4374426", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b5be3d-6927-4ca4-9e87-a08f08f4e773", "sighting_of_ref": "indicator--8be3b60c-7353-4c6b-be8b-0a66ea74d369", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0857430a-bbc3-4bcd-8490-737c9955b066", "sighting_of_ref": "indicator--8be3b60c-7353-4c6b-be8b-0a66ea74d369", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1dd8d4-bbd4-4f3f-b54a-e7e8ac6dc8a6", "sighting_of_ref": "indicator--66d165ba-b955-4ac4-b257-70b71489585d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d34c08-c0ea-4a83-aa94-03f8ecd28a87", "sighting_of_ref": "indicator--66d165ba-b955-4ac4-b257-70b71489585d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecb50be-8b71-40ef-9e72-5a71b3be0029", "sighting_of_ref": "indicator--66d165ba-b955-4ac4-b257-70b71489585d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d9de3b-bbfc-4cab-82f6-fb19b7eb8f84", "sighting_of_ref": "indicator--53ac33e2-ce5b-4e27-a44d-53e82d2d5035", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d2e15-ea91-4345-839e-c9542b9b0aea", "sighting_of_ref": "indicator--336f2d85-1605-41d8-bb1a-f13b5a3904f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6822e2f1-6937-4665-a375-0dbe6d051016", "sighting_of_ref": "indicator--336f2d85-1605-41d8-bb1a-f13b5a3904f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a019a23f-fad6-4aad-8620-a02903b84f48", "sighting_of_ref": "indicator--3f6f17d9-91e0-4b77-9d54-3609b80af627", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927906b4-c6d5-4a58-9031-8366ed417680", "sighting_of_ref": "indicator--3f6f17d9-91e0-4b77-9d54-3609b80af627", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b777c190-8f42-40b0-931c-ba24e24498ae", "sighting_of_ref": "indicator--3f6f17d9-91e0-4b77-9d54-3609b80af627", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a145841-21c2-4377-b428-72ff0d4ed6eb", "sighting_of_ref": "indicator--41b47ced-52df-4ba1-975a-cc461ada22d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec49bfae-f467-4c6f-bcc0-21ccd16ff7c8", "sighting_of_ref": "indicator--09583e63-f0ad-4412-9169-3a902e623795", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdef7f8-994f-4e71-9325-b53b873b678f", "sighting_of_ref": "indicator--c99bf341-5e89-4b23-a513-1e0716b58665", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffd6eef-bd88-42bb-89de-50ef6bcbea88", "sighting_of_ref": "indicator--c99bf341-5e89-4b23-a513-1e0716b58665", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afad161c-32b1-49c0-9d3a-d1258045aa5d", "sighting_of_ref": "indicator--c99bf341-5e89-4b23-a513-1e0716b58665", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34c4d2f-7ecd-497c-bb6f-f507edec4a40", "sighting_of_ref": "indicator--78f1ae5a-6612-4ae5-ac2a-e6608a52af29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c83b326-70f0-4df0-8881-d6f681b024d9", "sighting_of_ref": "indicator--78f1ae5a-6612-4ae5-ac2a-e6608a52af29", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b19cd2-0279-48f6-b6f9-fb046a934f91", "sighting_of_ref": "indicator--78f1ae5a-6612-4ae5-ac2a-e6608a52af29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003db7c9-8544-46bf-9825-94658fb67105", "sighting_of_ref": "indicator--7b1b4133-fda1-4159-82af-f4876755036a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8856cc3e-83a8-4c1b-8e13-d01e597784a2", "sighting_of_ref": "indicator--7b1b4133-fda1-4159-82af-f4876755036a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61363e0-a239-4259-a2b4-3a6e8b359ec6", "sighting_of_ref": "indicator--7b1b4133-fda1-4159-82af-f4876755036a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171549fa-dd8c-49d5-9a5d-1f9bb7705fad", "sighting_of_ref": "indicator--12f4ca65-d841-48b7-ac24-020198cea67b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b788806e-ca10-4a40-9863-c25a09404a34", "sighting_of_ref": "indicator--12f4ca65-d841-48b7-ac24-020198cea67b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9de39a-ac65-4215-9929-4f0e77cb3ecd", "sighting_of_ref": "indicator--12f4ca65-d841-48b7-ac24-020198cea67b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d399a78b-47d7-4557-9abf-6fc2bfa9ea51", "sighting_of_ref": "indicator--813ecc35-8f9a-442f-a9df-5987ac521d8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c906650-8ea7-4aef-8133-f1159d2c45c9", "sighting_of_ref": "indicator--813ecc35-8f9a-442f-a9df-5987ac521d8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b838eddc-5922-4321-99aa-1a582fdf1dbd", "sighting_of_ref": "indicator--813ecc35-8f9a-442f-a9df-5987ac521d8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef142d0-a816-4123-a8fc-c9936e2bf38a", "sighting_of_ref": "indicator--500b648f-8dd5-4d42-8046-8f1c95034998", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01b4d48-2f1b-4e1a-b958-51a6b90f9bf5", "sighting_of_ref": "indicator--8e02093c-e94b-45b5-bade-e3d7000a2a2f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7a9ea6-382a-4344-9e0c-2f4a848576de", "sighting_of_ref": "indicator--8e02093c-e94b-45b5-bade-e3d7000a2a2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75a10f0-bfdc-4f1a-94ea-dd6f29f6b474", "sighting_of_ref": "indicator--b79d1aea-fb8b-484e-9cef-eaab93045b00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f7eb08-8fc6-47c5-b234-883ce4ad80b4", "sighting_of_ref": "indicator--b79d1aea-fb8b-484e-9cef-eaab93045b00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18508180-1b9f-457c-878b-3c39af7bbbda", "sighting_of_ref": "indicator--b79d1aea-fb8b-484e-9cef-eaab93045b00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d818b2-5a06-4464-8a06-7a1f3a40c55f", "sighting_of_ref": "indicator--dda1abf5-0b84-426c-aec9-9d7ad2374075", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede33a63-07c2-4f33-b539-7d70d8275d07", "sighting_of_ref": "indicator--31548d0c-9798-4f4c-9c44-1753335512c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a82f55-96d0-4db4-b647-97d71f7573b7", "sighting_of_ref": "indicator--31548d0c-9798-4f4c-9c44-1753335512c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af71dec6-03ff-41e7-bf19-4210a0431bd4", "sighting_of_ref": "indicator--31548d0c-9798-4f4c-9c44-1753335512c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe6e84-aa99-4a29-a132-2734dfc44071", "sighting_of_ref": "indicator--389ae63f-6615-4b3a-9989-d949e34a7254", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77497c5e-59c7-4ede-b182-429034035627", "sighting_of_ref": "indicator--389ae63f-6615-4b3a-9989-d949e34a7254", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b37ad6-49bf-47ad-82ad-f9f16a1faf47", "sighting_of_ref": "indicator--389ae63f-6615-4b3a-9989-d949e34a7254", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376c94c1-3969-44db-9b2d-1f5c7528a2f6", "sighting_of_ref": "indicator--89a5955b-94e0-40b6-9a54-498c448261c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70218071-5c9c-4e2c-bb94-c7e0c37f1536", "sighting_of_ref": "indicator--482c3047-3821-4bcc-9920-82f9d89c6fca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f599ab8a-103d-4578-a76c-7778f0d2294e", "sighting_of_ref": "indicator--34c4059f-8d0d-4882-b00d-707390f96996", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6027c0c-8bc7-4d05-8f0c-80a3f0a87fa1", "sighting_of_ref": "indicator--13fda520-ad50-4246-bc16-10c783a79cc5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e13706-bd24-4ac1-8c21-78f221367e6c", "sighting_of_ref": "indicator--13fda520-ad50-4246-bc16-10c783a79cc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e4afb2-046e-483d-a033-b7026b06f173", "sighting_of_ref": "indicator--d61c0ab4-37b0-4364-b652-4d51b079a311", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf633bb-2c18-4019-acdc-24e82399961a", "sighting_of_ref": "indicator--909847ac-f06e-44fa-b8fa-2dd8d720e5f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b932b1-d68e-4fa5-9080-4525c5e4e860", "sighting_of_ref": "indicator--909847ac-f06e-44fa-b8fa-2dd8d720e5f5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dc6a25-7027-442d-95d4-693d4c611eed", "sighting_of_ref": "indicator--407d0653-7d85-45de-a373-2ca968101444", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c22b908-490e-4bd4-925f-0ea803ec93ee", "sighting_of_ref": "indicator--832e0108-daf5-4128-bbb5-351d58b98026", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524124cc-0297-42fc-a62c-0bed6bc467f6", "sighting_of_ref": "indicator--832e0108-daf5-4128-bbb5-351d58b98026", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9024f1e-308e-4c4c-b24d-eed88e9341e9", "sighting_of_ref": "indicator--16efd46d-9e10-409a-9deb-c56d7fb17cc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d87a6-a650-41b9-bb5a-8d792bd7cc81", "sighting_of_ref": "indicator--611351c7-716b-4f08-b216-48bc2bd683b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c5e9b7-4a7b-447d-85ae-6e1295d790a4", "sighting_of_ref": "indicator--9f4b7056-9df4-42a7-94ba-1cb07406494e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855069ec-137a-4c64-9d34-5b51bdd1f7bd", "sighting_of_ref": "indicator--9472aa31-2b80-4faf-9442-6773f5cb8786", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e2c1a1-d125-4805-bd1a-b87769df6875", "sighting_of_ref": "indicator--257759eb-a7aa-4585-b459-6796dc5c3251", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c95cb40-f3c0-4f28-a799-849e2ffdb4de", "sighting_of_ref": "indicator--821d9c71-4746-46cc-83e0-5ae93c386388", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269951f9-9a73-4551-93d2-93cc7d54c28c", "sighting_of_ref": "indicator--6cae0a4d-5248-467a-834c-8762b543c814", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e07b43-89ee-4d30-8825-1e6b33d9c7e1", "sighting_of_ref": "indicator--a3f8b587-a0b3-44a1-b23c-204ec4006835", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d725a316-7396-48a3-ab7e-a5cec66db65c", "sighting_of_ref": "indicator--cd21c392-f58b-4fed-84b4-517e5a63ecea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb35d65-ab71-4dee-8a8f-7a48964a12be", "sighting_of_ref": "indicator--d64846f5-1f4a-4e25-a7fb-01e6645b509e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1f62ad-f539-4d20-a335-7d4c6f449a82", "sighting_of_ref": "indicator--590e6bf7-016d-4053-bbf4-58edefb27764", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b84df78-7b62-4785-8255-d249d7e36f6a", "sighting_of_ref": "indicator--7d4b500d-01ea-4a8e-a72a-c83cb0c72bc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c3145-c1db-4798-ae2c-fa32727bd619", "sighting_of_ref": "indicator--2b0d1911-8459-4939-9875-e76b1b730784", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44a68b1-a037-49b6-863d-f77c229b83d6", "sighting_of_ref": "indicator--f5ac2fb5-9d4d-4398-9c92-fec7a7bb311a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a355d27-5efc-4c2b-8e3b-f6bbc08a7592", "sighting_of_ref": "indicator--c520ecc9-f51d-47a5-8c66-935d9c5ac785", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22151b2f-1490-4fbc-852b-1f336bd7667c", "sighting_of_ref": "indicator--c520ecc9-f51d-47a5-8c66-935d9c5ac785", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870b881a-b968-4497-bb0f-ff9c4e41b15d", "sighting_of_ref": "indicator--61cda673-9113-4af1-8939-1ca6128de740", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b034a82-5d9e-4a08-9e8f-58b795156195", "sighting_of_ref": "indicator--32668d87-954f-43e4-acb0-3a0aa7ca5433", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8905dcc-07bc-423e-a240-bf1ca1238573", "sighting_of_ref": "indicator--f04b0511-c85e-4886-8bf5-4093829d30b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d220d7-2119-46af-ae65-b3770eac369d", "sighting_of_ref": "indicator--b29fef66-efec-4f72-8ae1-202abce6f6fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5828911b-8fed-4421-89c8-3401b56eca9e", "sighting_of_ref": "indicator--45f08d1c-306d-4c11-9743-59f2d430930a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20ab886-2d82-4708-8b75-78ffd6c36b7c", "sighting_of_ref": "indicator--0023bc29-2892-44c9-88cf-02589cfe6f2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8b5fc3-e56a-440a-946e-244122f90062", "sighting_of_ref": "indicator--3a5e9887-d9db-4502-aa67-4698e88ee81b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1288ce53-1b58-4184-b647-a04f3d2cfc04", "sighting_of_ref": "indicator--948b9587-4ca9-4f2f-bae0-c424ad06434a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b598b77-ba6a-4760-9725-b7139b6a8e73", "sighting_of_ref": "indicator--20e0a10a-764f-4b46-bf79-6c947b970987", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004fd663-884e-4e31-9d70-c3ba6cc96a48", "sighting_of_ref": "indicator--b6819135-8065-4a89-a200-efe166ade4f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40dec3c-7374-45a7-ba80-8be03967169e", "sighting_of_ref": "indicator--c801eb8a-4276-4328-969c-6d1d95688d9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d4e513-7203-4689-90ed-74170197944c", "sighting_of_ref": "indicator--087cfa0d-5b39-4e64-99bb-178c04fa42b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18dc443-20a2-4fbb-aed0-a9a3fcc35bbf", "sighting_of_ref": "indicator--087cfa0d-5b39-4e64-99bb-178c04fa42b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b6a950-8383-4fb1-886d-152dfb226929", "sighting_of_ref": "indicator--5ec5b2b2-3bdb-415f-bf73-403648ac3194", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c7785c-3c35-4d2e-8012-f5abe71707a3", "sighting_of_ref": "indicator--41067c07-e362-42fc-94a3-52967f0f125f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f4baed-e4ec-440e-957e-e9a722b96f14", "sighting_of_ref": "indicator--fbd5a693-5c58-4d65-9e3f-569f935f5c09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374ccbd9-f218-42a4-b8be-19e18bfc66e5", "sighting_of_ref": "indicator--e424a035-17c2-4697-863f-f25bc72d5c48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b3ea1a-fc87-431a-9162-c9d6916450a4", "sighting_of_ref": "indicator--e424a035-17c2-4697-863f-f25bc72d5c48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211d892a-c307-4124-88c1-8fd2723e1206", "sighting_of_ref": "indicator--33ed9d42-286c-4765-921d-0ac1c5999cd5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18a17c5-8a28-4faf-87a9-22430d8844f8", "sighting_of_ref": "indicator--eeb09479-710d-4a8e-bfc9-7bc059d3869d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f9abda-a951-4b1b-9f43-de5f97474ab9", "sighting_of_ref": "indicator--e3f9be2b-ef72-45c9-a4a0-bf36ecfe5d06", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeab8124-1a0a-4494-a6cb-3b46a9b32695", "sighting_of_ref": "indicator--5594a73b-d933-4305-bd42-1f6117a9e6b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20c551e-e1cf-48ca-a5c8-f693e11e8624", "sighting_of_ref": "indicator--0403b760-a57f-48fb-90f6-28de0970e85c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cf2ded-b2f5-4ed8-b4ff-7c22416fac46", "sighting_of_ref": "indicator--cd70f206-d749-4321-b96c-4c51727cca43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3109d2-a27b-42e4-a16c-d8f3940c9985", "sighting_of_ref": "indicator--f4292f38-751a-4b48-9ea5-15388b570833", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29b9299-90db-442c-964c-055e9432c248", "sighting_of_ref": "indicator--720d8b56-6c89-4dce-8e9a-de236af58560", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126fedda-1dae-4c3b-9d27-ac064d60ba1b", "sighting_of_ref": "indicator--013f247c-18a3-4176-b89d-253a9c429e9b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12e340d-dcb5-4df7-84de-ce1bbdaba1fb", "sighting_of_ref": "indicator--508223a7-9295-43dc-b2d8-952627ae4c46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8b631a-5b1b-48c1-ac0d-0d9296dab137", "sighting_of_ref": "indicator--03b92e2f-0f84-434e-956e-7313d55f8cdd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a132f3e2-a651-418e-946e-e488ebeed4ce", "sighting_of_ref": "indicator--4b0fdb1c-5e20-48e8-85a2-140d112db285", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331c6d94-72b1-4c07-aecf-cfe31ce17e63", "sighting_of_ref": "indicator--8d19a4e7-0b2c-4c00-a0ca-fd0a8d0601ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f350d0ae-cfbe-4b49-8e5b-6b0814b9d9e5", "sighting_of_ref": "indicator--067678b9-b0bb-487d-92e3-b10846ca9c6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b68ef00-6aaa-46a2-8f0d-ff028fdf80cd", "sighting_of_ref": "indicator--c7c34630-ef05-4991-bb25-00e84453ea73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80b8c7c-0b5d-4002-bccc-1387cf37216e", "sighting_of_ref": "indicator--079e522f-8b90-4d5e-b835-cf239d53fa75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7653eba1-2f18-4861-8332-ce8422d194a8", "sighting_of_ref": "indicator--ceb5d2ec-6afc-48ef-be9c-1c5c740428c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e9462-d20d-4b4b-9b09-9a09fd64de85", "sighting_of_ref": "indicator--ceb5d2ec-6afc-48ef-be9c-1c5c740428c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94ad947-b1ff-45c2-8551-b79240dc4645", "sighting_of_ref": "indicator--ceb5d2ec-6afc-48ef-be9c-1c5c740428c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af1fa6c-7cd3-4447-8223-59334fee7a8b", "sighting_of_ref": "indicator--4c6c8737-d11e-43b5-81b2-bbb97b9ff785", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40aef43e-d37d-4a57-bce6-779fcd5a2b85", "sighting_of_ref": "indicator--4c6c8737-d11e-43b5-81b2-bbb97b9ff785", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daefca82-32b8-4e64-a152-9607d4229e4e", "sighting_of_ref": "indicator--4c6c8737-d11e-43b5-81b2-bbb97b9ff785", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff55077-2bcf-4e3c-9322-6178a4640abb", "sighting_of_ref": "indicator--b165c1c0-0dcd-4a34-b6de-70bf49bc227f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ee4c86-909a-44d9-b810-9c9a17e22283", "sighting_of_ref": "indicator--96ea7aab-aa1a-44fe-9609-4d02b6a5f950", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44c9d4a-ae53-4622-aacb-8c899fb126ff", "sighting_of_ref": "indicator--5da068cb-22cd-4986-8a29-931cebe24cd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bcb2ed-e630-49fb-80d9-1f2de5b26bbe", "sighting_of_ref": "indicator--d94d13a2-ded7-4298-9104-dd88f2fe8110", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4228f781-8110-4ba7-b059-cfa25d983f43", "sighting_of_ref": "indicator--50db03a5-54fb-43ed-b45d-e8e0838c7bfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d170a083-442a-4e62-b824-c84232564277", "sighting_of_ref": "indicator--a4664e44-4a32-4ed5-9807-1c2d32c87d5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a16ddb-f8b1-4a68-872f-6c05e6def103", "sighting_of_ref": "indicator--b0a910df-ef8e-4036-8547-257b86abd1ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e039a-2191-4edf-a258-96f2d257fee1", "sighting_of_ref": "indicator--5f2673a6-3b83-4147-a7ca-41a1e6edf529", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd85166-06c4-4730-8a33-654143fc8f35", "sighting_of_ref": "indicator--04b80484-2bc1-41fb-8abe-d818be866f77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a27f0a8-754b-4828-9fea-ec24d223ebea", "sighting_of_ref": "indicator--04b80484-2bc1-41fb-8abe-d818be866f77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546cede4-a849-47e4-8ce3-9fb55810e25a", "sighting_of_ref": "indicator--04b80484-2bc1-41fb-8abe-d818be866f77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eb7621-1cba-436d-8b5c-e3a87a99a361", "sighting_of_ref": "indicator--bb3ee6d6-d1f7-4251-8e48-f21b726b95fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da3c157-ad38-4a61-946b-8dd3f018e42a", "sighting_of_ref": "indicator--8e6ab90c-2015-49cc-b2d9-ee53660e2bd4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2a0166-d094-40d5-94a5-a9548d064fc2", "sighting_of_ref": "indicator--8e6ab90c-2015-49cc-b2d9-ee53660e2bd4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7dcc05-a69f-400a-a82a-f21aad245036", "sighting_of_ref": "indicator--8e6ab90c-2015-49cc-b2d9-ee53660e2bd4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31ee6f4-a19a-4564-bfa0-767c9d3a0a43", "sighting_of_ref": "indicator--4defad63-874f-4d14-beef-7e4dedbf091e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077fa573-03b6-4df3-a650-b64917f54acd", "sighting_of_ref": "indicator--4defad63-874f-4d14-beef-7e4dedbf091e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea00de94-9731-4582-9afc-d3a21df93466", "sighting_of_ref": "indicator--ac0af507-0b0d-4e85-be98-ad55b6efc9ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75df495e-acb3-4701-ae6c-a88fa24086f7", "sighting_of_ref": "indicator--65cc0958-6cc7-4238-8794-ef291838550f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a24b3aa-4b5a-4b3b-8b93-f15f1b2873fb", "sighting_of_ref": "indicator--32277c56-3b00-42e8-9ffb-02ca702f7e33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c456d749-95e7-423d-805d-971f34f9c436", "sighting_of_ref": "indicator--32277c56-3b00-42e8-9ffb-02ca702f7e33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d13c7b5-7eaf-4e84-893e-b13fd8c43ee2", "sighting_of_ref": "indicator--b9eba218-f53d-4b8b-bf4e-bb7f38f087c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c7592e-eed8-4667-bce5-e493086641f8", "sighting_of_ref": "indicator--b9eba218-f53d-4b8b-bf4e-bb7f38f087c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8add0831-eb32-4014-a5af-274b0958317e", "sighting_of_ref": "indicator--b9eba218-f53d-4b8b-bf4e-bb7f38f087c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f8218b-f486-4382-b19e-a47bb4a6cbf4", "sighting_of_ref": "indicator--6b94fdda-91db-4dbd-8009-b8b30ba39da7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf1227a-bb40-448d-8bd5-6da69f24a34d", "sighting_of_ref": "indicator--e74784de-844f-4214-bfd1-51c750698443", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ecebb4-c060-4dbb-b84e-ef817fad0e14", "sighting_of_ref": "indicator--fdfa718e-aab9-45d3-be4c-806328dfd736", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8c4e92-d440-48ff-97dd-bf9c7823cf63", "sighting_of_ref": "indicator--20346ee0-e927-4661-8eb6-928a22bd647f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5504e75f-e6a1-441d-b38f-9605fd645faf", "sighting_of_ref": "indicator--02390557-abe5-49e8-87b4-32de58fca2a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44530453-b0b3-4a23-9205-18491c60fd13", "sighting_of_ref": "indicator--22c97dfa-2b9d-4590-a4bb-b8dabc35b8ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362520b8-c541-4015-91b9-a9121a131f60", "sighting_of_ref": "indicator--935d5d5f-184e-47f7-b0e0-3cbc195318ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa1aa56-5c3e-4e0e-a45a-8ba021fc4022", "sighting_of_ref": "indicator--50815e98-bac0-4da8-bcfb-fa78f7f19b04", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db7f700-e433-4071-8802-b00d8a0afb07", "sighting_of_ref": "indicator--3eabdebc-6ab6-4a28-bd42-fa9d77abc83c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb144ba2-fa82-4631-afcf-f5952ddfb5a6", "sighting_of_ref": "indicator--3eabdebc-6ab6-4a28-bd42-fa9d77abc83c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc4bca3-2e73-4407-860d-1e9072fc0d85", "sighting_of_ref": "indicator--b838e76a-dc27-46d2-8b36-a2abe05fa769", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35ec781-8c3f-4252-b9e4-1871f8a918fc", "sighting_of_ref": "indicator--5b3c1c43-873a-45eb-863e-617e6a40b0df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76903067-a395-462b-82c3-fd5271472802", "sighting_of_ref": "indicator--9277094d-e2ab-4e6f-b1e6-da8ec664a967", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb368c3c-7f22-48d7-aa6b-629afe67102c", "sighting_of_ref": "indicator--18b5dab5-d932-44c3-bb9e-b3007a5fbb4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eddce6-8675-406c-83ce-3e4d1a748fb9", "sighting_of_ref": "indicator--93b2ce72-4e50-4a53-8e55-978536db85da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8865297-5eda-42cf-b661-1c5b37076777", "sighting_of_ref": "indicator--8dfd8d86-e670-485d-9efa-aeb13a1c2d77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a24d11-e338-45aa-92bb-21705fdf21b1", "sighting_of_ref": "indicator--56739370-9f01-446a-bcf2-adbf1fa03f66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb91286-162e-46e0-b3c0-7366b0ae6122", "sighting_of_ref": "indicator--df02e197-df0b-4c1c-9a49-45cc82a5a3f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fbe3f2-1493-4ce1-8b1a-28fca96caea0", "sighting_of_ref": "indicator--8873f469-908f-4453-9e59-77f8d359d0ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fefa85f-2d2b-4f96-96c9-aeec2263d8e8", "sighting_of_ref": "indicator--a97b5a21-0b58-4471-b884-843a414b5523", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b043468-f666-4e62-956b-cc696506cd98", "sighting_of_ref": "indicator--c7fe780d-ad4c-4f41-a090-c6784da38e85", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8a3685-a710-42b3-8d05-5a8cd0b417f3", "sighting_of_ref": "indicator--e765e70f-1617-4dad-93e9-52601a425488", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4152b24e-c9af-4676-8eea-4c8d52358ccd", "sighting_of_ref": "indicator--e765e70f-1617-4dad-93e9-52601a425488", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acba4ba-4491-4706-b93b-0c4209170538", "sighting_of_ref": "indicator--6ebcdc16-f652-46fb-b56b-8871eba76999", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5cfd86-5c6c-48c4-b29e-6640b1563bd8", "sighting_of_ref": "indicator--18325ed3-13d3-4ac1-9f81-893b7556a29f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b099ce-a355-4d43-9c0b-e461923065ae", "sighting_of_ref": "indicator--3fa2b237-3e9d-4393-a9c3-22c27de74de8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de96a16-a724-45be-8f82-2803110bb1f4", "sighting_of_ref": "indicator--bad2255e-4075-4768-bf5c-f9487ab7ddec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ef801-aea6-4f07-a5bd-6b7717b50a92", "sighting_of_ref": "indicator--e21a8017-73e1-42aa-8279-3c9d7cfda160", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3039811-428c-49ff-9b3f-2e78c2ab1b5a", "sighting_of_ref": "indicator--e95a81fb-38d3-4608-9a97-74dfd14e41ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f49cb6-6340-4e1c-b24f-1a18b94914f3", "sighting_of_ref": "indicator--1d830c15-c0ef-439c-a0b7-c9d0d1dd04bc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093ce4d8-0c59-474a-be82-3fe14487bb06", "sighting_of_ref": "indicator--6564418f-8d10-439a-b98b-7ff34e5f80e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee07f695-cf80-4a29-b230-cc1efafee8d9", "sighting_of_ref": "indicator--6564418f-8d10-439a-b98b-7ff34e5f80e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bf4582-4a96-4c6d-bfab-d05e2a1a43c4", "sighting_of_ref": "indicator--d9e3b12b-eba6-4a74-bc79-44b43d045c7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7c9e5b-b428-4093-9686-7739e4d57195", "sighting_of_ref": "indicator--93251fd0-1c27-4e64-90c5-2e5d8511b85c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a127ad26-bf9d-491c-a921-9baec23af22f", "sighting_of_ref": "indicator--88d2baa8-ae0f-4898-b3a8-4606745ba459", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a4644b-88c5-4c14-b81e-e028d414fb59", "sighting_of_ref": "indicator--875b81b8-178d-46b4-a7bd-94a0b4c25d0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1beebbc-546d-4bd5-95a2-9e62acfbe601", "sighting_of_ref": "indicator--85699a41-2c16-4b56-ad89-6e0537958685", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c4b133-1051-4389-908e-f48e04b725e2", "sighting_of_ref": "indicator--6dd21d21-581a-4d32-9598-e7d054e69135", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba0a0f7-cff4-42a1-85b6-9c97baf06b69", "sighting_of_ref": "indicator--c591fab1-94ed-4f07-8b4d-a470fc6a1bee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5244caf3-c58c-432d-bb6a-39ce9d2ee519", "sighting_of_ref": "indicator--c591fab1-94ed-4f07-8b4d-a470fc6a1bee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998f22a4-3476-4ead-8598-bde2d8f2fbd2", "sighting_of_ref": "indicator--e580c124-b546-4a37-81d2-6522e702244c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f679a3a-091c-4c5a-9162-24dab84ef698", "sighting_of_ref": "indicator--5ff9d3fe-fd9c-43bf-b05b-7190b2ed027a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c88b79-d182-4da4-a243-bae00f4bf2c5", "sighting_of_ref": "indicator--5ff9d3fe-fd9c-43bf-b05b-7190b2ed027a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0520e278-0201-40ca-9e0b-2f0ad50f353a", "sighting_of_ref": "indicator--420b331a-ab1e-42a8-a9cf-94ac81d87f1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c93c7da-7b50-4789-b038-247b05a4fc8a", "sighting_of_ref": "indicator--29e3b453-427b-43e5-9ca7-829ba5b8f549", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dcab2c-1db0-45f6-9566-871bb9e6af0a", "sighting_of_ref": "indicator--83ead51f-49da-4631-b531-6463738985dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e917c849-ef62-4d55-93a6-1740204fe8cb", "sighting_of_ref": "indicator--30552c96-2417-4ab7-a29f-5763c6b67acd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5fa616-f0ee-4929-b00c-f8d7132e98e0", "sighting_of_ref": "indicator--d2c4f8a2-5b93-49eb-baf3-f368d18910ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6073a5c4-c7cd-4712-9c6d-c18f6a74add3", "sighting_of_ref": "indicator--b356ced3-ef2f-45c3-ad8b-046c304d275f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb6a934-65b7-4480-8e95-e8a18228e49b", "sighting_of_ref": "indicator--002b37dd-e476-401e-a639-4a5d5b106090", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6770173-6b8e-46de-8606-c2d7ef578ac1", "sighting_of_ref": "indicator--2c3181b4-ab39-4983-9f4f-3e84e4f959bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d790b1-12d2-487f-b5ac-67cbbfdba242", "sighting_of_ref": "indicator--2c3181b4-ab39-4983-9f4f-3e84e4f959bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81b360c-bd25-4c5e-8fcc-72a92314ce7b", "sighting_of_ref": "indicator--f56b83ca-2455-4e2d-bd2b-d9440c255ba6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e396d8-54d3-4ece-ab4f-430771694a76", "sighting_of_ref": "indicator--5944e29e-437c-41f1-b962-3759235df679", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9014e030-6962-465a-80ae-8d96cdc40a39", "sighting_of_ref": "indicator--9926f0c5-4eda-4fb3-8032-396c97e65770", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c7a1ec-5f70-482d-8445-2e5050a2d434", "sighting_of_ref": "indicator--2b5c39e3-2f20-4471-b9e1-ea77459e57b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd561fa-e80e-4372-9884-c9a3c25f7f5b", "sighting_of_ref": "indicator--45d278ff-8bb0-42a6-9626-db07f5529329", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55ef87a-4436-4e8e-8781-5424b53c7c79", "sighting_of_ref": "indicator--9af2fec2-0678-47e2-8dc0-59b48b17b479", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552fabda-ddea-4477-b595-841cba2597b9", "sighting_of_ref": "indicator--d927b771-7ae6-4f08-b101-2b9cdd402b52", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e64a60d-07d0-4dec-b58e-4008a7772b8a", "sighting_of_ref": "indicator--e85c67ca-d533-4fb5-9acb-495a12620153", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6454493-9ce0-4621-9098-2251a7f9be21", "sighting_of_ref": "indicator--df70e39c-9168-45e0-ae8e-0f74b5c01c78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390adf68-d46d-4565-b39b-f4bbe4977865", "sighting_of_ref": "indicator--4ef43abb-d5dc-47b5-b49c-8490bfba5789", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a90fbe-38c7-4f83-a4e9-a45f14e739a3", "sighting_of_ref": "indicator--ed0fee90-4779-4971-8e43-472a78d70fe2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c4f1ab-b706-4276-bf0f-edfab9385cb4", "sighting_of_ref": "indicator--f820714a-0702-4a33-8951-f96a2e103a14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1713602b-a862-4b26-a424-0bc22ea843a0", "sighting_of_ref": "indicator--a222239f-da04-41f2-858c-9c0ef0f066ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987bfd24-ad3b-4923-b24b-251c7960d369", "sighting_of_ref": "indicator--1aaafbd7-4db0-49d1-8779-f07851088ea9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873eb10b-2364-42d2-91a6-04399e6b6489", "sighting_of_ref": "indicator--1aaafbd7-4db0-49d1-8779-f07851088ea9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d8857-85c5-48e8-bd66-3dd510f0d71c", "sighting_of_ref": "indicator--345832be-7ec9-4b50-9d04-d1dddd434a59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29eea36-0982-478d-8034-790007ec5979", "sighting_of_ref": "indicator--da721cde-28ba-4bd4-a956-ac27001aa0e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4edf78-af27-4dc5-83e4-ac3d29b1201d", "sighting_of_ref": "indicator--da721cde-28ba-4bd4-a956-ac27001aa0e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f47c38-0459-4e68-9531-d1d1e3c33bda", "sighting_of_ref": "indicator--6191e719-d2ab-4a79-82d2-ae0c9d1d1b46", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310ed828-4557-4629-9e92-50e3867c6130", "sighting_of_ref": "indicator--a2f295c3-3815-40ec-97f6-1a98af791366", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34977979-fbca-45e1-9411-5cad74df7bce", "sighting_of_ref": "indicator--413f90e8-ce97-4220-a211-88df87ee1961", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e740c0e8-7a6c-41f2-bb96-4b980d2e55bb", "sighting_of_ref": "indicator--4b2e4c5f-4cee-4c86-98e0-b0c17b83773f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e62ba7-0493-4a4f-a799-2c614a6647c9", "sighting_of_ref": "indicator--a3470ef8-f36d-497c-9fa8-a48f787224f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ebe265-7f15-4fd7-9ac5-e4ab36f42185", "sighting_of_ref": "indicator--29814587-17df-4f5e-9208-aa40e5e7a338", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d10083-2df8-48cd-b158-c6f9456e6a7e", "sighting_of_ref": "indicator--62f478ff-7758-4796-b030-61d730bde0ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4326e0e-b1b9-4c11-bfcb-50b94bfdcde9", "sighting_of_ref": "indicator--465fbd06-1bc4-47de-a513-5da652f704a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68317548-a961-4197-a201-a19989fdcfb0", "sighting_of_ref": "indicator--d38808d6-880c-40c6-9b48-d6bd26d1ef1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366b29c2-c688-45c0-9c7e-470047b0d62b", "sighting_of_ref": "indicator--f69a5fa4-e7b7-4810-808d-8cddaf0b92c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1869f858-c06b-4341-a6e2-7d855a5d71bd", "sighting_of_ref": "indicator--f69a5fa4-e7b7-4810-808d-8cddaf0b92c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355255f7-3f62-4c5a-acf9-93149aaac26c", "sighting_of_ref": "indicator--ba6ad525-e04a-457f-93bc-471f80c05209", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3df0e80-f58a-42de-a13f-a61431e85beb", "sighting_of_ref": "indicator--25339395-41f0-4618-b583-0732a4e96882", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f2b231-1bc0-4a02-b6eb-ae4a97fc77fb", "sighting_of_ref": "indicator--139ebcc7-9ded-4a01-a343-51f45f8fac9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a5fe4-ea5d-46de-b4f3-ea6ea792744c", "sighting_of_ref": "indicator--7c25f129-34fc-46a9-82cc-e6d5ffa059b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ffe925-ee9a-4e7f-8787-f6127dab5b0b", "sighting_of_ref": "indicator--954997a3-f1e7-440e-8328-67c596ae7475", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48400461-1841-4fd2-a080-c3a282689bef", "sighting_of_ref": "indicator--6a075354-3fca-4281-b969-d42eb93bd750", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9daf78e-55d4-45e7-96c2-fd3198fb6ea1", "sighting_of_ref": "indicator--16c9d6e3-27fc-4414-85fe-85e3ccffeccc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cc8f6d-cebe-46e0-a3a6-c1361176c01e", "sighting_of_ref": "indicator--e389d118-f4d6-4a2d-bd2c-fb16b5c1937c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6644f4f-95d5-4d15-964b-b32bbbf313f4", "sighting_of_ref": "indicator--75dbb223-50bf-4071-9074-002013867018", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b68f19b-4679-40a9-b63d-12147d30b78d", "sighting_of_ref": "indicator--b0ff04f2-8631-457e-a815-01f4ac427c8b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d7ebfc-cf91-41c4-972a-5bf0bc050c68", "sighting_of_ref": "indicator--69840585-973f-4ec3-b952-d088329add26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2047d3a-83aa-4a65-8826-0e6930cab430", "sighting_of_ref": "indicator--8fe1bff9-3383-4b43-ba10-3251a4cd7ae8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d8647-dd56-411d-8624-25892cf53396", "sighting_of_ref": "indicator--a0522456-0219-4b04-8a51-7c2b42d01e05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f22893e-bcbf-494b-9540-e8174617504c", "sighting_of_ref": "indicator--6ccf2161-c8fc-4826-b993-bcc918c22e09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb07d3-ff9a-4fd4-9401-a0366a4db21d", "sighting_of_ref": "indicator--15b33cb1-12a0-4f86-be75-b30098b6cc6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744a63c-5fa8-4d3b-9ae8-4b33ee710220", "sighting_of_ref": "indicator--c3f48595-92e6-4095-8463-94827fcd5e60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112dd4d9-8ed4-4074-9a36-0b1473f22788", "sighting_of_ref": "indicator--066cd434-8688-4328-866d-fc900cdb6196", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b90b347-254e-41e6-bdbd-0211614091f7", "sighting_of_ref": "indicator--c9d4ff81-b36c-4ff3-b056-015baf2e7b8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b784a35-65ef-4986-81b0-4b16cdfe43ff", "sighting_of_ref": "indicator--d32d2eba-90b3-469f-af8a-bb9c131da634", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7faf94-dd92-4065-a931-0fb25d5e4ac3", "sighting_of_ref": "indicator--dda55aff-e3bd-4734-b27b-058dd1253a17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfbd69b-5b68-4222-a480-d2830e37d5c5", "sighting_of_ref": "indicator--0c0b1700-3b42-4f14-b36d-ce6c11e577a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abf4ccc-6e68-4186-9f83-b020541a1cdd", "sighting_of_ref": "indicator--9bab2eab-86be-437e-943f-7e90fa0fce4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9243005a-3a23-4ac7-8bc1-2b21ed2f6773", "sighting_of_ref": "indicator--55a56950-5518-4ba2-836c-0b996f4ee391", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4097e8-6fc4-404e-8b96-fba32d42797b", "sighting_of_ref": "indicator--e7010353-3533-4172-aecb-209be561eadf", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e590c78-797b-4e9e-a558-683b607bc6f7", "sighting_of_ref": "indicator--792b4be0-7679-41aa-b4a6-b9138a65c85d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f47f21-d908-4692-84fe-e4e3939d81a9", "sighting_of_ref": "indicator--792b4be0-7679-41aa-b4a6-b9138a65c85d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb387289-c156-4b83-b9a1-8192548b7d6c", "sighting_of_ref": "indicator--e9bb65d6-2707-4c40-9e8c-928014958c3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9189928-ee12-4fdc-8d07-99660e1fec06", "sighting_of_ref": "indicator--f808655b-b85a-476d-a72d-4e3cc1e382c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dccd249-9e71-4b54-99cb-73fb365d51bf", "sighting_of_ref": "indicator--d10f8a35-7cec-46ca-9828-e3aa0b6e508f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098ee188-5846-4437-bf5d-c04ad52feff5", "sighting_of_ref": "indicator--d10f8a35-7cec-46ca-9828-e3aa0b6e508f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bac9050-46cb-4951-b712-66f5070884e1", "sighting_of_ref": "indicator--d10f8a35-7cec-46ca-9828-e3aa0b6e508f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e28fca-f048-495d-9016-8fbba5d66685", "sighting_of_ref": "indicator--5e474094-fd89-4e50-8867-c2fa618b5863", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56391185-ea06-44de-83d9-b428f3b45c9d", "sighting_of_ref": "indicator--5e474094-fd89-4e50-8867-c2fa618b5863", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdade07-561b-4e11-b396-f90f09584134", "sighting_of_ref": "indicator--0b755e08-9c55-4108-801f-d7295c363954", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e5bd65-bab3-4017-b7a7-7e45b273f1f7", "sighting_of_ref": "indicator--255bd0bc-e45e-47f6-8852-17cd928e7b24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d5f0e7-9bb3-47ae-a3fa-e2d916a96fe6", "sighting_of_ref": "indicator--d538898c-7f88-4250-86b4-4f28632538a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11068fee-a948-45c2-9c33-c902b40592b8", "sighting_of_ref": "indicator--0d7533e8-4093-4b99-8a60-635dff25ebac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be03cf9d-b719-4aca-8383-8f7475d17280", "sighting_of_ref": "indicator--ccf9734b-a698-49b3-8970-b71bfdd6ee97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab19330d-18bb-4465-8bca-415c51aa5471", "sighting_of_ref": "indicator--faecbc44-eeba-4c3e-942e-02df9566eada", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53127e3-096b-4c59-8bce-3f78a690e55c", "sighting_of_ref": "indicator--34bce724-3301-4350-9e0c-12ab7b743bdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365fca54-0e90-43d7-bfd2-46d5300e477b", "sighting_of_ref": "indicator--99670095-836b-4290-a074-402f8d7d64bc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4d293d-a3b2-4b3f-8767-27b9a57440e7", "sighting_of_ref": "indicator--f39b9c96-d54c-440c-9311-6f7618c3119c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa713a0-a98b-4c1b-8cd4-c6a45ff60976", "sighting_of_ref": "indicator--072132f6-3e82-4f20-a78b-356cc8f90765", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47054315-cf58-43f4-875b-62090de4199c", "sighting_of_ref": "indicator--27aed469-399f-47fe-a809-48a7a11bc72e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2bb2bd-c05a-45d5-a7fc-9e180574e649", "sighting_of_ref": "indicator--9cea912d-7d4e-4f78-b09b-9f2c2679a555", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17b4e07-1cfa-4873-80fc-f25bd2fc2b8e", "sighting_of_ref": "indicator--9cea912d-7d4e-4f78-b09b-9f2c2679a555", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9abcf1-7d16-4d37-8797-8afa3c5584ac", "sighting_of_ref": "indicator--f1c7362b-a062-419b-91ef-80fd9f070d4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec1d7fb-a0e1-4254-80ca-1e830b08d629", "sighting_of_ref": "indicator--960af7f3-927c-4824-a7c5-03e633add405", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2f9110-70b2-4c88-a1e5-6cbeab7c4d0f", "sighting_of_ref": "indicator--f4781689-5c84-414e-82d2-7e0fa536d6d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c3dd8f-00fb-479c-984e-d12bc807b505", "sighting_of_ref": "indicator--f4781689-5c84-414e-82d2-7e0fa536d6d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d494d12-556b-49aa-91bf-f836900f77a9", "sighting_of_ref": "indicator--c4f50695-cae6-456f-9afc-407b883e8d18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d4bba5-d7f6-4eb0-8b0c-4797ef33c44b", "sighting_of_ref": "indicator--409c3ba3-1d07-4292-a005-408ae54d4be1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba818bf4-4b11-4b64-8717-ed94432a1bfd", "sighting_of_ref": "indicator--5e9907ef-4cce-4439-81ec-d2d06a5f2038", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3ba922-9766-455d-bf8a-3b1258e4a2c2", "sighting_of_ref": "indicator--988d82e9-5020-4982-97ab-46fe7be4af92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c636ab-6d20-4980-9d3d-634cd11ecf38", "sighting_of_ref": "indicator--f7d29e0c-7d3a-4798-bb10-39d3c52aa014", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456b3522-60f0-4d85-816d-7598e315e1fe", "sighting_of_ref": "indicator--dc9f9ae3-bb7a-43a1-bd7c-e17559d8d474", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711897ae-7b38-4b1d-9177-34c4f8da5d28", "sighting_of_ref": "indicator--1818261c-7202-425b-a929-e4c91e88795d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95916c2-1364-411f-bf09-0ba04cadbb96", "sighting_of_ref": "indicator--1818261c-7202-425b-a929-e4c91e88795d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535a15ed-1a39-4776-9551-ec1da6b42eac", "sighting_of_ref": "indicator--29c39e1b-165f-4556-9cbe-1a957e2827a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c03f4b-3786-4f62-91cb-9b5bd8d7cdb0", "sighting_of_ref": "indicator--29c39e1b-165f-4556-9cbe-1a957e2827a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a1daa8-197a-4240-9adc-e4643ee0f31c", "sighting_of_ref": "indicator--13621c1d-f2fd-4691-9941-e9affb51f98b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0a2596-7829-4634-937d-60501362797a", "sighting_of_ref": "indicator--b2f6809f-906b-4075-9e8f-c3ab27577240", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4434020-f416-4dc6-a2f7-48ca3588f6c4", "sighting_of_ref": "indicator--cc0aaae9-f5f5-47c7-8f67-f4b4d84c16ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43ebf61-af99-4466-aff6-9888d6930e89", "sighting_of_ref": "indicator--f4ba8b77-3248-4547-b383-b501abdd7a70", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab95884f-0ac7-4349-aa3f-eae46f9aaaa8", "sighting_of_ref": "indicator--283cd4b8-67df-4180-9e23-aa2e024829df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d373d-cec8-40f5-a1de-9157d5ef0d43", "sighting_of_ref": "indicator--1bbff0cc-fa8e-4ba2-8365-bf37c8195235", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e19e149-67b5-432e-8010-dc2843bfdf09", "sighting_of_ref": "indicator--2d72ef6b-ad99-46cb-a975-b7bd4ae2f561", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dfef07-58e3-4246-b5c6-efd1890fd400", "sighting_of_ref": "indicator--5cbb4fc4-d424-422c-9b7d-b86099bf044e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a03ec1-8f78-45b0-a4d1-e069d125e8de", "sighting_of_ref": "indicator--8fad243c-a429-4474-afd8-637d1dbd1796", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9da25ac-abf9-44f9-8613-7f222c64f54d", "sighting_of_ref": "indicator--56bc7b4b-2227-4da2-981b-6a68b96ad312", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986cdfbb-421f-4ca9-adf7-8ccf190c238a", "sighting_of_ref": "indicator--c5e57b76-87c3-4dd8-a093-bcd5d94198b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1366232d-be77-4cab-98e0-fc3c709b8d5f", "sighting_of_ref": "indicator--96d8100c-a4d3-491f-9521-b815abb46cba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2388d2-80aa-46f7-8663-262afdc3dcf2", "sighting_of_ref": "indicator--3b7e0dd4-4032-4006-a881-870391439763", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832b8cbe-e995-4cb4-b770-a1e91d89eebd", "sighting_of_ref": "indicator--59559b07-92f6-444a-81dd-cc17762726bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74f431-ba73-4d4f-b089-85c9e7cff04d", "sighting_of_ref": "indicator--618c5cf6-b964-4dac-9d9d-cf3fa929582a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce8a0f1-9e46-4963-90d0-a663ffa55ab3", "sighting_of_ref": "indicator--36a17998-7a92-497a-aa73-b2947d4cf527", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7364b0f-29da-412a-babc-082becfc8833", "sighting_of_ref": "indicator--95df475e-9c54-4d99-b0f9-c321bcb5a407", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650b72de-0456-47c6-816b-aa72f4808755", "sighting_of_ref": "indicator--95df475e-9c54-4d99-b0f9-c321bcb5a407", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d44783-846b-429f-bb57-e0f1f6289e46", "sighting_of_ref": "indicator--95df475e-9c54-4d99-b0f9-c321bcb5a407", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfb0e85-255f-4fe4-9362-b40d3b35df38", "sighting_of_ref": "indicator--00f8b616-9603-4d2f-99c1-31e7a3709cdb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06481e4-9dbe-452f-b64a-ca0c0de59a9a", "sighting_of_ref": "indicator--00f8b616-9603-4d2f-99c1-31e7a3709cdb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54764d8-454c-4f21-bf4c-7a3bc5e7d375", "sighting_of_ref": "indicator--c15edec1-f8c6-46ed-931b-b149750728d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce62d3e-743b-4742-b861-69a059743e5f", "sighting_of_ref": "indicator--810fbac3-5734-4356-b7de-0ca1ffd7362e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5bfe10-e121-4dd1-a97c-7c5dec3d66f7", "sighting_of_ref": "indicator--4dc75d4d-1554-4da7-b5c5-494f54918591", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9338178c-4f92-4554-b50f-ca9e8dd5e330", "sighting_of_ref": "indicator--c63f23e8-421c-44a4-9bfd-49b20f83ecce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a744d64d-acd9-47c0-9976-3368d766ec36", "sighting_of_ref": "indicator--761193fc-87d6-4580-b61e-0d1fe6d3dca4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46e6bb6-db7f-46ff-bac0-0d291dde9c8f", "sighting_of_ref": "indicator--c4210e7f-91fa-450f-bc2c-76c543552c9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b70421b-b33b-4d57-9374-9d4143bb9e7b", "sighting_of_ref": "indicator--47efa546-6b48-4592-bdf8-1893d2c92030", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d527bd-b1bb-4815-9e53-96a72ecd7459", "sighting_of_ref": "indicator--7a86a04e-d599-4081-b5e9-325df0a53807", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cae763-87fa-45a5-8fa5-082026212b7a", "sighting_of_ref": "indicator--7a86a04e-d599-4081-b5e9-325df0a53807", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d85dd-e212-4f7f-8a48-c7c26c22804b", "sighting_of_ref": "indicator--7a86a04e-d599-4081-b5e9-325df0a53807", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91686b9-9b90-4aac-922d-6feb343f385a", "sighting_of_ref": "indicator--5b2e87b6-716c-4083-870f-31d01326ccf0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e82864-1d51-48b3-a07d-670089526f0c", "sighting_of_ref": "indicator--5b2e87b6-716c-4083-870f-31d01326ccf0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baa3b6f-4e6e-4c0b-ace1-d41e98a30dc6", "sighting_of_ref": "indicator--5b2e87b6-716c-4083-870f-31d01326ccf0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9034c4-43ae-486c-8ad1-3105acd62d9d", "sighting_of_ref": "indicator--349c3768-4af9-4135-8642-5053233ce7fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164bd63-80b6-432c-8e8d-a62b0c1de01a", "sighting_of_ref": "indicator--349c3768-4af9-4135-8642-5053233ce7fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a1c59-bf44-4e5c-800e-f28109072d20", "sighting_of_ref": "indicator--349c3768-4af9-4135-8642-5053233ce7fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc01477-e376-4906-ac3f-7b861ddb1446", "sighting_of_ref": "indicator--7dd9f75c-3579-4ff1-a880-d7fdb2cdd0b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5038f312-bc42-4e51-ba1c-9043f0789762", "sighting_of_ref": "indicator--5f934fa9-7ff6-41e8-8964-fc1738b43390", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237729fa-c250-44d0-aa07-4058deead1e3", "sighting_of_ref": "indicator--a9639cd7-f51f-46be-93f6-5c53a671de8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0134eb-a606-47e7-a772-65cb4bb5db70", "sighting_of_ref": "indicator--3f4fd2fa-be79-48c1-923b-198608c99c5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfce574-9821-4676-aeb1-b204d90e82f8", "sighting_of_ref": "indicator--c249f991-c5f9-4162-a4d7-a01807db437f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b60d1-71de-4405-8050-7844e8edc876", "sighting_of_ref": "indicator--c249f991-c5f9-4162-a4d7-a01807db437f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5d1b39-37cc-4399-8465-432c5c5b4bc9", "sighting_of_ref": "indicator--c249f991-c5f9-4162-a4d7-a01807db437f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3286c954-7b09-434a-bf71-c434b99673c0", "sighting_of_ref": "indicator--db57492f-7078-42b9-acc1-697c6211391f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88258a06-61b4-4ea8-9666-cf9b3dfdd39d", "sighting_of_ref": "indicator--7c29f427-5967-4f51-8360-bc780a0f2ef2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8a2298-ff12-413c-b453-387bc755c127", "sighting_of_ref": "indicator--24d610f9-bb7a-4a7c-8795-64e54b5b689e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb74500-da79-40c5-8619-a3159bbd151b", "sighting_of_ref": "indicator--79eb914a-5fc2-4b91-858d-cf4412f4381a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c41f94d-72b3-47f5-b423-6ccdcd84a328", "sighting_of_ref": "indicator--440944d8-8882-4f44-b98f-6e2a805b05de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6de307c-9a7b-45aa-a8a5-d6f5c792273f", "sighting_of_ref": "indicator--440944d8-8882-4f44-b98f-6e2a805b05de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4626cb10-fd25-4ff2-bb51-2efa703da09f", "sighting_of_ref": "indicator--440944d8-8882-4f44-b98f-6e2a805b05de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f294e7-760f-4b6b-a674-850b0bc39b7d", "sighting_of_ref": "indicator--1930f208-828f-45b4-aafc-1650455bcd60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c72125-f60a-4ef1-a347-b9915df9556b", "sighting_of_ref": "indicator--1930f208-828f-45b4-aafc-1650455bcd60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe84ec2-2848-49e3-b381-86807d026606", "sighting_of_ref": "indicator--1930f208-828f-45b4-aafc-1650455bcd60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebf562e-a2e1-4e38-a592-68749434a913", "sighting_of_ref": "indicator--8607a09d-122a-4bbb-9922-5fc7195cc00c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ee107-8230-4a40-b64e-3eb7939c77df", "sighting_of_ref": "indicator--8607a09d-122a-4bbb-9922-5fc7195cc00c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f115970c-33b5-4fd8-a7e7-e508b6d28d3a", "sighting_of_ref": "indicator--8607a09d-122a-4bbb-9922-5fc7195cc00c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38635dd-0360-417f-a3ed-6b41a3ceb204", "sighting_of_ref": "indicator--e6faa861-5480-4074-ae6b-dafea7caa695", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e88eef-352a-4a90-8c10-a40147bfbb6c", "sighting_of_ref": "indicator--e6faa861-5480-4074-ae6b-dafea7caa695", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80591aa6-245d-4774-9be1-be79e569eebf", "sighting_of_ref": "indicator--c0872feb-2a74-422d-8786-3ac32ca4296d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f6dd5e-8f5c-4211-8907-ddf946e08452", "sighting_of_ref": "indicator--c0872feb-2a74-422d-8786-3ac32ca4296d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e9b4ce-4b1f-492c-9e0a-234d4f27065b", "sighting_of_ref": "indicator--08c1b19d-f66e-4615-852f-a050d8a0a3fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eda82b-ead3-4920-a085-65264d9fd642", "sighting_of_ref": "indicator--08c1b19d-f66e-4615-852f-a050d8a0a3fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aecb2a-6b8f-40c9-b429-3dc7b4ca7fd1", "sighting_of_ref": "indicator--008adca4-fd04-4bea-8a68-35244c0bbf48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d1531d-ea02-458a-859a-e105918ceee2", "sighting_of_ref": "indicator--3f43166e-9581-4367-826b-3915d8446d07", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57c8971-7c83-4892-a954-a6e56e0d18b5", "sighting_of_ref": "indicator--3f43166e-9581-4367-826b-3915d8446d07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88840598-7bc3-410f-94bd-056a00df4d9e", "sighting_of_ref": "indicator--3f43166e-9581-4367-826b-3915d8446d07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136fc3fc-8236-4f2b-9cff-b05786a2534d", "sighting_of_ref": "indicator--992c4331-adf6-432a-b6a0-b5520ad66c4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279aa3b6-4acc-426d-a06a-68acea7d3a79", "sighting_of_ref": "indicator--c3fe58cf-d815-4586-9202-f5436b916822", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa310e5c-4339-4cd3-a6d9-01518764b4d8", "sighting_of_ref": "indicator--c3fe58cf-d815-4586-9202-f5436b916822", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae1b4ef-9c7b-4193-a56f-7b297bfd452f", "sighting_of_ref": "indicator--c3fe58cf-d815-4586-9202-f5436b916822", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4be1d0-2d8a-46a0-b5ee-cdb367923e11", "sighting_of_ref": "indicator--a3e3a1b3-166e-44c6-bf06-b439a48de7ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2736f5-5445-4e1e-9f22-de11a37e7b66", "sighting_of_ref": "indicator--6a31df19-7dc7-454b-a3ed-0d096c284fc2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417adec6-1c62-4425-bacc-e768fda6bd61", "sighting_of_ref": "indicator--378341c0-4d8e-4b0b-9ccb-c01592fb5e1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8c930a-557d-471e-8fbe-d84b5d240998", "sighting_of_ref": "indicator--c43d9288-dc80-47a0-a16f-f17b349162d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f5e54e-5c75-4c0e-a061-97920c1666be", "sighting_of_ref": "indicator--91c97de1-f359-4dde-a5a0-32e3b34689d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0755bd17-f756-4e2b-89d2-b839352d640a", "sighting_of_ref": "indicator--f0f107ad-c631-476a-820b-c5194b21b666", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74493de-4a99-4151-9b39-93c2538f9039", "sighting_of_ref": "indicator--28f96619-cbef-4e2b-b712-8886eb93f112", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd03eec-6cce-4bc9-8657-075ae8c76825", "sighting_of_ref": "indicator--28f96619-cbef-4e2b-b712-8886eb93f112", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937f0be8-7945-404b-b201-08fb15e8e5b9", "sighting_of_ref": "indicator--28f96619-cbef-4e2b-b712-8886eb93f112", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6a1b9f-fc78-4be1-b5a9-db5986feaa6e", "sighting_of_ref": "indicator--e0b9e81f-e2c3-463b-a5aa-c98fb39832a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c4a646-e572-4473-bed3-7cd7a86e2233", "sighting_of_ref": "indicator--cd876911-c259-41dd-b504-36fabb397bd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eacc71-57ec-4a4a-98e0-36a65683ec94", "sighting_of_ref": "indicator--be31bc11-bbe2-4d74-b796-5b152caf38d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7610cc03-be16-48ec-a7cb-39acbae5c671", "sighting_of_ref": "indicator--65bc8f23-6cb5-4915-ac72-70a19da71ff7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b133198-6a46-4403-8e2c-2903bedb4beb", "sighting_of_ref": "indicator--65bc8f23-6cb5-4915-ac72-70a19da71ff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2548b2f-6434-4fe5-b840-bb555100cb77", "sighting_of_ref": "indicator--65bc8f23-6cb5-4915-ac72-70a19da71ff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a84eb31-9046-4e51-a7c2-8ee5265e45a5", "sighting_of_ref": "indicator--420d2854-1294-474f-8dd7-75ebb73e13c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5e2dda-4c7a-4f5f-8d1a-e4c8ea258e58", "sighting_of_ref": "indicator--86ab68d3-3bc3-4fa1-9a6c-c629628ca97c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce1e7fb-affc-471e-b341-64acd07a1538", "sighting_of_ref": "indicator--5c1948de-1e67-4dc4-b758-4ae6133f1147", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9132e11c-1a5a-4945-b7f8-edadf403bc57", "sighting_of_ref": "indicator--22ff6707-69cd-45b6-af5b-3f95a054374c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3979bc7b-3dea-4c68-ac59-a9dc4d2aeac2", "sighting_of_ref": "indicator--22ff6707-69cd-45b6-af5b-3f95a054374c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f68355c-f96a-4660-8c62-756fad9c79a2", "sighting_of_ref": "indicator--11a9abc1-bf92-4ab7-9186-d246f62cfc5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589e7d6c-3b6f-4d80-8935-a9d921710ddb", "sighting_of_ref": "indicator--47128c3b-8b67-46f4-8eaa-fa4686e86fb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d394c7-ab92-4713-9fae-88abc2941031", "sighting_of_ref": "indicator--71a43446-0293-443d-aecb-e07b2f9f51a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893b4d96-de1f-4bdf-97dc-3714f958af64", "sighting_of_ref": "indicator--574b222b-e9e0-4bc4-a488-0678ac1154cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c18225c-6e28-497c-997d-e159fa14abd7", "sighting_of_ref": "indicator--d218c0fa-ed69-4f38-83b5-fec8eb5e042d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f229d-67a6-48d0-adb8-cc4a3786af20", "sighting_of_ref": "indicator--13a13de2-11e2-440c-9d2f-be2646741764", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a762b4d1-4d8b-4403-b943-46134e06a99c", "sighting_of_ref": "indicator--8c8dd549-f1da-40c9-95b3-2b94fade74e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421e5378-4ff1-424c-a3f8-026ea8af18c7", "sighting_of_ref": "indicator--e780f476-e663-4a6a-ae5d-8e8102545c93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa83ea3-1e13-4389-9566-f5ffae7747a0", "sighting_of_ref": "indicator--7142c960-d402-4969-be38-a39d3bbb7d94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6fc570-2fe9-4aac-8aac-720a9dbbd8f5", "sighting_of_ref": "indicator--7142c960-d402-4969-be38-a39d3bbb7d94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d52d9f-3a4a-4c02-93e5-95bc3b25b0c4", "sighting_of_ref": "indicator--ad0b92e9-8904-496d-8d62-99856a4019ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eb8986-8b02-4b31-82ae-9ef0d16eefdf", "sighting_of_ref": "indicator--192cb0dc-7a43-49bd-bd41-d53bc48e08ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f7f3a7-589e-4f9b-889a-a853622825ac", "sighting_of_ref": "indicator--192cb0dc-7a43-49bd-bd41-d53bc48e08ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bea214-1e87-4c65-9638-884c16996c92", "sighting_of_ref": "indicator--37f74623-1969-4fae-ade2-891043d6ce9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3672f2dd-6f8e-45ae-a804-465b690fb019", "sighting_of_ref": "indicator--5204e13e-d698-4269-88c0-d0e7d09fbd30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8112458b-8156-4c8b-9d01-69ed572749de", "sighting_of_ref": "indicator--8d24530d-c736-4e06-84f1-779636a0bbb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bff2789-31bc-4f33-a8bd-67499fb18a38", "sighting_of_ref": "indicator--51398057-a7c7-4291-af53-94c86c482c0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511c01e6-c539-4b10-a6da-8a9a8ac6c486", "sighting_of_ref": "indicator--94cf6a9b-2556-44fd-9599-e11b14e4f784", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407a1ef5-2606-41da-bfb2-0b029ffdfc30", "sighting_of_ref": "indicator--aad94a3b-8785-48c8-a094-40cfb2538340", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ded5d-d8ab-4c66-9baa-98d6e0c401fc", "sighting_of_ref": "indicator--20a7aea2-d650-45ff-9be3-c5a04b3e53b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeb1e1a-cac1-47c5-a23f-bc46a5a17b5a", "sighting_of_ref": "indicator--ed382afd-e893-4dea-a583-06e3b26b6333", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30492d9e-ed1b-42a9-a2e7-2aafb7d8c3bc", "sighting_of_ref": "indicator--fe56668b-0c7f-4264-ac2a-ff196c6e271c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656ee844-f7de-4546-9559-64ed06c3d440", "sighting_of_ref": "indicator--fc69e97b-8528-4815-93ff-7c4688fadc6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902830fd-f04f-4821-89a9-a7f1b6d2fa6a", "sighting_of_ref": "indicator--d323079c-ef62-42aa-8c84-5b36146c082b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a578e2e-e4ce-4daf-b0a5-ebb5d757c017", "sighting_of_ref": "indicator--8cadee18-8ffb-4dfe-8db7-0cd641923157", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbfafd1-6059-40ba-a9ce-f3579c59a4b4", "sighting_of_ref": "indicator--8cadee18-8ffb-4dfe-8db7-0cd641923157", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391544d5-c1a0-4333-bcea-3c1f9392158d", "sighting_of_ref": "indicator--f9703424-94ca-4dea-8750-69f273592ef4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da5c510-2bac-441e-8572-f97e0af49eb0", "sighting_of_ref": "indicator--a987260c-9909-4640-ac40-049ba9f96330", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3762d-717d-4f99-9b91-8f62f63c6dca", "sighting_of_ref": "indicator--ec07432f-39bb-40bf-9d5f-90096a5bea0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0972c7bd-7295-465d-bd40-e9e1fb62abab", "sighting_of_ref": "indicator--910a0ef2-df54-4dbc-a49b-c2019c297a55", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88438ab6-8b9b-48fd-b679-3acf7d7b853a", "sighting_of_ref": "indicator--8cf43f00-d529-439c-8f33-aa13427b21df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b043803-4fce-401e-883d-d79655b216e9", "sighting_of_ref": "indicator--f41d4773-abda-44ed-8792-e0a09afde264", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6710742f-f061-4714-820c-d1a15d9acaaf", "sighting_of_ref": "indicator--e8657e8a-b9bc-49b5-88e5-8731015bf273", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247b7d6-edbd-4dd5-9c93-88a6ff4142e2", "sighting_of_ref": "indicator--fbdcb9a6-32cf-45fb-ad8c-c5dce6a44b9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ce18be-1e31-491a-97a4-bed4423104c2", "sighting_of_ref": "indicator--fbdcb9a6-32cf-45fb-ad8c-c5dce6a44b9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4596196e-910d-4e8e-be23-9d62a25ecb19", "sighting_of_ref": "indicator--fd8e01ea-23e9-4b2f-826b-180e02028d62", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca6dd01-7321-4a82-b3b8-9038c8cc9fd8", "sighting_of_ref": "indicator--8cef6fe5-db10-4318-8542-8803506273e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de25247f-65e3-4743-b2d4-9e32fd3fb80e", "sighting_of_ref": "indicator--8cef6fe5-db10-4318-8542-8803506273e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc264c0-b85d-44b4-80fa-ddfe7880f6ea", "sighting_of_ref": "indicator--75eb9c20-8094-43df-a622-e200971f33fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26742988-0f47-455d-ab80-5200623fbae3", "sighting_of_ref": "indicator--75eb9c20-8094-43df-a622-e200971f33fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4e2e83-a76d-49a1-9bcc-e73f6ad30155", "sighting_of_ref": "indicator--79b64c38-d9cc-44b0-bad5-7847222ce3ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30095bbd-49c7-469b-ab51-c8204e42ca22", "sighting_of_ref": "indicator--0bedad92-58d8-462b-8682-bbd2bd5f30a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f817e-8c6b-431a-bc36-87dfbde3c002", "sighting_of_ref": "indicator--2b72a2aa-be02-457b-8001-cc07774091af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f87a1c-da6f-42e2-983e-7a081312e302", "sighting_of_ref": "indicator--2b72a2aa-be02-457b-8001-cc07774091af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199495c-acf6-4613-8f05-97058ea707c2", "sighting_of_ref": "indicator--2b72a2aa-be02-457b-8001-cc07774091af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62555cf-a45b-4dde-820f-1f8bfbe2051c", "sighting_of_ref": "indicator--943962cd-9500-45e7-aef8-f01edf09b740", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae49f85d-4327-44f6-ad79-49021a8423a3", "sighting_of_ref": "indicator--943962cd-9500-45e7-aef8-f01edf09b740", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32356c8-b17c-48cc-9d08-aca38bcccd80", "sighting_of_ref": "indicator--943962cd-9500-45e7-aef8-f01edf09b740", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5afc59c-5095-4f98-abfd-482d3d91282c", "sighting_of_ref": "indicator--73f1d2f6-f389-4b7c-b741-f723c7729d47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812e87b0-452b-41df-955c-f302496b0c66", "sighting_of_ref": "indicator--423678db-88a0-4a9b-ac48-b085419e1699", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd488f6-4a4e-48c7-99e2-2ac8dec88792", "sighting_of_ref": "indicator--1d75261c-67b4-4f63-9694-e4cb4bad0289", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd6c2e6-05d6-4f32-9450-2570f8d6f4b6", "sighting_of_ref": "indicator--dabc48c6-58dc-4786-9a21-d5117aaa832c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5cd479-7df0-4c2a-ba3f-f7454bef031b", "sighting_of_ref": "indicator--51f9213e-8b31-46cd-902e-d14179536e11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2601001a-7161-42e8-b78a-598f315110ba", "sighting_of_ref": "indicator--6ebf253f-3adb-4807-a47d-ea9a5ebe3144", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da3ff5e-87b7-4022-95d3-fe1529856eea", "sighting_of_ref": "indicator--3ab3a280-aeb5-48b7-a05b-bd810d58bd65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbd063a-fd6e-408f-a7e3-b2276c6aa569", "sighting_of_ref": "indicator--ae2fa8ec-b43d-4501-9d5a-a8cd73064821", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48fd83c-f48f-4815-97e3-665b778771f6", "sighting_of_ref": "indicator--ae2fa8ec-b43d-4501-9d5a-a8cd73064821", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eff2e0-1774-4683-a824-f3f51ba8b939", "sighting_of_ref": "indicator--ae2fa8ec-b43d-4501-9d5a-a8cd73064821", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa174a96-0140-4c17-857e-c903c4d65476", "sighting_of_ref": "indicator--b0530fb4-7aad-4b70-bcc4-cc695625c5e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196aeace-a34b-4c85-902d-caff81600976", "sighting_of_ref": "indicator--9b1ff537-2f16-4f97-9d98-a55169b5300a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42baf5a8-98ee-4453-a7b3-e7eace3d3d00", "sighting_of_ref": "indicator--8d28d0ad-54b4-4f97-a9be-04b4b392b98e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b72893-2376-4eb7-9db1-fe0a88193680", "sighting_of_ref": "indicator--c4b1ebf4-a3ff-45d7-b64f-1474699a8b8e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22559c2-ffe4-421f-8db8-f3d66f225805", "sighting_of_ref": "indicator--c4b1ebf4-a3ff-45d7-b64f-1474699a8b8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b32a34-4b7c-4b41-95d5-7ecf6c628b05", "sighting_of_ref": "indicator--d8273381-ccdd-4e14-8a2e-8591e822a090", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c583e-fe3a-4a94-88ee-bb0131cec18c", "sighting_of_ref": "indicator--d8273381-ccdd-4e14-8a2e-8591e822a090", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c3e17c-ac18-4fe0-8d40-b0ec9c97fdfa", "sighting_of_ref": "indicator--35ba475f-5516-4e9e-ad8b-e557a2703d24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36438214-6bcc-4125-a808-5285213ad300", "sighting_of_ref": "indicator--2f0466bf-1b02-4b26-8baa-80d07b144809", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ee5fcb-9bfa-4f4c-9600-8c6d8c879dc5", "sighting_of_ref": "indicator--2f0466bf-1b02-4b26-8baa-80d07b144809", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4ebec6-4d91-4be6-906a-a462a7dba891", "sighting_of_ref": "indicator--d5b0cccf-16f2-4864-a360-98daf7667230", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cb36d6-b222-4f34-907f-0ea507bfeb61", "sighting_of_ref": "indicator--eddc0e32-3939-4eb5-82c3-3a67e989da77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d399697-4a37-414b-a35e-fab2074c7627", "sighting_of_ref": "indicator--eddc0e32-3939-4eb5-82c3-3a67e989da77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bf759f-0d95-44e6-8db9-6fc48e2d433b", "sighting_of_ref": "indicator--0bf6b517-b9cb-443c-9712-cf4f85ee6df6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806435fa-27a9-44af-a83a-d0cc25675672", "sighting_of_ref": "indicator--13b9cd23-a57e-4218-b3a8-6790e05a10ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bac217-6e09-41aa-bff9-f88058a4e5a8", "sighting_of_ref": "indicator--13b9cd23-a57e-4218-b3a8-6790e05a10ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a33e828-3277-459f-8e1b-2b89094b8516", "sighting_of_ref": "indicator--8e1a34b1-8b2e-40db-af5f-17910dac8ba5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0729c042-c4c0-4990-9b9c-a188961535ba", "sighting_of_ref": "indicator--85dce19e-4f95-472e-a9b6-7204a31b33ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1531a90b-523e-4daa-b411-d4ff80ed244b", "sighting_of_ref": "indicator--a87d52de-90a7-4054-996b-af54b8d6b445", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dd9469-50b5-4c69-a52d-a56070854f10", "sighting_of_ref": "indicator--a87d52de-90a7-4054-996b-af54b8d6b445", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5678c2ab-0932-4252-bd7c-6f90a7c20f12", "sighting_of_ref": "indicator--a87d52de-90a7-4054-996b-af54b8d6b445", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4418ea6-a824-4ec3-b1d6-1b87a9fca22f", "sighting_of_ref": "indicator--b3f3e4e8-82f9-48bd-94ea-f57f3aa76622", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3de6f-5eb1-479e-8f39-5130c541f0ce", "sighting_of_ref": "indicator--c77a997e-13bb-4afe-983a-a53d484f1127", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42309d6-aa7c-4390-a5e5-ead445d735e1", "sighting_of_ref": "indicator--c196e656-edb6-481f-89eb-7e41562a68e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a8fcb6-3091-40a4-9502-1ae321c1af99", "sighting_of_ref": "indicator--c196e656-edb6-481f-89eb-7e41562a68e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f5ad11-4db8-4e4b-a987-f02bee188a1a", "sighting_of_ref": "indicator--f8301d9f-8b52-4d3c-be4e-59dddaa7eb9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666a2428-c1af-4ac8-92a9-602e1bc30749", "sighting_of_ref": "indicator--9d3a7c49-63cc-49a9-8619-c12b517ef9cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c243f132-f4ac-4e4b-a985-dd07139eeeae", "sighting_of_ref": "indicator--ccfe54c1-b7bb-483c-a25c-ec1d7e280b78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9b4b0b-75d8-4e03-bb82-987e4e8d1ace", "sighting_of_ref": "indicator--7e7a08db-d729-44fe-bd2a-a9549bbfede1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157c8dac-0906-4b4a-8dc9-5282082d7bd6", "sighting_of_ref": "indicator--b0c87cb2-bb26-42c8-a447-92cbb56fc10e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2376c6f-f91f-447a-bd37-6e137c8c6249", "sighting_of_ref": "indicator--37965651-fed1-4a74-8122-a31709917636", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae9107-35c9-4748-a23e-3f2f022255ac", "sighting_of_ref": "indicator--98eb6da5-312b-4f27-ba88-fe8f19223744", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd5062f-f557-4947-ac66-81a9aefef2d9", "sighting_of_ref": "indicator--755d4113-d7df-4617-a496-4373f6bbcb09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06479d53-9e7c-4342-9f00-fd3f373636a5", "sighting_of_ref": "indicator--a495f193-10b6-472f-83ff-9d17906c06fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1277e42f-9b77-4b13-8c46-28ecf9f10985", "sighting_of_ref": "indicator--4fe1b591-7c2c-4da5-8fe6-246289732074", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d0fd65-93be-4175-b0dc-9417f777673d", "sighting_of_ref": "indicator--d1cc8d1c-2763-4c9a-92bb-9fcdfefba943", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0729bd0-3a69-480f-b052-d35b2d9a9ee9", "sighting_of_ref": "indicator--eb7e91a4-f9e1-47aa-a909-c92ab1a81913", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d56129-cb80-40e7-9acb-1a5e0644d30e", "sighting_of_ref": "indicator--e9a1fe01-9eb7-4a00-b304-231bc1301190", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed450dcc-9600-41ec-b8d3-28d7eed27dba", "sighting_of_ref": "indicator--d5d2f33d-e2f8-4cc5-b6cb-fa620b5812ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2c1704-b565-4dbb-a53a-7e9e5d448bd4", "sighting_of_ref": "indicator--d5d2f33d-e2f8-4cc5-b6cb-fa620b5812ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edee864-3d46-4369-bf1a-ce953c353e11", "sighting_of_ref": "indicator--57c29f72-483a-45ed-8e81-932282460f81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee78b4b3-3e8e-482d-8e8c-d8b07c4cbde0", "sighting_of_ref": "indicator--1a053b83-0133-40ad-beb0-c2f5f2079ecf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117de3dc-d6c8-49f4-b540-76ab5976a8b6", "sighting_of_ref": "indicator--43e9e202-4db7-4d48-b8e3-23c3016906e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd683be7-9a8b-47cb-b318-e8935a2f187e", "sighting_of_ref": "indicator--f9a2ac22-028d-47cc-b34c-09c38bd6b46a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b328db3-246c-432d-815e-03c1589d8a43", "sighting_of_ref": "indicator--27343d3a-3f44-40e5-9d45-ddd7958b9fd0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84eb74ac-4089-47ec-8f5b-10e3ee55f396", "sighting_of_ref": "indicator--4cf67288-32e1-48ae-b32b-fd7be1a7fa43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e8da0-aaf4-46fe-8213-8091de2d0821", "sighting_of_ref": "indicator--a5312004-decc-4f33-8e9c-7d86b0d02975", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5841739-fba9-4bc7-a8e2-13f8021760be", "sighting_of_ref": "indicator--a5312004-decc-4f33-8e9c-7d86b0d02975", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a00c93-5805-47ba-8477-2bbe4b5001f0", "sighting_of_ref": "indicator--7febcfad-acc8-4389-83bd-dd1db004ed26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ea283b-a584-49e6-a570-eb4facea42f1", "sighting_of_ref": "indicator--093ae24b-4183-4f93-8eda-5e5e51889ec5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff11cc5-fe02-4591-972d-77b36baf75da", "sighting_of_ref": "indicator--9f7959bc-6f4e-4590-a2ff-073f74a0251d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2030535-f73b-40b7-89d2-1b1da0a18cc2", "sighting_of_ref": "indicator--6f337bd8-61eb-443a-bf7d-a804a8b8380c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199b7097-3811-478c-ab6a-422a66fb87f4", "sighting_of_ref": "indicator--51b5cf77-cd09-432e-9ab5-9f42a683f0b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d675e98-53cd-4f60-913f-da1b1337a1e1", "sighting_of_ref": "indicator--40e67467-51e5-402d-a775-f1b6264f57c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc225d2e-18c4-4421-be0d-b59e653e3280", "sighting_of_ref": "indicator--1642e9a6-e2f8-4ac7-bbaa-51e2a096a429", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dee1797-61a8-4e0a-a874-b3ed4e5ebba2", "sighting_of_ref": "indicator--7ec19ec1-4408-468f-89a2-6054210f71da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173b986a-a449-4360-9585-44f8ace8f9c7", "sighting_of_ref": "indicator--09e913aa-210d-47c1-a8d5-e789c6f1fd8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e72df8-1e9d-4b78-8be6-93b982cf646c", "sighting_of_ref": "indicator--e561b0ab-8462-4ffa-9e2e-cc26af67290e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d78e41-99ba-42b3-9a56-1af5c866ba14", "sighting_of_ref": "indicator--616adbff-4f6e-4cfa-80e4-441776997b4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09f0e15-ba6d-4366-8e69-889b13525cec", "sighting_of_ref": "indicator--398fa14d-e6ff-4762-9d89-68ef815507b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce7c8de-8061-495b-a23a-c9f3922b0b8d", "sighting_of_ref": "indicator--6c225327-bb77-4d9c-846b-2aa7c0aa9259", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f22fe8-31c3-41a9-a52a-73b3bf9a7187", "sighting_of_ref": "indicator--2606d869-c3c6-4087-834f-a34c712ed856", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7151d854-6ed6-4e76-b066-7266afaf13a8", "sighting_of_ref": "indicator--df1ba4e8-917e-432e-93f8-69365413237e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b752eec1-d724-4bcb-8ea0-9c67b6939633", "sighting_of_ref": "indicator--ba8030f6-f5ba-4f4e-8d8d-ed19dc68b160", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13201c48-1cd5-461f-83ad-c1e1db7c01a6", "sighting_of_ref": "indicator--13de2114-b282-49fa-8f12-91d272b116c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500228c5-98db-40c6-b0cb-c2a281fce347", "sighting_of_ref": "indicator--13de2114-b282-49fa-8f12-91d272b116c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980a37ae-1986-4fac-8b9f-98277e939006", "sighting_of_ref": "indicator--11fa097a-310f-4c03-9aa0-960bf75ef2d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01bb722-12bb-4e8a-952a-b240a4be8ccc", "sighting_of_ref": "indicator--0e46b9c4-d7c1-4567-bdf6-63322ec41062", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9f2162-3996-4795-9168-c9b88cb8eff8", "sighting_of_ref": "indicator--90aa292c-ac98-4c7d-b209-3932a767b7ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c426786-6013-4963-80f5-eb3557393e32", "sighting_of_ref": "indicator--086fdb86-2323-449f-bc2a-9e1b2d52779d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4e101e-803e-4779-987c-a1ed2c695e04", "sighting_of_ref": "indicator--9f593f0e-64b3-4568-a3c1-7642e40eb19d", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06327e4d-189a-41b7-aab6-9fded7092833", "sighting_of_ref": "indicator--346b70e2-172d-4016-8e08-eaf5aeb3e76b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3284dd28-e225-4585-a7de-d49a0e1f8f14", "sighting_of_ref": "indicator--346b70e2-172d-4016-8e08-eaf5aeb3e76b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abd928b-4e5c-4bf8-8290-40c90bca489f", "sighting_of_ref": "indicator--346b70e2-172d-4016-8e08-eaf5aeb3e76b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7920df4-508c-4a6e-ac59-56e5e2a91810", "sighting_of_ref": "indicator--1e65a495-6e94-4825-a266-db51b613db48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfadb21-c32b-4ea2-92aa-12a0c2f8d962", "sighting_of_ref": "indicator--1e65a495-6e94-4825-a266-db51b613db48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84421e0-6b89-4aeb-a875-ab91e086a248", "sighting_of_ref": "indicator--1e65a495-6e94-4825-a266-db51b613db48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75584224-a4fe-4cf8-bb34-e645348a0266", "sighting_of_ref": "indicator--bbe3d6ae-84d6-413d-b176-198e4890142f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425d992c-d725-483b-91eb-f8784a736a75", "sighting_of_ref": "indicator--bbe3d6ae-84d6-413d-b176-198e4890142f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91745c66-f893-49f6-8898-de89111cf402", "sighting_of_ref": "indicator--bbe3d6ae-84d6-413d-b176-198e4890142f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04657c67-d113-429e-b2fb-46f6bf2c07ac", "sighting_of_ref": "indicator--57d99eac-40e6-4381-b182-0545fc1a977d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2badb0-256c-4fc4-9ed4-905530f83b9a", "sighting_of_ref": "indicator--57d99eac-40e6-4381-b182-0545fc1a977d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965c518a-32e6-4e7d-996f-ddf08203021a", "sighting_of_ref": "indicator--57d99eac-40e6-4381-b182-0545fc1a977d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9397a21-33e9-456c-97ce-2ddc69906fd3", "sighting_of_ref": "indicator--c4bc1b5f-7850-44e1-83cb-3700070a8afc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ebcdae-1be9-4197-93a2-b5aa4ae4b6f8", "sighting_of_ref": "indicator--c4bc1b5f-7850-44e1-83cb-3700070a8afc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b3f667-e2fc-40d0-aec9-5249c93c0377", "sighting_of_ref": "indicator--c4bc1b5f-7850-44e1-83cb-3700070a8afc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef37d22a-67b2-453d-90f6-64e78f502d05", "sighting_of_ref": "indicator--7424b7db-7a69-4727-b9f1-5b308b8136b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7834855d-3586-4933-abe7-4dae6f7b99bd", "sighting_of_ref": "indicator--7424b7db-7a69-4727-b9f1-5b308b8136b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9719ff2-8125-4b3b-bd9a-8e7cc5187894", "sighting_of_ref": "indicator--7424b7db-7a69-4727-b9f1-5b308b8136b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8f734b-6d10-45cd-b93f-dbb277b7bbda", "sighting_of_ref": "indicator--7b5ab434-53b2-417a-9187-10b838bc1ee3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48d574c-eac8-426c-9515-37149523c01c", "sighting_of_ref": "indicator--7b5ab434-53b2-417a-9187-10b838bc1ee3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca948790-a021-4708-9d10-7f8ad314acc1", "sighting_of_ref": "indicator--7b5ab434-53b2-417a-9187-10b838bc1ee3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feeff22e-62ed-43e3-aca3-edec0a0792a5", "sighting_of_ref": "indicator--51aac6b9-8d56-4c9a-a6ed-ddb4d58b4e72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1a58da-f797-47fd-bddf-0a57018681ba", "sighting_of_ref": "indicator--51aac6b9-8d56-4c9a-a6ed-ddb4d58b4e72", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012229b3-1abb-4c2e-8248-dc4c4fbf3424", "sighting_of_ref": "indicator--51aac6b9-8d56-4c9a-a6ed-ddb4d58b4e72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f285fbf-a28a-4965-926e-964616a6d288", "sighting_of_ref": "indicator--f7113caa-be94-452a-b3e0-a911afe5a989", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2388cb64-2c73-4836-981b-c729df25691c", "sighting_of_ref": "indicator--f7113caa-be94-452a-b3e0-a911afe5a989", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abd60b8-a2d8-4156-a60d-5d796543f5b1", "sighting_of_ref": "indicator--f7113caa-be94-452a-b3e0-a911afe5a989", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a811ff19-cf41-439a-9755-7a8bb698b416", "sighting_of_ref": "indicator--75fbf809-ff93-417d-8764-88fe82a9aef3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc3635e-5628-46f9-8865-84cc424048a4", "sighting_of_ref": "indicator--75fbf809-ff93-417d-8764-88fe82a9aef3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608dfecf-7841-4537-90c6-ed53c7194d5e", "sighting_of_ref": "indicator--75fbf809-ff93-417d-8764-88fe82a9aef3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a33126-7042-4a4c-9fd9-4e7fcac53bca", "sighting_of_ref": "indicator--ba89e27a-3c97-4d38-adce-956a1279eb79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3e7b1f-16fc-4c19-93f4-603b44699bfa", "sighting_of_ref": "indicator--ba89e27a-3c97-4d38-adce-956a1279eb79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5633b1-177f-4c28-8365-619da957ab46", "sighting_of_ref": "indicator--ba89e27a-3c97-4d38-adce-956a1279eb79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e405791c-9efa-4b9c-8cb2-a1bfc09930d2", "sighting_of_ref": "indicator--274ca528-debe-4d9a-95ea-1b84d3c61c81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce16e7a-cfa2-428b-9c94-339b8742d6bd", "sighting_of_ref": "indicator--274ca528-debe-4d9a-95ea-1b84d3c61c81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6644adb4-6fcc-44bc-a408-f07422a482a4", "sighting_of_ref": "indicator--274ca528-debe-4d9a-95ea-1b84d3c61c81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e530a217-09c5-4fc6-8233-c51c73b331c4", "sighting_of_ref": "indicator--3653d462-143f-45fc-b8df-673e0e39268d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefc922e-055d-4d31-b5a8-3ac8461bb681", "sighting_of_ref": "indicator--3653d462-143f-45fc-b8df-673e0e39268d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3c6eb9-7842-4983-9e09-6025caf86897", "sighting_of_ref": "indicator--3653d462-143f-45fc-b8df-673e0e39268d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e679d7c-8de3-483d-b319-0433a0a580f2", "sighting_of_ref": "indicator--837e939b-9544-41e3-8676-357cb9f902ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476c4004-9632-4907-805e-79bcbf5a2f1f", "sighting_of_ref": "indicator--837e939b-9544-41e3-8676-357cb9f902ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e508e-a7f6-4e59-9cd9-d91eac502c21", "sighting_of_ref": "indicator--837e939b-9544-41e3-8676-357cb9f902ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a2a0b8-8721-431a-bc3e-d89da6770083", "sighting_of_ref": "indicator--4b62bced-f973-4a71-88d8-2d71743ce2f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21a46a7-3b85-4db4-a2ee-3a029c7ef1f2", "sighting_of_ref": "indicator--4b62bced-f973-4a71-88d8-2d71743ce2f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2793a602-979c-4c3d-9ddb-78f9736d667f", "sighting_of_ref": "indicator--4b62bced-f973-4a71-88d8-2d71743ce2f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206dd823-cb36-4b08-858a-b319e975ec35", "sighting_of_ref": "indicator--9705baef-5c85-4bb6-a4fd-1c02242dbb35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e98c22e-9a74-4e2b-b680-66a34d49122e", "sighting_of_ref": "indicator--9705baef-5c85-4bb6-a4fd-1c02242dbb35", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d13ff4e-c790-4ce1-81b8-e01db0570104", "sighting_of_ref": "indicator--9705baef-5c85-4bb6-a4fd-1c02242dbb35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d355ce-e3a1-4b85-a7bb-e6828d8e5538", "sighting_of_ref": "indicator--0e7b29db-1161-4e96-bec6-53c99450050b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86fdf49-8ae9-4516-a009-34c3e7a1c525", "sighting_of_ref": "indicator--0e7b29db-1161-4e96-bec6-53c99450050b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1f1c84-7cc5-4ef6-8037-36bbd53f2d65", "sighting_of_ref": "indicator--0e7b29db-1161-4e96-bec6-53c99450050b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16317d78-3a3f-45ed-bfe6-87eff1bf5010", "sighting_of_ref": "indicator--928af24d-2481-42ba-a5f1-9d21b8f8bb6d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7536105f-b550-4269-9918-29464f8b7c71", "sighting_of_ref": "indicator--928af24d-2481-42ba-a5f1-9d21b8f8bb6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6082540-2722-4e1f-b7e2-3653e58fa4e4", "sighting_of_ref": "indicator--928af24d-2481-42ba-a5f1-9d21b8f8bb6d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f36cff-218f-4883-9096-c53180c4b7ce", "sighting_of_ref": "indicator--965bfa36-8931-435c-8df7-ff6f866c18f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602c8f93-0ef4-4779-a5f1-d68f16b916ab", "sighting_of_ref": "indicator--965bfa36-8931-435c-8df7-ff6f866c18f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b93da9-db1d-405b-a393-dd9b33eb023f", "sighting_of_ref": "indicator--965bfa36-8931-435c-8df7-ff6f866c18f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19cd66c-e34c-4b76-ac0a-64b1ead12f13", "sighting_of_ref": "indicator--e0cb19c0-6e82-4326-b514-eef7a8575d49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c37352-58a8-43b9-8942-faa47939a405", "sighting_of_ref": "indicator--e0cb19c0-6e82-4326-b514-eef7a8575d49", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927952bf-e30b-4b36-972d-f0a786e938f6", "sighting_of_ref": "indicator--e0cb19c0-6e82-4326-b514-eef7a8575d49", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9504f0e-4080-409a-8c6a-fb1068e841eb", "sighting_of_ref": "indicator--71be4eb9-d329-4b9d-89fb-a7b782c8603e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6ecbff-87f9-4876-ad33-248b3beacb4c", "sighting_of_ref": "indicator--3dc925bc-6124-4a66-8976-b4a375fbe19b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55af6874-f1f9-49f2-a7d8-58fcaab647e5", "sighting_of_ref": "indicator--f48d4a5c-9744-48e3-bdc4-14c12c91c86c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa10eee1-6e1f-4169-9800-d86fae2a120a", "sighting_of_ref": "indicator--410dfb97-d8d6-4d79-bab3-d4a16971a262", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0d2760-3339-4bf4-b8e1-6af8f3568fb0", "sighting_of_ref": "indicator--a437ab88-7f3a-4ae6-bae2-00899ef694e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e854d71-9154-40bf-8893-01fb560428eb", "sighting_of_ref": "indicator--ea2ada9d-9ba9-49e0-931e-1b14c9a3c306", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb4bcd5-8465-44b5-9a66-a53193c8c21a", "sighting_of_ref": "indicator--e6553a7b-d7e5-4098-9eca-dbf6fbe26294", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5407d1e3-3828-4118-b4b9-7c460843ce49", "sighting_of_ref": "indicator--38dbf2db-bdc6-4e46-8022-a425ac477ed4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22f2292-0d81-4335-a7c3-4d2bac57f646", "sighting_of_ref": "indicator--38dbf2db-bdc6-4e46-8022-a425ac477ed4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac0c2e-b915-485c-96c1-d2da15b1a4da", "sighting_of_ref": "indicator--bc6002ac-9759-435d-90e0-0646cc677f2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11201ca-3a38-487e-909c-604eaf45ba28", "sighting_of_ref": "indicator--fc129e91-5b42-4869-ab1c-1c2351d15624", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a0f9c2-146a-4b58-bf5b-c672ece22c23", "sighting_of_ref": "indicator--fc129e91-5b42-4869-ab1c-1c2351d15624", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598bcaf8-ddb5-4683-bb5e-cb9aa366f631", "sighting_of_ref": "indicator--b72960f4-e246-4e6d-88b4-937636bc0b9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bbcad5-2015-43f5-a5ff-24c1def2966c", "sighting_of_ref": "indicator--8bf58609-aeed-4dd6-a6e8-ce9851592c7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88446672-051b-4c65-a99c-c41e8ac83587", "sighting_of_ref": "indicator--df351004-d2cf-47c0-a693-fdfd3ef43d12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c42707-5051-479b-8e70-de4960f00759", "sighting_of_ref": "indicator--11c5e41f-d7f4-4e6b-90e2-e6cb300ddeaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ae9f2c-678a-4e17-9c9a-37f47d7a20a0", "sighting_of_ref": "indicator--4f910b82-05b5-43eb-bfd6-4dbab44ef151", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00038c22-5aee-43b6-90aa-813f3644666d", "sighting_of_ref": "indicator--e1823108-b5ba-4711-ac69-0e6a3f26edb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230eb017-5e56-4580-85fc-df4572c57759", "sighting_of_ref": "indicator--e1823108-b5ba-4711-ac69-0e6a3f26edb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eff36a-ee97-481f-b826-d2b9d14881d3", "sighting_of_ref": "indicator--e1823108-b5ba-4711-ac69-0e6a3f26edb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61dfb67-810f-48ec-a402-4df9e9c936f2", "sighting_of_ref": "indicator--7d8640f4-4cea-49b5-a908-1161add5d1f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bcd59f-2499-4ca5-b9f4-3e525f8ce146", "sighting_of_ref": "indicator--5d2606e9-495c-4686-b266-7be6fcd479ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b072f8ca-27c3-4e11-8929-351d7440dade", "sighting_of_ref": "indicator--5d2606e9-495c-4686-b266-7be6fcd479ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49986d7-03a5-489d-8598-e08753f538e5", "sighting_of_ref": "indicator--691f5a8b-3214-4f9e-9ede-1ac4effc37b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dd121e-3927-4ae3-9b87-272c82ba2d68", "sighting_of_ref": "indicator--ba054172-9e29-4346-8c89-cf0ff0a6b087", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3134ca69-4b1e-4593-8bdc-172375ac6b54", "sighting_of_ref": "indicator--ba054172-9e29-4346-8c89-cf0ff0a6b087", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5800139-fee5-4ffc-bdf6-7fc9ea3bacb1", "sighting_of_ref": "indicator--ba054172-9e29-4346-8c89-cf0ff0a6b087", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3a9670-ba0d-49b7-a2db-e3a07ddeda45", "sighting_of_ref": "indicator--cb524ede-d08a-4f41-8df9-e05e94e684fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9815de2a-09aa-4b9f-9b53-c697d193bb8c", "sighting_of_ref": "indicator--cb524ede-d08a-4f41-8df9-e05e94e684fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbb189c-6650-4f88-8c8c-00ab492a38ab", "sighting_of_ref": "indicator--88193c45-2c82-4e27-bf37-bb3bcc02a5ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa34d99-63f8-4750-8bda-fce9626d57f5", "sighting_of_ref": "indicator--88193c45-2c82-4e27-bf37-bb3bcc02a5ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57ecebf-5cab-487f-af4c-0cf516a82cc0", "sighting_of_ref": "indicator--88193c45-2c82-4e27-bf37-bb3bcc02a5ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b476ca-a564-47b6-bf02-eb66e6898568", "sighting_of_ref": "indicator--9f153ad9-876b-48fb-842c-600d61ffb109", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a63899-85e0-4bdb-a500-1815ef86ede3", "sighting_of_ref": "indicator--8b8155cb-76df-4154-8a79-40fc4dacda50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8420b804-befd-4e90-a9e8-88beb607d1e5", "sighting_of_ref": "indicator--99613861-47b0-42f9-ad3c-fa1eec06e307", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b23464d-144a-4094-b501-9fb2bdc3af33", "sighting_of_ref": "indicator--1f25878f-7b19-4632-a2f3-3ed182e00bb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86d677c-6c6c-46c3-8c5b-abe5bb8719e1", "sighting_of_ref": "indicator--1620d808-7455-4164-b1e4-5c6468b2b08f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9393c381-292c-4809-b732-4ea926d17b16", "sighting_of_ref": "indicator--b05e3d6c-44ce-42c6-8f16-a21756b49b41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab02cec-6fd1-4e57-9a57-f989764b75eb", "sighting_of_ref": "indicator--4aafd8ae-0e28-4f13-95c5-5f767eac3716", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3628aa-6f15-4168-9929-5ce069c0f3f8", "sighting_of_ref": "indicator--5dd4cc5c-2813-4754-ac56-1820cd027073", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b22a483-fadd-421d-aaa1-041d777b416f", "sighting_of_ref": "indicator--5dd4cc5c-2813-4754-ac56-1820cd027073", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf1639e-6c4a-4d04-b61f-f087ee728051", "sighting_of_ref": "indicator--c35bc4c2-6485-4896-8580-cb1518db6e94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253849b5-dbe7-4cef-8daf-513e0a57c542", "sighting_of_ref": "indicator--a7ad7ab1-bb2b-4096-b5f8-f3c063191826", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b7c989-9fe1-4ea8-a7ca-ba9489d4a66b", "sighting_of_ref": "indicator--10b5c53f-85a0-4609-acec-a66a80f5318a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968ee119-2432-42f6-a999-118ee2b9d1ad", "sighting_of_ref": "indicator--da154a94-9ceb-4df2-8350-8020098ace10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49c77bf-d6a5-4206-afdd-a008d4bafd19", "sighting_of_ref": "indicator--fd9357ee-281d-4b6f-ac41-23f89c25202a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474aad80-2650-45f1-a7aa-c5432d2d8eda", "sighting_of_ref": "indicator--8f58074b-18ca-4c49-a6d8-1bfe603b1136", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9501d77-7b43-419a-bdb0-e013fe8dd6b7", "sighting_of_ref": "indicator--9d2701c0-3aac-4e9d-96b8-04b43f75f5a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2556daba-ed70-477f-afe9-aec17a4b3e07", "sighting_of_ref": "indicator--b6d9be53-16a3-46d8-aea8-91942859ffff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438b3efb-2309-42ef-97d3-ab17fceb331e", "sighting_of_ref": "indicator--ba2d996b-397c-43f7-bff5-2c5be041d494", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17a1068-bb54-41f5-826d-7e7b3a12a281", "sighting_of_ref": "indicator--268b676f-49f1-4622-820d-511b46bd9688", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921de548-2c06-41d3-a496-b3c5250e9356", "sighting_of_ref": "indicator--9d6bfd79-93ff-4bb7-8333-abe6695f02f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69be415-6aef-43bd-85e5-e80b156f5927", "sighting_of_ref": "indicator--b1d9186d-ec36-4e78-8ba3-90a9c5b2a024", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b123853-2fdc-4ec7-98a2-fbd6162e9828", "sighting_of_ref": "indicator--63a2446d-92e2-4d6a-89c8-7c70adc476f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086faa01-5978-46d3-8b60-052d62285d68", "sighting_of_ref": "indicator--37067721-cf1f-4e6a-986b-8518318a9321", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da932092-0894-4723-80c3-b7060e8b7b57", "sighting_of_ref": "indicator--f9349a8d-35e4-4659-bc04-ffcc068b6d50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10234c2f-a781-4b61-a1df-e819f1f908f0", "sighting_of_ref": "indicator--e177ff53-2d89-4652-aa3f-805349c518df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49a136f-ded0-4049-b233-23eb113eaf82", "sighting_of_ref": "indicator--42c8cbc9-47fc-4730-80aa-107eaf0b5c63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60001863-9859-4c5f-99c1-876267249605", "sighting_of_ref": "indicator--ad8b3ced-b370-4450-9f7b-3b3bdfed3189", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0ca23c-a434-478f-988c-3f3273bb784a", "sighting_of_ref": "indicator--66f120db-a809-4fb1-8179-c0cf4f592172", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62a91ce-6efe-47f4-b5c9-e553d4a29da2", "sighting_of_ref": "indicator--7c35b985-57ad-40fa-bed6-54756de93ed3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195ffeb3-71f7-4f6e-b893-85a17d6ab6a2", "sighting_of_ref": "indicator--75895398-d213-4c05-ac36-44853647706a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e166c1-dfb3-41cb-ba89-6519a7da4f46", "sighting_of_ref": "indicator--31c8fee8-384e-453e-b778-1c8be3a1b328", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055ba03f-6cd1-4ddb-a5d8-35e51a61626a", "sighting_of_ref": "indicator--bb2106b4-c71d-439a-b96c-0b4bc5e40521", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66264fe-dfec-42d1-8c00-15ad8d188c19", "sighting_of_ref": "indicator--c8af9fd1-4784-4595-bfc1-4e4aa9153736", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e71932-e9f8-4286-b89c-e6f2368117e2", "sighting_of_ref": "indicator--7553cc50-c752-4d46-8777-615afc719530", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b5b64d-0ed7-49dd-9c94-2e9f68c37858", "sighting_of_ref": "indicator--b2118113-fb85-4873-8a53-2e7eadb708e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283fc413-25cf-4a31-ae85-5737f8006eb7", "sighting_of_ref": "indicator--c607f78d-6c37-4e6e-8c78-0bd82cb30425", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c558e0c-1588-4a80-a1f4-75766171a7ac", "sighting_of_ref": "indicator--e953200c-3db9-4455-a40a-d69675d830cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b764fc69-b510-400c-8ab8-77acef8a234c", "sighting_of_ref": "indicator--5fafb5cc-4a77-4820-8fae-d222a0309be1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd1eebb-6625-455e-a8e0-c08d7e11f87b", "sighting_of_ref": "indicator--1ff47bf8-bd1b-4bcb-b80a-28df59f99ec6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33db566-6613-4ee8-a15d-d88501ff1fb5", "sighting_of_ref": "indicator--1ad56e44-1a9c-422a-868e-aad7dddc3806", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fda7fd-eadd-492f-b066-aa0ad61744d9", "sighting_of_ref": "indicator--3e6b2dc0-f3a4-4000-9632-be01cf4efde4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8db957-c5cc-4bc5-acfa-3f594dc5bbd5", "sighting_of_ref": "indicator--55937c0c-e14f-4d11-af18-0664675bb059", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490b60ab-b841-4edb-b39c-8e4ffd4fc5f2", "sighting_of_ref": "indicator--5665537c-c59f-4ea2-ba0b-9e545dee4db4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3428a5fc-06ad-4acf-8042-97563e8f57a7", "sighting_of_ref": "indicator--217014e5-7146-47cc-83cc-32838f540519", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb8264a-f19d-4ace-9426-db8e47c44368", "sighting_of_ref": "indicator--7556d99a-971f-4d57-9e4d-8b3b0cf6ec2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894a56b1-3a58-4a9c-972f-0856d9b92686", "sighting_of_ref": "indicator--362763e8-81ab-4c16-8b4b-fa216b8bea5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca14676-f02e-4d19-bff7-f7971236fccb", "sighting_of_ref": "indicator--362763e8-81ab-4c16-8b4b-fa216b8bea5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eee198-2558-4e4f-bb33-a80db50d3b06", "sighting_of_ref": "indicator--c729a2cd-99f9-4c64-ae8f-5dabbf935da3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d7071-2df8-4ff8-bf6b-2698b2bb8589", "sighting_of_ref": "indicator--044e11a3-be3f-4dd2-a411-1a89b023f448", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35be3134-bf53-481b-a6b0-4e950c1c2532", "sighting_of_ref": "indicator--1829605e-5525-43ec-9952-ad8e01dd2795", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a86a543-ecd5-4a06-8973-47bc7edb443c", "sighting_of_ref": "indicator--9d46ba74-cde1-4706-8b34-eea08f263258", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c1bc88-5ee7-4578-9c1e-30883ed37e64", "sighting_of_ref": "indicator--8d00e6cf-0bde-43a9-9481-df33bf822299", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa12420c-8beb-435d-9726-5ec2b20f6442", "sighting_of_ref": "indicator--6dcbe889-c01c-48d7-9119-e7c362b34871", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a113dc1-bbc2-46e3-9add-84a3f0fba01a", "sighting_of_ref": "indicator--34aef85c-9c8c-41e9-b123-a4e04df212bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7140ec-fd86-4974-bc5c-a2f7e9cb1db3", "sighting_of_ref": "indicator--0ceaa054-0051-474f-9410-489c621033a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfcd324-e961-4f9c-83ac-4b789aff1b16", "sighting_of_ref": "indicator--9b251121-b8a7-4ea5-b73c-f757acd4beee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f027c3f4-b5b7-4418-816f-352700a23a68", "sighting_of_ref": "indicator--d69ed49f-e258-4567-abd5-1878d5d6917d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ab50c1-5c27-491e-855c-48c158f64ccc", "sighting_of_ref": "indicator--d69ed49f-e258-4567-abd5-1878d5d6917d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f31a535-7814-4c1e-acb6-c0196556867a", "sighting_of_ref": "indicator--8df685b3-9040-41d3-9588-4bac75b095b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db561cea-aac6-45b2-84c1-fab4009d03b7", "sighting_of_ref": "indicator--f784bcbd-0f9b-4f0a-9aea-e493f4d62c5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4bd4ed-acfe-4aac-ae18-0e084bf454da", "sighting_of_ref": "indicator--f784bcbd-0f9b-4f0a-9aea-e493f4d62c5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819e90a5-1fd0-45a9-b93d-fa2facbaa166", "sighting_of_ref": "indicator--51b7b425-494f-4cec-a1ce-ae2986383722", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e798ce9-64b8-448d-aa1e-c976b8bfd4a3", "sighting_of_ref": "indicator--1d39bda7-6c78-4f07-b3da-92b1e12741e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ab9eb8-1792-4925-805d-21e0296a4dd8", "sighting_of_ref": "indicator--3935562f-8670-4749-8519-90564effb74e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce5c23f-cee8-4261-a645-929bb8aff207", "sighting_of_ref": "indicator--328c68e7-2ec3-4240-bf10-5bd177261fe6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e0db40-c22b-4a7f-be51-ec3bcb7f545c", "sighting_of_ref": "indicator--328c68e7-2ec3-4240-bf10-5bd177261fe6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbcffd8-7dfb-4e0c-8b84-47824f55eef2", "sighting_of_ref": "indicator--9ef4e514-be98-4de3-be10-86a56bc49346", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bcc854-323e-4940-8d4d-b408f96f285c", "sighting_of_ref": "indicator--9ef4e514-be98-4de3-be10-86a56bc49346", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7329783-8566-436c-8f87-6246a2e574c5", "sighting_of_ref": "indicator--9ef4e514-be98-4de3-be10-86a56bc49346", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c0f2a0-e679-4c74-a47e-b6a81d5898e3", "sighting_of_ref": "indicator--7a12f324-fccd-483f-8ad7-88ca86b35065", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3142ae3-ed1f-45d9-9629-eb09ce7484b4", "sighting_of_ref": "indicator--7a12f324-fccd-483f-8ad7-88ca86b35065", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591162af-7a15-4915-8b8b-2a20e4e5267e", "sighting_of_ref": "indicator--7a12f324-fccd-483f-8ad7-88ca86b35065", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4c22a3-1819-4ef6-8824-2516a6068f27", "sighting_of_ref": "indicator--53fa0115-3e6e-4ab8-8f83-b3b07e003cf2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd0b41-9cdc-4e5c-97de-1513e7edcbab", "sighting_of_ref": "indicator--53fa0115-3e6e-4ab8-8f83-b3b07e003cf2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8507d7ef-7a96-4486-a2da-465eedcf8e37", "sighting_of_ref": "indicator--53fa0115-3e6e-4ab8-8f83-b3b07e003cf2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ee20ef-3e99-48b9-a222-0b02489cf7f6", "sighting_of_ref": "indicator--ec599598-5a7e-4a3b-b726-35978fd0660d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c15832-4e67-4c33-ab7c-2db05d6c402b", "sighting_of_ref": "indicator--2cfb9b72-7ea5-42f9-971b-a31ba6ae329d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a32bcc5-1063-437f-b33e-9fc5fd6316f0", "sighting_of_ref": "indicator--186ee984-7073-4cb1-bfd3-7f7afe87ff7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c54700-4298-4e51-825a-23d95391c4f7", "sighting_of_ref": "indicator--93ae52f0-20d5-4f5e-a76e-90b1163ded0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8050cea0-ff24-4e1a-973f-9a93dd47b269", "sighting_of_ref": "indicator--3fe5ffa2-3995-4e98-bf78-4dd30e38619b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ffa21d-dfad-40db-a729-f80c14a6b683", "sighting_of_ref": "indicator--3fe5ffa2-3995-4e98-bf78-4dd30e38619b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd22692-53c1-4383-bfc9-efd0d741e2b2", "sighting_of_ref": "indicator--3fe5ffa2-3995-4e98-bf78-4dd30e38619b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c20f3e-9c9c-4991-afbc-10345d1934fe", "sighting_of_ref": "indicator--b483c57d-09b1-4ea1-a016-9caa08dc9516", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5411b3-4177-406c-ae90-e0f04eadfb72", "sighting_of_ref": "indicator--59a4b87d-b6cd-4e79-8e1b-13c5e8409905", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d6b567-ed56-4087-997b-47f37efd50f7", "sighting_of_ref": "indicator--4c491baf-0118-4bc0-b961-d66f3de69144", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b900528b-cd1d-4cd4-8a25-f611ecd2678f", "sighting_of_ref": "indicator--636e92c7-1aaf-4e14-9050-6cb10b3f485a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6599671b-de3c-4a4e-84af-b40f85a072c2", "sighting_of_ref": "indicator--b5907c92-3eb0-43a2-b605-d0d8d6a110e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b10f94-2aba-455b-9b1c-837ed556544b", "sighting_of_ref": "indicator--859d444e-222f-487a-af08-61d959b2d85d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd421c14-f190-4383-8bbc-243b564d922c", "sighting_of_ref": "indicator--c88128c0-55c7-4547-858a-8fe30ea2f05b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25480816-3d41-4afa-b292-2ea5524efef6", "sighting_of_ref": "indicator--7fdf03fc-eb70-4b75-aa54-d18541db61f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a9ec7a-0315-432a-a31c-8c4d98aef20e", "sighting_of_ref": "indicator--1d073fc7-2448-4544-a802-61dbb705e446", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909203b1-6f54-4cba-863a-2a949468fd7b", "sighting_of_ref": "indicator--b4c4266d-86b6-4159-8966-9534cf063119", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8d73dc-7849-4ab8-b93b-b9721cbba9e6", "sighting_of_ref": "indicator--ce881985-b6a4-4b25-848d-8a5baef25cf2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1bf926-d858-4cee-9993-6626c9450183", "sighting_of_ref": "indicator--87c566b4-0c08-41fd-8611-aada79a5cfe4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3556f1-10aa-42c6-bc38-e93e16a46fe7", "sighting_of_ref": "indicator--6991a30b-bbc3-466c-a245-495bbd0cfa00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadaf572-55cb-4841-82a5-eaefc4ff3e75", "sighting_of_ref": "indicator--2a627623-23ae-44ed-9dee-c9a2680ccc43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdfd39a-a64d-4a6f-871b-539d00c0f875", "sighting_of_ref": "indicator--655702f9-78d2-4f4e-aeb6-b2734be5663a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b9c6ec-10d9-4667-9012-cb8376421bf9", "sighting_of_ref": "indicator--5fe18141-ea16-41ea-ae68-3cd71ed2a88b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab0681e-cff9-48ea-bc8b-678bb5d41aed", "sighting_of_ref": "indicator--dc4da178-d357-4ae7-89a7-baa2945a2bf6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54f4bf2-0c32-488d-88d2-5c45ad64ccfa", "sighting_of_ref": "indicator--30392c0a-df5e-45e2-aff9-2c2744892afe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cb8a9d-575b-4d14-a045-949d1687ee06", "sighting_of_ref": "indicator--d3524d3f-e94b-444e-8bd3-ed4d1f8342e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65a4abd-6098-44c9-baaa-05cd2ca5d9f8", "sighting_of_ref": "indicator--89a2368a-c7f2-444e-ba63-b6c1fb60e22c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a074d7d-8e96-40e7-a062-e0ad64c84112", "sighting_of_ref": "indicator--9e763969-96a9-4144-b939-4b0e9eb7d568", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4b6d77-2cd6-41a0-83bb-315911331624", "sighting_of_ref": "indicator--8c52f940-cb94-4257-85ce-5c9eef581998", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428d03a-1d7e-4d90-9ba1-495aac8e01eb", "sighting_of_ref": "indicator--ba18bbfd-96cf-43ee-add6-fbdacd3752c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f59a08e-abd7-4612-8957-83105c5f830f", "sighting_of_ref": "indicator--a4599609-6be0-4368-8be7-6a203b862dd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc948033-f718-4e23-af5b-a049216bb9d8", "sighting_of_ref": "indicator--85833065-83d2-4068-a377-d8aea8e402ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc89bfd7-e27c-48b4-a883-b1a63ad8241c", "sighting_of_ref": "indicator--17e83821-c56c-496c-a2a5-83deb01b0c48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967f8695-c68e-4d6e-84d5-458c42a43de5", "sighting_of_ref": "indicator--e18712e2-fa9b-4fdb-908d-316e5ef5ae81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09316a6f-40e2-4c6e-80a9-e5621dbdcc28", "sighting_of_ref": "indicator--e18712e2-fa9b-4fdb-908d-316e5ef5ae81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17dfe76-88b4-4247-bdbf-64315c692a2c", "sighting_of_ref": "indicator--d3c0bc10-4012-422c-b4ba-f627255e0e00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580b7f1e-fb21-41de-a71c-0f279ff3c86d", "sighting_of_ref": "indicator--d3c0bc10-4012-422c-b4ba-f627255e0e00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f207ecb7-3f5f-4a2c-b287-f9c14a075de6", "sighting_of_ref": "indicator--d3c0bc10-4012-422c-b4ba-f627255e0e00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be89e54-3cad-498f-bb6f-cf43036ad22b", "sighting_of_ref": "indicator--b72eab6f-3b56-47c6-acfe-626a295811f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e5530d-c17e-44de-92e8-e0e12bc61d8c", "sighting_of_ref": "indicator--fd527a39-b1d0-4aae-8f03-0e81ef7c960d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368c86f3-8cd4-428b-9d83-fbe14a0011d3", "sighting_of_ref": "indicator--fd527a39-b1d0-4aae-8f03-0e81ef7c960d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14718c89-e934-4d10-a26d-70b583a9d866", "sighting_of_ref": "indicator--ef593518-a0d1-4532-abdf-518bead363f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66edabd8-25a8-4396-be90-7bcea59b6052", "sighting_of_ref": "indicator--ef593518-a0d1-4532-abdf-518bead363f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebde44ae-4f5e-4690-bf3c-6576f6cb1445", "sighting_of_ref": "indicator--c34a99df-35d7-4341-b4a1-ab951b29f21a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e44db9f-1ac4-4ed8-be6b-30819479038b", "sighting_of_ref": "indicator--fd312fdc-0bdb-4150-bf1c-20c7e7a6e94d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8db85-39b4-4fdd-9b3d-efb261f61981", "sighting_of_ref": "indicator--abc77f47-4d79-4609-8ac5-fabde80a79fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a0ca2-2a87-421e-8bb0-70367781becd", "sighting_of_ref": "indicator--04ff8e13-56f7-482a-ac72-a1fe69395a0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3682e1f3-978a-460e-9312-fdb04b67b308", "sighting_of_ref": "indicator--01d3fe5d-516d-44e3-80a3-0564d047fb6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a56f1ee-6e9a-4d54-9234-83b6d9c8d43e", "sighting_of_ref": "indicator--01d3fe5d-516d-44e3-80a3-0564d047fb6b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e180f0e7-10b0-4cf9-9d20-3681bf858edc", "sighting_of_ref": "indicator--01d3fe5d-516d-44e3-80a3-0564d047fb6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caeba1d1-89d9-4e0b-865c-60bdd89835bc", "sighting_of_ref": "indicator--b42e6ae3-cb3b-459a-a771-6ea8c684b038", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2887f9-7800-4faf-8000-e73358ea3398", "sighting_of_ref": "indicator--2ccbfaf1-ac4a-4e54-9109-89861bcc6680", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5433cd5-036b-4562-b698-9a1a39a34915", "sighting_of_ref": "indicator--ab590fd0-62ad-4b6e-9c58-9b73b346f98a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f69391-9b0e-4c24-97da-c2b9a27b4bf3", "sighting_of_ref": "indicator--76b06deb-aba1-43e7-875e-d3a498717659", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99a1df-bbad-4ba6-9bbd-afeb1b3c2154", "sighting_of_ref": "indicator--76b06deb-aba1-43e7-875e-d3a498717659", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae4f9ac-a1b1-42a8-909e-7dd8f5b1d3c4", "sighting_of_ref": "indicator--0983ab5b-8180-41be-b0ff-75461c80d46b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caf56a9-35c9-4d72-ad62-9d256da42d94", "sighting_of_ref": "indicator--f0e296a1-416c-495d-bd3a-8417a43efae5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ab3937-4992-45e1-9213-cec6f620473d", "sighting_of_ref": "indicator--eccd714f-dd84-4d1f-90f3-1c494bb6bac4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af8c6ea-1633-4db8-a2a4-3e23bf82a255", "sighting_of_ref": "indicator--eccd714f-dd84-4d1f-90f3-1c494bb6bac4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394164da-0c09-4100-b187-1d100aa51dee", "sighting_of_ref": "indicator--00612e33-67fe-4087-b588-ef094d431ccf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f56478d-edd7-46c0-bbdc-fbee2908ba26", "sighting_of_ref": "indicator--00612e33-67fe-4087-b588-ef094d431ccf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20546df9-1be5-4be0-955b-f8469b630377", "sighting_of_ref": "indicator--bbbb6388-0be1-4cb8-b354-4c1e0edeb2ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48253a8-b469-49ae-830e-f0cb3a65ff01", "sighting_of_ref": "indicator--bbbb6388-0be1-4cb8-b354-4c1e0edeb2ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1863a5-97f3-4851-bd6e-741633e9e93f", "sighting_of_ref": "indicator--2752524c-32e5-4738-bcf9-8fa73fe0fc46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1929d5a3-f595-4392-bf20-810399db4752", "sighting_of_ref": "indicator--2752524c-32e5-4738-bcf9-8fa73fe0fc46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8664acda-15c0-4aba-b818-ec2bb8d49a84", "sighting_of_ref": "indicator--7f5fcf4a-2acb-4140-9181-66744cc75e43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a3afa-c8f9-4374-bb3f-abb03f9a5ff4", "sighting_of_ref": "indicator--3eec5e72-aa2c-4826-bdb7-3a2fc7c9931f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33184adc-b69f-4c28-9d6f-4fe6b7f8dbc6", "sighting_of_ref": "indicator--7d825448-86ae-4f43-90f9-721591972065", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd274b80-0109-4a54-94e7-a81944f001f2", "sighting_of_ref": "indicator--b308005f-cfc4-4149-bb31-0235a77d277b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5abf9db-43df-45a0-b07a-8643ada2b616", "sighting_of_ref": "indicator--5c08a781-19a0-470d-ba05-67e05702d536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ebd1d7-671c-4151-a763-4f6217cc3b15", "sighting_of_ref": "indicator--7811827d-d4b4-457d-befe-5178eca5f399", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984dc62f-d60f-4439-bc90-67518e4cd81d", "sighting_of_ref": "indicator--74a22b2e-774a-4d5e-8c42-b0df1a660dc8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4c68a1-4b37-48f1-a5c8-ae07f7cadc04", "sighting_of_ref": "indicator--126b77ce-2979-48a8-9db0-3f45ed1eaa64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5058ba-0174-48a5-81b5-762e66de693c", "sighting_of_ref": "indicator--126b77ce-2979-48a8-9db0-3f45ed1eaa64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e190986-5611-4941-92e9-7ba28efb5b09", "sighting_of_ref": "indicator--4737ecca-67ff-4568-9233-818824a7ac79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f8ddb3-e09f-4e77-a1fd-531b2de97876", "sighting_of_ref": "indicator--c4a3d30e-b2b8-41f7-b38c-523b42bde909", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adbc31d-120c-44dc-b2fd-ba93c0017b34", "sighting_of_ref": "indicator--c4a3d30e-b2b8-41f7-b38c-523b42bde909", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099b53cc-cfd8-452f-88fb-8221e71cc568", "sighting_of_ref": "indicator--e386ac1e-51f5-4222-87d3-2fe73a7687d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a3c319-f83d-409c-adb3-7dc98806d277", "sighting_of_ref": "indicator--99bfb6b4-43e1-4b5f-bb29-30ab72661bb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52534f5f-ce8a-4c62-b64f-c7aecda974c5", "sighting_of_ref": "indicator--b92796a6-c1b7-4db5-b2de-51d280c54a10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51407b9e-a03f-4211-895a-33eee50fb139", "sighting_of_ref": "indicator--36dd9733-8101-4430-92e9-5fda90247381", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e298670b-f375-48b5-ae5c-39258d0a4e9b", "sighting_of_ref": "indicator--36dd9733-8101-4430-92e9-5fda90247381", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf4dcc1-2b60-4b73-8a3a-870c62792aa6", "sighting_of_ref": "indicator--3f79e725-22a5-460e-8f88-309bdadd3de3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19a92af-a62e-4f2f-80a1-6b0c2443da8e", "sighting_of_ref": "indicator--0e13c280-e045-4ac1-8ccb-3578e69bb05f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4074bea7-2240-4ea2-829a-4fb1c28c4ebc", "sighting_of_ref": "indicator--a3e9281f-0dec-4f1b-a356-890e2d8ef843", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ead2b19-4773-49f0-9f1a-b36faae09212", "sighting_of_ref": "indicator--a3e9281f-0dec-4f1b-a356-890e2d8ef843", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f9b43c-3a7e-41ce-a530-7452d102d11d", "sighting_of_ref": "indicator--37f25c21-a227-42f5-8931-4103fc598f94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb0116-bd2d-4912-9237-f8e35b40121a", "sighting_of_ref": "indicator--37f25c21-a227-42f5-8931-4103fc598f94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51186ff0-022c-4d5e-8147-b5e87e1b0986", "sighting_of_ref": "indicator--d84d1ab8-896e-4446-9f1b-3e45955bc1fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b671b5-b831-487c-b05d-1d0703b10d49", "sighting_of_ref": "indicator--d84d1ab8-896e-4446-9f1b-3e45955bc1fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aae1ec6-0c37-49f3-86b7-ce09c1cccbc1", "sighting_of_ref": "indicator--5dc651eb-d9ff-49e4-98fe-ba4cba71b2b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eecaa42-39c6-4b3b-ae35-23886a8af5a5", "sighting_of_ref": "indicator--5dc651eb-d9ff-49e4-98fe-ba4cba71b2b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053fbe2a-994e-46e2-abb2-77e31376a74b", "sighting_of_ref": "indicator--2f640103-1e83-4510-aec1-37754f0a83ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02cb5a5-4d33-4b8e-9c1d-6aa3a50bc8a0", "sighting_of_ref": "indicator--2f640103-1e83-4510-aec1-37754f0a83ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac07de-e6c7-4b4a-81ba-db873c7effc7", "sighting_of_ref": "indicator--2d0ece02-0efb-4db3-a84c-76bd944d5f2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04712ee-3f00-4869-957b-07ed5b628c08", "sighting_of_ref": "indicator--2713ac47-8e71-4136-93b0-a001e746fe68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33994e2a-9f48-49e9-9fca-b0ce3971603f", "sighting_of_ref": "indicator--a113c5f4-5cb4-4754-8625-08de9ef27bd4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24563978-0704-4077-8391-5fb987412a0b", "sighting_of_ref": "indicator--c0c4f73c-75b9-4452-91a6-267cffb000c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7b1ff1-a0d8-48b1-8b72-3a38bac83586", "sighting_of_ref": "indicator--34868b3c-4129-40a7-83e0-25276507ec80", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b2e3dd-ae3b-4c2b-989d-f2b43fb8bff8", "sighting_of_ref": "indicator--179c8c6e-f5c3-49d0-84d7-65311e0d9ae4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ade51f-e6a9-4bb7-bff3-c8aa906b01b5", "sighting_of_ref": "indicator--179c8c6e-f5c3-49d0-84d7-65311e0d9ae4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c5d209-fcc1-4738-8114-40bf503c7bb9", "sighting_of_ref": "indicator--944f5c93-0a43-42b4-8d32-864b427011d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777efbb0-fbea-4c95-8d86-f8a016e167e3", "sighting_of_ref": "indicator--0c4264c9-c832-44f9-b4b1-b27c87acb2b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b072b4d7-3230-474c-aaf5-a3c1d4509bd8", "sighting_of_ref": "indicator--6aa7d657-2934-4fad-945f-e4632c660bad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f6390f-177e-4d9c-a557-974e8221e763", "sighting_of_ref": "indicator--5ce5d645-fab3-4d4e-bbac-a707874a6d4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3219c7-05ca-47cc-bb4b-7fc18133aed7", "sighting_of_ref": "indicator--c4673f3c-f0a3-4438-9403-5fb4ca28a596", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14aeb798-6696-4683-9e8d-21e8819617e0", "sighting_of_ref": "indicator--c4673f3c-f0a3-4438-9403-5fb4ca28a596", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7636721-a592-4912-becc-82cf117d2084", "sighting_of_ref": "indicator--d4fb98ad-34a1-452e-abfe-db29078186ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e8a383-617d-49aa-89e8-47e6aaa54695", "sighting_of_ref": "indicator--d4fb98ad-34a1-452e-abfe-db29078186ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9969c659-fc54-4a12-9519-cc73bfbc4062", "sighting_of_ref": "indicator--a3603596-4852-4e1b-9303-971e2fc2e781", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9725dc99-a31e-4520-9bcf-b7b3055ebe65", "sighting_of_ref": "indicator--c713457d-ea8d-444c-8395-5e0948e458a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b7ca7c-31ed-4220-8c4a-828f513831f4", "sighting_of_ref": "indicator--27633a4f-5b84-4020-8166-6744ff2b8553", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57001431-a411-4fd0-ba7f-7d1fcda39a45", "sighting_of_ref": "indicator--a38901e7-9bca-46aa-8d5b-3ac8038c8d25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c5fe38-3968-450f-864d-b7df5a56e725", "sighting_of_ref": "indicator--a38901e7-9bca-46aa-8d5b-3ac8038c8d25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e26908d-962b-41c5-8886-bc7f23aa3342", "sighting_of_ref": "indicator--a38901e7-9bca-46aa-8d5b-3ac8038c8d25", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc05c8c3-b353-4c9e-95c0-2ef983eef5b3", "sighting_of_ref": "indicator--026d79db-8876-40b3-ab9a-d9e40c1ea0ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d3ca77-f732-45e7-8de5-4b46c9780c94", "sighting_of_ref": "indicator--15651332-dd08-449e-b170-00128e721fb7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fc0076-ad53-4a2b-a613-bd9846ba136e", "sighting_of_ref": "indicator--15651332-dd08-449e-b170-00128e721fb7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c37350-0121-4470-b722-296c56099241", "sighting_of_ref": "indicator--15651332-dd08-449e-b170-00128e721fb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd4e414-6ad2-4f59-aac6-65e4b3a7eafc", "sighting_of_ref": "indicator--b36d56a2-d3da-490d-906b-6c2cfd4eaea8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d0b179-f681-490b-b08d-65505083399c", "sighting_of_ref": "indicator--f302333c-5c7c-4657-9b5f-f32c9e7680df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161a4534-30c7-41af-b651-4b09fa2d77c3", "sighting_of_ref": "indicator--f302333c-5c7c-4657-9b5f-f32c9e7680df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd7c877-3b76-4f30-92c9-0b6ff75e13e6", "sighting_of_ref": "indicator--e874d26d-7005-4875-a6a6-9f1c4478d029", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9392fbfd-865c-4fc6-a574-5667b3124ae0", "sighting_of_ref": "indicator--e874d26d-7005-4875-a6a6-9f1c4478d029", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c6b66b-616a-4f60-8e99-4abee60c960f", "sighting_of_ref": "indicator--e874d26d-7005-4875-a6a6-9f1c4478d029", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32774ca-181e-4a88-89cf-5529133f0821", "sighting_of_ref": "indicator--e08cf4c4-044b-4908-8dac-225409a715f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe8b6d9-4425-4698-b397-61ead6851202", "sighting_of_ref": "indicator--47113893-56db-43c0-8d7d-804156837192", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29ef78f-d843-4379-a4d8-6ccd614f744e", "sighting_of_ref": "indicator--d3236ce5-bdc1-4079-bac3-53ed83b1d5b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b699d8f-b3f3-4fb1-84a5-1f81935ef626", "sighting_of_ref": "indicator--76e1ab24-28f0-4943-9466-6beb6a6f9dad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b194a4-61a3-44c6-b571-b86b303c6c51", "sighting_of_ref": "indicator--49a74f09-8a58-4133-aa92-1c3eabb881d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c06cbb-38ec-4a42-b9bd-b18d7d274620", "sighting_of_ref": "indicator--dc317825-add8-4c7e-af01-12337c976b1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0f15a3-9f76-4fee-84f5-a0743ea0e300", "sighting_of_ref": "indicator--dc317825-add8-4c7e-af01-12337c976b1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab29be0f-af97-47d0-bbc9-0d2baab9efe9", "sighting_of_ref": "indicator--dc317825-add8-4c7e-af01-12337c976b1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c65ab1-351f-4ae1-970d-fcc19a8ce84d", "sighting_of_ref": "indicator--1ac63196-3d05-4b67-ada9-05aabff69d2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793db11e-aaf1-4521-a5fc-7c2ddabead16", "sighting_of_ref": "indicator--5421b804-cdb1-48c1-887c-e6a844e3a0b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f3c263-cf8c-4bcd-bd31-df9410776ca0", "sighting_of_ref": "indicator--615fb164-6d72-4122-a577-2b47afe238cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cca342b-d705-4c4f-ae38-cab600e4205f", "sighting_of_ref": "indicator--3585b9ac-fccc-4502-9001-260016c0185e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac31cd2e-854a-4e49-bd26-75eee64b9272", "sighting_of_ref": "indicator--60d7ded0-6607-4117-9d36-bc058f124e42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f60fe3c-372b-42df-a4a1-a56579add566", "sighting_of_ref": "indicator--60d7ded0-6607-4117-9d36-bc058f124e42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10e4348-3b6a-4b5a-a868-f6f1898aa335", "sighting_of_ref": "indicator--bc302864-d4ce-499b-871c-0c51c0627ab8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd29e24-5dc1-4ef7-8a39-062fd8c8da71", "sighting_of_ref": "indicator--6b073d14-43a9-4c4a-bcd4-cbfe42845541", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98506a3-398c-4d7b-bbe8-524b2ab3c3b7", "sighting_of_ref": "indicator--6b073d14-43a9-4c4a-bcd4-cbfe42845541", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40eecf7-c4c5-4701-ab7c-2b55f58dbaec", "sighting_of_ref": "indicator--6b073d14-43a9-4c4a-bcd4-cbfe42845541", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1313886-595a-4be4-8d33-51ccdf3c9277", "sighting_of_ref": "indicator--74f0b920-6c29-45b9-810f-3097a148dada", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235d2d44-0643-4cdb-af9d-becc0b3b3bd0", "sighting_of_ref": "indicator--74f0b920-6c29-45b9-810f-3097a148dada", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a6da24-cc89-49c2-9074-8a3366d064b2", "sighting_of_ref": "indicator--fdeb5c34-3c2c-4373-a688-c37056c002f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d209c1-5a31-4555-935d-a970806523ce", "sighting_of_ref": "indicator--fdeb5c34-3c2c-4373-a688-c37056c002f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cb5a16-cb6b-47f6-b7b7-feec55a383cd", "sighting_of_ref": "indicator--aa22eb3c-9111-49e6-b20b-6f2c44cae56e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a907ac-a074-4307-bb91-6c77e643169f", "sighting_of_ref": "indicator--aa22eb3c-9111-49e6-b20b-6f2c44cae56e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd5f622-7b50-4f3c-973a-c656729d5c7e", "sighting_of_ref": "indicator--52dcf296-a328-4db5-9b3e-21670f8678bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cd4eb9-fbe7-4bdc-84bb-99d514a4ead6", "sighting_of_ref": "indicator--52dcf296-a328-4db5-9b3e-21670f8678bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3136ac00-39f6-43a4-a21a-01b7f295a45a", "sighting_of_ref": "indicator--78853119-51e9-4b47-a9db-757c426de606", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724605e1-c868-4c2f-8e1e-b8277d6604b1", "sighting_of_ref": "indicator--56ca7b1b-36e7-4ce8-9552-4f64bbb9f500", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6e84ad-4670-4b0a-9fc6-23073c10e7a9", "sighting_of_ref": "indicator--56ca7b1b-36e7-4ce8-9552-4f64bbb9f500", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ffe2f0-cb9c-46fe-b2e3-840cccddfb15", "sighting_of_ref": "indicator--38c5b989-bc8f-461a-b58f-b6643c891c35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e20a2a-2515-4c6e-9047-3c4849c2824a", "sighting_of_ref": "indicator--dbe722a7-2fae-4bc9-b786-0510c91f4266", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b073f60d-b637-4bac-b4fd-385f27d88c17", "sighting_of_ref": "indicator--679f0bc0-50eb-4278-9545-c7afa1460ea1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62191750-3dd4-4786-90cc-a447038aeaa5", "sighting_of_ref": "indicator--679f0bc0-50eb-4278-9545-c7afa1460ea1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4f24de-9f40-4d58-a7da-547d5d309a8b", "sighting_of_ref": "indicator--aeaf8c34-6e44-4470-9541-40014b99a42a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce23c07-1423-4579-aec0-c8818e5ea109", "sighting_of_ref": "indicator--eb6196fd-aac0-432f-a31e-23db3cf0948d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5e70a2-7f83-4b33-9862-e17cf9b3ccc9", "sighting_of_ref": "indicator--1a5b8fe5-8e79-4345-8805-b46f70c5d913", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49578ab-2ee6-4c1e-8b0a-215898290b6d", "sighting_of_ref": "indicator--b1b619ee-6045-4d4c-a915-6ad4647a7e1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b12ecba-2767-42e2-87df-c91ebe74f935", "sighting_of_ref": "indicator--b1b619ee-6045-4d4c-a915-6ad4647a7e1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0c85ec-81f1-4e50-9b04-c7e110910fd4", "sighting_of_ref": "indicator--b1b619ee-6045-4d4c-a915-6ad4647a7e1d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70b0b71-71ad-46e4-bc30-7612c997022e", "sighting_of_ref": "indicator--7f1c0042-147a-4aa8-a5dc-5b9fb372879a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a174281-5cf0-4fd7-8672-5263a6e4cfee", "sighting_of_ref": "indicator--7f1c0042-147a-4aa8-a5dc-5b9fb372879a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff05e2e-85bb-4efe-941a-c495f2a46f65", "sighting_of_ref": "indicator--a1f5d518-62e6-49f5-96ca-72145ec4f4b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002dc7af-f5ba-488e-95d1-220f071cee65", "sighting_of_ref": "indicator--a1f5d518-62e6-49f5-96ca-72145ec4f4b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f152c5d-4a6a-4011-996c-224530f21579", "sighting_of_ref": "indicator--a1f5d518-62e6-49f5-96ca-72145ec4f4b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d0a935-e7b2-47be-abf0-a654d3f213a5", "sighting_of_ref": "indicator--307c30cc-5185-4f4a-8eb9-a304d885a324", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538551ce-0aa2-4f03-a9f5-acc911b60fd4", "sighting_of_ref": "indicator--1f48579d-a098-485a-a873-f6a4b6d834fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921c8983-a3e4-4ef4-b7f5-003b87667867", "sighting_of_ref": "indicator--1f48579d-a098-485a-a873-f6a4b6d834fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eeccf80-7a26-45bf-a699-db56ce03ea99", "sighting_of_ref": "indicator--1f48579d-a098-485a-a873-f6a4b6d834fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3403ff-71ef-42db-885f-81bc8ee00af6", "sighting_of_ref": "indicator--89e8516a-179b-4aa9-a9ab-0fb6f3270cf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2f9488-5047-4c84-8f8f-4aabcc97b42e", "sighting_of_ref": "indicator--89e8516a-179b-4aa9-a9ab-0fb6f3270cf4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e9257b-31f5-470c-8b45-210c92652237", "sighting_of_ref": "indicator--99ac3b8c-8c55-4a1a-bbf9-4a64a5da782e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36178645-fe7a-40a0-82cf-1c7f3ce732a9", "sighting_of_ref": "indicator--50eb0b7c-1f8e-462c-b143-68f644b3d3fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1640f186-374e-462c-b3db-779e2e39e927", "sighting_of_ref": "indicator--50eb0b7c-1f8e-462c-b143-68f644b3d3fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacd0bff-268b-450a-85c3-b8c96ca82087", "sighting_of_ref": "indicator--381df70a-7760-43b4-a720-7a0ee46bc35f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92cb692-b3e9-4dda-99c2-0ac6de9796ce", "sighting_of_ref": "indicator--381df70a-7760-43b4-a720-7a0ee46bc35f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5871e4be-3f43-419a-b71f-b786d6683902", "sighting_of_ref": "indicator--c3081fa4-2dc7-445d-a889-91bd19789701", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1187a6b8-f887-4262-99ec-e797fb5cc53b", "sighting_of_ref": "indicator--c3081fa4-2dc7-445d-a889-91bd19789701", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f33a407-ebdd-4a1c-bc0a-99b2350d93c7", "sighting_of_ref": "indicator--9371c478-5999-4b22-954c-c88e7d538854", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bcb250-7711-49be-b5f3-630926cfecb8", "sighting_of_ref": "indicator--9371c478-5999-4b22-954c-c88e7d538854", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecef959-e35e-4a52-8e8f-ed4f85b96e6b", "sighting_of_ref": "indicator--1a7f2f37-eb6a-4651-a311-a0eca7dd9a19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d111f5fc-d06b-4970-89df-7b6827f0ea94", "sighting_of_ref": "indicator--14a97dc6-977d-430e-8a50-d5e0ec5eb3ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312ae473-8562-46e9-ab29-703deb2fa5a2", "sighting_of_ref": "indicator--8181c750-5b43-41ea-aec3-dbacf2ee942a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c3140c-b579-4bd4-837f-cf1730cab7d0", "sighting_of_ref": "indicator--8181c750-5b43-41ea-aec3-dbacf2ee942a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82941d69-44eb-4869-8ea7-53153ec18e61", "sighting_of_ref": "indicator--18bec097-627a-4abe-9bdf-c10f47b357d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced550ea-b069-4eb4-b73e-07fd5d7c6e9d", "sighting_of_ref": "indicator--4ecbffac-d429-4d98-915c-841eb87e09dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34988963-67df-4e31-9fd8-f890c8e183aa", "sighting_of_ref": "indicator--4ecbffac-d429-4d98-915c-841eb87e09dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fb92ef-582a-42a6-854b-1eabde80f671", "sighting_of_ref": "indicator--2053e517-6fbd-4141-8d4a-a3d83cf57059", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e21a87-a5af-49b6-ba5f-672f716e2ef8", "sighting_of_ref": "indicator--7d93c242-fa9b-43ab-bd4d-dccd861899fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f708e0-67cc-43b1-8167-1f2d8873d4db", "sighting_of_ref": "indicator--aa167fe1-037f-4cd1-b0a8-594a0d6bad52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d593e251-de36-495d-b1bf-71cc4cf053dd", "sighting_of_ref": "indicator--aa167fe1-037f-4cd1-b0a8-594a0d6bad52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1059006f-da57-438c-914a-59d6b3f1014e", "sighting_of_ref": "indicator--3a7e0877-8723-4160-8e9c-e52de3b47cd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d05761-b43b-4d35-9ec3-7c99eb78ebc1", "sighting_of_ref": "indicator--e074af4b-5e35-4c71-b749-7c307a78e9f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dadc416-2cdd-4b51-a2b7-ad2962988097", "sighting_of_ref": "indicator--c8cb6c5f-7678-427c-a5e6-5297c6245c15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762cc0b1-81ac-4840-84b2-ae2c0c642893", "sighting_of_ref": "indicator--c8cb6c5f-7678-427c-a5e6-5297c6245c15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacaf68c-3cc1-4c93-8526-d276db8d1b7f", "sighting_of_ref": "indicator--e936ccdf-1f16-406e-96ab-bcef06ca05ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c903c65-4dab-4881-9a0c-675c69e3f201", "sighting_of_ref": "indicator--e936ccdf-1f16-406e-96ab-bcef06ca05ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc497f4-4fc0-44fa-abd3-e791847e2d3a", "sighting_of_ref": "indicator--ebc08a3a-3e7a-4b1c-92f7-57705e9c1e14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b44e58-ca4b-49a1-b229-d327d42a7f7f", "sighting_of_ref": "indicator--b5b2ed54-072d-4632-ac85-477f75601d16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59836f71-16ff-4355-bd8d-5d8c2e964949", "sighting_of_ref": "indicator--b5b2ed54-072d-4632-ac85-477f75601d16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffabc4d2-bfb3-455b-8314-08a9b86f4adc", "sighting_of_ref": "indicator--ed88f743-c840-497c-86a6-9c88c7f51a77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7949cb4-9552-494f-8841-cf7fb609c7bc", "sighting_of_ref": "indicator--ed88f743-c840-497c-86a6-9c88c7f51a77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7380a9da-3915-4779-a81c-9c8c88bba3fc", "sighting_of_ref": "indicator--ed88f743-c840-497c-86a6-9c88c7f51a77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a5086b-0dea-484a-bc09-8f5cfbcc7383", "sighting_of_ref": "indicator--6422e632-c130-4896-81ee-b59c5baa7471", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0234bb6-0255-4dcf-83d3-f766667bc4ab", "sighting_of_ref": "indicator--2ce4a9e9-7171-4c5f-8309-b8333f10f9bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38be12cd-4706-47f2-a58e-c7b3287f7425", "sighting_of_ref": "indicator--2ce4a9e9-7171-4c5f-8309-b8333f10f9bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abb25e1-d468-4584-838e-4f963abb56c5", "sighting_of_ref": "indicator--3e05478a-44ff-44e0-a5d6-5064b58447e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f00390a-eec6-4343-af08-7a0716d22f22", "sighting_of_ref": "indicator--3e05478a-44ff-44e0-a5d6-5064b58447e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f8bc4f-570b-4563-a954-b14deebc491d", "sighting_of_ref": "indicator--b13d1e3d-c76c-46d4-a483-07917f7ad932", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a952d4-580a-4f71-9509-42257c2f803b", "sighting_of_ref": "indicator--7df3ce89-63e2-46dd-9eec-e0106b187916", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c72bb5d-9965-4c83-b885-e75fe478a201", "sighting_of_ref": "indicator--7df3ce89-63e2-46dd-9eec-e0106b187916", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a666d0ed-ff44-4685-af3f-3f1deccf3aa5", "sighting_of_ref": "indicator--28ace897-42b3-4984-afc9-a2e437d10ae6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daccddba-f2df-45a8-ac7c-c60873bb56c8", "sighting_of_ref": "indicator--28ace897-42b3-4984-afc9-a2e437d10ae6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5614c7a-5ffa-403c-8841-a891c6421532", "sighting_of_ref": "indicator--28ace897-42b3-4984-afc9-a2e437d10ae6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec59b46-a7aa-4ed2-8812-34b04a70d62c", "sighting_of_ref": "indicator--6a4e0f31-9c29-4d3a-ac65-b0039b7326bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61519888-78b5-4c35-bb33-2f94a63b980e", "sighting_of_ref": "indicator--2ac8acd0-f8b0-4e57-a53d-f9eaf0f67bf2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef60ee89-0a72-4151-8622-52c6ad88fb6e", "sighting_of_ref": "indicator--2ac8acd0-f8b0-4e57-a53d-f9eaf0f67bf2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7d927c-66c6-4211-8ed4-9874ecc2854f", "sighting_of_ref": "indicator--e1ed6737-3ecc-431e-8cad-fab8fbf27839", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd90f55d-e21b-4851-9359-95ecc3cc3003", "sighting_of_ref": "indicator--e1ed6737-3ecc-431e-8cad-fab8fbf27839", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780f155b-7a1b-4727-8478-5b4f49ed9965", "sighting_of_ref": "indicator--e1ed6737-3ecc-431e-8cad-fab8fbf27839", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0248c59-047b-4f40-9523-5bbd3894bfe8", "sighting_of_ref": "indicator--4ff99af8-9371-44b6-902e-ae27c17c1aec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5902afcf-4046-44b9-93b0-9deb900c69c9", "sighting_of_ref": "indicator--4ff99af8-9371-44b6-902e-ae27c17c1aec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2cee19-edc8-46a9-b721-6ec49439fc35", "sighting_of_ref": "indicator--4ff99af8-9371-44b6-902e-ae27c17c1aec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6effbc5-3b9e-4317-9277-110f63577671", "sighting_of_ref": "indicator--1df4a71e-6d03-488d-ae37-486fbb17b471", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7409ca-3db1-4247-9ddd-e22886a003c0", "sighting_of_ref": "indicator--0bc56d0f-c4f2-4dda-aaa6-2161502d5527", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f85a705-2772-4452-8672-5db350db33e8", "sighting_of_ref": "indicator--0bc56d0f-c4f2-4dda-aaa6-2161502d5527", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2dfa90-da1c-4de8-8a64-aa92daa02b0d", "sighting_of_ref": "indicator--d32d1ca1-afd6-4724-a79d-4a1e359efc38", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8756e0f-bf05-4cb3-acb1-8e64a58c74a9", "sighting_of_ref": "indicator--540c5f21-d243-42f0-b464-10a931b2110d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3d5bb2-7b7e-41e7-92d8-5a309f440b6c", "sighting_of_ref": "indicator--540c5f21-d243-42f0-b464-10a931b2110d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83d72d2-d8e9-4e92-9aaa-10d7e7501b2e", "sighting_of_ref": "indicator--4fe7f4dc-bc5f-4b9b-ad55-0e538870df9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93187205-aba6-4a21-b0d4-010fc14e376e", "sighting_of_ref": "indicator--4fe7f4dc-bc5f-4b9b-ad55-0e538870df9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88bcda2-d1d3-469c-900c-7fac57b53535", "sighting_of_ref": "indicator--65142a05-b91d-4c73-b814-2106e6d06a99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4e41c2-4c4c-4e32-ba4f-391538ca7c3d", "sighting_of_ref": "indicator--3f731d39-c12b-41c2-a035-25b1f0687f4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c09ef44-ac54-4ec0-9de7-68e941e8fb6d", "sighting_of_ref": "indicator--3f731d39-c12b-41c2-a035-25b1f0687f4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b3cc57-b640-4814-b21c-cb542bbb26b6", "sighting_of_ref": "indicator--3f731d39-c12b-41c2-a035-25b1f0687f4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cbb909-e0db-4053-92a8-774c713b69f9", "sighting_of_ref": "indicator--1422879a-34d9-4e18-b334-55729a8ca6e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65552ad3-cff5-4c24-84cc-15d271f9a021", "sighting_of_ref": "indicator--1422879a-34d9-4e18-b334-55729a8ca6e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228951ce-9277-46b4-b946-254dadbcd6f9", "sighting_of_ref": "indicator--b8c8c8f6-6a18-47a4-b541-22eefbadab50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6052a6-a55c-47d0-ab29-0f46607a64a3", "sighting_of_ref": "indicator--b8c8c8f6-6a18-47a4-b541-22eefbadab50", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8ba876-ee26-44d1-8056-0279425caa63", "sighting_of_ref": "indicator--eb2258d8-c4af-49b5-95f1-d1fa6e50458a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc3af19-9f72-462c-a714-ae8c08874139", "sighting_of_ref": "indicator--635904f3-ede0-45f5-94c0-46bdf40aaec7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77972fe1-45c0-4007-994b-006a21f91995", "sighting_of_ref": "indicator--84ec8ebd-abdd-4e4e-acd1-bd750edb9d98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e73f5c-d074-43bf-828c-136e7df49921", "sighting_of_ref": "indicator--da3985ee-f82a-4a51-8521-06d01b0c48e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03ffddc-96b0-4c9f-9e7e-3412dbdccaf0", "sighting_of_ref": "indicator--aefe2f58-f85c-42d1-88e2-0506726e7d84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd00132-8bf9-4e06-9859-4f45213ebb55", "sighting_of_ref": "indicator--1468001f-0a40-4a18-bff3-74ec8a3d4d91", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0eb4c2-ba02-4448-9632-298aa2f75308", "sighting_of_ref": "indicator--1468001f-0a40-4a18-bff3-74ec8a3d4d91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65201329-d8d7-4578-84c6-64301ed0864d", "sighting_of_ref": "indicator--a7be9b5d-5f84-449f-9fb5-1e111c6ae9c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a783a08d-a708-4d1b-aa3a-663eef20de3a", "sighting_of_ref": "indicator--a7be9b5d-5f84-449f-9fb5-1e111c6ae9c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4712fc1-0641-4fae-bdfe-43930721e8bf", "sighting_of_ref": "indicator--9dd1b16c-6b31-4a26-ae59-b5c1263a98d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f67cbc-0a3d-474f-8258-4f11942a4670", "sighting_of_ref": "indicator--9dd1b16c-6b31-4a26-ae59-b5c1263a98d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb6661c-e352-4e50-9272-df8b3d80e6bc", "sighting_of_ref": "indicator--9dd1b16c-6b31-4a26-ae59-b5c1263a98d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb39238-7ffe-4710-9f47-e8c2978f143d", "sighting_of_ref": "indicator--674b758f-f655-4dff-9c5f-afca4fca50b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0380cd39-8aa3-457e-827d-9375756370c3", "sighting_of_ref": "indicator--674b758f-f655-4dff-9c5f-afca4fca50b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ca7fa-bf4a-461c-ae43-286bcff7940c", "sighting_of_ref": "indicator--9ac29df7-cec7-44d7-b26f-c6be26abbf4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd01b8cd-8ed7-4fcf-8f19-579fb634fd91", "sighting_of_ref": "indicator--d55e12cc-c269-4a1f-9bc7-99d624056787", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa20c85-6b6d-45ff-a195-085dc773067f", "sighting_of_ref": "indicator--d55e12cc-c269-4a1f-9bc7-99d624056787", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3658f8db-2ee9-48cd-b8f9-63d3744688e3", "sighting_of_ref": "indicator--0b3ab956-b629-438f-a6c5-c9dddbdb0c4f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933c6612-ddc4-4191-82d7-7ba5069702e1", "sighting_of_ref": "indicator--8cd2330b-591c-4016-97d6-ff86ed15d413", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb6aa63-cd70-4a3e-87ab-aa4039ecabd4", "sighting_of_ref": "indicator--8cd2330b-591c-4016-97d6-ff86ed15d413", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a25b70d-677f-4595-8720-2155e0d568a7", "sighting_of_ref": "indicator--c1684c45-70cf-4202-8857-08e9b140d2d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50619312-3362-40fe-a988-ffdf205cf08b", "sighting_of_ref": "indicator--c1684c45-70cf-4202-8857-08e9b140d2d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b832ddf6-5922-4014-9dd9-6de1862f3a8d", "sighting_of_ref": "indicator--6af27df3-c401-46af-8393-ca8ab92aadd7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d8f0e0-7108-44a2-b696-a4304c18d354", "sighting_of_ref": "indicator--6af27df3-c401-46af-8393-ca8ab92aadd7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630f84ac-2b75-491e-a000-921ecab01b5f", "sighting_of_ref": "indicator--6af27df3-c401-46af-8393-ca8ab92aadd7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc6a235-78c3-4f2e-ba4f-0b6110d1f1d7", "sighting_of_ref": "indicator--93200c0c-267b-4db4-a703-405c0507e0b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb275593-ad58-4542-97c2-a4f8e551960f", "sighting_of_ref": "indicator--93200c0c-267b-4db4-a703-405c0507e0b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35d9a0d-07b2-4114-b81f-819a5796780d", "sighting_of_ref": "indicator--894967a3-c151-4609-8b7c-af49b5abd915", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d96fe43-ea81-4a71-af03-47087f96d54d", "sighting_of_ref": "indicator--894967a3-c151-4609-8b7c-af49b5abd915", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1f1ea2-5e63-4fa4-b4b8-6fda422df667", "sighting_of_ref": "indicator--894967a3-c151-4609-8b7c-af49b5abd915", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385807a8-7131-4bab-9c8e-81c74734f4ae", "sighting_of_ref": "indicator--4a4a15a2-0cbd-4e40-ab4e-070f92009798", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3e2512-9e54-4f64-af41-82ffa9956f3b", "sighting_of_ref": "indicator--4a4a15a2-0cbd-4e40-ab4e-070f92009798", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d888ac-53d1-4215-93ad-68a6f01b86ad", "sighting_of_ref": "indicator--d8b68b30-e259-468e-88a3-50c97a13f09e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ef2fd2-0e4c-43de-9b45-68ff164c9b54", "sighting_of_ref": "indicator--3f8d2220-8c3f-4385-9d8b-8ca06a699533", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8186f9c0-63c8-4c46-b71e-44b91a731363", "sighting_of_ref": "indicator--3f8d2220-8c3f-4385-9d8b-8ca06a699533", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a2caf4-f269-416d-bb06-a26f09d76c89", "sighting_of_ref": "indicator--3f8d2220-8c3f-4385-9d8b-8ca06a699533", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f12eb96-78c8-4b2a-97a4-8f57df13acd1", "sighting_of_ref": "indicator--188df277-725c-448c-bb54-a707aed4d272", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacb9ea1-8827-443a-b02b-56d9a15b7cb9", "sighting_of_ref": "indicator--188df277-725c-448c-bb54-a707aed4d272", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d52015-7cde-4cd8-84a9-8306f249d1e7", "sighting_of_ref": "indicator--3f3ff66b-0344-4e5c-8e4d-56e117825cc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad5998f-db1d-4507-9d3e-9999fb969c78", "sighting_of_ref": "indicator--3f3ff66b-0344-4e5c-8e4d-56e117825cc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2411db-b222-46b3-a52d-722ca511edac", "sighting_of_ref": "indicator--3f3ff66b-0344-4e5c-8e4d-56e117825cc6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b525ec-d7b5-4e5e-9f1c-12e270d5bc3c", "sighting_of_ref": "indicator--d5e4fa31-5f5f-46c5-96e6-dc6272ccbf96", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7549fa9-7926-4b09-81d4-55b31cc10f42", "sighting_of_ref": "indicator--56e1f7b9-beb8-40dd-99eb-df487a66b843", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f110dfa-7e00-441d-9b4e-ccceabb50e1f", "sighting_of_ref": "indicator--2e3442f8-04ff-4bfc-bf10-597d0cd442be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b5a3f0-02ac-499e-b8df-16a5f56eefcb", "sighting_of_ref": "indicator--d2744043-4af6-4758-bccf-8956ae812268", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bdf65-8137-44a9-bf66-d2b52d0a79f7", "sighting_of_ref": "indicator--56e92100-4d16-410d-97fc-892104261483", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f36957d-99e9-4e98-8119-b72cab1e227a", "sighting_of_ref": "indicator--56e92100-4d16-410d-97fc-892104261483", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3e0c8a-3cc2-498d-a2c1-c25979dc96d6", "sighting_of_ref": "indicator--a6ca6b7f-1d09-4414-9e9c-467ed10059fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6200266d-fb01-465f-8349-fa57eb60c84f", "sighting_of_ref": "indicator--a6ca6b7f-1d09-4414-9e9c-467ed10059fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a4c1e3-e79f-4bb9-9a25-be9183fda3dd", "sighting_of_ref": "indicator--971df401-444c-414e-8cff-28ee56f76e93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b4872f-430f-430c-b8ef-cfac8a2f4738", "sighting_of_ref": "indicator--70cb4ffb-c8b1-46f1-8083-b47a9db93287", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766b7ac6-5fb2-4d27-a2b2-915ce7b50208", "sighting_of_ref": "indicator--1b8f5620-b249-4cc6-b681-a3085d9a7e59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0943472f-3001-4b2c-8d13-ef9b69c05b46", "sighting_of_ref": "indicator--730c845e-3036-492d-8f90-5f43a4e8a825", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4786735d-bc58-4648-9bea-c641b6e8b141", "sighting_of_ref": "indicator--7043c4c8-eb00-416c-adb1-38176a67cc5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e58219-f340-426b-80a2-9642cc1f89fb", "sighting_of_ref": "indicator--7043c4c8-eb00-416c-adb1-38176a67cc5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc534d20-2728-4c12-9c6f-28a80b205ae2", "sighting_of_ref": "indicator--4064dd65-a978-4913-a534-6414486e967a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58946994-c5e5-4ede-8164-a3ba2e8b857f", "sighting_of_ref": "indicator--4064dd65-a978-4913-a534-6414486e967a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc38fb1-39d2-4ce3-ad3d-5210464e7d10", "sighting_of_ref": "indicator--c92b879d-3d79-46c0-b26b-5200472818d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b7d7a9-784c-4ad3-973d-7cfbf2c0d70f", "sighting_of_ref": "indicator--b077a812-71e8-4c17-82df-513f09817c3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a21d83-9ccd-4a59-9b67-270af20d0724", "sighting_of_ref": "indicator--b3d6a74b-66b0-4a00-a25d-4ae77de39943", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09307582-87c1-4835-a5cb-169977f75aa9", "sighting_of_ref": "indicator--b3d6a74b-66b0-4a00-a25d-4ae77de39943", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a003660e-c4b5-4a20-97e8-f1fc0028731d", "sighting_of_ref": "indicator--bbb80bda-74ed-4591-8709-a0c2f4245202", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b4b926-8ec1-4bf0-84c2-9afb37ccd691", "sighting_of_ref": "indicator--6e9cfb0e-3f96-411b-b7c7-7a9110ba27c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e058589f-60b1-4c8d-b947-e54dc05523f0", "sighting_of_ref": "indicator--6e9cfb0e-3f96-411b-b7c7-7a9110ba27c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68289895-6f51-4b9e-9860-656ee8f1f9a9", "sighting_of_ref": "indicator--04c2cbb1-f33a-4c40-bead-3e5e5efa3249", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2243ba07-ebf9-4296-87b8-a1cfb431fd39", "sighting_of_ref": "indicator--9ab1de58-9d35-4586-9641-22ce4debd438", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cceacef-46af-4c3a-b23e-13c570df6f46", "sighting_of_ref": "indicator--b4fc9f51-e9b3-4076-91f8-b1c2c1ad7c64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4591b005-9b18-4139-98b7-7ca5f79a4431", "sighting_of_ref": "indicator--941a1190-6495-4cd3-98e7-a088cb11805d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34003a2e-57e8-48e8-89c7-3e08110ab82c", "sighting_of_ref": "indicator--941a1190-6495-4cd3-98e7-a088cb11805d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3920ff87-bae4-4698-8689-8cfb8ecac505", "sighting_of_ref": "indicator--941a1190-6495-4cd3-98e7-a088cb11805d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fa758a-672d-459a-b53f-a9e59b47a08d", "sighting_of_ref": "indicator--2044291f-a475-4a53-b303-91501e9b640f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5162ed-da2b-43f6-a33f-76c6326357bd", "sighting_of_ref": "indicator--2044291f-a475-4a53-b303-91501e9b640f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512ace62-68d9-4ad4-b62b-b3e10b35e0c7", "sighting_of_ref": "indicator--2044291f-a475-4a53-b303-91501e9b640f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961a7b69-84c9-446f-94aa-dd4ec6dec3b9", "sighting_of_ref": "indicator--25b3011a-a56b-4277-aec7-9bdf4a5e1bbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20395a73-c946-4f8c-bb49-a8e66c1ac63e", "sighting_of_ref": "indicator--25b3011a-a56b-4277-aec7-9bdf4a5e1bbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017dcf64-44c1-41ac-b634-39391f5018e9", "sighting_of_ref": "indicator--25b3011a-a56b-4277-aec7-9bdf4a5e1bbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea9ad8-8d8a-4c19-a246-fb36a46caa4b", "sighting_of_ref": "indicator--6bb68e46-bf76-45c4-9c74-7bc329ec607b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ee87bd-862e-419c-8e98-b09de5f4bc9d", "sighting_of_ref": "indicator--6bb68e46-bf76-45c4-9c74-7bc329ec607b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a47a33e-d300-4b20-9856-487f76799ae0", "sighting_of_ref": "indicator--6bb68e46-bf76-45c4-9c74-7bc329ec607b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c1e804-a825-4eed-b02d-933e2ae67ddd", "sighting_of_ref": "indicator--7573b36f-864f-4a9b-8a17-7e768af59f3b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57dde2d-5389-4094-a984-2f617d9ecf10", "sighting_of_ref": "indicator--7c9f7e00-b837-4987-b7a4-e89763168ac3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a747e1db-e564-4e91-ae36-bef1d8ac5ed8", "sighting_of_ref": "indicator--7c9f7e00-b837-4987-b7a4-e89763168ac3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d049a4d5-7767-4440-bcd3-0b3f7668a188", "sighting_of_ref": "indicator--c50859a7-7d05-440d-b3c3-5f57711abe36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a765f-8794-4d0f-a40c-f34402dc6a18", "sighting_of_ref": "indicator--c2e9c4e0-c2b5-41c2-b6a3-2e9386d20af2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c979fae7-606b-4443-8328-3926d31bcbc3", "sighting_of_ref": "indicator--15813ddf-c1aa-45a9-ba57-1cfa0738b90f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854d7f0f-642e-4b64-8952-f0e2208e4218", "sighting_of_ref": "indicator--15813ddf-c1aa-45a9-ba57-1cfa0738b90f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78837ba2-860f-4067-bd9b-5ef1a4344fc0", "sighting_of_ref": "indicator--84c5e9f3-3487-40ac-aabe-da279f9e6637", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7044be47-4665-476e-999d-b08768a3702d", "sighting_of_ref": "indicator--bfc44340-1237-4712-bac8-436463a86bcb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dcdc41-f60a-488f-95e9-ee8c8c21397b", "sighting_of_ref": "indicator--bfc44340-1237-4712-bac8-436463a86bcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd80e7ab-b0bb-4b2c-97f9-20e56f0c7557", "sighting_of_ref": "indicator--5b76d82e-224f-4b74-aec2-bace25ebd5f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ff4c6-d289-478a-9bc8-7950e88230f2", "sighting_of_ref": "indicator--ae2106b3-3ead-475d-b815-479e37e61219", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f049fd3-228f-49eb-9d2d-9228bec8e306", "sighting_of_ref": "indicator--ae2106b3-3ead-475d-b815-479e37e61219", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052bbee9-6435-4c79-8199-3b5b7fb151a9", "sighting_of_ref": "indicator--9a7da4e9-efc4-4dfa-a9d2-cba57df08fb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d106236-738e-48e0-85f6-20390876264b", "sighting_of_ref": "indicator--9a7da4e9-efc4-4dfa-a9d2-cba57df08fb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547820c-26f7-4a23-9500-da4d1d93cd40", "sighting_of_ref": "indicator--86186e7c-01da-4cfb-80dd-5700bffdde76", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc12331-6f67-4572-be16-4d7a968cb218", "sighting_of_ref": "indicator--26463208-ba1c-4373-b3d6-dc56952e79af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23bf81f-8e48-4714-a8b6-ebe0667b0b72", "sighting_of_ref": "indicator--fd9a9e44-32fd-4341-9cfa-9d42bf3f6ab9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab44d66-48e9-4eb1-aae2-4711d2c3d7e9", "sighting_of_ref": "indicator--63ce7db8-8048-42d1-826b-39c7eff0dedb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f1aab8-0c91-4060-94ea-a87a86e5dcf9", "sighting_of_ref": "indicator--63ce7db8-8048-42d1-826b-39c7eff0dedb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acabfe31-137e-46c7-8fe6-be872ce95c2b", "sighting_of_ref": "indicator--38069b57-ecfa-4afd-ba06-8c28722eaacb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab31877-73be-447d-9d5d-a65a09f4b38f", "sighting_of_ref": "indicator--98bb3ed8-c109-4a7e-a141-2dbec4df7ae5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf458238-e8d9-4f23-b32d-1279fdb30d9a", "sighting_of_ref": "indicator--98bb3ed8-c109-4a7e-a141-2dbec4df7ae5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aae58e-237f-4408-b5b5-5ac8add44a85", "sighting_of_ref": "indicator--223a17c8-7964-43c7-b0b4-3700aebc17d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcae77ae-2886-4937-b2a5-1c1eaf513fcc", "sighting_of_ref": "indicator--70cb61d7-822d-4f95-ab0c-43804d564c65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70595e5-64bc-429a-a903-39903ca2db18", "sighting_of_ref": "indicator--70cb61d7-822d-4f95-ab0c-43804d564c65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bfd4fb-6f77-4a5a-8488-d85369dff946", "sighting_of_ref": "indicator--a73b08db-229b-4dce-9731-9014d68e7f33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071babc4-e905-4aaf-a4dd-6908629244cc", "sighting_of_ref": "indicator--a73b08db-229b-4dce-9731-9014d68e7f33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb2fafb-b98f-4cdb-9df1-139b69757f42", "sighting_of_ref": "indicator--e23ca983-4050-4fb8-9b8e-c49f2c4f8ff2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058966f5-dafe-44ff-a39a-08210cdf1ea6", "sighting_of_ref": "indicator--bc5bcdf3-793f-49cb-aa19-14a4ab5af847", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c3812d-8046-4f4c-87f3-9b481e473f29", "sighting_of_ref": "indicator--bc5bcdf3-793f-49cb-aa19-14a4ab5af847", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb38925-d487-4e5b-bc34-2c1bdec536da", "sighting_of_ref": "indicator--2da170cb-10b6-4bfc-977c-4777f90da199", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f3b9af-0a57-4628-948d-e98bd4401e4b", "sighting_of_ref": "indicator--2da170cb-10b6-4bfc-977c-4777f90da199", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fee034-fcc2-4c17-b85e-151977434679", "sighting_of_ref": "indicator--7abd4491-f672-4ff1-8815-65ece80f7b60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313bac3b-5252-40b4-80ae-fee89c87a01a", "sighting_of_ref": "indicator--6cabdf64-baff-4202-b16d-ed3e0e686d30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836499cd-49c9-42a8-b1b6-3daa33a9a403", "sighting_of_ref": "indicator--494818df-cd44-4da9-b1dd-ee6bf7a39467", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff84eb6-5a9c-4d2e-bfe7-e7da69443438", "sighting_of_ref": "indicator--2a74ee69-a24c-47fc-855f-bfb12aa0d19d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91294e3c-a1ea-444b-8bd4-4fbe9b9ca6a8", "sighting_of_ref": "indicator--2a74ee69-a24c-47fc-855f-bfb12aa0d19d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd6540a-ebec-44b8-be64-1493b49072cb", "sighting_of_ref": "indicator--c2758119-3dd6-4c1c-894b-2956f5b7d46b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9756bc23-9afe-4314-8632-80611815ab5d", "sighting_of_ref": "indicator--c2758119-3dd6-4c1c-894b-2956f5b7d46b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a953ac13-4e90-4829-8d80-09fc1b1730b8", "sighting_of_ref": "indicator--cf504b9b-82bb-4f73-a4e4-e86ce31d8747", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78076204-f2c7-4843-b5f7-adfd49ab340f", "sighting_of_ref": "indicator--cf504b9b-82bb-4f73-a4e4-e86ce31d8747", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddbc70f-0af6-4db9-88e0-80179bfcc2b6", "sighting_of_ref": "indicator--76d459b7-3824-4f71-924e-00198aaed129", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e8ba4c-7931-4385-b2b4-970dd71dd75a", "sighting_of_ref": "indicator--76d459b7-3824-4f71-924e-00198aaed129", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f341da20-5f03-419f-af2b-2b873136b62a", "sighting_of_ref": "indicator--4a5aea82-090c-4eeb-a0e9-081e72877c0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dfdef0-0520-4bc5-9556-42f47755085c", "sighting_of_ref": "indicator--4a5aea82-090c-4eeb-a0e9-081e72877c0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8274bd4a-ba9f-46ad-ad6a-c48b647b5d7d", "sighting_of_ref": "indicator--170a0043-38ef-44cf-adc9-636d3a315a48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f68e1dd-b318-4ea1-9b17-9c6e0acab635", "sighting_of_ref": "indicator--e9602f62-27fc-4a0a-8bfc-d8e0a9af2578", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fbcde4-6ef1-495f-851f-592f3b536586", "sighting_of_ref": "indicator--e9602f62-27fc-4a0a-8bfc-d8e0a9af2578", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3aa0ff-3f67-49fb-9eb1-7c37963daa34", "sighting_of_ref": "indicator--0ec28645-bea0-4a6f-a06a-92d432c98588", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5e4b9c-dde5-4b19-afce-f97258795f27", "sighting_of_ref": "indicator--0ec28645-bea0-4a6f-a06a-92d432c98588", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f92a141-3370-4b5b-8005-5fa5c3e59df8", "sighting_of_ref": "indicator--a08eaa29-2a0a-4284-9c97-4806dec14a30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a606fcff-ec15-46d8-a333-1ac4096c53c5", "sighting_of_ref": "indicator--324228e6-fe5c-4b90-afc2-8fd068bf8d8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9eaafb-b388-4266-9327-977f76d19511", "sighting_of_ref": "indicator--324228e6-fe5c-4b90-afc2-8fd068bf8d8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d51580-61c1-4add-8e13-092d74a9d52e", "sighting_of_ref": "indicator--f00d081d-62ad-4909-afbd-821ef3d64552", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ef4fca-6584-445e-bcfa-6c3465b4f7e4", "sighting_of_ref": "indicator--f00d081d-62ad-4909-afbd-821ef3d64552", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20620dd-628d-4ee5-9ab2-cdbe8a3667e4", "sighting_of_ref": "indicator--b094faac-4da5-43af-8437-7f7e6a0570a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e3a484-f030-4793-85b7-e8b4ac3d224a", "sighting_of_ref": "indicator--73064877-9a26-40c6-bf5c-d80f67def973", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8606b3-aebb-4975-a844-4ab2d37a4542", "sighting_of_ref": "indicator--73064877-9a26-40c6-bf5c-d80f67def973", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed2feed-31f6-4d8b-8baa-2937a81c8d8b", "sighting_of_ref": "indicator--8c084f46-7bb1-4140-9669-87633e85cef1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115b1369-ca9f-4925-944a-e69be4ce25c4", "sighting_of_ref": "indicator--8c084f46-7bb1-4140-9669-87633e85cef1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f61e76c-c3d7-4604-a534-d6eedecc5cdb", "sighting_of_ref": "indicator--8b5f7baa-6fec-4153-89c8-aba1f19109a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0a715-3079-421c-abf4-a3774c21a2b6", "sighting_of_ref": "indicator--b78b95fb-a408-42fc-8cea-81dd56b4dbb5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5954d1b8-0278-44a5-9007-966218b3ac96", "sighting_of_ref": "indicator--6ce1bd85-1833-4f90-ba2a-b1fcc87828c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62ce157-5801-4836-93ba-fd27e519975f", "sighting_of_ref": "indicator--6ce1bd85-1833-4f90-ba2a-b1fcc87828c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2f6c09-5526-4223-8b6a-397a7feb8690", "sighting_of_ref": "indicator--6ce1bd85-1833-4f90-ba2a-b1fcc87828c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6653ebb-be95-42f4-a997-af8b11b96df6", "sighting_of_ref": "indicator--a1c7d98c-6471-437f-9287-3e1dd81ba536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe18e8d4-4fd4-4e32-a9b9-cd1bb6ec500d", "sighting_of_ref": "indicator--5483abc0-a4f2-4a38-9371-07793f3a9dd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce649bf-86f1-47e1-88d0-c5130aa0761e", "sighting_of_ref": "indicator--5483abc0-a4f2-4a38-9371-07793f3a9dd8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9929fbf-bf75-440b-b104-c5a9337a085c", "sighting_of_ref": "indicator--5483abc0-a4f2-4a38-9371-07793f3a9dd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad9461d-3db8-4da1-b7f3-168037ea5f90", "sighting_of_ref": "indicator--2830930a-afed-4e9f-93d7-3dbf71e91da1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcc2660-ce58-45a6-b92f-f144b3b4f8fc", "sighting_of_ref": "indicator--4d4d5427-c7d7-4980-b3e0-659ca49f78d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54faaa38-db8a-4023-bbe6-b990b390aa51", "sighting_of_ref": "indicator--ebeef855-0748-470d-a511-4deed0f53481", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b82d5ee-e4d8-40f1-9ed8-7d84a5966703", "sighting_of_ref": "indicator--ebeef855-0748-470d-a511-4deed0f53481", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91f0c0b-aee2-4eef-b159-34ae17a1af4b", "sighting_of_ref": "indicator--ebeef855-0748-470d-a511-4deed0f53481", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fc29f5-d405-45aa-b119-6d3b642a385e", "sighting_of_ref": "indicator--27fc9737-889a-4cff-9b36-23f8fcb05bef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5daeefe-e6a8-4176-974f-7bf302c645e1", "sighting_of_ref": "indicator--33c74fd6-a09f-47a9-8b24-266b14b552a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc6b9d3-b8d5-4166-b3ac-caffd5d1d8fe", "sighting_of_ref": "indicator--33c74fd6-a09f-47a9-8b24-266b14b552a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f9fcc1-8cd7-429e-b978-8ccdad3e060c", "sighting_of_ref": "indicator--329d6902-424f-4001-b68b-889572419828", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4888e4-91b9-4ab6-9145-14eb772dc84d", "sighting_of_ref": "indicator--329d6902-424f-4001-b68b-889572419828", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8642fe2-b63f-472f-9964-e5c545cc37f6", "sighting_of_ref": "indicator--329d6902-424f-4001-b68b-889572419828", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f417883-a16e-4082-8243-f4ae22c87377", "sighting_of_ref": "indicator--4bc63a63-ae42-4f7b-9f7c-7a0adc467d5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c2d9bd-fa6b-4c4c-980a-dbade3fc3677", "sighting_of_ref": "indicator--8f372cc2-2a1d-4d31-b3a1-d8a146c002b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46401b34-82f9-48d8-a19f-a4e18d8c3b7b", "sighting_of_ref": "indicator--6a6c2a02-36df-47b3-8320-9d61328c9ed0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01fb1c4-3e99-462c-95cd-8da59c93e701", "sighting_of_ref": "indicator--1e0701f1-b028-460d-be37-bf983184bef7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab53cd0d-55b1-468a-89bb-8beac25d7c05", "sighting_of_ref": "indicator--1e0701f1-b028-460d-be37-bf983184bef7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceed11e-7bb0-4bbe-b5b9-feef008467fa", "sighting_of_ref": "indicator--1acb3d53-f7ab-45fd-87a6-066f237022fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe0fa22-511f-4fcf-93d1-0b94a997f0a2", "sighting_of_ref": "indicator--1acb3d53-f7ab-45fd-87a6-066f237022fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6111e0e-72de-470e-ab99-2c2321a2963e", "sighting_of_ref": "indicator--f95e0909-3f97-487b-b4a9-aaafe66230ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5ef021-5213-45b3-8a81-db21be9bed75", "sighting_of_ref": "indicator--71d9de3a-583c-4524-83df-618dbd7d4fbf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1ade12-6d85-4824-9c9c-ce010b1b6cf1", "sighting_of_ref": "indicator--71d9de3a-583c-4524-83df-618dbd7d4fbf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4775e0-3476-4ce6-9717-338d9fed21ff", "sighting_of_ref": "indicator--62ff9a37-7f94-4497-a3da-d372e001d99d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fe8d35-a919-4609-a1e5-29656d8173a5", "sighting_of_ref": "indicator--62ff9a37-7f94-4497-a3da-d372e001d99d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e8b372-bf6a-4ca1-b8af-3f23e1f9e789", "sighting_of_ref": "indicator--7133ffe5-a38c-423d-85f9-bb584502b600", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5236a14d-0cd7-40db-a5d8-9d8c564370e4", "sighting_of_ref": "indicator--bed6004a-4aaf-4803-a827-1fcecfdafa16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401a8cc3-7d35-4e73-bcb9-0448da43ef72", "sighting_of_ref": "indicator--bed6004a-4aaf-4803-a827-1fcecfdafa16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee840e2-74a8-4660-b886-a87cca6c4d68", "sighting_of_ref": "indicator--cd1b96ea-8d8d-4953-8ca0-118bdba3bc2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f57f6-3ca4-48d5-9465-3bd4d6b8f044", "sighting_of_ref": "indicator--4a18e10d-190a-48ea-9e14-cf9317d81e1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061a397d-ca6d-4d21-9580-bcc9882cf904", "sighting_of_ref": "indicator--4a18e10d-190a-48ea-9e14-cf9317d81e1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551eab97-67da-4c18-a197-b947b13901e5", "sighting_of_ref": "indicator--37878db5-fac5-4942-9ce5-bc9d9099a021", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce023986-a4ed-4030-b029-3f124fb00473", "sighting_of_ref": "indicator--37878db5-fac5-4942-9ce5-bc9d9099a021", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa72a3ee-054d-42fd-a2ca-d8d1010fd9f2", "sighting_of_ref": "indicator--5d298351-9c36-48d1-9da2-4b6ffd33fba1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32e1227-de3d-4adb-91b7-8e4646ef89e9", "sighting_of_ref": "indicator--5bdf1eb7-1e4f-4da0-834c-f8753e2a3d7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b174699e-83fb-414d-9dc9-d62405df3282", "sighting_of_ref": "indicator--97266ff1-b55c-426b-910c-c6b99d0c95a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc11f83-6448-46fc-b852-05d2f369dfe5", "sighting_of_ref": "indicator--c8f236a9-876a-42f9-a273-e9dbdf477a37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8394bca5-493d-4d57-8168-ba92313ff838", "sighting_of_ref": "indicator--2e5aa01b-5b9f-4f98-aad9-000f5b8dfa63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b017732c-42d1-47f0-ab52-f94397cf1942", "sighting_of_ref": "indicator--2e5aa01b-5b9f-4f98-aad9-000f5b8dfa63", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1b56a8-7e6e-418b-89aa-f48c2a654955", "sighting_of_ref": "indicator--92f9781a-8cd2-4ebc-893f-6e7be827bd84", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71ddc25-bc9a-4d66-bd65-a6ca218ec7ce", "sighting_of_ref": "indicator--92f9781a-8cd2-4ebc-893f-6e7be827bd84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a141019-9aae-4f93-b7bb-66846d12fc3f", "sighting_of_ref": "indicator--a39e7a07-ab0c-497d-a93f-634463f74541", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a33d7d-7734-4ac4-b2da-0f5cb7c66d4c", "sighting_of_ref": "indicator--a39e7a07-ab0c-497d-a93f-634463f74541", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfd6363-3a5e-4150-a056-e0f1a46edd29", "sighting_of_ref": "indicator--a39e7a07-ab0c-497d-a93f-634463f74541", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82af2c48-a8a8-4602-bc77-23b5bb4feb86", "sighting_of_ref": "indicator--0cb434f5-64fa-435b-abbd-8881c090a13a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d36050-833a-448e-8cb2-655de8e348cd", "sighting_of_ref": "indicator--0cb434f5-64fa-435b-abbd-8881c090a13a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18372379-6da4-46b9-b0c6-96e80aca225d", "sighting_of_ref": "indicator--b6f808b4-a975-4f67-a58e-5f68ff70be7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06163b06-c2e2-412f-9121-00a2735b0e7c", "sighting_of_ref": "indicator--b6f808b4-a975-4f67-a58e-5f68ff70be7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e03fff-cdb0-4405-bd0d-e9bc200b7f8d", "sighting_of_ref": "indicator--70a7b4d2-67d8-4821-a2e9-42d8ece793e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba7b899-485b-478f-8bf5-23c6690a5857", "sighting_of_ref": "indicator--de7b92fc-e9cb-4e77-84b3-be241d28fca1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d555a2c1-f22e-4f87-8ec0-51d76dd62d51", "sighting_of_ref": "indicator--cec1f9da-981d-46d1-813e-f38c3f17ec51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6857b0-b2f2-4205-89d8-94e7f75c07ad", "sighting_of_ref": "indicator--cec1f9da-981d-46d1-813e-f38c3f17ec51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab7bdab-64bb-4882-a3d7-6cbeac7fba09", "sighting_of_ref": "indicator--458788f9-93d2-42ee-9042-6d5b97032a8e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbb9ae2-a880-417e-afe7-dcec1353cc06", "sighting_of_ref": "indicator--dac323da-464f-4d61-a51c-794e38e79045", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82dd1cc-2e3b-43a8-ac9a-049c95793031", "sighting_of_ref": "indicator--910d21cd-f441-4e2f-9a24-94585733a24e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3c63b4-594e-4fc0-9640-10945edb32de", "sighting_of_ref": "indicator--910d21cd-f441-4e2f-9a24-94585733a24e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfadc637-e680-4c0f-9e61-1762435b6c1d", "sighting_of_ref": "indicator--eeb257a1-2c20-4916-9ac5-33e0d8dc0fad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41805840-a326-43a9-8a18-38597e35fc6c", "sighting_of_ref": "indicator--823cf4ea-0cea-46f2-850d-3f416b26caf1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97128a58-0c17-4c09-809f-3316b4c66aed", "sighting_of_ref": "indicator--4fee89d5-6bb0-4550-962b-5de10da27bc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcb835c-f1ff-49f1-b765-0d0262230b9f", "sighting_of_ref": "indicator--142eb4a7-6a1a-4d67-9ded-6e7a95d5938f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eff998-a878-401c-91f8-7790a2e6e846", "sighting_of_ref": "indicator--142eb4a7-6a1a-4d67-9ded-6e7a95d5938f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95913cc9-2f1f-4531-b334-76412880ff78", "sighting_of_ref": "indicator--da81605b-3e61-463b-941b-e714ec4cad4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41b9538-426d-4d2c-a333-4f9940ac9896", "sighting_of_ref": "indicator--da81605b-3e61-463b-941b-e714ec4cad4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1669cc97-1a46-441b-b020-636c99cce1ed", "sighting_of_ref": "indicator--da81605b-3e61-463b-941b-e714ec4cad4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32995d9-2c02-4f08-86cc-9cf40710ac83", "sighting_of_ref": "indicator--712c1852-6d46-492a-a950-dd2dfbb24b0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b4d08a-c7bd-4f22-ab23-181240a98172", "sighting_of_ref": "indicator--60a89491-3f95-4b6e-8dfc-35ae4f57093b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caebb30c-20be-4de5-9b01-092337ae0447", "sighting_of_ref": "indicator--60a89491-3f95-4b6e-8dfc-35ae4f57093b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c4c1b7-9131-4b7c-b713-66f8e54d6ba0", "sighting_of_ref": "indicator--f2579d47-0c77-433a-8ee6-8223448062ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9017b15e-ebfe-421b-8968-65c406962f09", "sighting_of_ref": "indicator--2e2d2325-8a44-4ce5-856e-81e0fdafa1aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26986985-1284-4d18-84e5-184946ca1aac", "sighting_of_ref": "indicator--448fe2c3-0adb-4418-91ab-41c3d793c7e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c845747a-a7fe-4cb6-85cd-a11bcb2b13ba", "sighting_of_ref": "indicator--85d5cb13-c85f-40ee-b756-e70377bff629", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef14a46d-3f9a-4c2e-90f1-4ed6879d84bb", "sighting_of_ref": "indicator--c438cbc7-4c05-476a-b972-4792cd981af7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7530d60-7243-472f-b6c9-a1fa11c31665", "sighting_of_ref": "indicator--c438cbc7-4c05-476a-b972-4792cd981af7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccc094a-0d03-4813-b241-bad415b8bff1", "sighting_of_ref": "indicator--c438cbc7-4c05-476a-b972-4792cd981af7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29256db6-1e87-4f31-806d-4fe083867c6b", "sighting_of_ref": "indicator--66fe2664-8676-4fa0-ac51-68bc5085d56f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a761a8f-26eb-4139-b595-81096fc7cbeb", "sighting_of_ref": "indicator--9f1ca45f-249c-4b6b-b96f-bee029eac834", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6605ae4-fcdd-485c-8e08-3177e51c86c5", "sighting_of_ref": "indicator--db9bd22c-945a-49c5-bed6-5d62ed8519d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3e7e07-1860-4941-b66f-d6cd1df3d974", "sighting_of_ref": "indicator--db9bd22c-945a-49c5-bed6-5d62ed8519d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48508e21-e851-4486-945e-e991dc66ff7b", "sighting_of_ref": "indicator--db9bd22c-945a-49c5-bed6-5d62ed8519d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5fcaae-7f8d-49b6-b8ac-688a44c5c947", "sighting_of_ref": "indicator--3cbb5fe1-7cb3-4ae0-a030-32a69328459e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8433282a-ce40-4bc2-86da-69a96508b70c", "sighting_of_ref": "indicator--3cbb5fe1-7cb3-4ae0-a030-32a69328459e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d56a621-2202-443c-88ee-de9999122103", "sighting_of_ref": "indicator--0c9fb632-baea-43bf-b7cd-dc749e86f1b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b433c0-7619-44e1-b9e2-051de82231de", "sighting_of_ref": "indicator--0c9fb632-baea-43bf-b7cd-dc749e86f1b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abd06ca-2f56-4d7f-8482-4ba59e35d006", "sighting_of_ref": "indicator--363cf273-be51-4424-9aa5-3b21b80c8ac1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da311f4a-c5e5-4d32-bbb7-18499128d7d8", "sighting_of_ref": "indicator--363cf273-be51-4424-9aa5-3b21b80c8ac1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fd7135-62da-4ffb-9563-08809eb11e0a", "sighting_of_ref": "indicator--30d1a570-8b1f-49f2-835d-e0e1651f77b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34d3a56-a927-4f46-9612-2cdac899ca07", "sighting_of_ref": "indicator--30d1a570-8b1f-49f2-835d-e0e1651f77b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a86476b-a209-4e1f-bfad-1e402db7ae40", "sighting_of_ref": "indicator--30d1a570-8b1f-49f2-835d-e0e1651f77b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb129886-7a43-4718-8113-c27b2d6ab531", "sighting_of_ref": "indicator--0a3ffb20-6129-448a-8e1e-3fba63c727ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23163751-c932-4afc-9225-be612f8f6804", "sighting_of_ref": "indicator--0a3ffb20-6129-448a-8e1e-3fba63c727ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fc8715-fd5d-4a41-b973-ad287d458a87", "sighting_of_ref": "indicator--4141fc19-88f6-4dd0-bec3-11b520ff9a7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80701423-9e69-456c-b98d-c9461da886b8", "sighting_of_ref": "indicator--61496359-1546-47b3-b8e3-bde409e90ae5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6fe979-919f-40f8-bbf2-e8634ecc8cf2", "sighting_of_ref": "indicator--33ad48bd-bdbb-4e73-b579-d927ce2e2c13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3095c75-4fe9-4424-aca3-4a6ab98f6523", "sighting_of_ref": "indicator--33ad48bd-bdbb-4e73-b579-d927ce2e2c13", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ce26a-47fc-410c-ad87-85d42702c3dc", "sighting_of_ref": "indicator--c9e054e6-b2e2-469a-96a0-72bbb4983729", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f93f3-1597-4ccd-8bdb-086de44d8043", "sighting_of_ref": "indicator--b6bcf8ff-46f2-4666-b825-25d2eecec43c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369dff40-09f5-4e8e-93fd-c610b84b7f26", "sighting_of_ref": "indicator--b6bcf8ff-46f2-4666-b825-25d2eecec43c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e94117b-e34c-4ec7-8ec5-1b9f0591bcc1", "sighting_of_ref": "indicator--1b5a0223-27e8-4b0d-9985-e92676a4bb20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7d70ce-ae78-4195-8125-08c1fe38ae27", "sighting_of_ref": "indicator--94dbd8c6-be5b-41c3-92be-42e5aac049ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170aaa55-1199-4ca7-8a2d-7f8dbce77b40", "sighting_of_ref": "indicator--637b4dc5-fc39-4660-84f1-845381763b5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6bc0f5-ea5c-4946-bbe2-89e5451b23ef", "sighting_of_ref": "indicator--637b4dc5-fc39-4660-84f1-845381763b5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d60bb3-6186-4d25-9e03-8d11d13987bc", "sighting_of_ref": "indicator--50132546-3e40-4f6e-a718-a5fa20b265e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fd4cc5-2d5a-42a3-bdc8-a742c35e2798", "sighting_of_ref": "indicator--50132546-3e40-4f6e-a718-a5fa20b265e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643b338e-9b21-4e12-8de2-72aa43e88f6c", "sighting_of_ref": "indicator--50132546-3e40-4f6e-a718-a5fa20b265e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a50454d-119c-458a-b0de-a395dc8d6bcf", "sighting_of_ref": "indicator--868247c2-4169-4074-a334-631aa7060811", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79177238-07e4-4212-8d61-24f08e343ef1", "sighting_of_ref": "indicator--868247c2-4169-4074-a334-631aa7060811", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001667e2-78f9-495c-9bc5-1fc970951d16", "sighting_of_ref": "indicator--ab90a0fe-d0f8-42b2-88e4-1cc61ad59575", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e136d645-8acf-4b40-9ec7-f137782b6331", "sighting_of_ref": "indicator--ab90a0fe-d0f8-42b2-88e4-1cc61ad59575", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35363cef-25dc-4615-b826-7b71f66a0fb3", "sighting_of_ref": "indicator--28fc5048-89eb-4497-867c-15a01a87b986", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606f9a84-4257-40e4-a765-f9ebcbe6e8ee", "sighting_of_ref": "indicator--28fc5048-89eb-4497-867c-15a01a87b986", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108e645c-0dd5-4001-b7a6-d172489e8704", "sighting_of_ref": "indicator--70a81708-0e18-4f26-b67b-0d1521a32cb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5affad-81bd-405b-9250-49ff8dc48207", "sighting_of_ref": "indicator--159085cf-8a72-4722-8fde-f5d8aaa01455", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4085a7-05ce-4777-9c91-cb0e32aab1c8", "sighting_of_ref": "indicator--159085cf-8a72-4722-8fde-f5d8aaa01455", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad967a0-9bb4-4189-8ae2-ada58958a2be", "sighting_of_ref": "indicator--01933ca5-7b55-4550-b1ed-141b2a161594", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef489574-056f-40ac-b746-2b581330b1e2", "sighting_of_ref": "indicator--01933ca5-7b55-4550-b1ed-141b2a161594", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ec980d-a5c1-42f4-8db7-bbde79a65a91", "sighting_of_ref": "indicator--34359a50-f92b-4b82-a1f4-28022b39ae5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4e9841-a485-4610-b25f-cd091eca736d", "sighting_of_ref": "indicator--34359a50-f92b-4b82-a1f4-28022b39ae5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cb167c-2dcf-49b2-8d00-f991b59e5fb5", "sighting_of_ref": "indicator--d469c613-ca87-4414-86a3-ece173e67e66", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09601edc-bb62-4faf-afa3-08657cea34a8", "sighting_of_ref": "indicator--d469c613-ca87-4414-86a3-ece173e67e66", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b11b40-a177-45c9-b92b-08a424da2f79", "sighting_of_ref": "indicator--d469c613-ca87-4414-86a3-ece173e67e66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873cbc6e-937e-4093-bee5-36d314137cd6", "sighting_of_ref": "indicator--fcbd083f-623e-4c26-961e-0518f9914ce1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ecfaee-7786-426c-93cb-1c40bfd780bf", "sighting_of_ref": "indicator--79d1ab12-c8d8-4c18-9d7f-d15c54bfeb97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93f0e1b-23f8-44de-b03a-65c4d5a77c85", "sighting_of_ref": "indicator--79d1ab12-c8d8-4c18-9d7f-d15c54bfeb97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659f0066-a2ab-4380-97a6-e26a6f9aa7e8", "sighting_of_ref": "indicator--73b48479-6abd-4e82-b462-a3e4c74fc7f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cbcc90-1c06-498d-bc13-39edf334a9ea", "sighting_of_ref": "indicator--73b48479-6abd-4e82-b462-a3e4c74fc7f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5018969f-46fb-4968-8651-65f22bd5b7ba", "sighting_of_ref": "indicator--73b48479-6abd-4e82-b462-a3e4c74fc7f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b37470-e9e1-477a-9574-45c0296046c7", "sighting_of_ref": "indicator--c0b0ca2e-c0e3-4bac-97d4-8d0ef507007a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fdec55-a386-4943-adce-f11e5efd80f7", "sighting_of_ref": "indicator--3dec0a40-471d-4d88-965e-000f587b6e65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b6337-2763-43e8-a84e-d606f247996e", "sighting_of_ref": "indicator--3dec0a40-471d-4d88-965e-000f587b6e65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f664d61-eb65-4de0-aa43-f41dd53c3b9c", "sighting_of_ref": "indicator--41240d9c-a69b-4bb3-9c1b-c4865057fbe7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230b763e-f16c-44ea-ac37-1b8d8a10cd87", "sighting_of_ref": "indicator--1d267eb3-a736-4bfe-b748-43e4b478c45e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae00efe-3fec-41a1-811f-35353b33d9e1", "sighting_of_ref": "indicator--1d267eb3-a736-4bfe-b748-43e4b478c45e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b193f4a-3877-4898-9299-7aeaa16e1669", "sighting_of_ref": "indicator--a099bcb0-dd6e-4eea-b53f-298f9c00409a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01ea53b-8370-41cb-a4c3-c8d474deb4ee", "sighting_of_ref": "indicator--a099bcb0-dd6e-4eea-b53f-298f9c00409a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce48b1d1-8d87-48a9-9344-26a34f07cc79", "sighting_of_ref": "indicator--a099bcb0-dd6e-4eea-b53f-298f9c00409a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f591e499-eabb-4b43-853e-507da5ea619e", "sighting_of_ref": "indicator--a1155995-6fac-4245-9ffc-431e62a444ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1f08f6-622f-4bf6-9f04-fec32b88ed95", "sighting_of_ref": "indicator--a1155995-6fac-4245-9ffc-431e62a444ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cf745e-a4f9-48e3-ae33-9188aab28bbe", "sighting_of_ref": "indicator--5f7160a6-0862-47b8-8611-76830d2c0c28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e68b5-4fe9-4c0d-800f-0970bc54f428", "sighting_of_ref": "indicator--5f7160a6-0862-47b8-8611-76830d2c0c28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67c4262-121e-4479-afa2-872c1626c7a0", "sighting_of_ref": "indicator--5c052ae2-7552-42a5-823c-1497454fe6e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2a8ed4-4f4d-41fc-93a4-17dd1d3989c7", "sighting_of_ref": "indicator--5c052ae2-7552-42a5-823c-1497454fe6e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c703d7db-38c3-4a8b-9be3-87c0525d3eba", "sighting_of_ref": "indicator--9d05baea-7981-4880-975f-3792695646aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979e1695-5f1e-4602-a3ba-f005ae63c19b", "sighting_of_ref": "indicator--9d05baea-7981-4880-975f-3792695646aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3e4759-8d83-4b4f-8292-a82f3ae2c03c", "sighting_of_ref": "indicator--f5e417f0-0870-48ec-a479-ce16f3a0d9c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795df456-5daf-49b1-8562-01c7a7cf6836", "sighting_of_ref": "indicator--b12bb432-d623-43b5-8e89-fcbaeeb1de79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e0a1a2-c788-48b2-a2e3-0624082e4385", "sighting_of_ref": "indicator--b12bb432-d623-43b5-8e89-fcbaeeb1de79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf49f0ae-c3bb-4648-9f48-90e3d8b1e61c", "sighting_of_ref": "indicator--da61f9be-57a9-4343-939d-417f59cfae5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0c2a69-46af-4f33-a91f-c1bae930f738", "sighting_of_ref": "indicator--da61f9be-57a9-4343-939d-417f59cfae5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803be6c1-58f4-4c4a-b9ed-cd6aedaf184a", "sighting_of_ref": "indicator--c972405a-d092-4c30-a725-b08581d07aef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0788ca-afc4-48fb-8dbd-b1d1561faf74", "sighting_of_ref": "indicator--c972405a-d092-4c30-a725-b08581d07aef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e6412f-9eb4-4da4-83bb-7678653b5120", "sighting_of_ref": "indicator--c61954d3-abb7-4ef8-b4e8-20f64138cf38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24cdeb5-e3e0-4c76-abfc-25d2f13faf37", "sighting_of_ref": "indicator--c61954d3-abb7-4ef8-b4e8-20f64138cf38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a829b8-d1af-4f2c-a4d4-32912d7ed4dc", "sighting_of_ref": "indicator--4de5a511-bc30-49ed-941a-88523db29332", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b89c1ae-ba5c-4b01-9b7d-fb6558a59165", "sighting_of_ref": "indicator--4de5a511-bc30-49ed-941a-88523db29332", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7724660-0fac-4e08-8388-eebd973ee598", "sighting_of_ref": "indicator--e3a6df71-e94e-4c31-a8f6-9a63a2b73b4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9905b320-e942-4fc4-8cc5-d8351b88444f", "sighting_of_ref": "indicator--0f6b74ee-3bdf-4a03-ac62-d013b8af69f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afc165d-fa5e-4dd2-b4b0-1e10744436e2", "sighting_of_ref": "indicator--fe476bdf-ff8b-4e38-be5c-2d7c0ce7a447", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0f2aaf-a4c4-42c1-bd7d-f4abf8b069d9", "sighting_of_ref": "indicator--fe476bdf-ff8b-4e38-be5c-2d7c0ce7a447", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fda7a8d-2ea6-460e-ab89-3492f4277252", "sighting_of_ref": "indicator--554ecc2f-2c9e-42b9-9a2f-731cb7cf4059", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79038c1-1ebf-407a-99be-d78e0ad1013d", "sighting_of_ref": "indicator--ee156f66-7221-4479-959f-2fbe7adfcf5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa355b-a79e-43db-a98c-51d446e2f1c0", "sighting_of_ref": "indicator--ee156f66-7221-4479-959f-2fbe7adfcf5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffe4489-e0a8-4c6f-b223-35fa0ee1a084", "sighting_of_ref": "indicator--27b2aa04-1849-4b00-b0ab-618b4a2496b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c8cb1-b631-4898-a318-6718903fb3d1", "sighting_of_ref": "indicator--27b2aa04-1849-4b00-b0ab-618b4a2496b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdae69fe-e706-4a3e-bcc1-ecf0b7df1115", "sighting_of_ref": "indicator--8bc73f65-b8f7-476e-bf68-802fb31df222", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668d025b-91a3-4bba-b4b7-1d3883d2c86c", "sighting_of_ref": "indicator--c0af8003-82d5-4b5b-8863-dcf339488966", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cab3a4-fc6b-40d3-bbe3-5346344e50be", "sighting_of_ref": "indicator--9f6ea83e-48d9-49ca-bfc4-e5730507560a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12c7a02-560e-4fc9-ac28-e5178bb04804", "sighting_of_ref": "indicator--c340d327-2ab1-4473-b110-e72501a24dce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d09e741-983a-47f3-be35-132e4fe15e27", "sighting_of_ref": "indicator--c340d327-2ab1-4473-b110-e72501a24dce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682c57ff-bfa6-4f1b-a418-06af92c22f90", "sighting_of_ref": "indicator--c340d327-2ab1-4473-b110-e72501a24dce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e03d97-cedc-4955-bea9-263498983165", "sighting_of_ref": "indicator--1d9a455d-38a7-4589-9957-ca69253ece56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73c6ec9-2e6e-44d8-8a0c-3ffadfa51b4c", "sighting_of_ref": "indicator--f094d2a3-108f-4c1f-a143-68bde112ab56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0207e121-cec8-465b-bf91-87a7955f44ed", "sighting_of_ref": "indicator--b3e33672-9d9f-478f-acaa-fb551780285b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b08e4e-7a24-47f1-bcb5-09b90740d466", "sighting_of_ref": "indicator--b3e33672-9d9f-478f-acaa-fb551780285b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a53d544-f47b-4ac2-be8b-e422038de6b5", "sighting_of_ref": "indicator--3de4605d-e3f6-4a34-8e43-55b7210ef401", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5a0948-7f90-4e2d-9ff5-a2e94f54cb36", "sighting_of_ref": "indicator--3de4605d-e3f6-4a34-8e43-55b7210ef401", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b8c282-40c7-4fb3-8bcc-b4534fb29fe1", "sighting_of_ref": "indicator--6d7af4ff-d39b-4ed4-bbc8-370b8b782a6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb324d5-9c9b-4f43-a4af-16d8bfa53456", "sighting_of_ref": "indicator--9dcf76c6-e556-4526-86d1-3f4b877d2808", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f600b44-de98-4277-983c-fc5ebc5bcc1e", "sighting_of_ref": "indicator--9dcf76c6-e556-4526-86d1-3f4b877d2808", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdac8b8-0469-42fc-a62e-82e168b8620d", "sighting_of_ref": "indicator--3c3c79cb-09a0-4269-a190-ec95638139c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7d50f3-1194-4185-98d8-e1b7e29820b0", "sighting_of_ref": "indicator--f7afacb6-b2d0-4fbe-8dd1-4d858f0490ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff976da9-5077-42d9-a63c-caf89e1dcbba", "sighting_of_ref": "indicator--55070022-b83a-4609-80ab-b97d55f31bd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa941959-74a3-4ec8-b7d5-1dfc6e63821f", "sighting_of_ref": "indicator--55070022-b83a-4609-80ab-b97d55f31bd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29eb2d4-fefd-40c5-88d7-080c51c0883a", "sighting_of_ref": "indicator--b9893cbb-21f4-46e4-b8bf-6be80034f396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a897c8bf-351a-49eb-be8c-21467dfdddd3", "sighting_of_ref": "indicator--4fe8e296-00b8-4fde-920a-326bfb6db29f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cf76da-3425-4bc9-a63f-31a3bdec3f57", "sighting_of_ref": "indicator--918358bd-6248-47c0-904c-96eeb8ecddf8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee4e16b-1b32-4c45-b417-3554d5daf152", "sighting_of_ref": "indicator--b0f42d42-5987-458e-87b6-7554e1ef9d69", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25363a12-6a6f-4644-a8c2-89fdaf5adaf3", "sighting_of_ref": "indicator--b0f42d42-5987-458e-87b6-7554e1ef9d69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec74917-ddc0-40ec-93fd-92df9731329f", "sighting_of_ref": "indicator--f7d0f1a5-53e9-41cc-803d-d8c7f6b60c92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcbfce1-bbd7-4c7f-8c4f-4b1ec2717cb9", "sighting_of_ref": "indicator--f7d0f1a5-53e9-41cc-803d-d8c7f6b60c92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb07f103-490f-4132-b559-d461995c1333", "sighting_of_ref": "indicator--87a3b038-9c88-4736-8374-50f0aba47a49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3325ecfd-c55e-4f52-83de-49fb183d9466", "sighting_of_ref": "indicator--d61219e8-2949-402e-9d8d-5333e45dbd76", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2ebbf7-2d2b-402a-a5d6-b46463695d9c", "sighting_of_ref": "indicator--d61219e8-2949-402e-9d8d-5333e45dbd76", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0bef0e-8b64-4eee-991b-055f587b2ee6", "sighting_of_ref": "indicator--a9961231-2a54-49a8-8589-4c58c89fdf08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574271a0-9b08-4970-a884-5d3d621d10ea", "sighting_of_ref": "indicator--ebb8ea65-2ec9-4ebe-83ce-3620e06fa75a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82e8263-4fd5-4b53-a785-247a264c851f", "sighting_of_ref": "indicator--ebb8ea65-2ec9-4ebe-83ce-3620e06fa75a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d6b67d-1039-47b0-ae68-9dc6412a49c3", "sighting_of_ref": "indicator--196a020e-37b0-405f-893b-77a7778122d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44cea5e-6263-4e92-bb98-469acb798e5f", "sighting_of_ref": "indicator--b2c14d7e-ce4f-4d42-bd23-1559bc6d2388", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e7dec-5086-4601-a906-a13876e39462", "sighting_of_ref": "indicator--a1f2efd1-1945-42df-a117-31def8001a86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d2401c-dc6b-4f6b-aa6b-242b4e3f2c15", "sighting_of_ref": "indicator--a1f2efd1-1945-42df-a117-31def8001a86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567c18a8-7a64-4495-8c15-7b04eebb0d3f", "sighting_of_ref": "indicator--40ff1143-3d03-44bd-a916-574bf66846f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ff6ce7-a283-4615-8a7a-8441dbd27991", "sighting_of_ref": "indicator--f3b63ad1-f1f6-45b0-a59b-bfcd3dcfc131", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6ca7dc-c182-49f5-9ee5-10571b024a6c", "sighting_of_ref": "indicator--5c8b6aac-546f-4830-936c-dd4878e15d80", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc264da7-63c5-4b82-abea-ad4eab26a59f", "sighting_of_ref": "indicator--6c9b8bcd-d8a1-4972-95c2-6e227a05672e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534e6da2-f8db-4382-8f1c-63b3c5270735", "sighting_of_ref": "indicator--6f196f77-8f6a-4aac-89e1-509dd7a5e412", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2088f813-158e-407b-ae2f-f9a6d0f3813b", "sighting_of_ref": "indicator--6f196f77-8f6a-4aac-89e1-509dd7a5e412", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c417c0-483e-4194-ab3f-b393d4126674", "sighting_of_ref": "indicator--6f196f77-8f6a-4aac-89e1-509dd7a5e412", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89109266-b126-45f4-a3b8-6d58874835ac", "sighting_of_ref": "indicator--e2cd2c52-cbf6-47e6-a222-1b8ca390571c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19609f3-8c10-4f13-b682-db42432a5c08", "sighting_of_ref": "indicator--ce64de4a-357d-400f-a569-c69f555e7414", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f42fe2e-d87f-49cf-becb-26fda898dba3", "sighting_of_ref": "indicator--6bf0f277-662d-417b-8ea7-f1296018f783", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f565e5b4-144f-42dd-9491-b3511a98407a", "sighting_of_ref": "indicator--6bf0f277-662d-417b-8ea7-f1296018f783", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec3d113-e3d2-4497-9efc-615289a2114e", "sighting_of_ref": "indicator--b4ad9ab3-9eec-4f96-9360-70b521d5bf10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5cc24-e2e8-472b-8b44-bb9918a03fdc", "sighting_of_ref": "indicator--b4ad9ab3-9eec-4f96-9360-70b521d5bf10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ad82a-cd49-4141-9c9c-80b2782195cb", "sighting_of_ref": "indicator--9a01616c-aac6-432b-b95d-0799d04821e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5507dc73-5102-4c1a-b2fc-79fb8fb66dbc", "sighting_of_ref": "indicator--9a01616c-aac6-432b-b95d-0799d04821e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db077b49-57ea-4ecd-af0a-effa1b4996f3", "sighting_of_ref": "indicator--65eed406-e9c6-4fea-83d0-d3032a702de5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5e9eff-b567-4f17-9943-04a9e762e594", "sighting_of_ref": "indicator--b9cde24a-172e-4076-8247-c49ddb98b9bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c08bfca-a678-43bb-8ff6-46843f295c02", "sighting_of_ref": "indicator--b9cde24a-172e-4076-8247-c49ddb98b9bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f967fc8e-99c7-4ae8-a02b-edd1ff0aaae1", "sighting_of_ref": "indicator--b9cde24a-172e-4076-8247-c49ddb98b9bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d53407b-31d0-4707-a08f-41f6fa23facd", "sighting_of_ref": "indicator--c62adc30-13d6-4e20-bbc3-3cf6aea341ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ec6b9b-0615-4474-8110-75043db78a6d", "sighting_of_ref": "indicator--c62adc30-13d6-4e20-bbc3-3cf6aea341ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033a323d-b457-4f75-8272-918252ca3866", "sighting_of_ref": "indicator--b671bb09-d342-4397-a7e7-4ecccaacb650", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eb09b9-7605-4034-9318-6e85cc3d439f", "sighting_of_ref": "indicator--b671bb09-d342-4397-a7e7-4ecccaacb650", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b73e62d-7886-4ede-a413-893337d04a1d", "sighting_of_ref": "indicator--81d7b485-b145-41e8-855e-f5733cadb722", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ebfb67-6fb5-4c14-9db6-5016261670c0", "sighting_of_ref": "indicator--81d7b485-b145-41e8-855e-f5733cadb722", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7422b71f-9948-428f-bbc8-5e53d783ebdc", "sighting_of_ref": "indicator--1d1c79e4-8de4-4cf1-ad12-33f0ed67e4c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfc7903-ebce-406f-b3b4-77bb439c09d9", "sighting_of_ref": "indicator--04f11695-8734-4f0c-9ea5-06275567e32b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea70abcc-fc2b-4eb7-846c-3ad8426d25fc", "sighting_of_ref": "indicator--3781427e-2520-44c2-9fd3-063ac932b4ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5c3f41-ecb5-4bbf-84df-57a2cfd498ce", "sighting_of_ref": "indicator--e11dac01-40d0-4228-9de7-e0957dd32870", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef54048-a03d-4dd7-abb4-3f3b69771b60", "sighting_of_ref": "indicator--35998386-8976-438b-8ee7-68d6d06f609d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49bb490-e343-4da1-9388-ffed941a15ac", "sighting_of_ref": "indicator--35998386-8976-438b-8ee7-68d6d06f609d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fcbddd-08d6-40d1-a419-bb294b18a8ac", "sighting_of_ref": "indicator--1a2ab69a-340e-4f46-a1cf-127e0563651e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae4d3cc-0361-4819-8578-77c88204799c", "sighting_of_ref": "indicator--1a2ab69a-340e-4f46-a1cf-127e0563651e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf705ec-ebec-43b2-8d2d-3d894aa7cf1c", "sighting_of_ref": "indicator--f2984090-dafd-4772-8402-b351bd3fdf2b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b91af5-b704-4557-9d39-1d9d5c91ac97", "sighting_of_ref": "indicator--f2984090-dafd-4772-8402-b351bd3fdf2b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c7dc2a-3eeb-4e7d-a012-f57dc3de7f87", "sighting_of_ref": "indicator--f509672c-f904-49e2-9aaf-55d0cb8f63e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281d501b-7b1f-4625-ba67-dbd7249d844f", "sighting_of_ref": "indicator--f509672c-f904-49e2-9aaf-55d0cb8f63e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c353735-d258-4724-925f-53f9f30dd13c", "sighting_of_ref": "indicator--d8a844e6-65ad-4ed1-8a22-068b8f0a3e47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9a0938-4a90-4622-8e8b-dfa2c5b91632", "sighting_of_ref": "indicator--96e11c3d-7a79-4f59-9eca-73e73f2aef1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fae4493-3e38-4221-ab4b-b133c7287e4e", "sighting_of_ref": "indicator--96e11c3d-7a79-4f59-9eca-73e73f2aef1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd1b9f1-a5e6-44e4-b34a-b697d42888dd", "sighting_of_ref": "indicator--ae3688fd-722d-4ee0-9366-ae9228acbea4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0f49e9-9f38-4fbf-851c-2dd3300d7895", "sighting_of_ref": "indicator--48705b13-795e-459c-b658-72ba6fe63ddf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d0de61-753f-490a-a57b-95a9cc249af4", "sighting_of_ref": "indicator--48705b13-795e-459c-b658-72ba6fe63ddf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad42910-6f03-4fa1-8ceb-bc1d69b6aae5", "sighting_of_ref": "indicator--097fb962-7a31-4fd1-a4ee-6421cf1aed14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac48d4c9-ba42-44b6-8f61-07112ceee633", "sighting_of_ref": "indicator--097fb962-7a31-4fd1-a4ee-6421cf1aed14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afe72d-dad4-40ec-95fe-d92234b65ad4", "sighting_of_ref": "indicator--ec055ea1-1284-4fbd-b3b9-a589d0fab138", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeec379c-b07d-406a-8bc4-4ef233342ef1", "sighting_of_ref": "indicator--f11db84c-8449-44e6-8d16-867ac242f277", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f425c1-b5dd-440c-886a-ac1177813c41", "sighting_of_ref": "indicator--e304374e-82ca-421b-af5a-22d8d4240d0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef70fbe1-0fa9-4589-ad8b-bd29147d0e91", "sighting_of_ref": "indicator--e304374e-82ca-421b-af5a-22d8d4240d0c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12815efe-8a6c-429b-a9a2-32e6b497162e", "sighting_of_ref": "indicator--4e7f3cbb-02b6-43d7-be23-f8164dbc1e9b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d79c5bf-9bee-4226-aef9-bd04594670d1", "sighting_of_ref": "indicator--4e7f3cbb-02b6-43d7-be23-f8164dbc1e9b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87baa753-0d8a-4736-a1dd-afd08413b022", "sighting_of_ref": "indicator--4e7f3cbb-02b6-43d7-be23-f8164dbc1e9b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c17b3f6-277c-4f01-8b56-0a2021211197", "sighting_of_ref": "indicator--2e997ffe-8668-453b-bcd2-8120bcd9221e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f494d50-1efa-412d-9a5f-6d8a57a63802", "sighting_of_ref": "indicator--a91f3bcc-625b-4426-9900-e64a230b00e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd71863e-6ebc-4d4f-a653-210da75118e6", "sighting_of_ref": "indicator--a91f3bcc-625b-4426-9900-e64a230b00e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0514f3-08c0-4c20-9b20-e39a1e6b8d88", "sighting_of_ref": "indicator--9a71bae5-e0b7-4bbb-9966-6f7bfb5df76f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832d252d-ba6d-48d8-8993-91fe47ce7283", "sighting_of_ref": "indicator--c9c6971b-c518-4569-8102-c97875d07167", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a622ad8f-84be-478e-983e-4ded309b497a", "sighting_of_ref": "indicator--c9c6971b-c518-4569-8102-c97875d07167", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15111656-0294-4add-93d9-bfb4c2830c02", "sighting_of_ref": "indicator--80b7d5e5-9703-4432-b649-72d61fcd0f9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781f8ed6-80ff-4fbb-9e39-e1cecea85305", "sighting_of_ref": "indicator--80b7d5e5-9703-4432-b649-72d61fcd0f9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f44c92d-9502-4dbc-bc98-1295ee3baac6", "sighting_of_ref": "indicator--9a1d3875-a84c-45a1-a536-191c84c7e50b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cd17c7-8c49-419a-b732-0406b724371b", "sighting_of_ref": "indicator--9a1d3875-a84c-45a1-a536-191c84c7e50b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c94e8da-f733-408a-ba57-1203b201946a", "sighting_of_ref": "indicator--9a1d3875-a84c-45a1-a536-191c84c7e50b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f2b877-85a3-4980-8968-91eb9f6668c0", "sighting_of_ref": "indicator--a4c4eac1-fc7f-462b-9e9b-0551e89d0f06", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd9009-633d-4927-a274-f7d63c0f3dba", "sighting_of_ref": "indicator--a4c4eac1-fc7f-462b-9e9b-0551e89d0f06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86530109-48b6-420f-b30d-3af0486d054f", "sighting_of_ref": "indicator--a4c4eac1-fc7f-462b-9e9b-0551e89d0f06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c278eb-060f-4b90-b276-1512eebaf526", "sighting_of_ref": "indicator--44ca37fb-8856-4830-b3c3-53593ae7fdf2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81db889-d62b-4b9b-8969-0b51ec1be084", "sighting_of_ref": "indicator--ba044583-991e-453e-8fb4-324414637779", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a0bfc5-b412-4c8a-a44c-161497bb9eac", "sighting_of_ref": "indicator--331d125e-0b95-4987-82f1-68021389c42f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2ef13-b2a7-42c3-a6e6-4e398be6315c", "sighting_of_ref": "indicator--5a26537e-3254-4feb-a69a-79f78ab52660", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304461ae-47a5-4350-81f4-4d9200b4ead6", "sighting_of_ref": "indicator--5a26537e-3254-4feb-a69a-79f78ab52660", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60618a67-e416-4948-ada4-25761f78e264", "sighting_of_ref": "indicator--3202b775-d0bc-4328-a8a6-4a914cda7955", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92979fae-dcb6-491b-95a7-1465500985a9", "sighting_of_ref": "indicator--3202b775-d0bc-4328-a8a6-4a914cda7955", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35e5c99-b305-45fb-8b15-80d9bc5d549a", "sighting_of_ref": "indicator--3202b775-d0bc-4328-a8a6-4a914cda7955", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f4fc9c-414e-4154-b107-9722a34103d7", "sighting_of_ref": "indicator--ee6c669b-9ff1-4fdc-91a7-d842e2e98ebf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f682422-a7f8-4344-ab70-335ec7b822ab", "sighting_of_ref": "indicator--ec229844-8587-4a59-a607-f722549835e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee24ce4-5be0-4b58-becf-0f7ee8d9dead", "sighting_of_ref": "indicator--ec229844-8587-4a59-a607-f722549835e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258b0e88-9940-40f7-85da-bb8404d313f5", "sighting_of_ref": "indicator--70817fb4-e3ce-4e1d-af55-d5f1224c003e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e1f1ea-456e-44b7-896f-1598613c8ac2", "sighting_of_ref": "indicator--ceed9b14-9eea-4cbd-b6db-f4ffbe51da7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3553fb-9341-451c-aae9-7a8d71d9ada2", "sighting_of_ref": "indicator--82940a9e-75a4-41a5-9aea-c02b236f71ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147da2b0-5516-4030-a067-8c0958c6ba61", "sighting_of_ref": "indicator--43673cc2-2960-4d24-a922-2b19e0353d5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b232fb1-b68d-43e2-b63c-167f6b42529f", "sighting_of_ref": "indicator--b42b5a08-dddf-43b2-8912-d7630d4a97d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafcee06-dad4-4547-9895-be65ee0ff865", "sighting_of_ref": "indicator--3e4de9ed-f375-40be-8c63-c659f1294007", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e383f42-2ee4-4f4e-acf7-9f39e6fc05cf", "sighting_of_ref": "indicator--8cbd51de-439c-4e3f-8e27-c4cd45f0f272", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debfb39f-ea6c-4f7e-8c20-1443b1215cf3", "sighting_of_ref": "indicator--8cbd51de-439c-4e3f-8e27-c4cd45f0f272", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573b33ec-2039-4bd2-a5b5-f63fa738cc2b", "sighting_of_ref": "indicator--8813a875-306f-4a84-9f97-79ce60cacdbe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de986427-1998-4a89-b6e4-862fe2666b22", "sighting_of_ref": "indicator--3b12257c-4fd1-4aff-aaf3-a38ba03f43be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e541544f-739a-419c-9716-012087df5e66", "sighting_of_ref": "indicator--81e4b8fc-d4b8-46ca-814f-4e5ab4602a0c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758dd0c2-2a57-4b42-837b-048f2cf64b52", "sighting_of_ref": "indicator--81e4b8fc-d4b8-46ca-814f-4e5ab4602a0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2dd671-196c-48aa-ae6a-6eacf8a46caf", "sighting_of_ref": "indicator--6f85ea72-1a07-410d-b68c-b7dbd0c69eb7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad791c40-1221-4493-8658-7e0c2223cdd0", "sighting_of_ref": "indicator--6f85ea72-1a07-410d-b68c-b7dbd0c69eb7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0953c1-7755-4a76-b9d6-c1f902fa60f5", "sighting_of_ref": "indicator--7df5a07f-c9ed-43bb-bd41-3de7a7668d88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f521139b-39f6-4c82-8cb1-1d12f470401a", "sighting_of_ref": "indicator--e3e9ffe7-9314-4367-adb1-28427dcc66df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c27fe4-dc45-48f7-a572-16c78509ffb4", "sighting_of_ref": "indicator--e3e9ffe7-9314-4367-adb1-28427dcc66df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752dcf49-e910-48d8-907f-b52b6803c7b4", "sighting_of_ref": "indicator--5cb3be58-5d16-426c-b502-8b1966196f23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d818dec-f2ba-42b0-8fc0-8e66ef3f5988", "sighting_of_ref": "indicator--5cb3be58-5d16-426c-b502-8b1966196f23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c431381e-bacd-4b96-9e78-2484e9bb1479", "sighting_of_ref": "indicator--9a59bdcc-7f9f-4ec5-867a-9d3d1d28589d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b030af-85fc-4b1f-a73a-10bb6c58ca79", "sighting_of_ref": "indicator--3889a2e0-7154-4afc-b911-56a3f86e43c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e5bf34-8c92-4a02-a871-959c45710a5e", "sighting_of_ref": "indicator--aaf1dcc1-ea70-476b-806a-835732460979", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb88aef-7134-47d8-9def-68cd4b0750a2", "sighting_of_ref": "indicator--67162563-454b-43bc-97a9-273ea56b3bb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f381933b-bd8f-4bf6-9bfc-704f63d008d2", "sighting_of_ref": "indicator--3c872969-fe73-45f0-b0e9-db5fddeedf90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2ebff6-9e20-4a08-9557-a6e9cef6dce6", "sighting_of_ref": "indicator--90445957-bc51-4c30-8613-3f2cc26ab021", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda873d-f7a7-4df7-b153-898690f29902", "sighting_of_ref": "indicator--90445957-bc51-4c30-8613-3f2cc26ab021", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d589a2a-e1de-444b-a061-e2f0430b70ee", "sighting_of_ref": "indicator--05bd70d9-d416-45c1-affd-93f61159c35e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89386ef-abfc-4df8-beab-fbe62cfbc4cf", "sighting_of_ref": "indicator--05bd70d9-d416-45c1-affd-93f61159c35e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff867c-e812-4a3a-b501-fbc382dca373", "sighting_of_ref": "indicator--66349690-d690-4f79-a1e8-ca79c6434987", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441e4227-1e5c-4c6b-b63e-6ca643f3561c", "sighting_of_ref": "indicator--66349690-d690-4f79-a1e8-ca79c6434987", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f91205-5ec3-4dee-a395-036de5870f69", "sighting_of_ref": "indicator--66349690-d690-4f79-a1e8-ca79c6434987", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a10466e-e651-40fe-a205-5b61c3c1dde9", "sighting_of_ref": "indicator--78f29a45-328c-42a8-bb6f-0ee33c7664c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08831938-8551-4b4c-b830-6f926b6f99a2", "sighting_of_ref": "indicator--fb2ef2ca-5c16-4841-86ba-71d734eb939b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdb4742-ec0f-4742-a0bd-9055f3218f97", "sighting_of_ref": "indicator--9b733b3a-90c5-4d7f-9d8c-a96947cacd5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f235ac30-dab1-4b50-8a43-2293aecb20be", "sighting_of_ref": "indicator--9b733b3a-90c5-4d7f-9d8c-a96947cacd5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd67392-aea0-4561-a9f4-01261cc3910f", "sighting_of_ref": "indicator--9b733b3a-90c5-4d7f-9d8c-a96947cacd5d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fde501-a697-42b3-9f0f-6b402133b90a", "sighting_of_ref": "indicator--1ff06dd8-772a-44ad-98f8-a08cd0814c2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea553bfb-d035-4beb-9e73-91c028dd7f2e", "sighting_of_ref": "indicator--a83d72e3-fcd1-4fa2-bc45-0708b0812d7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fee3ca-92a2-4ba9-95f6-df974a15654b", "sighting_of_ref": "indicator--a83d72e3-fcd1-4fa2-bc45-0708b0812d7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4004f73d-1b23-425a-bc87-75fa02987706", "sighting_of_ref": "indicator--cff2e151-f608-405f-a645-ec77f5462781", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4be3a7-ce50-41ac-a2df-19181076e35f", "sighting_of_ref": "indicator--cb60125e-f9fb-4463-9f07-e5d50337d403", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53c5b02-9055-438a-b1b7-9bfc8b68bdfd", "sighting_of_ref": "indicator--654734bc-54b6-4b6c-bef2-ff7d63db35e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891a9be4-a7e1-402a-9d55-3c6e6b27ff03", "sighting_of_ref": "indicator--35eae65c-f8df-4486-b15c-53045116ec4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66937e-b127-4139-a149-e9941ef397cd", "sighting_of_ref": "indicator--28859c1e-0406-45ed-a7c7-15bfce7c8d1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac3d388-72ae-469d-9c23-29c85beee7ae", "sighting_of_ref": "indicator--5569b694-1498-4e5c-b2a5-0788d987d396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6857f14-dcc3-4417-9435-f0a73f5aeebe", "sighting_of_ref": "indicator--e23012e9-48b9-489a-8032-684ef9e5cff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1951dfe-772f-41cb-a718-56cb153c0808", "sighting_of_ref": "indicator--e23012e9-48b9-489a-8032-684ef9e5cff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53969334-36ee-4184-bbb4-4c355437a4df", "sighting_of_ref": "indicator--43dd585f-0d07-4f62-9bdf-fc8331ee6dc5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70298509-f11b-4a52-8920-693fdf0f40d4", "sighting_of_ref": "indicator--ed639b2b-a7a2-40a7-ad4d-beceb3669000", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a56afe2-5267-4c18-84c1-14f41b6b5886", "sighting_of_ref": "indicator--92bc3c12-f021-4765-934f-5947993f03ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb297c8-e015-4e5c-bb92-310e8aeda81a", "sighting_of_ref": "indicator--70bf6aa5-aeca-46fa-ae0b-29047ed4dea9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25074e5d-47e6-4929-8da6-8fd7141d10a1", "sighting_of_ref": "indicator--70bf6aa5-aeca-46fa-ae0b-29047ed4dea9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb828f77-8c08-41e3-a9a7-a2df21d3c2cf", "sighting_of_ref": "indicator--5a110f86-66a1-4356-9add-147da0a16cf1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f257cc72-1322-4b5d-9b46-5f7d79142284", "sighting_of_ref": "indicator--3517b0f1-41a1-41c0-bdd5-7df6504623a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf100a7-9e28-4388-882a-1675694ea32d", "sighting_of_ref": "indicator--ca9dcf03-5025-4a71-9001-da1a4eb86937", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a691e06b-9764-46a0-8575-8e629d877bd8", "sighting_of_ref": "indicator--12a6cede-b857-473a-9ac3-6c7542802621", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36de9b-79ee-42d5-a2be-f6e14fdfa07f", "sighting_of_ref": "indicator--855f43f6-070f-4c4b-9634-7d97010f8c55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f3613b-7b73-49a5-93d0-7150a66256cf", "sighting_of_ref": "indicator--2bed2625-d1e5-4b31-9296-e1b7207b9d42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf05fbc-6e23-4d91-b4aa-f140148347bb", "sighting_of_ref": "indicator--2bed2625-d1e5-4b31-9296-e1b7207b9d42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa5c968-7fc8-406d-8f52-207e6c157e2a", "sighting_of_ref": "indicator--97d130da-6b70-4e79-bbb4-7ba33eadd2d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129ee6c1-0707-4674-894b-e63f90aa86e2", "sighting_of_ref": "indicator--35fbdc95-3de2-42d5-b2ee-e89a5fd236d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7288e32e-eb55-4585-b17e-a7b7444b290e", "sighting_of_ref": "indicator--955f6e70-0729-4f68-8eb1-493cccd55f1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7696d117-a550-4112-b531-1821d348c49d", "sighting_of_ref": "indicator--60d25abb-eaa8-4b5e-9ac3-e7dd155ad6c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2a0266-5be1-4819-ad8f-dfab17d94db1", "sighting_of_ref": "indicator--60d25abb-eaa8-4b5e-9ac3-e7dd155ad6c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef7965d-0866-428c-b88a-5cb2d422f994", "sighting_of_ref": "indicator--45bba1ba-5a88-4e25-bbc9-4442d9f97cfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937303ff-e025-4b50-96de-7c9dce7e4426", "sighting_of_ref": "indicator--99ef940c-36d0-4699-ad06-fcc4e4c258fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9d32d2-19f5-453c-bfa0-b0ae3ec36121", "sighting_of_ref": "indicator--bc2e82b7-e918-4589-bfe9-f0a206686f67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596cb551-cba6-40c2-8c08-88939d531f59", "sighting_of_ref": "indicator--ef75d73e-8558-4aeb-ada6-914fb1115347", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2e5f15-e7fc-4662-807c-866ac96888cd", "sighting_of_ref": "indicator--b56941fb-2d94-466a-a30a-0485e9ccc78f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1322f60b-d937-4944-bcdb-8ed53fea8fab", "sighting_of_ref": "indicator--6ad7dff0-ba42-494d-8023-3dc1abc81084", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef024185-4ba8-40c4-982f-b77ecd2e1d1d", "sighting_of_ref": "indicator--1e8dbb1e-d0aa-4fab-8208-1c13044d8680", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e00e73-ef2a-47f2-87ea-be3655fdc73b", "sighting_of_ref": "indicator--eda589c5-e29f-4b24-a690-7c38399734b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bdbb17-7c20-402d-aa0c-af2699b02a3b", "sighting_of_ref": "indicator--eda589c5-e29f-4b24-a690-7c38399734b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee08549-d453-441f-b418-e2d7b0ac246c", "sighting_of_ref": "indicator--eda589c5-e29f-4b24-a690-7c38399734b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade26728-d4db-423e-8d0a-8367dd3f768a", "sighting_of_ref": "indicator--df689c89-8778-4034-b2a7-dbdf689ab75f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13b311e-3dd1-4ae7-a95f-03efddb24c88", "sighting_of_ref": "indicator--a277e187-8780-4f78-98f4-2c148a8c6ca1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5bcbae-cec6-45bb-bd4f-34ae8f9301bc", "sighting_of_ref": "indicator--1153ef5e-1b73-469d-b6de-4ff92f45e808", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e368e39-e9f2-41fa-96fe-26d8f900af47", "sighting_of_ref": "indicator--0bbbaea5-0146-4b0a-9619-3421ca1d9590", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8fb400-4b27-41a1-a2b9-20ee1c2863d6", "sighting_of_ref": "indicator--46d9a067-3e2a-4944-b5ae-527244a11ad5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f225aff-422e-42b7-9d5d-07adb7e14d8e", "sighting_of_ref": "indicator--a377e3a6-d0e1-4a36-a08a-fef41234b19f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0987af02-52e0-4066-adce-f04957283c9c", "sighting_of_ref": "indicator--783c5169-3bb9-4f11-aa7c-9ad6c5946a7f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667e5eea-bfae-4446-bca5-62d8668883dc", "sighting_of_ref": "indicator--d9a3e1d0-097f-4bd3-b940-3bdc98f78d5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f121afea-c0c5-4a2a-beb2-fef17ebc6ed2", "sighting_of_ref": "indicator--3d02d843-7f44-4a80-9dcc-c1edab53e01e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb2f385-36f9-4688-ac70-5b58a272fb7b", "sighting_of_ref": "indicator--cca93158-3db8-4598-8cab-1d59d1ced16b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6c70a0-59fa-4e40-bac8-b4b6ef89348d", "sighting_of_ref": "indicator--9b0d4023-dc2e-431e-ac4a-db1942dc9980", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73daa24e-6e53-45c5-ad14-d550fbbc7c88", "sighting_of_ref": "indicator--91bf19b2-e8df-4a3e-b959-853a8f2f569d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca2e73d-2b4b-4493-8fdf-2eb8b21fc4ab", "sighting_of_ref": "indicator--c68742e4-3532-4666-9035-4de420a1360e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef641240-57ad-4409-8973-9fb1e990b654", "sighting_of_ref": "indicator--040b01d9-c8b9-4788-8298-26acca0a0f70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5779c900-4002-496e-8b30-c6dc26bc62f4", "sighting_of_ref": "indicator--a76cfead-9593-422d-a822-3fafb3d2e74c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caf613b-34a4-41ae-90f8-c22192850063", "sighting_of_ref": "indicator--a76cfead-9593-422d-a822-3fafb3d2e74c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8482e8-c898-41c0-982e-762ae1036b0f", "sighting_of_ref": "indicator--562cc853-92f7-4db7-a897-d3218de1c463", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540c9ae8-6d67-4ccd-8f38-2df532218d22", "sighting_of_ref": "indicator--562cc853-92f7-4db7-a897-d3218de1c463", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2a74e4-602d-4fb3-b082-e0605366827d", "sighting_of_ref": "indicator--562cc853-92f7-4db7-a897-d3218de1c463", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee31b23f-646f-4ba2-ab12-54e1fc175ea6", "sighting_of_ref": "indicator--6f9ad878-f147-40c9-8056-9df9dadae917", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3482a0bd-bf0f-40d2-9a6c-fdd3d9f39f71", "sighting_of_ref": "indicator--6f9ad878-f147-40c9-8056-9df9dadae917", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba037a7a-f0e5-493a-882f-2db52ed76253", "sighting_of_ref": "indicator--6f9ad878-f147-40c9-8056-9df9dadae917", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1d79d4-5615-4502-88df-c954acd181e1", "sighting_of_ref": "indicator--0c7c74ef-171f-4f7f-b78a-0e405a5b076a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed81c28-d124-45e3-8e14-18b516c20d32", "sighting_of_ref": "indicator--0c7c74ef-171f-4f7f-b78a-0e405a5b076a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea6a532-2b66-47cf-98db-cbca76210939", "sighting_of_ref": "indicator--0c7c74ef-171f-4f7f-b78a-0e405a5b076a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb5f407-e935-448e-b78d-f6a71c623396", "sighting_of_ref": "indicator--6b0ffaa7-4756-49c9-8ba0-704666f23deb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e4c50a-df19-4587-92dd-1023fd0d3ded", "sighting_of_ref": "indicator--6b0ffaa7-4756-49c9-8ba0-704666f23deb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babd9201-8c93-4683-ad77-1d8fb729f82e", "sighting_of_ref": "indicator--6b0ffaa7-4756-49c9-8ba0-704666f23deb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839ec4d4-84ff-490e-9ae2-d2be10579690", "sighting_of_ref": "indicator--4b606be6-0a50-467a-a66a-350c9dccb7ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93cd844-633d-497e-932f-a8a41099de5f", "sighting_of_ref": "indicator--4b606be6-0a50-467a-a66a-350c9dccb7ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79e2c2f-8996-4e64-80ea-fbe6d79abf5c", "sighting_of_ref": "indicator--4b606be6-0a50-467a-a66a-350c9dccb7ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f822ee-d2ff-4cee-8d39-5d2918f364cb", "sighting_of_ref": "indicator--d4fff5c3-30b5-46f5-ada2-3026cdb008b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc39b7fe-b544-4040-a13f-c1d40ea32459", "sighting_of_ref": "indicator--d4fff5c3-30b5-46f5-ada2-3026cdb008b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea04ad1-d371-4a36-8b8a-47fad4b7807c", "sighting_of_ref": "indicator--d4fff5c3-30b5-46f5-ada2-3026cdb008b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0d31f7-2d72-4ad2-9793-1e9f1723a106", "sighting_of_ref": "indicator--fcdc6e93-975c-4148-9656-f138147a3afe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fe6c16-9dd5-4930-ac4c-bab5e34e48f4", "sighting_of_ref": "indicator--fcdc6e93-975c-4148-9656-f138147a3afe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7ef67f-b45f-4415-b8f4-56afcca6c188", "sighting_of_ref": "indicator--fcdc6e93-975c-4148-9656-f138147a3afe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038f8fb9-9df2-4d1f-ac79-e1b847a3a793", "sighting_of_ref": "indicator--bcb8867f-efb3-4d58-a6fc-13765d09f9d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a22c5c-59e0-4a81-9f85-4114574472bc", "sighting_of_ref": "indicator--bcb8867f-efb3-4d58-a6fc-13765d09f9d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed3e0c5-026f-41d2-8f71-a548677dd255", "sighting_of_ref": "indicator--bcb8867f-efb3-4d58-a6fc-13765d09f9d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc652257-1053-4166-ade0-8f4c771dc279", "sighting_of_ref": "indicator--83f22c17-c2a3-446c-978f-1eab0eb2843a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f51a7ba-a253-4fc3-b72a-5640fa55ef91", "sighting_of_ref": "indicator--d36a1eea-a109-460b-aaf4-c452f910da28", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db59344b-90b6-4259-a980-c4a4dba59f42", "sighting_of_ref": "indicator--70ecb478-1e0d-4877-87ff-b5328430c942", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe8fcd2-32d9-4a49-a6c0-8ebd70c986ae", "sighting_of_ref": "indicator--a982eefb-8389-4aeb-a054-5c6a38ce9b73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc82ad8-576f-45e8-8b47-b3d6d9416967", "sighting_of_ref": "indicator--a982eefb-8389-4aeb-a054-5c6a38ce9b73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f333be5d-56c7-4cb2-9da6-79d853264b71", "sighting_of_ref": "indicator--a982eefb-8389-4aeb-a054-5c6a38ce9b73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a898d17-cc00-4d2f-b37f-b6cdb86a49be", "sighting_of_ref": "indicator--b108b3ea-c395-42bb-b768-17c6e26a1d73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7586bca3-045f-4e0e-a670-bd7c38290aef", "sighting_of_ref": "indicator--b108b3ea-c395-42bb-b768-17c6e26a1d73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46d5209-8900-4809-b862-ac39317a3b08", "sighting_of_ref": "indicator--b108b3ea-c395-42bb-b768-17c6e26a1d73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f0f25e-7a6f-415f-94f2-a45927d34ceb", "sighting_of_ref": "indicator--e0d51a51-c3a7-4a06-935b-6fe691837e4d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92074420-e3d8-4be4-a944-635fbed5d980", "sighting_of_ref": "indicator--a20098f3-5b12-407e-8ae8-3fd8f3dda153", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a06c7-a583-4c28-90bb-c1d0fd3f234f", "sighting_of_ref": "indicator--f1472566-7f23-4a54-ab45-a6877a75a792", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ce3516-98ca-422b-bf31-8d3336c562ad", "sighting_of_ref": "indicator--f1472566-7f23-4a54-ab45-a6877a75a792", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a629cf-5449-4e58-9579-f3231089fc46", "sighting_of_ref": "indicator--1c53538e-a6f9-4ae7-af1f-e48f5335505f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b514d272-3d77-4ab0-ab1b-09de1b6e6939", "sighting_of_ref": "indicator--17e3f6bc-9f11-40b8-adf2-a0752442f60a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3312845-08c6-4951-b30b-3115db2cfadf", "sighting_of_ref": "indicator--446d5c41-d833-44ad-b7c9-3896bde6f28d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b40795-eef2-4dc7-b1df-b30e657629d1", "sighting_of_ref": "indicator--06471dd4-47b3-4cbc-b143-9ad4ae468325", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cee73c-fbff-442a-a772-f8096cff655d", "sighting_of_ref": "indicator--d0bcd499-dfc1-4755-9ee1-fadf4114cd32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f672b57b-09b6-47cd-bb66-402f57592d9c", "sighting_of_ref": "indicator--5a03ad5e-6238-4acc-8fab-0b40dbd9f561", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed667cb-dee3-4320-a218-8ed8e1e1ecd9", "sighting_of_ref": "indicator--5a03ad5e-6238-4acc-8fab-0b40dbd9f561", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7569184-a48e-4408-ac71-8791efdfd524", "sighting_of_ref": "indicator--5a03ad5e-6238-4acc-8fab-0b40dbd9f561", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20bcf47-dd3d-4d1c-9b4e-1ebddfa998d3", "sighting_of_ref": "indicator--6c4c5e7e-d79d-43b8-9d56-15084578801a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7691f5-cbd1-4e8c-bf95-d99448ecae3f", "sighting_of_ref": "indicator--6c4c5e7e-d79d-43b8-9d56-15084578801a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2240dc-79a0-43b3-9cb4-0882e486a06e", "sighting_of_ref": "indicator--6c4c5e7e-d79d-43b8-9d56-15084578801a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b200b17-dbaa-4554-a216-4bc84983bdcf", "sighting_of_ref": "indicator--abf92f69-c8ba-4cf6-aa1a-c79e91d5afb4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b7edd7-ef46-493d-a554-c56925340d58", "sighting_of_ref": "indicator--dcc919a3-9508-47d6-9ca8-a6200eeca1a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09167e52-66d2-4c82-91af-78740a798681", "sighting_of_ref": "indicator--398ae6d5-1460-4765-815e-d4d3110dfe47", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697f693f-66a7-4fc0-b471-ad2af92aed40", "sighting_of_ref": "indicator--398ae6d5-1460-4765-815e-d4d3110dfe47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e248de1-7f4e-45c6-a6d5-82ced17a4021", "sighting_of_ref": "indicator--398ae6d5-1460-4765-815e-d4d3110dfe47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ad5311-2051-49ea-a67c-6bee11b2a6fe", "sighting_of_ref": "indicator--b8ded5e0-acdf-4f3c-aadd-9db785206f06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3eb30c-7b6d-468b-b538-f72496db1ee2", "sighting_of_ref": "indicator--f191df1f-7b6b-49a4-81ef-cc4870450959", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad414d-04d2-4dba-ad0a-ab21c546ffaa", "sighting_of_ref": "indicator--0ba09058-befc-4c27-8bf5-4280e8a04eff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4777e701-73b6-4e6c-91ef-5d5ff3d6af05", "sighting_of_ref": "indicator--3758db65-06a3-4521-b081-ec119daa6ff3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a128bccc-3713-4679-97c3-514ac0fabbd2", "sighting_of_ref": "indicator--3758db65-06a3-4521-b081-ec119daa6ff3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37137e0c-a2c5-400c-b187-49f590de3a47", "sighting_of_ref": "indicator--3758db65-06a3-4521-b081-ec119daa6ff3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b1322-92fa-4396-9b11-5875b4bd5496", "sighting_of_ref": "indicator--10386527-d07c-4126-8435-e303a2c234be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36221ef8-9f78-4fbb-96de-20c8b3c42c25", "sighting_of_ref": "indicator--10386527-d07c-4126-8435-e303a2c234be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b385e977-9738-42bb-bd10-f7e4567cd951", "sighting_of_ref": "indicator--093b4739-9d09-499e-bec4-a38bb1646a21", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d9d19d-0a3a-4d59-a129-6ca32d481edc", "sighting_of_ref": "indicator--795cba58-09c3-4fff-b385-0780c0da1fa5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56a5bd0-ec1a-4c9f-9701-e9c6004062df", "sighting_of_ref": "indicator--c372d268-dccf-4aec-bd94-56a0d2471cf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d279239-eac9-4852-8cd5-ad5b21217c4e", "sighting_of_ref": "indicator--c372d268-dccf-4aec-bd94-56a0d2471cf4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26b89d9-0a19-4f1f-9622-f36fb44a4352", "sighting_of_ref": "indicator--c372d268-dccf-4aec-bd94-56a0d2471cf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d718e027-db1e-4daf-8a5a-06eea5e2ce44", "sighting_of_ref": "indicator--dba51602-04ae-47a4-af7f-c9fc33540132", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6e46b6-7d84-4bf4-b9ea-9bdb0c3d9c48", "sighting_of_ref": "indicator--dba51602-04ae-47a4-af7f-c9fc33540132", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04804f22-b62c-49e9-b525-70cb8ca088c5", "sighting_of_ref": "indicator--b890a76b-bf2f-46ee-8b5d-1aa8adf6ce90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b31a6-3670-4ed7-a1e7-0e5d45909290", "sighting_of_ref": "indicator--b890a76b-bf2f-46ee-8b5d-1aa8adf6ce90", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374fcdd3-d31c-4200-b288-6f68265ef4fd", "sighting_of_ref": "indicator--00fb9226-bf1f-4343-9519-03af5d421925", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa0d4e-c77d-418f-9573-dc6d38649300", "sighting_of_ref": "indicator--00fb9226-bf1f-4343-9519-03af5d421925", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be758ed-50d5-4e41-ae52-5f2219bc5a70", "sighting_of_ref": "indicator--00fb9226-bf1f-4343-9519-03af5d421925", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cef4928-5c8a-4778-948e-a85e373f1f2c", "sighting_of_ref": "indicator--1efd0b32-0b82-4ac8-8f7e-05e4e95101ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9b7a52-16ad-4b2b-a7fe-1c9c3e99981d", "sighting_of_ref": "indicator--1efd0b32-0b82-4ac8-8f7e-05e4e95101ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e6d7bb-a2c9-48d9-b479-ba5b7e70162c", "sighting_of_ref": "indicator--2bfca665-200d-40f6-a972-aa618aa8e79b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5aaf2e-8e0a-4476-a02e-1c93caef84fa", "sighting_of_ref": "indicator--3cba084e-4566-4d29-b183-cf9b8aac1ad2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc860e97-a7c4-4a73-9f6a-bf36587c77e9", "sighting_of_ref": "indicator--3cba084e-4566-4d29-b183-cf9b8aac1ad2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fea127a-e529-4561-80f0-c41184172e37", "sighting_of_ref": "indicator--4f1f4445-c3e0-4459-a422-7f207163d615", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f49b801-2e2d-4ef1-b7bd-af66952dcf30", "sighting_of_ref": "indicator--4f1f4445-c3e0-4459-a422-7f207163d615", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32f187-e921-42f8-811e-c38cdd9cc713", "sighting_of_ref": "indicator--4f1f4445-c3e0-4459-a422-7f207163d615", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb6a8f4-60f4-4685-90a0-0e721d5afd0a", "sighting_of_ref": "indicator--4d86399e-55e0-44d7-8616-3e255e95729f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae71548d-2514-4b27-99bc-8a0414c49a70", "sighting_of_ref": "indicator--4eccd0a1-90d4-4b15-bcca-53eb2f15fb43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702ed44e-6a57-4a4c-bfff-a24d65c78917", "sighting_of_ref": "indicator--1b2d314f-b791-4091-ad5f-614deed75b4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fffdb5-b063-49d9-8a3f-bc4a3d969f2e", "sighting_of_ref": "indicator--1b2d314f-b791-4091-ad5f-614deed75b4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542414ad-4b28-44f8-bb23-702d8edb38a3", "sighting_of_ref": "indicator--1b2d314f-b791-4091-ad5f-614deed75b4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926876c9-b78e-4256-916b-661582311c15", "sighting_of_ref": "indicator--3af4364a-0450-4c7e-aa01-e4e129ae91b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ff5913-94b6-4b39-b066-c332f219aeb5", "sighting_of_ref": "indicator--c48e5a4f-460c-4634-b478-078ad6ddfd66", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087d8d58-9f37-44c9-b8ef-62dbe0a14346", "sighting_of_ref": "indicator--c48e5a4f-460c-4634-b478-078ad6ddfd66", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a7eafc-6cd1-47c1-819e-ae1a5e86d575", "sighting_of_ref": "indicator--c48e5a4f-460c-4634-b478-078ad6ddfd66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073e22f2-7545-488d-955b-b494cc07e151", "sighting_of_ref": "indicator--9561cbf1-18bf-4166-8cd5-6a9650233533", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bae41e-0168-4645-8b9b-7696b03bd2e3", "sighting_of_ref": "indicator--9561cbf1-18bf-4166-8cd5-6a9650233533", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adef7752-51b0-445c-a9e3-3c144186ee93", "sighting_of_ref": "indicator--9561cbf1-18bf-4166-8cd5-6a9650233533", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1153e5d2-5204-4258-8650-e8e75ea2ec26", "sighting_of_ref": "indicator--1be53f64-d951-4e92-9dd6-049db0b591ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c13a3b-46e2-427f-bd60-b43e824f9727", "sighting_of_ref": "indicator--1be53f64-d951-4e92-9dd6-049db0b591ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed81705-dbc5-4d60-a12a-3fed2fb02fa6", "sighting_of_ref": "indicator--1be53f64-d951-4e92-9dd6-049db0b591ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad79d4a6-253b-4963-971d-601c9df3d06b", "sighting_of_ref": "indicator--3df8ff38-d11f-449e-95af-4115974924be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb893f7-0b2a-4cd7-82e0-c7cef7c2cb3a", "sighting_of_ref": "indicator--f0115ae2-ff59-437d-91d0-cbf76deef18e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512e9535-2645-4485-bfdf-ba2552f60a98", "sighting_of_ref": "indicator--f0115ae2-ff59-437d-91d0-cbf76deef18e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27967e7-45a5-49a9-bdec-fdf6822a4636", "sighting_of_ref": "indicator--8c52afd0-1faa-409e-a649-ddefe22f8b9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f27574b-cfc3-4044-afc2-e717b3712e73", "sighting_of_ref": "indicator--c8535d24-51a9-4d87-a68c-7cca381bfa9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e54737a-4ae6-4921-a009-3af2e2924510", "sighting_of_ref": "indicator--c8535d24-51a9-4d87-a68c-7cca381bfa9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dd1577-3c35-4bb1-bb29-011e075b2a3e", "sighting_of_ref": "indicator--1c35ddad-5ef5-4d79-bcdf-62445d1475f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddb72ac-3881-4cc6-a8ed-f1975e0c0c44", "sighting_of_ref": "indicator--fb50eb7d-5915-438b-9024-d90f44c873a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc39f4f-36eb-4857-bf41-64231deda932", "sighting_of_ref": "indicator--fb50eb7d-5915-438b-9024-d90f44c873a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec66a05-b448-4d26-8912-fb25e5d24817", "sighting_of_ref": "indicator--fb50eb7d-5915-438b-9024-d90f44c873a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923f5551-4e39-46c7-a223-4b55cc5b3afc", "sighting_of_ref": "indicator--405c81c1-d685-4767-9b89-a80d7d6da445", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3e3736-68b7-429f-81f7-b92bcbdf85ce", "sighting_of_ref": "indicator--17e83d27-b48c-4b26-81ff-d2a94a1736a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0c135a-2f01-4bf0-baba-0945077f67bc", "sighting_of_ref": "indicator--17e83d27-b48c-4b26-81ff-d2a94a1736a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe64a18f-c01d-419a-9a20-593c8697ebef", "sighting_of_ref": "indicator--708c04fd-ea3f-4d64-aea1-edbe2c8082f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8968b586-9866-4f65-87af-196889a15272", "sighting_of_ref": "indicator--708c04fd-ea3f-4d64-aea1-edbe2c8082f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a2b2a2-e4b5-4202-a91d-90e1f9206b40", "sighting_of_ref": "indicator--28aa9e85-2509-4380-9c4d-dadcd12a42d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ab56a1-929f-4481-9ac1-06a701206312", "sighting_of_ref": "indicator--a7baecc7-7f0a-4127-89b5-409739a95b66", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cd537c-0dcb-4979-bbc7-1fa013ebf14c", "sighting_of_ref": "indicator--4946a88e-0300-45fb-9d4c-3f348f185445", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0716d76c-f31a-4a78-a78a-8239fc444b97", "sighting_of_ref": "indicator--4946a88e-0300-45fb-9d4c-3f348f185445", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6763407-fe0b-4862-91fc-84fac532b414", "sighting_of_ref": "indicator--4946a88e-0300-45fb-9d4c-3f348f185445", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6970c00e-d6e0-41bd-a1db-a145087d0268", "sighting_of_ref": "indicator--7207b677-fc11-4ed7-a33f-56d31fa8c712", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc05b6b4-9a31-4674-866c-6d0132cdab53", "sighting_of_ref": "indicator--9b7a264d-03df-4b12-a4ed-398d408bf7eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04add09e-29d2-44b9-b314-89f7ae2c1b3e", "sighting_of_ref": "indicator--9b7a264d-03df-4b12-a4ed-398d408bf7eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff355ed-f38f-42e7-8d5e-24aabd322cbe", "sighting_of_ref": "indicator--0c530621-73ee-4ac3-a56c-f92da7d952c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d2d722-f688-40e0-b46c-58ca0740da97", "sighting_of_ref": "indicator--38adb368-724a-4023-9572-28301f292a30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cb13b1-e1ab-4ecc-a26b-45c7d17790a0", "sighting_of_ref": "indicator--38adb368-724a-4023-9572-28301f292a30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e170bf55-8c40-4104-bb76-4154bf2b6cf0", "sighting_of_ref": "indicator--38adb368-724a-4023-9572-28301f292a30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad929871-954d-4833-b4c3-56a334bc3d3e", "sighting_of_ref": "indicator--58985814-2650-43eb-83d1-f90d22a49613", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735a028d-2be2-4fc3-a322-6e3b93c2f926", "sighting_of_ref": "indicator--58985814-2650-43eb-83d1-f90d22a49613", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb7a53a-2b34-434d-a5f2-db0f82d71727", "sighting_of_ref": "indicator--58985814-2650-43eb-83d1-f90d22a49613", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9488eb-c656-4574-98d1-b8e771cb5393", "sighting_of_ref": "indicator--320f5e8f-d719-4e8b-914f-b3b7b1199f7a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1021eb7-ee17-48f4-875d-85eccb56e645", "sighting_of_ref": "indicator--1695c226-7088-44ae-8480-89587cd34f95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e72f8f1-c8a9-4313-8aa1-a7cb65288480", "sighting_of_ref": "indicator--784b903e-35e7-4dfc-9bd2-afa5c67bccc2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a8703d-81f9-49a9-9c61-65599b9b9abe", "sighting_of_ref": "indicator--74c9af45-9f28-46ce-a1f2-800680fd3dcc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e93833-abc4-48ce-9b47-6ee862971508", "sighting_of_ref": "indicator--74c9af45-9f28-46ce-a1f2-800680fd3dcc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c54601d-14d5-41a1-a2bd-bfc52732ff7f", "sighting_of_ref": "indicator--9b986fe0-aa91-4e12-b5c0-9bf459ca2513", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd2a58b-1f23-4bd6-8393-10e1937335ab", "sighting_of_ref": "indicator--9b986fe0-aa91-4e12-b5c0-9bf459ca2513", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde54bc5-bf35-456c-ab59-a0bbe8531305", "sighting_of_ref": "indicator--9b986fe0-aa91-4e12-b5c0-9bf459ca2513", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7583f682-f2a8-48eb-8ba1-4d9e3ffdd264", "sighting_of_ref": "indicator--60a276b6-6f93-4800-b7cc-f9706383944c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73e54ab-2da0-4f38-a1e4-039e80975f13", "sighting_of_ref": "indicator--60a276b6-6f93-4800-b7cc-f9706383944c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7d905e-a7f1-41cc-ac63-15fcfcd672e6", "sighting_of_ref": "indicator--25dff743-a2a2-406e-82d0-85b56db6b6b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b308b4be-27d4-4425-a5d3-7122fa8b6446", "sighting_of_ref": "indicator--25dff743-a2a2-406e-82d0-85b56db6b6b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4365e0a4-b0e7-40cb-a8e5-bcedb8b420c5", "sighting_of_ref": "indicator--25dff743-a2a2-406e-82d0-85b56db6b6b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a081ec-8359-4b9b-bf42-7f3111af28a0", "sighting_of_ref": "indicator--43243222-72ca-4692-b062-7b0c33103754", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f14400-c704-4ca0-8a56-2a20c7ce90e6", "sighting_of_ref": "indicator--7abb4044-8a48-4d73-9308-9d5c6a4935e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407a6541-fd4b-4de8-aaf6-7237e373f537", "sighting_of_ref": "indicator--7abb4044-8a48-4d73-9308-9d5c6a4935e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc83ba0c-63ad-404a-91a0-a7b51e70cdf8", "sighting_of_ref": "indicator--69473849-3ffc-4e63-b69b-a396234f1bf6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf0d3a0-6c3a-4dac-ba30-2fb032cca461", "sighting_of_ref": "indicator--2b498cfe-b4f5-4f97-a24d-6dabcd24ce0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d7508a-ed11-48be-960c-800c13efc74b", "sighting_of_ref": "indicator--0a2de819-da8c-450b-bc59-3c61831adfd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23aa349-7e1e-499a-8006-2e048155e4c7", "sighting_of_ref": "indicator--71a2eaf0-af48-4570-87db-1bdd96474535", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd9f306-cd56-4155-b75d-361abc9313ca", "sighting_of_ref": "indicator--71a2eaf0-af48-4570-87db-1bdd96474535", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd099acd-6a58-40db-bb72-4ce76d7750d6", "sighting_of_ref": "indicator--71a2eaf0-af48-4570-87db-1bdd96474535", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609af2e8-9c84-4546-9ad7-60ab1176c9cc", "sighting_of_ref": "indicator--b57bf737-49bd-4e6b-9687-1b53e1c96b44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7076d0c1-702d-47eb-b940-ed90b9dfb188", "sighting_of_ref": "indicator--85561686-8b49-45ee-b68c-21bb71b57353", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71eeee59-f6d6-4e06-a1d2-7c273dff148e", "sighting_of_ref": "indicator--85561686-8b49-45ee-b68c-21bb71b57353", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c72afb6-5bd7-41fe-a72e-4e066029ac29", "sighting_of_ref": "indicator--85561686-8b49-45ee-b68c-21bb71b57353", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a9d46c-b4a5-4689-ad0d-a96c376e9f34", "sighting_of_ref": "indicator--b0e8e620-093c-46e5-9d0a-b28f63e35ad4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0875c962-8326-450e-9d58-98cf69b3b187", "sighting_of_ref": "indicator--a30dc8ac-eb43-4b50-9a62-bcae0b7e4d64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9dae9f-6f94-4da3-bd64-b66ddad5ce34", "sighting_of_ref": "indicator--a30dc8ac-eb43-4b50-9a62-bcae0b7e4d64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d18ffb4-f6d7-4a01-9505-8267dde9b069", "sighting_of_ref": "indicator--fbd154cf-4b03-4feb-b048-e5f4688d9094", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea936e41-6fa0-4bde-9057-48ee71cfce40", "sighting_of_ref": "indicator--fbd154cf-4b03-4feb-b048-e5f4688d9094", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd3bc5f-1dfb-48b9-8bc0-d823d814f94b", "sighting_of_ref": "indicator--fbd154cf-4b03-4feb-b048-e5f4688d9094", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252415be-797f-41be-9047-e72cfbb3f743", "sighting_of_ref": "indicator--da25fb7d-4a21-4b0d-8bf6-52e5303181c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba47723d-5210-4bca-be82-22a86340cc2d", "sighting_of_ref": "indicator--da25fb7d-4a21-4b0d-8bf6-52e5303181c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa800f19-bdc0-461c-8dcd-e1a2d99495e0", "sighting_of_ref": "indicator--fed6d64d-2360-45ec-bb25-fe0e4453e2e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9ee115-ecae-429b-a06b-0b31ac4bb789", "sighting_of_ref": "indicator--fed6d64d-2360-45ec-bb25-fe0e4453e2e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ae84b6-0c89-41d7-9d69-f51f52102be0", "sighting_of_ref": "indicator--9dedeb77-91bd-498a-bc5a-e4382e7b0bca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a130526-0450-49ea-bb9a-15b1a3405783", "sighting_of_ref": "indicator--ed4c8fdd-e897-4c49-b742-9e51f8db1877", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf939701-0596-4a6f-bad8-bf9c15828e86", "sighting_of_ref": "indicator--dfdd8fa5-0549-4914-b94f-530c34dce66d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02565d4c-9218-4fab-8a73-6f4ec085012b", "sighting_of_ref": "indicator--dfdd8fa5-0549-4914-b94f-530c34dce66d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7b6d59-e1fc-4895-a097-392bead6220b", "sighting_of_ref": "indicator--dd81ed1b-feb6-403c-8806-5b020ea33713", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6418c1-b447-4f6c-b8f3-72cc2b1e869e", "sighting_of_ref": "indicator--dd81ed1b-feb6-403c-8806-5b020ea33713", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18838e4-1cdb-4d35-9388-20c84a6ef1af", "sighting_of_ref": "indicator--b0f8fcf8-7e7f-48b2-8274-14ffc67e0973", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23476877-cfb8-494a-8d91-f8298771b4b6", "sighting_of_ref": "indicator--a4fe2a1d-637c-48e4-a3d7-493a218e3441", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63cf93a-6d60-44f7-9a05-b2cf88365c29", "sighting_of_ref": "indicator--a4fe2a1d-637c-48e4-a3d7-493a218e3441", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3cd557-f27e-49b7-a89c-5f9a6bf178ae", "sighting_of_ref": "indicator--a4fe2a1d-637c-48e4-a3d7-493a218e3441", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad014bab-d5b5-4847-8148-1c545043026c", "sighting_of_ref": "indicator--c00861a1-367a-455a-bab6-8033583400d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ee5106-dfc8-493a-8a70-5106c15fb9ef", "sighting_of_ref": "indicator--432fe988-a93e-4d20-b7bd-e76833257911", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d404d098-e104-4696-9e8c-93b46d3c49ff", "sighting_of_ref": "indicator--70887304-995a-4907-806f-b3391de2a2a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d205c0-c463-4bab-83ac-bf50cdedfda0", "sighting_of_ref": "indicator--70887304-995a-4907-806f-b3391de2a2a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8211968-eaa2-4975-9699-406eb92546ae", "sighting_of_ref": "indicator--f6832a80-dbbe-43bd-917b-eda3aa092cdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd37839-808e-4c54-8a8d-f6783d463711", "sighting_of_ref": "indicator--9f3f046f-e325-49d0-8e3c-854a787644d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f811391a-918c-4b50-b4ba-4535056e806a", "sighting_of_ref": "indicator--c08cd64c-a825-41cd-ae95-00a4194f953d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c73d70-0773-42c1-9d93-2038dd74bbf3", "sighting_of_ref": "indicator--79b34f9b-d6f6-4a4f-8e06-88c7f3a31e1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d765f14-c31c-4b29-85af-f7a5ecb21e67", "sighting_of_ref": "indicator--79b34f9b-d6f6-4a4f-8e06-88c7f3a31e1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb59c1c5-a709-47e0-95de-b632e9ada279", "sighting_of_ref": "indicator--79b34f9b-d6f6-4a4f-8e06-88c7f3a31e1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e06c23f-af29-433e-b02e-39508a9a6747", "sighting_of_ref": "indicator--5d0b35e7-a515-4e58-b110-397346bb7cef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0858a795-43e3-41df-9687-e87b8da08307", "sighting_of_ref": "indicator--5d0b35e7-a515-4e58-b110-397346bb7cef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e8ff0d-4057-4794-85f2-75b6714c51e3", "sighting_of_ref": "indicator--d6d0feb3-70e9-4350-a621-d29526942940", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c50a05-3da4-4f12-a017-652efcda45bf", "sighting_of_ref": "indicator--4ccb9c9d-dfa6-443f-8a2b-f8349ab99381", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b315522-bf80-4673-8d56-afe112d05449", "sighting_of_ref": "indicator--4ccb9c9d-dfa6-443f-8a2b-f8349ab99381", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72b4358-be86-4839-9f3f-10bd3c1b950b", "sighting_of_ref": "indicator--4ccb9c9d-dfa6-443f-8a2b-f8349ab99381", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c02ec-7399-4916-932f-49e7ec4bb975", "sighting_of_ref": "indicator--e827701c-878d-42bc-aec8-03c1751a6a68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1159c55a-bdb9-47e9-812f-1284aeac9e09", "sighting_of_ref": "indicator--e827701c-878d-42bc-aec8-03c1751a6a68", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215ec12c-2924-40b2-a0c0-54b93a392384", "sighting_of_ref": "indicator--e827701c-878d-42bc-aec8-03c1751a6a68", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8837c8-867e-45cb-a283-8188bedbecc5", "sighting_of_ref": "indicator--aa9de8e3-f620-4355-a588-4772e9d12ca1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01def8ed-ca19-4aab-9fcf-f86f1c1bcb80", "sighting_of_ref": "indicator--aa9de8e3-f620-4355-a588-4772e9d12ca1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c26b667-4d0a-4444-af19-9c37ac0b9b49", "sighting_of_ref": "indicator--aa9de8e3-f620-4355-a588-4772e9d12ca1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fe791f-c892-423b-a025-76ddde31e864", "sighting_of_ref": "indicator--5ab9e9ef-7b88-4136-a28b-86a615f06dc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6b293f-52f5-4f23-8e95-056bed1791b3", "sighting_of_ref": "indicator--5ab9e9ef-7b88-4136-a28b-86a615f06dc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebf6c67-324a-44fd-8296-9e13b26bcdf2", "sighting_of_ref": "indicator--5ab9e9ef-7b88-4136-a28b-86a615f06dc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c059a1a3-5345-49d6-bbe2-0350151489bb", "sighting_of_ref": "indicator--6614d40a-4d66-43c3-b6de-fdce0d5a7253", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6f8948-bb76-485e-a890-315c04abde55", "sighting_of_ref": "indicator--6614d40a-4d66-43c3-b6de-fdce0d5a7253", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d4f78a-2220-4234-9c68-e9b6264e9c4a", "sighting_of_ref": "indicator--6614d40a-4d66-43c3-b6de-fdce0d5a7253", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1515e09-fa29-4efa-8268-403c18edd371", "sighting_of_ref": "indicator--ea825ae9-1160-4c30-9b77-9a10bfc1f33c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7cd703-72e1-4f39-b322-9c0e70cdf6bc", "sighting_of_ref": "indicator--d1c58e7c-e95c-4db2-b376-fcf7928bdda4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a989404e-0392-4e54-8201-363fb6bbb277", "sighting_of_ref": "indicator--d1c58e7c-e95c-4db2-b376-fcf7928bdda4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac0a237-a413-4553-be39-0fe0f0af493f", "sighting_of_ref": "indicator--d1c58e7c-e95c-4db2-b376-fcf7928bdda4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8b0592-4619-46b9-870e-ec367332a54f", "sighting_of_ref": "indicator--2763d563-e7d9-4f98-a3c4-944f3e4c5295", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e47bada-ed7e-432c-8d11-01f26f855999", "sighting_of_ref": "indicator--2763d563-e7d9-4f98-a3c4-944f3e4c5295", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47cbf2-f168-4297-97c2-053b6596b152", "sighting_of_ref": "indicator--2763d563-e7d9-4f98-a3c4-944f3e4c5295", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2659123f-f5e0-48b4-80cc-1edef3b603cc", "sighting_of_ref": "indicator--b0b4a8d1-6af1-4427-8b44-f968a0430e73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d91e36-a121-47a4-a1dd-5c3abfa1a3c4", "sighting_of_ref": "indicator--0b21d001-fc1f-42b1-a93d-5c73630b3ff8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1018b81f-0251-4d69-8b41-e9dbda5735c4", "sighting_of_ref": "indicator--0b21d001-fc1f-42b1-a93d-5c73630b3ff8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29b3be6-0628-49a1-be48-ebf94e2828c8", "sighting_of_ref": "indicator--0b21d001-fc1f-42b1-a93d-5c73630b3ff8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99c56fd-8ecf-45e4-b84d-8d9dccacc784", "sighting_of_ref": "indicator--ad0cb95b-b568-4e6b-a9ab-bdc3028867c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852a891b-ddcb-4db2-971f-267c4a803609", "sighting_of_ref": "indicator--ad0cb95b-b568-4e6b-a9ab-bdc3028867c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d8b5dc-a34f-4e2c-8fbf-019a542224af", "sighting_of_ref": "indicator--ad0cb95b-b568-4e6b-a9ab-bdc3028867c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639a2283-fc67-462e-819a-57e66111a244", "sighting_of_ref": "indicator--8a8bcee6-3c27-4c29-8018-988dbf95c577", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2998c9a-10fa-4ea1-805b-589e240875a2", "sighting_of_ref": "indicator--8a8bcee6-3c27-4c29-8018-988dbf95c577", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cd77e7-102a-4eb5-adc7-91febdf2c428", "sighting_of_ref": "indicator--8a8bcee6-3c27-4c29-8018-988dbf95c577", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b94e2f-f2cb-472c-8943-adb2de5a14bf", "sighting_of_ref": "indicator--a3e16446-0f0d-4781-a87f-4713a45af9c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9264d206-28c0-4272-a5a2-af9b7e91d93b", "sighting_of_ref": "indicator--a3e16446-0f0d-4781-a87f-4713a45af9c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be94341a-bde9-4fb2-b348-652979b31981", "sighting_of_ref": "indicator--4cfbbe60-9af9-4b3e-a479-e9749d169c38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b84c5f-955f-4972-bc56-b443c7b5fe94", "sighting_of_ref": "indicator--4cfbbe60-9af9-4b3e-a479-e9749d169c38", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6c004e-d381-4cd8-bd76-7e87115099fc", "sighting_of_ref": "indicator--4cfbbe60-9af9-4b3e-a479-e9749d169c38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fc4728-0262-4a30-8bb1-3a6cc82ecd39", "sighting_of_ref": "indicator--937bdc30-debe-42e1-8075-8eec1cf9bf6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c8eb60-cb0f-4212-8afe-fc521929f652", "sighting_of_ref": "indicator--937bdc30-debe-42e1-8075-8eec1cf9bf6e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8378c0bf-5f11-46ca-9af0-dd397d5bc5c8", "sighting_of_ref": "indicator--937bdc30-debe-42e1-8075-8eec1cf9bf6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246bb40d-aa74-4a30-95d0-23c6ed5521c6", "sighting_of_ref": "indicator--09b20fec-4542-4bd4-acfc-1a16a6ec495a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c916c32-353c-4d54-b079-8576475b068d", "sighting_of_ref": "indicator--890cbd98-74be-4e1c-b256-a28c062fa86d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ac36be-e2db-413d-8db3-df013e788266", "sighting_of_ref": "indicator--890cbd98-74be-4e1c-b256-a28c062fa86d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdda012-c0f0-4762-ad5b-bb25efe75641", "sighting_of_ref": "indicator--5df1ad7c-3231-4458-baaa-7efc441cb44c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6621cd0-c00b-4272-b32b-1693d6381238", "sighting_of_ref": "indicator--0b52ce89-f133-434a-8d07-346fb73abdec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93362e1-a902-4867-a2f7-5d5e36857abf", "sighting_of_ref": "indicator--fe9d6c34-ae51-4dcd-9290-f0975b40f8aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030ccffc-f3f9-4f22-af91-6212ca2438f4", "sighting_of_ref": "indicator--fe583d75-1073-4187-a608-980d788fbc0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4437f0b-87c1-48a7-8f49-82b9658c422b", "sighting_of_ref": "indicator--47be18b9-28f2-417a-8c59-6f2138286009", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3d1557-8521-4ff3-b4bc-2de0332a7f10", "sighting_of_ref": "indicator--47be18b9-28f2-417a-8c59-6f2138286009", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f96261-b792-4bc2-a6bf-2490a8c44e54", "sighting_of_ref": "indicator--637d52ae-c11f-4f25-bbee-68f1e9703e0c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b60d5b-5a54-4d0d-ba54-3dd6d4310d6e", "sighting_of_ref": "indicator--637d52ae-c11f-4f25-bbee-68f1e9703e0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c49ac4-adf8-4a02-9039-b69cadb7d41f", "sighting_of_ref": "indicator--00b8dc2b-ba5b-4634-a142-74a515552601", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594140d3-0cb3-40c7-b0e3-7c60ccc8b94f", "sighting_of_ref": "indicator--acc774b7-2ff3-464d-bfeb-f30870a2a5d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad42c435-a470-4ef0-b3ab-11e4756b9e93", "sighting_of_ref": "indicator--952d8a98-71c7-4f3d-b36d-bd9a1d724fa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b9994e-c493-4bd9-b87f-f4372104dba7", "sighting_of_ref": "indicator--952d8a98-71c7-4f3d-b36d-bd9a1d724fa5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617bb1b1-ed93-452f-806c-e615b67083a3", "sighting_of_ref": "indicator--0d543486-fb1f-4cf7-8d62-77ca0e5f74a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d77043-2710-41fa-8058-6ae39192ebd8", "sighting_of_ref": "indicator--0d543486-fb1f-4cf7-8d62-77ca0e5f74a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7f7e79-00c3-415c-8493-ac8c86b9f8b2", "sighting_of_ref": "indicator--0d543486-fb1f-4cf7-8d62-77ca0e5f74a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b287457c-667a-45a6-a3fa-c223002b46d6", "sighting_of_ref": "indicator--69702d3d-f81f-461e-95a3-bfffc9d3396d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b613e5-9e97-4914-8ed2-de4076c3336a", "sighting_of_ref": "indicator--69702d3d-f81f-461e-95a3-bfffc9d3396d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e91c604-69be-43c4-90c9-59df2cb963c8", "sighting_of_ref": "indicator--69702d3d-f81f-461e-95a3-bfffc9d3396d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a0dc10-885c-4b5b-82fd-21a4085c3ec2", "sighting_of_ref": "indicator--53b69936-54f6-477b-a8dc-04182acf09c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d12fb-2ef6-4e02-860b-0c21aaf6e891", "sighting_of_ref": "indicator--53b69936-54f6-477b-a8dc-04182acf09c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc23f0f-c5ba-4849-983c-138ae05dffe8", "sighting_of_ref": "indicator--6c65a79f-8f7d-480c-8aea-d080de4df073", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c488bf71-3b82-4d26-9ac1-61ea2f3a9a4a", "sighting_of_ref": "indicator--844e5f59-db84-4784-b26f-e132094d6095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a15b1b6-3dba-4f7e-8f6d-519209f59593", "sighting_of_ref": "indicator--07a044b2-8d7a-473c-9def-66ea2ba62fa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35591831-5556-4d8b-a410-067d958e4e86", "sighting_of_ref": "indicator--3e36028d-fcd2-411a-9c4f-3d2ca8d38ea1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a69024-b7d0-4513-89d9-e663bfc75d0b", "sighting_of_ref": "indicator--3e36028d-fcd2-411a-9c4f-3d2ca8d38ea1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898c9f3f-a140-4d27-86d1-efc37c4ac6fe", "sighting_of_ref": "indicator--ddd07d2d-c69d-47e8-9486-84e0e680634a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b5f6f2-2ebc-4871-95bf-314f6412ab9e", "sighting_of_ref": "indicator--ddd07d2d-c69d-47e8-9486-84e0e680634a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c444864-067a-4a64-9dd2-6cac39eccd61", "sighting_of_ref": "indicator--a30b134c-fb30-4074-abc8-f14f886387cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985dea59-e33b-4da7-94dc-1df87fa143ad", "sighting_of_ref": "indicator--f70a5e20-7fba-40f5-942f-fc5d728a7add", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0f61d5-8a2f-4d2a-ac64-1379769c6bae", "sighting_of_ref": "indicator--f70a5e20-7fba-40f5-942f-fc5d728a7add", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d974006c-0249-4982-a976-8808a614bdfc", "sighting_of_ref": "indicator--f70a5e20-7fba-40f5-942f-fc5d728a7add", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368fac86-9d55-4058-97eb-20f6d40c1088", "sighting_of_ref": "indicator--1bf41b4a-43e8-4a84-a874-3db90a2c2b78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25bee3c-deb3-4cb6-b86c-9c39a7f72a12", "sighting_of_ref": "indicator--1bf41b4a-43e8-4a84-a874-3db90a2c2b78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d621efa-4199-4046-80a3-1556cd287bed", "sighting_of_ref": "indicator--1bf41b4a-43e8-4a84-a874-3db90a2c2b78", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0443bd-e8d8-434b-b465-4b8414a55791", "sighting_of_ref": "indicator--08bd6a97-bbb9-4270-a6bb-48a7db6c110d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2cab07-577d-42c7-86c8-2606851a0471", "sighting_of_ref": "indicator--08bd6a97-bbb9-4270-a6bb-48a7db6c110d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9128cb5a-8c56-4e75-b2ed-f14052db2014", "sighting_of_ref": "indicator--5caaf122-6d61-490e-b2e5-5c2a76212217", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cd55a2-3cba-49cd-beed-0264be561d3a", "sighting_of_ref": "indicator--5caaf122-6d61-490e-b2e5-5c2a76212217", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3199ec3b-09d2-4367-93d1-013698f0df3a", "sighting_of_ref": "indicator--c2a80104-facf-4350-8f00-6e6978aaefad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82b8e66-cb2e-4297-944a-a9df5bcff980", "sighting_of_ref": "indicator--c2a80104-facf-4350-8f00-6e6978aaefad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6e9ea0-191c-4d20-8f36-73f08be1897f", "sighting_of_ref": "indicator--c2a80104-facf-4350-8f00-6e6978aaefad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9734f7-1058-4fd3-85fe-7addd1135365", "sighting_of_ref": "indicator--d04e8013-6a81-4f22-a389-2d683d90d519", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3671003b-9412-4bc1-ae1d-3b7f3e4ace11", "sighting_of_ref": "indicator--d04e8013-6a81-4f22-a389-2d683d90d519", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a112e38-51f6-4eee-8cf0-b57e3515d3bc", "sighting_of_ref": "indicator--d04e8013-6a81-4f22-a389-2d683d90d519", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e604e4ed-d538-44ec-a800-16a6bb27dcdd", "sighting_of_ref": "indicator--2acbd8bc-1e8f-4b28-83fa-797eed05fa2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d24f322-0548-462a-a7fb-daa5ecc998a6", "sighting_of_ref": "indicator--59bab628-f0ed-4d51-9408-bb7242b0d03f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106a233c-9d37-4620-9388-7ce7838b5dfa", "sighting_of_ref": "indicator--24a4bd84-a76f-49c0-84c3-f4937cada540", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58b0726-4e21-47aa-8601-9a49c01ec803", "sighting_of_ref": "indicator--24a4bd84-a76f-49c0-84c3-f4937cada540", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b8cb6e-5633-4e5d-9e91-f0416fa01172", "sighting_of_ref": "indicator--24a4bd84-a76f-49c0-84c3-f4937cada540", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0694e1-3ffe-44ad-a98c-ea13803b4c87", "sighting_of_ref": "indicator--a0477ba4-4b4b-45b4-9ad1-399104855ab9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a021937c-429b-4f4a-aef9-226f7b5c7711", "sighting_of_ref": "indicator--a0477ba4-4b4b-45b4-9ad1-399104855ab9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4597e96e-efff-4f60-a4f4-95c8de49d5da", "sighting_of_ref": "indicator--a0477ba4-4b4b-45b4-9ad1-399104855ab9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e4dbd5-a515-4da7-9e77-3af0771a056f", "sighting_of_ref": "indicator--70446fee-cc89-48b8-b299-78272aeef42b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbedfe5-86e9-4e53-b93a-51b182862f6e", "sighting_of_ref": "indicator--3cce11cc-d05f-4ed5-be8c-67bf21f5e3cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a92d7c5-ad20-4be1-942a-29cd39723c00", "sighting_of_ref": "indicator--5695b87c-b616-440d-9594-d587347db025", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9f1897-27be-410d-9467-e73f0412adb0", "sighting_of_ref": "indicator--3cc5b06e-0b47-43fd-8047-fbdd4b19a39e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3a4195-4a65-4e97-8c47-78de5405c743", "sighting_of_ref": "indicator--29161617-0d20-431c-aea5-045f2810ff45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3758ca8-458b-4d5f-9827-8c660876ffc5", "sighting_of_ref": "indicator--29161617-0d20-431c-aea5-045f2810ff45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a6b20-0e4e-48d0-bf04-b1f0140576d6", "sighting_of_ref": "indicator--21f2b237-5e16-469d-b5a9-12e97faa7952", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be51b84e-fa80-417a-b1e0-78bb36ee3aa9", "sighting_of_ref": "indicator--21f2b237-5e16-469d-b5a9-12e97faa7952", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca64ded-5254-4159-acc3-16aa0ebd10f3", "sighting_of_ref": "indicator--21f2b237-5e16-469d-b5a9-12e97faa7952", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12859598-af23-4246-8582-524d52516c1e", "sighting_of_ref": "indicator--16741a34-2ad9-4f0c-b89d-927c5f4b33b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c8c64a-8bb8-44a3-ada1-454b022dc4c8", "sighting_of_ref": "indicator--b73ef452-7c67-425f-a755-1a8fd1f74dd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243ecf72-7ced-4f0e-9fc7-abeeb70a77a0", "sighting_of_ref": "indicator--e3b5646c-28fd-4c75-b7f6-87565dec3e0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3344148f-9acd-427b-8afe-932ce1379809", "sighting_of_ref": "indicator--e3b5646c-28fd-4c75-b7f6-87565dec3e0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd22b6b5-b18e-44db-9146-b3ac44ceb4f1", "sighting_of_ref": "indicator--e3b5646c-28fd-4c75-b7f6-87565dec3e0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba2140b-c66b-4d4b-a6f1-8da398b089f1", "sighting_of_ref": "indicator--72d1a464-51f6-4b49-9b39-0a8844a7d508", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b78e765-9c94-4a93-b42b-a627037acc7c", "sighting_of_ref": "indicator--9294d5c3-ebec-4540-9d7e-5309afee6c00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346c511f-04bb-427c-a5e7-bc87a9595f65", "sighting_of_ref": "indicator--9294d5c3-ebec-4540-9d7e-5309afee6c00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a6276d-7a33-496d-974a-b8c7326e732c", "sighting_of_ref": "indicator--9294d5c3-ebec-4540-9d7e-5309afee6c00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e66453-26b1-4ea6-9015-76684d53dda3", "sighting_of_ref": "indicator--a879e5f6-3643-477b-bf6a-64ebe3716f78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44120952-2402-4391-b746-05564ea6428c", "sighting_of_ref": "indicator--8b4eb8cf-b353-4aaa-bcb6-dd65715f6130", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621fe943-9a8a-497e-832b-f88e18198873", "sighting_of_ref": "indicator--8b4eb8cf-b353-4aaa-bcb6-dd65715f6130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cba9b4c-3e95-43de-a6d4-819623707278", "sighting_of_ref": "indicator--8b4eb8cf-b353-4aaa-bcb6-dd65715f6130", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b206e51-f2df-440b-b0ce-24758379e8f1", "sighting_of_ref": "indicator--66a4e730-f5d8-4933-8b4e-ac3623cfdde9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a5d52b-7eaf-492b-9dc9-1f72bef7df29", "sighting_of_ref": "indicator--a14a999e-c7ce-4eac-b5d3-ccb6b0fee7a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a7289e-bef6-44df-bfb4-fdea5a66fdda", "sighting_of_ref": "indicator--5a67e1de-b014-4e5c-81f4-43fe5fbe8eb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f10c4e-c429-4ed7-9dd9-7d0eaee5d250", "sighting_of_ref": "indicator--5a67e1de-b014-4e5c-81f4-43fe5fbe8eb9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c4b850-cad9-4fae-930d-78328934b86e", "sighting_of_ref": "indicator--5a67e1de-b014-4e5c-81f4-43fe5fbe8eb9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c21e9b0-ebe2-435b-b25e-98d44e5dee3a", "sighting_of_ref": "indicator--2892b66d-08ac-4461-b475-38b1a666ed99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23bfec9-f849-4d33-9705-4c60182f54de", "sighting_of_ref": "indicator--2892b66d-08ac-4461-b475-38b1a666ed99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96e0149-2834-47f9-95a1-904fb0c99d55", "sighting_of_ref": "indicator--2892b66d-08ac-4461-b475-38b1a666ed99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab37842b-51a4-4ec3-ae44-d6167a56f040", "sighting_of_ref": "indicator--a4748d82-64f3-44da-b0c7-ff0f28eccb86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e52ff51-a3e1-4df4-b723-091f6df08613", "sighting_of_ref": "indicator--a4748d82-64f3-44da-b0c7-ff0f28eccb86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a739dee-44b9-4165-994d-be07d523d4bb", "sighting_of_ref": "indicator--aeae6cec-7e01-4e70-8924-c368a79e961d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9357204e-20a2-4d0b-aa39-946eb3e1db83", "sighting_of_ref": "indicator--77e59026-676d-4acd-91d5-00fc1ff83ef7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b330406-e21d-4be5-863e-7a89561604cd", "sighting_of_ref": "indicator--a145380f-af13-45b3-bb69-46f4ecc905b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c15db9-21eb-487e-8771-0508b863ac11", "sighting_of_ref": "indicator--43cfeb3f-25f0-4f5c-8a63-b17c33c8d988", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e628b9f-634a-4880-ba6f-beac78689ef4", "sighting_of_ref": "indicator--7e4dcba3-9a7e-4ad2-8655-f9f29deaeeee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab36456-4551-456c-aedb-08d5ff2a3a47", "sighting_of_ref": "indicator--7e4dcba3-9a7e-4ad2-8655-f9f29deaeeee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ac8b52-ea06-4366-b8c7-8f4b7eb249cf", "sighting_of_ref": "indicator--7e4dcba3-9a7e-4ad2-8655-f9f29deaeeee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e19590-0cb9-4592-aead-25f6cef04cb2", "sighting_of_ref": "indicator--3f23db75-70bd-4031-b191-e2e00d2e1e84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cecc125-5c5d-4aa8-a3f1-83d480050ec3", "sighting_of_ref": "indicator--ec630f7a-75be-4d00-a2fe-c2501ca2027a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5267df3e-3701-4046-934d-ce4a80722299", "sighting_of_ref": "indicator--7007765f-15b4-4d67-9967-39ac963a589c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca2e11d-f936-46b4-954f-23b70bfede6b", "sighting_of_ref": "indicator--b17a816c-6a94-47a8-a398-b59b16123c82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d146e5-8890-452c-ad63-fd88e8e01b56", "sighting_of_ref": "indicator--b17a816c-6a94-47a8-a398-b59b16123c82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58562a6c-e586-4435-9780-7390d8da3fcc", "sighting_of_ref": "indicator--b17a816c-6a94-47a8-a398-b59b16123c82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718899e5-d600-4594-9907-5f046d10747c", "sighting_of_ref": "indicator--f85de8f0-6cb0-4c5f-bf95-7a4e86f2ce0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926a29bc-a962-457e-8fec-bb6796cff47c", "sighting_of_ref": "indicator--f85de8f0-6cb0-4c5f-bf95-7a4e86f2ce0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a339e24-565c-47b2-ad5a-1c5c910486bd", "sighting_of_ref": "indicator--f85de8f0-6cb0-4c5f-bf95-7a4e86f2ce0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb04afb-b4db-4ee8-9bf3-0e25efbb441b", "sighting_of_ref": "indicator--82430e57-5e53-4f79-8d52-ca00cc8b8303", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ddfe11-8110-45b1-8334-f29e6cbffec2", "sighting_of_ref": "indicator--d71c8071-2f97-4db2-a5d3-50324d602b0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6a3862-136d-4c3f-8ac3-28fc553d3852", "sighting_of_ref": "indicator--d71c8071-2f97-4db2-a5d3-50324d602b0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96247b78-ee34-4b3a-b013-d7a7c16ded2e", "sighting_of_ref": "indicator--b211834b-7750-404c-8a1f-f8fe3019505f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c7f0b3-b93d-4a26-bbd4-9fac4d080058", "sighting_of_ref": "indicator--b211834b-7750-404c-8a1f-f8fe3019505f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82251c0-c19e-4eab-8851-a8465558170c", "sighting_of_ref": "indicator--14aeb44a-880d-40d9-8a0b-77e0b39de79a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077f721c-70fa-442d-857c-dd4d8bd4b429", "sighting_of_ref": "indicator--14aeb44a-880d-40d9-8a0b-77e0b39de79a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea5410b-48a2-4469-9d8b-b13f2efb7e3f", "sighting_of_ref": "indicator--fd07384a-b77e-41c7-9b6d-2115d399bafc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde90e3-8104-48ae-80ef-08136ce3fe8a", "sighting_of_ref": "indicator--fd07384a-b77e-41c7-9b6d-2115d399bafc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70688f80-9ff8-4627-8d20-ac42190a4bea", "sighting_of_ref": "indicator--fd07384a-b77e-41c7-9b6d-2115d399bafc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cb1e16-34b1-4295-b503-42a822c04f8d", "sighting_of_ref": "indicator--574f25c5-4a4d-4e5e-8db1-18d2e5313ecd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee8d8d5-268d-4f6e-baa6-05cb18082de1", "sighting_of_ref": "indicator--161dcacd-f7d7-457d-ae9c-dd7cb69eb9ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b7bc89-dc8b-4e1e-9946-769412a4fd1d", "sighting_of_ref": "indicator--161dcacd-f7d7-457d-ae9c-dd7cb69eb9ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323a4014-a7f0-4954-8255-4477e7873ba4", "sighting_of_ref": "indicator--6150db72-65bb-46ea-a950-f74eb350aaf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd429ba2-05db-40e0-9802-d6b0874b65e1", "sighting_of_ref": "indicator--6f0af7dd-adf0-40cf-a230-6989a82b931a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d944f0e-5fb5-447e-b8f5-24b761c9cad8", "sighting_of_ref": "indicator--27c873cc-1e0a-4552-bf5e-b14c69e2d23f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7806eaa-067f-4a1b-bbfa-560ec6c7749f", "sighting_of_ref": "indicator--27c873cc-1e0a-4552-bf5e-b14c69e2d23f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef8f797-48ee-47a5-b76d-cf78018531d4", "sighting_of_ref": "indicator--27c873cc-1e0a-4552-bf5e-b14c69e2d23f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542abbd6-da96-4b13-af49-9b71f6a674f6", "sighting_of_ref": "indicator--a0cc0e9d-f312-4fac-975a-517975d3ae7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9821df3f-50ea-4974-9281-89a04f3ba79c", "sighting_of_ref": "indicator--7456b349-f7b9-46dc-a019-ac9538685240", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b184081d-6d7b-44f8-a19e-d25408ad59e1", "sighting_of_ref": "indicator--5c95b6d0-b5c9-42af-ba1a-a01395a8bc33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d19af77-60b7-40e4-b05e-30de9f21a03b", "sighting_of_ref": "indicator--5c95b6d0-b5c9-42af-ba1a-a01395a8bc33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cddd1b2-48db-4afa-9c04-8eeda958f60d", "sighting_of_ref": "indicator--5c95b6d0-b5c9-42af-ba1a-a01395a8bc33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5ac742-222b-4d23-82da-2d668697c620", "sighting_of_ref": "indicator--9ec8b8d5-8f58-4b28-ad34-80f1c65b5a8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9267dfe0-df0a-4137-8320-c008b91d239c", "sighting_of_ref": "indicator--9ec8b8d5-8f58-4b28-ad34-80f1c65b5a8c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4098eb4e-2484-4616-a8d4-caf66d5b8cc1", "sighting_of_ref": "indicator--9ec8b8d5-8f58-4b28-ad34-80f1c65b5a8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9c55b8-c220-42ad-b5f6-e04caf6bcd13", "sighting_of_ref": "indicator--ae96bf67-2561-4f99-90d1-ddbdd8533ea5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7703e9-56a9-4184-96d6-f15eab62cceb", "sighting_of_ref": "indicator--91cabdcf-2321-4fc4-a294-0e8ba7c7e1fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c0f230-bc8b-4a0a-ad9c-54ba2e574eaf", "sighting_of_ref": "indicator--91cabdcf-2321-4fc4-a294-0e8ba7c7e1fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79087115-1f77-42d0-9968-f0d6f8aff2fd", "sighting_of_ref": "indicator--91cabdcf-2321-4fc4-a294-0e8ba7c7e1fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636ff4ad-4af3-4281-b3cc-794322d2cd23", "sighting_of_ref": "indicator--4df0fe07-a861-48c4-b823-93352b55b94e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bfc5e5-fbce-4774-9a07-9d31b744cad2", "sighting_of_ref": "indicator--c4f2e170-113b-4e3f-98a8-8fd88f821139", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3734a211-4e91-4fc8-a287-462f10ebb480", "sighting_of_ref": "indicator--94e29f08-e8c5-4bf5-a41a-b402a2e1c79a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211177b7-c044-4a36-8414-b63937115b8c", "sighting_of_ref": "indicator--46c3a25f-e6c1-486a-b154-532dd4ce5c4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eff20a2-245a-455f-a492-0b1e1c6ffc60", "sighting_of_ref": "indicator--3da51919-e5dd-4a59-ac5d-3557d9bf106c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe43676-55ef-49d9-b2f1-b1524724453c", "sighting_of_ref": "indicator--efe77260-4d8c-4577-bc20-0057fa6fe8ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cd4fd5-188b-4fbb-9d01-0a98d709c200", "sighting_of_ref": "indicator--2827a1f6-4d00-4a55-b802-e35adc554d5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0801b7-8f3d-4274-838a-cc586494e7c2", "sighting_of_ref": "indicator--92189cbe-2b5f-4c5e-a61c-23983aca3b93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dceb379-b82e-432f-b987-a7492b04c7bc", "sighting_of_ref": "indicator--df8419ba-ff75-44a8-950b-12ffc80362ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0540a2c-82aa-482a-a889-4a3c59933700", "sighting_of_ref": "indicator--364655d4-5122-4255-ab6f-7f76ca889b67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65db3b27-c8ff-4b73-abc5-54b78ed79597", "sighting_of_ref": "indicator--364655d4-5122-4255-ab6f-7f76ca889b67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9eccd8-3c34-41c8-8d2b-08eff83c84d8", "sighting_of_ref": "indicator--364655d4-5122-4255-ab6f-7f76ca889b67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65269a54-9b08-4a7d-96a3-32d34135fc13", "sighting_of_ref": "indicator--1fdd49e5-5c25-4945-a835-e90d9f0ccef9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25716cab-7d75-46b1-8b82-4350cf545d71", "sighting_of_ref": "indicator--e69bb9ff-05eb-4df7-b068-bcf829d82d1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba6cec7-2efa-4fa0-b8a2-6fd4bef16cbd", "sighting_of_ref": "indicator--1a22add0-2aea-4585-be36-01416d08b61f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1c6ab5-de0b-4a60-8caa-eefe86d962cb", "sighting_of_ref": "indicator--00996980-559f-43ea-b5ee-dc41ba6586d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a615ee7-ffa0-449b-979f-ecc320170c98", "sighting_of_ref": "indicator--21a5fe8c-48b7-4d67-b204-9e4f49d34f27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8489a6-0987-497e-b32e-dd13ba33b5d9", "sighting_of_ref": "indicator--9617c32a-4b11-4bee-b478-057bcab7aa92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbe279c-9f64-46b6-9788-80efd1b176b4", "sighting_of_ref": "indicator--8bb209b3-34ed-445c-ab2b-44e2a8ac2d63", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3b9ffe-04ad-44ab-805e-6d899a8e505a", "sighting_of_ref": "indicator--6b925c03-d747-4d05-bdef-294479f82186", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe20e3a-797b-4d4b-8cf0-831c352f5009", "sighting_of_ref": "indicator--fded740d-73da-4748-9349-8b50028f39fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b7387b-79ff-43ab-a86d-601a14e404ca", "sighting_of_ref": "indicator--d569ec29-0005-4a02-b661-c190f02d0d36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5935f75-b83b-4493-8fc7-b0a72cd96630", "sighting_of_ref": "indicator--4e3dd8a7-14d2-442f-b731-ea2798004bd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd87d1f1-56f4-441b-876c-78de10c9c7f5", "sighting_of_ref": "indicator--661f5583-a4d0-40eb-876e-1556e3875f9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4f739f-f3e6-4628-a2cf-264c65899fca", "sighting_of_ref": "indicator--b7092613-68f6-4369-98d5-f2b3ce689b1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d941fe06-4ea5-4b84-a797-43de2906506a", "sighting_of_ref": "indicator--325a788d-d2da-4381-aff3-356337c26e31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320831c0-a89b-4071-8628-c0c94515838e", "sighting_of_ref": "indicator--7550fce4-752c-441b-967b-4bd6cfb8d334", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a1f06c-1cb9-4b0d-96cd-6d0be3d67a32", "sighting_of_ref": "indicator--71d548be-9b13-4af3-80f7-316ffa143414", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c852b6d-16a2-4b9e-af95-f10863d89221", "sighting_of_ref": "indicator--71d548be-9b13-4af3-80f7-316ffa143414", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9e73c2-89f9-43dd-8574-eed32991c425", "sighting_of_ref": "indicator--c9c74e71-9f1a-4627-886f-8f815b4120bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47909b0-2fe0-43ba-91c6-4b64f8fd4f77", "sighting_of_ref": "indicator--c250be33-48d1-443a-8c43-f75f753a1627", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8417d928-1f85-4659-82f4-6740c479d9ef", "sighting_of_ref": "indicator--f020a65f-1539-497e-bf1b-9fb9a84f5dd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bfce9c-9cb3-4670-bd9a-029c1931396e", "sighting_of_ref": "indicator--f020a65f-1539-497e-bf1b-9fb9a84f5dd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59217efe-ae23-450b-808c-a77cb9d2a5a4", "sighting_of_ref": "indicator--edbbeed4-4f6b-425e-9c8d-f129eae4aaa6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a930732-34c0-4bcf-9ea2-fd7f29454ae6", "sighting_of_ref": "indicator--61a5ac65-e9f9-4ee1-917c-647b67b0bcb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89598410-3e69-48c1-b6b7-83c79b9d6a73", "sighting_of_ref": "indicator--69add143-8d7a-4ffc-b132-5340c341419e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d743d91-210c-4c54-8ae9-15464774703c", "sighting_of_ref": "indicator--6cd108eb-f332-40f3-b728-7432e85e980d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bb8997-434f-4e81-89fa-23482bf38ff4", "sighting_of_ref": "indicator--ca222403-465e-4d21-814c-189150519b04", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa29c23a-e8b5-475d-9106-59f98ac916f8", "sighting_of_ref": "indicator--6e454be2-f83b-4a17-bc46-ee4cb03c781f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416b9167-d37a-4cf1-92da-a539645926ed", "sighting_of_ref": "indicator--8802f7f0-739c-4ef4-8dec-89cbadce2d35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d615b39e-55f9-4b44-b429-b48c04ab393f", "sighting_of_ref": "indicator--ac0cfb64-cbd3-4f15-9aac-63205cb83d0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6b3854-0e11-4637-ba56-e103444623e8", "sighting_of_ref": "indicator--83263ae3-af9e-41f9-b26d-346f72356097", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0c247b-2b9d-4cb7-9c0b-464f8656b868", "sighting_of_ref": "indicator--69681673-e210-42b4-a2c1-f50e2c00dc87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88251cc1-987b-4553-9ea3-2dc4534dc10f", "sighting_of_ref": "indicator--4af78405-ddac-40b7-aee5-ce02358d92dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e64b6d-f1a2-400f-b809-fdecf0fb2083", "sighting_of_ref": "indicator--3b0bed9f-5998-4195-b178-ce2ded03b811", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ebb308-4098-4d5c-a46f-1c7ac6e7517f", "sighting_of_ref": "indicator--3b0bed9f-5998-4195-b178-ce2ded03b811", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3781a392-0efe-4f33-a8fd-3606c20a2b9e", "sighting_of_ref": "indicator--3b0bed9f-5998-4195-b178-ce2ded03b811", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970b0016-d671-4d45-b4c6-ae929333deda", "sighting_of_ref": "indicator--abe64917-7832-4775-9662-a2da91a9e536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc063c14-155c-4185-9ef8-d5f98e83da91", "sighting_of_ref": "indicator--abe64917-7832-4775-9662-a2da91a9e536", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a62822-912b-4d49-8802-ed69f433109a", "sighting_of_ref": "indicator--abe64917-7832-4775-9662-a2da91a9e536", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d18c54-a955-4903-a3c7-b1d8cb50e42c", "sighting_of_ref": "indicator--59a69feb-f998-48b8-9589-ff8aef6e3a3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2354f51-902f-4c51-af25-cfc159f1c159", "sighting_of_ref": "indicator--04559bc9-835e-4ad0-b3e1-8de8d107728a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f080e60e-f16d-4687-9436-cc2aa3ed2b36", "sighting_of_ref": "indicator--04559bc9-835e-4ad0-b3e1-8de8d107728a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c453703c-d968-4db1-b7d9-7e20b3cf698a", "sighting_of_ref": "indicator--1a15dbf7-3bfe-4f4f-8015-5a4d42bbad2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad79b57-27d5-42fe-8b1e-a7c53d3e7205", "sighting_of_ref": "indicator--1a15dbf7-3bfe-4f4f-8015-5a4d42bbad2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db92d3-d87d-4c73-880f-372ebb6212cc", "sighting_of_ref": "indicator--1a15dbf7-3bfe-4f4f-8015-5a4d42bbad2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7166a6ec-201d-4741-b56f-2c0ba4c75e95", "sighting_of_ref": "indicator--37cec58b-19cb-43e9-8c43-4ab6f22cd427", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c409161-f4a3-4ae9-9a05-1ecd82a5a0a7", "sighting_of_ref": "indicator--37cec58b-19cb-43e9-8c43-4ab6f22cd427", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8668cbb-05ff-4548-94e5-fe04678a25b6", "sighting_of_ref": "indicator--37cec58b-19cb-43e9-8c43-4ab6f22cd427", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f957aa68-76e0-4c1d-a6e5-8f4edc1697b5", "sighting_of_ref": "indicator--9eac2130-3cc8-4923-8863-cdabfb649b5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293fdea-3a87-4baf-8710-03b35c34913c", "sighting_of_ref": "indicator--9eac2130-3cc8-4923-8863-cdabfb649b5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0c378d-3512-402b-8d53-ba6be50907fe", "sighting_of_ref": "indicator--9eac2130-3cc8-4923-8863-cdabfb649b5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17cc63b-0904-4b23-8711-feb1355484aa", "sighting_of_ref": "indicator--e70b2b0c-8b20-4f2d-9020-db42c51ef682", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900b066b-a7f2-462f-b4fd-d2ef739fbf58", "sighting_of_ref": "indicator--e70b2b0c-8b20-4f2d-9020-db42c51ef682", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b2ea00-6f88-452c-9747-db8ea94f669b", "sighting_of_ref": "indicator--e70b2b0c-8b20-4f2d-9020-db42c51ef682", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed1defa-bfc1-4374-886d-8870cd909fe6", "sighting_of_ref": "indicator--de12b1de-cd34-42d7-a890-3ac0674d332a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c63089-a090-48d1-bd1d-0f4f05c6ebc6", "sighting_of_ref": "indicator--216d063d-ca38-4c80-a874-48208a5195a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e12e13-53d0-4bfd-b328-74166db717a6", "sighting_of_ref": "indicator--216d063d-ca38-4c80-a874-48208a5195a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3518671d-bfb4-4319-991a-ce0de317dbc8", "sighting_of_ref": "indicator--1df1dfc7-811a-411c-8fd0-cb69f86d6fae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ac0915-8c4c-4de4-b2d7-5adad7e4fcd7", "sighting_of_ref": "indicator--1df1dfc7-811a-411c-8fd0-cb69f86d6fae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ece7f7-8c97-4eff-b772-b5a8d67ab096", "sighting_of_ref": "indicator--510e0cb6-6fb0-4588-af40-53157176e3e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35405a3a-2699-42ff-b482-1892c812d33b", "sighting_of_ref": "indicator--0a6f52e2-f153-490e-8c5d-52593c408cdf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1046f3db-9038-485a-84fc-70127e1dd109", "sighting_of_ref": "indicator--0a6f52e2-f153-490e-8c5d-52593c408cdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f472c9-5511-488c-a034-96b2b3337670", "sighting_of_ref": "indicator--6588705d-f109-498f-8da0-be5bf6344b4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38efa858-48ac-4f73-9e28-1a6648c38a57", "sighting_of_ref": "indicator--6588705d-f109-498f-8da0-be5bf6344b4b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aba10a7-c133-40ed-bfea-095495019981", "sighting_of_ref": "indicator--6588705d-f109-498f-8da0-be5bf6344b4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f34561d-a1e7-43c1-8960-13e4a4dacd25", "sighting_of_ref": "indicator--69bc5b7c-761b-4653-8cbc-681f98fccfad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb12cb2b-978f-493a-9965-12fb184b03fb", "sighting_of_ref": "indicator--65e6acf9-569f-4fd5-84ae-a26b9021d9d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2515766-2d72-4271-a7ea-2b76139ca690", "sighting_of_ref": "indicator--65e6acf9-569f-4fd5-84ae-a26b9021d9d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1eaf66-80ed-475c-b8d9-8f5b2398c529", "sighting_of_ref": "indicator--b0518771-ca9e-43ea-a23d-cc44fde25d8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df6d4fe-b72b-411d-8322-ac57b95f0320", "sighting_of_ref": "indicator--b0518771-ca9e-43ea-a23d-cc44fde25d8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b85080-3218-40ab-9bcf-429f98db6ed6", "sighting_of_ref": "indicator--b0518771-ca9e-43ea-a23d-cc44fde25d8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caafb0b-e8c7-48d0-a453-3389ddd8c4db", "sighting_of_ref": "indicator--35ea4a37-8b2d-47f3-852a-4cf86c407b17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcf9d4c-b4a3-4416-a0f4-eb833995f277", "sighting_of_ref": "indicator--35ea4a37-8b2d-47f3-852a-4cf86c407b17", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b93d51a-2ba3-4a56-ad0a-e7d73340d4d3", "sighting_of_ref": "indicator--649b272d-31ad-4c17-8f6a-6c89b32e946d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f1cf7-f515-46db-ae22-389f97153811", "sighting_of_ref": "indicator--649b272d-31ad-4c17-8f6a-6c89b32e946d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17451555-23c2-48a8-85c0-04079a4a0263", "sighting_of_ref": "indicator--649b272d-31ad-4c17-8f6a-6c89b32e946d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c37193-9f3e-4dd0-9e84-583bdce64ae8", "sighting_of_ref": "indicator--fc5bfd4b-f270-4da4-8ab4-e2054fd40182", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d587c80-5c53-44e7-89d2-dd06390de80d", "sighting_of_ref": "indicator--73272f86-e750-4bee-8758-868da692466c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5f87d2-0f4c-4ddd-8dc5-de51797e0d63", "sighting_of_ref": "indicator--71131a7d-99fe-41f6-a1d2-e41b4246619d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0175e1-94fb-4e79-83b2-386e19537f13", "sighting_of_ref": "indicator--a796d624-a3a8-465b-99f8-d14a50207bc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807df0bb-54ea-4b89-b26e-8f63b76dea46", "sighting_of_ref": "indicator--e01bffab-48db-4678-bce3-613b4905ae53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8e0cfb-7a64-40b0-aeca-28439fbb1de2", "sighting_of_ref": "indicator--0b77ca4b-91ff-4411-af9d-b2c505a67928", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccea4322-d0bd-4595-9ebe-a7fe4ee95201", "sighting_of_ref": "indicator--1586646e-d4e7-40df-8c7c-6db13329661c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f39687b-3a8b-463e-b547-2b40389287aa", "sighting_of_ref": "indicator--1586646e-d4e7-40df-8c7c-6db13329661c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4dfb3d-bfa9-4ed5-b40d-bcb41adec68b", "sighting_of_ref": "indicator--a744b5bb-cb47-48f5-92a2-1eb3874925ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f220b2d8-bb14-43f2-82e5-7772b957ab48", "sighting_of_ref": "indicator--41fb5eb9-73e8-4c41-92f9-1ede40fdf7be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f248b4c1-a9a8-4e17-aa18-1b27075eaf3b", "sighting_of_ref": "indicator--41fb5eb9-73e8-4c41-92f9-1ede40fdf7be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d8338f-3bfa-4bf4-b3a3-ce9c47f4cc28", "sighting_of_ref": "indicator--e4fa0953-c6e1-4dd4-b7d6-96b0cb0b1cb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96de1fa-8c0f-4828-b486-e2c93ba10fa6", "sighting_of_ref": "indicator--e4fa0953-c6e1-4dd4-b7d6-96b0cb0b1cb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e5b33b-17e3-4aa9-ab84-a1358cec9e82", "sighting_of_ref": "indicator--e4fa0953-c6e1-4dd4-b7d6-96b0cb0b1cb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a8ab9-05c2-40c6-8fd4-f49e83c5a353", "sighting_of_ref": "indicator--4884d240-8207-4f52-bb52-085ef92ec29d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee27569e-939b-4b56-8201-16d1d94eba51", "sighting_of_ref": "indicator--c2e0f541-dbf0-4a95-ae67-948c0622272d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52bca58-d0b1-4416-84b3-9e69f6df8a73", "sighting_of_ref": "indicator--5c118c6a-23c9-410b-a405-dd6a9b6714d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82abc5ef-9ba5-46c9-8a79-f7d222bb39b2", "sighting_of_ref": "indicator--5c118c6a-23c9-410b-a405-dd6a9b6714d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8183000b-dafa-4b5a-bdd6-6d514122fce4", "sighting_of_ref": "indicator--5c118c6a-23c9-410b-a405-dd6a9b6714d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3557c8-19e6-4709-8e0e-a5ed2d4574c9", "sighting_of_ref": "indicator--f5497ffe-78f8-483d-ad33-6d7baef9e0b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dff93d-dcb6-4035-ad62-cffb8bb50a42", "sighting_of_ref": "indicator--5e26721a-4d6d-44c5-9bf9-1b06e94d074f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df56a9cb-434f-4abd-a80c-1d1a2a8b66ad", "sighting_of_ref": "indicator--c8459950-e9e0-4905-9b7e-17cba5349e09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79b8585-540d-4fa2-a82b-109136f4f827", "sighting_of_ref": "indicator--9b1f5756-14f6-4962-b570-ed313c40e67d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2809d9-c291-41a4-b8e6-2f38e93aecfe", "sighting_of_ref": "indicator--cbb7e0e6-5706-49a8-9966-519f0ec265ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c03c235-8259-4642-a1ea-6e35b5226c58", "sighting_of_ref": "indicator--949f096f-a313-4193-aefc-d7ff28bfe21c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9e825e-5538-4f9f-b8ea-7d010f145add", "sighting_of_ref": "indicator--2e9e128d-47fe-44d7-b92a-ef02f08b6144", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4117aa-888e-4a52-b1b8-10165ec12dbf", "sighting_of_ref": "indicator--0a7c4a00-a904-4c99-b7b1-2ca062a818fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b231cd4-7514-46aa-82c2-71f81ab39a0b", "sighting_of_ref": "indicator--70d53f43-09ed-4090-92f6-95a59a98aed5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5fe431-84c8-40db-bfec-a236b75a226e", "sighting_of_ref": "indicator--51d22fda-e585-4fac-93ef-c98d3da1b41d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf96fa8-899b-4a8f-b348-2f7ca02b6a30", "sighting_of_ref": "indicator--8c1e1601-18f7-4c27-8d63-7b7916b6dbba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336d28b4-43b1-4889-a23c-5fbfd2d97e5c", "sighting_of_ref": "indicator--771a8c33-e92d-4944-9ac6-bc7d46f79feb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1d5bd1-4aa3-441c-b2ac-c18136122394", "sighting_of_ref": "indicator--771a8c33-e92d-4944-9ac6-bc7d46f79feb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a523d20e-1c22-41a5-96cb-ef65c77e5ea9", "sighting_of_ref": "indicator--dec908e9-8f62-411f-a38b-9a8e23658089", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523c277e-d884-4a0d-b66e-1a83967c6e44", "sighting_of_ref": "indicator--dec908e9-8f62-411f-a38b-9a8e23658089", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7124540d-a5d6-4d8b-9f7a-f6b1332f69e4", "sighting_of_ref": "indicator--bb9afa7f-28ba-4697-aedc-d960e8304f79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbe7cc8-8d9f-4498-b32f-ab9ac1ef000e", "sighting_of_ref": "indicator--17192722-ab0b-465a-8120-0b6d5712b928", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c0d59d-0c22-4580-a929-ca993e91427b", "sighting_of_ref": "indicator--17192722-ab0b-465a-8120-0b6d5712b928", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344522a6-03b8-4979-b209-7efb69e4f048", "sighting_of_ref": "indicator--17192722-ab0b-465a-8120-0b6d5712b928", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d884b4b-29da-404a-9f8f-024edccdf5ca", "sighting_of_ref": "indicator--43197b4f-a286-46b3-8a1d-2da896e46085", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e395446e-aa28-4b9b-ae5e-7574f514ef9e", "sighting_of_ref": "indicator--2991005e-b4da-4730-a90a-8ac49589454d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d184ca-a0a8-41f5-adb0-8adbcf2b9731", "sighting_of_ref": "indicator--847f7f8e-ce5f-40a1-9be1-7363f0fcb6da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c08fbb-0ec1-4760-a356-849fca0a418f", "sighting_of_ref": "indicator--629f9265-e555-4c7d-8b32-84dd82d1c460", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4690f746-14a5-45a3-8915-bbfb1d55ac30", "sighting_of_ref": "indicator--a6cc53f6-7ae2-43c2-9cd7-0e78f92040ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d873e1-e80e-4afd-97ca-bb650996a578", "sighting_of_ref": "indicator--a6cc53f6-7ae2-43c2-9cd7-0e78f92040ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1e8298-473e-4739-b9ab-e0eb12834a0a", "sighting_of_ref": "indicator--12a561d4-ea59-499a-a43a-5ec47d94eb69", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b9071c-d13d-4852-820d-f5ef6751f407", "sighting_of_ref": "indicator--12a561d4-ea59-499a-a43a-5ec47d94eb69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887bcd7d-f94b-4b72-8671-e52ea53a1843", "sighting_of_ref": "indicator--f07144b0-a395-433d-927f-dc000f81eb41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa71369-4eff-4678-857e-caa8241bda84", "sighting_of_ref": "indicator--0967ea9d-99ee-4d40-ac7a-af163ba5fa69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1fc603-1257-41b2-a0a4-d742363a9283", "sighting_of_ref": "indicator--c64584b6-cfbc-4e58-a7e5-406558654b54", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6301a826-0f87-4ba2-952d-be9c23ac3e82", "sighting_of_ref": "indicator--fc3cef21-6b06-4e9c-ab07-1c58a384a3d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c246a6e-eeb9-4501-9d05-5279d890e8ad", "sighting_of_ref": "indicator--577b6a89-5d4a-4282-84b3-047e022de89a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5396959d-c64a-4b57-ab38-cac3b9966848", "sighting_of_ref": "indicator--b4eab3bf-4bb7-4e69-ac9b-c91febb364b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753619b5-a7e3-40e0-9243-710e0f1f798b", "sighting_of_ref": "indicator--ea61bcf8-78c0-4435-887a-eb9ce4599a70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24523962-96eb-407a-86b0-65208e5aaa49", "sighting_of_ref": "indicator--91b4a137-e3d0-471c-b664-1d8061e4cd97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81fccf-e220-46ca-bbce-6a04134db2ee", "sighting_of_ref": "indicator--33649b5b-f43a-4c3e-aa90-1221fbb8a1f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc282a4c-2bc6-484f-97fc-81d7c7a27645", "sighting_of_ref": "indicator--fe4cb20e-88b6-43ff-b0b3-be2ef7e0d75f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8438ab1-4e43-4084-8537-4867ad86d40b", "sighting_of_ref": "indicator--fe4cb20e-88b6-43ff-b0b3-be2ef7e0d75f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249a8c83-9852-4eac-a45a-7ec85efc7677", "sighting_of_ref": "indicator--b1a314f5-bc4d-4824-887d-fabc28f536f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5920197-d383-4b27-9e40-e459a62b2539", "sighting_of_ref": "indicator--af0382e7-18fb-4f1d-958a-005340b0491e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed60f1-6c38-4ea2-b877-23f148b3056e", "sighting_of_ref": "indicator--af0382e7-18fb-4f1d-958a-005340b0491e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af0e7a4-4090-4c90-afa1-a4a745a972f3", "sighting_of_ref": "indicator--5548b193-c693-4f71-8e91-2fbb9c8de85a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7e7d98-2d07-4260-8cb0-58c64f2a8817", "sighting_of_ref": "indicator--79fd922b-f7e5-436b-a1f8-ab766c3183ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada8cef7-382d-4d40-8b32-2d8d39e57ea7", "sighting_of_ref": "indicator--faa75df1-c07f-497e-8fac-f89209480a13", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d8d41-288c-4531-bd10-59ac217208a9", "sighting_of_ref": "indicator--206e51c6-ff3c-4a48-ac54-30fb5e726cc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c8e5a5-d099-440a-acf5-1383f1d0c2c2", "sighting_of_ref": "indicator--638999cf-8a5e-41b5-9135-470c305a722e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df6285e-79e4-49b7-81c4-0b5f7fd05a6e", "sighting_of_ref": "indicator--2c888496-e55d-4c33-9ad2-699b13bf606f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2e03fb-b5c8-49ae-93a1-cfe8b9872a01", "sighting_of_ref": "indicator--b5b9d031-90f9-4b94-9494-4f8f882358d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a861344-de8e-4bcd-a57d-fdaf30fe5365", "sighting_of_ref": "indicator--9e5d96bb-915f-43f6-b155-a2be5d0c934e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f431de-51a5-4a2c-95e0-4864761b4911", "sighting_of_ref": "indicator--9e5d96bb-915f-43f6-b155-a2be5d0c934e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cae0212-a768-438e-944e-2c99f6f59ded", "sighting_of_ref": "indicator--89245778-efa9-4753-98f2-6f2f60fc1ae8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e9047-c5af-46cc-b5e7-f9b4868c06d8", "sighting_of_ref": "indicator--f7638274-8667-4e88-933f-332ccc863c5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a67a383-0340-41ec-b7f2-edea256d3df5", "sighting_of_ref": "indicator--648c9fe7-4395-48a3-91d7-8218590eafa3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1722afb-55fd-4235-a954-26093c7b6727", "sighting_of_ref": "indicator--007d607e-2b87-43b0-9527-3d9c2f0e7029", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb5e521-cd32-4d46-b3d1-27e6ce4c451c", "sighting_of_ref": "indicator--007d607e-2b87-43b0-9527-3d9c2f0e7029", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a09233e-0403-4988-9a0d-974b2092c4c0", "sighting_of_ref": "indicator--c129c59f-5fee-4e2f-aa64-d929b502ecb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed63a13-500e-4030-b393-067a18f1ef82", "sighting_of_ref": "indicator--dfa9b89f-91d8-4c0f-8ae8-4942bcf782eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c191748-f137-4fe7-9988-f94cd58d50e0", "sighting_of_ref": "indicator--05ff23a5-5d92-4272-beac-de0b68490ed8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bc8e30-4500-490c-bbd5-918559eb6985", "sighting_of_ref": "indicator--0772c341-13ba-45df-8fbf-26d762f87c8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c463a15-745e-45a4-81c2-7c64a9bd1dce", "sighting_of_ref": "indicator--c952c8d4-74ee-45c8-b9ab-3c5cd4d3ef33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aa688e-171b-4d0f-9549-4e1ef86d3e4d", "sighting_of_ref": "indicator--88d01b5a-0dff-4a8f-be4c-5fe2d597708b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b70f62-4cc9-4e80-be37-9f64a4096256", "sighting_of_ref": "indicator--c34e61cb-f4b1-4a61-b67d-6b6824e7d869", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2591ea9f-cbd9-4d00-b3f7-14fc789f2f1e", "sighting_of_ref": "indicator--471ef2b7-6c14-4fc8-a1d8-d09f19e967e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c287a6f-7f00-499a-a615-4cbc2ed125ec", "sighting_of_ref": "indicator--8fb7e954-c043-4e33-8fc4-9a461f7ff8aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cecbb10-f935-425a-b114-88aaf55d7ce0", "sighting_of_ref": "indicator--8fb7e954-c043-4e33-8fc4-9a461f7ff8aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d025e8-7039-42f4-8110-38d0cb1e2cdb", "sighting_of_ref": "indicator--d6f5e1dc-c79c-4aa2-aa16-85cfd93dff97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d7c55f-52ac-4799-9355-9b0cd86b8d5f", "sighting_of_ref": "indicator--c55f5893-9087-40b6-9e19-da6d3575de26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a95341-6af2-40a5-a1ab-1a84c7ce7c42", "sighting_of_ref": "indicator--e7fbc2f1-81a1-4d2a-85a6-c311d2c0e479", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a51cb8-c2ca-4cf4-80d7-fdcd5634b44d", "sighting_of_ref": "indicator--3a1fb395-cb9a-484c-b7eb-1e28d6a32a19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c995931-63a3-4a95-bf5a-97db42130c06", "sighting_of_ref": "indicator--2a7e8228-b5b2-4622-9d06-55700a2b7da7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7215ad7c-dedf-44cb-a64f-b898841b668c", "sighting_of_ref": "indicator--e7c84649-5f41-41dd-9057-37ca6e9c3b05", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a8dc77-78c2-44ea-a33c-ce27e9efebfa", "sighting_of_ref": "indicator--a3048b1d-38e3-4bf1-bd4c-03bbf78f60b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08267b77-1aa0-4b46-ad45-5f91ee7b3e44", "sighting_of_ref": "indicator--c08b8573-ba8d-4930-870c-3a9c407e827c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d163e6bc-e68f-4dfa-82a8-5aff4a927689", "sighting_of_ref": "indicator--b3fc68cc-4a8c-43d5-8d9a-d816944881ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54d57d9-3648-47b9-8a11-25d1f897ad3f", "sighting_of_ref": "indicator--da4ccbbc-46f4-4ffd-9bd6-b60dd20e58a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2778cc-9b58-45fb-8077-22376d3c693d", "sighting_of_ref": "indicator--37251260-683c-4a26-9af2-18507f0043c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0294518b-e1c8-4b2d-8c8c-94af9cf0bbb9", "sighting_of_ref": "indicator--f90c0227-9ed0-47c3-920d-51a50b3c37cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e20208a-3c83-4beb-adfc-5c6a2e4c64b2", "sighting_of_ref": "indicator--e328ef8a-72fe-4173-8011-67c10ff884f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08f8e26-9dd6-44b9-8210-37e4490169f9", "sighting_of_ref": "indicator--9e529c31-1054-4538-9066-5ca6ebb90c22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cb940b-136e-4c72-8052-fc5732ebbd15", "sighting_of_ref": "indicator--d23d6e56-6af3-4336-aed2-228cb92b5e21", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279714d-0475-49a2-ae47-0cea3ff7aff9", "sighting_of_ref": "indicator--1bc0035f-d514-4e1a-ae15-4e98915cf551", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb205db5-1f41-4991-b3d3-06b23f9fea2d", "sighting_of_ref": "indicator--204aa675-918c-4eee-a187-8f11196a3c34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bb0f84-85bc-4356-9137-5cec9b86bca9", "sighting_of_ref": "indicator--c620245f-d338-4032-8ce7-21123ef3e5a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3a5900-e948-45e0-9c76-1fd7ee4200d8", "sighting_of_ref": "indicator--989ee0fa-a907-47b7-b8de-c72ec8a3c745", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52a53d1-e84f-4706-8d80-720441ca00f1", "sighting_of_ref": "indicator--b02f93df-8f7c-4a87-b424-4b5e6e381ee5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4c7c5b-eb86-439b-b71b-d125cd71620c", "sighting_of_ref": "indicator--3f8f1380-57d0-4130-bdbd-4ebee4f98c9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e88ea2-8410-4883-bc7c-c9856bbd9b09", "sighting_of_ref": "indicator--0776f6e3-c713-419a-bfb0-d6273826c406", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d25595-fc0e-492a-a35a-478c18be2a4d", "sighting_of_ref": "indicator--b26523c1-cfed-40d2-ad1d-33e89349eea5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac515189-d8a4-4449-908e-0bdc1f6464f4", "sighting_of_ref": "indicator--197daf7f-8358-4995-8db7-fb86989e0688", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b89a80-f68f-4b3c-92ef-0c1ccda082e4", "sighting_of_ref": "indicator--f84bccd0-14a9-4d2a-a8b1-e8820f6097f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56437a6-038c-4223-8b98-feae47549a76", "sighting_of_ref": "indicator--f84bccd0-14a9-4d2a-a8b1-e8820f6097f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbdf3bd-5440-4250-859d-a8c7db5341f7", "sighting_of_ref": "indicator--dda5b0e5-a201-4f2b-8a45-689926ea8a0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a169244-a861-4c2b-a7f8-e1dc53d01d51", "sighting_of_ref": "indicator--dda5b0e5-a201-4f2b-8a45-689926ea8a0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c43602-31a5-4374-9fcd-063b8975d7cb", "sighting_of_ref": "indicator--dda5b0e5-a201-4f2b-8a45-689926ea8a0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7412c44-f0cd-472d-83e8-5159a1d41a40", "sighting_of_ref": "indicator--bdf602d6-f093-45b5-8541-4f79805eb492", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eebd94-d917-4576-a4f9-cc01c4218a43", "sighting_of_ref": "indicator--90c41869-25db-4c30-8a5f-01efcaaa7467", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82994ec-059e-4e5b-8cf7-cb881760a8fb", "sighting_of_ref": "indicator--e3442d41-52ec-4b5d-9608-f72ec19ada5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095fa2f6-a4d0-4726-b152-70c770b4428b", "sighting_of_ref": "indicator--e3442d41-52ec-4b5d-9608-f72ec19ada5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2564138-d28f-4ad2-9f4b-d13df91ec8db", "sighting_of_ref": "indicator--e3442d41-52ec-4b5d-9608-f72ec19ada5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea0cfe0-a409-42b8-8e53-7c8c8e7a13d0", "sighting_of_ref": "indicator--6aa0719c-7ee7-47ae-9878-a08a49cdcce8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11707ac4-46b8-4a85-a2db-52c2606c3a91", "sighting_of_ref": "indicator--be15d577-ce17-45e8-9ed1-88c1e155fce3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2cf15e-1765-4684-ad0d-5935d6a7cc01", "sighting_of_ref": "indicator--be15d577-ce17-45e8-9ed1-88c1e155fce3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1ade6a-3c5f-486d-8572-bb129ffcca25", "sighting_of_ref": "indicator--be15d577-ce17-45e8-9ed1-88c1e155fce3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fe5c8a-aa97-40c1-a840-13ebb3dbaf36", "sighting_of_ref": "indicator--6d6ac4ab-4dab-40e6-bacc-bca8782abca9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e3f0ff-563d-471b-816b-04b446c23035", "sighting_of_ref": "indicator--6d6ac4ab-4dab-40e6-bacc-bca8782abca9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236ef4c5-5be6-41c8-9be7-265ff3a82c1f", "sighting_of_ref": "indicator--196a610d-4fa9-49ce-bad0-523512575a91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a3a017-2dad-49e6-b954-1a566574ebf3", "sighting_of_ref": "indicator--ea3e7616-72dd-4e6c-8c3b-93caacca06a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1d055a-aac3-4e74-9083-dfa7dcdb67af", "sighting_of_ref": "indicator--ea3e7616-72dd-4e6c-8c3b-93caacca06a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95009795-28a2-4903-8236-4b7ccffef96f", "sighting_of_ref": "indicator--eb469937-0993-498d-aaa5-bd43eab159c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4e0b4f-afeb-4537-acaf-6e48c7e5a3aa", "sighting_of_ref": "indicator--eb469937-0993-498d-aaa5-bd43eab159c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06ce124-16e9-4308-aa17-1031aa12ca3a", "sighting_of_ref": "indicator--83fefc3c-b5c1-4287-8088-9d6925deefea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dc28d0-8e9d-48e9-be00-38203a91e230", "sighting_of_ref": "indicator--83fefc3c-b5c1-4287-8088-9d6925deefea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06af3e4-6024-40dd-9c82-fb9c48f8894c", "sighting_of_ref": "indicator--18ad119c-1b96-45db-bf09-9d46247d39c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6d98d6-fdcd-4ea1-b69e-f4f3ab8bfd73", "sighting_of_ref": "indicator--18ad119c-1b96-45db-bf09-9d46247d39c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6e54a6-61d6-4400-9b42-97403125a758", "sighting_of_ref": "indicator--0ad2c096-c622-4bc4-8596-2f8c99a83e4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3af9c0-9508-47aa-8eb7-6086aa57ede1", "sighting_of_ref": "indicator--243f0d16-bac3-4d3a-9fc0-9e3506f11a75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea895b3f-83a5-418b-b57e-2d8656f94839", "sighting_of_ref": "indicator--243f0d16-bac3-4d3a-9fc0-9e3506f11a75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef97a701-0cb4-4edd-91e4-e9f9051a5884", "sighting_of_ref": "indicator--a94c2b23-7eb7-416e-9994-c5ad334cf8ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f208ac3e-e7c3-4b0d-964d-2ba3fb9f5f7c", "sighting_of_ref": "indicator--066b1acd-07ba-4af8-9e17-5f97920f339f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844cf9c5-d1e9-4db3-9111-1a277e148339", "sighting_of_ref": "indicator--066b1acd-07ba-4af8-9e17-5f97920f339f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39228a7-258b-4bf7-874b-2285d1ee015b", "sighting_of_ref": "indicator--0ab2a1df-a7e3-4ffc-9db6-8f77462315dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c98539f-6826-4072-80f3-6ee181ddf642", "sighting_of_ref": "indicator--6a3a3017-ee18-4af2-9cbd-cf9c74fc0f54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a582693b-cb65-498d-b1bb-6f7a711c11ac", "sighting_of_ref": "indicator--2bbadccd-245a-42ff-9083-767a9958763e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da9b88d-662f-475f-82a6-7d52fd5b8f75", "sighting_of_ref": "indicator--60e40160-7567-4007-b6d3-9f3f5cd5677f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e9a5b0-25d3-4cca-a2db-d2ea9da63e00", "sighting_of_ref": "indicator--fc265b27-e48f-42a1-bde3-c9816649109a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54dc09-8aac-401a-b40d-220524ceb885", "sighting_of_ref": "indicator--f4651a20-7e59-4bba-ac7e-42f2e4e7e88f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee61b49-1c61-4d5d-9b50-4bbaa827e267", "sighting_of_ref": "indicator--f4651a20-7e59-4bba-ac7e-42f2e4e7e88f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96734a2f-f82c-4468-b49e-4471b1eeac24", "sighting_of_ref": "indicator--f99db74b-a249-438d-85a5-59b41696da8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0863c1-7289-4265-a859-104439fa8fbd", "sighting_of_ref": "indicator--1770587e-2cb1-44e3-a175-0cdd4aeb134e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef35615-5f4d-4894-b4cd-088cc216e814", "sighting_of_ref": "indicator--a0699ab7-cf55-4057-9c5f-2bdd922f7eaf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7611b8c-0176-4ffd-af5b-871428160dcb", "sighting_of_ref": "indicator--89d8cda5-5d68-4873-8979-6b481437adf0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032f9d5a-663c-4237-8174-0304dfc419c6", "sighting_of_ref": "indicator--cf170f27-db72-4829-b9d5-c5d03421338a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210b000d-4ce6-49bd-8184-778c31497b99", "sighting_of_ref": "indicator--0ef5acfb-325d-4cda-92b2-a7112c7ae31c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d3fb34-b05d-4f08-a812-66a1e7b21746", "sighting_of_ref": "indicator--0ef5acfb-325d-4cda-92b2-a7112c7ae31c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c8ef13-1960-4275-a41e-c76bdcd5df60", "sighting_of_ref": "indicator--97158036-2258-4435-aadf-a7a2fba12c63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe006087-72d0-472d-b6a6-fdc176b15664", "sighting_of_ref": "indicator--78ae2305-22a3-4128-a3cf-23bd8c3ba56e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b535ab-27b8-43bc-967a-19e766fd505b", "sighting_of_ref": "indicator--78ae2305-22a3-4128-a3cf-23bd8c3ba56e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576c4cc-1ac0-48ab-828c-221493abda64", "sighting_of_ref": "indicator--78ae2305-22a3-4128-a3cf-23bd8c3ba56e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238d67c0-cde7-48aa-ba28-b07797b205ae", "sighting_of_ref": "indicator--f2c1d33d-6d0a-4602-85a1-10a41a828efa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaab2b21-0a93-4760-98ad-aed20e44bfd5", "sighting_of_ref": "indicator--9913a201-b7bf-4569-bad3-e2d75095d093", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b030dc7-b1d8-4aee-ac97-de6fc7446897", "sighting_of_ref": "indicator--9913a201-b7bf-4569-bad3-e2d75095d093", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e083db15-6e9a-40d5-bf15-2c04d0c297d4", "sighting_of_ref": "indicator--93eb30b8-e91e-4b03-8a03-6f0775221c1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61078fb3-7cc5-4d96-9c4f-80f4537da3a6", "sighting_of_ref": "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a461b9-fb97-4766-9106-6d199194611a", "sighting_of_ref": "indicator--2d2a999b-095f-4152-a294-13f333a9921c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ad1b74-03de-4c63-8dce-214ed1c40b2d", "sighting_of_ref": "indicator--2d2a999b-095f-4152-a294-13f333a9921c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918c640c-aba8-4090-9cad-9111bde22050", "sighting_of_ref": "indicator--2d2a999b-095f-4152-a294-13f333a9921c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feebe645-5d02-4578-a6aa-1f7ff5912783", "sighting_of_ref": "indicator--bee0f5cf-c6b3-405c-97b4-4e57236a762c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42316c37-d62c-4da3-b13a-7321a80e7261", "sighting_of_ref": "indicator--8f488a89-b12f-496e-820e-215ad98f1ec0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e740c98f-7eeb-4748-82d0-173140416c15", "sighting_of_ref": "indicator--028f1c28-c3cd-4a53-a9b5-36a032f9ac89", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241ab4b3-3195-4da8-8586-765e34a65e42", "sighting_of_ref": "indicator--677b1a09-585c-4f41-a6fc-7c30208f94e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a2793-e709-4d40-a4fa-229c6d3c4413", "sighting_of_ref": "indicator--677b1a09-585c-4f41-a6fc-7c30208f94e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2ada14-2c7c-4cac-b47d-e91dc9bd2796", "sighting_of_ref": "indicator--335c8791-8b7a-4025-98be-6fca858e9887", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914e9bf4-af61-4066-a629-588a6efc32d7", "sighting_of_ref": "indicator--335c8791-8b7a-4025-98be-6fca858e9887", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45ee549-7620-4a7f-827e-88bfa81c78c8", "sighting_of_ref": "indicator--d14193c4-f146-48ff-9e0d-120ef200852a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871bde06-bb7b-4283-ac42-e61da15392b5", "sighting_of_ref": "indicator--d14193c4-f146-48ff-9e0d-120ef200852a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c16ee4-efbb-4ae7-a8ba-4cba316632fe", "sighting_of_ref": "indicator--40fe87f9-fb6d-4b33-addd-2ad8b9d8e045", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ec1a8c-e4d5-4411-b079-7b0870ea58d8", "sighting_of_ref": "indicator--f1bb6bd5-7ffe-48e3-9891-9d9a70f55e92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a122a93-62bf-4284-8e4c-fce436b7bda7", "sighting_of_ref": "indicator--76ba04a9-6708-44d1-be8b-0ef309a3ed81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ebbe33-3ac5-4f91-8bb4-aeab905b75fa", "sighting_of_ref": "indicator--f59dfbc6-2314-4266-9847-2b3b0377ac7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4241ea19-f519-4318-9c0f-67ac0a584fc9", "sighting_of_ref": "indicator--f59dfbc6-2314-4266-9847-2b3b0377ac7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3a333c-b85d-425e-824c-274deed3f717", "sighting_of_ref": "indicator--f87df6e9-d2d6-4207-9499-9ca286e85d80", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35b5be3-7046-4ae3-a0b3-bd75e5c54366", "sighting_of_ref": "indicator--f87df6e9-d2d6-4207-9499-9ca286e85d80", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68105fad-55e8-43d1-a64a-5059ed324c98", "sighting_of_ref": "indicator--510e54fb-0f42-4167-bf9c-a89977657e00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e1088-5ec8-46c0-aa89-36fcc36b9004", "sighting_of_ref": "indicator--510e54fb-0f42-4167-bf9c-a89977657e00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6790af4b-0a8f-4d2b-8518-c075d95ffe53", "sighting_of_ref": "indicator--510e54fb-0f42-4167-bf9c-a89977657e00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce544b1a-85ea-410b-9f0e-7953476f0030", "sighting_of_ref": "indicator--095d5ddf-cddf-407d-8b5f-7acc5cbd9d84", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7658da0f-7493-4ae4-9a19-da3c2be68615", "sighting_of_ref": "indicator--095d5ddf-cddf-407d-8b5f-7acc5cbd9d84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3604e52e-cff9-4020-b032-4ff4f1760ab4", "sighting_of_ref": "indicator--8e34eb1d-a6b2-4008-b7e1-ec85f661c4ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d1d608-61b0-41f1-ab3e-98a3e617967a", "sighting_of_ref": "indicator--8e34eb1d-a6b2-4008-b7e1-ec85f661c4ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffd9387-672b-4af8-b981-faea2c49dd17", "sighting_of_ref": "indicator--056bf5a5-7326-4ede-9047-49fbde101adc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f09f157-2a6d-42e0-9e6e-75ba57692efa", "sighting_of_ref": "indicator--02bdf392-3db7-4a7e-a87c-d94b00d47b0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc78c1b-6028-47ae-8b79-25cc540638f3", "sighting_of_ref": "indicator--02bdf392-3db7-4a7e-a87c-d94b00d47b0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2b572d-ae80-4a2d-a15f-e604276d262a", "sighting_of_ref": "indicator--01d798c6-9488-467b-b691-1d7a907db114", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daedc643-4194-4e8a-b001-27931463c276", "sighting_of_ref": "indicator--f218cf11-6e43-4cc4-94f9-1569fe4be713", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4f0344-772f-4a56-8083-fa5f04e0ed65", "sighting_of_ref": "indicator--f218cf11-6e43-4cc4-94f9-1569fe4be713", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ce0a9f-3126-40da-bd21-f7b724b4a681", "sighting_of_ref": "indicator--043065bd-49fa-4554-be03-af7e802da134", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c8cae2-cf70-45dc-b2e4-77f0b165a337", "sighting_of_ref": "indicator--043065bd-49fa-4554-be03-af7e802da134", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91504b5b-363c-4cc7-a0b6-2341e33c2be2", "sighting_of_ref": "indicator--9508d53e-7aa1-4ecd-8937-3ba57fe1a817", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828238af-a588-4719-a34d-db64babb88b4", "sighting_of_ref": "indicator--ac3d0f2d-4b43-4f52-b287-1fb7f4057f2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e55870-3a2b-4a7c-b4d0-8704c701dcb8", "sighting_of_ref": "indicator--ac3d0f2d-4b43-4f52-b287-1fb7f4057f2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4159a867-bf72-4e31-a2f7-61fd1f40f8c3", "sighting_of_ref": "indicator--ac3d0f2d-4b43-4f52-b287-1fb7f4057f2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb58d93-f9d2-4aa1-9802-48d6a52f5cf2", "sighting_of_ref": "indicator--5fb85f9f-7b23-4db3-a58a-2ea508b702b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd260b8-a700-4419-a76f-a3d9f281142d", "sighting_of_ref": "indicator--61202404-1166-4cc2-93a2-c6c4ffa40d7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c991b52-6c5c-4ad3-a037-80ef4eae3c8d", "sighting_of_ref": "indicator--61202404-1166-4cc2-93a2-c6c4ffa40d7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301a59c3-6907-44f6-9904-a04007e7f762", "sighting_of_ref": "indicator--52e28fb9-4bd1-436c-a16a-eaf06176200d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f51028e-9e35-4205-bc91-cc33942f50b0", "sighting_of_ref": "indicator--70348e5f-e17d-4b9f-91f3-702cc66baae9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be10b574-c954-4244-91dc-f340c482f991", "sighting_of_ref": "indicator--70348e5f-e17d-4b9f-91f3-702cc66baae9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af2519-5e27-478c-905a-a3f204f3fd5b", "sighting_of_ref": "indicator--70348e5f-e17d-4b9f-91f3-702cc66baae9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751bce93-d2d3-4bcd-ad54-f2d8e86125ff", "sighting_of_ref": "indicator--1fe91b0a-5dbb-4756-a85e-316bcc159dc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335033f0-2b62-4243-a31a-2053a49d1bc6", "sighting_of_ref": "indicator--1fe91b0a-5dbb-4756-a85e-316bcc159dc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6f8b76-2e68-4141-8567-3ead4ec8f677", "sighting_of_ref": "indicator--1fe91b0a-5dbb-4756-a85e-316bcc159dc6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe825e3-335f-418e-9e5b-df73a4b49b3f", "sighting_of_ref": "indicator--2ef153a0-cdd8-4f93-a40c-4b7cee6d8863", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbedd17-b21a-4a21-b181-8a9209d44b6c", "sighting_of_ref": "indicator--2ef153a0-cdd8-4f93-a40c-4b7cee6d8863", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf61f34a-5299-4d2a-a302-a5a5d4f4e133", "sighting_of_ref": "indicator--2ef153a0-cdd8-4f93-a40c-4b7cee6d8863", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b3b418-035f-4789-8281-72f818d8508a", "sighting_of_ref": "indicator--15a01e2f-f09d-439d-a902-c7767e048f35", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dcb750-733d-476e-9e55-a36dbf1a1a3b", "sighting_of_ref": "indicator--15a01e2f-f09d-439d-a902-c7767e048f35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511abf55-490a-4bcc-8ed1-339209b8659d", "sighting_of_ref": "indicator--32727a03-e011-484a-92fd-b287998e6c79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52e73ba-97cb-47be-b3de-62c23a5ca628", "sighting_of_ref": "indicator--c3d1ff4a-74cd-4c7f-9bb1-1bc2a5e851f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206a725e-cd0d-408e-9d15-fce03f8bec72", "sighting_of_ref": "indicator--0176ac43-b90d-429b-811a-ab20bb24b740", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86976a26-554a-42af-86ef-897e2777080c", "sighting_of_ref": "indicator--6a070679-0369-4086-80ab-6d6ea9f0bfc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4925aa80-8841-4a42-86c6-693bbcb00aea", "sighting_of_ref": "indicator--6a070679-0369-4086-80ab-6d6ea9f0bfc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83181f31-1f06-4dab-8c24-d722bfcc4209", "sighting_of_ref": "indicator--6a070679-0369-4086-80ab-6d6ea9f0bfc6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da907ded-33fd-4724-8c77-1c5375de80c8", "sighting_of_ref": "indicator--c85d1e2d-af7e-4580-b4d9-61c7c7db59c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f12c191-859f-4223-a88e-1d0e0dbccc07", "sighting_of_ref": "indicator--6735df35-0500-4cd0-bc30-6248f7b61c81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fd9176-c5ef-4bbd-b114-546ae3707724", "sighting_of_ref": "indicator--6735df35-0500-4cd0-bc30-6248f7b61c81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb86bc9-1a6a-4391-922a-1b658671d50a", "sighting_of_ref": "indicator--b764a417-dfa5-4249-aef2-326b3ba188a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a36248-8e2e-4d28-a1d2-3f7063c0b400", "sighting_of_ref": "indicator--b764a417-dfa5-4249-aef2-326b3ba188a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193a966-b42f-4d2b-9de1-49b0cacc7f74", "sighting_of_ref": "indicator--9aeff04d-ae47-461f-80c6-7bedb1b2512b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d5fc19-1226-48eb-9584-403d3b0b24ce", "sighting_of_ref": "indicator--034b9d70-ba91-4810-80ed-06aaaebb05c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abb4801-2410-4cad-a6aa-d4e82841d781", "sighting_of_ref": "indicator--034b9d70-ba91-4810-80ed-06aaaebb05c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0bdd1d-9b72-41f6-ab69-c722e154fe8d", "sighting_of_ref": "indicator--5d6df944-504c-4c99-8043-5bbf21c81ca8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd293884-1c1d-42db-b239-eb3dda22acd3", "sighting_of_ref": "indicator--5d6df944-504c-4c99-8043-5bbf21c81ca8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7f8d8b-b9c4-4b55-92a3-1331e3eda498", "sighting_of_ref": "indicator--5d6df944-504c-4c99-8043-5bbf21c81ca8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1407d291-e003-4c15-b1e5-97962da90110", "sighting_of_ref": "indicator--902867d0-af1a-4588-a794-afe7b4b9f061", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239d773e-4829-47a4-81f9-24713e388141", "sighting_of_ref": "indicator--902867d0-af1a-4588-a794-afe7b4b9f061", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bea525a-17b4-4fdd-aac4-94b5e26272e3", "sighting_of_ref": "indicator--6c7c458a-ee0c-400c-989e-23b609a8a779", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4869e2a-04b7-4ade-9fa4-417b97274995", "sighting_of_ref": "indicator--6c7c458a-ee0c-400c-989e-23b609a8a779", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412d0927-c9d2-482c-a641-ffba4b6e66e7", "sighting_of_ref": "indicator--c1fcf03f-fc29-4c16-be13-2358fdb70d09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0b6b14-b237-4880-8c16-d9f06d0b3faf", "sighting_of_ref": "indicator--c1fcf03f-fc29-4c16-be13-2358fdb70d09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e001e1-eb84-464b-bbf5-da902562e1fd", "sighting_of_ref": "indicator--b067bc77-4aaf-455d-823e-bb54b4933c5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25011b8e-2771-4d62-8d74-abaa0da35352", "sighting_of_ref": "indicator--b067bc77-4aaf-455d-823e-bb54b4933c5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285e9840-1051-46ed-85ca-ead91df7d5b4", "sighting_of_ref": "indicator--b067bc77-4aaf-455d-823e-bb54b4933c5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2a5caa-7b64-4d1b-95d5-08f332f86243", "sighting_of_ref": "indicator--d3bd2809-9ea1-4809-8caa-f42a2c7c157f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633dd7cf-821d-4584-8dbb-6abfd454b7d5", "sighting_of_ref": "indicator--d3bd2809-9ea1-4809-8caa-f42a2c7c157f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede99d3-9175-44a2-b221-2f46ee7edc57", "sighting_of_ref": "indicator--9cfc6f4e-1ac5-4478-8334-9671b4f64b33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e30f04-3ab8-4b60-8bf6-61be5a4a57f8", "sighting_of_ref": "indicator--c6901762-236c-4f7f-a318-a66626d86f18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85bb585-f957-4959-b085-a33008db453f", "sighting_of_ref": "indicator--c6901762-236c-4f7f-a318-a66626d86f18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76afab7d-0466-4920-ba55-1b10d08d2f5c", "sighting_of_ref": "indicator--f6fe4184-df2a-4de5-babc-fa2c06d1c3aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29e2059-5636-40c8-a06e-abb4b6f7f264", "sighting_of_ref": "indicator--9f7d2131-55a5-412b-995c-a556c3a87ff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74dda9a-f599-480e-8809-a229b14ea0b1", "sighting_of_ref": "indicator--9f7d2131-55a5-412b-995c-a556c3a87ff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf776bc0-d81c-4d5e-bab9-a0ebbf56e9c9", "sighting_of_ref": "indicator--e7f4d2fc-68a2-493f-b7ae-541fd8ad48c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c52b821-e26f-4dc4-b2b5-a6a516fc1e07", "sighting_of_ref": "indicator--e7f4d2fc-68a2-493f-b7ae-541fd8ad48c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a673c9b-1455-4ade-8a16-25535421e333", "sighting_of_ref": "indicator--eb32b2c8-fce2-4c8a-8f7e-24d406cf7d96", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcbd2b1-86b3-41a8-a712-c93b662fd5ee", "sighting_of_ref": "indicator--eb32b2c8-fce2-4c8a-8f7e-24d406cf7d96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a01ccc-5d91-49ad-b1a7-99c3b4d3e496", "sighting_of_ref": "indicator--74a59259-f01e-4595-bc66-a3e03a7ece8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7190d11-1c0a-4338-95f4-e794a23592dd", "sighting_of_ref": "indicator--262f2911-ef0d-4b5a-96f2-bb56f592ba00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7fcaaa-03a1-4490-a98f-d2758fc2a6e5", "sighting_of_ref": "indicator--262f2911-ef0d-4b5a-96f2-bb56f592ba00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76c6620-1248-4aea-ab89-55236821120b", "sighting_of_ref": "indicator--67f79a1f-b8fa-470e-8757-a17959f12cd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f950900e-66c8-4053-a1a1-fa8fbb09dd3a", "sighting_of_ref": "indicator--67f79a1f-b8fa-470e-8757-a17959f12cd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38ca674-3d21-46f0-abe8-7481b61750dc", "sighting_of_ref": "indicator--5650e5e6-063f-44cd-a283-0b2a2af60d72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90640744-0f62-4876-8252-02ec057d1a1b", "sighting_of_ref": "indicator--0f2b4cd4-bca1-46c1-932a-a1753b45c70a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d51833-7368-4699-9a1e-f4e434d8b44d", "sighting_of_ref": "indicator--0f2b4cd4-bca1-46c1-932a-a1753b45c70a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546bdf2d-b080-431e-a737-863a91565bd5", "sighting_of_ref": "indicator--601d454b-1c32-4f55-932b-7c98217d101d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab8767f-b191-45e4-9fe8-ce1cf4753afb", "sighting_of_ref": "indicator--d5d450fe-a4fd-41be-83ac-b0f6f43e12fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f456a10a-bfaa-4e69-96fc-762fc7fd08d6", "sighting_of_ref": "indicator--8b2c5249-749b-4647-8255-5ee90dbe0b62", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234998fd-72c0-4be9-bb4d-4d1dec44e177", "sighting_of_ref": "indicator--8b2c5249-749b-4647-8255-5ee90dbe0b62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd906ce5-19aa-4131-bae9-090b43188b26", "sighting_of_ref": "indicator--5be8855a-8962-459a-9c2a-0451d83306b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e7b084-7c8d-4a15-be42-ab5894527987", "sighting_of_ref": "indicator--5be8855a-8962-459a-9c2a-0451d83306b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa74efb-30c6-46b9-a8b7-d7aa5a76a049", "sighting_of_ref": "indicator--ec50c8e6-24f3-4c56-ad5d-2eb87ec95f64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530fc1d6-5fc6-420e-ac4d-dacac18bc78a", "sighting_of_ref": "indicator--658c3c8d-25bd-4381-96fb-b5023cb23649", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c124a750-812b-42d1-b0f5-df5c58ad7aeb", "sighting_of_ref": "indicator--874c3c41-abd5-48fa-8f87-89ff53089b52", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f1337-1ec1-4baf-aa1a-890809b4dbbb", "sighting_of_ref": "indicator--f98faf70-cb15-425e-9c02-414f7b35db77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bbe3d5-ef57-44c3-8dac-74446cc773c2", "sighting_of_ref": "indicator--4e3a7b29-6101-4449-a942-ea29f8b414b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c992d739-f47e-4ea8-b03f-6ce24966d5f9", "sighting_of_ref": "indicator--4e3a7b29-6101-4449-a942-ea29f8b414b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7bb3cc-7fb1-4a29-927b-aca58d5c8527", "sighting_of_ref": "indicator--4e3a7b29-6101-4449-a942-ea29f8b414b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4941406-94c5-4d60-91b0-c0d479134861", "sighting_of_ref": "indicator--7b122837-5fd6-4a5f-884b-0426c09093ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca05da-2792-4c5b-9635-15edc8b37729", "sighting_of_ref": "indicator--7b122837-5fd6-4a5f-884b-0426c09093ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff91d106-97c5-4e2e-864e-8f6c48d1ce37", "sighting_of_ref": "indicator--7b122837-5fd6-4a5f-884b-0426c09093ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e9b6e9-cda5-4d9a-9c4b-db6f1bd79829", "sighting_of_ref": "indicator--47d54cee-ea54-4ff8-a0be-f91c4f90d296", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00edcc-0f66-442f-b952-4346c41e6b7f", "sighting_of_ref": "indicator--5df69690-473e-4eac-9355-ee6dd38dd867", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e995a329-4513-437b-8c82-91d8b0a6be9d", "sighting_of_ref": "indicator--5df69690-473e-4eac-9355-ee6dd38dd867", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5293fcc-6d4a-4d90-84c0-8f59fc36f3d5", "sighting_of_ref": "indicator--28b4f23c-766a-40ee-adc1-2a28cba30beb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970ef591-d91d-4145-87cc-49ce79f2ce76", "sighting_of_ref": "indicator--28b4f23c-766a-40ee-adc1-2a28cba30beb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d4dc48-429e-4ff8-a143-311a0f1aca57", "sighting_of_ref": "indicator--28b4f23c-766a-40ee-adc1-2a28cba30beb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c111b-0dfb-4478-a662-8a7072b90f5c", "sighting_of_ref": "indicator--8c3111c5-0ef5-4487-b1cf-ee9d35978472", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223474c-8670-4c85-9739-baede8de4c7a", "sighting_of_ref": "indicator--852bfc75-deb5-4c7a-bfff-3f4471920678", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf846cd-2e36-48ed-9b2c-a291d165877b", "sighting_of_ref": "indicator--7ebff560-dd00-4020-8eb6-fc2e5b764a2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53aacbdb-2123-4295-8064-16ae94f4e153", "sighting_of_ref": "indicator--4a5c9d14-7dc3-404d-ac16-f2bc2b4df273", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16514e9b-a9c9-41b1-b1a5-24905c664d98", "sighting_of_ref": "indicator--0b171bdd-b341-4138-88ba-2e483f180a79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd28fa3-45e8-4dc2-a1ee-fd2331583a19", "sighting_of_ref": "indicator--a1a61b3f-3b3e-45fb-aae3-aa5f4277f314", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a7703c-bd65-482d-a373-a0b778b56e05", "sighting_of_ref": "indicator--0babf8fd-e021-475b-8c14-665aa819acfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f252ad7-bcac-4f9e-9882-7e0ff5a730c9", "sighting_of_ref": "indicator--0babf8fd-e021-475b-8c14-665aa819acfe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb0424f-c521-461c-a6e1-1a130a67e762", "sighting_of_ref": "indicator--0babf8fd-e021-475b-8c14-665aa819acfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a4bcb9-655c-43bf-b4e6-cee9fae6c86d", "sighting_of_ref": "indicator--2d942d77-b90f-4f26-9426-de8c63015547", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eaffbd-8473-45fd-9e8f-6ab53aa8560f", "sighting_of_ref": "indicator--2d942d77-b90f-4f26-9426-de8c63015547", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cde974-c3c9-4aa8-8696-a8f5c27d71d2", "sighting_of_ref": "indicator--43618122-3d80-445b-8665-e8d5b6ef04ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef57b5-2a87-4539-b5c9-4659f59dc103", "sighting_of_ref": "indicator--71b8055f-d4a6-43bf-b985-33d552ccc8cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d807ebf-0f0a-4dda-8494-c8ae5c6babad", "sighting_of_ref": "indicator--d1ae2d78-f893-45e8-bd09-a40056057e41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707766b2-59a4-4876-b705-eb175d8d5832", "sighting_of_ref": "indicator--d1ae2d78-f893-45e8-bd09-a40056057e41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb81f6b-0c80-41a3-bc54-3c6a7e98a40b", "sighting_of_ref": "indicator--30c2b37e-a8a2-40a7-ae9a-c041401ce4d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ce47bc-9cfb-4564-bd2c-6e0130f706d2", "sighting_of_ref": "indicator--037edeb1-1b56-4db2-80e8-da40666a057c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef4941b-a066-4b21-8ef2-cd3378b6fcb5", "sighting_of_ref": "indicator--037edeb1-1b56-4db2-80e8-da40666a057c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76b6930-5bd4-4a71-8ba7-3d551d78492b", "sighting_of_ref": "indicator--5d6ffb4d-a575-4a4c-9a3d-be30065cea5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a8facf-2cac-4730-bf58-a7b44f68caf6", "sighting_of_ref": "indicator--5d6ffb4d-a575-4a4c-9a3d-be30065cea5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafde3f6-c642-458c-abd4-802d8f567863", "sighting_of_ref": "indicator--079a07a3-c024-4df3-a05c-89b0f65d5de8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ead5925-23de-423a-a883-077b98d40847", "sighting_of_ref": "indicator--af5436f0-2b94-4f95-97ff-a878fc2a7b42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfcae29-a5db-4aae-b58e-fd62f2275a69", "sighting_of_ref": "indicator--af5436f0-2b94-4f95-97ff-a878fc2a7b42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf1fecd-dcef-41f5-b106-f114b311d6c3", "sighting_of_ref": "indicator--b0ba5a48-18cc-4a3c-af21-11d8e8b3e303", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bc55a1-cfe4-467a-9504-8f6ffe8739b1", "sighting_of_ref": "indicator--4cabfc40-3c19-4e32-9620-55807a97ac6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ca64f4-8945-4537-9b28-74639343b2f8", "sighting_of_ref": "indicator--1d36aa4c-b2ec-4e0a-b90f-b4ea15843a81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a6a378-8c33-4b9b-908e-c5948bf663f4", "sighting_of_ref": "indicator--90487530-1a6a-4929-9fc9-980633100d37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd4f880-f3a8-4a6d-8af8-2ac2e35c491c", "sighting_of_ref": "indicator--90487530-1a6a-4929-9fc9-980633100d37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d313637-9b26-4771-a4a7-bd871def149b", "sighting_of_ref": "indicator--c017ee90-b51e-4b8a-bfb1-211afd0e0814", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346ebb54-f29a-4f7d-853e-35a807552ffe", "sighting_of_ref": "indicator--c017ee90-b51e-4b8a-bfb1-211afd0e0814", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a3b66e-d72e-421b-8a4c-a207dd226100", "sighting_of_ref": "indicator--fa4a4aa6-2949-4562-b5fc-db195597799d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb04131-7cb6-4747-ac88-c6f1b0ee3d2d", "sighting_of_ref": "indicator--fa4a4aa6-2949-4562-b5fc-db195597799d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61618a59-e953-4cc3-ad84-e0e1dde6efa5", "sighting_of_ref": "indicator--f7b698c6-e22c-4727-a882-d651a09808d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3edab74-5df6-4d15-9fa3-ed3c68aecee5", "sighting_of_ref": "indicator--f7b698c6-e22c-4727-a882-d651a09808d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f6dbbd-5837-40d5-9c06-f633c6fad728", "sighting_of_ref": "indicator--bd3b1582-540a-4e03-a1ca-ed60ed361326", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619ae696-b1e9-4e9a-a4b1-d86ad8cec4d2", "sighting_of_ref": "indicator--46b855b6-06c9-4cde-8d9b-819c4f7c7ce3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d0722f-7b04-4c81-bbac-d58add26ddcb", "sighting_of_ref": "indicator--46b855b6-06c9-4cde-8d9b-819c4f7c7ce3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b38322e-5656-4ab2-adc5-7148b5be18e9", "sighting_of_ref": "indicator--128929db-b329-4e17-af64-7e94754250d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abcc23a-9199-4f00-949f-8afc6b87c0e1", "sighting_of_ref": "indicator--128929db-b329-4e17-af64-7e94754250d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0607925-da22-426d-bb32-c204714c3059", "sighting_of_ref": "indicator--05573d5b-163e-416c-8253-76755bae080c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134ed602-4cf6-4e23-9f7f-3a69fcff0d51", "sighting_of_ref": "indicator--6a27cbb8-64c2-49af-8a25-3de1af3796fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f54e2e6-bbc2-4b70-8d6a-9306420ecd7f", "sighting_of_ref": "indicator--f974850c-3f7c-49e6-ae09-92665dd22d09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd62403c-0ab0-49bb-a845-6389ded5a068", "sighting_of_ref": "indicator--594643be-615d-42dd-98ab-d86a3df8d21f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c55e7b8-6576-443e-a1ea-5b6382a65c46", "sighting_of_ref": "indicator--594643be-615d-42dd-98ab-d86a3df8d21f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bb4f7-7d5f-4334-8e35-55a7eca876c6", "sighting_of_ref": "indicator--e32226ee-f826-4241-8502-bd201464cff9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd550509-2601-4a08-b64f-9ac5d82fc0ea", "sighting_of_ref": "indicator--3966cc4c-dad9-4ee5-b3e3-c791040264f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27422cc-3d76-4d47-b318-09b141a8a439", "sighting_of_ref": "indicator--3966cc4c-dad9-4ee5-b3e3-c791040264f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac201ac-6266-40af-a5e9-a98abb512c3d", "sighting_of_ref": "indicator--90cc551a-e6c6-4ad1-902c-a995a36afaa1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e37d92e-d08a-42b4-b241-5e1f19eb5ef7", "sighting_of_ref": "indicator--90cc551a-e6c6-4ad1-902c-a995a36afaa1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c4dcfb-7aec-47cc-a452-41b9f40b5d87", "sighting_of_ref": "indicator--f9644448-e961-4c93-a5e9-d422f2975b10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6de607f-ec86-4853-a7d5-9973c074cc07", "sighting_of_ref": "indicator--993386df-79a8-4f67-9dca-1bd61e11d66d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3777bc0-c04c-41f3-9af1-92a2a00e3da5", "sighting_of_ref": "indicator--5a5995a4-ac45-4329-a003-a6fc05076e76", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d9968a-5ab3-4beb-8edb-68ba18bca87f", "sighting_of_ref": "indicator--b3ef6769-1df9-41f8-ab86-2729570daced", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e747baa-4d0e-4789-a5ba-e6fae6e94d1e", "sighting_of_ref": "indicator--b3ef6769-1df9-41f8-ab86-2729570daced", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dd0e93-7bbd-4fc5-8202-4aff8dda2cbe", "sighting_of_ref": "indicator--f075c27e-5996-44e6-aae5-a836e2019b37", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4250b75-dd47-417a-9306-893be75523ee", "sighting_of_ref": "indicator--f7a0929a-2685-4fc0-b60d-5a4da03200d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa5ca7d-2a29-4169-bc93-8fc34b0ba5e6", "sighting_of_ref": "indicator--f7a0929a-2685-4fc0-b60d-5a4da03200d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b2c8d6-b308-46d9-a91d-9f7243b0578b", "sighting_of_ref": "indicator--3ee6d76c-0a15-474e-b982-b1837686827e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81470f61-eb9b-4875-a5fe-5275f2251432", "sighting_of_ref": "indicator--3ee6d76c-0a15-474e-b982-b1837686827e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42057a7-94e3-46ca-b6ce-f5103069750a", "sighting_of_ref": "indicator--14f92ca5-67c2-4433-b412-4716d48a3769", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c85eee3-eabe-453c-8095-5ea9c0e3afcf", "sighting_of_ref": "indicator--c041cf5e-4417-4144-bb17-bc0353e1daef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c97ab6-3a4b-4017-9f14-55eb38e53f4b", "sighting_of_ref": "indicator--c041cf5e-4417-4144-bb17-bc0353e1daef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec81dbc-ea6c-4534-88d9-5dff6cabf4e3", "sighting_of_ref": "indicator--8f2783ac-5f2d-4b24-9d14-fa803cb52a68", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c2292a-db32-4893-9091-95e0b7596953", "sighting_of_ref": "indicator--8f2783ac-5f2d-4b24-9d14-fa803cb52a68", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee6f6c6-2efd-4f44-b178-d855047f2b3a", "sighting_of_ref": "indicator--20cc55eb-63fa-4779-bb4a-f204941b69f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca4650d-b46a-4ed1-88d2-3f24641540b9", "sighting_of_ref": "indicator--c2f159f4-5874-465f-9956-b7a4143f62dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847ddc1e-522e-4121-b107-0ace2dca74bb", "sighting_of_ref": "indicator--80c1c238-46cd-41cc-948f-feb76c790ffe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5d1fd5-0723-4868-a499-8dc1cca95a60", "sighting_of_ref": "indicator--80c1c238-46cd-41cc-948f-feb76c790ffe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4b84a8-11d3-4170-a3a2-cddb6f586c38", "sighting_of_ref": "indicator--41714ba7-ba29-4435-99c7-3db853ebb380", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347a7663-c5a9-443f-9fd1-1e5f6f130895", "sighting_of_ref": "indicator--cb5a7b2e-61b5-4056-998d-5bca7a8fc495", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf17270-1b9d-4250-8793-5f84cd7cdbd0", "sighting_of_ref": "indicator--00bea7fc-6a42-4142-8188-85bf937812a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d811951d-8576-4904-a235-ace2965e9bf9", "sighting_of_ref": "indicator--00bea7fc-6a42-4142-8188-85bf937812a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc72f71-9616-4517-8333-cde279449457", "sighting_of_ref": "indicator--0950d7a5-76f7-4110-b348-08ebe73c7617", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cc3890-f52d-4768-b505-abefee4a097c", "sighting_of_ref": "indicator--2a5ad652-7e00-4f19-9327-5563453307a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f5e756-500c-4926-9dbf-1b20355e8fca", "sighting_of_ref": "indicator--3ddf683a-32be-427b-90ac-0c15f0a2ee40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f2e1e5-6b66-43e6-86cd-2b8fb29e50ce", "sighting_of_ref": "indicator--f10e7d21-07c6-4fc4-9abd-7961483c28b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba5bcf2-e014-4908-8467-ed10be58908c", "sighting_of_ref": "indicator--f10e7d21-07c6-4fc4-9abd-7961483c28b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86f3594-9a44-41cc-956c-52750217209c", "sighting_of_ref": "indicator--5c882bf5-ee41-4fb6-af9f-8c858edba211", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13864d2-9b82-4b91-b0bf-0dbcd0604d06", "sighting_of_ref": "indicator--5c882bf5-ee41-4fb6-af9f-8c858edba211", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3992c5-cbd0-449f-b39d-e3d6904ecfd1", "sighting_of_ref": "indicator--afa28c12-6841-4e1d-a21b-ac4f1b342368", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47187fb2-b3bd-45dc-a2ab-c6043bcc1605", "sighting_of_ref": "indicator--6f8b1ea6-e329-49eb-986a-700d4646285a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace10350-b696-4db3-acca-0167307cc1b6", "sighting_of_ref": "indicator--6f8b1ea6-e329-49eb-986a-700d4646285a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e981b-4684-4a3b-843a-46e399451af1", "sighting_of_ref": "indicator--6f8b1ea6-e329-49eb-986a-700d4646285a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd8b1f8-9e78-4550-b3b7-55dd1e492d33", "sighting_of_ref": "indicator--73ecea42-b8dc-4e1f-bf8c-a4449f2c5cc5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cad810-24fa-4f8f-a64a-94f5d10c0290", "sighting_of_ref": "indicator--73ecea42-b8dc-4e1f-bf8c-a4449f2c5cc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33db551-3666-43a7-95c0-285f299eb7f4", "sighting_of_ref": "indicator--05cd258f-e67c-4328-8a1a-25510fdf999e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0af968d-cb93-4621-8207-12f09360324c", "sighting_of_ref": "indicator--ab5c99ad-b4ee-41ab-bf43-245bbafbbd60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42ee730-acef-46a6-b894-1513ddff0b8c", "sighting_of_ref": "indicator--ab5c99ad-b4ee-41ab-bf43-245bbafbbd60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52972a31-c97d-4631-8456-36e0371329ee", "sighting_of_ref": "indicator--41438a90-1026-4ac4-be56-dec253fdbe81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92a195c-03a1-4c9f-9a92-e1c089ba561a", "sighting_of_ref": "indicator--41438a90-1026-4ac4-be56-dec253fdbe81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c05907-2ba9-4675-adc9-3aad2f826dfe", "sighting_of_ref": "indicator--41438a90-1026-4ac4-be56-dec253fdbe81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bc0d3b-9d55-4d6c-9725-e8d3b1b459ce", "sighting_of_ref": "indicator--b6752015-d171-4fb5-9d5d-d89379492e22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a6b649-6699-4202-b795-1874779aa6aa", "sighting_of_ref": "indicator--d700eb1a-dc6d-4086-8b19-21eef3518199", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15499104-67e1-4efb-94ca-cb2274dc2eb7", "sighting_of_ref": "indicator--d700eb1a-dc6d-4086-8b19-21eef3518199", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3df652c-bb0c-4a01-97d4-29041f74a55b", "sighting_of_ref": "indicator--77a9cc39-f7cc-4efa-8a32-a3c4282bc12f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5d1280-6dcd-4a0b-ae69-9cf728fa5e93", "sighting_of_ref": "indicator--f51634f1-dc72-4ee7-bc52-c6fb363dd69f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac2dead-303a-497e-8729-df71929267d8", "sighting_of_ref": "indicator--f51634f1-dc72-4ee7-bc52-c6fb363dd69f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df213b1-a42c-49a7-98d3-0366b33c7caa", "sighting_of_ref": "indicator--f51634f1-dc72-4ee7-bc52-c6fb363dd69f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb3a30f-8679-4e3a-8398-2a7cfdddbd45", "sighting_of_ref": "indicator--29fdd83e-2014-49c6-a6ff-7340dbaca10a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd031e-8e4c-4353-bace-0ac8c7d32047", "sighting_of_ref": "indicator--29fdd83e-2014-49c6-a6ff-7340dbaca10a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b02e027-4f4a-4809-a529-19d1f3b3eb17", "sighting_of_ref": "indicator--bc248229-9e53-4864-b99d-da9d80dedfaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33002d82-d39b-4437-845a-e404d6aba819", "sighting_of_ref": "indicator--4c4fabbc-4707-48c9-9f9d-f8aa057fd050", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee592df-04a4-4dd2-8998-296135a27292", "sighting_of_ref": "indicator--a4b98f74-f58f-4048-83d7-e7bba99d6197", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a0c0f9-1766-49ea-9b5d-09bd866f253c", "sighting_of_ref": "indicator--0e9d73ee-f525-409d-b562-a941f2fd0d77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a387a1-f486-40c6-960f-985b5ffc2d45", "sighting_of_ref": "indicator--0e9d73ee-f525-409d-b562-a941f2fd0d77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea3d218-e9da-4ac5-a271-ce040e2217c5", "sighting_of_ref": "indicator--917b11db-62b8-4a1e-bb4f-837d91108b0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40685e85-82c3-49f2-b11f-0f762825c9fc", "sighting_of_ref": "indicator--917b11db-62b8-4a1e-bb4f-837d91108b0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e219fc-48a8-41fa-bb38-6cbc99d5b193", "sighting_of_ref": "indicator--917b11db-62b8-4a1e-bb4f-837d91108b0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd70cca-093d-4886-9908-422372074ba6", "sighting_of_ref": "indicator--5add9b49-3c17-4133-85c8-b4733cf4b825", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bd7e5c-cb4c-48f2-b2bc-ddf7dfac5d08", "sighting_of_ref": "indicator--5add9b49-3c17-4133-85c8-b4733cf4b825", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc805b72-739a-4665-8e7b-6a6fc35edf84", "sighting_of_ref": "indicator--b1d87d49-47da-41aa-a0e7-6e9ff94fbe8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2103f478-5382-4e99-bb28-96fa3c693ba1", "sighting_of_ref": "indicator--5ebab0fc-d5c8-46c8-81f9-236e075bb4ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245799d7-450e-4dbb-a709-419f88a2c2da", "sighting_of_ref": "indicator--5ebab0fc-d5c8-46c8-81f9-236e075bb4ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9de339f-f87f-4092-b183-8432761d2b88", "sighting_of_ref": "indicator--f0eb6461-a49d-41f0-87e4-cab8dc19ce9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc30790-743d-4534-af83-4731d0915fec", "sighting_of_ref": "indicator--f0eb6461-a49d-41f0-87e4-cab8dc19ce9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8152be-422c-42a9-aef3-6ed153258610", "sighting_of_ref": "indicator--28aa609d-d565-45e4-af93-a14faa76ba89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5ddd7f-b99d-442f-8eeb-9e293b94870d", "sighting_of_ref": "indicator--f695fc56-8480-4056-b98e-593465be778c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874f57dd-682e-4775-a01c-e3e08af08a82", "sighting_of_ref": "indicator--f695fc56-8480-4056-b98e-593465be778c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb43882-3912-4943-b22d-6f61d7870a12", "sighting_of_ref": "indicator--f695fc56-8480-4056-b98e-593465be778c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae73987d-8acb-435c-b918-b3e37e201d92", "sighting_of_ref": "indicator--bdcd88b2-4c06-4017-8dd9-5aa9583ecf78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c25921-ea90-4c21-a530-9d25a874cd9a", "sighting_of_ref": "indicator--f4374b07-4213-4424-b050-422d84f518a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82fd5aa-3dec-452d-a485-0d15091b4d98", "sighting_of_ref": "indicator--10ecda99-57ff-4d72-8049-42cb29caf7b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d73edf9-3c38-4eac-87f9-aa69fb4fc70c", "sighting_of_ref": "indicator--10ecda99-57ff-4d72-8049-42cb29caf7b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6a6d01-111f-487a-bfb5-ca99b0e27a30", "sighting_of_ref": "indicator--897f696a-a3f4-4c12-990e-39785f90084b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4698ef-d07a-4f8e-b3b3-0627c6f9ddf1", "sighting_of_ref": "indicator--897f696a-a3f4-4c12-990e-39785f90084b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2017515-1d7a-49bb-87c9-bcf768b51f31", "sighting_of_ref": "indicator--d62da06f-ca2d-44e0-ad25-9ee9e2be473b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd08cfb-df40-4ed6-ad5a-3b6f562ba2b6", "sighting_of_ref": "indicator--615417fa-2af0-4041-8b95-514148ab0f28", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7337d40-b469-44ba-87d2-6b4c24a6edd4", "sighting_of_ref": "indicator--c75e5fb1-8124-45a9-ae9a-1a8c3a38648c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc921811-ded5-4d39-9b7c-a5e20ec48946", "sighting_of_ref": "indicator--645132ae-5473-415d-ba72-6e7401c3fb63", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f3fb7e-a817-4e44-b142-6e3054a7bc33", "sighting_of_ref": "indicator--38e2dd23-8cb1-43d1-9165-afa3d5323202", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462cfa21-3f11-4454-91b9-3fbfc69c9e61", "sighting_of_ref": "indicator--85b65572-bfec-4b50-8aaf-289176e7833c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836e89b5-2c0e-4339-992e-9f46a7d22974", "sighting_of_ref": "indicator--85b65572-bfec-4b50-8aaf-289176e7833c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c9665d-38ee-458f-abb7-4f79bf1446e8", "sighting_of_ref": "indicator--20c89118-ae46-49fb-ac4a-ef0d539bef3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bf9c41-8355-4289-a9da-5088a06488ba", "sighting_of_ref": "indicator--20c89118-ae46-49fb-ac4a-ef0d539bef3f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e0ece-75ea-4bef-9418-39efed79efbc", "sighting_of_ref": "indicator--7e1fa8f3-00ec-4630-a295-c40dfdaab01b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a98d37d-954d-4833-8999-7f94e3798251", "sighting_of_ref": "indicator--7e1fa8f3-00ec-4630-a295-c40dfdaab01b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bd6350-125e-46b5-b958-b677aa0c32ee", "sighting_of_ref": "indicator--ddba4377-a6e2-4808-8b78-b495945f421a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce61ad5d-a3b6-415e-9393-e2ca9b0bb8cd", "sighting_of_ref": "indicator--ddba4377-a6e2-4808-8b78-b495945f421a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd415a71-2e4b-4a07-ab09-ed8324bc9322", "sighting_of_ref": "indicator--ddba4377-a6e2-4808-8b78-b495945f421a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99648d6d-15c3-41b9-a221-f27a4bde498b", "sighting_of_ref": "indicator--4c9edd47-3ae3-464c-bfaa-ef7c71706a88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc589cd-3fa9-4f71-9f84-72b65619cde9", "sighting_of_ref": "indicator--4c9edd47-3ae3-464c-bfaa-ef7c71706a88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ae9426-9dea-41d6-a8c8-426f127263bc", "sighting_of_ref": "indicator--237ac03b-875c-46ed-951a-d7e88b831fa3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f1d5d5-9eda-464b-a013-012ba0e5dce4", "sighting_of_ref": "indicator--22d90b5a-7f08-4530-b046-57122a27dee9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466ce8a6-a364-4f46-bb3e-11108df2e556", "sighting_of_ref": "indicator--22d90b5a-7f08-4530-b046-57122a27dee9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464fb513-575c-48b7-82dc-d211c12692e6", "sighting_of_ref": "indicator--1c44a51c-1680-416c-bddc-0425512f99e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db001df4-04a3-4fe3-9223-f0ba5d4c4f4c", "sighting_of_ref": "indicator--1c44a51c-1680-416c-bddc-0425512f99e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9a5e66-02c6-4c0e-a291-d62a2e0e5b36", "sighting_of_ref": "indicator--1c44a51c-1680-416c-bddc-0425512f99e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a0f456-0015-48e6-a72b-00165968344b", "sighting_of_ref": "indicator--99a8a842-1686-43c5-a8db-d15abb772053", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479bee91-6a17-4cad-8ead-d537a95be73d", "sighting_of_ref": "indicator--db9c92c6-0aff-4e67-a62a-c279f3ffc012", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed94bb73-8575-4c92-89be-fa132a087ffb", "sighting_of_ref": "indicator--7f9391c6-0d19-45dd-a3bd-82f1e6d96377", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f754204-0a92-4a6f-b329-7909fba95075", "sighting_of_ref": "indicator--7f9391c6-0d19-45dd-a3bd-82f1e6d96377", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437628b6-b078-4bad-b222-2adbd296779c", "sighting_of_ref": "indicator--b00139d9-f49c-4323-80b7-62363b04ec0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d3cd49-2e6a-49c2-82e6-fcf6486146ff", "sighting_of_ref": "indicator--b00139d9-f49c-4323-80b7-62363b04ec0a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcc0552-0938-4e20-92f7-87abacb43d53", "sighting_of_ref": "indicator--b00139d9-f49c-4323-80b7-62363b04ec0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f16806-bcc5-47c6-bbf6-97dc3c635698", "sighting_of_ref": "indicator--d2cae7cb-67f2-4cbf-9e57-b758a9819f4f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd5f9a1-58a0-4b68-b95f-c517ee6239a8", "sighting_of_ref": "indicator--d5cbc14a-2da0-4e14-91df-f90da58f15dc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35eef1f-c584-44d9-a3c3-9446366231cb", "sighting_of_ref": "indicator--d5cbc14a-2da0-4e14-91df-f90da58f15dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a2419f-a35a-4274-a801-07f11ac2041d", "sighting_of_ref": "indicator--977fc2f9-6498-4dd5-9043-07c635ae1004", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c67e52-54d2-448d-a0d1-6571165ca36a", "sighting_of_ref": "indicator--977fc2f9-6498-4dd5-9043-07c635ae1004", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627e89b2-3a92-48dd-927e-7a6e0cc0bbde", "sighting_of_ref": "indicator--4dd1a600-bb35-479e-b3c1-ed41e228892a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fdf107-7629-4f14-9aa5-1219ef7ebdf7", "sighting_of_ref": "indicator--4dd1a600-bb35-479e-b3c1-ed41e228892a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28859c38-5da8-4493-9242-e21d7c5e42fc", "sighting_of_ref": "indicator--4dd1a600-bb35-479e-b3c1-ed41e228892a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2895cd-8abb-4e59-bbc9-8c5c10ae7851", "sighting_of_ref": "indicator--a38c10e6-54bb-47ec-9b70-8da72187c824", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c663ee66-c92f-4d83-8ee1-8f63ba0467d4", "sighting_of_ref": "indicator--a38c10e6-54bb-47ec-9b70-8da72187c824", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8669c11-6b52-4d95-9467-fc3731440034", "sighting_of_ref": "indicator--f8ed10c9-9127-4865-a5d1-0bda231fb581", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d64ba3-e4e9-4d9f-a5a2-85a98c802201", "sighting_of_ref": "indicator--f8ed10c9-9127-4865-a5d1-0bda231fb581", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7c55ac-de85-472d-9898-2ef0b82469fe", "sighting_of_ref": "indicator--bc303156-4a46-4edc-a81d-593f6926f594", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f07676-4481-44c4-a2c6-139ea289d0ee", "sighting_of_ref": "indicator--a2b11be3-3da0-43f7-a776-1abb3d4cb747", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d58aeb5-3b78-4cb7-971b-818eb0fd1ee7", "sighting_of_ref": "indicator--0bd2fa93-d60c-4a5a-9eba-12015c69d93e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c842f6f2-cc0f-4f18-af1c-24ef7c9568b1", "sighting_of_ref": "indicator--5bac4af7-83d2-40f4-8540-9826cbf6253d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7dde6e-16f2-4b01-928c-a804672e9b96", "sighting_of_ref": "indicator--5bac4af7-83d2-40f4-8540-9826cbf6253d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e602f0-aea5-48d7-8ae9-af13210491d8", "sighting_of_ref": "indicator--5bac4af7-83d2-40f4-8540-9826cbf6253d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4f1987-bcbf-4af3-97f5-4f94bcab7f5b", "sighting_of_ref": "indicator--9b0e4a5a-da0b-47a4-bb48-427e9423ac42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4fa849-163b-4ce6-9534-87db882568d8", "sighting_of_ref": "indicator--9b0e4a5a-da0b-47a4-bb48-427e9423ac42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a7b4fd-6fd1-4cb6-a8b7-459e7f432de0", "sighting_of_ref": "indicator--624f91cb-cfd8-4df3-a0d8-6f9d6048d4c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bcb5b1-a09f-497c-816a-3e758b614b2d", "sighting_of_ref": "indicator--624f91cb-cfd8-4df3-a0d8-6f9d6048d4c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bde839c-dafd-4388-a2aa-1c36bc72b570", "sighting_of_ref": "indicator--624f91cb-cfd8-4df3-a0d8-6f9d6048d4c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec268732-d8a4-42bd-9810-c518f2d7612b", "sighting_of_ref": "indicator--5589c4a5-9bcb-40bb-b1d5-9a83d7e8c6f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f25591-c52b-45a1-8c4c-b73450980408", "sighting_of_ref": "indicator--5589c4a5-9bcb-40bb-b1d5-9a83d7e8c6f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78fe081-2de3-48d0-8cc4-fda895399907", "sighting_of_ref": "indicator--971e8a30-5dc3-4a7b-b488-c343bf28e62a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdc22af-afa9-4d95-bdd1-1a28cf7e2b72", "sighting_of_ref": "indicator--971e8a30-5dc3-4a7b-b488-c343bf28e62a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ae3adb-433c-4df4-99bd-b1b2661a5966", "sighting_of_ref": "indicator--f85b3c30-3834-40f7-a6ac-11ae3e8bcf4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fefb25-a2b0-4a9a-b855-3f100b0a1ea0", "sighting_of_ref": "indicator--f85b3c30-3834-40f7-a6ac-11ae3e8bcf4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea31c9-cff2-47a0-83c7-b7eb4012ff15", "sighting_of_ref": "indicator--f85b3c30-3834-40f7-a6ac-11ae3e8bcf4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed483dfe-e299-444d-adad-c1033e8cdfd9", "sighting_of_ref": "indicator--053102df-40a8-46c0-93ca-0a432b6c99ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276fc193-46b0-42cd-b187-29aeec66520b", "sighting_of_ref": "indicator--9212e9ef-b4f8-4e86-9d71-bdeca0ff4471", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30c2492-c252-4706-b8a8-d21e8c5c51ba", "sighting_of_ref": "indicator--9fac6caf-6080-42b3-a429-1f47eb038b83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab63028-bbf9-40c6-ac7e-6c7dd533205e", "sighting_of_ref": "indicator--9fac6caf-6080-42b3-a429-1f47eb038b83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e39e3-07e1-4fec-817d-05eedf0eacef", "sighting_of_ref": "indicator--3c85bfce-ff78-4f5a-bf2b-2f566da422c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039974db-9738-4ba7-9706-811130a6d28b", "sighting_of_ref": "indicator--3c85bfce-ff78-4f5a-bf2b-2f566da422c0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b13f28-418f-4d93-a3cf-6dcbb9aefc06", "sighting_of_ref": "indicator--71bf22a3-f538-4840-b91f-97b888d130b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbc77c8-8c96-4125-a372-9cdb2062f856", "sighting_of_ref": "indicator--71bf22a3-f538-4840-b91f-97b888d130b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae45c79-30da-4560-a728-c436f54d12b8", "sighting_of_ref": "indicator--5668256e-293e-46c3-8678-01afd3239097", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3699fb-e67c-4ff8-ad14-006f706b4d37", "sighting_of_ref": "indicator--5668256e-293e-46c3-8678-01afd3239097", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4456b9f-71a3-4d77-b3e8-cb5006ca745c", "sighting_of_ref": "indicator--fbe48204-6373-4c8f-a4ce-496092d7c6dc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f6a2b5-a637-4f23-9b05-ac02e3bd31f2", "sighting_of_ref": "indicator--fbe48204-6373-4c8f-a4ce-496092d7c6dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4585022d-0edd-4da0-967e-ed8aacd98332", "sighting_of_ref": "indicator--74abd7ce-0881-40da-9015-c4bf6f79ef38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e7be10-065d-4093-911c-c4653ad9c663", "sighting_of_ref": "indicator--74abd7ce-0881-40da-9015-c4bf6f79ef38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e079928-04ca-446f-9456-4faeb38e4677", "sighting_of_ref": "indicator--dc7e648c-2cc0-4ea3-a2aa-c0eacf5a2c30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eff704-1fc1-4520-af3b-49c6efde1607", "sighting_of_ref": "indicator--dc7e648c-2cc0-4ea3-a2aa-c0eacf5a2c30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ed9eb9-8a2e-4ec9-8d79-6bf665493303", "sighting_of_ref": "indicator--dc7e648c-2cc0-4ea3-a2aa-c0eacf5a2c30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8b7060-24cd-4fde-89e9-befd0a4c3f80", "sighting_of_ref": "indicator--dc1c63d5-b100-4131-9940-16e4b86185c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac9ac0a-7466-4e5f-af97-d9c361f1c614", "sighting_of_ref": "indicator--dc1c63d5-b100-4131-9940-16e4b86185c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb828f5-c54c-44cc-bf65-69d36f17d037", "sighting_of_ref": "indicator--136e68c1-d261-4838-975a-11ef1d5dbd3b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3644aa98-7fc3-4b15-a578-1d30fc4c1333", "sighting_of_ref": "indicator--70130620-cef6-4ba0-974f-b6db2e4ed41b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c193739-48e7-4d6b-9ebf-622b09ac4d24", "sighting_of_ref": "indicator--1142c74f-dac3-44e1-b991-f09f8be6a3a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374466d-403b-4177-b09c-8e7b720d7b2f", "sighting_of_ref": "indicator--1142c74f-dac3-44e1-b991-f09f8be6a3a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134130e-bf80-4937-afed-cdcb3f5bd2f2", "sighting_of_ref": "indicator--7e07c5be-11ec-49a9-9b49-fbf6549bc83f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1cb0ef-270f-4026-b281-7a161c8963d1", "sighting_of_ref": "indicator--e6fd0341-ef7d-4e5b-b9cf-3a22d551c7c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46529751-8db5-4341-8b81-5a9d2cfc6822", "sighting_of_ref": "indicator--e6fd0341-ef7d-4e5b-b9cf-3a22d551c7c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b4b6f1-d664-446a-aab9-6ac25dbfc4aa", "sighting_of_ref": "indicator--4ae27b67-3b44-4ede-a376-0e0de87f456e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441c3dcf-ec04-4831-9b77-4e6e933f9efb", "sighting_of_ref": "indicator--4ae27b67-3b44-4ede-a376-0e0de87f456e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84960dcf-d25d-460d-974d-3b175ad5105f", "sighting_of_ref": "indicator--4ae27b67-3b44-4ede-a376-0e0de87f456e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9263df-bced-4c0b-93ea-4a63b2dd26eb", "sighting_of_ref": "indicator--dc076300-1818-4742-9d34-fc953894450d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80702be5-c660-4851-9838-578df38c2458", "sighting_of_ref": "indicator--dc076300-1818-4742-9d34-fc953894450d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7248a3d4-04fa-408c-bbf3-841b1d5ce9b7", "sighting_of_ref": "indicator--583c89b4-dba2-481f-930f-264569943b06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a311ec-a306-4d7c-8152-73a4928ca431", "sighting_of_ref": "indicator--583c89b4-dba2-481f-930f-264569943b06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb19bd3-0aa4-44d5-af89-e7b1d68b28f4", "sighting_of_ref": "indicator--a57772d0-1691-442e-9c69-03bad9de5ce2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91350b01-cbfc-4c81-9690-51f4bdf9ff75", "sighting_of_ref": "indicator--a57772d0-1691-442e-9c69-03bad9de5ce2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdef3ff-1bab-4171-bfee-41dcb9d22495", "sighting_of_ref": "indicator--7b3c9c86-3e26-49eb-9b12-1aa06d24e82a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000c2b9c-da73-4109-b020-14a0b6a88a78", "sighting_of_ref": "indicator--7b3c9c86-3e26-49eb-9b12-1aa06d24e82a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b708aa62-efc4-48e0-ad93-ec0b3be476a4", "sighting_of_ref": "indicator--d26994a7-d343-491f-a488-b4932ee3c4fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483646d4-74bc-4f2e-a1c3-0cbc335ecfa1", "sighting_of_ref": "indicator--f6cd6823-9696-4650-8d52-5164ef45699b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce51f86-9cf7-4a9c-93cf-08877d08cc11", "sighting_of_ref": "indicator--f6cd6823-9696-4650-8d52-5164ef45699b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece9fe3d-1510-4233-99c6-967e373f7e93", "sighting_of_ref": "indicator--f6cd6823-9696-4650-8d52-5164ef45699b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb34d655-2995-4e55-8eba-256aadc61edc", "sighting_of_ref": "indicator--efe30445-46bc-41d2-be07-dceb604e8ea2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d7de8d-c188-4ddf-a408-b2f7d74ebfb9", "sighting_of_ref": "indicator--3ecef04d-ddc7-4d97-8a54-64233dfef96f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2773e82-5acb-4967-844f-7dcc5ccc8d42", "sighting_of_ref": "indicator--e9f1751f-36ee-4a0e-8daa-9c36da5a605b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cd36ce-2eb7-4d1a-80b9-6fe5be99ead9", "sighting_of_ref": "indicator--e9f1751f-36ee-4a0e-8daa-9c36da5a605b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78fe9fc-a741-40a0-96e0-398a4838c7d1", "sighting_of_ref": "indicator--e9f1751f-36ee-4a0e-8daa-9c36da5a605b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e421105-ce7d-4e84-9cd2-e31e0f4a9fde", "sighting_of_ref": "indicator--22d446f9-493a-4f7d-8553-8c22e5a13269", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80c36df-4c49-4e62-9720-3285f4ef84ab", "sighting_of_ref": "indicator--37da2b97-77dd-4de0-8b1d-77044ed6c9cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723fd14a-e405-4d2a-8c1a-f7fee89efbd2", "sighting_of_ref": "indicator--f61c52a3-591a-42bc-98c9-d52e5f03318c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a5cc1c-d449-4f05-94d3-aaa5ad5e7e77", "sighting_of_ref": "indicator--f0d3bb3f-f142-4604-9405-9612e5f142fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99b7396-cc92-4279-a85b-c2d2efa1c335", "sighting_of_ref": "indicator--2f5c1c91-47d9-479e-beb8-12af465c4591", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a27c12a-537c-4840-a464-12fac4fee38b", "sighting_of_ref": "indicator--2f5c1c91-47d9-479e-beb8-12af465c4591", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f9ffb0-8f8c-414c-a550-fe8bb32f74c6", "sighting_of_ref": "indicator--d5556536-b994-4f40-82a2-ec2760c92d49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7ad992-8bba-44d1-81f8-9dc271c8ea32", "sighting_of_ref": "indicator--d5556536-b994-4f40-82a2-ec2760c92d49", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1e2d3d-741c-497f-a4a6-d188cd219a9e", "sighting_of_ref": "indicator--d5556536-b994-4f40-82a2-ec2760c92d49", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123a53bd-6026-4c4c-bda6-ae71a72e55ab", "sighting_of_ref": "indicator--03b314c8-bc2f-4d10-969c-bb6fa38cdae5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c7dad4-673f-4e75-a897-2892946fdc3d", "sighting_of_ref": "indicator--dc46c7d0-5e38-4169-9f0c-e02e454c28a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a96a6f9-79ea-4bf6-b929-d2067ed98475", "sighting_of_ref": "indicator--42479f81-955d-4205-99d0-be82ac61cb41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b4e202-0d67-4c21-add8-e35d2cd00239", "sighting_of_ref": "indicator--42479f81-955d-4205-99d0-be82ac61cb41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9240fbc-494c-4b7c-8b92-9da3fd1b903b", "sighting_of_ref": "indicator--3ec297f7-0e89-4938-8e18-26b84dcb9be0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8041d57c-7953-4e8b-839d-10dd6a45fc30", "sighting_of_ref": "indicator--da718dac-72bc-4447-afc9-474c6c048007", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b3e4c8-0466-46ae-93e6-e1059b38f4af", "sighting_of_ref": "indicator--5b08abb1-c066-48f0-88b5-42466105dbf1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edce4628-fb71-469a-85a1-cdd9347dca5e", "sighting_of_ref": "indicator--5b08abb1-c066-48f0-88b5-42466105dbf1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb20bc4-5db7-4ff4-987c-cc33d5ad1492", "sighting_of_ref": "indicator--5b08abb1-c066-48f0-88b5-42466105dbf1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b598463-b3b8-4049-880a-fcd22ce83452", "sighting_of_ref": "indicator--8f74774c-b4d6-4cb5-bb0c-b95aa6f8363f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dece49ee-4808-4d3d-b85b-0bab4498aa7a", "sighting_of_ref": "indicator--8f74774c-b4d6-4cb5-bb0c-b95aa6f8363f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f59140-c751-4c49-b7c7-bf7230852dcd", "sighting_of_ref": "indicator--9ad5ba87-869a-470f-8db0-cdfc89325b77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfe86b4-04ac-43c5-bc41-ab1704acee60", "sighting_of_ref": "indicator--9ad5ba87-869a-470f-8db0-cdfc89325b77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3421463-3106-430b-a7f1-81351f0f0f25", "sighting_of_ref": "indicator--a24e47ae-caac-4a93-85a4-6febd5e8252e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d929049-1fae-4de5-a625-b64db987026c", "sighting_of_ref": "indicator--a24e47ae-caac-4a93-85a4-6febd5e8252e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48c1cf3-5bbf-4e66-a084-35626b473d42", "sighting_of_ref": "indicator--8b788a84-0315-42e9-b60e-437478d9df37", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff95468-b4fa-4a73-bde6-8d2dd0e2d062", "sighting_of_ref": "indicator--5c331877-c1ca-4f03-938b-007a672b06b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53144c0-3b6c-4781-b035-b859f8e80a0c", "sighting_of_ref": "indicator--5c331877-c1ca-4f03-938b-007a672b06b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8728290e-d7eb-4605-8959-f0daa11156f5", "sighting_of_ref": "indicator--275f1d2e-a416-4c0f-9967-d521664c4fa7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac990719-deac-4555-8bee-2ba6743834b8", "sighting_of_ref": "indicator--275f1d2e-a416-4c0f-9967-d521664c4fa7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2210b2b1-2e94-401b-9fa3-5cc025d45da2", "sighting_of_ref": "indicator--1810c778-3400-4117-888c-7fa5602d8b18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed8676-0222-4111-9797-603cd83f8e54", "sighting_of_ref": "indicator--7a35f036-6cfc-4cac-9d65-9efd328d37c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2eb4d5-3c9e-4867-aa8d-48527ae62755", "sighting_of_ref": "indicator--e0b15fec-ca4e-431b-95b8-6339d959f45c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98699eb2-4d3e-49ec-9dcd-e426191743aa", "sighting_of_ref": "indicator--e0b15fec-ca4e-431b-95b8-6339d959f45c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489539e-0bc1-4997-a19b-0d18db675f6a", "sighting_of_ref": "indicator--76a69ac0-cf28-4923-a997-273e66dbd66b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d171ce-dee4-4710-b81f-337adb1361f9", "sighting_of_ref": "indicator--4c906f82-92d0-4590-9dad-c28f9ec3ede3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36c030a-9f91-48db-8ed6-d5b20a0ace30", "sighting_of_ref": "indicator--4c906f82-92d0-4590-9dad-c28f9ec3ede3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2bd966-8865-4f9b-a049-1228527a6e9e", "sighting_of_ref": "indicator--78e9823c-0b4c-469f-b2af-137e652843c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08953b54-ee15-41c4-ba23-6e770dd40d2c", "sighting_of_ref": "indicator--78e9823c-0b4c-469f-b2af-137e652843c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbf2ac5-253b-46e5-b0e1-49e838daa245", "sighting_of_ref": "indicator--ff3b5729-f2d2-47ff-8213-c5bde81b82b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fec43c-85a9-4e00-81f6-f00205a8b511", "sighting_of_ref": "indicator--ff3b5729-f2d2-47ff-8213-c5bde81b82b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64f2108-b5f7-4424-b0df-3bdfa6ad645f", "sighting_of_ref": "indicator--d61099a2-3733-4dc3-a2f2-5bc174230134", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cbd786-116f-4098-8fa6-10d90ce65e73", "sighting_of_ref": "indicator--de587612-42ab-4efd-b07f-c7f1fda4b6d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1d1cc1-6cf4-4a88-83a5-017023381f56", "sighting_of_ref": "indicator--d5bfd8da-18a8-4d35-b8dc-f316dc3d5e2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4cbb04-bda0-4ea5-b251-d5b27b2b6739", "sighting_of_ref": "indicator--2c578fed-e164-4e1e-9fe3-50ffb6f92ccc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96c337b-8886-40c8-8011-c5cce1bed46a", "sighting_of_ref": "indicator--2c578fed-e164-4e1e-9fe3-50ffb6f92ccc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27796d3c-96b6-4f6f-97ae-b71c841d6b9e", "sighting_of_ref": "indicator--097834ea-a247-472f-8ffc-c8ce8335631f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844d740e-5ac0-458f-83d8-e960a105fd47", "sighting_of_ref": "indicator--acfba706-6e3e-46a4-9f7f-772c63bc8a6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e3ac3-61f0-4960-858b-615d53097d51", "sighting_of_ref": "indicator--acfba706-6e3e-46a4-9f7f-772c63bc8a6e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf2de53-8b48-4ed3-aa24-4a5c1624621c", "sighting_of_ref": "indicator--acfba706-6e3e-46a4-9f7f-772c63bc8a6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb4dc87-da10-4601-a06e-17bd9a569850", "sighting_of_ref": "indicator--80786f5e-0148-455a-bf74-0bf6d6ea4771", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e922d58-bd8f-4f7d-b9bb-ada3e0147854", "sighting_of_ref": "indicator--80786f5e-0148-455a-bf74-0bf6d6ea4771", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c723ac-4ff4-4ab0-bb16-f439d939e327", "sighting_of_ref": "indicator--713b979c-1e96-4c06-a8dd-591e606cb429", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7581134c-ba50-4feb-b887-adeee7a6285f", "sighting_of_ref": "indicator--713b979c-1e96-4c06-a8dd-591e606cb429", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c33e602-488e-489f-bb53-999000c62c19", "sighting_of_ref": "indicator--bf458f0b-336f-49dc-8f52-d7315f244ca1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb86f5b-b29b-4f62-8e54-c88237560ef8", "sighting_of_ref": "indicator--f126ff41-1bba-4425-8c6f-b89c8cf7cbba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbbf125-c0ee-4601-a715-eaeced713695", "sighting_of_ref": "indicator--f126ff41-1bba-4425-8c6f-b89c8cf7cbba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c98493-aff4-4992-8e2a-8379cf085771", "sighting_of_ref": "indicator--fa538492-f521-4c79-bd2e-08ca93f53353", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0874367-0eae-4847-b9ff-061e9ece632b", "sighting_of_ref": "indicator--d0c1bbc7-4148-47e6-b3a4-f6c753d5c066", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f142a071-c95c-4cf2-ab50-5d5a5440171e", "sighting_of_ref": "indicator--d0c1bbc7-4148-47e6-b3a4-f6c753d5c066", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd8868b-cccd-4909-9702-9d5c240cd36f", "sighting_of_ref": "indicator--be910347-6651-4cde-ab69-aebd417e50b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6635ef0-86d9-4a27-965f-86eafbf07b00", "sighting_of_ref": "indicator--cf1917aa-c55f-490c-a24f-ff1cd05a5f08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f0ad26-6729-435f-8553-3114391d0c20", "sighting_of_ref": "indicator--cf1917aa-c55f-490c-a24f-ff1cd05a5f08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf16ee-081c-4005-bb96-e7abd5b2dcf6", "sighting_of_ref": "indicator--f1fff026-6d16-4fac-8447-846a8f2d165d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826bfd20-1cf8-46d2-8269-301ed91bdbec", "sighting_of_ref": "indicator--be95c7d4-2aa9-46f3-bcd7-932e0b4d28f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358dee90-2300-449d-81d2-84133b1c0e3e", "sighting_of_ref": "indicator--be95c7d4-2aa9-46f3-bcd7-932e0b4d28f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a59fd6d-3702-41e3-ae06-cb611bc54cb3", "sighting_of_ref": "indicator--be95c7d4-2aa9-46f3-bcd7-932e0b4d28f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158ad4eb-5de2-4037-a2cc-27581dccead4", "sighting_of_ref": "indicator--46ee5b89-6cc7-473f-878c-b6ab37382d35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d00f3-9360-441e-b274-de9717d1f23c", "sighting_of_ref": "indicator--46ee5b89-6cc7-473f-878c-b6ab37382d35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fd9c8e-cdc6-4723-afdc-646579bf3de9", "sighting_of_ref": "indicator--058789b1-3dbd-4790-8d76-4a82838e382f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796c037b-182f-4f8e-9cc6-5e172bf01a9f", "sighting_of_ref": "indicator--54b3bdec-33c3-454a-94f7-04191641057a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b468c8-b7b2-4097-bf33-b578394d0d7d", "sighting_of_ref": "indicator--54b3bdec-33c3-454a-94f7-04191641057a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cf6823-8c39-4fe7-88f9-f1c951e0f0a7", "sighting_of_ref": "indicator--bbd197b9-799d-4485-9f67-7045bf666313", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c7353d-da70-45e6-ab16-155507524812", "sighting_of_ref": "indicator--48ee78ae-df55-4839-9aa5-43fb011e8135", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd2268f-3c01-48fa-8ddd-ea2ab235d7bb", "sighting_of_ref": "indicator--48ee78ae-df55-4839-9aa5-43fb011e8135", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f6f504-72b7-404f-948d-c17ee7efe789", "sighting_of_ref": "indicator--2e8bff6e-9795-483a-8acb-8e1c0a488081", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a175cfe1-2c92-4e21-9cfc-398366cf9072", "sighting_of_ref": "indicator--2b473b64-f5e6-4274-9a87-ecb465b40958", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95de49d7-2ef6-4576-bf88-a83fc75747f8", "sighting_of_ref": "indicator--2b473b64-f5e6-4274-9a87-ecb465b40958", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5649f5-cd41-4078-ba3c-dfb01327c4f5", "sighting_of_ref": "indicator--eeda81e6-fde8-42b0-b06c-8173a19daf55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38e87f1-5436-44a4-bd21-d9bb21573bab", "sighting_of_ref": "indicator--66cb2055-9c51-4595-a370-bdfc48f65205", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d2827-79f2-40bc-8f70-d1ec47ea42dd", "sighting_of_ref": "indicator--20807be0-e652-4c93-b4c4-13f94e698c6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa4d39-e8e0-4af1-b27c-6964153fc068", "sighting_of_ref": "indicator--20807be0-e652-4c93-b4c4-13f94e698c6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df70ba1b-2e4a-4389-9170-98f63f56d33e", "sighting_of_ref": "indicator--001c6d1d-c175-4fb3-b17e-590945839f12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555040b8-9528-4789-94c3-9b20d11a7ab5", "sighting_of_ref": "indicator--9ebb30e5-9189-4cc2-be77-73a21f3cc90f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229f925f-7b91-475a-bb7c-5c9d80bf1951", "sighting_of_ref": "indicator--9ebb30e5-9189-4cc2-be77-73a21f3cc90f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a04cd0-12cb-4650-a7dc-50ca8a3f3387", "sighting_of_ref": "indicator--3c4707bb-76b0-4764-81b4-7939ffe95a1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfdb2c9-76be-464a-bc81-20dd28e154d9", "sighting_of_ref": "indicator--3c4707bb-76b0-4764-81b4-7939ffe95a1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ad35f1-6b70-43c1-ad4e-2f494b860afb", "sighting_of_ref": "indicator--3c4707bb-76b0-4764-81b4-7939ffe95a1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e778b8-d4f8-481e-a189-ad2852363a6b", "sighting_of_ref": "indicator--1c5b4fbf-8c53-46d4-a8d6-18a67cecb7bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1bfae7-3c3c-485e-88cb-57d3205d994b", "sighting_of_ref": "indicator--1c5b4fbf-8c53-46d4-a8d6-18a67cecb7bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6886443-6365-47f3-907a-5194532d33f8", "sighting_of_ref": "indicator--efa72ff2-40c9-43bc-a65e-aed7daa7b01c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae760626-834b-4895-a9c0-e28eec5ccbcc", "sighting_of_ref": "indicator--efa72ff2-40c9-43bc-a65e-aed7daa7b01c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c742351-7a16-4051-99f2-e23efdc16d26", "sighting_of_ref": "indicator--efa72ff2-40c9-43bc-a65e-aed7daa7b01c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d0ebc6-4554-4d05-95e0-a531f184ca69", "sighting_of_ref": "indicator--9f3290f8-8cdc-4500-9862-9b0bc9e875a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e557027-ff6e-4769-aefc-960d8c55db4b", "sighting_of_ref": "indicator--9f3290f8-8cdc-4500-9862-9b0bc9e875a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71394332-4437-4424-9450-1bfd20ee1cd0", "sighting_of_ref": "indicator--2403e043-4f74-46e6-939e-ab76b127a659", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138692ba-4936-4bd3-95b8-36493d718627", "sighting_of_ref": "indicator--2403e043-4f74-46e6-939e-ab76b127a659", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb35fc9b-1e80-4004-b303-79601cb0236a", "sighting_of_ref": "indicator--ab3ecb5f-bc8f-4e91-8599-e84117376e09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cbd934-bc86-4176-b08d-823c2b9462f0", "sighting_of_ref": "indicator--85cee56d-fe29-4867-a728-e43525b39dd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bbeadd-b50c-4eb1-b9f7-44b0f0d87831", "sighting_of_ref": "indicator--85cee56d-fe29-4867-a728-e43525b39dd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19394f0-0659-49e0-8386-ee647a56c29d", "sighting_of_ref": "indicator--3466e980-3bfa-4f7e-aa17-d97c27bacba6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63035375-3a76-4ffb-bb54-fcbb973b8b83", "sighting_of_ref": "indicator--3466e980-3bfa-4f7e-aa17-d97c27bacba6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abf2789-38df-4f9d-9a5b-121c5b965f7a", "sighting_of_ref": "indicator--66a2ac22-947d-40aa-a4b6-44abd17ec0b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c9deba-d8bd-4ad6-9057-e6be4fdd2ee2", "sighting_of_ref": "indicator--66a2ac22-947d-40aa-a4b6-44abd17ec0b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1963ef4-c471-47b1-8ebf-484d7c5721fa", "sighting_of_ref": "indicator--66a2ac22-947d-40aa-a4b6-44abd17ec0b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac257636-5c12-4bd7-b8f9-df9d0988bfd9", "sighting_of_ref": "indicator--44d95fe9-e3f8-4a31-9f9b-bc6a26768e9f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42968e7-581a-4ebc-ae87-57a519ff181a", "sighting_of_ref": "indicator--4f8b6c79-b18d-4f8b-b21b-733d0c3c8ddb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da022767-675e-4a98-8a1e-5bcbefae9c6d", "sighting_of_ref": "indicator--0f9b2e00-4c1d-4da4-abfe-bf08f840eb55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785942be-dd8f-434e-846b-ee7cd2bd52b0", "sighting_of_ref": "indicator--1b2c84fa-0d02-487c-b91f-5c433348076b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c536cd-8857-43f2-a1e1-b9d9ba4dfbf1", "sighting_of_ref": "indicator--b8cea048-0d1a-4074-b4f8-767fe75d234e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33768add-083b-44b4-8e06-27089870b101", "sighting_of_ref": "indicator--b8cea048-0d1a-4074-b4f8-767fe75d234e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07c5c5e-d57a-4166-90de-98ffa11f334f", "sighting_of_ref": "indicator--b8cea048-0d1a-4074-b4f8-767fe75d234e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4937ee5-a528-4b80-b372-42214b892fa6", "sighting_of_ref": "indicator--4d0bd6f2-e8d3-4298-aa3d-ee8d8287b2ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41412345-e439-4baf-96e5-a6497b2602d3", "sighting_of_ref": "indicator--4d0bd6f2-e8d3-4298-aa3d-ee8d8287b2ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133682f-5307-42eb-a5e8-bc01eaff7c76", "sighting_of_ref": "indicator--4d0bd6f2-e8d3-4298-aa3d-ee8d8287b2ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cd4f77-f682-4001-8513-16990266bf74", "sighting_of_ref": "indicator--19ae587f-7f13-496d-89ec-d0da2af482ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a772373a-145f-44f6-9692-7ca6b7a33177", "sighting_of_ref": "indicator--55dcfde5-cf51-4ddf-9f5f-6dc9d86c02f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109983cb-244d-47fb-9d82-153fd7ed34b3", "sighting_of_ref": "indicator--c1907630-ff95-46ff-9527-3cf0bf6e29e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d917e68e-d025-4364-afdc-b0ab2a75f56f", "sighting_of_ref": "indicator--ec9ab741-f21a-4e4a-a51d-68d8883987e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3a0873-f31d-4a67-a76e-9512402f2fa8", "sighting_of_ref": "indicator--d683d19e-0e40-4c4d-8184-68f74d622d1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cddc89a-c5d1-44de-ae9e-e835ce94f2cf", "sighting_of_ref": "indicator--d683d19e-0e40-4c4d-8184-68f74d622d1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcedc3fa-fa2e-4b55-8466-66342df48c51", "sighting_of_ref": "indicator--d683d19e-0e40-4c4d-8184-68f74d622d1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d038ef-8b96-4738-933e-927920ec36e2", "sighting_of_ref": "indicator--44a9a2cb-97a0-43c7-8c80-17d227daa38f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141d51f2-5980-4b3d-8739-ffb5ee98b772", "sighting_of_ref": "indicator--44a9a2cb-97a0-43c7-8c80-17d227daa38f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14259a83-c249-4bae-859d-601a1e53aa14", "sighting_of_ref": "indicator--c83e48f5-7423-4b64-bee9-43d2c1b221f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3decf02-d06a-47a2-b5b0-e71b1dd918fd", "sighting_of_ref": "indicator--c83e48f5-7423-4b64-bee9-43d2c1b221f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33208217-5bb8-463b-a8f0-04517224f9b2", "sighting_of_ref": "indicator--c83e48f5-7423-4b64-bee9-43d2c1b221f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b62afdb-a5c1-4210-b9a8-f196a9751fe8", "sighting_of_ref": "indicator--923f6049-b04f-4bf2-b98e-aaa46f94c982", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96297313-bcbd-4361-921f-875f459f2a36", "sighting_of_ref": "indicator--923f6049-b04f-4bf2-b98e-aaa46f94c982", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cec3dea-8f4f-4481-913b-2f5fa5906cc8", "sighting_of_ref": "indicator--755d33b1-eaa3-4fa2-a734-29b548adc4fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929bf762-7c7f-4f07-b79a-d54b7ac7b3ce", "sighting_of_ref": "indicator--064401ff-77a1-4f57-8755-e9f78e220556", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ff0a71-b61c-42fe-9f53-2b641d7ee3cf", "sighting_of_ref": "indicator--9207ea7f-4a56-4cf6-8035-91a5f8a3ee39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be0103a-cea8-441b-af73-0a489ab5bdee", "sighting_of_ref": "indicator--9207ea7f-4a56-4cf6-8035-91a5f8a3ee39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94930f49-8c30-4202-bafe-cec953931334", "sighting_of_ref": "indicator--e5973989-e469-4222-ba9e-7a2dd6a8f610", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffb4d09-3e2f-403f-9eb1-b56150f0ce16", "sighting_of_ref": "indicator--e5973989-e469-4222-ba9e-7a2dd6a8f610", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160498ee-5814-4c1d-b9e8-8b5666602ed0", "sighting_of_ref": "indicator--9425f716-f021-4076-96bc-74ecf2c278f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9246d322-fab6-4c28-b505-cd2ad37b6111", "sighting_of_ref": "indicator--9425f716-f021-4076-96bc-74ecf2c278f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd79c249-5773-48bf-8755-b08a5dd6648a", "sighting_of_ref": "indicator--9e81728c-6199-4f4b-b4e6-b81c9a511946", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7850882-87cf-46de-b858-69f6aa0c915e", "sighting_of_ref": "indicator--995151ec-5c54-475f-9445-d240d3ed74bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea9f4d0-4829-4216-941e-b404facd878d", "sighting_of_ref": "indicator--995151ec-5c54-475f-9445-d240d3ed74bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9484e8-ff2e-4f48-bafd-50f1da915679", "sighting_of_ref": "indicator--8e9c1071-d91e-44d4-9d14-9abbcf6f91a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01778b7b-892a-44af-99b4-702a24ad2c20", "sighting_of_ref": "indicator--8e9c1071-d91e-44d4-9d14-9abbcf6f91a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3297b96-127a-4b68-9182-e9944e521dd4", "sighting_of_ref": "indicator--1ec34e71-12ba-494a-be7b-b68deae2c5f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdc0ca3-35ea-4fbf-8d34-a987b54aaef0", "sighting_of_ref": "indicator--72bc6a20-3c3c-40cd-b281-cd50eab718f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35ac417-2d33-43e5-abcf-8775895956a1", "sighting_of_ref": "indicator--0c39a3a0-9605-4281-a716-3d9df66b3f43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f258e2-b3f9-4df1-a27c-8a691792cc27", "sighting_of_ref": "indicator--9befb902-12cc-4d16-99f3-3ef51e41a406", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f5c755-a1ec-4b7c-8c6f-0599005511e4", "sighting_of_ref": "indicator--9befb902-12cc-4d16-99f3-3ef51e41a406", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78606acf-f618-424c-99ae-375eb00a5e1e", "sighting_of_ref": "indicator--9befb902-12cc-4d16-99f3-3ef51e41a406", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f99dfb-6b3e-4f96-b0cb-5e7656886a58", "sighting_of_ref": "indicator--7f28e858-800c-4c05-ae66-e558321c68c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78c6cb2-3183-4922-bfb0-441c2682851b", "sighting_of_ref": "indicator--7f28e858-800c-4c05-ae66-e558321c68c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1abfc6-bc0f-47bf-94b5-86a980ec9f02", "sighting_of_ref": "indicator--9571bf37-e774-4f56-b7aa-e1638f448629", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3f3ad1-c925-4127-bc2a-ce462e7f9111", "sighting_of_ref": "indicator--8930d10c-2adb-4254-aa3d-855af81d1484", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d31976-79d4-499f-94ec-599e77ba436b", "sighting_of_ref": "indicator--8930d10c-2adb-4254-aa3d-855af81d1484", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510336ea-fd78-4dbc-adb8-bafdcb8108f1", "sighting_of_ref": "indicator--cfbed741-bbb9-4842-b741-76660549092b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac49411-e30c-4fb0-8ce7-49a66570abb0", "sighting_of_ref": "indicator--cfbed741-bbb9-4842-b741-76660549092b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23b730a-a3c5-4602-b28a-aea6395ad48e", "sighting_of_ref": "indicator--cfbed741-bbb9-4842-b741-76660549092b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7e2ad8-84c0-4310-be43-1e4a168fd9e1", "sighting_of_ref": "indicator--56eb5ddf-5788-4477-a7ea-aee05b41d96c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c14805-bfa6-4db6-ac15-09a9ed238e90", "sighting_of_ref": "indicator--56eb5ddf-5788-4477-a7ea-aee05b41d96c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b5b261-334b-4f4d-a073-045ce58edcd8", "sighting_of_ref": "indicator--4bd36d58-9519-48ea-855f-23ac0c252aed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af89d6e6-9ec7-43b0-bfc8-a7185aa9584d", "sighting_of_ref": "indicator--2af06139-dfad-48c4-955e-f06139b51dac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2a1bd4-c73e-448f-b9a4-cae58e8a17c7", "sighting_of_ref": "indicator--f2c28257-1daa-42f8-b6e9-e535129dd6e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a177d19-5911-4af2-95b8-88098fa3f26b", "sighting_of_ref": "indicator--eaf6526a-c823-4529-b16b-fc8880418e65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f58688d-97a7-44e7-af28-23b1d1aac5cd", "sighting_of_ref": "indicator--eaf6526a-c823-4529-b16b-fc8880418e65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3070bc-d883-4244-8fa5-0f4f51cf2597", "sighting_of_ref": "indicator--bfb0bcbc-1363-4c18-86f2-04340bce9b49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a0480-cf39-4d03-8440-94e4d239864e", "sighting_of_ref": "indicator--bfb0bcbc-1363-4c18-86f2-04340bce9b49", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61db8876-f006-4175-bc44-616d50cf4a54", "sighting_of_ref": "indicator--b865f559-b63d-4d24-95a4-5384f8b16426", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135f8386-a42b-46aa-a1c2-66097f13e950", "sighting_of_ref": "indicator--b865f559-b63d-4d24-95a4-5384f8b16426", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e4a3e6-c4d1-4498-af94-9c4d5cb658f4", "sighting_of_ref": "indicator--28ffe3ba-d5e7-4a7d-baad-9f9043fd453c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dc2bf4-ee4c-4955-8aa6-3e3e0656cff4", "sighting_of_ref": "indicator--cd5f7fb8-4915-468b-8f5f-1787a8656576", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc931d24-b16d-43e9-96a0-e1316102b015", "sighting_of_ref": "indicator--cd5f7fb8-4915-468b-8f5f-1787a8656576", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7370bfe7-950d-4c62-a926-770af07a7ef3", "sighting_of_ref": "indicator--e3d89bf7-40f0-46fb-8875-5f8178cbd8a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49affe-8ace-4ead-884c-5653576b3f4c", "sighting_of_ref": "indicator--690249bb-c272-46a2-a4b2-0a2b29f0b503", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f70d76-af8e-4fce-b5d1-04bf45af2b17", "sighting_of_ref": "indicator--690249bb-c272-46a2-a4b2-0a2b29f0b503", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1bcc47-cb8a-4851-b54c-10657f0ef1ab", "sighting_of_ref": "indicator--6dd890f0-b8f6-40bd-b2da-c6badc55238e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ceb4d0-4b86-4fd0-98e7-0f92bb9748f5", "sighting_of_ref": "indicator--6dd890f0-b8f6-40bd-b2da-c6badc55238e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da724d0f-4b8b-40a4-8589-e37dc066f967", "sighting_of_ref": "indicator--350a2f1c-70a8-4aae-aad0-9328b724ef5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f0d376-8060-4568-a618-c2d2dce02c4e", "sighting_of_ref": "indicator--350a2f1c-70a8-4aae-aad0-9328b724ef5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611eb347-5985-4e20-9561-2d904f3c4d83", "sighting_of_ref": "indicator--350a2f1c-70a8-4aae-aad0-9328b724ef5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e3d305-0dab-42d2-910c-ef44889355df", "sighting_of_ref": "indicator--31d97540-2fb0-49dc-a840-f2b1569e7c70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ba9ca7-5496-4fe3-b4a2-10fb0a065162", "sighting_of_ref": "indicator--31d97540-2fb0-49dc-a840-f2b1569e7c70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd5512f-a094-4ee3-983c-be8da0a2a323", "sighting_of_ref": "indicator--b0c7a602-9c00-4449-a6f1-4555a0e2b879", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112cabb7-84d2-4563-af59-9d308689f213", "sighting_of_ref": "indicator--12686269-688c-4cb4-989d-1eb404d87435", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6975ee41-a3b5-48b1-a8ed-e87d3089d5b7", "sighting_of_ref": "indicator--12686269-688c-4cb4-989d-1eb404d87435", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536993e7-16e6-4538-b175-f2b99ee5198c", "sighting_of_ref": "indicator--2c5383a2-7a15-4620-a2be-0c8efa3bc372", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fcfd67-cffe-4bf5-9d58-cf9b8b3f4202", "sighting_of_ref": "indicator--2c5383a2-7a15-4620-a2be-0c8efa3bc372", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90a6de-7761-4c7c-81d9-0bb528e78a9b", "sighting_of_ref": "indicator--0a316658-51bb-469e-a1ed-99784a35f1d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0199c07-3953-486e-b724-c9fd1b6406e1", "sighting_of_ref": "indicator--41937865-bec7-4d28-b017-9f52bbf57c86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a1875e-e6f9-4476-81da-e16150178b3f", "sighting_of_ref": "indicator--41937865-bec7-4d28-b017-9f52bbf57c86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e63b9b-a9ad-4a0e-b639-15c25066bf86", "sighting_of_ref": "indicator--fdf95703-12d9-48d6-9e96-bea962adde11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7584dc5-cf78-4bc8-b5ac-15f212662268", "sighting_of_ref": "indicator--fdf95703-12d9-48d6-9e96-bea962adde11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bbc0ac-97bb-468b-bdaa-debf6066146d", "sighting_of_ref": "indicator--fdf95703-12d9-48d6-9e96-bea962adde11", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dffaf24-e7e5-4164-8bf7-949cdc2bf7e3", "sighting_of_ref": "indicator--03008f51-b625-4bcc-91ce-0413e8db2589", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f86903-3faf-40d7-a385-f7daca0d8820", "sighting_of_ref": "indicator--dd12d553-113e-4eb4-a9e6-7f4cbf97ff5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641de10d-dc6c-4da7-96b6-98e916ed0752", "sighting_of_ref": "indicator--b6d259fd-790e-4040-8ea6-f95ddfd8d1a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8346e989-2277-442a-a430-8df5f021a478", "sighting_of_ref": "indicator--b6d259fd-790e-4040-8ea6-f95ddfd8d1a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd22025b-c93a-4661-a08c-ce77c0167c4b", "sighting_of_ref": "indicator--fc252ebe-298b-4b4e-baa0-a5493af71b44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bf04f1-6e7c-4471-8efb-49ce790cc001", "sighting_of_ref": "indicator--82e304e6-1405-49db-baa5-14444b9d487e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09ccd62-c890-44a8-b702-c2f2680099dd", "sighting_of_ref": "indicator--82e304e6-1405-49db-baa5-14444b9d487e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1ab4b2-7f71-4027-acd2-f9d89cce320e", "sighting_of_ref": "indicator--cc9ed010-b92e-4455-8aa6-bbda32cb5054", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74468e64-ee17-4209-85fd-234b86e25dba", "sighting_of_ref": "indicator--cc9ed010-b92e-4455-8aa6-bbda32cb5054", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d1519f-a42e-4896-b035-dc3b392ef22e", "sighting_of_ref": "indicator--cc9ed010-b92e-4455-8aa6-bbda32cb5054", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96331e8-c4bc-4eee-aab2-46a910db7045", "sighting_of_ref": "indicator--363793c1-35c2-40d7-b20a-2b9cea0c92f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b92b65-5522-4de9-88f9-a7dfc369eee6", "sighting_of_ref": "indicator--363793c1-35c2-40d7-b20a-2b9cea0c92f2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a005c99-ea86-49ac-bf75-acd4203c2275", "sighting_of_ref": "indicator--7fc02374-0c6b-4944-92e2-22090ff23c0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534f6888-e3c8-42c6-8e6f-377419791df4", "sighting_of_ref": "indicator--7fc02374-0c6b-4944-92e2-22090ff23c0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c491c3e-c0a6-47a5-8e8b-dcd91e54e9ca", "sighting_of_ref": "indicator--7fc02374-0c6b-4944-92e2-22090ff23c0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f4afb3-c4eb-4bfb-8948-41ebdfc90188", "sighting_of_ref": "indicator--6d5af6db-6c6e-41de-bbe2-dffbf14ee121", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3ea0a5-e772-461a-b093-3c79c4b4739c", "sighting_of_ref": "indicator--e5b95e90-58af-433a-be94-1620ab3ecb8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24179b4-2d83-4542-9aa9-96649c3e61ae", "sighting_of_ref": "indicator--a353a47c-4d59-4710-ac11-f7af4f3ba5aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854c43b4-0059-4fbf-bc68-68a35ff436e4", "sighting_of_ref": "indicator--a353a47c-4d59-4710-ac11-f7af4f3ba5aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c480e69-87fd-4c90-af21-17e6c2fba63b", "sighting_of_ref": "indicator--4dc66e07-f05a-40a6-b9ec-b23cb21fe306", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625f84fd-b925-43f9-8f95-587c90a5f315", "sighting_of_ref": "indicator--ae7bb62d-fbb6-4a80-8e26-f494342b6641", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dba86d1-c8b2-41b2-980c-f4e2f7d6cad8", "sighting_of_ref": "indicator--6cc9baba-08e6-4827-bc61-2a71aa49fba1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2f093a-cbdd-4be6-b014-747cf5b57cca", "sighting_of_ref": "indicator--776071a1-2a23-47e6-9f9a-3d5040be9818", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b1e0c8-dbb1-41fe-afdd-ec2a112292de", "sighting_of_ref": "indicator--776071a1-2a23-47e6-9f9a-3d5040be9818", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8174b848-d0aa-4094-a415-f683467c86dc", "sighting_of_ref": "indicator--e92c3068-5a0e-4e68-ba69-b6a991cd817d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8042ee9-8462-47a6-9756-9d7199ba3b39", "sighting_of_ref": "indicator--e92c3068-5a0e-4e68-ba69-b6a991cd817d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd1d17d-1afe-46c2-8227-9518a1ae813e", "sighting_of_ref": "indicator--24459c99-074b-4285-9c02-524ede15af5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1bcd2b-d8f7-4364-bbc9-692535b67d6e", "sighting_of_ref": "indicator--24459c99-074b-4285-9c02-524ede15af5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1945fbcf-eb20-4467-9786-cc827e549293", "sighting_of_ref": "indicator--e6b880b6-58f8-462b-81bd-10559ceaa7e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabbac25-6618-4915-959b-d3d427134115", "sighting_of_ref": "indicator--225507ef-d077-45c8-9b67-6b2d663163c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f970318-bbc6-4ce0-bccc-aaabeb2202ce", "sighting_of_ref": "indicator--225507ef-d077-45c8-9b67-6b2d663163c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd1a054-585d-489b-9683-595a1d85ebef", "sighting_of_ref": "indicator--225507ef-d077-45c8-9b67-6b2d663163c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23db7874-cc9e-4035-b94e-4a363eb60dcd", "sighting_of_ref": "indicator--12ab7a61-5e10-4a54-93a2-a6bf3daf4155", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e0daa9-b0ef-40e4-92b2-50726776f8de", "sighting_of_ref": "indicator--2e7004a5-2212-4728-9f97-1c60ec1e3c3e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50c536e-269b-4df1-ae89-c2a1e6a8e3c3", "sighting_of_ref": "indicator--2e7004a5-2212-4728-9f97-1c60ec1e3c3e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb14af2-f41a-46f8-ac06-7c39fdea9b5b", "sighting_of_ref": "indicator--2e7004a5-2212-4728-9f97-1c60ec1e3c3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966dc8a0-7251-4b64-b0e4-3f6f4aac7bae", "sighting_of_ref": "indicator--850c7ea5-dc8d-4c66-b66a-61395742a285", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c907c2ad-ed72-452b-9737-fe9d9a652291", "sighting_of_ref": "indicator--850c7ea5-dc8d-4c66-b66a-61395742a285", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1d7c64-53ff-4397-9095-5cf0734767c5", "sighting_of_ref": "indicator--4c445101-721f-4232-b940-a9c53b416214", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de31e43-e9cf-4406-bde4-8602730db34a", "sighting_of_ref": "indicator--4c445101-721f-4232-b940-a9c53b416214", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e714264-d334-4405-adf8-46d4234e5e35", "sighting_of_ref": "indicator--5a666198-ec71-4b40-a243-2a0f88bd0269", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00945071-6195-4373-a430-38b91d0b8cb3", "sighting_of_ref": "indicator--5d7cd22c-1836-4030-8298-1783b3b3a1fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac331ab-2914-4d83-9052-d2a4439cce25", "sighting_of_ref": "indicator--5d7cd22c-1836-4030-8298-1783b3b3a1fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0347acce-1878-477c-965d-21ff2a744a0d", "sighting_of_ref": "indicator--5d7cd22c-1836-4030-8298-1783b3b3a1fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e385c719-18d2-4dc4-8932-e269ddf6d511", "sighting_of_ref": "indicator--6d865c5e-ce7d-464f-8a8e-4d0fcd1fda60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac81c488-0224-47be-9c02-d316fe79356e", "sighting_of_ref": "indicator--af503b21-417c-47be-9f7a-14dd22aca8ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047807df-0f18-4286-b61a-e5dee6c1bf00", "sighting_of_ref": "indicator--af503b21-417c-47be-9f7a-14dd22aca8ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c4e604-cd94-436c-b45a-17e25a17c8a5", "sighting_of_ref": "indicator--ced938df-b9e9-4b02-9bd5-9cb012885172", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2db9bab-a8c6-4951-88cf-1a1d19e9b816", "sighting_of_ref": "indicator--5b23ba13-281b-4cad-9a49-cabcb22535e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b25c95-3ac0-4dac-b997-2306c385958f", "sighting_of_ref": "indicator--5b23ba13-281b-4cad-9a49-cabcb22535e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f6261c-d1e9-4df8-8daf-4c870a1e8009", "sighting_of_ref": "indicator--4f4e2157-b6eb-406a-907b-1955c04962c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c682826-d82f-4d63-88f1-f69b40e68675", "sighting_of_ref": "indicator--eecf47b6-d9b0-4e67-b9eb-e56a59ede49d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b53517-c7fb-4250-ad53-1deff339ef7e", "sighting_of_ref": "indicator--eecf47b6-d9b0-4e67-b9eb-e56a59ede49d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03acd655-a9f3-4eed-8083-c4fded95b6a1", "sighting_of_ref": "indicator--2069aa4c-baaf-4197-b0c2-3b0b05c71fa3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03a5429-b981-4372-93cf-fd7662cfa9bf", "sighting_of_ref": "indicator--d22e347b-8c99-4762-9347-874e34342c99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c938aca-c2d8-4e8b-bf9f-2cb42a78dcc2", "sighting_of_ref": "indicator--e41bf207-3768-47bb-b90a-dd8d42b7bcaf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a878073-2e11-4ecb-8a61-1223a003adeb", "sighting_of_ref": "indicator--e41bf207-3768-47bb-b90a-dd8d42b7bcaf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e88817-ceb2-418b-b484-f664071b2ae2", "sighting_of_ref": "indicator--e41bf207-3768-47bb-b90a-dd8d42b7bcaf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99075849-a6e4-4101-9209-9ae0598ef0f5", "sighting_of_ref": "indicator--d50fd686-e7e4-478a-ad97-5b74bda98598", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef050ca-5334-4473-842e-3fc626a1ecad", "sighting_of_ref": "indicator--abdaed97-6ae3-4b84-b1a8-0f3d06813eb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac586aca-8fba-4023-9cd1-a60dd864a844", "sighting_of_ref": "indicator--f51bdf8e-2477-4e3e-807a-4bfe46457ca2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740cad77-0323-406f-a5d6-a1c733d3e6a1", "sighting_of_ref": "indicator--b3ea08bf-1df5-4b19-a492-d839c6d60617", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773d623d-e2e9-426b-919b-c3e5aceab1b4", "sighting_of_ref": "indicator--674bf528-8006-4a3d-a5e9-eeea7be5e64a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd5c413-d8a8-4ec4-a9d4-87e4a0c8ca9c", "sighting_of_ref": "indicator--674bf528-8006-4a3d-a5e9-eeea7be5e64a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78c5e4c-c103-469c-991e-3f75c1d21b7c", "sighting_of_ref": "indicator--8483b79a-57aa-46f7-8b80-ff8d558b6e11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a9502e-db51-454d-9ef5-299d31bed4bf", "sighting_of_ref": "indicator--8483b79a-57aa-46f7-8b80-ff8d558b6e11", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1c3041-a12f-4c56-92c6-e9c0c4cd651b", "sighting_of_ref": "indicator--920f1edf-61bb-4253-8a4b-f1e70e1c1565", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0382edd-89a5-4441-bd8c-02dbbf74df7d", "sighting_of_ref": "indicator--ba468a22-3c0d-4370-8cd2-8a54174573b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57df5a64-6012-4331-abd2-04dbfbdf84fe", "sighting_of_ref": "indicator--ba468a22-3c0d-4370-8cd2-8a54174573b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca6fa3-d0d4-419e-beee-4453d29164fe", "sighting_of_ref": "indicator--78d53b93-bbec-48c2-ac94-509711e5aa45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2ca037-0610-4a49-a760-0d19e9585f73", "sighting_of_ref": "indicator--78d53b93-bbec-48c2-ac94-509711e5aa45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154db6df-abb0-421c-b1ea-da99f94dc0ae", "sighting_of_ref": "indicator--78d53b93-bbec-48c2-ac94-509711e5aa45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f890186-a969-485d-933b-87778ebbf9c0", "sighting_of_ref": "indicator--1194400b-a917-4fe6-b98b-975844d8bd99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66694086-9e09-43a2-b2f4-2075144e22a4", "sighting_of_ref": "indicator--1194400b-a917-4fe6-b98b-975844d8bd99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ef3cb-0dbf-49e4-a2ef-ee168ce4a283", "sighting_of_ref": "indicator--f6235358-53db-4d3d-9064-dea1b0336247", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419f7eb4-48fe-49b4-bcb4-7f611201f22c", "sighting_of_ref": "indicator--3a1766d1-a390-46d2-a9c6-31127e7e1502", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd5cd8e-99f4-4f5b-8294-3b45788b1bd2", "sighting_of_ref": "indicator--3a5e2516-d4fb-4b16-96c6-0eca6d3a02fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaffcc5-f2cc-458a-a8a4-64ce5009f560", "sighting_of_ref": "indicator--9cdd7b73-2d18-4a95-8153-39b1afc72764", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1931c39-acdc-4f5f-9c4e-e83de7ef790e", "sighting_of_ref": "indicator--e68ff01c-759a-4cea-8a7b-cfc06f5eac9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102e5bd6-a529-41fb-8e34-898fc7591188", "sighting_of_ref": "indicator--e68ff01c-759a-4cea-8a7b-cfc06f5eac9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8005d3b-697d-4925-8327-bfabe5d4ee2b", "sighting_of_ref": "indicator--466eb603-0805-440f-957a-2f67524431e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c462b6-ad96-4e21-83fc-e95a4e881ba3", "sighting_of_ref": "indicator--edc42426-603f-440a-8881-724fe4dee3b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6605ecf-145c-4325-a60e-0dbe0e48007b", "sighting_of_ref": "indicator--edc42426-603f-440a-8881-724fe4dee3b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7984968c-f465-422f-acae-6c0e8ba9d552", "sighting_of_ref": "indicator--edc42426-603f-440a-8881-724fe4dee3b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fea1634-5e52-4808-8a60-1ebe43ec124a", "sighting_of_ref": "indicator--1e47b6fb-6d9f-45bf-ad9c-387706264989", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7d5c5a-1197-4eb0-97b1-688ef910d833", "sighting_of_ref": "indicator--60449ca3-11d3-405e-a638-b2dc0ce1581f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebde734-6656-4a4d-b5f9-d1d04451d939", "sighting_of_ref": "indicator--e96f8e86-912a-4adb-80a1-896b67367d0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab890a6-e83b-4ed2-8ad3-cd17e13cb1de", "sighting_of_ref": "indicator--e96f8e86-912a-4adb-80a1-896b67367d0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b665e5-e35d-4715-8b69-542669bd794f", "sighting_of_ref": "indicator--e9b172c6-6bdc-48be-937e-4e3ffc2e41a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d5c6f8-92b7-4b12-a1e4-aa51ac313719", "sighting_of_ref": "indicator--e9b172c6-6bdc-48be-937e-4e3ffc2e41a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed2ceb7-713d-496a-b61f-e3c0c837d5d0", "sighting_of_ref": "indicator--7a671842-6a14-4642-b592-b6bfc46f6133", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a78f415-a388-42d4-8ea6-c114d4be55a9", "sighting_of_ref": "indicator--7a671842-6a14-4642-b592-b6bfc46f6133", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1a3982-e173-4674-9ab2-865512716fd0", "sighting_of_ref": "indicator--f8066b3f-7d75-45d4-8af4-9b253cb6694c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc04cb9a-3dba-49bc-894e-3f5b3ef50a6d", "sighting_of_ref": "indicator--b10f0b46-c7a2-4bad-aa54-ac60cd4165ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f530fa9-6bf7-4308-8050-9c0f97dee17b", "sighting_of_ref": "indicator--b10f0b46-c7a2-4bad-aa54-ac60cd4165ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984de15e-428f-4279-9e02-402d2ebd6370", "sighting_of_ref": "indicator--b2647286-ba85-46aa-ac42-69b8b70de41e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6285f4b7-8a8e-4cd6-a356-54e87886d12b", "sighting_of_ref": "indicator--b363bee6-4543-4139-8f6c-02d3eb4eb92e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fae669-7073-45e2-89bb-683bec97de4e", "sighting_of_ref": "indicator--8e3d83de-cfd1-49bd-8b9f-c2c6b842a3db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7f5daf-f200-47b3-a0be-9b90fe46a1fd", "sighting_of_ref": "indicator--8e3d83de-cfd1-49bd-8b9f-c2c6b842a3db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7d8f21-6dcb-4832-93cb-2d3de227e53a", "sighting_of_ref": "indicator--29e1e77d-2862-44d8-aefc-7f11c31ffc8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ecfeb1-8589-4d29-af73-a71cadbc2b66", "sighting_of_ref": "indicator--29e1e77d-2862-44d8-aefc-7f11c31ffc8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed519721-d59b-4970-8e7b-2652de1c8177", "sighting_of_ref": "indicator--29e1e77d-2862-44d8-aefc-7f11c31ffc8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2b1fe-45cd-4708-bb6e-3033ed065038", "sighting_of_ref": "indicator--3acc11dc-b55c-4de9-ae65-062ae89e29cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f48dd4-e5a0-4f53-b844-5e50923df4d9", "sighting_of_ref": "indicator--3acc11dc-b55c-4de9-ae65-062ae89e29cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7b18a2-6430-4a74-a5ca-b59d1dc794a2", "sighting_of_ref": "indicator--753018a8-15ef-4f17-96c3-d701c04734a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9e3a8c-4b4a-4309-9087-7d858ea20035", "sighting_of_ref": "indicator--b3b974a2-c4cf-47b5-83b0-36a80d21b65f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e4cbaf-48a3-403f-9e53-e4166ebac35d", "sighting_of_ref": "indicator--eec4c0e9-a601-492f-98d4-362c727f73e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe44439-c798-412d-bab8-7314ececa4af", "sighting_of_ref": "indicator--eec4c0e9-a601-492f-98d4-362c727f73e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105d4504-81cb-4499-9239-2e6ca743c1fa", "sighting_of_ref": "indicator--6fa780d8-e48a-42be-962f-5d293debe047", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8156654a-a3eb-42d8-9ea4-60e51e962daf", "sighting_of_ref": "indicator--f0b1dd1a-1b69-416f-bdae-21143d33c611", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96721e5d-35b0-4eed-bfbe-b9ca75e33c45", "sighting_of_ref": "indicator--f0b1dd1a-1b69-416f-bdae-21143d33c611", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b5dd4e-18d1-4389-8921-5148fd1a89b4", "sighting_of_ref": "indicator--3401ae1b-beaf-4f9d-81df-537f39b1bd01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1502a4cb-01b1-4d82-82b8-bdedcb9202de", "sighting_of_ref": "indicator--3401ae1b-beaf-4f9d-81df-537f39b1bd01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be9f070-c700-4d62-b6b6-2011b68f0200", "sighting_of_ref": "indicator--3401ae1b-beaf-4f9d-81df-537f39b1bd01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29744c3c-e1cb-4055-90b1-aef59ed0078f", "sighting_of_ref": "indicator--1e0d59f6-3697-4229-bb72-94a155df680f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc3703b-8d35-489d-b0dc-2e3aaaa113b7", "sighting_of_ref": "indicator--d6efcba4-5b36-4112-95a2-c8c69f73873f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d28f73b-9aa0-4ed1-97bc-629f2b6a3bda", "sighting_of_ref": "indicator--7dd67b51-c9ff-4bb5-ac5f-3627e880e61d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73eb70b-eaba-46a3-a66c-be0838a879bb", "sighting_of_ref": "indicator--7dd67b51-c9ff-4bb5-ac5f-3627e880e61d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bf0a56-7c1b-4028-8ac0-6103c1bf4e6a", "sighting_of_ref": "indicator--692b2a10-dc1e-41ba-ab3d-40bff60abfd9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea3fe71-7d15-4391-92fc-3507c6065ffe", "sighting_of_ref": "indicator--692b2a10-dc1e-41ba-ab3d-40bff60abfd9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260a7a22-4653-4cc1-993c-1eaa5d2253c4", "sighting_of_ref": "indicator--91e65133-a72b-4b18-b3bd-b3d1b6d4077d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b91d3c-f772-4f75-a7f5-78388f59748e", "sighting_of_ref": "indicator--2b6f2294-8a2e-40a1-a0db-620771692c57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd46357b-cfe3-47a7-8708-3c59fdaf9c04", "sighting_of_ref": "indicator--2b6f2294-8a2e-40a1-a0db-620771692c57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056ac3bf-7a59-4e81-9be3-39bf3a231288", "sighting_of_ref": "indicator--d6768727-8e4a-4e61-8511-a249846de65a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f237b6-e892-43ac-a8c4-8ffa7cd32eae", "sighting_of_ref": "indicator--d6768727-8e4a-4e61-8511-a249846de65a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4f295c-895b-4833-ac65-3302feb37240", "sighting_of_ref": "indicator--d6768727-8e4a-4e61-8511-a249846de65a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cd8f51-2fc0-4a2f-a32f-c0efb7eb3a42", "sighting_of_ref": "indicator--d24f192a-4b44-4788-aebc-1dc16744f2ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8925efc4-838b-4419-b05a-699eabb8464e", "sighting_of_ref": "indicator--d24f192a-4b44-4788-aebc-1dc16744f2ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b997ae31-acc7-483b-94de-f5dec11f6abd", "sighting_of_ref": "indicator--e4ba5b50-3de9-4b1c-8f39-989b568913ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85bb4ba-0d3a-4366-a1d1-654464351398", "sighting_of_ref": "indicator--e4ba5b50-3de9-4b1c-8f39-989b568913ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e8205-21ff-4b91-b32d-3da4bdbfb28b", "sighting_of_ref": "indicator--e4ba5b50-3de9-4b1c-8f39-989b568913ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22903af2-7007-4a2e-a46c-51440e4095ab", "sighting_of_ref": "indicator--e3617d78-e1a7-4ab8-b5da-9fc3a85e63c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdf4ce7-e507-4bfb-82fb-a7f99f9b078d", "sighting_of_ref": "indicator--e3617d78-e1a7-4ab8-b5da-9fc3a85e63c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5995643f-dd7b-45e7-a822-52653557619d", "sighting_of_ref": "indicator--e3617d78-e1a7-4ab8-b5da-9fc3a85e63c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac361d63-5b99-4948-bb1c-30c215cd476d", "sighting_of_ref": "indicator--0cfc6484-bd2e-4af2-b58f-f89731a4a2c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430e3523-19cb-4778-a98a-93074cf366a2", "sighting_of_ref": "indicator--0cfc6484-bd2e-4af2-b58f-f89731a4a2c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98de9b9-22d9-44ca-b773-c3bbb6cb6410", "sighting_of_ref": "indicator--0cfc6484-bd2e-4af2-b58f-f89731a4a2c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec175cf-4169-4914-9b80-070800f539bf", "sighting_of_ref": "indicator--b3447e52-a1c2-4d65-a095-36a42dcea4e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20c95ff-d536-4bcd-a1ce-044b6db6400f", "sighting_of_ref": "indicator--01bcdb02-69b8-43ba-be4f-c703caf3de57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac936e0d-9da5-4854-84ff-54f0ab46ae4f", "sighting_of_ref": "indicator--01bcdb02-69b8-43ba-be4f-c703caf3de57", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c25895-9311-4f6c-9e7a-d6d3e60a6c52", "sighting_of_ref": "indicator--bee5d380-2d99-4888-804e-8145b3449989", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67e0253-492a-4a76-87a9-f40203fc3fbe", "sighting_of_ref": "indicator--bee5d380-2d99-4888-804e-8145b3449989", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8b51a8-0f9d-453b-84f2-de5bb40050d4", "sighting_of_ref": "indicator--ff7fd655-54f8-4e85-bfbd-f78ee12b61cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685204c7-8caa-48bf-a439-aa07ed4d4536", "sighting_of_ref": "indicator--46f21d95-6690-4a82-aa4e-8e7b25665a42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46918b2-b2f3-41b5-9405-c577bf5ce3d6", "sighting_of_ref": "indicator--46f21d95-6690-4a82-aa4e-8e7b25665a42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70c543e-2500-4f24-8749-34fdcb15ba96", "sighting_of_ref": "indicator--1005585f-d896-4f01-8891-978c10a79b2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206f2a17-6e79-4b0e-aea6-072fff035403", "sighting_of_ref": "indicator--1005585f-d896-4f01-8891-978c10a79b2a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af03e902-795f-443f-b0f1-828b27546eab", "sighting_of_ref": "indicator--dce06669-c7c3-4953-a749-621629a92161", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4d333c-af52-4098-961e-e2edcb6093ed", "sighting_of_ref": "indicator--dce06669-c7c3-4953-a749-621629a92161", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cf9368-c287-402b-a28b-17662e25a61a", "sighting_of_ref": "indicator--b745404d-971b-4395-9f50-3017375ab956", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7669ade4-f5fc-4483-9ed4-10b8269ac78b", "sighting_of_ref": "indicator--54a0b506-f4b4-49de-b7c0-5b058396d5a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee284db5-552b-46b4-ae8e-27f8cc779e39", "sighting_of_ref": "indicator--54a0b506-f4b4-49de-b7c0-5b058396d5a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc37cc8c-79f2-4db3-9814-fe2692159ac5", "sighting_of_ref": "indicator--cdb49acb-3140-4241-ba80-0ebd0d1f682e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd95393-1787-45c2-9da4-03fabd02e4da", "sighting_of_ref": "indicator--cdb49acb-3140-4241-ba80-0ebd0d1f682e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e351ea0-7a11-44c5-be3e-934a746ff195", "sighting_of_ref": "indicator--df47f84c-5527-44a5-a34c-5cc06ee6191a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baaf351-3745-4e8b-b4ce-d44ade125b24", "sighting_of_ref": "indicator--df47f84c-5527-44a5-a34c-5cc06ee6191a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5355838b-3277-4f55-bdd2-63271c6bf373", "sighting_of_ref": "indicator--d25b84b1-3dba-4842-bcb6-c309b03fff6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5461ea6-672e-467a-84b1-f5ad5ff4098f", "sighting_of_ref": "indicator--d25b84b1-3dba-4842-bcb6-c309b03fff6f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b5e68f-c0f4-4412-8998-bfd425168a77", "sighting_of_ref": "indicator--d25b84b1-3dba-4842-bcb6-c309b03fff6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccba744-cdef-4852-9514-1c0371aba6f3", "sighting_of_ref": "indicator--2045686b-fc52-40a9-9342-cc2752eeea3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5e2cbc-0cbc-4c2c-9a2f-830623c5f9b0", "sighting_of_ref": "indicator--2045686b-fc52-40a9-9342-cc2752eeea3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ccc481-24a6-46eb-99de-9bb202e2d8c3", "sighting_of_ref": "indicator--2d374420-b586-4f1f-9b93-0f603f4b9980", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9eed35-6206-40c0-9136-750e39302587", "sighting_of_ref": "indicator--40781c71-f61f-48d2-9403-a2964a7ea7ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f882bf41-5a2d-42b5-a9eb-51601a113a45", "sighting_of_ref": "indicator--40781c71-f61f-48d2-9403-a2964a7ea7ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2c4bc4-481e-4433-a7ec-8660d07146ca", "sighting_of_ref": "indicator--40781c71-f61f-48d2-9403-a2964a7ea7ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51f2c8d-9d3c-4efb-ab36-f3c27c3c3f80", "sighting_of_ref": "indicator--2c9e72c7-b206-4453-a262-5599cf19234f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066808b-642a-4d18-a1ce-67a17c238fe5", "sighting_of_ref": "indicator--a73b6678-17de-4373-b78c-2174ef868485", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee5acee-dafc-45da-bdb4-15b0cb6a0ca8", "sighting_of_ref": "indicator--6d0a7491-9a04-4feb-867d-cf1cae036932", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aded1a6-3ec4-41ee-ba9f-28fd3c9f8a19", "sighting_of_ref": "indicator--6d0a7491-9a04-4feb-867d-cf1cae036932", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a9705f-2db2-4f75-bace-f605e1e1395f", "sighting_of_ref": "indicator--0c281760-421a-4739-aa24-df8ffe57b512", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d2d67f-79d0-4724-adb1-0b96ce782c06", "sighting_of_ref": "indicator--3cdd7b25-e73d-4fbb-9200-1cf777da006c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a049bcb-81da-4728-85cc-b84002b4f804", "sighting_of_ref": "indicator--3cdd7b25-e73d-4fbb-9200-1cf777da006c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd2956a-0d8c-46df-ac20-b6257a9e99ce", "sighting_of_ref": "indicator--22abdd88-d713-48ae-a5ad-7182d648a3a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd90313-a2fe-42df-a1b7-ef3a14f6cf98", "sighting_of_ref": "indicator--9f454680-455a-4a66-8a77-56bcd5419464", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a47445d-49ea-4108-9866-4970ef861c2f", "sighting_of_ref": "indicator--9f454680-455a-4a66-8a77-56bcd5419464", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e357a3-8922-4e27-9f86-878863af620e", "sighting_of_ref": "indicator--1211179a-29c8-47e2-82a5-77a0322200a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6b73b4-8de2-4343-a6ff-5aa2efc0be3c", "sighting_of_ref": "indicator--1211179a-29c8-47e2-82a5-77a0322200a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12f24b9-a003-4f74-affb-4a30adeab604", "sighting_of_ref": "indicator--80afb9ce-5aca-49d2-9c7d-3d3847b85f31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650dfe46-dc25-4743-8dfb-7e96d0156f57", "sighting_of_ref": "indicator--80afb9ce-5aca-49d2-9c7d-3d3847b85f31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d79651-1736-4daf-92d5-6ab07acf4dbb", "sighting_of_ref": "indicator--c12eab98-d3b2-4e3c-91b5-4a3ad0429841", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681d52a9-f104-4cdc-acd0-3ad2b3112571", "sighting_of_ref": "indicator--e907d4d9-3c7a-4b28-ab0d-12c041e72363", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac9d0cd-1d4e-4083-9d6d-3bf4185fa9ba", "sighting_of_ref": "indicator--ebda87fd-fcbb-4006-aebc-a743183045b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3a53b5-cd7f-4d19-bdd3-b5e6a5a876b2", "sighting_of_ref": "indicator--df9fdb52-0e1f-4a56-a2c1-7882747896c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546d6f70-ecc8-46c4-a971-02f825a1d9cf", "sighting_of_ref": "indicator--df9fdb52-0e1f-4a56-a2c1-7882747896c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6334a93e-fd19-407a-bb12-25a3e32a3ebf", "sighting_of_ref": "indicator--df9fdb52-0e1f-4a56-a2c1-7882747896c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2c318a-e37c-4143-bb3a-98f6a33913ff", "sighting_of_ref": "indicator--5c22dfac-c9ed-4d27-b52b-7344e94821c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482ce069-d0eb-4b90-8001-32f09a4c1add", "sighting_of_ref": "indicator--5c22dfac-c9ed-4d27-b52b-7344e94821c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a386406-7858-43fc-9d5c-a68366ee40c2", "sighting_of_ref": "indicator--bde19ad5-5521-4d6c-b706-beacbe5bc396", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47680e5b-63e3-4b13-b318-17ce6eb9f11c", "sighting_of_ref": "indicator--bde19ad5-5521-4d6c-b706-beacbe5bc396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162c1aed-6558-455a-bb63-f1e051e38a5f", "sighting_of_ref": "indicator--a6c32ac7-b53b-43ed-9151-ec64a63a58d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b61152-f263-4f40-a205-a52c9ff0656d", "sighting_of_ref": "indicator--71ebc232-88e0-4a5a-b41d-5dda07c7f957", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9e84a4-98dd-47d3-8713-768619bb890f", "sighting_of_ref": "indicator--308ea936-bf8a-486f-8fa3-1a534eb519e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae40a74-5e8e-48d0-b0cc-c5e3e7257ab3", "sighting_of_ref": "indicator--308ea936-bf8a-486f-8fa3-1a534eb519e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eed877-51ea-4264-8b38-a8dd48ff9a4f", "sighting_of_ref": "indicator--308ea936-bf8a-486f-8fa3-1a534eb519e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326e3106-8684-4ddc-bc75-d92b238cdac4", "sighting_of_ref": "indicator--0f3b0882-ecb8-4dae-a80d-37525697ef15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f458f46-2b3f-4aa2-a3ab-634c8108e6ad", "sighting_of_ref": "indicator--0f3b0882-ecb8-4dae-a80d-37525697ef15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075218b6-45a0-4097-bf6c-99bddaa17088", "sighting_of_ref": "indicator--0f3b0882-ecb8-4dae-a80d-37525697ef15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a827be3-be97-4543-8a6c-969b665ec63f", "sighting_of_ref": "indicator--aa8e85f5-8dcc-405c-9148-5ad51192c273", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f253e11d-7908-4b1f-945e-0b01fe35a1b9", "sighting_of_ref": "indicator--aa8e85f5-8dcc-405c-9148-5ad51192c273", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef27510-f0d1-4335-a2a0-2f149df55052", "sighting_of_ref": "indicator--aa8e85f5-8dcc-405c-9148-5ad51192c273", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142526dd-8ed4-4c1f-b9b7-761f6d4dea94", "sighting_of_ref": "indicator--d2fe41e4-8218-4d2a-8a47-00121d7ef7ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d88ce3-3039-4996-9e13-af2aea825905", "sighting_of_ref": "indicator--d2fe41e4-8218-4d2a-8a47-00121d7ef7ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560c3874-d540-401e-8851-5aee4e021c83", "sighting_of_ref": "indicator--d2fe41e4-8218-4d2a-8a47-00121d7ef7ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4962c0f2-127e-473f-9773-25a9066932b8", "sighting_of_ref": "indicator--41c040c3-4655-4834-bac6-b12dafc11128", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff500d90-c874-40f4-9cd6-c8edbccd809a", "sighting_of_ref": "indicator--41c040c3-4655-4834-bac6-b12dafc11128", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a881c4d7-93ac-4863-a8ed-a7b69fe97236", "sighting_of_ref": "indicator--41c040c3-4655-4834-bac6-b12dafc11128", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c478e9ab-c20e-4d06-a15d-c5e265841a60", "sighting_of_ref": "indicator--b78bb79b-0cdc-41f7-a472-1658b486c70f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576f55da-5567-4a1e-841d-c132b8081a97", "sighting_of_ref": "indicator--b78bb79b-0cdc-41f7-a472-1658b486c70f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89300dd-8a7b-4dd0-8f44-d6f63f3a4ebd", "sighting_of_ref": "indicator--b78bb79b-0cdc-41f7-a472-1658b486c70f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de17874-7710-4538-b1df-765e4fa5e5b1", "sighting_of_ref": "indicator--6e1fc297-7b36-4178-87a4-9c4dfb287d32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797cc53c-29bb-4967-af02-6804cf604dad", "sighting_of_ref": "indicator--8594e68a-739a-4faf-9bf8-4e9335114f8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0fe1e9-67c4-42c3-b338-032b105d7fe2", "sighting_of_ref": "indicator--8594e68a-739a-4faf-9bf8-4e9335114f8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd81010-15bc-4518-8e3f-6471074c5c65", "sighting_of_ref": "indicator--c1a1d8a3-dd96-4859-9055-1cecbdedcd5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ff3b2b-22eb-47a9-9780-66235f0ee1c3", "sighting_of_ref": "indicator--c98aedb7-00f5-41b6-be58-7411aedb4a8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f978fd-0889-44a6-bc69-bde18d192b98", "sighting_of_ref": "indicator--0da1ce57-90b3-4890-a75c-24a72d296199", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907ff02f-7a06-4099-8565-cf32f69b260f", "sighting_of_ref": "indicator--4e7a5ab8-48bd-4f4f-989e-b0aea95add5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fa341e-eb6b-47b7-9c9e-c7c2119e3e92", "sighting_of_ref": "indicator--9156fb4f-7aab-41fc-875b-a41340c5ca8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638b3df4-5ef0-4c43-b4f2-6f6174594081", "sighting_of_ref": "indicator--84a2be13-bfa0-404c-b2c3-b692a00f263d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02bc07c-0ad6-46d8-95d7-88f84e89869b", "sighting_of_ref": "indicator--3928d54b-244b-44ad-a811-04e40a280205", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0b9e2-fab0-4092-af27-d2de8ddbc43a", "sighting_of_ref": "indicator--f8e51598-7c70-4b58-8abc-b6d665b0ce1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabb553d-1791-458c-b283-7cf9c6f200c0", "sighting_of_ref": "indicator--f8ff66b3-f6aa-4f55-a077-d29682b8d3c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096dab17-bdfe-443a-b7b8-d1228ef18949", "sighting_of_ref": "indicator--7702a718-dcc1-4f83-9c03-bf37447b62a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee3afbf-b296-4722-bffa-4b8dc2192406", "sighting_of_ref": "indicator--851ce6e1-1e54-4596-9418-5ea64a9c0dd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b49af8-f41e-4052-a4bf-afcd376fb64a", "sighting_of_ref": "indicator--de1a2987-d34b-4e87-8944-863d96762088", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c50891-84cf-44c2-96d8-ba1f71f863de", "sighting_of_ref": "indicator--41582892-c42b-49ac-917b-487a4b0fefd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a297923a-56f9-46eb-a073-ea78697acb4b", "sighting_of_ref": "indicator--ee53442e-7311-4a77-b838-dc341fd8b73c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d9832c-86a5-4ef3-a1a0-707f838ad88d", "sighting_of_ref": "indicator--171cf289-2f92-4363-8f3a-10a5b1e29fda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a517ec-1a0b-4e06-9b47-eff066347958", "sighting_of_ref": "indicator--2ae829aa-8ce3-4d05-89dd-1216ee380047", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f947f336-b994-4460-9664-da824c6682a0", "sighting_of_ref": "indicator--b36f003f-45cc-4851-b20d-129c226748fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6233400-3980-4b91-a101-3f5c1ab85d7e", "sighting_of_ref": "indicator--4a6eea77-4224-4673-b6aa-a83b55749c26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1e9c05-8b3c-40cc-87a7-c58085e0a7f2", "sighting_of_ref": "indicator--f08f2ddb-a907-4298-b698-adffd46b5fc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f5d0da-8820-4f03-a1f9-634002def50f", "sighting_of_ref": "indicator--f08f2ddb-a907-4298-b698-adffd46b5fc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1b2bc6-2434-4784-aaa1-e1e405b9f67f", "sighting_of_ref": "indicator--ef1d024e-a8ae-43c7-bcc2-422404b19a84", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d32718a-1b05-40f5-9591-f4029dba6a99", "sighting_of_ref": "indicator--8cc37179-3cb0-4136-8b5a-58ab18c72665", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069db1fb-6025-4cba-ab25-a84954ada651", "sighting_of_ref": "indicator--05cd875a-4c2f-42eb-a5b0-af5102108fc2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34313528-7089-41f1-936f-0c86b2fcb4b2", "sighting_of_ref": "indicator--cfe3953a-8267-4cfd-9e6d-1e3c5005c705", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883b5da4-907c-4380-863a-225a33cd6110", "sighting_of_ref": "indicator--3f807ac2-3d13-4349-b584-5b1de1b4fa94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c38f4ed-0217-438f-8ff5-6a8e96ebb897", "sighting_of_ref": "indicator--4759a942-ee75-4da6-a7cd-32cd87825ec6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904f59a9-255f-4032-a924-6c7c14883f89", "sighting_of_ref": "indicator--6db26156-dda0-409c-8855-15f5f1d70b6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787f84ec-2d93-4388-b7d8-d06bdb64d8db", "sighting_of_ref": "indicator--6db26156-dda0-409c-8855-15f5f1d70b6b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ededea72-0ddb-41c5-9852-b2309b281bd2", "sighting_of_ref": "indicator--6db26156-dda0-409c-8855-15f5f1d70b6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2c6f70-6362-48e1-886a-d926039b3e2a", "sighting_of_ref": "indicator--44f02533-613d-4519-9583-b9be21556526", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c34484-7577-429e-b5a7-a3e5cb0dcaec", "sighting_of_ref": "indicator--939f9405-2ec2-4d60-85bd-d6b856ef7b7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cc4b0c-ea2b-4cf6-a3fe-58cc1e6dfa68", "sighting_of_ref": "indicator--f09c8dc1-1309-47f5-9063-0873268d2d45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6712d6f-10fb-4864-84d5-49cd88bcdeac", "sighting_of_ref": "indicator--e9868f68-5062-4b52-acd4-7fa5cc0ff1cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45562687-c426-4d1e-973f-08d35c90939c", "sighting_of_ref": "indicator--e9868f68-5062-4b52-acd4-7fa5cc0ff1cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a29f0c-8f11-4560-bbe8-b1698e38b439", "sighting_of_ref": "indicator--e9868f68-5062-4b52-acd4-7fa5cc0ff1cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291cb2f5-e22a-4a66-ad72-f88145d2b2d7", "sighting_of_ref": "indicator--94683269-2e8e-4936-954b-7f29a745d0ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf9d7a9-2443-48a5-9d6a-509d15518ee7", "sighting_of_ref": "indicator--94683269-2e8e-4936-954b-7f29a745d0ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b684c9f6-13c1-4e02-97d7-b47e73eef4d9", "sighting_of_ref": "indicator--c774299e-836c-4870-ac1f-1c745fa35b53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e111342c-464c-424b-944c-ed16d05a0927", "sighting_of_ref": "indicator--c774299e-836c-4870-ac1f-1c745fa35b53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90a737c-d5f3-4772-bffb-d17bf078463c", "sighting_of_ref": "indicator--d761c943-9587-4ff0-805a-0e712a4509a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec401c0-4da1-4726-a967-165a93cadef3", "sighting_of_ref": "indicator--6ac49655-5198-466f-a358-ab91dcff41f5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dba85c6-dc80-44ab-8b4b-e27119751cc1", "sighting_of_ref": "indicator--6ac49655-5198-466f-a358-ab91dcff41f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2578f757-f3f8-40d2-bd9e-af42430072b4", "sighting_of_ref": "indicator--4548c8cc-8ee2-47e9-a662-7becb6381778", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d25e32-c659-4a02-b4dd-1ba1a884e843", "sighting_of_ref": "indicator--4548c8cc-8ee2-47e9-a662-7becb6381778", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6209477-1278-459b-ae9d-49e30f7526bb", "sighting_of_ref": "indicator--b4b27058-2718-4f0c-8321-e5ba4f9b71de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271d1fce-34e1-42dc-b07a-71321221c1e6", "sighting_of_ref": "indicator--69ca7f7d-205c-4694-9448-f1f38a9aa079", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f377bb-464a-44c5-828c-e999ce4c4bf4", "sighting_of_ref": "indicator--31482a72-d66b-4673-b0a4-5ff2bed6814f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b18f42-4a0b-4736-ad25-3676d5815701", "sighting_of_ref": "indicator--f52d3d92-8add-4f42-8de0-2008beae10eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdad9bf-45a1-48b6-a417-b6cb1724b715", "sighting_of_ref": "indicator--6bcf48c8-7555-4ca7-866f-83eb11f545f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6e2787-1d61-49e9-b75d-84ca8704fa44", "sighting_of_ref": "indicator--6bcf48c8-7555-4ca7-866f-83eb11f545f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4718f033-0af3-41ac-9b02-d8b28186cab7", "sighting_of_ref": "indicator--f12d8405-9728-492e-abfa-20661d913aa5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2444718e-8d0a-4653-8e8b-1953baf7a7ac", "sighting_of_ref": "indicator--f9192c61-4d4c-408b-949e-c56381ff8026", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aead88-346e-4abb-b60e-b58b0150488c", "sighting_of_ref": "indicator--f9192c61-4d4c-408b-949e-c56381ff8026", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4036298d-239b-4ce4-ba2f-75b17d89c7e5", "sighting_of_ref": "indicator--f9192c61-4d4c-408b-949e-c56381ff8026", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f88a5e8-33ba-4468-8ee5-65dcc5ef240b", "sighting_of_ref": "indicator--cb81ea6d-67c3-461e-a070-6169ee2a7d1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad817fa4-6e77-4fa1-bb7d-a6a859e8fbbf", "sighting_of_ref": "indicator--ed0fb071-7c80-4066-a15a-3a04bc568dd5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecd30cd-af55-4965-bff7-5c72ac2b75cf", "sighting_of_ref": "indicator--7bf48dba-31cc-4b3c-9b40-b830d8a20080", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745d73c1-32ec-4050-ae3a-e5ace00f984e", "sighting_of_ref": "indicator--6ccb16cd-4df6-4be0-a3f2-7f5ef64bf658", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7c1785-25cf-49d7-a184-7da2a32a59f8", "sighting_of_ref": "indicator--6ccb16cd-4df6-4be0-a3f2-7f5ef64bf658", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c63cb1-5742-4586-80bd-617e29b2acd8", "sighting_of_ref": "indicator--819e298d-5c79-45c7-b5dd-f41c94b1e2d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5383e702-5006-43b9-8d38-c1357b73166e", "sighting_of_ref": "indicator--d331174f-d6b2-4f73-ad9d-edd1ee07c201", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3c69d6-011b-4892-97c1-e307b57aa297", "sighting_of_ref": "indicator--25949930-6890-425e-b9e2-81095e1c3ce5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dbb332-0a23-4748-80a9-b4e9194435bf", "sighting_of_ref": "indicator--f63ac6ed-7f81-4154-be43-84b0f3284cb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5432d3a4-e637-40aa-83ab-09c554f98854", "sighting_of_ref": "indicator--f6ee0f11-44bd-467e-8c81-15988f70571e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830fa047-ca19-4fce-b7cf-148b2a6539a5", "sighting_of_ref": "indicator--f6ee0f11-44bd-467e-8c81-15988f70571e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f4ba58-1bdd-4354-adf5-165287521caa", "sighting_of_ref": "indicator--f6ee0f11-44bd-467e-8c81-15988f70571e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ad09b-b7b4-41a6-8b01-013e530a203c", "sighting_of_ref": "indicator--3b084188-d012-490c-96f8-5d7c4a14ecdb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a76a7e8-a7e1-4b75-9896-3528f9d1fc4c", "sighting_of_ref": "indicator--3b084188-d012-490c-96f8-5d7c4a14ecdb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d52c22-5ee2-495b-b4aa-57bd026dcf50", "sighting_of_ref": "indicator--ff33a7d4-bcc2-4976-92a4-5951020369d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00435da6-a70b-4213-9e6f-2c5244958c44", "sighting_of_ref": "indicator--81b7a8de-d589-4d09-820c-5865f3e130f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f99dd44-3c1d-4665-8b9d-9719cf6b5754", "sighting_of_ref": "indicator--f276b1ec-f81f-49ce-a1aa-687b0788d698", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2110f3-e83f-4768-a336-a2f9ea7a869b", "sighting_of_ref": "indicator--f276b1ec-f81f-49ce-a1aa-687b0788d698", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b43dc0c-2bcd-4f42-8200-8605ed877c02", "sighting_of_ref": "indicator--147af086-38e3-481f-bd9c-9dc68a8ff179", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114ea1f-3397-434c-86a4-c475eeb1e1f8", "sighting_of_ref": "indicator--147af086-38e3-481f-bd9c-9dc68a8ff179", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b47f7-c034-4373-9fa8-c6f6485f3146", "sighting_of_ref": "indicator--ff0140dd-d830-4c8d-b063-57ff1807a72c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4404b4ae-5f05-4fdb-b791-d523d4a6b94f", "sighting_of_ref": "indicator--96527c98-0b60-4cc9-a826-13d7c2b5944e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1893a964-1725-4b90-b767-f3221aa6251c", "sighting_of_ref": "indicator--96527c98-0b60-4cc9-a826-13d7c2b5944e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1069eba5-4f4c-459a-af3e-149c5916c44b", "sighting_of_ref": "indicator--96527c98-0b60-4cc9-a826-13d7c2b5944e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b70d29-67d4-4831-ac0c-0f9da0881830", "sighting_of_ref": "indicator--ad63eae3-8b7a-4707-a44f-0b6e7cc9da67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2d75b7-a58c-4958-b29b-adbffc320d37", "sighting_of_ref": "indicator--ad63eae3-8b7a-4707-a44f-0b6e7cc9da67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff1645-2966-4580-9ba2-e54429d23903", "sighting_of_ref": "indicator--44780ac3-2c8f-4075-9867-7d28654c91e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fb8cd0-1754-4130-b4c3-66d2be4fb327", "sighting_of_ref": "indicator--44780ac3-2c8f-4075-9867-7d28654c91e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751616c9-3226-42ee-b549-10f6ea15ec5c", "sighting_of_ref": "indicator--44780ac3-2c8f-4075-9867-7d28654c91e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fed7a0-694e-477e-8783-f37a34c7a1bb", "sighting_of_ref": "indicator--559eb58d-4d91-4486-98b2-6632aa914d42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ef95fa-422f-46b8-bfc6-a6124dc1b8b0", "sighting_of_ref": "indicator--616f479b-b7d9-4c39-b7c0-aedae49dc42a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f004125-2e13-44dd-a598-5ed8cdd14c8f", "sighting_of_ref": "indicator--616f479b-b7d9-4c39-b7c0-aedae49dc42a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3b9cf8-855a-46c4-abbb-c2e5f5c84a5b", "sighting_of_ref": "indicator--638a1724-a90c-43f5-b457-24331b86a396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1a70d-9427-4325-8316-b315989972cb", "sighting_of_ref": "indicator--21ea9b09-0d9e-42e7-ad94-465249be8d95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c40428-13e0-4bbe-ac6c-5cba0df3f1b8", "sighting_of_ref": "indicator--21ea9b09-0d9e-42e7-ad94-465249be8d95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07758461-7c17-4527-a36e-9407cc387e12", "sighting_of_ref": "indicator--1e159d09-d3e8-4864-9f07-28189d89a778", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da183da-428a-49b3-ab7a-4901f10f3862", "sighting_of_ref": "indicator--4fdfa731-5db0-4ac8-871e-3e813e4848d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c17df9-937a-4e7b-ab8e-380d0dbd84ad", "sighting_of_ref": "indicator--01603995-151a-42fb-9a26-bb0b2fb5bb48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cb05f4-8a6a-445a-96b2-bde9315051d9", "sighting_of_ref": "indicator--cafa4bd0-402f-40de-aa52-54a63cb415db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96bdde1-986f-48c3-81ac-f0f6ae811ab7", "sighting_of_ref": "indicator--54d006fb-d4fd-48d6-825f-21664295bcd3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7417b9-53d8-42f5-b600-3a3c9798b9e6", "sighting_of_ref": "indicator--823f3ffb-7616-4030-8042-4fd2c9b506ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a916a960-5efc-4d7e-83c9-f5b79527f00f", "sighting_of_ref": "indicator--823f3ffb-7616-4030-8042-4fd2c9b506ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2761b9-0903-447d-8247-5ee042dac106", "sighting_of_ref": "indicator--823f3ffb-7616-4030-8042-4fd2c9b506ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dcd541-974c-4fbd-b8c8-8ff39d8ddd64", "sighting_of_ref": "indicator--900cda20-cf3b-47e0-ae66-16dc81996444", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13816193-9dbf-4f50-b5d7-6663734fc4ad", "sighting_of_ref": "indicator--f11accc7-d5f1-4113-9669-c8121feba0f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c9f2ca-4ff7-4042-93d3-8eb0af2682a1", "sighting_of_ref": "indicator--12badc54-fe11-4abd-97e3-f6921e335645", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9b950b-e693-4870-a17e-fec7ba96260f", "sighting_of_ref": "indicator--12badc54-fe11-4abd-97e3-f6921e335645", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669dab67-1f2e-453e-94ba-ed28247ac5d8", "sighting_of_ref": "indicator--48a844be-8ca5-4604-b391-7a3917a8bd52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901c48e4-aa80-4edd-bae0-597d8d9c33b3", "sighting_of_ref": "indicator--a1b73aa3-4796-4c1a-855b-173258884328", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9338138-dcb0-405d-be45-ab8afdc7a937", "sighting_of_ref": "indicator--a1b73aa3-4796-4c1a-855b-173258884328", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b5247a-1db2-4f76-ab3f-ca8821adfc29", "sighting_of_ref": "indicator--a1b73aa3-4796-4c1a-855b-173258884328", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c29fa7-b89c-4acf-82cb-88d4c3c4c8c3", "sighting_of_ref": "indicator--e7ba7764-5ed9-4504-a050-0fa09175faa9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c218e871-983d-40f3-8f47-fd3e93016906", "sighting_of_ref": "indicator--e7ba7764-5ed9-4504-a050-0fa09175faa9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f900d16-5230-40c3-a107-907545c676ab", "sighting_of_ref": "indicator--e7ba7764-5ed9-4504-a050-0fa09175faa9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773063b5-3349-4b61-b6ce-38f84107c2c1", "sighting_of_ref": "indicator--cfbcbf30-0c50-4de8-b21b-10d62db8f1f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8de8b9-f1cb-4f9a-9a11-bbb2b5c25a19", "sighting_of_ref": "indicator--bfe8a826-8bb8-48a6-9b1b-4f9bf1724e0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d6bb1-9e34-4b7d-99b2-237690747b74", "sighting_of_ref": "indicator--eddfc9c4-2dfc-40a5-9370-f1373bf8f5f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d119150-57ad-42d7-a9e1-cd94900cdb1a", "sighting_of_ref": "indicator--19a3b49b-ccbc-4bf4-8b73-cf8c4c0f25f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f93508-ae4c-4547-9886-b6d1a518229e", "sighting_of_ref": "indicator--19a3b49b-ccbc-4bf4-8b73-cf8c4c0f25f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a47d35-d95e-43f0-b67e-30254c33eb6c", "sighting_of_ref": "indicator--19a3b49b-ccbc-4bf4-8b73-cf8c4c0f25f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c579e5-b3d1-4a00-8570-ba9c94aaf64a", "sighting_of_ref": "indicator--25702a9c-2a3c-4282-8e94-acc5ac493118", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f32110-1ad3-4cc4-9e90-3170b2985c9e", "sighting_of_ref": "indicator--25702a9c-2a3c-4282-8e94-acc5ac493118", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a696d756-d0d4-4123-9885-200f4fb0d8e8", "sighting_of_ref": "indicator--25702a9c-2a3c-4282-8e94-acc5ac493118", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613b8abc-0cde-4590-b9d0-3911fae7d40a", "sighting_of_ref": "indicator--13dd7ec9-3431-4311-ab6a-c901d16e9436", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afe91b3-ecd4-4641-8e4f-6cfc49c795b4", "sighting_of_ref": "indicator--4d062520-4548-477d-8433-978b374d72a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd39f5-b6ae-40ac-9ec2-aabb24afbef6", "sighting_of_ref": "indicator--2cd995e0-90cf-4c15-a5b8-0834ac9f4cba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1ba3f8-fac1-47a2-b4c1-04a772ac51ff", "sighting_of_ref": "indicator--068dc295-520c-4121-85c3-bac74f90066e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729a4ed0-def0-4e67-a35d-f2e2b7d017e0", "sighting_of_ref": "indicator--786378b4-4013-4001-98e2-4b67e60f33d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f34be8d-0161-4b2b-8c1e-cc36093bf85d", "sighting_of_ref": "indicator--2cd1b7ad-30da-4fd2-89e7-838204d6d91e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3505676c-4600-4c99-9463-8d489a720f72", "sighting_of_ref": "indicator--2cd1b7ad-30da-4fd2-89e7-838204d6d91e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8a07e6-7030-4b2d-9675-75aa59ff3e1d", "sighting_of_ref": "indicator--2cd1b7ad-30da-4fd2-89e7-838204d6d91e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c815132-e588-4a92-ae39-3b15c9939ce5", "sighting_of_ref": "indicator--fd98d4bc-8aa8-4b0b-8e5b-daedd5c80fda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709fd8e8-698d-492a-adaf-eb0262e8a973", "sighting_of_ref": "indicator--fd98d4bc-8aa8-4b0b-8e5b-daedd5c80fda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38df98cb-9a01-428e-bdcd-3e0ed161ada0", "sighting_of_ref": "indicator--fd98d4bc-8aa8-4b0b-8e5b-daedd5c80fda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7e4ae7-239f-4cc7-9524-adb47a305a46", "sighting_of_ref": "indicator--cb641f7c-94a2-4867-9710-17741bbe40cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f7c1c0-645d-4d01-a622-c3f9a6e7a24d", "sighting_of_ref": "indicator--a4a53025-252f-4043-b506-29351b63083c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76181178-bf77-4e03-a446-86f0c56e083a", "sighting_of_ref": "indicator--fed532c9-49c1-4b93-925c-48c0653b9215", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccc04e4-1a49-4995-9ba6-8349578ce83b", "sighting_of_ref": "indicator--1d844b86-2194-47c5-8707-e63a67c9053f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e422f42-794d-43bb-8dc4-09a139daf560", "sighting_of_ref": "indicator--1d844b86-2194-47c5-8707-e63a67c9053f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a67e344-35c7-4a0d-9cf9-4fffb6f02dc1", "sighting_of_ref": "indicator--1d844b86-2194-47c5-8707-e63a67c9053f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b6d19f-6e6f-4e85-afe2-7ddeb6e1934b", "sighting_of_ref": "indicator--dd2980a8-45d7-433f-85cc-3b098ddead72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf10eeb-a2bd-4433-a793-dd8791a45e1c", "sighting_of_ref": "indicator--3e730d89-2b6b-4972-99ae-a722fe2260cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b219adf9-7712-4f55-8a8e-8f734579e875", "sighting_of_ref": "indicator--f9e70611-53be-4fef-b316-f681bba65f14", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3be6c8c-bd3d-46e6-aa02-abde9017bfc6", "sighting_of_ref": "indicator--52fda35b-5652-4a9a-a56d-e9a81cf68a99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3295a3-a48d-44ef-a942-40466489d87a", "sighting_of_ref": "indicator--52fda35b-5652-4a9a-a56d-e9a81cf68a99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d336129-5794-44eb-8558-77b56071ef63", "sighting_of_ref": "indicator--52fda35b-5652-4a9a-a56d-e9a81cf68a99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab97da1-2d3f-4099-b2f7-8d3ae1449122", "sighting_of_ref": "indicator--ee56ea5c-99f1-43ff-a79d-780112f914c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c32030-8f83-4b2a-9be4-06aef08641ff", "sighting_of_ref": "indicator--964be26f-f0a1-4a8e-a944-19c26b2e3bd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f997d7-e13f-4d1d-b375-c3e7f1798138", "sighting_of_ref": "indicator--964be26f-f0a1-4a8e-a944-19c26b2e3bd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e21b0b4-124c-414e-8271-6aff2db3d623", "sighting_of_ref": "indicator--964be26f-f0a1-4a8e-a944-19c26b2e3bd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d80587a-be8b-4055-bac4-5335e832de27", "sighting_of_ref": "indicator--92eaecf2-993a-45d8-b989-fb052e6a7725", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4759f542-a471-4fdb-8094-f150ccbc9868", "sighting_of_ref": "indicator--92eaecf2-993a-45d8-b989-fb052e6a7725", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb15287-639a-4d5c-914f-2ebc04e99191", "sighting_of_ref": "indicator--92eaecf2-993a-45d8-b989-fb052e6a7725", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef17cf4-c9b4-4174-8f14-cbd3001733f7", "sighting_of_ref": "indicator--2b280f9a-3e64-4865-9ad8-38499bb574d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5b3fe8-ac26-41bf-83ce-65cb11c1a915", "sighting_of_ref": "indicator--e8675a79-f5d8-4a6c-8c0c-ee325e13b9d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac541be-b7d4-4db2-b557-7b8eee6ad464", "sighting_of_ref": "indicator--e7e0de06-9e86-4d36-9a74-c18e2478af08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d639def-4d41-4389-9c83-066f95ab4ab3", "sighting_of_ref": "indicator--d7cceec0-f32e-4733-a8d8-185cef4d96fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5a0a7-cb27-4a56-a1bf-b4d47e797577", "sighting_of_ref": "indicator--fc78e7ce-55ce-444b-bfe4-fba8115a0901", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453324dd-b48c-4440-94d1-c438eccf5898", "sighting_of_ref": "indicator--fc78e7ce-55ce-444b-bfe4-fba8115a0901", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488b81d7-4ed3-43ab-b044-27051e6c265f", "sighting_of_ref": "indicator--fc78e7ce-55ce-444b-bfe4-fba8115a0901", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70ec85c-adb9-4c8d-aaad-8086641b8fe2", "sighting_of_ref": "indicator--d3eed423-4e2e-434e-80b9-dade0e5ce712", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff472874-ead6-4e2d-923e-3c258be2acd8", "sighting_of_ref": "indicator--aa8a31f1-dec8-4193-bef3-de5834f26db6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de883065-d63b-47a1-a0cf-328a1d0e7c1c", "sighting_of_ref": "indicator--2b2d4e5b-94a5-4c94-86ba-c688ebac51c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ed9369-2e5c-450e-a5e8-7e28cf8601b0", "sighting_of_ref": "indicator--e5edbce6-72e8-4f0d-8f11-27e28e7dfb8e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf555dd3-a698-42df-a30e-2679906d6710", "sighting_of_ref": "indicator--e5edbce6-72e8-4f0d-8f11-27e28e7dfb8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b2870e-b811-4695-8081-6de331cb4300", "sighting_of_ref": "indicator--aaecd6a7-a130-42c4-bdd0-979d8a14c17d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ab6d33-3292-4b04-83cf-903a111c7bb3", "sighting_of_ref": "indicator--3b9a58df-4d29-49bd-a646-9eef1d0728a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e495b04-fa86-4233-add2-78ca5974dc31", "sighting_of_ref": "indicator--397b0822-4a3b-40df-b10b-15a594cf2fab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d35252a-1818-4398-9f77-9825b658fa83", "sighting_of_ref": "indicator--397b0822-4a3b-40df-b10b-15a594cf2fab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27e1ee3-68ae-49c8-a7ca-872afc228116", "sighting_of_ref": "indicator--67b5aa96-abc4-4980-b6e1-c025fcd65d90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78747394-c10c-476f-86d3-ff3e6c7963a3", "sighting_of_ref": "indicator--2040335b-da64-485f-81b2-712fb9ab91eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfbf7f5-f792-4a8d-9509-022457b4bab9", "sighting_of_ref": "indicator--2040335b-da64-485f-81b2-712fb9ab91eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a15b720-4263-4de9-a179-69ae8046b7f0", "sighting_of_ref": "indicator--2040335b-da64-485f-81b2-712fb9ab91eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65080e50-111d-43ae-9068-0cf5de90bef3", "sighting_of_ref": "indicator--f1a433cd-7c1e-4d29-a555-8c3ced657ab8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a02c449-f1fb-48fa-8277-6046813f8c0c", "sighting_of_ref": "indicator--83217c60-c27f-4fde-8e10-36b3bd3dc6b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f86e3-8f37-4e7a-ba9f-e142c9fb0901", "sighting_of_ref": "indicator--83217c60-c27f-4fde-8e10-36b3bd3dc6b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee79472-4dbf-42c1-b3bb-63e9340a8c7d", "sighting_of_ref": "indicator--c4c94279-0c23-419b-adf2-3ae8fed8433d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a749667-49b3-4286-a642-abbd9e604f10", "sighting_of_ref": "indicator--64639497-90a7-4a70-b786-ae3f7e32fb89", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05e8f1d-3784-4517-bc0e-28c10295eb1c", "sighting_of_ref": "indicator--64639497-90a7-4a70-b786-ae3f7e32fb89", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c4350e-a449-402b-95d2-e8d1b6869204", "sighting_of_ref": "indicator--23ada60f-9fa4-40f0-abf8-3ff51d0841ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7001b62-b063-4296-80ab-09bf9bf9a87c", "sighting_of_ref": "indicator--23ada60f-9fa4-40f0-abf8-3ff51d0841ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88f0c06-42d8-48e3-ad76-ef0fa93d756a", "sighting_of_ref": "indicator--747b712a-6b62-465b-9bb9-8e119c647405", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a579fb73-6f32-407e-82f5-a5d2748e4f4e", "sighting_of_ref": "indicator--747b712a-6b62-465b-9bb9-8e119c647405", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf9fb9f-02a5-42c2-805e-ec86f95ea227", "sighting_of_ref": "indicator--e4828fac-b1d8-40b6-b261-6725219dc345", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89905379-a806-4f7b-b89c-912de79ccd95", "sighting_of_ref": "indicator--e4828fac-b1d8-40b6-b261-6725219dc345", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332460b6-709d-4fce-a9f9-b5401d3a68a2", "sighting_of_ref": "indicator--acb83160-3d8c-4e94-9f2c-aaa0a0a277fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90feeb5-5373-4f44-b78b-6c4c3763e84d", "sighting_of_ref": "indicator--907397ca-86e2-4139-8956-7c5044df7f3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf6fbbb-8566-4a80-a059-f927580037e2", "sighting_of_ref": "indicator--9674f051-8691-4671-915c-7c8e424bbd1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cae154f-676e-4350-83af-70c50ca8fb3f", "sighting_of_ref": "indicator--9674f051-8691-4671-915c-7c8e424bbd1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7127610d-8f8d-46e5-840f-290755792661", "sighting_of_ref": "indicator--9674f051-8691-4671-915c-7c8e424bbd1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668ccf64-33f4-4fc7-a300-6d5d145ddbb8", "sighting_of_ref": "indicator--2dc195ee-f9ed-4df4-b02e-1cb181b7b0ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff6cf19-0447-46cf-8c42-7f8aa8dad8c6", "sighting_of_ref": "indicator--c2884190-cb0d-4867-ac06-098aa607d33f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547bc64b-f90a-479b-9a83-25a6234c83b2", "sighting_of_ref": "indicator--c2884190-cb0d-4867-ac06-098aa607d33f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9db04a-f8b6-4640-a36f-1789f9189971", "sighting_of_ref": "indicator--328438ea-6759-4292-ac48-5134f98d19bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1fa4fb-2589-4b42-ab58-395d87f12236", "sighting_of_ref": "indicator--328438ea-6759-4292-ac48-5134f98d19bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f67d7a-946d-4240-ab27-068f892b8f4e", "sighting_of_ref": "indicator--328438ea-6759-4292-ac48-5134f98d19bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c162836e-bd98-47e7-8ea5-693b7ca29382", "sighting_of_ref": "indicator--f37c5fd6-5bdb-469b-b4f9-d72d7fcadd57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37559a7b-6609-41e5-91c9-f74cebc6aea8", "sighting_of_ref": "indicator--8ee8ab16-4af1-4285-bd5b-4dd5ad732035", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117f3dd8-5509-422b-81d0-b8e5f71d0fe6", "sighting_of_ref": "indicator--12f50ae6-98d3-45b5-9b3f-e7ff93b06a23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9a1689-0ba6-44b5-8606-410636aa251b", "sighting_of_ref": "indicator--12f50ae6-98d3-45b5-9b3f-e7ff93b06a23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18938a95-eec5-40cf-9a02-7c6e8721e417", "sighting_of_ref": "indicator--12f50ae6-98d3-45b5-9b3f-e7ff93b06a23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1154bfd8-45e8-4de0-adad-cc04161a78bb", "sighting_of_ref": "indicator--d3c02031-4ed2-4bed-8acc-02fa3297d963", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d53da4-7302-4372-808f-6f0c36f4b2aa", "sighting_of_ref": "indicator--1735a7b0-c3bf-46a5-895b-23bcd313e5b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4f3046-32e9-43fe-b6b9-30d8ba5c7155", "sighting_of_ref": "indicator--1735a7b0-c3bf-46a5-895b-23bcd313e5b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117114e-b4f3-4af0-bcef-96c23ba59bc2", "sighting_of_ref": "indicator--1735a7b0-c3bf-46a5-895b-23bcd313e5b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcae8b4-72bb-4413-97ac-303664e154e5", "sighting_of_ref": "indicator--b214beb0-8370-4007-8c0c-eb7f606d7332", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00152f56-c82d-454c-a746-028cad5a27e8", "sighting_of_ref": "indicator--791f6707-6409-48c6-b764-d7b46a3e5a9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cfc6b6-688f-446e-8a72-d16680df1cbb", "sighting_of_ref": "indicator--791f6707-6409-48c6-b764-d7b46a3e5a9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab8ec36-e5db-462d-a863-78d659878708", "sighting_of_ref": "indicator--9ff8fb71-4fb1-4c6f-827e-92ddfb0ab6cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553ece25-329f-4f47-928b-91570c2697a4", "sighting_of_ref": "indicator--9ff8fb71-4fb1-4c6f-827e-92ddfb0ab6cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be04d7d6-cd54-43c0-b4fd-0c7914339ab2", "sighting_of_ref": "indicator--7f43c432-8a30-43d2-b1cc-f1c3a2d1edb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1131b859-cc98-48b3-845d-667ca893c352", "sighting_of_ref": "indicator--7f43c432-8a30-43d2-b1cc-f1c3a2d1edb5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dae45e-df70-4bae-aa4c-e94fabdee2ef", "sighting_of_ref": "indicator--40baddab-6ff1-4606-8a53-5be0d5519d64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2c85ef-93d7-49f4-93d1-af5954d410c6", "sighting_of_ref": "indicator--40baddab-6ff1-4606-8a53-5be0d5519d64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fc134f-b5ee-46cc-98c2-e68fb3acd938", "sighting_of_ref": "indicator--9346b929-2e5c-4b54-87ac-38fb1cd3db4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750259a0-4ac4-4c0f-8d7d-9ed5ab65f2d2", "sighting_of_ref": "indicator--28c1e8ed-028f-4627-bd9d-e7b014ee8177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27da1820-98ad-4f91-94a7-14c5fc5c3e51", "sighting_of_ref": "indicator--71ec6527-1aa7-43a1-b547-9769ef8cbb29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f5042e-ebb5-4b5c-981e-98fbde92ba80", "sighting_of_ref": "indicator--ecf19bba-b10c-4f27-a3c6-3871d9fd28c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5df3cf9-ecf0-4d93-ba67-3af268461229", "sighting_of_ref": "indicator--08ca029d-f4b2-422d-b754-54d5e3daa6d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c316cae-a80b-444b-b964-a0d61dc1e2ca", "sighting_of_ref": "indicator--4d69444e-91da-46c7-8934-02c2cdda486d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44751bc5-9e6f-4e5e-9f61-c06e8fd3b1c2", "sighting_of_ref": "indicator--fc1c427a-d735-444c-94fd-30a438aa1683", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ab3200-4ea2-4abd-ac4e-4613e8022c98", "sighting_of_ref": "indicator--f382ab4b-4087-48ee-b4fe-bf62882d006b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9183af51-c300-4261-b4b6-f1f83120a7cb", "sighting_of_ref": "indicator--8650d610-8f85-43fb-9264-5dab01617561", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c69344-bc43-4198-912a-2381c7280961", "sighting_of_ref": "indicator--d3ce9248-1cc8-48d4-bacb-9cec3906d013", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8a982f-cc0e-4e98-84d8-fe8e3068b2d4", "sighting_of_ref": "indicator--9bd97a7d-511f-40db-8619-56b4cb18a916", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f62f83b-84d0-40cb-9f36-164cf5eee9e0", "sighting_of_ref": "indicator--9bd97a7d-511f-40db-8619-56b4cb18a916", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164e4c8d-2295-4042-8c34-c3a25bfbd9a6", "sighting_of_ref": "indicator--9bd97a7d-511f-40db-8619-56b4cb18a916", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4f4869-14e1-4b60-a1b1-acc9d5a27cc8", "sighting_of_ref": "indicator--49029016-9c78-402a-95ce-1c5de62102b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f2d50e-2eef-4998-b819-660d33f8352e", "sighting_of_ref": "indicator--49029016-9c78-402a-95ce-1c5de62102b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2932c6-45e2-41cc-b90f-554abf9e43ae", "sighting_of_ref": "indicator--49029016-9c78-402a-95ce-1c5de62102b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc7bb7b-38ba-43b1-bbbc-ce3a92dcceb3", "sighting_of_ref": "indicator--4d757139-4758-4359-aba4-406cf06efe50", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844cdff5-2bd7-4317-9440-52ec42174fe4", "sighting_of_ref": "indicator--4d757139-4758-4359-aba4-406cf06efe50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c15e24-32ae-4e89-addb-274264855eb1", "sighting_of_ref": "indicator--be596efa-c92c-4318-83fc-0fe3d7a6dbc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54461a71-9b66-429c-88cc-1f1030c5e66c", "sighting_of_ref": "indicator--6eef93d1-0f1c-4020-8943-5b89a3a00393", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2745e6-b4ac-4b80-b90b-61a6723f17e2", "sighting_of_ref": "indicator--ad0b3602-5b72-49af-80e2-16f51f4213c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7115771e-21c8-4383-8a14-5264af80bde6", "sighting_of_ref": "indicator--ad0b3602-5b72-49af-80e2-16f51f4213c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108600bc-f4fd-4912-b5b1-fe92e1a476c5", "sighting_of_ref": "indicator--ad0b3602-5b72-49af-80e2-16f51f4213c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea9e124-8f9e-4dab-9977-b51cc7417a08", "sighting_of_ref": "indicator--2fc4b5c8-ad52-4b15-a8e7-7714dd30794b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490b4501-cde5-4361-8b2a-0cd0d575b12e", "sighting_of_ref": "indicator--2fc4b5c8-ad52-4b15-a8e7-7714dd30794b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91141e5f-226e-4421-992b-3dde1131d440", "sighting_of_ref": "indicator--2fc4b5c8-ad52-4b15-a8e7-7714dd30794b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5f97f5-7933-4f52-958a-65fac1d2cebc", "sighting_of_ref": "indicator--2dcd02ed-0eff-4d4e-9024-03890b05cd7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52872580-7038-4a72-a360-05da1c950d71", "sighting_of_ref": "indicator--2dcd02ed-0eff-4d4e-9024-03890b05cd7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c45c8d6-4df6-4cd7-97c9-a47cfa4b919a", "sighting_of_ref": "indicator--2dcd02ed-0eff-4d4e-9024-03890b05cd7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c9c870-f677-4d93-a972-0adde4005252", "sighting_of_ref": "indicator--1b55fab3-14f6-41aa-b250-aa5ba561d422", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc1d23d-0649-456d-8f8a-cc3a1ae9347e", "sighting_of_ref": "indicator--1b55fab3-14f6-41aa-b250-aa5ba561d422", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e61648-5244-474f-a397-bb50a3ff6740", "sighting_of_ref": "indicator--1b55fab3-14f6-41aa-b250-aa5ba561d422", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce283f2-b8fd-4381-bc6d-fa1668d15d50", "sighting_of_ref": "indicator--433aeb11-0ddf-41bf-a2f1-d3274c260ca0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f534a6a1-b260-4ac1-8eb9-d81396f7c235", "sighting_of_ref": "indicator--433aeb11-0ddf-41bf-a2f1-d3274c260ca0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ac9ef8-db9b-482e-9f09-8d81cc9bfcf3", "sighting_of_ref": "indicator--729b7cf0-e4a0-479c-9fa8-3bb4cbdb1b4f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7e378-e088-4dd4-8d61-8804ba027b3e", "sighting_of_ref": "indicator--729b7cf0-e4a0-479c-9fa8-3bb4cbdb1b4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878f86fb-93f5-4421-a383-351dfb8ed6e4", "sighting_of_ref": "indicator--729b7cf0-e4a0-479c-9fa8-3bb4cbdb1b4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9cdc18-8850-4afd-a0cf-8cf20b4cfb05", "sighting_of_ref": "indicator--3b01d371-8529-46ca-9fcc-e49ffc688ff5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d55e6f-d7b8-42e7-b14c-a8d95ad2a1c6", "sighting_of_ref": "indicator--3b01d371-8529-46ca-9fcc-e49ffc688ff5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c12f33-b366-4e9a-8cf3-c8935ca41904", "sighting_of_ref": "indicator--3b01d371-8529-46ca-9fcc-e49ffc688ff5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93af8643-650c-4a3e-9f10-c10d776412ed", "sighting_of_ref": "indicator--834d5a85-36ab-4531-b1eb-0098485e761c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17930c3-0c60-46cd-b42d-5ac3b0e5aa30", "sighting_of_ref": "indicator--b683f820-83d3-4193-8b51-1bd33896f56e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164eb4ed-04d7-4ecc-afb1-389765269082", "sighting_of_ref": "indicator--867894a1-c8f3-40a2-a8e6-5c0a7e9013a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cb2f9b-6cb1-4201-8365-2cf66365635c", "sighting_of_ref": "indicator--8d8e3dfc-9396-4dee-8295-cc0c195550e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5465f212-5c85-4120-9a4c-df85e99e65af", "sighting_of_ref": "indicator--fc4b82a3-d2f2-43b5-8c5d-ca26f8198b5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94c16da-cb36-4f15-8271-2746f4dd07f3", "sighting_of_ref": "indicator--fc4b82a3-d2f2-43b5-8c5d-ca26f8198b5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747cc425-227a-48d2-bd16-35ed6b071ebf", "sighting_of_ref": "indicator--fc4b82a3-d2f2-43b5-8c5d-ca26f8198b5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22896342-d68a-4eba-aac9-808d05d41ed4", "sighting_of_ref": "indicator--0100f92b-e23d-41bd-8684-d5934d1ed7b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b2edca-3f95-456e-b349-a0cf31eb7a09", "sighting_of_ref": "indicator--9e29442b-6adc-4b6a-9c6c-3e9bda6af6c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7326bfe-ae01-4f65-ae52-73bc36bb70da", "sighting_of_ref": "indicator--f91c22f5-79cd-4a2b-abae-aa6855683152", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98222eb2-f558-45b8-b7fb-54d89558eeaa", "sighting_of_ref": "indicator--e5b7f427-b45e-46a9-a1c7-e5e55c14a100", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f3c172-346c-4800-ba03-4c951335000d", "sighting_of_ref": "indicator--e5b7f427-b45e-46a9-a1c7-e5e55c14a100", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36257ca-6430-48e5-b58c-84072805ae73", "sighting_of_ref": "indicator--9561e865-b32c-430f-ac57-3864e8f3a0b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2849e51-401b-4a37-bc5f-019e1e7858d3", "sighting_of_ref": "indicator--9561e865-b32c-430f-ac57-3864e8f3a0b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dad214-0d8a-466b-9008-ec15b18b3255", "sighting_of_ref": "indicator--6c801547-832b-4b64-a7b8-b57134de2bf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af196863-940a-4276-8a1e-411eb7cdd229", "sighting_of_ref": "indicator--6c801547-832b-4b64-a7b8-b57134de2bf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd123e91-54db-4168-8b1e-7b6bbfcf53aa", "sighting_of_ref": "indicator--7c7df89e-ac72-4320-aaea-69c63a149f8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7656f908-188a-4de8-8d72-70907277254c", "sighting_of_ref": "indicator--db6ff153-b43d-4ef4-94d7-3ff6f0588e79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5973d8b6-1213-49cc-a4d3-5d90d49bf8ea", "sighting_of_ref": "indicator--db6ff153-b43d-4ef4-94d7-3ff6f0588e79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf75cce-a2d9-4dda-b3c8-60848c250ff6", "sighting_of_ref": "indicator--3e3f9223-6ceb-4eee-a444-76a172cfdbcb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fc4f21-d31f-4917-81c7-f4693305d780", "sighting_of_ref": "indicator--3e3f9223-6ceb-4eee-a444-76a172cfdbcb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aabced4-24e2-4225-975c-28c82912682b", "sighting_of_ref": "indicator--3e3f9223-6ceb-4eee-a444-76a172cfdbcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35bc8e2-2cb9-4d5b-9f2f-aa4da22cb427", "sighting_of_ref": "indicator--b8550a3a-b0df-4fdc-a7ff-aa45076ff72a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3653beef-de51-4fff-9769-a140b415c702", "sighting_of_ref": "indicator--b8550a3a-b0df-4fdc-a7ff-aa45076ff72a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f3e6f4-ca95-4456-94cc-06a022b8d48e", "sighting_of_ref": "indicator--37bfaba4-90a2-4191-9a4d-b04ca1296acf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ac141-c3b3-4f39-b5c9-66c3bc48188e", "sighting_of_ref": "indicator--37bfaba4-90a2-4191-9a4d-b04ca1296acf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1566d7a-cf87-4fc5-982e-df42db324f08", "sighting_of_ref": "indicator--817fb6d8-4025-4f1f-9269-cee0012d2bc0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93acd3d-f22d-4c80-bf21-0a1e49423009", "sighting_of_ref": "indicator--b1e5a495-abfc-4ecb-ba25-6c0550f7eb90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feb2ff3-56ee-485e-9e1e-24c1f7ac3e96", "sighting_of_ref": "indicator--b1e5a495-abfc-4ecb-ba25-6c0550f7eb90", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a54d268-04cc-48e5-926c-0af2f75c3c87", "sighting_of_ref": "indicator--b1e5a495-abfc-4ecb-ba25-6c0550f7eb90", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ae5986-545f-49ad-abb8-9888672273cf", "sighting_of_ref": "indicator--fe42bec1-c296-4574-9167-c3c6de2e7367", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baaeaff-b985-47b9-bbd9-889380fffffc", "sighting_of_ref": "indicator--fe42bec1-c296-4574-9167-c3c6de2e7367", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5927b994-67ba-45ce-9d18-86ddf2346bf4", "sighting_of_ref": "indicator--83019492-f705-4ddd-be3d-1a77160c16ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4505ccc5-1d7e-463d-9051-d1d4b4ff87d2", "sighting_of_ref": "indicator--a26f55bd-de71-4c4e-aefc-f1e216b1080d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ecf834-9f77-42d7-8f93-e7361f486714", "sighting_of_ref": "indicator--a26f55bd-de71-4c4e-aefc-f1e216b1080d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d59114-b1e8-4eec-8a50-4e3a65c4d314", "sighting_of_ref": "indicator--6797defc-a9a5-4fe7-af98-c47fe5f96c0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4762d572-3df5-4120-ac2d-b1b5af2efa2e", "sighting_of_ref": "indicator--6797defc-a9a5-4fe7-af98-c47fe5f96c0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697820bc-e1a4-4c4f-9890-35b313d4a20d", "sighting_of_ref": "indicator--9e3eaaa7-c5fc-4850-93a3-cd9c68ea17e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f2f61f-f449-4a84-868d-d0afc451b42e", "sighting_of_ref": "indicator--9e3eaaa7-c5fc-4850-93a3-cd9c68ea17e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2ff3cd-e18d-43bd-b940-107a7060a89f", "sighting_of_ref": "indicator--9e3eaaa7-c5fc-4850-93a3-cd9c68ea17e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3e2d39-a126-432a-9cf7-722dedf49c1a", "sighting_of_ref": "indicator--5fed9a32-263f-4cb5-a2b2-ed7d75f08fd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c57e7ad-116c-42d2-8570-e65c67206cb0", "sighting_of_ref": "indicator--5fed9a32-263f-4cb5-a2b2-ed7d75f08fd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b87d86c-0fa1-4029-b800-1139d1b0dd2d", "sighting_of_ref": "indicator--8d79f35d-439c-497f-bb48-244f87d2bb77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f345ec9-acfd-4160-b043-f45378e13f20", "sighting_of_ref": "indicator--8d79f35d-439c-497f-bb48-244f87d2bb77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bebf73-3001-423e-bec1-72874f874980", "sighting_of_ref": "indicator--e72d823d-289c-4c47-81a1-afc608694589", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b98776b-edee-4433-b429-0f5389ef349d", "sighting_of_ref": "indicator--cc984921-9624-497c-9686-7837e581bf5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0522da9-a8db-4bed-800a-69bd9b7af73b", "sighting_of_ref": "indicator--cc984921-9624-497c-9686-7837e581bf5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593c4d24-b7c8-4bab-bf36-acbb46db17ea", "sighting_of_ref": "indicator--cc984921-9624-497c-9686-7837e581bf5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db563ca9-1274-4bac-bea9-fa063783edcc", "sighting_of_ref": "indicator--971ec43f-3add-4817-8faf-eb1bc51698c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7355149f-db43-4137-a386-26f0babdb707", "sighting_of_ref": "indicator--971ec43f-3add-4817-8faf-eb1bc51698c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263d05a1-7d65-4a28-941a-933c3e082ee8", "sighting_of_ref": "indicator--971ec43f-3add-4817-8faf-eb1bc51698c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6dd85-e155-4ca9-b557-d34ac3d5abfd", "sighting_of_ref": "indicator--a860ff42-b7a6-42f1-8093-6dff5e5f0f8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc254b68-00da-4de4-b41f-6f2c9788bd38", "sighting_of_ref": "indicator--3449f026-7bcf-48ca-8174-9ed658ccf99e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2d470b-0581-4586-81da-afd72f0af6b3", "sighting_of_ref": "indicator--636d4205-78ea-46f0-aa1e-ff5ecdfb6644", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5faaada-c95c-43a0-b7ee-56858ac10ab6", "sighting_of_ref": "indicator--c3713e54-92d8-489c-9f35-3e84d8203832", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c433a-e302-494c-9d8d-d0030d4974c6", "sighting_of_ref": "indicator--43d32f68-96e4-49f9-a820-ec6a21a86078", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d06db-0e1c-446d-803f-be13ec4bd435", "sighting_of_ref": "indicator--43d32f68-96e4-49f9-a820-ec6a21a86078", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8780d9-a067-4f56-a189-4e720188fef3", "sighting_of_ref": "indicator--e888df3b-3f61-41dd-9d1d-89fe23e745e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6310e-d336-4389-b115-255675e298d9", "sighting_of_ref": "indicator--5ebd2fc4-da10-4541-8874-ab4b34773dae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ab7539-054d-420a-bcff-09ffdd0d45f3", "sighting_of_ref": "indicator--70b9674e-625e-4bcf-9c46-458d9f4e0371", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c13c0e-ee99-440a-8e9e-7fb6ad4c7463", "sighting_of_ref": "indicator--70b9674e-625e-4bcf-9c46-458d9f4e0371", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62798001-2d6f-400c-91b8-3e9652ac2f5a", "sighting_of_ref": "indicator--70b9674e-625e-4bcf-9c46-458d9f4e0371", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9982ebd3-cf5b-4678-a2d8-c3bdd252183d", "sighting_of_ref": "indicator--8bf455de-7f41-4a1b-ae4a-24d669fb1cf1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40835280-8166-424a-8ce7-813e47ee906e", "sighting_of_ref": "indicator--8bf455de-7f41-4a1b-ae4a-24d669fb1cf1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512bc49f-f63a-4ab2-8471-ba573bd3d867", "sighting_of_ref": "indicator--487c6aeb-88a7-43c3-a66a-142df28987e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ee42a8-2623-4dd6-9636-e65ca173e2a7", "sighting_of_ref": "indicator--66b2ccd3-2b5a-4e41-b27d-77b5e3b29529", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f0727c-0c46-4f04-918d-ccfc1df78ad0", "sighting_of_ref": "indicator--f9fc9dcf-758d-4709-8251-a6d80664eb60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e23fb9-0e52-4901-815a-20b661c4f3ff", "sighting_of_ref": "indicator--a7749310-efeb-4d53-9198-4709fb5b2bc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b6203e-584d-4dd9-b08b-e6b464f4267c", "sighting_of_ref": "indicator--2cfe2a88-181b-4030-af94-f73b178f3554", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725f531e-464e-440f-844a-e8650cfdefae", "sighting_of_ref": "indicator--f4275e5a-a014-4052-852c-5737ae83ecb8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0239bc9c-76d5-43bf-b735-9cdd000c9e48", "sighting_of_ref": "indicator--47080528-9048-4199-8608-d840465e1ea7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef3d9fe-a35a-464d-bf1c-a31add810c35", "sighting_of_ref": "indicator--2761ade3-c44d-40b8-9afb-c83b3e660f70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0db113-9524-499d-9b91-dbaee33fb57a", "sighting_of_ref": "indicator--3562070f-1d62-4e7c-85bf-15cb94ee3dac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b269bd-23b2-476a-bdb7-3801e4a16d39", "sighting_of_ref": "indicator--3562070f-1d62-4e7c-85bf-15cb94ee3dac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9312f42c-0d35-4212-87f3-c162c52cc0f0", "sighting_of_ref": "indicator--88bd81ae-11bf-41b6-bb97-30f9a45772ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcdcdc0-96ac-4b0f-905a-3f187745823e", "sighting_of_ref": "indicator--88bd81ae-11bf-41b6-bb97-30f9a45772ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a25e27-99cd-4af1-8299-925409ce786c", "sighting_of_ref": "indicator--a28deac1-63d9-45a7-9717-8a4177d298c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b390fb0-4b40-4b41-8e69-05c27c969f09", "sighting_of_ref": "indicator--76b7c0dc-56d5-4901-bc39-f863bb5080e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf70296-2e97-4c4b-be38-8f40ccbf8846", "sighting_of_ref": "indicator--15dffb18-e216-48b1-8697-d35eef083348", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ae2db-c21b-446a-b8d1-dd3fd50aa3c4", "sighting_of_ref": "indicator--be1d3f1c-0d4f-41ea-9ce0-a1652507571d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd91c43-0118-4b84-89ce-7a50f120f7af", "sighting_of_ref": "indicator--66a9851a-08db-4ab8-a8b6-0c277120fce1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdb276d-d795-4597-a47e-d2121946f3e2", "sighting_of_ref": "indicator--f1e38a4c-074d-4759-8495-919878ba0b9f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baae3535-190a-43df-9d9b-b5b0264e584b", "sighting_of_ref": "indicator--ce5bead9-1667-486c-8061-d4ec96b58796", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75633833-fe2b-497e-bf2e-6dd3a245b884", "sighting_of_ref": "indicator--456abad3-e1be-40ee-bb73-c7aad16649bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c0190d-1c88-4dd8-aca0-11c2b0231ad3", "sighting_of_ref": "indicator--78c5e376-a7ed-4c3c-8a68-a8d348d77f17", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfb08cc-d46f-42ac-9495-a7b87fe69141", "sighting_of_ref": "indicator--51ab530b-437f-41ae-a6f8-89596c1a3f6c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d7305e-96d2-49c7-8872-8e92123e1f08", "sighting_of_ref": "indicator--51ab530b-437f-41ae-a6f8-89596c1a3f6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f864c35a-7340-4729-a884-4e51d63cf2dc", "sighting_of_ref": "indicator--62b25d2e-e8b3-4ec0-82fa-51d6005edcfe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eab9ba9-9996-41be-a262-3f285a4596f3", "sighting_of_ref": "indicator--de290c5f-a9d9-4a6d-8da6-556c996f8a17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cb984a-79cb-4e2c-b56b-b252068f39e7", "sighting_of_ref": "indicator--197c5a17-b79d-41b5-ab28-0f71d49ff846", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8947fb-eb24-41db-acab-5b4af23e014d", "sighting_of_ref": "indicator--485e968e-909d-4781-b962-673af13d2670", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0f441d-2a30-4ee4-91d6-4341d4ee5c54", "sighting_of_ref": "indicator--fcf69cdc-02fa-4de8-bf15-71a6e08de3dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7087370-3215-41f3-93d5-242d1f82d6f5", "sighting_of_ref": "indicator--ffe68835-9046-42bf-b352-8ba424ee4081", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838522b4-069c-449e-9c12-8030575c0817", "sighting_of_ref": "indicator--260a7e21-0687-4cf8-867f-95a2ad0f92de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c27add-153f-4bba-adc4-c701c5caecb0", "sighting_of_ref": "indicator--7f5fd33a-8862-44fd-a7f8-3736c52c3100", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f646518-c042-4243-a656-887e2921008a", "sighting_of_ref": "indicator--77d801f7-f991-4aac-ace6-19762b194c4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9f34fa-a821-44f0-8805-4b0c9ccc22d2", "sighting_of_ref": "indicator--875e1218-0c32-43f8-88b2-1d8e42606317", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e0220f-d4b4-4436-aad5-54fc924db1b4", "sighting_of_ref": "indicator--9ef45f4f-47a9-42c0-ab73-c303d213a050", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dfdb50-3ff6-4f76-ab0d-894edab3afaa", "sighting_of_ref": "indicator--3452fd82-4584-44b5-906c-713e7a1d721f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707d64bd-bbfe-4068-be39-e6e77569f34f", "sighting_of_ref": "indicator--222222c6-a173-4b31-aa8a-6eeb595e933a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114227bd-e7a9-4383-ac01-caf67dfe4a34", "sighting_of_ref": "indicator--6a043671-b19f-42b0-ac9a-89496386dd90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec83866-a6ab-4653-bbb6-e0809ba136bf", "sighting_of_ref": "indicator--da381d99-337b-45fb-9fc8-9446ce738ef1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a1d4f2-fb6c-4d87-a8b5-74c6e12a8cbf", "sighting_of_ref": "indicator--92371df0-3101-4100-8c76-7e7f3a060549", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f209ce-6d0d-4df1-b46e-8e6c27656b3d", "sighting_of_ref": "indicator--42870f51-ba5c-44c9-b900-7d8a2c5501db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70824de0-48c0-4900-a36c-ea90b232c70a", "sighting_of_ref": "indicator--df864aeb-cfe3-4eaa-8bc2-c50e368c7f06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb041886-d196-47a8-91c7-8f3114682336", "sighting_of_ref": "indicator--23b7d31a-f536-4bd9-8b00-06a610a8973b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79f7d78-240d-46b8-a553-2498ef70f7a6", "sighting_of_ref": "indicator--8e8718dd-4a7f-4d62-b0b3-b126e55f307d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e97ab07-2890-4f19-a133-67e2edd7cf3c", "sighting_of_ref": "indicator--e5b72d51-2d32-4371-b095-266719d298b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6769b696-f2db-4027-bb72-f05f2b97a89b", "sighting_of_ref": "indicator--f857813c-d013-4814-8317-9723ac7423f3", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbf680b-c420-4d8f-825f-8e621e365973", "sighting_of_ref": "indicator--a498e238-312f-41e1-82dc-aedd0ee7b808", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc1bceb-6ac8-4400-8d97-12858047eccb", "sighting_of_ref": "indicator--24821fb1-4011-4602-af51-62832bbf4585", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f68e86-818e-4af8-b447-b0342ce7ea8f", "sighting_of_ref": "indicator--e077237c-3ab4-422c-b131-320238a43a45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d0e00-822a-4738-b8d0-d01bf6cae221", "sighting_of_ref": "indicator--5d5c4be0-26ce-46da-acea-49a63c555993", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea4bc41-b7f4-43da-9101-d299e1174d37", "sighting_of_ref": "indicator--ac63268f-5123-4385-89b5-856e341cba4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2855cfbd-5633-49b2-a6a9-5565e4a40043", "sighting_of_ref": "indicator--9ca7d3cc-cab9-4ef6-890b-53eed9a790aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b7af2-77f2-4738-8533-780a6c30ccf4", "sighting_of_ref": "indicator--b06df205-18e1-42b9-8aa3-f9dd8c4c6ad2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb5c657-5743-4e34-a5f8-7e1146fee6f5", "sighting_of_ref": "indicator--36389b73-8cfc-47c0-adbd-1a76debd51e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03090e2-ebe6-4539-828c-aa53ffdd9887", "sighting_of_ref": "indicator--3684b31c-0657-46ed-84df-c7e895c0fbe9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3720b60d-d8f3-4768-b16d-621efcacafc3", "sighting_of_ref": "indicator--0f199760-3c16-4df9-991a-5135472d12b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3269800e-3503-4a13-8111-aa4c73da2497", "sighting_of_ref": "indicator--8a7d25ea-e307-4db7-9e33-bf78c3fdb71a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4e463a-fa43-48e1-94c8-f7f78c7db297", "sighting_of_ref": "indicator--ba7382fc-fe1f-4459-b466-597fe3bd7d24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cece75f-409e-40ba-9875-e60147e36a47", "sighting_of_ref": "indicator--0975c0b6-e345-4379-8e2d-9a2885e31111", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd60b51-b381-4d9f-820d-46813b0001d1", "sighting_of_ref": "indicator--891ae8dd-9be9-4c47-b2cf-62abd15fa3f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0671dc45-8081-4228-a28c-5af8239e305b", "sighting_of_ref": "indicator--bc773525-09d0-4faa-9d4a-ad8c8f138cc7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5deef7e-990a-4be3-b484-cc4ed93ce9af", "sighting_of_ref": "indicator--02827152-d479-4dd2-a4ef-a3de64aece25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e30416-f1c7-4dac-90d4-d79f55e3494c", "sighting_of_ref": "indicator--c46dc80a-ac7c-4d77-9ab6-1be3e7bbdc38", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab62c45-2721-44ee-8a04-277721b38101", "sighting_of_ref": "indicator--c818da11-b01f-4a48-8e39-685909ffe8bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d38c2a-77af-4a4d-b0e8-58d815da60cb", "sighting_of_ref": "indicator--c818da11-b01f-4a48-8e39-685909ffe8bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f436af-60a8-4526-99e1-4204a1af6dd4", "sighting_of_ref": "indicator--c818da11-b01f-4a48-8e39-685909ffe8bc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbb9a44-fc27-4784-9b15-cd922a735eab", "sighting_of_ref": "indicator--7b856532-5714-45d9-bd12-32fb3984398b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf55f1ff-2020-413a-9c35-e36ac13ad204", "sighting_of_ref": "indicator--7b856532-5714-45d9-bd12-32fb3984398b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14de39e-70f1-4129-8bcd-b55b0f457c2c", "sighting_of_ref": "indicator--7b856532-5714-45d9-bd12-32fb3984398b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8c448c-1409-4288-bfd9-a346770c5cb1", "sighting_of_ref": "indicator--5ffb9961-3890-4972-9769-95cf3d2f9053", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745f1bd7-ac72-4574-bd88-206d277e5a78", "sighting_of_ref": "indicator--5ffb9961-3890-4972-9769-95cf3d2f9053", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906aa422-c393-47cc-aa7a-600b58adc384", "sighting_of_ref": "indicator--5ffb9961-3890-4972-9769-95cf3d2f9053", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faf7376-5226-46f7-91c4-b0516c461d88", "sighting_of_ref": "indicator--2ae848bb-3fe7-4e7d-9fdd-ea9c9198b3b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e24802-c5ab-4e22-86cb-a83964645700", "sighting_of_ref": "indicator--2ae848bb-3fe7-4e7d-9fdd-ea9c9198b3b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f62612-8330-4960-992a-b66561b703b8", "sighting_of_ref": "indicator--2ae848bb-3fe7-4e7d-9fdd-ea9c9198b3b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5428477e-8750-4dd5-b68c-b47eef991d67", "sighting_of_ref": "indicator--dce1f2f0-aaf3-4b55-add0-e770fdfc8d10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fc604f-d4fd-44a6-a4aa-4771ed4ca672", "sighting_of_ref": "indicator--dce1f2f0-aaf3-4b55-add0-e770fdfc8d10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df64cf25-e8c2-487a-bf1b-97a3fd8b4543", "sighting_of_ref": "indicator--dce1f2f0-aaf3-4b55-add0-e770fdfc8d10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32354904-1cd4-4ce0-8155-70ec5a3256d0", "sighting_of_ref": "indicator--27494b0f-fd95-430f-a5f0-566d035a668d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d3eaa7-a78e-4b5b-b66c-cc1dc575dd07", "sighting_of_ref": "indicator--27494b0f-fd95-430f-a5f0-566d035a668d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90eaf6a-3eca-4032-9d9c-616f8c68fc7b", "sighting_of_ref": "indicator--27494b0f-fd95-430f-a5f0-566d035a668d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3277bbe5-c262-4460-9351-be07af39cc11", "sighting_of_ref": "indicator--6d4673fb-64fb-49e2-a925-0c4c8b622bc8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a750ef-ce49-4095-8b42-ee06ae49e150", "sighting_of_ref": "indicator--6d4673fb-64fb-49e2-a925-0c4c8b622bc8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c4e139-a53c-43bf-9547-a2a92c4a7a16", "sighting_of_ref": "indicator--6d4673fb-64fb-49e2-a925-0c4c8b622bc8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d2df4d-847e-4656-a956-363cad240585", "sighting_of_ref": "indicator--8dff43d7-2bbe-4167-bf6b-e57832ec35b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a879e5f-0621-4295-b3d9-32defcd47c73", "sighting_of_ref": "indicator--8dff43d7-2bbe-4167-bf6b-e57832ec35b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880071e4-7c5f-4bb8-8c79-17924667abf2", "sighting_of_ref": "indicator--8dff43d7-2bbe-4167-bf6b-e57832ec35b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723b584a-8dbd-4325-84d4-dd34a3ff5d55", "sighting_of_ref": "indicator--aeb5c5e2-af98-46e0-928d-42eef70f0052", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637cb826-5019-445e-bb7c-d28407a1b2f6", "sighting_of_ref": "indicator--aeb5c5e2-af98-46e0-928d-42eef70f0052", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ad3b5-6816-4ab5-95c2-a19746167e28", "sighting_of_ref": "indicator--aeb5c5e2-af98-46e0-928d-42eef70f0052", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef62d2a-d90f-4181-891b-9b42b6877390", "sighting_of_ref": "indicator--066b345b-0010-47ba-b290-69ccf78bf94f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd92c3-df1b-4a1f-a665-2a0ea5d279e0", "sighting_of_ref": "indicator--066b345b-0010-47ba-b290-69ccf78bf94f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a168bada-0fa6-4639-84b0-cac985863c4e", "sighting_of_ref": "indicator--066b345b-0010-47ba-b290-69ccf78bf94f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e70a00a-bde9-4309-a405-53f733380b4d", "sighting_of_ref": "indicator--3c5e0277-45af-4df2-9b08-c410a22e16d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a849a3-df8a-4fd2-bdcd-22774c0c4466", "sighting_of_ref": "indicator--3c5e0277-45af-4df2-9b08-c410a22e16d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8013d-b86a-46fa-a06c-a15005fa5ae4", "sighting_of_ref": "indicator--3c5e0277-45af-4df2-9b08-c410a22e16d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bba36b-7863-428e-8427-ba4124cc9373", "sighting_of_ref": "indicator--87af48ce-950d-461b-8a49-280af22fc30a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839d3935-8ce1-42ba-80e5-e6aa2dfed66b", "sighting_of_ref": "indicator--87af48ce-950d-461b-8a49-280af22fc30a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b07955-e36f-45fe-b3bd-43f04fba760e", "sighting_of_ref": "indicator--87af48ce-950d-461b-8a49-280af22fc30a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93d5db1-d774-4a74-ba1c-b2021e1a5286", "sighting_of_ref": "indicator--4f7d10b3-27ab-4049-b472-00d5fa840060", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9e759e-b5db-4748-9148-3538e196a22a", "sighting_of_ref": "indicator--4f7d10b3-27ab-4049-b472-00d5fa840060", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b44b1a0-8030-4882-934d-332a1d1f7b65", "sighting_of_ref": "indicator--4f7d10b3-27ab-4049-b472-00d5fa840060", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0da9f-dd56-4ccc-a7a9-760404a74bee", "sighting_of_ref": "indicator--9a66fa4c-9a18-46fc-9dfa-6cb821b42fcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1f72c5-55aa-4c5c-9225-aa9624aa690a", "sighting_of_ref": "indicator--9a66fa4c-9a18-46fc-9dfa-6cb821b42fcc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd96d91-acc7-4a20-be9a-d5f4eefb9fc5", "sighting_of_ref": "indicator--9a66fa4c-9a18-46fc-9dfa-6cb821b42fcc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c5492-ef68-42b6-b102-4edf668a55bd", "sighting_of_ref": "indicator--6cde7e09-a225-4d37-b14d-6cd4d3135fa7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21de0ae-a564-496c-b3c1-2f8cd45ead35", "sighting_of_ref": "indicator--6cde7e09-a225-4d37-b14d-6cd4d3135fa7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f03ec95-49c2-4288-9f83-5d89a4c627d5", "sighting_of_ref": "indicator--6cde7e09-a225-4d37-b14d-6cd4d3135fa7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8d39a2-1197-444a-ba2d-6dd4ceb7b64c", "sighting_of_ref": "indicator--90f0f6d5-c81d-4792-a0e4-725ad1920b8b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb04580-3c87-42d7-96b7-67a91a72cce4", "sighting_of_ref": "indicator--90f0f6d5-c81d-4792-a0e4-725ad1920b8b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c24883-ab2a-4f08-b0b7-0f5e193e468c", "sighting_of_ref": "indicator--90f0f6d5-c81d-4792-a0e4-725ad1920b8b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72402e4-4cab-4ff1-92ea-881b48fe0385", "sighting_of_ref": "indicator--ae1f1684-179e-4d56-bd73-e641715a4b75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23eb444-4efe-48b5-bf52-a80fd8608d41", "sighting_of_ref": "indicator--ae1f1684-179e-4d56-bd73-e641715a4b75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4754fe1d-e734-4547-bc61-c461119b486c", "sighting_of_ref": "indicator--8fdab63a-9fa5-40c4-a2f3-3645d8bdffe6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b208a7-f92e-4572-ab87-3b3b87f35fc3", "sighting_of_ref": "indicator--8fdab63a-9fa5-40c4-a2f3-3645d8bdffe6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3bcec-5606-49a3-819e-70a1ea0c96e3", "sighting_of_ref": "indicator--8fdab63a-9fa5-40c4-a2f3-3645d8bdffe6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e65c64a-089e-4a40-a358-a501328edb5f", "sighting_of_ref": "indicator--50fad011-1254-4b2a-af87-384c9e7e1871", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db50400-6af8-491f-ae97-29a4569d6203", "sighting_of_ref": "indicator--50fad011-1254-4b2a-af87-384c9e7e1871", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ac671-5ba5-49e5-9a0a-6e6da7d0eee3", "sighting_of_ref": "indicator--50fad011-1254-4b2a-af87-384c9e7e1871", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a06bd3a-bd33-4d42-a532-b832433e7ca6", "sighting_of_ref": "indicator--480a7911-8aa3-4660-9fb4-61e8ff9b8abc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa46938-7c1e-4a26-bf9e-5f2d5540fc9a", "sighting_of_ref": "indicator--480a7911-8aa3-4660-9fb4-61e8ff9b8abc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921a7a04-547b-4aeb-a136-e3a6e091f3b6", "sighting_of_ref": "indicator--480a7911-8aa3-4660-9fb4-61e8ff9b8abc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906eacfb-1f05-43fa-bae3-1a9ba4b43a09", "sighting_of_ref": "indicator--15cc4752-5e46-43c1-af13-4d59682fac9f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76468102-366b-40ea-ae1b-72f3cc5b0b81", "sighting_of_ref": "indicator--8efa11d2-8445-4299-8a16-7564c68f66fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc8f933-a54e-4b18-960a-940dc3af9010", "sighting_of_ref": "indicator--e430bfce-2a4e-47ed-b378-d6a3d8277e29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d199cfb1-4ed5-43e1-812d-60732059a16b", "sighting_of_ref": "indicator--db4ac23c-e817-4722-8532-1354d3fef217", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea88cad-9399-4bae-9443-447702db50e6", "sighting_of_ref": "indicator--bd463173-f901-46f3-bb6e-73df30d1458f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3136461d-feea-46c8-8c8e-6f34e4b6c6ae", "sighting_of_ref": "indicator--be6a382b-6eee-4485-8059-014df216f8f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ac7c83-8659-410d-a4fd-9199e13f4b12", "sighting_of_ref": "indicator--12df4fbb-c0eb-4e32-b2e7-d5734697a5cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f444793-5b70-432f-98da-90b0d7457bc6", "sighting_of_ref": "indicator--0feabe3c-005a-4b37-9f8b-2b6e551ece74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8dc272-ea49-4159-a573-074521482045", "sighting_of_ref": "indicator--2ed971c9-3920-4319-b7d1-38bcea46774a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d993a08-ecba-4f6f-8de2-25bf75cc14dd", "sighting_of_ref": "indicator--e03d3ac4-0a1c-4bff-9583-1ee37fac78e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f7b347-85a6-4673-8cc3-e4217c2bfa74", "sighting_of_ref": "indicator--ae4b2f23-5010-41a1-b166-88d24362113e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063325f2-5a03-46b2-8cc6-f8171a61db6e", "sighting_of_ref": "indicator--4cb1fb5e-f448-4ac6-a377-16a66975c397", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c326a963-7e22-4c60-a27f-b55b23753e79", "sighting_of_ref": "indicator--3e495327-18a6-4d8d-9e2b-52e90e6a3fa8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327bb42a-1925-47ca-8441-c424d9bcbc54", "sighting_of_ref": "indicator--3b63cf9c-3c11-4f00-9c1e-57fef8e4b9d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff87424-4901-418b-9ead-dd77ffce0199", "sighting_of_ref": "indicator--7d850217-b298-4e64-a407-713fd15b4f3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3604067d-6aea-48df-8e24-282e9cd5febe", "sighting_of_ref": "indicator--b142798c-4b3f-4393-935e-77ed2db8b5e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ac9b53-a540-48b0-98a0-e31d140288b9", "sighting_of_ref": "indicator--99c89ae3-2815-4a8b-85f6-82db2d58718b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c14710-d9e4-4da5-b8cb-60a1c13d3d28", "sighting_of_ref": "indicator--06617427-910f-4e31-9588-299a45ff5964", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250e9fe6-012f-4626-9232-31d80d1dfcc4", "sighting_of_ref": "indicator--06617427-910f-4e31-9588-299a45ff5964", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee2ffd9-e080-4554-b210-22ed0bbe9436", "sighting_of_ref": "indicator--e9b1e23d-24eb-4126-8a15-d8bc27db0512", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e6a628-d3ec-4e61-a8e2-e5fce065324a", "sighting_of_ref": "indicator--e9b1e23d-24eb-4126-8a15-d8bc27db0512", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e219f28-5b64-4d5c-a25a-46dbf0a31beb", "sighting_of_ref": "indicator--e9b1e23d-24eb-4126-8a15-d8bc27db0512", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2331ab37-4594-4615-b4ae-91d96a9a2c0d", "sighting_of_ref": "indicator--bd74098d-c93f-48ce-8606-0b0d059a8cae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b873d-0861-439a-bb13-bbf9f9c97127", "sighting_of_ref": "indicator--caaf8bba-d03e-410e-a083-2cca12e292d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4a92a8-13ee-45d4-9cc1-3fd4bc9172f9", "sighting_of_ref": "indicator--13ed14a4-ff8e-4897-9738-8c4be86b8766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da9d5fa-14f1-4471-93cf-0d8a1c45dc61", "sighting_of_ref": "indicator--13ed14a4-ff8e-4897-9738-8c4be86b8766", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ce9c35-cfa3-4d3f-a5cf-74b5b2a91236", "sighting_of_ref": "indicator--c9b86b65-557c-4d31-8989-86e6ae28b06e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97b9f73-1e4c-47ce-8496-1aecdb007b87", "sighting_of_ref": "indicator--9026c8e6-de9e-4645-b8a0-c95d6a2fe538", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47efecb-c457-45a4-83f1-bb261d2c93ef", "sighting_of_ref": "indicator--9026c8e6-de9e-4645-b8a0-c95d6a2fe538", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daccf1a6-d94c-49ae-a5f8-e5d52d107cbb", "sighting_of_ref": "indicator--9026c8e6-de9e-4645-b8a0-c95d6a2fe538", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dae82f-a2ae-4f50-8419-43122dfad2aa", "sighting_of_ref": "indicator--0af62884-4422-43f0-a44c-385a2ea7678c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2824b70-7600-4886-b465-5ac9b24cfdbf", "sighting_of_ref": "indicator--55380ba1-5827-4a66-aa52-fd0526f7035c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24143a23-9f8d-49d0-9132-f9314cb12a48", "sighting_of_ref": "indicator--55380ba1-5827-4a66-aa52-fd0526f7035c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20273a33-d867-4dcb-80e1-9a100167ef4a", "sighting_of_ref": "indicator--1c190837-f10f-4318-b433-c367b178163f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d58eb3-1229-4087-8a4a-1c99cbac0b79", "sighting_of_ref": "indicator--6daaa8c3-8836-4fd3-9c09-1363d92fe765", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d79ef3-4421-4a3f-9714-da62a74ba870", "sighting_of_ref": "indicator--6daaa8c3-8836-4fd3-9c09-1363d92fe765", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dc4d6a-e963-438a-a759-da3e61687f57", "sighting_of_ref": "indicator--228af160-ad71-4a79-8efb-251e1c661a39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9b923c-7f96-4dc9-b02e-fc7bb5af9e11", "sighting_of_ref": "indicator--228af160-ad71-4a79-8efb-251e1c661a39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40abe5bc-062b-4606-a1c9-de0c116aa233", "sighting_of_ref": "indicator--0485a8fa-af0d-4182-b83c-734aec495950", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eeed87c-d337-4115-9bdc-87bfa1ff1f65", "sighting_of_ref": "indicator--231a067c-c45c-4039-99ea-26abd3704530", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a035f1-232d-45f8-aeed-7090b22b8069", "sighting_of_ref": "indicator--231a067c-c45c-4039-99ea-26abd3704530", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77512fef-92fe-45ac-913d-0fdf6ca0aa90", "sighting_of_ref": "indicator--c822bd71-fcdc-49f0-b5de-7d58e4602a16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c6c237-9506-4914-a344-7f8514aec2ee", "sighting_of_ref": "indicator--c822bd71-fcdc-49f0-b5de-7d58e4602a16", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8174f87-79a6-489d-8291-e27a7887eca6", "sighting_of_ref": "indicator--19ead872-c2c9-4c1d-9eb8-358fed716091", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb39a9b-8ccb-44a7-876b-cdae92c169e3", "sighting_of_ref": "indicator--19ead872-c2c9-4c1d-9eb8-358fed716091", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebf7c7e-da4a-4287-abe1-bd1062296e36", "sighting_of_ref": "indicator--6504b2ef-7a8b-4757-a269-664d105cb42f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8608c378-5b02-45c7-8b0b-bd3ae00680b1", "sighting_of_ref": "indicator--6504b2ef-7a8b-4757-a269-664d105cb42f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c184d90c-6f9b-402d-b2f5-d462f35cd848", "sighting_of_ref": "indicator--6504b2ef-7a8b-4757-a269-664d105cb42f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609a3f16-33f9-4489-83f7-d8017be5c7c9", "sighting_of_ref": "indicator--369ac14f-7b39-4c65-a00f-c41cf758549b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc2e046-bde0-45ec-9890-329e86db201e", "sighting_of_ref": "indicator--369ac14f-7b39-4c65-a00f-c41cf758549b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adb90aa-0b63-4479-be5d-5fc9586ac52b", "sighting_of_ref": "indicator--369ac14f-7b39-4c65-a00f-c41cf758549b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda87369-78cb-46a9-b01c-2b40d888dfd9", "sighting_of_ref": "indicator--1f0d85c1-53f6-403f-be9f-b99a9cd09f18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fc0ff1-a15c-46fe-a02a-248a7f71aadc", "sighting_of_ref": "indicator--bcea93c8-c999-4a6e-b2dd-8a5663e8a7e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e8455a-2c0d-4367-92bc-1147330e5ac2", "sighting_of_ref": "indicator--e7273d52-45b8-4263-b458-41329330d320", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b8633b-a01b-435f-af87-92cbadbbf184", "sighting_of_ref": "indicator--e7273d52-45b8-4263-b458-41329330d320", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e472ea-9c0c-4f28-8622-54fd2de613f2", "sighting_of_ref": "indicator--a2492468-2ef6-4a67-ac8e-28f7e8eca1a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d12620a-e328-4804-959e-3765bc3f9a2f", "sighting_of_ref": "indicator--a2492468-2ef6-4a67-ac8e-28f7e8eca1a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27419a81-8cc4-4fe8-953d-c733f2ae19e6", "sighting_of_ref": "indicator--a2492468-2ef6-4a67-ac8e-28f7e8eca1a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1da0c95-b315-4d59-b818-2198247f6fed", "sighting_of_ref": "indicator--13eca6ae-095e-4711-8f93-d78b3e7f1dc0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eee01e4-5eb7-4e62-86e4-8186ad3c62c5", "sighting_of_ref": "indicator--20e5e018-b9f1-4971-bce2-c52fc1083b85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37039249-cfd7-4f42-9ec5-027c7e578b8d", "sighting_of_ref": "indicator--92cefab5-ea08-4713-b1f0-fb29b4169bb8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cabdbea-c78d-447f-83bb-1b38baaf8237", "sighting_of_ref": "indicator--a5d3f6bb-120f-412e-af80-0778cfc8243e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba30516-79e0-4dde-94d8-f54a08da1403", "sighting_of_ref": "indicator--0fc351fc-883f-4583-9b88-84834dd18b4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9035cc0c-faab-4968-9a5b-970b1eff026c", "sighting_of_ref": "indicator--18a9a37c-4dac-47c3-b77e-292a66b33d59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e9c7c1-d9c2-4f9f-a92f-4e559e5b3418", "sighting_of_ref": "indicator--d7153524-0c7b-45b1-9e6f-597877baa919", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d114b82-aa78-4682-b8fd-c6c3f743e625", "sighting_of_ref": "indicator--7e484cef-32f5-43e5-a96d-e01afcea1642", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b82baa-ceed-4e66-8610-b65ec7938836", "sighting_of_ref": "indicator--2b1fd0ec-240e-4e64-b052-a271770b7af7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bc446d-8e37-46ed-ac9e-7936c7d5c0c6", "sighting_of_ref": "indicator--692530dc-3816-432f-abc6-9f87dba113ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc87115e-f58d-494d-9bf6-84c894dfdf9a", "sighting_of_ref": "indicator--7755036f-effc-45f9-a912-3c16814dd947", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9abc85-46dc-4d13-a586-1d6dfbe33295", "sighting_of_ref": "indicator--7755036f-effc-45f9-a912-3c16814dd947", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1b3311-0c1b-4e2b-8d6a-55a3863bc9fc", "sighting_of_ref": "indicator--f8e8d178-ec1a-4682-9c78-cd3e197e0cfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ffbe5e-af22-47a3-9f27-44721062b75a", "sighting_of_ref": "indicator--4c4bb4a9-13f1-4051-9963-654fc4ecd8c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cb4226-dd8c-4554-88dc-b52e48f1cb68", "sighting_of_ref": "indicator--4c4bb4a9-13f1-4051-9963-654fc4ecd8c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15aa63df-3fe7-4e2c-8f9c-08357d27b8d1", "sighting_of_ref": "indicator--4c4bb4a9-13f1-4051-9963-654fc4ecd8c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7ba8ac-0804-4010-be8c-8ba775aaafd0", "sighting_of_ref": "indicator--762d4844-fca6-43e7-b34f-7c1b8302336f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e763560-ad40-40aa-a74e-79c47ba6f372", "sighting_of_ref": "indicator--cd04c02d-ad1a-4c51-93d6-e6cde191821e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6daa99d6-279b-449f-a681-1a9c49e137c5", "sighting_of_ref": "indicator--a5d2b4e2-1e2a-4dd2-8ec3-6ee9153603fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ef05cb-c8f5-46de-83ff-1e82447889f3", "sighting_of_ref": "indicator--ccd57cc4-0924-4adf-be13-35add3b67450", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2c8b6e-1f79-4461-b594-bb61f520a3c2", "sighting_of_ref": "indicator--4f5b4a66-a69b-44f9-8009-5656e11a5c3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5406ae49-12d4-492f-9a4b-8bd4b6be4649", "sighting_of_ref": "indicator--28d5197b-05d9-4189-a26a-29a55ff70408", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e0f75f-aa94-49d7-9ef6-e2cb1d1edbea", "sighting_of_ref": "indicator--32948410-2195-441f-98ba-248fd4cd4473", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b05dccb-4247-4aa8-9e01-c1b051ac39b8", "sighting_of_ref": "indicator--2b91bb55-781d-4859-bd97-e3c4c8f0f250", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad9a2bd-949c-4b94-9581-1942ee703424", "sighting_of_ref": "indicator--cd86b8f6-3ce1-467d-9b45-d9942ed688ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce894f5-16c2-45d9-8313-6500b8296dfa", "sighting_of_ref": "indicator--d8a6312d-a6fa-4e01-bbe4-385da15a59ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f2d6ec-9e75-4e43-b9a0-6d3f8adbda20", "sighting_of_ref": "indicator--25900794-c78e-4878-8439-9b825d9dc606", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2c1db3-b6d1-47e2-840f-0b04dd33f22a", "sighting_of_ref": "indicator--714ceb6c-2e3f-4b77-b513-6fc185a0c21f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c29c34-d97a-4aec-81e3-034d38d1bb4f", "sighting_of_ref": "indicator--aed0814c-8018-4bec-a697-55b9ade8a1e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdcc17e-16a8-4a22-a295-c80e8297362a", "sighting_of_ref": "indicator--ec3fe795-df54-4721-94dc-292955e8dbb9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd5e75f-7ed5-4213-a445-f00e617ea580", "sighting_of_ref": "indicator--20e0cef9-539f-4e3f-b78e-af6d892e5f2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5660db-c5a9-45c0-808d-8c655474c42f", "sighting_of_ref": "indicator--20e0cef9-539f-4e3f-b78e-af6d892e5f2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50301903-3fb5-400a-88d9-3676025f615a", "sighting_of_ref": "indicator--20e0cef9-539f-4e3f-b78e-af6d892e5f2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95efbd91-a91e-4e7a-8563-67f7ab0b8634", "sighting_of_ref": "indicator--4a543e08-2c3a-400f-96dc-b6cc462aefda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28f4b65-3f19-45d9-8b03-949374538dd9", "sighting_of_ref": "indicator--4a466ab1-0abc-454d-801f-a55bb715c3ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698466c9-c459-4135-aca5-9ba3b506e8e0", "sighting_of_ref": "indicator--8ddc4fb6-bf2b-4a36-91f1-100307c7bbfd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dc816b-048e-4125-a270-7fad42f9442d", "sighting_of_ref": "indicator--550e798b-a36a-4596-a06b-082be6bdd437", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f63576-5657-4af8-9617-576daaecd4d4", "sighting_of_ref": "indicator--02ad9763-cbce-4908-a1c7-1d14043062d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43938e4-8fe9-454e-867c-46d6d735ba38", "sighting_of_ref": "indicator--02ad9763-cbce-4908-a1c7-1d14043062d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfd7344-f9a2-4bc9-b85b-6814d7b32455", "sighting_of_ref": "indicator--f0905a74-7373-4a30-980e-988bbf7b72c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51615a51-dd2f-4a0d-9b41-de1c0ffdb977", "sighting_of_ref": "indicator--ca37dce2-38af-4a89-8bf5-75e812ae16b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9198e3a4-f774-4d09-a2d9-fa3201f83eca", "sighting_of_ref": "indicator--3b1f6f79-0ff6-47f2-9b78-349f58132acb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec95526c-269c-4a9c-9999-e4223d14f54e", "sighting_of_ref": "indicator--3b1f6f79-0ff6-47f2-9b78-349f58132acb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e845b9-89c6-4938-a1b8-6b02d3fd2608", "sighting_of_ref": "indicator--3b1f6f79-0ff6-47f2-9b78-349f58132acb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fa674c-0095-4f6e-9fb9-5620cb1e5e94", "sighting_of_ref": "indicator--cebd1e75-a179-4835-933f-6660196262cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b8447c-77fb-4831-a3cb-c2fbfe55ecc0", "sighting_of_ref": "indicator--cebd1e75-a179-4835-933f-6660196262cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b01e999-b85e-4429-b708-03a50214eba3", "sighting_of_ref": "indicator--cebd1e75-a179-4835-933f-6660196262cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c08e95b-8be9-40d7-9e62-4fe36de3457a", "sighting_of_ref": "indicator--1845117c-0976-4024-bf69-0b10054bb971", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457157ba-f72a-4897-8400-7939f95543c9", "sighting_of_ref": "indicator--1845117c-0976-4024-bf69-0b10054bb971", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41af946-f28c-4306-86a4-ec356ae18266", "sighting_of_ref": "indicator--1845117c-0976-4024-bf69-0b10054bb971", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e97c02-97ea-41ae-9d70-95e437b37c38", "sighting_of_ref": "indicator--19291fef-0295-4537-8b55-8264002e1c97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff92cb-01ab-486d-9f64-035c719103e5", "sighting_of_ref": "indicator--19291fef-0295-4537-8b55-8264002e1c97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea965eba-6696-4025-b7e4-b6d017a60751", "sighting_of_ref": "indicator--19291fef-0295-4537-8b55-8264002e1c97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9338aec-a752-4449-9ac4-dd97450ae321", "sighting_of_ref": "indicator--a160b793-b73e-46a5-bfd6-437a3d1f039d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb7bd12-4ec5-480e-bae8-79f7909be7c9", "sighting_of_ref": "indicator--a160b793-b73e-46a5-bfd6-437a3d1f039d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a3912f-3494-4664-925e-d72dcc4b443e", "sighting_of_ref": "indicator--a160b793-b73e-46a5-bfd6-437a3d1f039d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53c2e67-c037-48bc-a529-89e64d0498a3", "sighting_of_ref": "indicator--060fd0c1-c7a8-4e16-a59f-107de44e1a81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837bfbd0-3e89-42cc-990b-808de9ccff29", "sighting_of_ref": "indicator--060fd0c1-c7a8-4e16-a59f-107de44e1a81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e448dbf3-3860-4cba-953a-b601064235f1", "sighting_of_ref": "indicator--060fd0c1-c7a8-4e16-a59f-107de44e1a81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a4d89-19fe-4048-a59e-9aef322efcc0", "sighting_of_ref": "indicator--45f61068-849f-44e6-817f-8794b64647ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba33efa0-f0f4-4265-8157-4816155f338a", "sighting_of_ref": "indicator--45f61068-849f-44e6-817f-8794b64647ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58fd129-d268-44b4-ba52-741547f72865", "sighting_of_ref": "indicator--45f61068-849f-44e6-817f-8794b64647ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cdc343-a3dc-4f84-836a-aafa16b032ed", "sighting_of_ref": "indicator--40f26000-321b-4873-b920-8f06b4462975", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e0b90d-3328-483c-b434-e93bc299318c", "sighting_of_ref": "indicator--40f26000-321b-4873-b920-8f06b4462975", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809144a0-b27b-400f-9f96-11b06fb8affd", "sighting_of_ref": "indicator--40f26000-321b-4873-b920-8f06b4462975", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab59d13-b70c-4918-9520-2de4a3341fcb", "sighting_of_ref": "indicator--e8d5e508-408c-442c-bc8f-7da4184ce49e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725bd2c2-2c89-4a9f-801a-1859ba67b52c", "sighting_of_ref": "indicator--0b2e55d5-61e4-402f-8486-864b6d597f64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abe5913-f68f-40fe-a213-9dda53e6b12f", "sighting_of_ref": "indicator--0b2e55d5-61e4-402f-8486-864b6d597f64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e92e40-cd42-464d-b030-e9df12efc57d", "sighting_of_ref": "indicator--f0befd3c-8d56-4506-aeec-e6d4f79c2d98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1144e80-e495-4adc-8b52-4b4af8ca7f14", "sighting_of_ref": "indicator--1f0955bb-61e3-4391-b256-b2815ca5bc02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8938718b-3369-44b6-8138-d6bcbeb80817", "sighting_of_ref": "indicator--b64bfab8-8b9d-43e6-bed7-062ca2b1a22a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69f39d8-7cbf-4a51-8bfd-394b2969097d", "sighting_of_ref": "indicator--7203f894-0512-4fa2-ac49-b292e9818e56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e153a6c5-f64e-4486-bf1b-e32ea4c476d1", "sighting_of_ref": "indicator--2d59e0a2-44da-4d0b-b9b5-d7634641e6a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9cdc56-3067-4f8b-9591-0d2e2dc79743", "sighting_of_ref": "indicator--ff10cd8b-0b55-4693-aa9c-69ed8efe37bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d384903-5b1b-4546-8fb0-4fd53ac8b257", "sighting_of_ref": "indicator--13c34748-35d9-4765-8b8d-d0c77a7a6bfb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c091b2cb-71e7-46c1-b2a4-3200919ca083", "sighting_of_ref": "indicator--847b9189-f78c-4020-930a-d851c025e071", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822d9476-1190-424e-b0af-174c099a2b5e", "sighting_of_ref": "indicator--ff5949d7-fe85-4e3c-ab96-bb85bbe72949", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7edece-bb14-4a6c-b47d-6e603b1bcdb4", "sighting_of_ref": "indicator--4d8a54ad-e159-413f-bfda-8dc536406e1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add76ba9-5875-4be0-ba6d-a0a853f3b635", "sighting_of_ref": "indicator--d9a4f006-dad8-4312-8db5-d3cee4ad134f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3226674a-5fb1-4133-bf8e-d7cda7eeb240", "sighting_of_ref": "indicator--2fa23a78-9721-4085-8b01-6ec45472d41d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbbf4d6-543a-4a04-8e27-f9a0a04aba8c", "sighting_of_ref": "indicator--496d240a-8972-48b1-a436-f60ba66b49a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a708c34-9224-41d1-9fe8-38d2d944847d", "sighting_of_ref": "indicator--fd552e76-facb-474f-80a2-f0a86281be60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93ad20-2cb3-46fd-bb9a-fe0d73e2abaa", "sighting_of_ref": "indicator--193a1094-fc4d-43b4-9242-2cccd170bc8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2092ba8-04f6-4e80-86e7-5090550f2317", "sighting_of_ref": "indicator--ad704f96-abdd-4907-9ed5-a46b344b630e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4f3b8e-e029-4f6a-a580-868f5cb6b6bf", "sighting_of_ref": "indicator--25d2cb48-1927-4713-a80d-74febb190090", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f1dc0a-91da-48e3-81ba-9a2706353996", "sighting_of_ref": "indicator--67af7f5f-ba4f-43d6-9649-2d286ad41ec2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb42771-eaf4-499a-9fb1-9b635e86281f", "sighting_of_ref": "indicator--f31e53a7-10d2-4b33-a874-a1bcbfcf90d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a99a1b-fefc-4db6-9d78-39a4188c7089", "sighting_of_ref": "indicator--2fd0d2a7-d6d5-4403-b9e4-988d369a1cf9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69c3db8-e293-4e18-a692-e2e8dcdef486", "sighting_of_ref": "indicator--02f4609a-951e-4e71-93ee-c2290a94e1ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f491b041-28dc-4ee0-8261-70c7e98815bc", "sighting_of_ref": "indicator--01a03f5f-098a-41e0-9f8e-525967db0163", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fc69b3-4fa4-4fe0-8fbb-e9b10d12ce71", "sighting_of_ref": "indicator--4ef5d092-98b7-4307-a961-12640a7a80eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fe9253-e550-4ab3-98da-b4acec7e4bc2", "sighting_of_ref": "indicator--5d8b20b0-b1be-468b-ae7b-a7063bca1e1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefbb4c9-2781-4ba7-90bf-42663c5e6fe8", "sighting_of_ref": "indicator--0fd9edf5-1a66-4eb9-a9d4-dfa83417d1e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fc6179-f25f-40e0-ad4d-6ec3d57428d5", "sighting_of_ref": "indicator--3fcab24e-2c20-409c-88c7-8ce53ba9e091", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c00456a-564d-45b5-992f-5d1def3e8eb6", "sighting_of_ref": "indicator--86975c08-c588-45f1-aa84-9e83ef1de6b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd72a580-54de-437b-9a48-6a68145d6ded", "sighting_of_ref": "indicator--f756c3ea-36cf-4989-be61-ebb47255020f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3acb05d-6292-47da-9c7c-99e4b677f229", "sighting_of_ref": "indicator--4b953303-04bf-4ade-9f4f-3b4ea4c93cf1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c375f7-4d43-4bb1-a7e5-fda0cb034ee0", "sighting_of_ref": "indicator--2abdeb75-4fe4-45e4-81f1-26875303df9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60ae7e9-707c-4d06-9530-0039f7215c78", "sighting_of_ref": "indicator--0a4c6c5b-98fa-4d79-a335-52cc92783580", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0df4e13-b580-41fe-a982-cd9e816ca3bf", "sighting_of_ref": "indicator--e0c2df77-38fb-4f60-a5c9-356c172cb5ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fd2f66-5d27-41bf-b71e-a3dbf310e382", "sighting_of_ref": "indicator--e0c2df77-38fb-4f60-a5c9-356c172cb5ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871a3737-b566-4ecb-a6af-e4a2efaa87ac", "sighting_of_ref": "indicator--120972bb-12b4-4c3d-8ee2-2dce455db54b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf53e0c9-240a-4938-a806-6b18ebf42b4d", "sighting_of_ref": "indicator--149c4fd1-d94a-47f5-8b5b-d1aa7cf9121b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d185b85-ef5e-49ad-9ed8-cd644acc1418", "sighting_of_ref": "indicator--0cfa09a7-6748-4b0c-bfe8-64bcf06cd348", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d1bcf5-c9ee-470e-b6e9-50b88cdbce1d", "sighting_of_ref": "indicator--0cfa09a7-6748-4b0c-bfe8-64bcf06cd348", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e82f0d8-cc49-4622-aacb-5c365d28b8bf", "sighting_of_ref": "indicator--0cfa09a7-6748-4b0c-bfe8-64bcf06cd348", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48d92ae-463c-4c1c-9e76-142681a8ed61", "sighting_of_ref": "indicator--419c67c5-8206-4f4d-a827-7acded4f8483", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975733a6-6fe2-4617-a2a4-96bdb8ba9edb", "sighting_of_ref": "indicator--417af029-55f3-4d0e-acfe-f9afd5e3c98c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d0690b-d8b0-4a13-be16-95d9316c3a71", "sighting_of_ref": "indicator--e1022fa2-e4cf-4811-a423-de376a4278b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4b9009-f9a2-4b6f-9f3a-506c557ded55", "sighting_of_ref": "indicator--9411a76b-cc45-4588-ba30-c32462ebf352", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f036afed-0b06-4eff-92e2-3b8bc6867a64", "sighting_of_ref": "indicator--c8e03a6c-e66f-44de-b93d-67da2a9613ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4728fe-4008-4ffb-80d2-3cacd68fb3d3", "sighting_of_ref": "indicator--2c165704-f2d0-4a3a-8741-c5e684e371eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1fa21-925d-46d9-931e-d6cb3eeb8340", "sighting_of_ref": "indicator--430ad5a6-1d54-4556-8450-bc229e822a62", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731901cd-a2e5-46f9-8b03-b735fdf96098", "sighting_of_ref": "indicator--f1fb9f83-cc2d-4fb3-b76f-445e0ccf3053", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e81bd0b-81f6-4757-874d-bc742bb41345", "sighting_of_ref": "indicator--a1b3c034-8aff-4250-9062-87f0ad62b7f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0185ea93-cb26-4891-a0bb-259f63d227f2", "sighting_of_ref": "indicator--7b478787-e984-4fbd-864c-4602d3f29919", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4750e25-0a00-444e-bdc6-e7a55c65e2d7", "sighting_of_ref": "indicator--2da8b71d-9720-447d-9387-e2e1262fd2d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219d0aa3-de55-4e9f-bdbd-7555a7f62e67", "sighting_of_ref": "indicator--fc2ceb07-372a-4b84-b9e6-e043d391e621", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3b9517-89ad-4411-967e-5854eef78dda", "sighting_of_ref": "indicator--a58bc8af-2af7-48f5-8334-fac208ca58eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afff0ac2-1e90-453b-a1b7-c997a70b43cc", "sighting_of_ref": "indicator--7f32e0dd-2c94-4f8a-a1b9-fe62f5091337", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020928ac-289e-4f8e-9629-c2a68098dfb7", "sighting_of_ref": "indicator--7f32e0dd-2c94-4f8a-a1b9-fe62f5091337", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c52a4d0-91ca-4f05-b612-afe4d2564b35", "sighting_of_ref": "indicator--3b649e87-9baa-432f-826d-ab6a80fd55be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b2915-66f5-479e-b5c9-42a542c12366", "sighting_of_ref": "indicator--3b649e87-9baa-432f-826d-ab6a80fd55be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45e6c8e-aae7-45b6-86b9-4dc41e58377a", "sighting_of_ref": "indicator--3b649e87-9baa-432f-826d-ab6a80fd55be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede04d65-4a09-4386-a13c-bcd48b671be1", "sighting_of_ref": "indicator--0c509044-126d-4be9-9aac-51ed407567ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0c5b85-cd3f-41b4-82b5-f5d467e6a4de", "sighting_of_ref": "indicator--2dc9fd08-02bd-4206-bd92-ddfe6b47ca8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62c39db-7d6c-4db6-8d7c-c2fb52e87219", "sighting_of_ref": "indicator--81c502fe-1dfb-4dbc-805d-5c978dca6fcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a18e9a2-aadd-47f3-b67e-e7c0dc065eec", "sighting_of_ref": "indicator--415a26f9-e990-4bd0-9993-c88025f9342d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1a5cdc-71bd-4a09-b15f-62de8c6b9c53", "sighting_of_ref": "indicator--78d63978-73d1-43ce-8e0d-bafbe5c6d7ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c466df2-883a-4d82-9b4e-a6b1e006d365", "sighting_of_ref": "indicator--78d63978-73d1-43ce-8e0d-bafbe5c6d7ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92577442-83ad-4ad0-a808-85705eb74039", "sighting_of_ref": "indicator--b0c08e23-bcb5-48fa-afc5-275796ac42d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f173a70-edcc-4bdc-a067-7a76f70b19b7", "sighting_of_ref": "indicator--b0c08e23-bcb5-48fa-afc5-275796ac42d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfe18f8-0668-474a-af87-a0b9c12e9bae", "sighting_of_ref": "indicator--b0c08e23-bcb5-48fa-afc5-275796ac42d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210c43dc-1531-4a8e-bcf3-520a6f18a8fb", "sighting_of_ref": "indicator--702dca72-f219-42a4-af54-2e678aa1d3ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96947601-e9c7-4416-b91d-284f44562a9f", "sighting_of_ref": "indicator--6d685897-fc57-46da-8cd0-fc56af9666c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2ab908-f01f-4b9f-820c-12c43adc5c74", "sighting_of_ref": "indicator--94494535-d6ed-4fa2-9fb8-c0e7eaa2e102", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8b3546-e0ed-44d8-a4ce-96a2a662d3bc", "sighting_of_ref": "indicator--d0ed3550-1332-4319-9614-b803f4c0e4e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124a575b-bd26-4d06-a36b-47ae8ee330ec", "sighting_of_ref": "indicator--52cd1a01-cc4d-45cc-afbb-df0ef9c8fcc0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a1912-dc3f-4431-a4cc-f590fa6e3f68", "sighting_of_ref": "indicator--52cd1a01-cc4d-45cc-afbb-df0ef9c8fcc0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7481d0d3-11f7-4cd8-a72e-3a045b0f2a0b", "sighting_of_ref": "indicator--5cd8d5af-5203-452d-989b-5398d0d6e6eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad59d8e0-02ce-4ea0-aa1a-694a6dc82815", "sighting_of_ref": "indicator--1c2702de-d2f4-44f7-bdee-47eafe0bd4fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f080a9b-ec15-418b-a4a7-4d36021a114c", "sighting_of_ref": "indicator--2e9c16be-1d49-4c13-b33e-8b9e172e19fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79263ea1-4cd9-400a-8c5b-cea60289ef88", "sighting_of_ref": "indicator--2e9c16be-1d49-4c13-b33e-8b9e172e19fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934364c7-5470-4121-9bc6-1243efb8f635", "sighting_of_ref": "indicator--c5d0d742-2432-4bd5-8886-88fd6ddb5654", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f37806-f3cb-475c-80d0-7ed076508fee", "sighting_of_ref": "indicator--ce967342-66ed-4aeb-811d-54ba81139283", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc5d9f6-a56b-4dca-bd62-854078fab525", "sighting_of_ref": "indicator--db4ce18a-c2c9-40e7-a92d-dc466899c9ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dee5e06-5a19-47c7-a10d-7bc2657b822d", "sighting_of_ref": "indicator--310189a9-6c8f-41ed-b1c8-5646080d9e2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8bb460-2bfd-4648-a738-53b306e512e5", "sighting_of_ref": "indicator--42d8af7c-6f04-4bd2-9643-c26127f353ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d2b34a-835b-44c8-9576-5748381cf65c", "sighting_of_ref": "indicator--e5c23637-f294-423e-ba15-b9f000da691f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe07599-3c6f-4d80-83ad-97f00ddd1a21", "sighting_of_ref": "indicator--628ef38c-a0aa-4135-b9fb-48c33351a477", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195cb166-a084-4ee6-b543-e19f39692877", "sighting_of_ref": "indicator--c32f69be-b43e-4b14-8d04-24b237d526e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268d2e39-62be-41e0-818b-939a19f0a239", "sighting_of_ref": "indicator--6f4aaca7-e962-4033-9e19-dd0c09255377", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291bde63-c218-4497-9472-c67fda368343", "sighting_of_ref": "indicator--fece4f1e-266c-499c-9a36-3e8fabac0130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d1d719-9180-41e1-8dce-8cc62f8e14f7", "sighting_of_ref": "indicator--358857e0-5282-4f49-9448-cd7bebe63fae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7618aff-9c71-4b91-9633-3130a713a687", "sighting_of_ref": "indicator--251c970c-86dd-458e-af34-ddc54333b16a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a821e8f-03d0-47f6-90d3-73310ef4c321", "sighting_of_ref": "indicator--678a8b03-c3b5-4611-a6db-8ab174ba7ff9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf99cdad-0244-4408-8d13-b13d16fe9164", "sighting_of_ref": "indicator--9dbcb8cc-fe97-4f11-9d76-0572d9e62b9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4374d92-6ec2-48c1-9cf9-9ba424319f9b", "sighting_of_ref": "indicator--88b7482c-824b-4547-8a99-8831eeba9046", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12c2b85-68e4-4e66-96ea-d87b5ef296bb", "sighting_of_ref": "indicator--68f3f0da-a7a1-4097-9477-c2955317a244", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b90805c-a110-4dee-9c54-e3f308df09b3", "sighting_of_ref": "indicator--90d7f0bd-c31f-41ea-8416-b5b405a2a711", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81722654-1837-41dd-ac89-e321b80dbe22", "sighting_of_ref": "indicator--90d7f0bd-c31f-41ea-8416-b5b405a2a711", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c593d4f4-9be7-43e9-9f9c-7770f21a2539", "sighting_of_ref": "indicator--65cf0498-1d55-4700-a723-f8212ced53b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03793f2e-5908-4e50-b059-57de789af860", "sighting_of_ref": "indicator--679d0020-9ab8-4e0d-a757-4efe1ba149fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60212251-fa1d-49e4-afe7-4d676bd01ada", "sighting_of_ref": "indicator--679d0020-9ab8-4e0d-a757-4efe1ba149fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758b6c53-63c7-4819-9980-87dcb6fb6b6b", "sighting_of_ref": "indicator--7a4f2acd-8e07-48c6-ad5d-93304a944550", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6da734-3f03-4163-b16a-afe6760c1836", "sighting_of_ref": "indicator--c20afa06-63ea-471a-9b00-d830fddd3332", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8750af-4fb6-489d-9d50-80d77ac3a8b9", "sighting_of_ref": "indicator--a144d976-8dc6-40d5-ae89-b4b08a3cacf8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6d73a3-57c6-4dcd-9680-47c3be173921", "sighting_of_ref": "indicator--599a41fa-9a7c-4d16-bcfa-bc8652144702", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cf330a-16da-4c73-b8bc-986f21363179", "sighting_of_ref": "indicator--030b0389-e944-4cce-8d1c-2e9ae57dd595", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcfbe5d-e9f2-401f-94de-9a9f70d96242", "sighting_of_ref": "indicator--6375cf64-785a-4d20-a70b-b7236c0de6fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae14e99d-9c31-426e-9ae0-ae7e2c37f8e4", "sighting_of_ref": "indicator--e28a2962-26d1-42da-a293-c4893684b78d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42611e3-8569-444b-bd60-49949f061b48", "sighting_of_ref": "indicator--f34fb272-b2d9-455a-9a5e-fac3f59cccf2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ada913-894e-481b-bda6-56b834c5b513", "sighting_of_ref": "indicator--085a36ae-a251-407b-8265-04da9b8eb1ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff03557-9970-4285-8956-666900137b97", "sighting_of_ref": "indicator--f0f3d9e9-6b13-4fe8-9217-e31ea23c4678", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff53aee-e5da-40ee-ab82-7e572e455ed8", "sighting_of_ref": "indicator--4d3b5c29-cf35-4b13-bca0-74e37f2e5e61", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8712e93-587e-4afe-8a09-9f80f18a83b9", "sighting_of_ref": "indicator--ed42b355-2d9c-4636-88dc-44fe8ee1be7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51bbb70-e519-48a9-b7c7-5a6dc68b7438", "sighting_of_ref": "indicator--ed285ce8-71a7-4375-b121-f359d94004c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611ece2b-189e-4b51-83ce-3bd4b57dd8e1", "sighting_of_ref": "indicator--10659ced-06ff-41d4-804f-89db4ff02279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac34bf1-3630-44c0-a25a-d62356a7e229", "sighting_of_ref": "indicator--8edc0e25-6307-437d-babf-5517c7b76ebf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc03ae0-b473-4dd6-a1a8-e912ada7dfc9", "sighting_of_ref": "indicator--297c1215-6fd2-4ccb-b7e5-cfdaf8dea291", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b367a3-637a-44f3-b4a7-2dd8c17e2912", "sighting_of_ref": "indicator--297c1215-6fd2-4ccb-b7e5-cfdaf8dea291", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1be8313-2569-4d78-b0e6-3eb7aa0ecffe", "sighting_of_ref": "indicator--297c1215-6fd2-4ccb-b7e5-cfdaf8dea291", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c27e768-6ec5-4fbb-8fc6-7d718cbc44e9", "sighting_of_ref": "indicator--e573f02f-bfdd-46ef-b39e-7f861a90a649", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19879092-6088-4d13-a042-6a876d565b48", "sighting_of_ref": "indicator--8aee72f5-06db-4894-822c-21857c84bc05", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962ea535-3152-40e0-8a74-e9d9e6de4cc0", "sighting_of_ref": "indicator--5f29550d-c5d5-42a3-9279-836c028d8dfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faf4992-d243-4ce1-93ed-1aba32dccf54", "sighting_of_ref": "indicator--5f29550d-c5d5-42a3-9279-836c028d8dfe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69e754c-640f-41ec-804f-8858ec8db90b", "sighting_of_ref": "indicator--c2a19076-e0af-4a0d-b0c0-c10613b5f7d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c52ed5-442d-4d57-aafa-1a47a92b9c08", "sighting_of_ref": "indicator--c2a19076-e0af-4a0d-b0c0-c10613b5f7d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010d5a59-85d3-4096-af82-af9068572ef8", "sighting_of_ref": "indicator--c2a19076-e0af-4a0d-b0c0-c10613b5f7d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1c494e-74c6-48e4-a167-2c8d244826d5", "sighting_of_ref": "indicator--488bf11d-1bdb-4f38-a257-c67d32d07bea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8932da4b-4543-4bb1-ada7-e5bf8f520880", "sighting_of_ref": "indicator--488bf11d-1bdb-4f38-a257-c67d32d07bea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef24adbe-14ba-43b8-8cec-177f7f28baec", "sighting_of_ref": "indicator--488bf11d-1bdb-4f38-a257-c67d32d07bea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047dc128-e0ff-48c9-8604-96c90babf8d9", "sighting_of_ref": "indicator--9396340b-3864-4e1e-a86b-03abb76bd804", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1026fb82-37cb-410c-b299-b8e43f1da49b", "sighting_of_ref": "indicator--9396340b-3864-4e1e-a86b-03abb76bd804", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683c6c20-c407-48a3-8db7-fce11ed01992", "sighting_of_ref": "indicator--9396340b-3864-4e1e-a86b-03abb76bd804", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0aaf1f-cab3-4c39-813b-f2749d354e2a", "sighting_of_ref": "indicator--8e265571-495a-4555-830a-9f15b3f52a75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616662f4-979b-4b6b-90da-9dc1a91dc350", "sighting_of_ref": "indicator--8e265571-495a-4555-830a-9f15b3f52a75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d1843c-3a15-4256-99c2-d75e2c24cb4b", "sighting_of_ref": "indicator--8e265571-495a-4555-830a-9f15b3f52a75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22440148-c43f-4106-8743-dc93abe755da", "sighting_of_ref": "indicator--6ed71367-e21d-4d6f-98e6-5c92444e34f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c4ee66-cc10-4ce0-b09e-5ae96ea3353a", "sighting_of_ref": "indicator--6ed71367-e21d-4d6f-98e6-5c92444e34f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fcc469-595c-4b5e-9c02-b985a3f79934", "sighting_of_ref": "indicator--b7248402-8366-424b-9270-68b94efac4b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b592ab0-bdcb-44c8-85e2-152bdf70156a", "sighting_of_ref": "indicator--b7248402-8366-424b-9270-68b94efac4b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8cc47f-a53c-4c35-bd1d-0bdcf9677f94", "sighting_of_ref": "indicator--b7248402-8366-424b-9270-68b94efac4b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b28239-a227-4a7a-8e26-b6acf9a08fe3", "sighting_of_ref": "indicator--383c1111-c9b4-41a1-ab0d-3473b1506c55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fa2b59-bd68-49d8-b8ba-4a07866ce161", "sighting_of_ref": "indicator--383c1111-c9b4-41a1-ab0d-3473b1506c55", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8c816b-966c-4a8a-a814-932258c22389", "sighting_of_ref": "indicator--383c1111-c9b4-41a1-ab0d-3473b1506c55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cb9193-ec4e-47b5-ba03-701279520832", "sighting_of_ref": "indicator--764b5b6e-03f4-4048-a470-d4e708e718e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9dd560-43c1-412c-9dd2-54eae597a56f", "sighting_of_ref": "indicator--764b5b6e-03f4-4048-a470-d4e708e718e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cae967-b721-4bd2-9331-e2ac7fcba689", "sighting_of_ref": "indicator--764b5b6e-03f4-4048-a470-d4e708e718e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab8cba5-8cd0-428b-ad01-fe92dc75a665", "sighting_of_ref": "indicator--9c346864-6e6c-4913-b137-8f2024e3b2d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0134842a-a894-4cc0-8454-cbfb40c8263b", "sighting_of_ref": "indicator--9c346864-6e6c-4913-b137-8f2024e3b2d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6f2109-f8fa-436d-88bd-77fcdc967745", "sighting_of_ref": "indicator--9c346864-6e6c-4913-b137-8f2024e3b2d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bba474-0603-41f8-8e1b-3485b3e34c79", "sighting_of_ref": "indicator--d9027a5c-52a6-4efb-b222-49ffeb3f35ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d643fb-a54e-4adc-ab8f-e22515e7f890", "sighting_of_ref": "indicator--d9027a5c-52a6-4efb-b222-49ffeb3f35ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea3a3c5-1e2e-404e-8e0f-071eed6b9ea0", "sighting_of_ref": "indicator--d9027a5c-52a6-4efb-b222-49ffeb3f35ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037b4219-8bda-4528-902b-64b9a3aef108", "sighting_of_ref": "indicator--236db97b-4525-49d6-9947-a230addea0c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f5fb20-7b34-4c0a-9ed5-74d8bb400cb0", "sighting_of_ref": "indicator--236db97b-4525-49d6-9947-a230addea0c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe03066b-9e77-43d8-9f8f-667e080f71eb", "sighting_of_ref": "indicator--236db97b-4525-49d6-9947-a230addea0c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64245ed1-7ff9-41ca-8c9a-1d9780b11304", "sighting_of_ref": "indicator--506d0555-53bc-48f0-86d4-3416a9c2450b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44906274-62c7-4857-b73f-649826acdeb4", "sighting_of_ref": "indicator--506d0555-53bc-48f0-86d4-3416a9c2450b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17ece18-4dd5-4041-b61a-9030faaf789d", "sighting_of_ref": "indicator--506d0555-53bc-48f0-86d4-3416a9c2450b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a424364c-d7b1-408d-b58c-3e8e9c6dbfb9", "sighting_of_ref": "indicator--3755314d-1323-451d-b9e4-fd86490532ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e47025d-5190-4579-91db-f9b89492c8c9", "sighting_of_ref": "indicator--3755314d-1323-451d-b9e4-fd86490532ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea11e0c-a1b9-4633-82e4-5952c3c09202", "sighting_of_ref": "indicator--3755314d-1323-451d-b9e4-fd86490532ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0358d2-b39d-4d05-95d6-2cf0918e8fe7", "sighting_of_ref": "indicator--276a2bdb-705f-470b-ad1a-09de35eb1c94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd03b2ae-a537-4eb0-a351-9d77c0a4e388", "sighting_of_ref": "indicator--276a2bdb-705f-470b-ad1a-09de35eb1c94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92e46b3-0d4c-4f2a-8589-e35e50c46b59", "sighting_of_ref": "indicator--276a2bdb-705f-470b-ad1a-09de35eb1c94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18c2636-3946-40de-a190-f602d67bbc6a", "sighting_of_ref": "indicator--40763683-bc8f-4d4c-b3f2-6aaa34d516a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c3c08a-ca79-4bea-96cb-86f7a2ea0e6a", "sighting_of_ref": "indicator--40763683-bc8f-4d4c-b3f2-6aaa34d516a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74b626a-a468-43c8-9b37-374873f06f72", "sighting_of_ref": "indicator--40763683-bc8f-4d4c-b3f2-6aaa34d516a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5638b5-fcdd-4cb8-8f8d-a8a939f7c516", "sighting_of_ref": "indicator--1cefca79-7ef8-4a86-a26d-d512520c5b8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d84c17e-145e-477a-b55f-119fa282c21f", "sighting_of_ref": "indicator--1cefca79-7ef8-4a86-a26d-d512520c5b8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e202c35a-387c-443c-89e8-4e4b6be24378", "sighting_of_ref": "indicator--1cefca79-7ef8-4a86-a26d-d512520c5b8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8197baa5-5478-4eb8-8588-c20130eebdc7", "sighting_of_ref": "indicator--20eb1f92-a3c5-454f-a7de-ff743373124d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968c7263-61a6-4a2c-8020-3b2933620562", "sighting_of_ref": "indicator--20eb1f92-a3c5-454f-a7de-ff743373124d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fe4131-5421-4aec-92f2-d047ba42903e", "sighting_of_ref": "indicator--20eb1f92-a3c5-454f-a7de-ff743373124d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc16dad-55cc-4837-9a91-373c92195d42", "sighting_of_ref": "indicator--1366f038-2803-43ed-85bb-704acdb43fc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f52f03-669b-4ad3-8f7f-cb264a715763", "sighting_of_ref": "indicator--1366f038-2803-43ed-85bb-704acdb43fc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0e811d-4398-4864-b56c-350b831b4bd0", "sighting_of_ref": "indicator--1366f038-2803-43ed-85bb-704acdb43fc1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3132218a-0a37-4a3a-8ae3-ffe07cb45bb1", "sighting_of_ref": "indicator--ba3f7db8-10bc-48a7-806f-48f04704f490", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc71589-dbaa-4eeb-b125-d0f036fcdb8a", "sighting_of_ref": "indicator--ba3f7db8-10bc-48a7-806f-48f04704f490", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324f8ec2-b98e-4093-8051-22db8c9a9f1b", "sighting_of_ref": "indicator--ba3f7db8-10bc-48a7-806f-48f04704f490", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976af387-6478-457f-9ba8-93f85e2415d1", "sighting_of_ref": "indicator--2ac13aa3-21c1-4f4b-bcbd-8a9375179fa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e90cddc-0484-4c46-980e-3b080f493ac7", "sighting_of_ref": "indicator--2ac13aa3-21c1-4f4b-bcbd-8a9375179fa5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87da371-1d22-4514-91e0-0348b847c1b2", "sighting_of_ref": "indicator--2ac13aa3-21c1-4f4b-bcbd-8a9375179fa5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87adb759-bf78-4887-bf37-a74a314ad5b1", "sighting_of_ref": "indicator--7a847ce8-ad4f-459e-828e-6c5c6d8627fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b8d6b4-22d1-4bfc-8f3e-1e1c1b4fbb14", "sighting_of_ref": "indicator--7a847ce8-ad4f-459e-828e-6c5c6d8627fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3336350-82dd-4c78-b793-8b9dfc59f82a", "sighting_of_ref": "indicator--7a847ce8-ad4f-459e-828e-6c5c6d8627fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9be387-93e4-4181-8236-601c6298b01a", "sighting_of_ref": "indicator--bf0e72a2-bb6f-46ef-9c13-595037f72880", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c578d3-56ff-49d4-ac6e-5a81706213cb", "sighting_of_ref": "indicator--bf0e72a2-bb6f-46ef-9c13-595037f72880", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e24f116-7498-409e-bd0f-54536d239d29", "sighting_of_ref": "indicator--bf0e72a2-bb6f-46ef-9c13-595037f72880", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc8173-2cfa-4408-bbcf-1eb91531f941", "sighting_of_ref": "indicator--1220d40f-426c-4c8e-b8af-4f4191057c8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd4a40-43cc-42bf-b9d0-0ecd80537958", "sighting_of_ref": "indicator--1220d40f-426c-4c8e-b8af-4f4191057c8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b125b387-3251-4f9e-9c82-b1fd8a0c0d2b", "sighting_of_ref": "indicator--1220d40f-426c-4c8e-b8af-4f4191057c8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad878c59-a349-43c5-a578-160f3f533d50", "sighting_of_ref": "indicator--58d1724c-809d-4e09-acd7-9b6b5f9fce73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d76f58-8c07-4395-a928-fa7958da8a47", "sighting_of_ref": "indicator--58d1724c-809d-4e09-acd7-9b6b5f9fce73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640d2f46-b3ae-4f55-9919-12df28b36b33", "sighting_of_ref": "indicator--58d1724c-809d-4e09-acd7-9b6b5f9fce73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3884cd1-bbd6-48f7-9eef-5574324872d3", "sighting_of_ref": "indicator--e4dfba76-fa7a-4975-bbeb-47a44e6cdb67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf67df8-6be7-4e61-8d79-efa19ef82312", "sighting_of_ref": "indicator--e4dfba76-fa7a-4975-bbeb-47a44e6cdb67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6102f2af-c5e8-4852-a957-4c427cd5e698", "sighting_of_ref": "indicator--e4dfba76-fa7a-4975-bbeb-47a44e6cdb67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ddc1b6-99bd-44eb-9203-9b338a1d99a1", "sighting_of_ref": "indicator--dce0b90f-2245-4248-9716-7d4bad331ef4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7634d8d-c146-407e-a0fb-73744d333169", "sighting_of_ref": "indicator--dce0b90f-2245-4248-9716-7d4bad331ef4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb86a3e-5ff2-4064-92c6-1633485ddc62", "sighting_of_ref": "indicator--dce0b90f-2245-4248-9716-7d4bad331ef4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c304cc70-06e8-459d-97a1-e3d9f83b64f6", "sighting_of_ref": "indicator--a2201be5-59bc-4321-9673-f6f650b4a72f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e618b43d-1d28-49d0-9c1e-40191aa8c45c", "sighting_of_ref": "indicator--a2201be5-59bc-4321-9673-f6f650b4a72f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aba0c29-cd12-429d-96db-8f5b31134d3e", "sighting_of_ref": "indicator--a2201be5-59bc-4321-9673-f6f650b4a72f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab19290-bc61-4f6a-a910-0a965adcbfbb", "sighting_of_ref": "indicator--fac0f310-679b-466c-a63c-9acd71fb96e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bce3b5-4f76-490d-9fd2-1502ffc9fccf", "sighting_of_ref": "indicator--fac0f310-679b-466c-a63c-9acd71fb96e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca0e1d1-7cda-4ce5-97ef-fe8bcd796538", "sighting_of_ref": "indicator--fac0f310-679b-466c-a63c-9acd71fb96e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f47045-591b-4ddf-8f7b-b3b6c0be3811", "sighting_of_ref": "indicator--514034ca-307f-4c79-92af-26511a4252d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdb245a-5d05-4c59-9673-96b93b60cec6", "sighting_of_ref": "indicator--514034ca-307f-4c79-92af-26511a4252d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b1df1f-8f91-43cb-a168-0536e54c522f", "sighting_of_ref": "indicator--514034ca-307f-4c79-92af-26511a4252d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1e399b-45b6-4b5f-9f3d-6bf8ea5191bd", "sighting_of_ref": "indicator--7457f18b-3106-4318-aa52-a4e6825d5902", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9e00e9-5bee-46c5-8948-665919598d50", "sighting_of_ref": "indicator--7457f18b-3106-4318-aa52-a4e6825d5902", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62faa238-cf21-4fcd-b963-f400c3ede835", "sighting_of_ref": "indicator--7457f18b-3106-4318-aa52-a4e6825d5902", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a209ff36-aaa2-470a-afdf-fdca7311b8b3", "sighting_of_ref": "indicator--262925bd-9d65-4cd7-bf1a-4fa92af9c5cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c599463-d057-4494-837c-f26cb70c350e", "sighting_of_ref": "indicator--262925bd-9d65-4cd7-bf1a-4fa92af9c5cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f5b208-e8fb-45bd-8790-2112edd83afb", "sighting_of_ref": "indicator--262925bd-9d65-4cd7-bf1a-4fa92af9c5cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2dc267-0307-4137-a9ed-1f324e0044db", "sighting_of_ref": "indicator--2ebb22d8-1742-4931-8cf6-376b63c21b03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6792fda3-eafc-403a-b64e-7371b0998603", "sighting_of_ref": "indicator--2ebb22d8-1742-4931-8cf6-376b63c21b03", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a312c51-cd1b-445c-a0b0-15265b9d7d62", "sighting_of_ref": "indicator--2ebb22d8-1742-4931-8cf6-376b63c21b03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e08334-3a26-41ed-aa28-d643e5f34257", "sighting_of_ref": "indicator--2e54f8af-9cb6-4f81-8055-7c192e56c3bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b602a443-fe24-4c15-ba2b-9bd49d42852f", "sighting_of_ref": "indicator--1e7a7ce9-a18b-451c-9170-d3347841691e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95aab0b-ef41-4c97-a8e4-37515d07a960", "sighting_of_ref": "indicator--1e7a7ce9-a18b-451c-9170-d3347841691e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a084bf0e-92cc-4fc6-b268-00804518cce6", "sighting_of_ref": "indicator--4aa08fd7-8171-4605-8168-1c43ec396ac7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac8cd2f-ccd2-449f-9279-de9a5407e7b5", "sighting_of_ref": "indicator--09ede764-c004-4412-afa3-6a4865c3e432", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdab36df-4f5b-454e-9604-905fd6f598a0", "sighting_of_ref": "indicator--0e7a499f-8194-498a-9ab0-d8e45b7268bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ef2616-36c4-4b79-b46d-530da424b980", "sighting_of_ref": "indicator--0b78c085-dcae-4be7-aee2-9c9c9b9222da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10532e8e-8fa4-4b72-ba7d-254642f081f4", "sighting_of_ref": "indicator--ed2a9e32-2127-49a5-a5cc-4ce9ed39a21c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef548943-9d4f-494f-95f9-b24545263b58", "sighting_of_ref": "indicator--51d865d5-a93d-423b-9a58-260bda92102d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f6fcbe-2def-47b0-8ce6-246b33cb40b1", "sighting_of_ref": "indicator--3f9a3457-e14a-4795-825b-df47edf09b7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69abba85-9cc3-4b01-92b9-f3772fdf6fbd", "sighting_of_ref": "indicator--a17c91e9-f2ff-4241-9af4-e4bc182cd6e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210edf9e-ebd6-45b7-b58c-8a08981c0b0d", "sighting_of_ref": "indicator--a17c91e9-f2ff-4241-9af4-e4bc182cd6e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8886f2b0-aa99-4458-a80a-98f66d84ddf5", "sighting_of_ref": "indicator--a17c91e9-f2ff-4241-9af4-e4bc182cd6e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81008773-7791-4400-ad68-11afe73a04c5", "sighting_of_ref": "indicator--bfa4dcce-15c6-4b0f-9e43-563f18ae1da5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d9ead5-93a4-4669-9855-c1d55caacce7", "sighting_of_ref": "indicator--bfa4dcce-15c6-4b0f-9e43-563f18ae1da5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507345bf-5ad5-4d81-9ece-b453cc3ddf1d", "sighting_of_ref": "indicator--bfa4dcce-15c6-4b0f-9e43-563f18ae1da5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242bae0-89c9-446a-81b2-2d6258c56bbb", "sighting_of_ref": "indicator--86827b68-7abf-461e-9d9f-7e517fbe2259", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d79cdd-dc18-48a4-8983-8e2ebf9e231f", "sighting_of_ref": "indicator--86827b68-7abf-461e-9d9f-7e517fbe2259", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1d6882-5588-4481-8746-069e3154b958", "sighting_of_ref": "indicator--6971ad9e-1f7a-4158-a3f5-ccb2c3d0b473", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568c1493-a290-45d0-b32a-78c613361f0b", "sighting_of_ref": "indicator--d24e9668-c02c-493d-9100-966d085e1f0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb63be-b75f-4ae8-a1cd-d520060258c1", "sighting_of_ref": "indicator--d24e9668-c02c-493d-9100-966d085e1f0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24fe1e3-b42a-4987-b02d-b8814ec30f8f", "sighting_of_ref": "indicator--d24e9668-c02c-493d-9100-966d085e1f0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77184454-f4c1-4b9b-b78f-e601ebec95cb", "sighting_of_ref": "indicator--c0e1e24a-a1ce-41d3-b214-a4bf51193ff5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce263df-ff23-474c-be8c-f8a37bd4bae2", "sighting_of_ref": "indicator--c0e1e24a-a1ce-41d3-b214-a4bf51193ff5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1e5fbf-b7d5-4df7-99a6-d3bdb676bafa", "sighting_of_ref": "indicator--c0e1e24a-a1ce-41d3-b214-a4bf51193ff5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17248174-0518-4e3b-9121-6f2b4de38128", "sighting_of_ref": "indicator--c6c703cb-f84f-4fff-ae71-de9e565048ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bb2db8-d0a9-4f25-a7cd-22ee7c5812c5", "sighting_of_ref": "indicator--c6c703cb-f84f-4fff-ae71-de9e565048ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eb9d4b-5c03-4a0b-b6a8-3ad86d755596", "sighting_of_ref": "indicator--c6c703cb-f84f-4fff-ae71-de9e565048ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8f4f87-7087-4f5f-8702-61dcf64fe68b", "sighting_of_ref": "indicator--7d920fbb-ddc2-410e-8934-5a3934b945a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcfc96a-6e16-41e7-baf6-890603b80822", "sighting_of_ref": "indicator--7d920fbb-ddc2-410e-8934-5a3934b945a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af61e4-07cb-42e5-bbed-2dc3152ca307", "sighting_of_ref": "indicator--7d920fbb-ddc2-410e-8934-5a3934b945a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89f89ba-1914-4d6d-b168-a505250a8e28", "sighting_of_ref": "indicator--2410263a-f09f-4be6-865b-2f82031e2a61", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ffbf90-ee5b-49a7-a242-6f160dad68de", "sighting_of_ref": "indicator--2410263a-f09f-4be6-865b-2f82031e2a61", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82592b3c-cc7e-442d-86c8-d24abb28bab6", "sighting_of_ref": "indicator--2410263a-f09f-4be6-865b-2f82031e2a61", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3312d78c-32f2-4115-ab6d-1bb9cf793f3a", "sighting_of_ref": "indicator--eb15e696-8780-4848-949e-784cb94cc27f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0fdcf2-ac79-4ed4-b5ca-27348a17b20f", "sighting_of_ref": "indicator--eb15e696-8780-4848-949e-784cb94cc27f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571a3d0a-7e24-4d2c-8f8c-ec31ac2b8333", "sighting_of_ref": "indicator--eb15e696-8780-4848-949e-784cb94cc27f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3834e869-30b1-4a9f-b37e-d6daef18cbc4", "sighting_of_ref": "indicator--dbe586de-575d-49d9-8f77-ae9d43776ece", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ebcfe5-754f-4962-8e95-fa1a2ce03423", "sighting_of_ref": "indicator--dbe586de-575d-49d9-8f77-ae9d43776ece", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84830050-294d-40b0-8d14-03bdc4c43fe6", "sighting_of_ref": "indicator--dbe586de-575d-49d9-8f77-ae9d43776ece", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0284b2c6-e2ff-4203-9e7a-a1dfe34416f3", "sighting_of_ref": "indicator--46bf4df5-3d83-4870-8b38-90f13d2f6396", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fccc7c1-f56a-48a7-b3b8-b1269ab29e82", "sighting_of_ref": "indicator--46bf4df5-3d83-4870-8b38-90f13d2f6396", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063a9ad8-0537-4689-ae64-c6797e5240aa", "sighting_of_ref": "indicator--46bf4df5-3d83-4870-8b38-90f13d2f6396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adfee27-7a9b-477f-8944-40ef67ea93f4", "sighting_of_ref": "indicator--1328ee3e-e966-4eaf-94c6-ca9a70ce3128", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e30d9ca-11f0-4bf7-85c1-37030a999856", "sighting_of_ref": "indicator--f8d2c541-2efa-4fee-adaa-8ae96e82ea80", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357cddd8-7c53-4fa4-ad7c-44afa5a1b177", "sighting_of_ref": "indicator--f8d2c541-2efa-4fee-adaa-8ae96e82ea80", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763914f1-219e-4ff1-b72a-878858589d3a", "sighting_of_ref": "indicator--4c1cb9da-b363-45b5-8185-fbc762b5cd8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e1b80f-3e35-4465-b469-82ab50e33feb", "sighting_of_ref": "indicator--4c1cb9da-b363-45b5-8185-fbc762b5cd8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1b94a2-a930-457a-a862-1d42b6079327", "sighting_of_ref": "indicator--4c1cb9da-b363-45b5-8185-fbc762b5cd8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7c21ce-750f-4016-b308-00574dd2b167", "sighting_of_ref": "indicator--9c6bb7ef-a35f-4e46-b1f8-c6e15c71d3eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e9dd9b-961d-4586-bc40-d2672f438f6d", "sighting_of_ref": "indicator--9c6bb7ef-a35f-4e46-b1f8-c6e15c71d3eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99619795-9ced-4aea-ae88-b9487b1aab46", "sighting_of_ref": "indicator--9c6bb7ef-a35f-4e46-b1f8-c6e15c71d3eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303cefd5-a32e-4c94-b3c3-654f95321bdb", "sighting_of_ref": "indicator--29176532-4c8b-47b2-9f4f-d4e2aebc27cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7941d65c-7cdb-4284-93b1-6fd3f3b1addb", "sighting_of_ref": "indicator--29176532-4c8b-47b2-9f4f-d4e2aebc27cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20407801-6cbc-4518-8b67-3d7fbc2ccfd3", "sighting_of_ref": "indicator--29176532-4c8b-47b2-9f4f-d4e2aebc27cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4298a0-21b3-40f2-8969-2725c92ab1b8", "sighting_of_ref": "indicator--b4c5a013-2d37-4821-bf37-fb4839b959f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28898918-77c0-4823-9146-65171df0e2cb", "sighting_of_ref": "indicator--b4c5a013-2d37-4821-bf37-fb4839b959f2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bbab87-4f79-4d4a-910c-2501caa24db3", "sighting_of_ref": "indicator--b4c5a013-2d37-4821-bf37-fb4839b959f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd0c3b8-8d35-43ca-a152-190eb089e38a", "sighting_of_ref": "indicator--2e1f3543-c89d-4771-8a94-77a216a5db31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1736a216-0827-4c1a-b3a7-dd1c1b9fa81b", "sighting_of_ref": "indicator--2e1f3543-c89d-4771-8a94-77a216a5db31", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2535a72a-eac8-482f-8ce1-9ab606e3fdbf", "sighting_of_ref": "indicator--2e1f3543-c89d-4771-8a94-77a216a5db31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be960f67-ba30-4ff7-9dc8-16a0765dc838", "sighting_of_ref": "indicator--a95aead4-e227-4205-908f-132cca33b375", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3298436-b6b0-499b-a7b4-e211a2bf38bb", "sighting_of_ref": "indicator--a95aead4-e227-4205-908f-132cca33b375", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b3d3e0-70fe-458e-b652-009f90a130b9", "sighting_of_ref": "indicator--a95aead4-e227-4205-908f-132cca33b375", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade8f5e5-2c99-4ba7-a2e0-d5b7f2cb5bcc", "sighting_of_ref": "indicator--233e5668-8d06-4e72-abbb-fb6aa81fec4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625330a4-230e-4681-ab06-2d3a320f7772", "sighting_of_ref": "indicator--233e5668-8d06-4e72-abbb-fb6aa81fec4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde9bd1b-9bec-4718-a71e-e8d492da6eb0", "sighting_of_ref": "indicator--f20ab0a3-e06c-45ac-a45e-0cf44a4e0fda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f61bfbd-ef23-449e-b01c-ac2a1c81175d", "sighting_of_ref": "indicator--0fea2752-bdfa-40e8-862a-c71d2db8efdc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2227978e-a7d1-43f1-86cd-d799927c1973", "sighting_of_ref": "indicator--0fea2752-bdfa-40e8-862a-c71d2db8efdc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e43bb6-f945-4efd-a3df-5267cc891bfd", "sighting_of_ref": "indicator--12813488-eae7-4458-a0bf-80260c90e775", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db55991-2248-475e-b42d-192decc13660", "sighting_of_ref": "indicator--12813488-eae7-4458-a0bf-80260c90e775", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cec3ea-8fc9-4a51-b5b5-15c7e0882aa9", "sighting_of_ref": "indicator--e23d2d5e-7bad-4fc1-9c14-995b619b5c12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fd9420-ce84-4a41-a666-168ba3dd12b5", "sighting_of_ref": "indicator--e23d2d5e-7bad-4fc1-9c14-995b619b5c12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc83e52c-2b1f-42bc-89ce-513f41b6dd55", "sighting_of_ref": "indicator--5e13fd4a-585d-47d7-8ace-9d0b03ee0b24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dec593b-b84c-439a-9060-f51b9c639de1", "sighting_of_ref": "indicator--5e13fd4a-585d-47d7-8ace-9d0b03ee0b24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3238c8-d139-42bd-8778-ed0637f4dd42", "sighting_of_ref": "indicator--7afb0349-c124-4a65-baff-9b6b6e6277f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e43109-bd29-49c3-b2ca-7be544de0650", "sighting_of_ref": "indicator--7afb0349-c124-4a65-baff-9b6b6e6277f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf31f60-dc2a-4f38-99c6-50c12db83680", "sighting_of_ref": "indicator--7afb0349-c124-4a65-baff-9b6b6e6277f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080edc8a-e9f6-4e0e-b579-91fc44cc694a", "sighting_of_ref": "indicator--d92941a7-702c-42cc-8dbf-3e2e99a4aafc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e09006-ccdf-4cc9-8b8f-190c1fde268c", "sighting_of_ref": "indicator--d92941a7-702c-42cc-8dbf-3e2e99a4aafc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe35f652-956c-498b-86ed-1773e8ba64b0", "sighting_of_ref": "indicator--bc4fc7e4-ec88-4623-b950-be5ba23d9a40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d98955-f4cf-4904-83ea-9857a151f243", "sighting_of_ref": "indicator--bc4fc7e4-ec88-4623-b950-be5ba23d9a40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b744de-a40b-4340-a206-58e3e7c6ac02", "sighting_of_ref": "indicator--6596bede-ef2e-4cc0-837f-d75170fc5552", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ca98ff-61b3-4233-9f8e-2ccceb825a0a", "sighting_of_ref": "indicator--50a55b0d-52bb-420e-9dd6-b87965b73ebb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a29593-943d-40ba-bde7-3bf2ba1b0acc", "sighting_of_ref": "indicator--52a53f9a-62e0-4886-b8b9-7735050bde58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00172780-3c2f-407b-8d1c-74dfedfd4ac0", "sighting_of_ref": "indicator--d7bedc41-48b2-434a-8f5f-79ff5390136c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e577521f-5ae0-41fd-824e-9d96e63ab2c6", "sighting_of_ref": "indicator--28e842be-fa15-4483-a16b-0de73b007146", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1526dbbe-aa1c-4ffc-bd64-0316b9823759", "sighting_of_ref": "indicator--c85e5ee3-c4fc-4256-b4c8-2fd4b5aaf2d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83246838-bb2c-4895-aa2e-40917360147f", "sighting_of_ref": "indicator--eef21838-8fec-4615-8cbc-17c330c1f47e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727eb2f2-57f2-4ba6-8c32-a16bff60fb08", "sighting_of_ref": "indicator--41d76d25-13e8-44d0-bf66-d6cae5a019fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e9a276-9f49-4776-9483-c60c85b2f1b1", "sighting_of_ref": "indicator--d437de04-5dbd-469e-9bb4-f869653f9830", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14356c3d-b0cf-41d9-9aba-eb85934ccb31", "sighting_of_ref": "indicator--d437de04-5dbd-469e-9bb4-f869653f9830", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5796b1d8-357f-49a1-bb93-9bae6aa313d9", "sighting_of_ref": "indicator--a872774d-d3d8-451a-8944-4d24c13e691f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d394d0e6-abaa-4260-b9ca-a7bf9f379231", "sighting_of_ref": "indicator--a872774d-d3d8-451a-8944-4d24c13e691f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17284d5c-2b5d-4505-87f0-ca42b68f7c1d", "sighting_of_ref": "indicator--dc515bed-754c-43dd-b3ca-52d0a52087c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6365a80c-8cec-4d43-9342-f1dba5a99343", "sighting_of_ref": "indicator--dc515bed-754c-43dd-b3ca-52d0a52087c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5611fc-d7ed-4abf-905e-1aa12a924bf9", "sighting_of_ref": "indicator--dc515bed-754c-43dd-b3ca-52d0a52087c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4010247-7023-4c62-8d6f-fcef344d2313", "sighting_of_ref": "indicator--ed0ed25a-7eec-4cdb-b28d-97481b59f8d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6510a4-e615-48b0-bac7-53a4b059ef6f", "sighting_of_ref": "indicator--ed0ed25a-7eec-4cdb-b28d-97481b59f8d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d8fde4-26df-4894-b86c-1226380b4005", "sighting_of_ref": "indicator--ec9cc7ac-777d-4dda-9a66-e2da9ad22e15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaae87e-2131-498a-80e6-88c18edf56cb", "sighting_of_ref": "indicator--3ba941f0-c6ff-489e-91b8-37626e1897cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e774265-e074-4445-8a84-3d5154baea56", "sighting_of_ref": "indicator--3ba941f0-c6ff-489e-91b8-37626e1897cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cfced3-4bcd-430e-8a52-37ed0cb2c605", "sighting_of_ref": "indicator--c12e665d-67bc-4ea8-8cf5-1d77b61b3564", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299e1bef-1f33-484a-af21-2657649f58fc", "sighting_of_ref": "indicator--c12e665d-67bc-4ea8-8cf5-1d77b61b3564", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb4c77f-0ded-49e7-9fa5-9d3c8bbab37b", "sighting_of_ref": "indicator--c12e665d-67bc-4ea8-8cf5-1d77b61b3564", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a889657-81b5-4ee9-acd1-5770f5c7d5de", "sighting_of_ref": "indicator--7be57c8b-c8ed-471f-8e05-95a9adacc551", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cb64e6-29b2-4d1d-9d31-8d1ae2f6b34e", "sighting_of_ref": "indicator--50f3abac-b561-4575-8324-a79780f6017b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87002d5f-42f8-494d-b968-ba98433f134a", "sighting_of_ref": "indicator--f12ac9a9-c9db-4df6-85df-7750ab68a8ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531481e7-ffc0-4f8f-ab4c-0e27970a5532", "sighting_of_ref": "indicator--f12ac9a9-c9db-4df6-85df-7750ab68a8ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fb92fd-4f53-433a-a1f6-be330dd4e976", "sighting_of_ref": "indicator--bafcb6f7-41bd-4ef6-b688-9afd2ddbc46d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203feed8-5c7b-4b0d-817b-0fb3a1204df1", "sighting_of_ref": "indicator--bafcb6f7-41bd-4ef6-b688-9afd2ddbc46d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b2383-2865-40b3-a759-02baf24bbc6a", "sighting_of_ref": "indicator--90bd5ef6-1086-453f-8a9a-977a87530eab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bc1c67-7f2b-485e-bbf5-681ce5cbff25", "sighting_of_ref": "indicator--90bd5ef6-1086-453f-8a9a-977a87530eab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00be2f2-19d1-47af-88d1-cfce4b23817b", "sighting_of_ref": "indicator--90bd5ef6-1086-453f-8a9a-977a87530eab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d44b1a-14d2-449a-8c65-f96073a3a0fe", "sighting_of_ref": "indicator--e7e4f457-8a80-4006-a5fc-658f227490f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b975b-c3f8-42f4-ace5-e22c637b7d8d", "sighting_of_ref": "indicator--e7e4f457-8a80-4006-a5fc-658f227490f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac8bd31-382e-4d1d-839b-683f8e8eb60e", "sighting_of_ref": "indicator--e7e4f457-8a80-4006-a5fc-658f227490f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc94873f-9bbb-414c-a580-b1fd6a6a5546", "sighting_of_ref": "indicator--8c50f694-0165-4457-8ec0-7c022438b43e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc74fc31-f36a-4833-accb-8d9cda0356d7", "sighting_of_ref": "indicator--8c50f694-0165-4457-8ec0-7c022438b43e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28114deb-0e1f-4d7b-b073-d2321878b44b", "sighting_of_ref": "indicator--8c50f694-0165-4457-8ec0-7c022438b43e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4445dc55-2866-492e-93f3-9c995551f57e", "sighting_of_ref": "indicator--65e221af-5c4d-43a8-a9f5-37108e1d26a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742d7bd2-8071-443a-b76a-11e319b1fc31", "sighting_of_ref": "indicator--65e221af-5c4d-43a8-a9f5-37108e1d26a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671bf561-0955-4770-99e2-cd527152e580", "sighting_of_ref": "indicator--65e221af-5c4d-43a8-a9f5-37108e1d26a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998e6e5a-61eb-4cac-8493-55da2f5498ff", "sighting_of_ref": "indicator--eae00135-d6e4-46df-9363-5e55ab27f014", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ab554c-102d-4004-8f9b-23827a419ee3", "sighting_of_ref": "indicator--eae00135-d6e4-46df-9363-5e55ab27f014", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed19d17-e1ee-4cd8-9dd0-a65ba91b9bec", "sighting_of_ref": "indicator--eae00135-d6e4-46df-9363-5e55ab27f014", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09bd23a-33ac-4e11-9227-405a6661063f", "sighting_of_ref": "indicator--42456fdd-3485-4e86-8621-d300116a5dea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91e45fd-d1b7-4597-996e-f6999e3980cc", "sighting_of_ref": "indicator--42456fdd-3485-4e86-8621-d300116a5dea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3156fd6-75ad-40ec-bbd5-9d7e72dad9b4", "sighting_of_ref": "indicator--42456fdd-3485-4e86-8621-d300116a5dea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d7ae32-c41b-4b47-90b4-0d9b555924a6", "sighting_of_ref": "indicator--2d2c7381-78f2-45c5-ab7e-38dcb381f088", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a923c9-e788-48c7-8c99-c7fe38056595", "sighting_of_ref": "indicator--2d2c7381-78f2-45c5-ab7e-38dcb381f088", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0111ecb3-efe2-4e45-8647-eccec4932261", "sighting_of_ref": "indicator--2d2c7381-78f2-45c5-ab7e-38dcb381f088", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55814df6-b014-4064-ad92-eed27a21172f", "sighting_of_ref": "indicator--a37a76df-e0f2-405f-96bf-0a076ca4bb32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c232afa-1349-447a-b56e-ef19ae63610c", "sighting_of_ref": "indicator--a37a76df-e0f2-405f-96bf-0a076ca4bb32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd85c7c7-a357-4243-b87e-dbb6347fb955", "sighting_of_ref": "indicator--a37a76df-e0f2-405f-96bf-0a076ca4bb32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca33b2fe-fd37-484e-ab33-2d6446e803f0", "sighting_of_ref": "indicator--e4cf4d9e-bdb6-4285-8b89-674c4632d095", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ae0ec-59d4-4524-b6f7-8d9702b0581e", "sighting_of_ref": "indicator--e4cf4d9e-bdb6-4285-8b89-674c4632d095", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04642c08-ff3a-43c7-aed5-8a2d3e8f7be7", "sighting_of_ref": "indicator--e4cf4d9e-bdb6-4285-8b89-674c4632d095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375169f5-6e1f-47af-825e-e2b705774149", "sighting_of_ref": "indicator--8f2fc2ef-3d01-4328-92a5-e931cee9b946", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b15f52-0d0d-4f25-bc5b-eac3bdc2e0fa", "sighting_of_ref": "indicator--eb4cc04d-6d8c-4da2-b92c-3e55929647d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2854e7-83c2-4b71-b47b-2ed9acacf346", "sighting_of_ref": "indicator--d1c5ab73-1b56-4277-8f97-d1331c306b14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a3b702-395c-42a1-b49f-339070d1aaf5", "sighting_of_ref": "indicator--f973e385-add5-4faf-b835-525bb853a44f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5851307d-588d-4f99-9a1f-954188836ef2", "sighting_of_ref": "indicator--dcb74292-db70-4b2f-8515-edf900e20501", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c40a580-87b6-488a-9511-28e653faf309", "sighting_of_ref": "indicator--39e2ca99-29e9-402c-87fc-e7eed2cff3bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fed272d-16ac-4351-a6b7-8c342a9b65b5", "sighting_of_ref": "indicator--39e2ca99-29e9-402c-87fc-e7eed2cff3bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3017826c-8044-419e-aee2-73592b7fc834", "sighting_of_ref": "indicator--39e2ca99-29e9-402c-87fc-e7eed2cff3bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaa6da0-ef20-4648-b7d1-31ab2023031e", "sighting_of_ref": "indicator--fcea0d0d-809b-4e8c-8c5c-ac865ae42af2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ee9d68-5342-43d2-8e0b-04516c9a3316", "sighting_of_ref": "indicator--fcea0d0d-809b-4e8c-8c5c-ac865ae42af2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2076b36-0548-4649-8c07-f64e0e13c565", "sighting_of_ref": "indicator--fcea0d0d-809b-4e8c-8c5c-ac865ae42af2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92cb2a6-107e-4a07-88da-57e002d4b7e8", "sighting_of_ref": "indicator--d97b914e-e7a1-4bad-9e74-d5010e2df394", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62397ac2-6520-4188-9f96-4a10619ba56a", "sighting_of_ref": "indicator--d97b914e-e7a1-4bad-9e74-d5010e2df394", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eece9489-ca89-4fb2-81e4-0837fc669715", "sighting_of_ref": "indicator--4b21476f-1601-4b95-9a70-954d2d655acb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94be8bc9-01ad-441c-9431-3f3012d01854", "sighting_of_ref": "indicator--8c7725bf-8fef-461f-b888-cbfaf17d8b62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dce917c-7a57-43c9-b49e-a0d7a11e00c9", "sighting_of_ref": "indicator--3607810d-96ed-4716-b8bf-6642b7065f1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6550f0a4-ab55-436c-88ed-e6f4c7b2c488", "sighting_of_ref": "indicator--0751fd6b-65d3-4fe0-9e77-4634efa310ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5a05f-a62d-44b1-8ee8-5027849b0655", "sighting_of_ref": "indicator--64f3624e-3ff1-49a9-84ff-dcd6a81967c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6241d949-944b-43ae-8ac2-da068a818f38", "sighting_of_ref": "indicator--c5b992d7-4f9a-46d7-ab7e-99a0e77cbdb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dc9c6c-83fa-4609-91c5-936e02122990", "sighting_of_ref": "indicator--d4c6e426-ed3f-4fbb-a95b-d52e6d7df68e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1be500-e148-46ce-8dcd-9af3377f3701", "sighting_of_ref": "indicator--6fb8fcde-8cbb-4832-b95d-fa2d3ad8b24e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1e2930-6979-45f8-b2bc-bf1ea6dbb7ab", "sighting_of_ref": "indicator--d5877fd4-2b4b-4250-a04a-63c88e38e496", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9395bd59-b1f7-4364-8aeb-c83e0469d5c1", "sighting_of_ref": "indicator--47aff0b2-da12-4ccb-a546-4ae583b3ebd0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50ec9ee-846c-4c92-aa7d-56cbeb06099f", "sighting_of_ref": "indicator--8fcb4e05-21a1-44e7-a868-c1560db9a3f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450dd87c-12bd-4203-8aca-f103c24d20da", "sighting_of_ref": "indicator--8fcb4e05-21a1-44e7-a868-c1560db9a3f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959bda51-c782-4cd1-b297-09390ed6afd9", "sighting_of_ref": "indicator--2d333d36-864d-4d7a-843f-b20f88c7bdbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafadc6e-07e9-4869-91fe-206c6acb0244", "sighting_of_ref": "indicator--a704b156-b9cd-4a0b-a776-3a7217f7cf5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cebd18c-f77f-4fdd-a643-620459ece6e0", "sighting_of_ref": "indicator--8f3d8b6d-d2f2-45af-bd42-33050b64dada", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3e88d0-2b0e-427c-b28b-439deb93b490", "sighting_of_ref": "indicator--3b27caa5-7937-4ae2-9b13-ba543e36bee7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eec5b3d-0a96-4943-98a2-bad1e791d1b8", "sighting_of_ref": "indicator--55504b0a-9f16-4dcd-b657-33faae59f871", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4590254d-192d-4b7a-bb7d-aa4425be9db0", "sighting_of_ref": "indicator--9daf682b-6228-40bd-a7f5-d878ec535cff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bea5aef-f11f-4796-92cb-f1a0b56cd5d3", "sighting_of_ref": "indicator--badffd5b-6bd6-451c-8109-a20daf8b38d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d44ed09-a67e-4310-afee-d2c54de9bc64", "sighting_of_ref": "indicator--cb9bbe48-5e66-4920-917f-4a13565c60c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0b4a3b-ba36-47ef-b205-5cd3ef96a936", "sighting_of_ref": "indicator--cb9bbe48-5e66-4920-917f-4a13565c60c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1b6306-793c-4291-b4e6-57c8a1b6ec18", "sighting_of_ref": "indicator--cb9bbe48-5e66-4920-917f-4a13565c60c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b2fa26-d00b-41b9-90bc-1cfabb177c98", "sighting_of_ref": "indicator--2fe2392e-a3f0-46ea-beaf-8dba3e35c0d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182b7935-deaa-4f6f-8bc5-25f33343981e", "sighting_of_ref": "indicator--c1c88fa3-aaf6-4465-808a-96ae373db691", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba174f2c-393a-4184-915c-4fc28eb49db2", "sighting_of_ref": "indicator--c80a26da-1b7f-4ef7-9126-2ec4f1ab1dc2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf73dbb-aa4e-4700-82d3-a0daf40900cb", "sighting_of_ref": "indicator--661de781-eedd-483a-8232-98aeb84fdf38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89e4875-5e4c-4de8-ab78-74530e4e489b", "sighting_of_ref": "indicator--040da3e8-c986-4424-9c27-11d5dc46fdb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b7dcb-7458-4ad6-a7f9-1f5b0cbcc03b", "sighting_of_ref": "indicator--58c3ae4e-27b1-43e1-838a-c83be6358c5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae984e0b-e66d-4402-b7d0-545cd8bf0084", "sighting_of_ref": "indicator--39185f3d-c011-4784-8b4c-287f933b7f5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e871db1-eafc-4ae8-a272-42fcdabc1997", "sighting_of_ref": "indicator--aa9c705d-2fcc-4357-af4e-5cbb5418a8e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11d55e5-5994-40be-a343-b99f5b2adeb2", "sighting_of_ref": "indicator--8745b8cf-2895-415c-9e00-72d89aaf4c18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812938dc-152e-4967-8279-a827ac16f0f5", "sighting_of_ref": "indicator--8745b8cf-2895-415c-9e00-72d89aaf4c18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006407dc-c277-4a1a-a891-88883f3f08c8", "sighting_of_ref": "indicator--8745b8cf-2895-415c-9e00-72d89aaf4c18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14e6426-0460-435e-b883-92c7b2263f18", "sighting_of_ref": "indicator--e13c512f-2437-4c3e-9d66-e965a6ee0d74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a705520e-31a8-4e50-a877-5891974a178b", "sighting_of_ref": "indicator--1376a524-adb2-428d-b1ff-23e89f6c169d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabd6abb-2e67-4c42-b5d6-8337149a1758", "sighting_of_ref": "indicator--1376a524-adb2-428d-b1ff-23e89f6c169d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1713f28-aae5-4f85-b93f-c1e8814870d2", "sighting_of_ref": "indicator--1376a524-adb2-428d-b1ff-23e89f6c169d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7a82bd-0bce-4ddc-8f0d-48f16a1a3139", "sighting_of_ref": "indicator--8eb21432-3be8-48cf-baf1-3bf09d62a672", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486b9ec5-2be7-4bea-9155-b31284d9f362", "sighting_of_ref": "indicator--04d8510a-c5d3-419f-9a59-76ce6d62eb5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d1d8e0-419e-4f46-88e3-fb2729658774", "sighting_of_ref": "indicator--46a5c433-0070-4ac0-86a7-b79f894f3c99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae129ad5-e9b9-4603-aa4a-a0872beb0ee8", "sighting_of_ref": "indicator--e690a1f2-01ec-4237-972f-3f0a4a91903d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d2367-ae8b-4762-9eb6-8df0ad242a5b", "sighting_of_ref": "indicator--bc8e680c-fd46-4b5f-a517-27894e0480c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ab599d-2ecd-4141-9257-75b82064910a", "sighting_of_ref": "indicator--bc8e680c-fd46-4b5f-a517-27894e0480c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809e0f72-0f06-406a-80ec-67fc85d0ecbc", "sighting_of_ref": "indicator--1138329a-bc2b-40e4-b6db-04bca5502e7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d80356-fb56-4514-9f66-fe975b5b329c", "sighting_of_ref": "indicator--1138329a-bc2b-40e4-b6db-04bca5502e7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bd889d-489f-4d37-94e6-ef8fdaf434f6", "sighting_of_ref": "indicator--1138329a-bc2b-40e4-b6db-04bca5502e7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb55b09-5664-48c0-97fe-d8a2ab3a90b5", "sighting_of_ref": "indicator--8f19bea0-cfb0-439c-9443-63e836a889b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53708bd5-f1fb-44dc-9d13-2954c2d7762a", "sighting_of_ref": "indicator--8f19bea0-cfb0-439c-9443-63e836a889b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d3513a-c72a-4cb7-b70a-cd379d676955", "sighting_of_ref": "indicator--8f19bea0-cfb0-439c-9443-63e836a889b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5126c566-5f0d-4ab9-a447-b9f5bb775aad", "sighting_of_ref": "indicator--974d7e3b-09ba-4600-b74f-a7cf83f25537", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a904593-6636-43e1-8aeb-0d4b34b5f084", "sighting_of_ref": "indicator--d89d8f48-ebc4-47d8-b5ce-a6873c4fea62", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd31158-001b-4cdf-ad3f-6a1a42839d2c", "sighting_of_ref": "indicator--d89d8f48-ebc4-47d8-b5ce-a6873c4fea62", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80823830-503b-4da5-b41b-b407dd21d5cc", "sighting_of_ref": "indicator--d89d8f48-ebc4-47d8-b5ce-a6873c4fea62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7b5ee6-e692-4023-a4f3-bd56530fccb1", "sighting_of_ref": "indicator--ed817a48-04a5-424b-a398-751c512d18db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eab4bdf-1e93-4621-8e55-7b2db772c4fb", "sighting_of_ref": "indicator--3d9c9e1c-9d5d-4b9d-a994-d6b0f633a200", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184987df-9c11-4ae9-a7dd-162a71d784be", "sighting_of_ref": "indicator--3d9c9e1c-9d5d-4b9d-a994-d6b0f633a200", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c29890-f9cb-4e38-bc04-674fd3b00ea5", "sighting_of_ref": "indicator--3d9c9e1c-9d5d-4b9d-a994-d6b0f633a200", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f1b971-b569-45fb-bc97-cd9577541380", "sighting_of_ref": "indicator--dd332467-1027-4704-af87-299977935b1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c7685f-abee-4406-bb8e-dcaa561a2baa", "sighting_of_ref": "indicator--dd332467-1027-4704-af87-299977935b1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c0e9a2-ab63-40ec-b062-79e7b5233edf", "sighting_of_ref": "indicator--dd332467-1027-4704-af87-299977935b1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba991ad1-ca7b-4987-a643-ff1dc2ced28c", "sighting_of_ref": "indicator--510137dc-7519-40f8-a7b8-ffbd5154546f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfeb23b-e1f9-42f8-b985-f48666a8f030", "sighting_of_ref": "indicator--510137dc-7519-40f8-a7b8-ffbd5154546f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd31f225-a433-4b74-a025-2a2fed57325c", "sighting_of_ref": "indicator--510137dc-7519-40f8-a7b8-ffbd5154546f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d229bad5-d088-4876-8803-b24b14f6e28b", "sighting_of_ref": "indicator--68018e65-9db4-4b56-a74e-619fe4d7c536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08764784-6223-47e8-be81-32c75df11ee1", "sighting_of_ref": "indicator--68018e65-9db4-4b56-a74e-619fe4d7c536", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2fb2a6-98d4-4abb-943f-4afb6dac68c2", "sighting_of_ref": "indicator--b8c5015c-5790-47a9-9550-d0523b36448d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a61a61-edeb-41f0-91c6-381fbf4da60e", "sighting_of_ref": "indicator--b8c5015c-5790-47a9-9550-d0523b36448d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c2bd3f-8a2c-4b28-bb93-9ac21b8f58c8", "sighting_of_ref": "indicator--b8c5015c-5790-47a9-9550-d0523b36448d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04deef2d-cf75-43a7-9ad6-e06e85e91fcc", "sighting_of_ref": "indicator--b6d4e813-154e-4581-b676-56c2412e8925", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1a071e-0499-439f-815b-3b42e2823c2d", "sighting_of_ref": "indicator--b6d4e813-154e-4581-b676-56c2412e8925", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950f64d9-4071-4a24-8ad6-cd74e8d41ba7", "sighting_of_ref": "indicator--b6d4e813-154e-4581-b676-56c2412e8925", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a166fce-bdd9-4f1a-b655-0841140ae8af", "sighting_of_ref": "indicator--17525a90-9c2e-4f4e-a005-553dae485548", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47373c87-347e-4e31-b8bc-1d18eabd5251", "sighting_of_ref": "indicator--17525a90-9c2e-4f4e-a005-553dae485548", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4db1caf-c8fb-4db8-b44b-8d71b710dbab", "sighting_of_ref": "indicator--17525a90-9c2e-4f4e-a005-553dae485548", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288504a4-fe67-492f-9c0a-edc9e807a695", "sighting_of_ref": "indicator--310c3efd-eca7-435e-ae97-9fafebec9107", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8b3695-7731-46c8-b676-4f360d4f2b8a", "sighting_of_ref": "indicator--310c3efd-eca7-435e-ae97-9fafebec9107", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b148ba3d-1da5-4374-b5ac-2d18fd7517b4", "sighting_of_ref": "indicator--310c3efd-eca7-435e-ae97-9fafebec9107", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dbf45b-2e87-45e2-b17c-3d70c2a51ea7", "sighting_of_ref": "indicator--65971157-e791-412f-83ab-d3f5d621f7b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e1b865-d83a-44f4-8a4c-510d108e4a9b", "sighting_of_ref": "indicator--65971157-e791-412f-83ab-d3f5d621f7b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f557ec3-2cae-494d-8abd-01f608c9d39f", "sighting_of_ref": "indicator--65971157-e791-412f-83ab-d3f5d621f7b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af7a5cc-7871-42ff-ae71-2ff3a601148d", "sighting_of_ref": "indicator--51c19ce8-2ad6-4565-b660-2fa0008a689f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025ecbe3-0ca4-40a9-a8f2-4adbccbd9264", "sighting_of_ref": "indicator--51c19ce8-2ad6-4565-b660-2fa0008a689f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b38f6f-d32e-49a3-99f8-ec739fa3fc75", "sighting_of_ref": "indicator--34f7ad32-7fe0-4e67-b8ce-0c9c423976ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc65825f-0f61-45a2-8229-e7a7c6798aec", "sighting_of_ref": "indicator--34f7ad32-7fe0-4e67-b8ce-0c9c423976ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe4540-2aed-4776-87e4-7f53e064c39d", "sighting_of_ref": "indicator--19598eb6-3a72-48d9-bb8a-e7f687303db3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d5c220-2ed3-4756-91a3-1006475f943b", "sighting_of_ref": "indicator--d90978b1-73ef-497a-a68c-6afe1656a8ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cdeb93-67f1-4f72-b23f-8ca73e0effbe", "sighting_of_ref": "indicator--fbea92de-b1da-46c3-95cf-2bc32cc6cb0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ff92ad-b3f1-40e8-8f84-f423cb66161a", "sighting_of_ref": "indicator--b78f0dbf-2928-4d38-aae9-0ba4f07d7805", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4013314f-df87-4f7f-a706-934f1e23f948", "sighting_of_ref": "indicator--877b6e5e-edac-4945-a994-098c014184e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ef34a3-90ae-4d8f-9f53-28d27a70d348", "sighting_of_ref": "indicator--877b6e5e-edac-4945-a994-098c014184e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3344a5-a948-4093-9968-172533505a16", "sighting_of_ref": "indicator--877b6e5e-edac-4945-a994-098c014184e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7922f22f-7eed-41b9-a6a9-dda866ee95f4", "sighting_of_ref": "indicator--feba9d6f-a11c-4ceb-ace2-0aa5dc263804", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5ee0a5-5ce3-48da-b0dc-3dae3e7aae37", "sighting_of_ref": "indicator--207b8f4b-9c95-40d2-a23c-74390ba735ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f05e548-47a5-47f8-8cc3-dde272eab844", "sighting_of_ref": "indicator--044cf923-a552-4301-bd79-f1c1201e846f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bab3e7-ccd4-45eb-bbdf-efa5a8005ccb", "sighting_of_ref": "indicator--bcbc89b0-0455-47d2-8ebd-a738128de22a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ce53d7-1573-40b2-be97-a1743551efd1", "sighting_of_ref": "indicator--2342b2fa-4630-4046-ada9-7d44a2be22eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0687a009-67aa-40d2-8445-fa57d2ad760e", "sighting_of_ref": "indicator--b909d40d-08e0-4b24-a386-1816b7cd95ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b0cd63-1f1e-4116-af18-a18b1e4e75cf", "sighting_of_ref": "indicator--4218063f-9954-4f07-92fe-dc8e62259b5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08f069a-c749-4401-a6b7-070151af04ac", "sighting_of_ref": "indicator--4cacbb52-a5b6-47cf-82eb-7be0182f3331", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603aea9c-aa43-4c14-8916-3d350fb092a7", "sighting_of_ref": "indicator--d8f99233-920e-4211-aa7e-59b3768be743", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4bfdb-6ff2-4d3b-a101-08898a261b20", "sighting_of_ref": "indicator--87a704ad-f949-4a88-9d10-6be03a4b74be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95551e6-a546-4270-b731-ff769abe12d1", "sighting_of_ref": "indicator--fd9d1444-db75-423b-b8ab-74f36a00392b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ea4839-ac02-4d52-a330-e85c9fe9578e", "sighting_of_ref": "indicator--41d101c2-9fe2-418c-af51-870b9744f149", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863a343-dacc-4723-86e9-e99df7bf3efa", "sighting_of_ref": "indicator--eec2f4b7-7b09-4810-b6b6-6cdfd400f399", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039d50a-ed8f-4821-8180-1063be28d11d", "sighting_of_ref": "indicator--f437689a-28f4-4b14-a81b-201085f53a56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61b68e5-47c3-4a48-a800-7e12b5e50b4a", "sighting_of_ref": "indicator--a3adff71-cdb1-4cf1-b13f-c07e6f0fd9f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52954398-9746-49a0-8191-474fe90ed257", "sighting_of_ref": "indicator--52681c04-55ca-44fd-8bf6-c2c6ea6ac02c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061ad717-ee91-4581-9b25-3ef0ab66ef6f", "sighting_of_ref": "indicator--339dd9d5-8b85-4e3b-b8da-630988b799c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d3371d-c54c-40b6-bc58-596e49078a93", "sighting_of_ref": "indicator--b9a6b81c-5b41-47e1-9e51-634002b72ceb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d251ca7-f719-4a22-a8ca-2bb53de2f8ed", "sighting_of_ref": "indicator--2f3926ca-36d0-472a-8e73-2311d52c8712", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e3e437-e9fd-4b13-99bc-08952bb2030e", "sighting_of_ref": "indicator--611da415-94d1-45cb-babf-3bc3ea387748", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced1ef51-cfa7-44a0-9c51-f4b1d368f0a5", "sighting_of_ref": "indicator--8623c503-6c9a-46ac-9871-8b0c84bd402d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b935fd09-47fe-46b5-b98c-f012b7dff60f", "sighting_of_ref": "indicator--821f6c3f-3d7d-4a06-8204-9e56451f651c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7536609e-335c-4100-8a49-e6fbc73a6a40", "sighting_of_ref": "indicator--400f50e0-0d4d-4f39-9d44-2c5328bbf94d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ace8f0-3892-4ee4-9b84-84d656c0387c", "sighting_of_ref": "indicator--b8ad5fd3-5232-4762-8539-9f0dc11a80e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422afce-eed9-4462-b6bb-ffbcf16519dc", "sighting_of_ref": "indicator--53bcc58a-7819-43fb-992c-f0031765b8dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438c2f51-ba57-482b-8284-93c79559ce43", "sighting_of_ref": "indicator--93dc0df7-d85f-4869-bdf5-a4edc23b0a57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edee7c56-65ac-42f0-988b-14c438da010c", "sighting_of_ref": "indicator--93dc0df7-d85f-4869-bdf5-a4edc23b0a57", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb607b14-2559-4bab-a799-1f08b4af6877", "sighting_of_ref": "indicator--93dc0df7-d85f-4869-bdf5-a4edc23b0a57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbaff6c-01e2-4d3d-97a9-58c1c0528be8", "sighting_of_ref": "indicator--19aee356-6e80-4d0c-b1f1-91d2f5f9cc83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7896b34c-7fee-4ea9-8900-1b8e58536345", "sighting_of_ref": "indicator--19aee356-6e80-4d0c-b1f1-91d2f5f9cc83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46b331e-b950-4f03-8d25-df34448eb554", "sighting_of_ref": "indicator--19aee356-6e80-4d0c-b1f1-91d2f5f9cc83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2527670b-1bd0-4205-9ec3-60bb3353909d", "sighting_of_ref": "indicator--cfbfe503-ec73-407c-bb1b-042af74485c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc56061-b5b8-42ea-bc92-0358a9278495", "sighting_of_ref": "indicator--ba0a854f-f905-4d84-9f63-eebb2cbe5554", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5e5785-4ee4-47e8-881a-7d11563dcfdb", "sighting_of_ref": "indicator--aeb757e1-c918-4066-9fe1-eba06df2bda5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d1efa5-101c-43da-9eff-80deb1ffa8cd", "sighting_of_ref": "indicator--9d401a33-ea86-4c81-9153-35df7dbec984", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4141cee0-957c-4797-a579-1670a4c7a143", "sighting_of_ref": "indicator--c8c8b479-5a7c-400f-8eef-9c87adf87ca4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4eb00d-247f-49c2-b04f-cefe46f73b7c", "sighting_of_ref": "indicator--1199e354-8597-4169-a901-8b4bd859897b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e945ae-56af-4f3b-9c27-8df0ea7d6a40", "sighting_of_ref": "indicator--603c3e25-63b3-4c5d-811c-a020b6549ab1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb3e3c6-edbe-413d-a893-6c4c9a7898cb", "sighting_of_ref": "indicator--321c8ad4-a1a0-489e-a05e-ac3b9aa5c260", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb356376-91f8-4a13-984a-ee4673fbabaf", "sighting_of_ref": "indicator--34d64a8a-2c2a-4e9d-bfde-f42e29894370", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902512ba-b21c-435d-bc73-cebda2f744ea", "sighting_of_ref": "indicator--3a6401ad-a99d-47cd-b8cd-c83c4a0400cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d019fe41-332c-44fb-a4d1-b123b83ca9d2", "sighting_of_ref": "indicator--bbca9be9-7a4d-4bd7-98bf-6af15829569b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91086199-f5b7-448d-9e84-ddb3c71e549a", "sighting_of_ref": "indicator--5e0c8a5e-6981-43f8-8606-dd162e1c5524", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a356f5a-9a55-4cd8-a6cf-5b00beb60d59", "sighting_of_ref": "indicator--ef460da6-320a-4de6-a7f3-ce79b9766951", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6458fa-16a6-419e-bfbd-499b00fb76c6", "sighting_of_ref": "indicator--7009c0a6-4a01-43ca-8604-99f8642a9a21", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6017529d-244b-42c5-b27e-0e648a98f00f", "sighting_of_ref": "indicator--ab9ea8bf-42e3-4b3d-8d2a-b98ed27453e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4a27ac-d73a-4b09-983c-3989983af652", "sighting_of_ref": "indicator--d18085c7-8da7-4d49-9a36-3223200646eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9edf00-c652-4c2a-80b5-e19f125a9de4", "sighting_of_ref": "indicator--d18085c7-8da7-4d49-9a36-3223200646eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa387335-c3f3-4465-a95b-ed36f68c4acf", "sighting_of_ref": "indicator--d18085c7-8da7-4d49-9a36-3223200646eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1de0d0a-328b-4600-bd0b-91f78e011c13", "sighting_of_ref": "indicator--e3b890a8-fb5a-486f-ba24-a6f0de9c144e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f090ad-b6a0-4a74-a885-6be1705c3760", "sighting_of_ref": "indicator--e3b890a8-fb5a-486f-ba24-a6f0de9c144e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fa66e0-a831-4562-a585-978edcf2e084", "sighting_of_ref": "indicator--e3b890a8-fb5a-486f-ba24-a6f0de9c144e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bc1091-0aa6-407e-bcd9-42f84b26c917", "sighting_of_ref": "indicator--fc329607-d89f-45cf-aad5-e0598d54e18b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1809e5d3-75d3-4437-bc89-7705aff72c68", "sighting_of_ref": "indicator--fc329607-d89f-45cf-aad5-e0598d54e18b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845ed570-7186-48ca-b184-3057775b62f3", "sighting_of_ref": "indicator--be4460d1-c32b-40f7-a422-8b3a06d3d583", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4894ead8-62da-44b3-98f2-7ef5698cad5e", "sighting_of_ref": "indicator--5d7a828a-c9d7-4349-ac56-0a1773f7dd4f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b4a430-2dac-4139-9178-66888f4edb25", "sighting_of_ref": "indicator--5d7a828a-c9d7-4349-ac56-0a1773f7dd4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906578df-d218-4d10-85e5-97d0025de0c6", "sighting_of_ref": "indicator--12626602-8ec6-4050-89b4-505430b58ec3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd09e34-eb3f-4d1a-b988-8de38bd354ad", "sighting_of_ref": "indicator--12626602-8ec6-4050-89b4-505430b58ec3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76911d92-9cc3-49a2-81b6-e4f3ecca8dda", "sighting_of_ref": "indicator--12626602-8ec6-4050-89b4-505430b58ec3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118093a7-3b4c-4922-b3f4-71352fd5dcfa", "sighting_of_ref": "indicator--d612dc65-38ab-48d4-ac25-4d8c3b5d7cb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f8c47-ab33-4d2c-a6bb-0e05c3dd296b", "sighting_of_ref": "indicator--d612dc65-38ab-48d4-ac25-4d8c3b5d7cb9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a744e91-0543-49ba-b09b-0272ab9dc097", "sighting_of_ref": "indicator--d612dc65-38ab-48d4-ac25-4d8c3b5d7cb9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ec0bf2-ec2a-4305-9375-75f2406a2056", "sighting_of_ref": "indicator--8a3710b5-b311-4000-ae51-257f72d09d6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f71f14d-7819-43a6-9a37-97eeee2e4bcb", "sighting_of_ref": "indicator--c31d4eea-4a8e-4f07-b013-adf8c93705d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e6ba18-07f6-4a03-bd8c-2f6fad7cc965", "sighting_of_ref": "indicator--9b6982fc-fa7e-4753-9392-37dffa9da801", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e23793b-5eda-4578-8644-4d7093ccbe3a", "sighting_of_ref": "indicator--4ee561fa-974e-4b6b-8fde-bbab44e723e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34f8dab-91e5-4eb5-b555-3e387f9ce28c", "sighting_of_ref": "indicator--4ee561fa-974e-4b6b-8fde-bbab44e723e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48789fa5-8cba-48f8-b076-04aa6af4909f", "sighting_of_ref": "indicator--708ea594-d9c2-48dd-92c3-79301bd21848", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1ffbe6-04cd-493d-8e65-e6857a594c53", "sighting_of_ref": "indicator--708ea594-d9c2-48dd-92c3-79301bd21848", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb372eb9-d6df-4f41-aa95-682b3ed4242f", "sighting_of_ref": "indicator--708ea594-d9c2-48dd-92c3-79301bd21848", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae492963-f6a0-4c5b-9916-90ac95a95755", "sighting_of_ref": "indicator--73e4fb4c-34ad-4a6a-ae51-e550ed3f982d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5d0aa4-7a95-4eed-86b3-3e1aff74612a", "sighting_of_ref": "indicator--73e4fb4c-34ad-4a6a-ae51-e550ed3f982d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ba9973-fbed-448c-9db9-855d26c8d2f7", "sighting_of_ref": "indicator--8ade82d8-ca4c-457e-97e1-cd1f9e582d12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a3af3f-7d97-4b02-a8f1-765ca63a8ee7", "sighting_of_ref": "indicator--8ade82d8-ca4c-457e-97e1-cd1f9e582d12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c0aee8-5a09-462d-9d4d-57f74c0351d4", "sighting_of_ref": "indicator--8ade82d8-ca4c-457e-97e1-cd1f9e582d12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e019ca-c4eb-4682-97aa-5e5f74131394", "sighting_of_ref": "indicator--33fa71fd-ae6d-46cf-96f4-989890479b3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e90e50-ab97-440a-a65b-0fdde15cc8bf", "sighting_of_ref": "indicator--33fa71fd-ae6d-46cf-96f4-989890479b3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6fa7b7-eda7-49c7-92b7-8da197b16ec6", "sighting_of_ref": "indicator--33fa71fd-ae6d-46cf-96f4-989890479b3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb30ab5-e972-4aac-92ae-b0dc784568a4", "sighting_of_ref": "indicator--24315b6a-6803-493f-a06e-d490d9914aae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf9cdfa-68ec-49ab-bc8e-87902378c724", "sighting_of_ref": "indicator--412dc6cd-625a-4b73-b51d-8fda7f631f27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a279ab96-93ba-4def-8ea5-d0254fda9df5", "sighting_of_ref": "indicator--6ec18890-c3e8-4903-bb62-90ceb0e0a4d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ed5e7e-9de8-44c1-ae32-845ac9eb4ac5", "sighting_of_ref": "indicator--a9819637-8885-4336-9aed-87d827df7ce7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016906a6-5386-4b5b-9097-807468cd3e96", "sighting_of_ref": "indicator--1be3947d-046e-4af4-af24-eb680eac48e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c9b1da-011a-4f49-99e8-fb60735266cc", "sighting_of_ref": "indicator--1be3947d-046e-4af4-af24-eb680eac48e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83253d2c-183d-4691-ad73-f849da8917df", "sighting_of_ref": "indicator--1be3947d-046e-4af4-af24-eb680eac48e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6291333-2f3d-418e-9515-f3b51843ce37", "sighting_of_ref": "indicator--4a04055b-de14-4048-a52b-037e1a5bac65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4869bf22-ffba-4095-a773-d78cb5f09e45", "sighting_of_ref": "indicator--4a04055b-de14-4048-a52b-037e1a5bac65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e467e52-cdbd-4ce5-9a59-db134b3425be", "sighting_of_ref": "indicator--4a04055b-de14-4048-a52b-037e1a5bac65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4f67e3-6eb6-4c83-b522-7da83c323910", "sighting_of_ref": "indicator--ed20ed63-9e6d-4ca3-afa0-03265d2bbac1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961a8897-81db-41ba-a7f2-170a01dad5ba", "sighting_of_ref": "indicator--4f1d8854-088f-4e93-9f83-b60bff3935f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408af02d-db1b-405c-8542-ebafe4e43855", "sighting_of_ref": "indicator--62fd4005-88ae-4df0-875a-271fd14e6574", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dd0355-2a75-4192-b49b-bb3f23da2f02", "sighting_of_ref": "indicator--db7e4570-707a-432d-b633-d37f72ee7fe7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80705fa8-cf20-45d5-bb26-5585c5d35a40", "sighting_of_ref": "indicator--68cf8cee-07ba-48a7-b838-c917da172199", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb1d984-03cd-49bb-bb8a-0a0f9d69105d", "sighting_of_ref": "indicator--69e43062-9ffa-4f3f-aa5c-98a654332fa2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fb685c-8e1e-4042-a0e9-c862035b2b3d", "sighting_of_ref": "indicator--25f4e2df-c197-434f-812f-fafdf411f6ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b38a3ea-91d0-4c14-ad93-5363bbdeb639", "sighting_of_ref": "indicator--2dd0c7ea-4da9-4df4-9996-eff3b9dbb4c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14d67f6-6164-44e5-a794-8ba433257faf", "sighting_of_ref": "indicator--8d3b60ab-57f2-4457-b532-62068a5d2318", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c296084b-0a96-4abd-a88c-ed6a22d49c99", "sighting_of_ref": "indicator--e22aad05-1bf7-4500-af47-437188ad02b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3d2a93-b380-481f-9438-10ece92dbff9", "sighting_of_ref": "indicator--cabcd795-8c63-4e99-8639-d24f99a1cad6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c8eb30-ae9f-4a46-9707-abebf94881f9", "sighting_of_ref": "indicator--e3d7a300-1956-4398-b07e-6a6cc19aa893", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52e5298-7368-48f3-ba96-e1af8a45b181", "sighting_of_ref": "indicator--3b93230c-b7fe-4910-afb0-37e00e4b11f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a70e326-5085-423f-a33f-c0a42c21f269", "sighting_of_ref": "indicator--d863b8cb-fe49-4ffe-aeb0-80fccdeb3195", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b80fe01-34fe-4fa2-a8cf-338aeefc0a2b", "sighting_of_ref": "indicator--454b3941-bba4-4d30-bda4-4cc0d8d9ce83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66aff0-0ce0-44b1-8937-e26fa9623933", "sighting_of_ref": "indicator--454b3941-bba4-4d30-bda4-4cc0d8d9ce83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75250bd3-9c26-4560-a938-4c02dcc76305", "sighting_of_ref": "indicator--f1ac25e6-2a9a-4911-8bc8-676f60e22714", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffcb5b8-0798-4727-990f-60ec1facb3d1", "sighting_of_ref": "indicator--5d71b08a-34b2-4424-80f5-10a76add5396", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939b5eb8-7be6-4a46-8351-74d1f87c7602", "sighting_of_ref": "indicator--3aa8c09c-4e96-4f59-b615-9d8b2c586bb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4276137-6ba6-47cf-a66c-09e88598b67f", "sighting_of_ref": "indicator--be5ac6b3-c8ac-4bd3-9113-6c4e88791452", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a51b2e0-1a4b-49d3-b9e8-65792c964db7", "sighting_of_ref": "indicator--d8d4f0d6-fef5-48a7-a92f-d351f7622e1f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d1e5d-ee73-4c67-a8e8-e4aa82aae1ca", "sighting_of_ref": "indicator--e2138ed5-187b-44aa-896c-8f34b3b213c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cdd5b5-8a9f-4cf0-b770-fcf93fe4a7dc", "sighting_of_ref": "indicator--81de4763-d714-44da-b46c-4dd4f2a0f8f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff43b6-7ff2-4ef8-8b8f-7d23549285d0", "sighting_of_ref": "indicator--a65e2fbd-4919-4259-a991-40c1fbf909a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059f3230-013e-420a-8e30-0e97d4b9afb7", "sighting_of_ref": "indicator--10d1e90f-1d50-417c-aff1-ce7300706947", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f81809-ae8a-45b2-9cb3-cc4fa9f31202", "sighting_of_ref": "indicator--6ff5d311-61e8-4b48-b881-ca95b0640aca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d26c88d-0f07-4553-9bf2-ef20c30cbcb9", "sighting_of_ref": "indicator--6b8f4b2a-f64d-4f1f-9c32-e803cb751048", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731931df-3a85-4b6f-9005-719cb4a555b9", "sighting_of_ref": "indicator--9f0ff0ad-0917-4771-87a8-b2ede6514ee7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e222153-6790-42eb-ab20-1525d53d88fb", "sighting_of_ref": "indicator--c5695cf2-99fe-4a0b-802a-fcdc0e853366", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b6552b-caf7-48da-a815-bcc71f2f1f28", "sighting_of_ref": "indicator--36a4ff72-dcdf-4e4b-8582-e16e5eeb6060", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871f449f-be8c-4fbb-a7ec-1eb24a399bcd", "sighting_of_ref": "indicator--40dcc21e-dd67-4e92-a2f4-20cc027f3dde", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce81a09-d295-4895-8289-715fe3f82e4b", "sighting_of_ref": "indicator--40dcc21e-dd67-4e92-a2f4-20cc027f3dde", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a132e1-e3a2-40a4-afbe-41aed1314a7f", "sighting_of_ref": "indicator--df40938f-3697-4f93-afae-9270b827047a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a732db67-7602-46b8-a048-9e9f226127ab", "sighting_of_ref": "indicator--4b1c6e55-1376-44e4-968e-17959a19f249", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bace9233-b6d8-4439-af62-e4c9f685ce3c", "sighting_of_ref": "indicator--4616fe16-d3b9-4fc2-9a63-891e1c9a4997", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7985358-9eaa-4f69-aa88-ab1284c7be8d", "sighting_of_ref": "indicator--11e25e2c-e6f6-487f-83dd-008aa0e4ded9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0151bb-ac1c-4443-9a30-18d8d413c520", "sighting_of_ref": "indicator--c608fcfc-a418-4970-bedc-a7b0fc570245", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42323a06-16bd-42b8-ac64-bf59b285f4ed", "sighting_of_ref": "indicator--30deaba9-d97a-460d-bc1e-829a8ab6d198", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922bd49f-00bb-403d-8ac1-5824e1992612", "sighting_of_ref": "indicator--2f5c30ac-5a48-4717-ba1b-ffcf5861cdce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a6a8d-e7f0-4ade-aac4-078f0f7c82e5", "sighting_of_ref": "indicator--ad0de4b5-d1fe-40fb-9ed2-44224621b26b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744e3d32-862b-498c-812f-c49a2c40b5ac", "sighting_of_ref": "indicator--ab54169f-ffe4-4497-812a-f957cfeece1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fb5515-f0b1-437a-bfee-0e471dd9e34a", "sighting_of_ref": "indicator--0ce4d400-c6ab-495b-a4be-eef2c61b31d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a35f836-675f-47a7-a4c8-61555bf886c5", "sighting_of_ref": "indicator--4d562268-5838-4e91-a859-bcaa8a540157", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc7cc5f-7409-4307-ada6-054eeca7395f", "sighting_of_ref": "indicator--d6fbd63b-9c81-4db0-835c-86c966b393dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3cbaa5-7dd8-43f2-bca0-5f9201c8e203", "sighting_of_ref": "indicator--4790125d-228e-4185-a099-417ea90e78cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bece5041-2181-4b5d-8d05-62df4b5b1fee", "sighting_of_ref": "indicator--e265d72b-40b1-41c0-90ec-5833a1f97fbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c344936-e1a1-4050-8035-c2d78315ae1d", "sighting_of_ref": "indicator--a783ca0a-41b0-4b1a-adac-a21e45985fac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412b7c7-059b-43eb-92d8-1b7bbf810f2e", "sighting_of_ref": "indicator--4341f84d-a676-450a-af1e-68e19a63555f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e06398-fb90-4cde-a4c6-70abc32474fb", "sighting_of_ref": "indicator--a9cc9564-137e-40fa-b244-7546b3bcbd27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97531a83-91c2-4c43-8568-2addc85585d4", "sighting_of_ref": "indicator--7460d3a0-ba48-4d62-ae92-336703a14f79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f6c72c-d961-4bd6-9055-e59f40eded5b", "sighting_of_ref": "indicator--6fcc1794-0a9e-4466-aa1d-6705f3064938", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a121f2c6-e600-4cba-96dd-f4ce98e58fd1", "sighting_of_ref": "indicator--6c41a178-b342-45fa-a376-dd2426e28146", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113e8786-7626-419e-a704-56856ca732d0", "sighting_of_ref": "indicator--3f66f501-20cc-4362-bf12-98206839bfa7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce25486b-cae2-4de6-a3a8-09ceb38ce593", "sighting_of_ref": "indicator--3ee10233-eefd-4601-8312-c1021438378e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddad6b6a-9ae7-489b-9424-bdbfc7e30d59", "sighting_of_ref": "indicator--46b205df-560f-4d5e-918b-cacc360d4170", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e90025-191b-47ac-bf27-a35275146089", "sighting_of_ref": "indicator--aa05a537-039b-4928-9372-0eacb7edfd8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50374651-ed8e-4fd1-ba71-6f8b725ce10c", "sighting_of_ref": "indicator--cf25e22e-59d5-4534-95af-9a344f934af6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b927196-ae2b-4ed1-bb06-32070509ddaa", "sighting_of_ref": "indicator--eed951ce-dc63-474b-a5e6-5ba13287151e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694f0f44-d5db-4e9e-b6c0-7ff60dfacd89", "sighting_of_ref": "indicator--3bd570e1-2a41-4e50-8062-8479dae51370", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ccdf4c-bbce-4381-97bd-8ee480e2072a", "sighting_of_ref": "indicator--3bd570e1-2a41-4e50-8062-8479dae51370", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b97ec-b21e-48a0-8610-87ce5a45decd", "sighting_of_ref": "indicator--3bd570e1-2a41-4e50-8062-8479dae51370", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb80f659-e1cc-4f70-9be7-0d8f81746788", "sighting_of_ref": "indicator--345b5f66-5c36-401f-b54b-4647735c4c43", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10ced4c-a5ad-4a24-86e2-b5d6b33f76e7", "sighting_of_ref": "indicator--f3718c0a-385a-40a0-8f0c-915f0ed972b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a949df-d086-4d64-b3a5-0b55b7807f8c", "sighting_of_ref": "indicator--7655b50d-4d0c-4610-9c59-928ef9cee0cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63c9f5-2e5b-4a22-9e78-33e141b0af4b", "sighting_of_ref": "indicator--9c23a4be-66f8-4027-9ed6-adca62d0ac21", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9a61ce-8bcd-449c-9657-00ce33fc0301", "sighting_of_ref": "indicator--6dd0d1e0-8b8b-46c7-9ecf-7acfc4a71fc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa28c91-e8e4-421a-8e20-d42ed17a00da", "sighting_of_ref": "indicator--bf66b0ee-d47a-45f7-ad42-2f4ccc1d42d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6e9c82-a901-43ae-a335-bf8bbbe2a867", "sighting_of_ref": "indicator--d61d9f38-cc87-470c-a947-e72cbd4e64fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e9b55-a6b6-4b6f-8944-b3a51067beca", "sighting_of_ref": "indicator--d61d9f38-cc87-470c-a947-e72cbd4e64fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc50bda-74ff-4d70-850a-329138cc0afa", "sighting_of_ref": "indicator--4eef0547-3dfb-4600-b2ff-e0713f43d682", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5af989-e9e1-47da-93e4-027d0cfb9c42", "sighting_of_ref": "indicator--2e9dee53-8f09-457b-9f73-cf1a7c77bf6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebac45da-53d1-4cc1-9322-2072509f54b0", "sighting_of_ref": "indicator--2e9dee53-8f09-457b-9f73-cf1a7c77bf6b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae456a1a-227a-495f-b6ad-e3d15cfdcf0f", "sighting_of_ref": "indicator--a36a2573-dab3-47fb-a947-6e651366d77a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1ceec4-185e-4bd1-85c8-5980619e6b3c", "sighting_of_ref": "indicator--a36a2573-dab3-47fb-a947-6e651366d77a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b76fd3-04a3-4213-a716-81fe73420acb", "sighting_of_ref": "indicator--262459fb-2241-4fd2-8191-e0d4a716b52d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b5734e-e3ce-490f-893b-05d65ace7960", "sighting_of_ref": "indicator--262459fb-2241-4fd2-8191-e0d4a716b52d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17f4e14-9134-4a0b-8b54-5d643e142a27", "sighting_of_ref": "indicator--a66c4742-5ff9-4610-bb6e-a0980f9f081d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65e0f45-8bbf-46c6-9cdd-49214941d321", "sighting_of_ref": "indicator--a66c4742-5ff9-4610-bb6e-a0980f9f081d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae90b068-1f8a-4f32-b472-0c67b298f070", "sighting_of_ref": "indicator--8fefacdb-b849-46d8-8a0a-32d3cb09ae8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ad525a-1ff1-4dc3-9f73-f93ade9da71c", "sighting_of_ref": "indicator--2fdbdfe6-1836-4579-8747-6a354d6b7921", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0450cf9d-65a8-4824-a9ae-861ee871d14e", "sighting_of_ref": "indicator--2fdbdfe6-1836-4579-8747-6a354d6b7921", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28fe1b6-dc83-48b0-b57c-347acfa7c31c", "sighting_of_ref": "indicator--86770d59-449c-4faa-bdca-4bdd851e4a77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e1e46b-ccbb-4165-813d-7c66fe1e1085", "sighting_of_ref": "indicator--58d7d123-db28-4ffc-98ab-89e3f3f8717d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33e720c-0954-49fe-8eeb-63d3bb153056", "sighting_of_ref": "indicator--7851d731-5594-4431-96d1-e15150c21375", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60edb353-dc13-4f03-8f96-5e8a57c19d50", "sighting_of_ref": "indicator--7851d731-5594-4431-96d1-e15150c21375", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abe0b4e-4352-47b5-9b10-b76c4e464e0d", "sighting_of_ref": "indicator--7b60dc5d-b883-4ded-ab0e-2a02b16e050c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d02c1d-dce4-4376-8c2b-e7e91f38e8ad", "sighting_of_ref": "indicator--7b60dc5d-b883-4ded-ab0e-2a02b16e050c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c68ed97-7d6b-490d-abc4-a09085d6d50e", "sighting_of_ref": "indicator--4cebefe3-f467-42ff-adb3-3a5c1792f55a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e101f0b-e9e7-4adb-adc7-5304e0148afc", "sighting_of_ref": "indicator--3d67cc1e-bc20-44d6-b5cc-04e48351c326", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc4ae47-68e8-4b91-b215-d53eaeae109d", "sighting_of_ref": "indicator--3d67cc1e-bc20-44d6-b5cc-04e48351c326", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5483c28f-9714-4bc1-9948-5a5523b1b328", "sighting_of_ref": "indicator--f073ecfa-3093-4531-9a07-212cc9abcf1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f766f4-d3d4-46bb-bed5-0d1ad5ae654e", "sighting_of_ref": "indicator--f073ecfa-3093-4531-9a07-212cc9abcf1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebda9a4-50b4-48a9-af45-7a2586d6e088", "sighting_of_ref": "indicator--bbbe7bf0-4049-4c8a-9ee5-7d203398682f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308450ca-6fb2-4ab4-99e9-f298c995d156", "sighting_of_ref": "indicator--1745dbe3-c9f2-4fcb-86d8-07e509baeee4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b95586-d882-4185-af23-abdb593d110a", "sighting_of_ref": "indicator--00c108ee-d374-4203-844e-4b7f7a20f4d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90408471-88ca-4104-bbd5-f318e4c11e1b", "sighting_of_ref": "indicator--3dd7ceff-9930-44aa-912e-0bd49cad6678", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2264bf4-fcdf-41f4-9bef-4517c330566f", "sighting_of_ref": "indicator--7fdb9280-266c-424e-ba4a-c5447614184e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140e497-1b22-41d0-9139-e0e772cce106", "sighting_of_ref": "indicator--481a7c14-9593-4b10-85f1-a3254d9364be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cea19a-e5ce-4e72-948b-babc4459faac", "sighting_of_ref": "indicator--e28b2efa-0f2c-405b-8f45-d2faee0eed95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763c3a8c-5f00-4f54-a165-e9f97f7bce31", "sighting_of_ref": "indicator--30036455-a894-408e-9042-d910f63cddfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6261a835-61c8-49e5-a769-d67e8f10d0ef", "sighting_of_ref": "indicator--323f0b96-d17d-40ae-817a-d1f7272543c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af112178-0164-4d72-a7d8-f88c704be48c", "sighting_of_ref": "indicator--323f0b96-d17d-40ae-817a-d1f7272543c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feee556-4174-4be7-97bc-c0edbb7fb96b", "sighting_of_ref": "indicator--ee0e75b9-7fc1-429d-a1b4-6cf7b718a8d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a243d45b-721b-4e24-b8df-5bf3e846d059", "sighting_of_ref": "indicator--ee0e75b9-7fc1-429d-a1b4-6cf7b718a8d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c0cacd-83f7-4ed1-bf49-7de1d8a93f52", "sighting_of_ref": "indicator--1b568805-810d-4974-beb9-cdeac9bfec98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f4db6d-b70f-41f6-803c-38241f6b9a6d", "sighting_of_ref": "indicator--1b568805-810d-4974-beb9-cdeac9bfec98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d571a87-83e0-4b15-9d6f-84d61a5f192a", "sighting_of_ref": "indicator--4efca338-d964-4683-b2a2-b0231ad674df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a787fe14-a929-4eb1-99c2-e23382939c6e", "sighting_of_ref": "indicator--d72cc0bc-1f6c-45a9-b940-7ea26fab422e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012163a1-bbdd-4b50-8b63-84280ac615ed", "sighting_of_ref": "indicator--e322c15d-b337-4585-8c6f-eec0c4078bb9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a64a588-843c-4d69-b59c-d52ada343143", "sighting_of_ref": "indicator--591d563a-d9fa-4635-b974-2daebf9a44e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333fbe40-7892-4ae0-bee6-4c62ace2a075", "sighting_of_ref": "indicator--591d563a-d9fa-4635-b974-2daebf9a44e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb8d84c-8f54-400d-811d-ca0384dd162d", "sighting_of_ref": "indicator--e0016e27-6cfc-471a-85f8-072a902e0ab1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448c1f57-ea76-4388-a7c2-50b32e36926c", "sighting_of_ref": "indicator--3e26da76-e586-4b0d-90a7-eb2d33c3fb33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e1fa3-00f0-4062-8bbd-a7bbcf7ac7dc", "sighting_of_ref": "indicator--25dfab35-bc30-46c5-b39f-5d5d09418fe6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd3e9b9-13c9-4b22-88e8-0ca61fa2d17c", "sighting_of_ref": "indicator--c4930e13-6d88-4f29-8cf1-2bfd7b37ec2d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6201e2-a06c-4b03-9156-44517047f671", "sighting_of_ref": "indicator--ac17ce1e-b03e-416b-8aa7-c0124e7f07c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc85ab-5089-409d-ab73-0f25b1af408d", "sighting_of_ref": "indicator--d9bd59bb-9f39-4466-b17a-7608cb583505", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d3b438-c2bf-4df1-a088-7de9f407d3e4", "sighting_of_ref": "indicator--d9bd59bb-9f39-4466-b17a-7608cb583505", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0602e0-985c-4c2b-9eeb-13c713004f05", "sighting_of_ref": "indicator--ba585560-e646-4b7d-8174-fb34e17fa334", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8c6d7a-9510-43be-a101-47ac1e95cf08", "sighting_of_ref": "indicator--41a2e073-7b4c-43a6-85f4-13c132ea8e85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cefa29-6a6c-426c-8995-0fa1af7b2de6", "sighting_of_ref": "indicator--feb7d691-9236-479f-81bb-754ae141005a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a43e07-bab7-4b78-978c-0b7d3d9a5ba3", "sighting_of_ref": "indicator--feb7d691-9236-479f-81bb-754ae141005a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15a7a73-3251-4863-9257-9790c5f96485", "sighting_of_ref": "indicator--b24c18b6-8dc6-42f0-a877-d62cdd2a2cbb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be642894-e213-4cb2-af32-f8ab48d86625", "sighting_of_ref": "indicator--d375e183-927a-471c-b575-0851e3eb3cc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edd31d7-bdca-4aa6-9d11-ff2b787652ac", "sighting_of_ref": "indicator--d7725e62-f9d4-43eb-9f2d-0666adfd8eb7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c646a0ee-0736-4b09-ac01-2c1b3fcac8c5", "sighting_of_ref": "indicator--d7725e62-f9d4-43eb-9f2d-0666adfd8eb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77be1c4f-ba1e-4544-9e5f-2b2628ff67e3", "sighting_of_ref": "indicator--85409ade-1f39-493b-865e-645eadec5a00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82e7d88-42da-46df-bc21-c7acc02066fd", "sighting_of_ref": "indicator--1d8adf63-b909-4ab2-8f86-daf18f89df8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039056db-096e-4119-a764-8d2089005321", "sighting_of_ref": "indicator--1d8adf63-b909-4ab2-8f86-daf18f89df8c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a1fa90-bc00-40d5-9998-b354af6e6977", "sighting_of_ref": "indicator--1d8adf63-b909-4ab2-8f86-daf18f89df8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7c5a6d-96bc-4500-8f49-0884f4b0fd7d", "sighting_of_ref": "indicator--5c8157a3-e848-4a02-98df-2a02b02bfe20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfad6129-5cc9-4c65-b022-a9f9d1ce04bd", "sighting_of_ref": "indicator--5c8157a3-e848-4a02-98df-2a02b02bfe20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415d57f6-db92-4757-a190-5ae98fa0e30a", "sighting_of_ref": "indicator--47d766a9-8c89-492f-9772-f8f89a99ab56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07f982e-4041-44c4-90f6-8c6f24400e6e", "sighting_of_ref": "indicator--02ec2f2c-cc0d-4455-9144-9ee4dad83766", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd78de7e-c1f2-4f88-9de0-c1c8cf833ea4", "sighting_of_ref": "indicator--5ae74411-ba8e-486e-875a-22e0e80fcacd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3569507f-0020-4c14-b8af-f905612cd6e6", "sighting_of_ref": "indicator--2276d8f3-ca0d-42a2-a7d3-8a96416d8f86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb110bf-46ca-4eda-af5d-3a5bb81d4a9c", "sighting_of_ref": "indicator--c00bf032-2a5b-42b1-bbad-e8c408d0580b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc37a2b5-a6d9-49e4-a963-dff6a5fc83f2", "sighting_of_ref": "indicator--7311d48e-afad-41ec-bc25-c86fe67bf999", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768f47c8-0754-4337-8e87-a1498ce50717", "sighting_of_ref": "indicator--7311d48e-afad-41ec-bc25-c86fe67bf999", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a74de6-b8d8-47af-96e4-b2c7c3016fb1", "sighting_of_ref": "indicator--7311d48e-afad-41ec-bc25-c86fe67bf999", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad95c84c-6614-428e-b5c0-6614a2f7c99c", "sighting_of_ref": "indicator--c3aaa730-038a-4d97-bef1-22ee44093be5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffce25f-e463-49ee-8945-f8faafe2fc52", "sighting_of_ref": "indicator--c3aaa730-038a-4d97-bef1-22ee44093be5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdde4637-31ac-4c98-b758-ae588f7ad4d7", "sighting_of_ref": "indicator--2d8acd82-6a4a-4077-9f60-fd0452d61252", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0552d0af-4a81-4547-bd97-fa096220c998", "sighting_of_ref": "indicator--2d8acd82-6a4a-4077-9f60-fd0452d61252", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0440fbdf-a35a-4285-b4f6-9289ae1e7298", "sighting_of_ref": "indicator--c7e9a8ab-b062-47d1-903f-3a21c5631dfe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d8eb22-c6b4-4a0d-b60f-449e3784ce31", "sighting_of_ref": "indicator--506f1c60-92a1-4daf-9c0d-f69d29e0a282", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9af3a0-4abf-46b6-82d1-46eb7736c577", "sighting_of_ref": "indicator--46b0ee6a-756d-4b56-abe6-0454eee6bb82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecdd767-735c-4cef-91f0-b670936c58ed", "sighting_of_ref": "indicator--0cb63f01-c088-401e-a5da-7652836da6a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800027d7-af4c-4f8d-a13e-71a4095a45e1", "sighting_of_ref": "indicator--0cb63f01-c088-401e-a5da-7652836da6a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5738d3-ef78-4f9a-a17d-0c14e8bbfda2", "sighting_of_ref": "indicator--0cb63f01-c088-401e-a5da-7652836da6a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e8110c-389c-4513-ad8d-f4db1757cd1b", "sighting_of_ref": "indicator--31d51e0d-9068-4d83-88f3-a3427ec8868f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d161b18-ff2d-4178-9480-eb669aaa800d", "sighting_of_ref": "indicator--31d51e0d-9068-4d83-88f3-a3427ec8868f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e037a5a-e168-47e4-80f9-09c9c31aef12", "sighting_of_ref": "indicator--31d51e0d-9068-4d83-88f3-a3427ec8868f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76a4fe4-9101-4d44-accf-5d6557dddf65", "sighting_of_ref": "indicator--216aa210-0ee6-4232-be04-e0b9d31cd8f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b1b4f2-306c-40da-9852-d50064325913", "sighting_of_ref": "indicator--cd18f2d0-112c-4733-8c51-15aa3243dad5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24083c5a-1f0b-4158-8e93-1c7bdf13dee5", "sighting_of_ref": "indicator--21f6d102-ea5c-4b9f-abac-1817458b2e4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881a63a7-c1d4-42f7-9bb4-ea5759dd03c6", "sighting_of_ref": "indicator--e10fbc63-2839-4ee8-af24-f3ffec2e2d0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316f079b-89b4-493b-8001-cff918af6204", "sighting_of_ref": "indicator--252cec7f-3b6b-4fcb-85af-503729727d9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec395f7e-48e4-4e10-8f2d-a55c03884db5", "sighting_of_ref": "indicator--dbb30801-df97-414e-b476-c6d98e3a352b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2416b9d5-39e8-424e-9901-2186390f7ea8", "sighting_of_ref": "indicator--a2913610-1b12-45c9-8132-3442dc82e0f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7e9c7d-4d75-41a4-a59b-b88dd93647ce", "sighting_of_ref": "indicator--efeb93b7-1612-494c-a030-d962e6ff130b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531e06e4-fdc4-48fc-96e9-02b4b145c8f3", "sighting_of_ref": "indicator--efeb93b7-1612-494c-a030-d962e6ff130b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7d9a91-a928-422b-984d-0208b158a16a", "sighting_of_ref": "indicator--efeb93b7-1612-494c-a030-d962e6ff130b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660861a8-15b9-49a2-a68a-74aa11efa360", "sighting_of_ref": "indicator--0d2f821b-67be-4501-8f85-84a08cad0590", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86497ae6-d3fc-4ffd-a8e0-9ca82713d5c7", "sighting_of_ref": "indicator--0d2f821b-67be-4501-8f85-84a08cad0590", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e38137-4755-47b0-9e9a-14b454483e26", "sighting_of_ref": "indicator--5f4ca37c-c3b2-4770-837e-c455c17567d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d203c2-9e26-4c1f-8bf2-676dfbf7196a", "sighting_of_ref": "indicator--fa15b7e4-53fc-400a-b3e9-522faef7f7b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a733920a-0700-4118-a81a-0851bfafe106", "sighting_of_ref": "indicator--fa15b7e4-53fc-400a-b3e9-522faef7f7b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe22bf6d-9428-4618-9986-439b332a6c93", "sighting_of_ref": "indicator--fa15b7e4-53fc-400a-b3e9-522faef7f7b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6799e5a5-9192-469f-b125-a834bf616ee6", "sighting_of_ref": "indicator--f8d54736-9098-4ce0-8231-5e3acc74f47d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b48419-c948-464e-8db3-3a594c732de7", "sighting_of_ref": "indicator--f8d54736-9098-4ce0-8231-5e3acc74f47d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995b282f-5611-4856-9d51-b0d99cf73fba", "sighting_of_ref": "indicator--f8d54736-9098-4ce0-8231-5e3acc74f47d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f08e7ce-30fc-48ad-afcb-99535fe6f80e", "sighting_of_ref": "indicator--30f30fe9-b234-4953-9f98-dce9c4cf2566", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b22888-501d-4e32-bba0-1d3f43a49529", "sighting_of_ref": "indicator--30f30fe9-b234-4953-9f98-dce9c4cf2566", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2559dc-7098-4812-b9a0-ab90fafcfd29", "sighting_of_ref": "indicator--30f30fe9-b234-4953-9f98-dce9c4cf2566", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4d7906-8b33-45f0-9986-dc4950163aaa", "sighting_of_ref": "indicator--516a6d42-3c38-43bb-80b4-b1d25fc7c1a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46786c9-5eff-4a13-850f-41d214375283", "sighting_of_ref": "indicator--516a6d42-3c38-43bb-80b4-b1d25fc7c1a0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169ff21e-3877-4626-ae16-6b86da5628f8", "sighting_of_ref": "indicator--516a6d42-3c38-43bb-80b4-b1d25fc7c1a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62db353e-5003-4b46-bd10-2ac1032a3658", "sighting_of_ref": "indicator--c6041814-5154-4bbd-91ce-072bd9301b9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bd4604-61e5-4e50-b216-b36cc3321043", "sighting_of_ref": "indicator--c6041814-5154-4bbd-91ce-072bd9301b9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a51e52-9155-4196-b63f-e449416c770d", "sighting_of_ref": "indicator--c6041814-5154-4bbd-91ce-072bd9301b9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07777531-320b-4033-879c-409db98c11a9", "sighting_of_ref": "indicator--05bbf0fa-1979-4a39-9944-f4a7fb626f13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e48c783-b9a5-4ad8-a74f-f6b28389d6d2", "sighting_of_ref": "indicator--05bbf0fa-1979-4a39-9944-f4a7fb626f13", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d068373b-c95a-47cc-b232-7e15b875b3aa", "sighting_of_ref": "indicator--05bbf0fa-1979-4a39-9944-f4a7fb626f13", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab6255a-f441-4d67-b416-c51ed41854a7", "sighting_of_ref": "indicator--a4eb8c54-fa27-4b31-a18e-9dcccf2efb39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87a6b4f-b798-4037-b2eb-fc158a71d533", "sighting_of_ref": "indicator--da7f630e-c419-4f22-bd73-f54f9755d1ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03f4da5-defd-4be8-9e96-6523921de0a4", "sighting_of_ref": "indicator--ad74d81d-de89-4bdb-bd62-180232500328", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730fb184-186a-4c81-8a8a-97b350dacad6", "sighting_of_ref": "indicator--aec2f28a-ed60-4d7e-a0be-89700bbab37c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c48988-4d4f-4144-9308-6e9712a98d5c", "sighting_of_ref": "indicator--aec2f28a-ed60-4d7e-a0be-89700bbab37c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38888fae-a10c-41bb-af3c-233e08168402", "sighting_of_ref": "indicator--9f95aa76-ec29-4909-b9d0-d95ab8f9ec91", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc07418-2755-4378-a45b-a938b84c0e9a", "sighting_of_ref": "indicator--0f16d35a-c9fe-47ad-a9fa-6e8657d120da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d7222f-01b0-4731-8a76-3016d0f2602f", "sighting_of_ref": "indicator--2fc7e76e-cfe4-4825-9878-cbcd0343de2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60cf257-1373-4455-a370-37a2206b8cc6", "sighting_of_ref": "indicator--1ae89dce-e095-4670-b9ce-7b9c4139cefe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504392c1-b401-4faa-aba9-7f5f8733dcb3", "sighting_of_ref": "indicator--1ae89dce-e095-4670-b9ce-7b9c4139cefe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c357ddc-73ed-41c5-8edd-720c62c3e571", "sighting_of_ref": "indicator--a72db38c-5de0-4354-ba48-d111063dfde8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6536960-bd02-4004-8437-62b64f72d00f", "sighting_of_ref": "indicator--e3aed847-7ed7-41cd-8762-caaefdc0eac6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5255a15-deeb-42b5-833d-6b1ed6ab04f6", "sighting_of_ref": "indicator--01ace3d9-7ca7-4d4d-909b-62fedaf7259b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99833ce7-0635-42d4-8b2e-2b68407593f1", "sighting_of_ref": "indicator--fdbd14f6-428b-4cbd-9481-38d0b573a6c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7536d77f-1802-42bd-be11-d969c6ff226d", "sighting_of_ref": "indicator--82fe280e-a92a-4982-b06a-9532740f5221", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fdb281-864a-4b1b-a211-fc6e01024082", "sighting_of_ref": "indicator--3ffd17bc-d1d2-4dd6-b83d-99af4a40a928", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11607e26-9696-4a53-b792-1c675009d880", "sighting_of_ref": "indicator--72ba4186-ffc4-4456-86bc-12e0f2a8a559", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a231a0d-2569-41bd-bdb9-ca7b95e02d3a", "sighting_of_ref": "indicator--410207e8-1c6b-4008-9c34-84feaf0ec2d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceeb2261-578c-4530-8080-42d9116e23a2", "sighting_of_ref": "indicator--3ce1de7d-3c47-43fa-9654-99e70cda2143", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99694357-5ffe-4f3d-8d73-8b7269173516", "sighting_of_ref": "indicator--e43045d5-5457-4478-b360-63598f3b7153", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd26862-0fb0-4d8e-8332-fa6f070417a7", "sighting_of_ref": "indicator--d7a03b93-1a39-457d-b1d0-51c2649bab96", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa96869-dab0-4817-83ce-debb7cab1b4a", "sighting_of_ref": "indicator--d7a03b93-1a39-457d-b1d0-51c2649bab96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af6df7c-8a3f-46c1-8aa4-9d8ef0bf61be", "sighting_of_ref": "indicator--b39bc5e6-4145-44b9-96f9-119adff796f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c79bfa-97ef-4633-99a4-c7e435ef985b", "sighting_of_ref": "indicator--b39bc5e6-4145-44b9-96f9-119adff796f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2db5785-5e3f-4586-9b5e-40181434d374", "sighting_of_ref": "indicator--b39bc5e6-4145-44b9-96f9-119adff796f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e6002d-7d88-4d06-8d9a-b318cc326935", "sighting_of_ref": "indicator--d721ed95-cc29-499b-acbd-9f9aa9a9e979", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c8c3d9-59a6-4480-89cb-32ff0200eb67", "sighting_of_ref": "indicator--8d2e645b-d25e-44a5-be30-7df213271f35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8489b8-c940-4a34-9b31-b40e118b3bba", "sighting_of_ref": "indicator--241553cc-e5e1-40c7-861b-f6d040005e09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e233c77-d0fc-4af0-8570-650008028cc6", "sighting_of_ref": "indicator--2ac89d0f-bf75-4c8d-a35d-9d50c62bcc9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe8d2e5-f0f3-4208-b14f-5f16b7e6ab9b", "sighting_of_ref": "indicator--37d15e31-a6f8-42af-b15d-783b3f507c97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b138b9c-4cb2-4bfd-a8dc-6cbc8031504c", "sighting_of_ref": "indicator--0c3850f9-16e2-492f-95f7-f81114a29f16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade9631-7c1c-4052-b254-330d3a7249da", "sighting_of_ref": "indicator--175db251-a515-478e-8fad-809dd0159ff3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b20960-5942-437a-85e0-c91496efeb8f", "sighting_of_ref": "indicator--9aff8ac0-f14b-4bc2-9483-4aec6abd44f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914de2f8-b49a-4e34-a9c8-c91b5cfde832", "sighting_of_ref": "indicator--9c94955e-0fc2-49fe-8ce0-f3f15624f726", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae205ef-a9e9-40e9-b8a6-7b6b4a87debf", "sighting_of_ref": "indicator--4490fcc5-19f6-42c1-913b-41cd303e996f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa109ae-777b-4c43-b21c-08532ca8d827", "sighting_of_ref": "indicator--0226d159-742d-40ea-9cbc-ac6c1ed0646d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaebb3c-bc81-4221-8f72-89197918ed83", "sighting_of_ref": "indicator--27ee1050-c6aa-4593-9072-8d08cdd4cb11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ae2b6-7853-4292-9374-fd544dce0a6d", "sighting_of_ref": "indicator--34461f19-11bf-43fe-b52c-e4aaf1e5a773", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c93381-5dab-4d77-9971-9ca02abcb5e9", "sighting_of_ref": "indicator--434067b1-3840-43bf-abdb-27097e5a030c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51c2363-e86a-44dc-95ab-98700af2d6ea", "sighting_of_ref": "indicator--1ce593ba-c7f0-4292-afb9-d29b78d81024", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa0539d-10db-4077-9a5c-7fee7147f733", "sighting_of_ref": "indicator--c770b9a0-2e08-4b2f-882b-5974805d02b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f5c3e4-b362-4bc5-a705-8fbb26c69460", "sighting_of_ref": "indicator--c61b232f-b05d-4c1c-9a11-193a292523b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f4a84d-be37-4eef-8e5c-1a01c5ef1016", "sighting_of_ref": "indicator--d5583c2a-3592-409f-8395-3c0482765a6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357c7c85-568d-4c76-945e-3a3d24ade5ae", "sighting_of_ref": "indicator--7b1fa6b7-e065-44ac-8218-b26ef02c80c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e9e389-27a1-44c5-afb0-bff535ac72a1", "sighting_of_ref": "indicator--61456a95-3eff-4e74-a6af-bcbb8368dd34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea120129-961b-4f82-9189-0ba4d263081f", "sighting_of_ref": "indicator--61456a95-3eff-4e74-a6af-bcbb8368dd34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a07d0f-9711-421d-9e3e-917695886588", "sighting_of_ref": "indicator--15f6aa23-619d-4ba7-8451-faba44c1f059", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3053c1-c9c2-48cf-9cec-4bf89234d011", "sighting_of_ref": "indicator--15f6aa23-619d-4ba7-8451-faba44c1f059", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abd7dce-9ea6-4a6c-87ed-a3b5d741f979", "sighting_of_ref": "indicator--6f0d8b82-9e78-48cc-9bf8-e988e70d21a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4240952-c678-4c23-a188-94acdd4be1e8", "sighting_of_ref": "indicator--6f0d8b82-9e78-48cc-9bf8-e988e70d21a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa5f1fb-0f62-45ac-9e14-063f6d6812fb", "sighting_of_ref": "indicator--6f0d8b82-9e78-48cc-9bf8-e988e70d21a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab24c07-49d0-4b4f-80b6-3fd6f0285aaf", "sighting_of_ref": "indicator--7470ac00-a13a-4294-930d-c20b68ef3f87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5487b0e-de61-4d44-b984-3913c83d838d", "sighting_of_ref": "indicator--7470ac00-a13a-4294-930d-c20b68ef3f87", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cad0e4-a5df-4edd-a6e2-cdb8d9e83812", "sighting_of_ref": "indicator--7470ac00-a13a-4294-930d-c20b68ef3f87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c84f2f9-243b-41b4-9a5c-908b32c3e2ef", "sighting_of_ref": "indicator--29047b78-b270-4bd4-9afd-62758b236e25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fa60fd-687a-4347-9a56-e2c38ab4dc87", "sighting_of_ref": "indicator--29047b78-b270-4bd4-9afd-62758b236e25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff89ad2-bcf4-4a7e-97e4-2310b79690dc", "sighting_of_ref": "indicator--29047b78-b270-4bd4-9afd-62758b236e25", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2bd6cd-67c3-4cd0-9f69-e6df6afe8728", "sighting_of_ref": "indicator--49403272-54c5-4580-90de-cba73e75d097", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759b41e1-c9a4-4055-82fe-0c333bed2859", "sighting_of_ref": "indicator--49403272-54c5-4580-90de-cba73e75d097", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb86ac6e-44a4-4207-bb2b-7ca8249c7613", "sighting_of_ref": "indicator--49403272-54c5-4580-90de-cba73e75d097", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e550f0e3-d5a9-4e0e-9c42-ebf56bcb2fec", "sighting_of_ref": "indicator--48062fe4-a68f-438d-89f7-c524ef740a31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f6f624-8040-4c45-9db4-8932a840aa02", "sighting_of_ref": "indicator--48062fe4-a68f-438d-89f7-c524ef740a31", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9b9237-c025-4945-aba3-e37dd3fffba6", "sighting_of_ref": "indicator--48062fe4-a68f-438d-89f7-c524ef740a31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4316aa03-47ed-4211-aa13-f2c2221d49ec", "sighting_of_ref": "indicator--d6652877-ca71-47ab-81eb-d8b7bdf2cfe8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68763b4f-9ead-4dce-89e7-8eb7cf74f02c", "sighting_of_ref": "indicator--b386ca13-4bc0-41c7-82bd-d5beaef6dc5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fcf9e7-f3e6-45da-9716-c902ba7b178c", "sighting_of_ref": "indicator--6e67bbf5-8b04-40d4-a8a9-e4764ba64b12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df73e9a1-6589-41fe-8692-cc76a9a218cf", "sighting_of_ref": "indicator--427bb615-f4f5-4aae-b712-93c1a027d057", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c489cd06-cf82-4481-932c-354b026b5b00", "sighting_of_ref": "indicator--bfaa3cd9-9df1-48c5-a65c-0229f33745d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf93461c-b358-41d9-8534-c3f81dc8b37e", "sighting_of_ref": "indicator--86f18cc4-5106-49e6-9d54-92c9b0115870", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c1dd8-f6fc-4b21-a1e2-bee39b6506cd", "sighting_of_ref": "indicator--c5470a94-40f8-4f99-94fc-666fea3a1ae4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c44cb7-02df-42d2-be2a-e59ae6bfb856", "sighting_of_ref": "indicator--9b09cab8-5610-4438-b552-369e008b12d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94625ef6-493e-44be-a783-f061179d54dc", "sighting_of_ref": "indicator--5af9588b-bfd9-4d6d-848f-d0ca0a253e5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fdbdeb-8ba1-441c-bb0e-8b883421a29b", "sighting_of_ref": "indicator--ae8c0ba7-d375-4fb0-95f7-9f7aaf6e2efa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d48d6e6-4030-4631-add9-dcc07906aa69", "sighting_of_ref": "indicator--eed63c40-1e03-413a-9c71-74f8240fe5f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7026de8d-7c51-48ea-a0ed-78419ea5b67b", "sighting_of_ref": "indicator--525270fe-00c7-47ca-b825-c608644898f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be6ab82-203d-492b-a064-58577468037b", "sighting_of_ref": "indicator--0b794a63-9e3a-42e3-a713-5517218e0405", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094289ab-8c86-4d3a-a454-55fb75c97ba5", "sighting_of_ref": "indicator--4802f53e-336c-4bf6-97b9-ad5e8c602422", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b74b26-54eb-4d3f-af14-2d09d22d7e14", "sighting_of_ref": "indicator--12652e8c-b90a-4c39-9cfe-ab3759e9e436", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d706c8f-2f7b-4492-a7b3-a581c3600b82", "sighting_of_ref": "indicator--5a31c963-adbe-4370-b14c-1815ef01cea3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df4220-893c-4122-872f-d5a9300f89e8", "sighting_of_ref": "indicator--5a31c963-adbe-4370-b14c-1815ef01cea3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68252013-d2c9-4dca-a17c-64576f211ffc", "sighting_of_ref": "indicator--65e204a5-cb3a-4ac5-b5db-537555af2a39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be1437-fd1e-42bf-9cfa-c6787c449cae", "sighting_of_ref": "indicator--de8e3b5b-091c-490b-bf5d-c21e2b320601", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b83d2c-2837-4a1a-a1c2-9e560ffe1a87", "sighting_of_ref": "indicator--c6426ef8-0f50-4de0-8ba3-bdadaf76972c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cdaea1-a4ed-48c5-9c46-9449fd100c14", "sighting_of_ref": "indicator--4cf58b22-d459-45cc-94e3-5a1eb043a73a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e08b6b-a1c0-4cd9-be91-65bc7f92c2ac", "sighting_of_ref": "indicator--f7072c09-fc30-4fe0-9584-e76564892510", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bd34b7-521b-425d-a72a-0449fee2275d", "sighting_of_ref": "indicator--4af0747e-445d-4660-bcb3-4668a11241bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4e4be8-53d8-4f45-afe9-c86160cb7091", "sighting_of_ref": "indicator--bfee2a6c-5696-42d6-a877-135e9d9587e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c8b101-4c72-4e53-902c-c7fca4b4707f", "sighting_of_ref": "indicator--0c6fe982-06a2-451e-91db-f056a8a8bf89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873f55c3-416d-4a6e-b967-482c377f99f5", "sighting_of_ref": "indicator--e4994195-d186-4aed-9f66-ee05e7a10476", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c203eb2a-e494-4f44-80b8-6bfe2ddb22da", "sighting_of_ref": "indicator--93c95aed-02e0-4f3d-b37c-83ff142b3ad5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f316c307-bb67-4f7d-bc36-49b05e2b3d7a", "sighting_of_ref": "indicator--685e0962-9be1-46dd-b525-217150f8c0a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853a898d-bf58-403b-9b83-b4fda161833f", "sighting_of_ref": "indicator--6085f1c3-75d2-4fe7-acbc-3b0331995de8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1497ec-cf3b-4993-9940-4543162bf929", "sighting_of_ref": "indicator--8bb0c151-8deb-4ac5-b6f3-229d6295a78c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b178689-761d-4619-9e20-8d8c28bc38a1", "sighting_of_ref": "indicator--11e734c4-e44e-468d-a11a-a3c8cb1e2f7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bb50da-cb0c-469d-8a06-892bb2d9ecff", "sighting_of_ref": "indicator--37677d4e-32e7-4801-8e5d-f22b798daf0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f76838-bef2-48e9-8c45-6f784fa706c8", "sighting_of_ref": "indicator--a63560b0-fd1c-46ba-9ae3-50397b5ddede", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a95a046-52b4-4c7a-8725-b54b97734b2a", "sighting_of_ref": "indicator--f549bdde-770a-4322-9798-cb19a7371d5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49d5f79-94d8-47f6-90a3-e50d9fd07e4f", "sighting_of_ref": "indicator--de6f2c81-2a8d-432e-ac12-86380a838550", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e6c629-3829-4647-be47-ac87e8948c02", "sighting_of_ref": "indicator--cd198807-45e7-45fe-921c-b5f04b9f7e2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaea5a7-a6d1-47a1-b7ca-1823949f4bac", "sighting_of_ref": "indicator--a78d8d19-e079-42b9-b409-2cacc56d9282", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37866a3a-46b8-484c-b041-fcaea925d89e", "sighting_of_ref": "indicator--501da9e6-2e5d-4b84-974a-1fd403d32655", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17698c1f-0854-458e-9b74-fa4e6193a547", "sighting_of_ref": "indicator--1c461b06-fb84-42bd-91e3-ed4050d39ab8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bcb992-e8d1-4a72-ac9f-d7efd4b1d645", "sighting_of_ref": "indicator--621dd4a1-7d60-4117-9809-18abfdb6a5d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4d93c8-cbfc-47b2-8253-e9418699ba20", "sighting_of_ref": "indicator--621dd4a1-7d60-4117-9809-18abfdb6a5d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065b1439-2940-4673-9161-72f0f756994b", "sighting_of_ref": "indicator--97492e3d-48e5-420e-9180-6ce9c2fb037d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8358674-f26f-47fe-a646-da72c823b64c", "sighting_of_ref": "indicator--97479f5d-1ea0-4eeb-99a1-49010095420a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b10ec74-3182-40f1-ac18-03ae09658cc8", "sighting_of_ref": "indicator--0e8689d7-4917-4d3e-8926-1791cea318f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039da86e-05d2-4073-a32d-b85188c752cf", "sighting_of_ref": "indicator--0e8689d7-4917-4d3e-8926-1791cea318f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d74636-db11-441f-87d3-90c606b25ae3", "sighting_of_ref": "indicator--0e8689d7-4917-4d3e-8926-1791cea318f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817476bc-8e38-43b4-930f-4b32f68d6a00", "sighting_of_ref": "indicator--4ac021cc-ef6d-4f0a-9080-8b7d5a070e0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d7a595-9091-4d5a-aca3-d138d79ee031", "sighting_of_ref": "indicator--01d70549-43e6-48f6-80b2-388a169ae75e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94464c06-c2d5-44bc-91eb-bcb62ffa2620", "sighting_of_ref": "indicator--bfd40760-5e43-4411-82f3-5b0f9100725f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa52ea4-04a8-4635-8b55-2acf19c6aef4", "sighting_of_ref": "indicator--4365e36e-4ae4-4c5f-bd63-7df7accc1b2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1ead87-ea7f-4b39-b371-86628c36b86c", "sighting_of_ref": "indicator--675ffd9d-d9e4-4f4c-87eb-e7b64b457b9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b40e1d-6af6-44da-91a8-5c077d558330", "sighting_of_ref": "indicator--6d64ab66-ae3a-443d-8b44-8e2025d690d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0db46eb-22e0-43eb-bf77-7b63fe0d2d9f", "sighting_of_ref": "indicator--20ce1aed-59bf-421d-8283-16f2d0efa9c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e71b0da-a23e-4f45-88fa-b27ab9b71e61", "sighting_of_ref": "indicator--4ff04de9-632f-4cba-8af8-53ace55fb9d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c97b651-75ae-4a61-adeb-6da6dacbf74b", "sighting_of_ref": "indicator--a238d829-f488-4382-8297-b2b36fb5cbb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3136b969-954d-40b0-9062-59c079bfd4d4", "sighting_of_ref": "indicator--9ffa9437-20aa-45e2-909d-4acf83357d80", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b285b2-dfa6-4e2f-bb0b-269932abb59d", "sighting_of_ref": "indicator--29d7f9b7-d0d7-4259-948a-bbbfaa0e44e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd532d6-ad38-43a4-aecd-0d8fefbbac3a", "sighting_of_ref": "indicator--29d7f9b7-d0d7-4259-948a-bbbfaa0e44e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3275fb25-ac8d-441a-8f69-da21994fdb9b", "sighting_of_ref": "indicator--29d7f9b7-d0d7-4259-948a-bbbfaa0e44e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be604e0c-eba5-459a-b116-ba953cc577d3", "sighting_of_ref": "indicator--c5cf23b4-9df9-46c9-85b7-adc020ddb978", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329477ea-2ccc-4871-92cb-a754758a82fc", "sighting_of_ref": "indicator--fbf00e8e-34a0-48eb-9243-072fdef9161c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a81af2-4197-4897-84eb-7d2d9c1f5b7a", "sighting_of_ref": "indicator--fbf00e8e-34a0-48eb-9243-072fdef9161c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8673c8c-fb67-4240-be81-b5a295badd3c", "sighting_of_ref": "indicator--fbf00e8e-34a0-48eb-9243-072fdef9161c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c431848-99fa-49be-85f4-47b5df956cd1", "sighting_of_ref": "indicator--9ba705b6-c51d-4cc8-ad2f-7aff29082178", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decaa10a-2e7d-4d8f-adba-cbe543fe30f7", "sighting_of_ref": "indicator--caab400e-8227-4753-9028-a1bb74d106f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1835fd93-9e61-42f7-849e-217b1abc2b73", "sighting_of_ref": "indicator--fa1d7766-6e19-4adf-93fd-9acd09cd246d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cc2cef-9b58-44be-b238-3f74cc31315f", "sighting_of_ref": "indicator--fa1d7766-6e19-4adf-93fd-9acd09cd246d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caee4100-3783-43be-8edd-27b6c0a400fc", "sighting_of_ref": "indicator--fa1d7766-6e19-4adf-93fd-9acd09cd246d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b940c9b7-9f4e-42ef-b11a-487b9fcec1fb", "sighting_of_ref": "indicator--318f8a56-e1e7-4aa3-85c2-24edb44591bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3731119e-a51b-4b6f-a7f7-7540d825ebce", "sighting_of_ref": "indicator--bf2f692e-f2dd-49f4-b740-cd2fbfde984d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be8c33d-f3d5-4eed-8627-f12c1ba4b35b", "sighting_of_ref": "indicator--05552ef3-9cd2-4e42-8791-1d450d8311a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d97c12-f823-430f-b001-5d8a9cf91311", "sighting_of_ref": "indicator--05552ef3-9cd2-4e42-8791-1d450d8311a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2aa02f-2c6c-41f1-8383-24c03c09aa0c", "sighting_of_ref": "indicator--7b235527-6bff-4b6a-beac-ebbdd13e0afa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf62b1c-5195-4ff3-a0bb-78e41b488b62", "sighting_of_ref": "indicator--86ce3779-78ac-46db-b741-2ffb64d9179d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5324f837-6059-48a4-a2ef-523735f39c70", "sighting_of_ref": "indicator--86ce3779-78ac-46db-b741-2ffb64d9179d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337d5550-5790-436d-99b9-33b0c3fe0aac", "sighting_of_ref": "indicator--86ce3779-78ac-46db-b741-2ffb64d9179d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a7df91-4159-4961-baa4-cd0f2e204755", "sighting_of_ref": "indicator--bc896995-9d70-42ae-918d-2ee57f4b6231", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb44c2b-0082-40af-931f-b6025f67843e", "sighting_of_ref": "indicator--bc896995-9d70-42ae-918d-2ee57f4b6231", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b777ecd-daa8-43c8-ac1f-8dff7bc78deb", "sighting_of_ref": "indicator--bc896995-9d70-42ae-918d-2ee57f4b6231", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3b2e47-1caf-475c-bc0d-9bb20049256f", "sighting_of_ref": "indicator--5ffe163a-0650-491c-8cde-13bf0f35cfce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e499383-6356-42a6-9db5-8925ddf4c282", "sighting_of_ref": "indicator--ed80c8c5-ee46-4089-9b90-c01678a11a5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b078ed-e3d1-45a2-a7c7-95ae4e29695d", "sighting_of_ref": "indicator--ed80c8c5-ee46-4089-9b90-c01678a11a5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2725e1e9-805a-4ae9-b796-66c3cd4f968c", "sighting_of_ref": "indicator--ed80c8c5-ee46-4089-9b90-c01678a11a5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea38a66-cf7d-4c6e-a9a3-13db58e9f082", "sighting_of_ref": "indicator--e8e5dc26-825e-408c-b528-6d273a708415", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3533e5e-b530-4aef-8ba4-81354cdca955", "sighting_of_ref": "indicator--e8e5dc26-825e-408c-b528-6d273a708415", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f6bd1c-a9fa-4e5e-a858-10394a78df37", "sighting_of_ref": "indicator--79dca342-f005-4dc9-92a3-1980121e4431", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f29966-2957-48d0-9eab-03876d730b38", "sighting_of_ref": "indicator--6551a65f-7dce-4559-9b2f-b0178b7c6803", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5d5778-e77f-4785-bb57-f43ab92c4863", "sighting_of_ref": "indicator--2c8e37da-2fc5-4175-ba68-8af29bf7dfd7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05374cbc-8da7-4eda-ab91-38e831c4077b", "sighting_of_ref": "indicator--2c8e37da-2fc5-4175-ba68-8af29bf7dfd7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213917d-4abb-4cf4-881d-7c5bcca7ca4d", "sighting_of_ref": "indicator--2c8e37da-2fc5-4175-ba68-8af29bf7dfd7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d5e6e9-bb0f-4771-af40-62c85b33128b", "sighting_of_ref": "indicator--5096a337-956b-4ddf-b088-1a3244dab845", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a569d39b-75d3-4fd5-a4e8-e883b5e96cc5", "sighting_of_ref": "indicator--5096a337-956b-4ddf-b088-1a3244dab845", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3edee63-f28b-4453-b4ac-afc1f759bf16", "sighting_of_ref": "indicator--8f36b0fa-62fb-4142-83a7-ab98da52bf4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87964ffe-f479-4dc9-b452-2f91287c456b", "sighting_of_ref": "indicator--d56c4e90-21c1-43a0-af64-10d8e664a4da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1be0d3-7ee6-45ed-ba83-206141a89073", "sighting_of_ref": "indicator--d56c4e90-21c1-43a0-af64-10d8e664a4da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c563aea2-1ba2-4974-9f52-46548b0da726", "sighting_of_ref": "indicator--cedfa886-1ff8-4cde-9e5c-513e3155a5f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c8a972-beb1-414f-801d-8e2a955ce60c", "sighting_of_ref": "indicator--9bc427e0-8c78-455f-bc95-c2ff70b6d2d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d7bdb5-561f-461c-8b6b-97a04d759cc1", "sighting_of_ref": "indicator--9bc427e0-8c78-455f-bc95-c2ff70b6d2d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfd0fec-8890-4f57-84ed-12a3936d243e", "sighting_of_ref": "indicator--d289e2cd-510b-4336-9f87-c33e4d5f24c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13569895-33fd-4e7b-a6bd-b661294eb8ab", "sighting_of_ref": "indicator--8b8194a8-c541-4d54-9e2c-706ea309c719", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0bb209-b3c1-49ae-b4c1-c12e6114d7ad", "sighting_of_ref": "indicator--8b8194a8-c541-4d54-9e2c-706ea309c719", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f79932-7130-4b17-960d-110f25579fb4", "sighting_of_ref": "indicator--f0b1ab89-caff-416c-959b-c2f1c43da4e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce210641-654b-4e19-a4f9-6aad9c24b719", "sighting_of_ref": "indicator--f0b1ab89-caff-416c-959b-c2f1c43da4e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f981828-9cfd-4062-935a-6c22d72a9348", "sighting_of_ref": "indicator--f0b1ab89-caff-416c-959b-c2f1c43da4e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3019b74-6aae-4aa0-8e6b-0e400562b755", "sighting_of_ref": "indicator--c4850601-34ca-491f-8d73-d6e1228b9f5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af44b677-5d26-4ae4-9796-df83796265da", "sighting_of_ref": "indicator--f9019b13-ac93-416c-b582-5a7dfdf76136", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde55167-426f-4ad3-b935-c358c6c29e77", "sighting_of_ref": "indicator--f9019b13-ac93-416c-b582-5a7dfdf76136", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4e6d58-547f-4f20-ba48-f227660025ed", "sighting_of_ref": "indicator--0cac1945-9c03-4d3b-a7f3-e40e10fbde81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dacd0a-823b-4959-87ca-872189bd38b8", "sighting_of_ref": "indicator--0cac1945-9c03-4d3b-a7f3-e40e10fbde81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a315cdd5-4073-4406-8ccc-197a4f981596", "sighting_of_ref": "indicator--0cac1945-9c03-4d3b-a7f3-e40e10fbde81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb053874-8b99-4cb7-acfe-77ae7328ba43", "sighting_of_ref": "indicator--307cbcb2-7553-449b-8131-5069775f5abf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f89ce7-9838-4327-b507-496d96c101ae", "sighting_of_ref": "indicator--27d283b3-8692-4dbc-a655-e9c9b400d2c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7ca957-3504-429f-b45b-ae764ae0114b", "sighting_of_ref": "indicator--7dc6cfea-59ae-4929-aa03-ca678fc3c8fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4c0df2-0ba4-4922-a75a-674a943987d9", "sighting_of_ref": "indicator--2201577a-59c7-4b0b-a82b-92acf62ae571", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf0b633-f0f9-4a6b-bb7d-cf2dd97fedb9", "sighting_of_ref": "indicator--7fd63423-2168-418f-a32f-c6bebf6b2db4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fe18f8-b489-49ab-9bd0-141bc18db02a", "sighting_of_ref": "indicator--54650e8f-7498-4b58-a865-e2e5a93f9299", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44cc7a0-4686-447c-9675-73265edc6be2", "sighting_of_ref": "indicator--4a1447cb-c124-4e3f-a11e-da0d8f43d3bc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd694b2d-b84b-4454-9610-2c11dcae03d8", "sighting_of_ref": "indicator--0d5b9c91-bf39-408d-8bb0-06ea35f6eab8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0de47c-af95-46e8-9a65-697ffd44e620", "sighting_of_ref": "indicator--6c3c98a5-d950-4994-b180-8b8348afd7c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f534ba3-8d71-4136-bbac-822fba5f33db", "sighting_of_ref": "indicator--c4fbd1e2-84ba-4b54-906b-502e941b5ac3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d455f386-c131-4959-961f-4a08cede3101", "sighting_of_ref": "indicator--71e8adff-5814-4a3a-b237-736228efd321", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fe4bfa-dde6-4ed4-884c-a8719438c61a", "sighting_of_ref": "indicator--71e8adff-5814-4a3a-b237-736228efd321", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ef5d74-8894-4cb5-a765-d7ae2bc93fdf", "sighting_of_ref": "indicator--6ef41e2f-0b7d-47f7-b865-9a9d577fe237", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26807874-c038-4ca3-96c2-56d1a02a9586", "sighting_of_ref": "indicator--6ef41e2f-0b7d-47f7-b865-9a9d577fe237", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc62fca3-06bb-47c0-ad59-29ae760b2efb", "sighting_of_ref": "indicator--55d063e5-a7ad-4c40-9945-5deccac12171", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ecf0c7-721f-4e2f-99ed-728975805547", "sighting_of_ref": "indicator--55d063e5-a7ad-4c40-9945-5deccac12171", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9be45-8b4d-4c29-a129-7e18e48f9bc8", "sighting_of_ref": "indicator--13b30084-917c-4f73-8dab-712aefaeddc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c7ce12-8c72-4bd9-8fcd-310910b2283a", "sighting_of_ref": "indicator--13b30084-917c-4f73-8dab-712aefaeddc6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1bf5cb-7ddf-4828-8617-c59b3a15ec3a", "sighting_of_ref": "indicator--3abc5d81-f7bd-48b2-b6c8-e50b268ce73e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b18254-7af5-4f06-9825-e906c5e7bbab", "sighting_of_ref": "indicator--e2d85086-b59d-4b1c-8e6c-1ad7ef3fa0d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c698030-0626-42aa-b9cd-489b568abc36", "sighting_of_ref": "indicator--e2d85086-b59d-4b1c-8e6c-1ad7ef3fa0d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894428fd-c3c2-4a08-a729-c015a1c4057e", "sighting_of_ref": "indicator--ec945bee-af73-4e5c-9149-d7f24c5f143d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5d7cb8-6f50-403e-8b9e-2c072310338a", "sighting_of_ref": "indicator--ec945bee-af73-4e5c-9149-d7f24c5f143d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea3540a-7251-4466-aa42-dcf568b73ba9", "sighting_of_ref": "indicator--0a7caf12-d5f2-496e-8342-a6cd3940ef25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a56ded0-077b-427e-9a0d-b192c5a76089", "sighting_of_ref": "indicator--d8ac4f16-0aa3-4994-aec8-87a4bfecf7be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdbe115-b253-4ed4-baac-42c1e43032fb", "sighting_of_ref": "indicator--98e3c9e4-0e2c-432e-adc0-4a08cc2825e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba660113-667a-4244-b88a-b2ed1a611ea4", "sighting_of_ref": "indicator--98e3c9e4-0e2c-432e-adc0-4a08cc2825e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea5961-0948-43c3-ae67-f8df4412fea5", "sighting_of_ref": "indicator--133f2040-c7c9-422e-89f1-9a606e1e6e7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f8d80-3874-45f2-b85f-277d505ba194", "sighting_of_ref": "indicator--1efb179c-330d-4cb8-9856-7967cef45c6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a7168f-84d9-4954-babe-b3dc35f8255c", "sighting_of_ref": "indicator--533ca672-4363-43e0-9677-18491cf4f9e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb87fa19-ceac-427a-8435-9bbdcb71864a", "sighting_of_ref": "indicator--533ca672-4363-43e0-9677-18491cf4f9e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9bdf32-5049-4e20-9a67-81c9102fd9c6", "sighting_of_ref": "indicator--4c0c7d4c-7685-4337-8cfc-fef8dbf409ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeeed45-19a0-43d3-973a-704a4bc86878", "sighting_of_ref": "indicator--4c0c7d4c-7685-4337-8cfc-fef8dbf409ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7976546-2990-410a-8695-72a94b5ef2e6", "sighting_of_ref": "indicator--2bf93895-7908-40ee-bb8d-327cc23d3afc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf43c2a-164c-4823-9b1e-012d4bde43cf", "sighting_of_ref": "indicator--2bf93895-7908-40ee-bb8d-327cc23d3afc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e12568b-68fb-4253-900f-96c5e1043cbf", "sighting_of_ref": "indicator--67654acb-be19-4973-8592-35796ff3d096", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d3e689-2b77-4212-a06b-d0fd5e13422e", "sighting_of_ref": "indicator--54b752f6-cc3d-4c62-b5e0-7dce98941ca9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ef8dd0-13fd-4710-95ec-5900818fb544", "sighting_of_ref": "indicator--54b752f6-cc3d-4c62-b5e0-7dce98941ca9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05671742-95c8-4689-bf22-19b4349ea989", "sighting_of_ref": "indicator--068defa7-1a75-40e0-a891-2f5cf87d4358", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df69b1e2-23f2-47a5-8561-832d32227a78", "sighting_of_ref": "indicator--068defa7-1a75-40e0-a891-2f5cf87d4358", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a7e290-bea5-4354-8a3a-10879647e677", "sighting_of_ref": "indicator--550fb328-2025-4ca3-9f9a-254b4c5bf353", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3335d1-d885-4934-8e65-d68cda029f3f", "sighting_of_ref": "indicator--550fb328-2025-4ca3-9f9a-254b4c5bf353", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf991f8-0f78-42d7-a73d-f5f70a5a3fd7", "sighting_of_ref": "indicator--293e7ed0-b0e3-48a9-b872-0dea3902e01a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbc30ca-b748-4daf-96e4-a1196c4b4f26", "sighting_of_ref": "indicator--293e7ed0-b0e3-48a9-b872-0dea3902e01a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c44597-57b2-4295-b256-5bbf5332a3cc", "sighting_of_ref": "indicator--01cb3318-cf90-45a7-8193-c16435ed7d64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1934f-20b5-4681-99af-952483a9984a", "sighting_of_ref": "indicator--01cb3318-cf90-45a7-8193-c16435ed7d64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca256e02-9361-4897-802f-fc2142e99c97", "sighting_of_ref": "indicator--134cf67b-8153-4c57-940d-c4d2fd856fd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cab232-a8c9-40fd-8006-fa8276e41110", "sighting_of_ref": "indicator--134cf67b-8153-4c57-940d-c4d2fd856fd9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f933e075-5853-4efe-9395-824874cabb42", "sighting_of_ref": "indicator--bfda4e4f-22cc-4cf7-83e3-920db87c1ff4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0487ae2-865e-4de6-b415-e833e34faa50", "sighting_of_ref": "indicator--bfda4e4f-22cc-4cf7-83e3-920db87c1ff4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6350c66-5e94-4fda-811e-5668cb4d9c5c", "sighting_of_ref": "indicator--0373f3f4-62d7-4816-b0b1-9f56a36c8ae6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305ed690-6577-4597-89d6-20c996877e6e", "sighting_of_ref": "indicator--0373f3f4-62d7-4816-b0b1-9f56a36c8ae6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f567fe4-2ef9-401b-993f-372fdd32161c", "sighting_of_ref": "indicator--57d67cca-6e4c-4b98-8304-272640b6fb5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee32c44a-0f73-466a-ad27-457c4f1bdb8d", "sighting_of_ref": "indicator--48f6e7ea-f9d2-4241-8c60-c05eea414d69", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676a54d1-5db7-4e29-b661-d236b265b946", "sighting_of_ref": "indicator--48f6e7ea-f9d2-4241-8c60-c05eea414d69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb97b8e3-0635-47c9-9804-10907c361787", "sighting_of_ref": "indicator--72b60463-7749-4c00-90c5-ce79277e6b9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd615cc2-69a8-4058-9575-bb7753ab4804", "sighting_of_ref": "indicator--72b60463-7749-4c00-90c5-ce79277e6b9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79654998-5d76-42d4-b26e-f034c6511a72", "sighting_of_ref": "indicator--01033800-fca7-4b8a-bbf8-c97af7841492", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f773e02-212c-404a-8aa6-ffc9572cc3ca", "sighting_of_ref": "indicator--01033800-fca7-4b8a-bbf8-c97af7841492", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfa68d2-26f1-4d49-8af3-5f6cffc046bb", "sighting_of_ref": "indicator--b2e9fcb1-59a6-48dc-9aa5-d912e6b49b36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c879d07-de93-40a4-aefd-4adad9f57710", "sighting_of_ref": "indicator--ae679f90-d0e9-43f2-96ca-0eca6bd0c032", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055c13a3-4cf6-40cc-92e2-dab238d2325f", "sighting_of_ref": "indicator--b26ff8fe-2d77-49b1-8bce-730a0ea8ffdc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649b0587-8396-4df9-9770-74780ef35110", "sighting_of_ref": "indicator--b26ff8fe-2d77-49b1-8bce-730a0ea8ffdc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3340dec-fa22-4b7f-a978-91a81b57b170", "sighting_of_ref": "indicator--2444798e-becd-49fd-9128-45c68f072ce1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac10700c-c9be-4e0c-b39b-f1a95e5563f4", "sighting_of_ref": "indicator--2444798e-becd-49fd-9128-45c68f072ce1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587f62d1-298a-47bd-af24-7722d31c22c3", "sighting_of_ref": "indicator--0293cead-27fd-46ae-8fb1-4d08104e632c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b1f05b-f995-4244-b17c-3eca0d479ebe", "sighting_of_ref": "indicator--4c8e89f0-6120-4439-87c5-9b160553cad0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcbc6a1-5d52-4fa3-b8c9-2708e89a95c8", "sighting_of_ref": "indicator--4c8e89f0-6120-4439-87c5-9b160553cad0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2912ac80-adda-4c44-aa43-dafd8227e195", "sighting_of_ref": "indicator--9550fbd1-9a2e-4569-9f45-79abf289477d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03158d5b-7481-4419-94b2-ceb54f848ce5", "sighting_of_ref": "indicator--dcef6487-4ec0-4a59-982e-b8cad7d9c6b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723af58f-6d48-4de9-ac14-ae39fc16969a", "sighting_of_ref": "indicator--dcef6487-4ec0-4a59-982e-b8cad7d9c6b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3553fe75-4144-4ddd-be41-c9e384df221d", "sighting_of_ref": "indicator--0b195376-7354-4866-9c73-552520f24f56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ce615c-d67f-4cce-acd6-57893d7f13f6", "sighting_of_ref": "indicator--0b195376-7354-4866-9c73-552520f24f56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d31214-19bc-422e-9381-97fa23aa58c0", "sighting_of_ref": "indicator--57a8b963-5656-40fb-a746-0c4537055136", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb45ac4-eb7b-4ddc-98a0-487e01f3c975", "sighting_of_ref": "indicator--57a8b963-5656-40fb-a746-0c4537055136", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904aecf6-d02e-4d15-a3be-fd36f7e37bcb", "sighting_of_ref": "indicator--37f61995-df84-4f83-aa80-cf982f3f8fbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1372f699-2002-4894-af48-22724b76d64f", "sighting_of_ref": "indicator--f95db201-448d-4a55-8a64-f08f9576cf3b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679d7c57-0275-45a9-8e23-a0b180d8b857", "sighting_of_ref": "indicator--13445036-e9cf-4479-acec-f7650af71833", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556b061-7b4c-422d-ac84-9d90f8c7c845", "sighting_of_ref": "indicator--6c573acb-84b6-4404-8aa4-de4f08df890f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d2a265-6f96-40de-862c-6afe23b0e6e9", "sighting_of_ref": "indicator--6c573acb-84b6-4404-8aa4-de4f08df890f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9244948b-43e5-4c62-b0ba-cdced1eabd0d", "sighting_of_ref": "indicator--b489e23b-4330-461a-9560-53daf74caa0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccf873c-9b26-469f-a230-17cb18722694", "sighting_of_ref": "indicator--b489e23b-4330-461a-9560-53daf74caa0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f39f56-2a5f-4635-b121-1f398e0e5736", "sighting_of_ref": "indicator--f38ca222-cd92-44bd-9099-dbc1df84b8b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4f6bce-a11f-416b-9655-4bf25ada627f", "sighting_of_ref": "indicator--f38ca222-cd92-44bd-9099-dbc1df84b8b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed54df36-4911-4401-a660-dd6b36127bb1", "sighting_of_ref": "indicator--05639714-babe-4443-a87f-fb73aeda182d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88961953-be83-43fe-887f-ec48587ce016", "sighting_of_ref": "indicator--05639714-babe-4443-a87f-fb73aeda182d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bd1e50-fc46-40ab-8c91-af9757b2e292", "sighting_of_ref": "indicator--6b995a6a-88ee-4773-a524-a7e3bf7514b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96fea1c-8dca-4d05-b7a2-d4afd59e36a5", "sighting_of_ref": "indicator--31780896-cf82-44e2-b775-8e621ba14b67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95b2f35-8e87-4b27-9b67-16b4bdb39338", "sighting_of_ref": "indicator--31780896-cf82-44e2-b775-8e621ba14b67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0393ab32-f11f-40c7-b79a-16d93722b2c4", "sighting_of_ref": "indicator--1eaaf84f-f695-47a2-b6df-736ed1e5c17c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cff72d-8b76-4f00-b02a-951cd41eb16f", "sighting_of_ref": "indicator--a16c4852-cc9b-4f7d-af34-5973223a07de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc19d961-ce0d-4da5-acfe-433974780332", "sighting_of_ref": "indicator--a16c4852-cc9b-4f7d-af34-5973223a07de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658d4142-190f-457a-8ff3-910933513748", "sighting_of_ref": "indicator--b3ad9b24-1c58-45d4-9c74-5d3581769f23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea76c663-a1a0-46cf-8285-dfedd5f12e8a", "sighting_of_ref": "indicator--ef5413c2-53f2-420e-b6a9-4dab07d6a674", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cde802-b57e-40e2-9525-42a179952547", "sighting_of_ref": "indicator--caf22f40-f4bb-4b70-872d-ecd1c8a35060", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fca1faf-2021-41c5-aa10-cb9beb98914a", "sighting_of_ref": "indicator--715c30b2-5063-4190-94b5-71ff1a551a64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2a2a63-36a8-4176-9e35-59800e9969e6", "sighting_of_ref": "indicator--715c30b2-5063-4190-94b5-71ff1a551a64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f26bf7-ab92-41c0-85e1-0e20963aaa33", "sighting_of_ref": "indicator--06e444c8-f7a5-48dc-942c-ed1ed408824c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e18873-0a87-4726-a84c-a674b24dd79b", "sighting_of_ref": "indicator--06e444c8-f7a5-48dc-942c-ed1ed408824c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b524cf08-6b2c-4403-8c6e-ba6d852b76a5", "sighting_of_ref": "indicator--9bb7982f-9ee2-466f-b4f4-a280c9a6cab7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76625b34-8133-4015-8bd7-428b51671350", "sighting_of_ref": "indicator--9bb7982f-9ee2-466f-b4f4-a280c9a6cab7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e0987-0dca-4bfe-9ff9-bf35127f360c", "sighting_of_ref": "indicator--5428ad95-6e69-467c-a6ac-843eabb81177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d0dc13-2152-42ea-a4f4-4bf88ea4c0e3", "sighting_of_ref": "indicator--4b68b2c3-d953-471b-8a02-6326aa7b62b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9488a90e-e09a-44c9-aee0-b59fbb01e99b", "sighting_of_ref": "indicator--4b68b2c3-d953-471b-8a02-6326aa7b62b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abac067-aa40-4aa2-b3a5-9791e96279a9", "sighting_of_ref": "indicator--1c66f773-d70e-4d6c-9b18-211fd8e8e75b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af23e510-0fca-484f-9012-e5b09f003842", "sighting_of_ref": "indicator--1c66f773-d70e-4d6c-9b18-211fd8e8e75b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b3d9a1-5a6d-4953-b228-faa350537ab1", "sighting_of_ref": "indicator--373fc0cf-156d-404f-a43e-66bfb088c476", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ff4c5-d395-425a-b043-2692d653859b", "sighting_of_ref": "indicator--373fc0cf-156d-404f-a43e-66bfb088c476", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fbba95-259b-4b00-bc34-ec5a5fbafc29", "sighting_of_ref": "indicator--e04807f7-5645-4f4a-a81a-9d8e39443ed4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dc90c4-adf4-44c0-b8ac-59171379dba9", "sighting_of_ref": "indicator--e04807f7-5645-4f4a-a81a-9d8e39443ed4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f72817-7c66-4efc-b9c8-e49846112ec3", "sighting_of_ref": "indicator--9f466a5d-1ef1-4fa5-9527-81203fc3963d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fc225c-7571-4325-a61d-586518b7c44a", "sighting_of_ref": "indicator--e95e80a4-51d8-4273-a720-4d2a81a06f88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1cd5d4-1972-4b81-aa58-d5f47fb06df7", "sighting_of_ref": "indicator--e95e80a4-51d8-4273-a720-4d2a81a06f88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf892f15-681f-45d6-b6f5-b53236333b81", "sighting_of_ref": "indicator--4440adc0-5480-432a-a3db-103e10a82f43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025c804c-e8bc-45cb-bad6-f2361be95e9c", "sighting_of_ref": "indicator--4440adc0-5480-432a-a3db-103e10a82f43", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16fed53-a5a3-4503-80ea-6382e334773a", "sighting_of_ref": "indicator--68f910e4-fded-43c2-a7a8-9587e00f4ad2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e154fa-a650-4153-81a4-bb9878f52202", "sighting_of_ref": "indicator--68f910e4-fded-43c2-a7a8-9587e00f4ad2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769e89c6-da56-4c3d-ae46-fccd10827d52", "sighting_of_ref": "indicator--66b0f5de-f37a-4b85-9265-1de8459e08c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd823714-dd06-4e1f-9b06-8cffa8dc7ce8", "sighting_of_ref": "indicator--66b0f5de-f37a-4b85-9265-1de8459e08c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4827a8e6-6fcb-4bb8-ad9f-7d416293cd05", "sighting_of_ref": "indicator--5b585fb7-89c5-4fab-8fce-37e04a3873de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ec5b4-fca3-460a-81af-47208a358b3b", "sighting_of_ref": "indicator--5b585fb7-89c5-4fab-8fce-37e04a3873de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a16266e-34be-4084-8fa0-6d9b75c3970e", "sighting_of_ref": "indicator--6e166cef-5ceb-4af0-8002-4178957a7c18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0e3c66-f4c1-4516-8f24-07d00182e7ba", "sighting_of_ref": "indicator--6e166cef-5ceb-4af0-8002-4178957a7c18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524a3067-d15f-46e2-912c-cd54f2071b3e", "sighting_of_ref": "indicator--84fcd66c-5b77-4c36-b372-eb11af081d3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f089ff9-04f0-4f99-b3da-5296e8b52aaf", "sighting_of_ref": "indicator--f978e494-9ac7-4f76-b2ed-8867496805a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e839f24-9bdf-445c-8c4d-572389b4f25c", "sighting_of_ref": "indicator--f978e494-9ac7-4f76-b2ed-8867496805a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e8917d-53d2-41d0-a162-69f64a20b730", "sighting_of_ref": "indicator--bd06caf5-06aa-464e-963a-83d65b9f21ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5913e3ab-6484-47e6-b50b-81a0794e7063", "sighting_of_ref": "indicator--bd06caf5-06aa-464e-963a-83d65b9f21ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5060eae-28cb-4ba6-8baa-4fa118a2f906", "sighting_of_ref": "indicator--9b5fe56e-d5d3-46b7-a062-64e81260b1ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fad251-ea48-4e34-951c-2856a893b870", "sighting_of_ref": "indicator--9b5fe56e-d5d3-46b7-a062-64e81260b1ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eba1c18-28a6-4110-851c-4ad288381250", "sighting_of_ref": "indicator--eacd599e-8ece-41d5-9893-84c3ecca7668", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5071c4-85e2-430d-ada2-b20fffdb678b", "sighting_of_ref": "indicator--01f770be-91ec-42d5-a497-7584a1d02b31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1162805-419c-4f05-9d49-d21cdc5f742f", "sighting_of_ref": "indicator--01f770be-91ec-42d5-a497-7584a1d02b31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2200536a-d8c0-4d0a-947b-74fddd4c5724", "sighting_of_ref": "indicator--ed6f31b5-29c3-44d1-8362-3a78728aa351", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeebb71f-54d3-457d-b4ab-e24abfeb3f40", "sighting_of_ref": "indicator--ed6f31b5-29c3-44d1-8362-3a78728aa351", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b94175-d6b5-44cf-ba0f-f7363a4b5fb7", "sighting_of_ref": "indicator--a7d05b7c-6c2a-4901-b800-a44b027cdc96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025b61f7-ae41-439b-afa2-3ca5feaa7929", "sighting_of_ref": "indicator--89fd6ec1-cef0-4328-996e-dda9b08e4a34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e751caed-4017-410f-81cc-482cf79b9a47", "sighting_of_ref": "indicator--89fd6ec1-cef0-4328-996e-dda9b08e4a34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cb8be8-cb79-45cc-9891-70018e7eefec", "sighting_of_ref": "indicator--6ed7cdda-c624-43cc-b39b-72a558278504", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3254102f-560e-493f-b83b-7342c6a50508", "sighting_of_ref": "indicator--6ed7cdda-c624-43cc-b39b-72a558278504", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baef4e28-36ea-4777-925f-2ee003b1559f", "sighting_of_ref": "indicator--b66ab2e5-73dc-4f80-8cf9-61a4c105f868", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e0375f-621e-4475-b9d0-a98a34124856", "sighting_of_ref": "indicator--b66ab2e5-73dc-4f80-8cf9-61a4c105f868", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6068875b-2b25-4313-9065-296dbee5b0c7", "sighting_of_ref": "indicator--c7c5f321-9358-4bbd-bba7-1f8ef0fe7ac5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f00bb14-420f-4c15-b52f-ad36054b411c", "sighting_of_ref": "indicator--c7c5f321-9358-4bbd-bba7-1f8ef0fe7ac5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf3ceee-522e-465a-a578-cbb11b470b49", "sighting_of_ref": "indicator--4b0b33b0-7c24-43e5-9720-38c11de87deb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14167e3f-9d56-4b92-817f-ab8c00c4b6ba", "sighting_of_ref": "indicator--4b0b33b0-7c24-43e5-9720-38c11de87deb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f4302-1bbd-4392-95bb-c04eb1d6bc52", "sighting_of_ref": "indicator--18ad83a1-dfa0-4a95-b5bd-6a2d25b4ffa8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5375a22-1921-41be-9ac2-78a4a2eb2d09", "sighting_of_ref": "indicator--de60bf3d-bdd8-4813-a4f2-0ae673ee371c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5fe0ab-607d-45dc-b158-16128e04aa43", "sighting_of_ref": "indicator--de60bf3d-bdd8-4813-a4f2-0ae673ee371c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66154bbd-265d-4658-bf30-9a966befdd1b", "sighting_of_ref": "indicator--0be25625-c73b-4134-a5f8-b0a9103db4de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cae663c-9ad4-41d4-b792-4f178f2619dd", "sighting_of_ref": "indicator--0be25625-c73b-4134-a5f8-b0a9103db4de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c39513-26d4-423c-8907-eff84818e617", "sighting_of_ref": "indicator--4eafe69c-bf9f-42bc-a7a6-9772bf92e9ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0585aefb-0125-4d18-a346-3dcd34ac2210", "sighting_of_ref": "indicator--7f1b4230-14c7-4c3f-8287-e85444c783f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2ff6a8-83d6-4589-9caf-d29f1f72fb61", "sighting_of_ref": "indicator--7f1b4230-14c7-4c3f-8287-e85444c783f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309773df-1cd2-47f7-b28f-19d53e58f2ea", "sighting_of_ref": "indicator--e810d201-d59c-40d3-8c77-3130a8c6d517", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b001a5-f0ca-465a-9a1b-5bc35083d8fa", "sighting_of_ref": "indicator--346d3c7b-6c2a-42a6-a010-83719251eaea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55a777b-a3a4-4fbd-85cc-37b9eb3425bc", "sighting_of_ref": "indicator--346d3c7b-6c2a-42a6-a010-83719251eaea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661fc681-ca7b-442e-ac6c-c44e2cb54e00", "sighting_of_ref": "indicator--d5ba82c6-e40c-4577-a2b4-c2e4cbd6d6ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254c4ea6-0eb2-4317-82a7-99088ec71b3f", "sighting_of_ref": "indicator--d5ba82c6-e40c-4577-a2b4-c2e4cbd6d6ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c30809-1cc4-4bc5-98ce-9581b09828e2", "sighting_of_ref": "indicator--4e57820e-f2a3-41cc-be77-a55a2ab547b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cf71fb-7b71-4c68-892d-b467779e1cbd", "sighting_of_ref": "indicator--4e57820e-f2a3-41cc-be77-a55a2ab547b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0ce2e1-be39-4957-a674-a94bb6145d7d", "sighting_of_ref": "indicator--8ee434f4-0a7c-43f8-949c-a629e279ecfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca39ea95-74d5-4549-8960-0ac1aa1aae95", "sighting_of_ref": "indicator--354db6f6-8175-4f92-9e2d-0da5e73a5800", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ab82f8-9256-45e6-9ba1-84d22cfd1d2f", "sighting_of_ref": "indicator--354db6f6-8175-4f92-9e2d-0da5e73a5800", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf5f35e-c44f-427a-9f6c-09a40fbdcc31", "sighting_of_ref": "indicator--3d283ef6-ed96-4ade-acc0-2cfd6008be5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e4d6e2-8844-43ad-95fb-00568000cf17", "sighting_of_ref": "indicator--3d283ef6-ed96-4ade-acc0-2cfd6008be5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a1d1af-bef1-4a55-a7bf-6bb89986dc92", "sighting_of_ref": "indicator--20d69402-ec5f-4150-b73b-35e20343acda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731bf102-83c1-444a-ba86-262441d12010", "sighting_of_ref": "indicator--a779d79f-020e-467d-ac67-691dd36f6de0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d89eaf1-c8ee-43a2-bb7e-c0d3e4aa1fbf", "sighting_of_ref": "indicator--a779d79f-020e-467d-ac67-691dd36f6de0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ceaf534-e939-4bb7-83bf-921cdf8bf0b1", "sighting_of_ref": "indicator--070e99eb-c334-4f8e-b5e5-bf7cd8750611", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81ad81c-9d81-42b6-8a5e-410fca130857", "sighting_of_ref": "indicator--070e99eb-c334-4f8e-b5e5-bf7cd8750611", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e7ab7-4fb1-4525-99bc-966dab34836d", "sighting_of_ref": "indicator--11638f05-db95-4df0-8f8f-16f7fd176f18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa728cc-c69c-48ef-83aa-cca26edb19dd", "sighting_of_ref": "indicator--11638f05-db95-4df0-8f8f-16f7fd176f18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d0a88-19ab-44a2-9746-bd1c1f978a72", "sighting_of_ref": "indicator--faaeb945-a322-4447-b170-09bb7b20c7a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d698919-5fbd-446d-80a1-cb5779a884f5", "sighting_of_ref": "indicator--789f2397-9d59-4d46-aeed-3047682d1acf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cca4df-4c43-4778-b8db-d5248466fd8a", "sighting_of_ref": "indicator--789f2397-9d59-4d46-aeed-3047682d1acf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806923b0-de40-4824-85b2-9b73ffae8109", "sighting_of_ref": "indicator--d5d6fcc8-f09c-418e-8b7d-4f70694d6ccf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1586999-b9f6-407d-8024-45668e84e6fd", "sighting_of_ref": "indicator--d5d6fcc8-f09c-418e-8b7d-4f70694d6ccf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa96c43a-4bf3-4c77-86ac-dac679cea439", "sighting_of_ref": "indicator--8374832f-4421-4111-b434-ef2bab6c144e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4a5728-cf1b-4892-98af-157fd37c1864", "sighting_of_ref": "indicator--290f2a6d-999f-460c-8417-37fc965fb306", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b63f6a1-9145-469b-a80b-08af9483a251", "sighting_of_ref": "indicator--290f2a6d-999f-460c-8417-37fc965fb306", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee70417-61b7-4828-8e6b-98416aefd3a1", "sighting_of_ref": "indicator--ef150d3b-5a8f-4bdb-96be-9ea1a7d16388", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69412215-a2a3-4551-840b-17b52d7caa78", "sighting_of_ref": "indicator--ef150d3b-5a8f-4bdb-96be-9ea1a7d16388", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3269d3a-af5c-400f-9a2c-885c265b4f8a", "sighting_of_ref": "indicator--e3864e11-2cad-4c80-93c5-74d6fbadfcd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1290197-11e2-4318-b94b-ebd1d7e19b30", "sighting_of_ref": "indicator--e3864e11-2cad-4c80-93c5-74d6fbadfcd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546d9b3c-932f-4ddc-bb0e-1cbb06079e6d", "sighting_of_ref": "indicator--b3370d6f-810a-4265-abb2-16718f40b6ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da70748d-9463-413f-a2cd-6c2c25803eeb", "sighting_of_ref": "indicator--b3370d6f-810a-4265-abb2-16718f40b6ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb9e246-3a10-427c-aaa9-3bb6d8d09ca6", "sighting_of_ref": "indicator--18bc5717-a8ec-4b3e-8f6d-4ae972ea5263", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c51856c-0f3d-401c-881f-681930b55d43", "sighting_of_ref": "indicator--55bc5ec4-881b-4841-b16f-dac47dea6dd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc0da73-9aed-404e-9834-633b7ca282c0", "sighting_of_ref": "indicator--55bc5ec4-881b-4841-b16f-dac47dea6dd6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fbccd1-c8f0-4f0f-80f5-267d6a9fa99a", "sighting_of_ref": "indicator--5f28c94c-893d-4cfd-a54d-973a124fbf59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ba6a37-7541-419c-8e9d-f51ca7bcdf25", "sighting_of_ref": "indicator--5f28c94c-893d-4cfd-a54d-973a124fbf59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3728c41d-aee2-43e3-85c4-e51f0a921b61", "sighting_of_ref": "indicator--2e7daba1-84aa-4e35-8d21-7c8325164d86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0047f392-0edb-4575-bcbd-2897c26b8e50", "sighting_of_ref": "indicator--2e7daba1-84aa-4e35-8d21-7c8325164d86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd573e47-7f75-4934-86cd-be0771209b52", "sighting_of_ref": "indicator--3b07f198-1684-4faa-b817-8a73710519e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31aff1a-f008-4317-a859-77db199f161b", "sighting_of_ref": "indicator--3b07f198-1684-4faa-b817-8a73710519e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b83d934-385f-4e46-999f-f058f6640347", "sighting_of_ref": "indicator--b60a271d-cd62-4c11-8b16-6c53f084900e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39432f80-f9fa-4f02-901f-7027d8938b7f", "sighting_of_ref": "indicator--b60a271d-cd62-4c11-8b16-6c53f084900e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a52b3b4-e762-4331-945d-17d2687ae4ea", "sighting_of_ref": "indicator--c4034c2c-73d0-4876-a0ad-81461e182ed9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea29476-2b40-4038-b82b-5fe64786f4f3", "sighting_of_ref": "indicator--a091893d-ab16-4b7b-b85d-b61b545bcfe5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6b135a-0ab8-4fa6-9ea1-49d956378a57", "sighting_of_ref": "indicator--a091893d-ab16-4b7b-b85d-b61b545bcfe5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c441225-5e87-46e2-80bb-c51da5528203", "sighting_of_ref": "indicator--3a7f09c2-d453-49ec-b1bb-4b8fb5550951", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efc3086-2258-41cc-a7a5-cf5c156b0137", "sighting_of_ref": "indicator--3a7f09c2-d453-49ec-b1bb-4b8fb5550951", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8491728-d00b-43c8-897b-aa71f390a791", "sighting_of_ref": "indicator--d2e772e4-aa9b-4f3d-b653-d2dd3b0b2218", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d64dc2-ea21-424b-a131-dd1395ffeb21", "sighting_of_ref": "indicator--d2e772e4-aa9b-4f3d-b653-d2dd3b0b2218", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509b956a-994e-4fa0-8130-c2a87384bb64", "sighting_of_ref": "indicator--3a7352f9-e881-41ac-99a0-aaf4c0ad6bb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0220afc7-6e38-410d-b778-6a6e4111ff01", "sighting_of_ref": "indicator--3a7352f9-e881-41ac-99a0-aaf4c0ad6bb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39001a8-6e55-4782-8551-01f583497faa", "sighting_of_ref": "indicator--b4b069bb-7a0b-4b37-9a7f-f365e67fa03d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0633a5-54a2-49ad-acb2-a7b7d0eeabd3", "sighting_of_ref": "indicator--b4b069bb-7a0b-4b37-9a7f-f365e67fa03d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44bc0a8-27ad-4dc4-8c23-f7a2a91a4c8d", "sighting_of_ref": "indicator--c34be93c-6753-414b-a9d4-c74f4d511e40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada6a729-49df-47fe-9bf2-867862eb8431", "sighting_of_ref": "indicator--4b3af671-1bce-4e6c-8775-1e85136b0495", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd06b0ff-37ee-4ee6-9d85-2b2ed8ae616c", "sighting_of_ref": "indicator--4b3af671-1bce-4e6c-8775-1e85136b0495", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86a8f0d-3235-4bf8-8732-6e5252f27a40", "sighting_of_ref": "indicator--a620b976-6d49-48f2-84fd-413aadedb2f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85be336-2f8d-4c97-8dec-b517e12b589a", "sighting_of_ref": "indicator--a620b976-6d49-48f2-84fd-413aadedb2f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebce5f4-937a-45bc-b672-5061a7aa84c8", "sighting_of_ref": "indicator--11fe834a-49d5-491e-a30c-c0fbf4092b48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349907f3-cd46-478f-b38d-3d9afc07ae2d", "sighting_of_ref": "indicator--11fe834a-49d5-491e-a30c-c0fbf4092b48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760ac119-e01d-4791-861d-24330fc8ea3a", "sighting_of_ref": "indicator--9d7e2694-c989-4e34-ba46-471cec4a5e45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71281c06-4a1d-45b4-ac5b-2380e6c3280a", "sighting_of_ref": "indicator--9d7e2694-c989-4e34-ba46-471cec4a5e45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c2f738-dab1-41d7-9ee0-81c530e471a0", "sighting_of_ref": "indicator--507aeb8b-3dbf-4abe-8d09-6bf89e38ad68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de974019-b951-416e-91e0-da75691e2365", "sighting_of_ref": "indicator--507aeb8b-3dbf-4abe-8d09-6bf89e38ad68", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7be505d-6fd1-458a-9eac-b1fdd1e6434e", "sighting_of_ref": "indicator--1ca21322-0a63-40c7-9535-a1ebf93873b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16259517-a65a-4679-869e-ab99c10751f6", "sighting_of_ref": "indicator--023000b1-325f-4a28-8dd3-59e99a566c4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d38c61-ebff-48f8-b3d6-e9b9088de34b", "sighting_of_ref": "indicator--023000b1-325f-4a28-8dd3-59e99a566c4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91757925-5ebf-4eaf-8a56-6d2e6a761c34", "sighting_of_ref": "indicator--f8f478ea-1359-43cc-811d-bf484808f6ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fc06ba-a922-494f-919a-356ae09352ac", "sighting_of_ref": "indicator--f8f478ea-1359-43cc-811d-bf484808f6ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83250ec-143c-4f5b-9049-a093c6851e85", "sighting_of_ref": "indicator--91ad16b7-33a4-4cd9-91b0-7b2f9a1df208", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0034ec3-2921-42bc-bd0b-a1083be12ca2", "sighting_of_ref": "indicator--91ad16b7-33a4-4cd9-91b0-7b2f9a1df208", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c073f186-1bc4-44d1-8949-2245758c220e", "sighting_of_ref": "indicator--963143e2-c819-4c6f-9c04-60c3f40b705a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1481a9dc-f2e3-4a1b-93c7-26270de1a92c", "sighting_of_ref": "indicator--a6b25921-0534-4c06-a4d1-6147ea0b020b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056ce84c-4f7c-4ccf-809a-c631d7f8f41e", "sighting_of_ref": "indicator--8cdf0c54-60a9-4f7e-a9ce-ddbac52b70c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6a778e-4333-48e7-9773-6a0d93df6376", "sighting_of_ref": "indicator--8cdf0c54-60a9-4f7e-a9ce-ddbac52b70c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fc4e06-85b7-4d02-975c-5fcf56eec6a9", "sighting_of_ref": "indicator--6a384b53-c5b2-42fd-ac8e-6dd08c955fbe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6187250-a738-4934-94f0-7e693376138e", "sighting_of_ref": "indicator--6a384b53-c5b2-42fd-ac8e-6dd08c955fbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79586232-9342-4cf0-9814-24df32a89d80", "sighting_of_ref": "indicator--9fec49d6-bd9b-4f24-b4a7-df130b3063f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3645e9-f0d6-4f8e-8f34-693adcd56cc4", "sighting_of_ref": "indicator--9fec49d6-bd9b-4f24-b4a7-df130b3063f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6445b6-7bdb-4f01-ac3e-c67a85cca4ee", "sighting_of_ref": "indicator--de5b7e49-855d-48c8-972d-64d68ddbb809", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62922043-5f9f-4829-979c-12fbb8636b63", "sighting_of_ref": "indicator--de5b7e49-855d-48c8-972d-64d68ddbb809", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcbe446-2204-4bdb-ba0a-3a7a1baf8a6e", "sighting_of_ref": "indicator--f581547c-4553-4dba-8fec-8a0d2e4f96a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc90ef97-294d-4479-9c4b-8e98d2be9173", "sighting_of_ref": "indicator--f581547c-4553-4dba-8fec-8a0d2e4f96a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595b2d22-c269-406c-9519-0740ea717e6b", "sighting_of_ref": "indicator--dbb38a99-f35c-4024-a263-856e41b6104e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77804d8e-52b9-4580-99a8-913469e46228", "sighting_of_ref": "indicator--70bbef01-6bbc-4a1c-b057-235b98e094e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05c7554-4b92-4cac-aad7-bf41af337642", "sighting_of_ref": "indicator--70bbef01-6bbc-4a1c-b057-235b98e094e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ec886-49d4-4882-81ab-6c6a4be8fdae", "sighting_of_ref": "indicator--6b76bceb-4e8b-4b9a-b980-cb6e95b367b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b936965-6ce2-4ef5-b53e-3ce77275acbe", "sighting_of_ref": "indicator--6b76bceb-4e8b-4b9a-b980-cb6e95b367b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd67778-ffe3-4291-8365-40ab318a5a65", "sighting_of_ref": "indicator--587f6bea-41b9-4c07-bdaf-9fef3c18b03a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed783eb-5220-43c3-b8e7-2ff07be127ec", "sighting_of_ref": "indicator--587f6bea-41b9-4c07-bdaf-9fef3c18b03a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800de7f9-abdd-49fe-8e32-703654a36916", "sighting_of_ref": "indicator--fa6a018d-221b-4c6e-bae3-48551fbe6c0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d9d72a-4639-4df3-8944-95ef0b532402", "sighting_of_ref": "indicator--fa6a018d-221b-4c6e-bae3-48551fbe6c0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774bb888-cc65-4383-97c4-3ca4e1b51da7", "sighting_of_ref": "indicator--ed8ed8f3-8724-43ef-bde9-a05c77b80fdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34092132-bc44-434d-a31e-0bea73179072", "sighting_of_ref": "indicator--ed8ed8f3-8724-43ef-bde9-a05c77b80fdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c26b37-947a-4763-ac24-d7cc712d5d6f", "sighting_of_ref": "indicator--d02abba8-84ae-4417-87ab-45cc81e45996", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923b1802-8e66-4948-bde0-3286765d5b26", "sighting_of_ref": "indicator--d02abba8-84ae-4417-87ab-45cc81e45996", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3ed5f2-6ee5-4d91-9b7f-7dc9f4873ed4", "sighting_of_ref": "indicator--e11db751-0718-49d5-bb86-d56c5c44284e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e57fdb1-1e1c-4416-b2e9-25c5068032e4", "sighting_of_ref": "indicator--e11db751-0718-49d5-bb86-d56c5c44284e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac8d48a-5be2-4665-8266-1d935bfe7dff", "sighting_of_ref": "indicator--a0724157-b527-4712-a387-dee77d13aa5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7447dbc-ee88-44ad-93dc-58299adfe02e", "sighting_of_ref": "indicator--a0724157-b527-4712-a387-dee77d13aa5d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec08a7e6-c64f-445d-ba88-7bdb360aaa8c", "sighting_of_ref": "indicator--fd588a0e-5a4f-48da-82c4-4bc6101525ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7e4329-7cf5-4566-93a3-3807ea40ebcb", "sighting_of_ref": "indicator--fd588a0e-5a4f-48da-82c4-4bc6101525ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566afcf2-9ae9-4699-9221-d7d314ee5400", "sighting_of_ref": "indicator--60dfde0c-b989-4c88-97b4-d68138905c81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbbffb7-f969-4139-a6a2-b6f5d0e73fc4", "sighting_of_ref": "indicator--60dfde0c-b989-4c88-97b4-d68138905c81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec964d86-394f-42d2-bb8d-9cdbd73a5c57", "sighting_of_ref": "indicator--e120bc7f-fb69-438d-bf3b-b74709f939cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531996da-8c6a-473b-ab7c-b4a7a3c751ad", "sighting_of_ref": "indicator--8fef347c-9a13-447a-ab25-d94474649a5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464fb832-a240-4eb2-b58e-81c3b3bf72b0", "sighting_of_ref": "indicator--8fef347c-9a13-447a-ab25-d94474649a5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a36b3d-661e-4f4c-bc99-fc5eff6738be", "sighting_of_ref": "indicator--5134bfbc-a23f-46d8-a868-141230cbb281", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dbe9ee-69f8-4dd1-8538-1180c1b8e7b9", "sighting_of_ref": "indicator--5134bfbc-a23f-46d8-a868-141230cbb281", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee07ecd-1d84-4329-9c6b-72e1526a7105", "sighting_of_ref": "indicator--61e35d9d-46b2-4468-a2fe-719fa0886d52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a48e4b-f6e7-48f5-aac0-e34a6f1584c1", "sighting_of_ref": "indicator--61e35d9d-46b2-4468-a2fe-719fa0886d52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fe58ad-ddc2-4304-b709-125609f082a3", "sighting_of_ref": "indicator--e8f1a125-dc2c-43e3-b500-70ff86081122", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87e80a0-e6ae-44f2-a03c-2fbaedcd2931", "sighting_of_ref": "indicator--e8f1a125-dc2c-43e3-b500-70ff86081122", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6f68ea-0eaf-4618-8be5-74533340bf3b", "sighting_of_ref": "indicator--cdda09c4-9369-48cd-aba4-507ea569a7a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2284a9f7-6501-4ea0-96f9-ad06fefebb23", "sighting_of_ref": "indicator--cdda09c4-9369-48cd-aba4-507ea569a7a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dbde44-dec2-46a7-a194-dc0ef9cd28a6", "sighting_of_ref": "indicator--5d47615c-831c-4860-bf66-7faaf7e2fa71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b863dfc-44a3-4c55-af2c-de9b40464537", "sighting_of_ref": "indicator--080ec188-7933-4734-b417-3b1e86f6be92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23a5e48-db55-4b1a-90d8-764d8bdb3187", "sighting_of_ref": "indicator--1ff8686d-dfaf-4acb-ab38-be95314574a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdbaa90-82eb-447e-ab8f-5f2ae4c9ebc2", "sighting_of_ref": "indicator--1ff8686d-dfaf-4acb-ab38-be95314574a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3b5cb9-15fe-4e53-80ee-5b2ec7d45018", "sighting_of_ref": "indicator--0210abe4-214c-40f2-acc1-0e31acaa9fc9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be68e6c2-5a5b-4b08-9ca6-4dc08407365f", "sighting_of_ref": "indicator--0210abe4-214c-40f2-acc1-0e31acaa9fc9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134bc13b-1fd9-4fbe-bfff-44ed20e62e35", "sighting_of_ref": "indicator--e91c1734-bd56-4076-9dee-e026ff2007de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0afccc-f332-41a6-af8c-80cf0b7b5044", "sighting_of_ref": "indicator--e91c1734-bd56-4076-9dee-e026ff2007de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15f854f-a246-4a03-bfe4-0b6c539c08e3", "sighting_of_ref": "indicator--f3602187-cf74-436f-a5ba-6354fce7ff41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d585e09-db30-48ef-9724-2fcced04dbf2", "sighting_of_ref": "indicator--03523639-5d14-4527-8341-409cd85c5c3e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c327331e-9a05-4ed0-8505-0287aa80a628", "sighting_of_ref": "indicator--8287a27b-066d-420f-8f42-ec4a1656e829", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec2dae7-c496-4bd2-8220-f50eb806bbd1", "sighting_of_ref": "indicator--8287a27b-066d-420f-8f42-ec4a1656e829", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fb02d5-0a03-438d-94b4-bf4d45d08d57", "sighting_of_ref": "indicator--edb91098-eb9f-41bf-a8a2-daf83dd9203f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841d880-66a4-41e6-a6f8-77a7f05a0251", "sighting_of_ref": "indicator--edb91098-eb9f-41bf-a8a2-daf83dd9203f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a704e36f-f355-4342-8f2f-d0f07e03ec4e", "sighting_of_ref": "indicator--0ce4aea9-a314-4aab-af5b-cdde6b24f2e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d776bec1-c0e4-4c82-af4c-8cb24b6740ec", "sighting_of_ref": "indicator--0ce4aea9-a314-4aab-af5b-cdde6b24f2e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d165b7c-72e7-4d2b-a2d3-d90d752add49", "sighting_of_ref": "indicator--3598986d-6c80-4e59-8451-d27fc20205fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed26e7a-abdd-4ab9-9b6b-6861e0a6f137", "sighting_of_ref": "indicator--3598986d-6c80-4e59-8451-d27fc20205fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed5108f-e34b-4267-abcf-407c19a74890", "sighting_of_ref": "indicator--79ddaeb3-1aad-42e5-980f-db41ee327725", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1efc579-c8bb-4490-a683-30a5039d7b43", "sighting_of_ref": "indicator--4d4e6c33-43cf-4862-b88a-b0e9b2ad607a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0fc208-c91d-43f4-b921-f548e0013a2e", "sighting_of_ref": "indicator--4d4e6c33-43cf-4862-b88a-b0e9b2ad607a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca51714-7db4-46fd-b4b2-7ad40fcbdb2a", "sighting_of_ref": "indicator--111cec37-9e27-4bb3-a45e-710d95581005", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041834d-8658-4ca8-ae21-05b1f2d06cc6", "sighting_of_ref": "indicator--111cec37-9e27-4bb3-a45e-710d95581005", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c98203a-76d3-4035-8332-2245ca087480", "sighting_of_ref": "indicator--984134a1-1d97-4a48-8cf5-cadcd6c85cb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd27bc0-2a14-4207-9bc7-4876f247cc6b", "sighting_of_ref": "indicator--537341db-0275-4a9f-870b-31a80a8d94aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a35a470-4b8d-41e1-bcf1-868546c63e22", "sighting_of_ref": "indicator--bcf06213-37d9-4c5a-9a82-61544b4b684c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57011023-775e-4e98-a9ac-c1257af461f6", "sighting_of_ref": "indicator--bcf06213-37d9-4c5a-9a82-61544b4b684c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808c31f4-ab67-4ba2-986a-4718f1013280", "sighting_of_ref": "indicator--956f434f-ef01-4db3-b1d3-2005cf099ebc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca5639c-9a29-45a1-a91f-1ef4dc4092e3", "sighting_of_ref": "indicator--956f434f-ef01-4db3-b1d3-2005cf099ebc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3582b20f-53c7-46d4-b6af-e67150d79640", "sighting_of_ref": "indicator--51ddc36f-59aa-404a-9b2e-5bf8ecbb2a50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ae04e9-e7e3-425f-be89-d572dcc2c9f5", "sighting_of_ref": "indicator--51ddc36f-59aa-404a-9b2e-5bf8ecbb2a50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c9c65e-5416-4d98-8712-0898cf5b29c3", "sighting_of_ref": "indicator--8d235249-7ecc-4d18-84b6-cae9d7481bb8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de13b16-bf3c-4e40-940e-fca889c3162e", "sighting_of_ref": "indicator--8d235249-7ecc-4d18-84b6-cae9d7481bb8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4919fac-1c63-4e9d-be29-c6f4459d2fd5", "sighting_of_ref": "indicator--7749aac3-64e3-47f2-98d7-8f067c549003", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6514449b-0080-4fd9-96f9-e7c09acf9a82", "sighting_of_ref": "indicator--df004408-e22f-45d5-9638-6344b127ab12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39683c4-99fd-4081-8c25-4d9b36c8958c", "sighting_of_ref": "indicator--df004408-e22f-45d5-9638-6344b127ab12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897b75dc-e823-42d1-96b6-a13b71dfe876", "sighting_of_ref": "indicator--7ea2eb55-3ea5-4703-a800-3576ba93d97c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d69d64-deb8-4ebd-bc6a-58c0e207e05b", "sighting_of_ref": "indicator--7ea2eb55-3ea5-4703-a800-3576ba93d97c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d58944-c373-456b-aad2-53c9386104af", "sighting_of_ref": "indicator--b4a626c2-8d31-42dd-9158-860a208be634", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fc9ca5-bbe8-447f-995e-b3b286e5022f", "sighting_of_ref": "indicator--b4a626c2-8d31-42dd-9158-860a208be634", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20da774-61dc-4e09-be2a-b49423ffb9c2", "sighting_of_ref": "indicator--08dbce82-6527-4e3e-bd3e-a96c523370b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228623c1-898d-4523-a35d-fb81c73a3872", "sighting_of_ref": "indicator--832f0e7f-c80d-405f-ab7d-436c8b5b7a0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f32a2a-5142-4e9a-8054-6f6b2376450c", "sighting_of_ref": "indicator--5f2c1d84-0ee5-40e2-8378-090c32ca1eb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ad092-09cd-43e3-8213-f526c4a114a0", "sighting_of_ref": "indicator--5f2c1d84-0ee5-40e2-8378-090c32ca1eb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1fc874-1e1f-4518-8704-bd97cab6ebf4", "sighting_of_ref": "indicator--2a0c2bd4-18e2-43ec-8d19-fe17e2612d88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfe9b29-ab33-48b7-b6c5-6fc6691ea3b1", "sighting_of_ref": "indicator--537f4cac-fc64-414b-9cd0-5a9ed78d2c54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05558dc3-f790-4cc8-89ad-b41c8c60440c", "sighting_of_ref": "indicator--537f4cac-fc64-414b-9cd0-5a9ed78d2c54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffacd4e2-8bfd-43d7-a8f5-df78c5478d65", "sighting_of_ref": "indicator--992550f6-8402-4f35-9082-2aad90bfdfeb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cfa82b-e306-4663-a5b6-859f27c3ba11", "sighting_of_ref": "indicator--992550f6-8402-4f35-9082-2aad90bfdfeb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f326d2bb-7b13-4f58-af15-2292a2ae7877", "sighting_of_ref": "indicator--c0e689b7-facb-4b5c-a735-c7fab6e43c21", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7062ffb-9d4e-4523-9532-3b97f6790bca", "sighting_of_ref": "indicator--3375f4a8-85c7-4a34-aa92-6a850e8eee5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb961e3-51c8-4313-a794-f81b7d82272a", "sighting_of_ref": "indicator--3375f4a8-85c7-4a34-aa92-6a850e8eee5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a494b125-28cd-4cb1-a46e-ef21f9579628", "sighting_of_ref": "indicator--38de4e6a-a2c2-43e5-b4ba-2128806e6943", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b930ede-0e08-4450-b419-9dd67cb78e3a", "sighting_of_ref": "indicator--38de4e6a-a2c2-43e5-b4ba-2128806e6943", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a40bc3-07b3-4f1c-b747-2a3de164dc2b", "sighting_of_ref": "indicator--1016cf55-7d4e-4ec4-b20b-804bb926128c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebcacd4-23fc-4db0-a9a0-f9fb60d06b2b", "sighting_of_ref": "indicator--1016cf55-7d4e-4ec4-b20b-804bb926128c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f58a0b9-beb0-4f83-9f25-da1509a33f7f", "sighting_of_ref": "indicator--e2b45024-09fa-49e0-b78e-7ab8547cae1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4208036e-e453-41f3-aae8-6e3d7c5ff716", "sighting_of_ref": "indicator--6233c014-d6ca-4c26-966f-b2c9aff123fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6011431d-8af1-46d7-9d32-59fefb0ae2dc", "sighting_of_ref": "indicator--6233c014-d6ca-4c26-966f-b2c9aff123fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a853e2-7f34-4774-9fb7-58b50893e844", "sighting_of_ref": "indicator--886b3e67-cca6-4eba-9165-3debf020df92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15396b4-ce08-4205-ae70-1da0d7b10fa0", "sighting_of_ref": "indicator--886b3e67-cca6-4eba-9165-3debf020df92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c8fde0-744e-4152-9c08-50c320964c80", "sighting_of_ref": "indicator--5a23e932-63aa-471d-996d-b2f865f766ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dcde20-7018-4c20-94dc-5fe5ab1458c9", "sighting_of_ref": "indicator--5a23e932-63aa-471d-996d-b2f865f766ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f568d1c3-827d-4ed6-97e8-46d029f285f9", "sighting_of_ref": "indicator--a823879a-457a-4e44-a6a6-1d6e6f7a4ce2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5852b1-0db9-4bbb-9b82-efe92766c4d9", "sighting_of_ref": "indicator--86d8ba95-20b9-4eab-9bbb-33cb86f6c5b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d42f5b-7aab-4725-b75b-abbe90c5616e", "sighting_of_ref": "indicator--568a3341-328e-4d64-b3f1-88ff4d76be08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d26170-c762-4bad-809e-352483fbda6f", "sighting_of_ref": "indicator--568a3341-328e-4d64-b3f1-88ff4d76be08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680be170-6ac4-4591-936e-0e3c2665ea6f", "sighting_of_ref": "indicator--287449c5-be97-4c41-b6a7-f82b9a5e58a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75df995-7fd1-41ec-9413-871574c6980d", "sighting_of_ref": "indicator--287449c5-be97-4c41-b6a7-f82b9a5e58a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4517e0-8c79-43d3-beea-6bfb44e52a0d", "sighting_of_ref": "indicator--6059cf4a-ad17-443b-acb2-5628f2754c54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f01741b-976a-49b0-a4b3-52c6be706c8f", "sighting_of_ref": "indicator--6059cf4a-ad17-443b-acb2-5628f2754c54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb395f8-ce0a-4161-8c57-847f2d7885ef", "sighting_of_ref": "indicator--549b36c5-b718-447a-b4c8-c7f8817c6722", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc02797-15e3-4ad6-b0da-0787561b77b8", "sighting_of_ref": "indicator--549b36c5-b718-447a-b4c8-c7f8817c6722", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34581eee-58d0-4bc0-a02c-761518e10c55", "sighting_of_ref": "indicator--c602c2f6-80d3-4ba9-b48e-c733fde967a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed494f9-f89e-43c7-ad96-72110a4c2be7", "sighting_of_ref": "indicator--c602c2f6-80d3-4ba9-b48e-c733fde967a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c853760-8a0d-415b-b384-7f48f5222176", "sighting_of_ref": "indicator--8a3fa6d0-751c-4d65-a63e-a56d4b2b8665", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf1311f-d05e-4ac7-b52a-bf3c3791978f", "sighting_of_ref": "indicator--8a3fa6d0-751c-4d65-a63e-a56d4b2b8665", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371a9ce2-c70f-490d-afd3-5e352aa09998", "sighting_of_ref": "indicator--1c60b37c-ccd5-4606-81f8-8887f5ff58a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f5f45c-2680-4897-9f09-205ac3fbb2ff", "sighting_of_ref": "indicator--1c60b37c-ccd5-4606-81f8-8887f5ff58a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85706da8-6490-4375-962d-a947cbad4bbe", "sighting_of_ref": "indicator--d87ce36c-8577-49d1-bae7-3e84056e1330", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42442978-943a-43c5-93c0-9af3656025f1", "sighting_of_ref": "indicator--d87ce36c-8577-49d1-bae7-3e84056e1330", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d80ab7e-09bb-40ad-96ea-bf229a45910c", "sighting_of_ref": "indicator--c15e87f1-c236-474a-9748-d7bd0d114faa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8d6b1a-2412-4861-a012-fbc3665cdac3", "sighting_of_ref": "indicator--c15e87f1-c236-474a-9748-d7bd0d114faa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716bd1d4-c1b4-4dce-a10c-a6fa6497b4b8", "sighting_of_ref": "indicator--d61748d7-3ad7-4779-a599-beddb96f23ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba3edf9-40e0-4ef0-ba8f-dffa3df631ad", "sighting_of_ref": "indicator--4669892d-09ef-4d5a-bca9-7d7d66f75c6c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2793c39e-7495-4a1e-8c1e-0712487832a0", "sighting_of_ref": "indicator--4669892d-09ef-4d5a-bca9-7d7d66f75c6c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30524a31-ab62-4b5b-8dfe-2d6098b2d6c1", "sighting_of_ref": "indicator--9102021a-0396-42ce-82e9-8dd4b4af52a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6071a30f-57a9-4634-9388-efaa05421f62", "sighting_of_ref": "indicator--9102021a-0396-42ce-82e9-8dd4b4af52a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8d550d-dc23-442f-985f-69fe4bccdbfb", "sighting_of_ref": "indicator--9cff35a1-c2c0-4607-a2c1-86fd0f6dde34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0246b1-065f-48fc-a669-e892dfe670c4", "sighting_of_ref": "indicator--9cff35a1-c2c0-4607-a2c1-86fd0f6dde34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0bddaa-6983-4fb1-be13-72042d0585c7", "sighting_of_ref": "indicator--5f6cdecd-53e7-4df7-ab3d-8a5f97f7381a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba68c4b-2b91-4149-967f-4981108b71e0", "sighting_of_ref": "indicator--5f6cdecd-53e7-4df7-ab3d-8a5f97f7381a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3219b280-e926-4ca5-a380-156ce25cb059", "sighting_of_ref": "indicator--80be97fa-0815-45a2-9a82-e93407c7b2fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15645a0-9a47-4fc9-b7d6-ddc8c284a160", "sighting_of_ref": "indicator--c6bd0509-d3e6-4c50-a29c-12c96bab741d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a289f8-cf2f-4c50-aab3-6c222a7d5e77", "sighting_of_ref": "indicator--f5649c76-a760-45db-9a13-31cc46594e01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731b189-bce7-40d5-b420-4bf854205ca1", "sighting_of_ref": "indicator--f5649c76-a760-45db-9a13-31cc46594e01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f520c7-35ab-4272-a60c-a4a00525343a", "sighting_of_ref": "indicator--d8b533ea-06db-4308-8931-67ce86754c2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40463165-28b0-4431-9eb0-023386be2cdd", "sighting_of_ref": "indicator--d8b533ea-06db-4308-8931-67ce86754c2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f55699e-6058-411e-ad03-7577e786586c", "sighting_of_ref": "indicator--44e643e3-5b98-4cb7-8bd7-31f7c8093a0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345b9082-0bdf-4b07-8f74-d45d3f70550f", "sighting_of_ref": "indicator--f9bf4f44-3226-4ff7-8707-5845fc1dbb27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fa841c-0c24-40b2-93f6-1f24446305f8", "sighting_of_ref": "indicator--046b3ba9-44db-4fe9-bd59-cb3f42c8c6b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae64a55d-ab99-4f9c-904f-c81b98729662", "sighting_of_ref": "indicator--27c865f8-487a-429c-9b02-49e8c3fa237b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17de07c-32f4-4678-bf3f-c1e775c709c2", "sighting_of_ref": "indicator--acaec4ae-816f-428a-91a0-e3431633fe21", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d098903-4ebf-47ce-bac0-7cd2082f6feb", "sighting_of_ref": "indicator--acaec4ae-816f-428a-91a0-e3431633fe21", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bce8870-13b5-4034-9b74-a8eaa4b8901b", "sighting_of_ref": "indicator--3b88d1fc-a1dc-4921-bd31-918a53915b8b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128612b4-ed24-49d3-a022-78b54208dfc9", "sighting_of_ref": "indicator--6470e9ee-ca9c-43b1-a5ea-4c80739fa22e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e256109-85cb-49ca-98ab-5718a117ae77", "sighting_of_ref": "indicator--6470e9ee-ca9c-43b1-a5ea-4c80739fa22e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ee7cc1-926d-4356-a95e-523e95eaedf7", "sighting_of_ref": "indicator--8066a9b0-3c4a-4312-8166-6529bfea61a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad76a309-4707-46f6-b2bc-0830cd794c83", "sighting_of_ref": "indicator--0af0592c-840f-4f1f-a178-afda53c1de3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92312347-6d86-407d-8c98-5c87bc2c49a0", "sighting_of_ref": "indicator--5ceaf0b3-04a5-4ae8-af6b-982c1a607c5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e97470-d05c-4e4e-b73d-2fb04ce0669d", "sighting_of_ref": "indicator--c9393e68-253f-4617-9036-7bc606a965b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdebc5e-2700-4229-9302-bc46a7a0cc54", "sighting_of_ref": "indicator--c9393e68-253f-4617-9036-7bc606a965b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc899403-09cd-4141-b057-1b95c8ebe550", "sighting_of_ref": "indicator--4415e18a-fe80-4c0d-82a9-9c56ef416859", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54862f4c-3098-4821-b6df-7cc9f3e2ea96", "sighting_of_ref": "indicator--4415e18a-fe80-4c0d-82a9-9c56ef416859", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c055d69-7b36-4441-a3cc-330957872d42", "sighting_of_ref": "indicator--cac6c63a-a3c8-4b27-9f0f-ace77774799e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d652dd-b74c-423a-a4a6-e495e2efcbf8", "sighting_of_ref": "indicator--cac6c63a-a3c8-4b27-9f0f-ace77774799e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4e1e1b-78c0-4df1-8291-367d8c7a0ee4", "sighting_of_ref": "indicator--a7c01009-a417-40ed-9fda-7351bc0063ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3a116a-d97d-4bf9-9c5e-40b6c793cf4b", "sighting_of_ref": "indicator--a7c01009-a417-40ed-9fda-7351bc0063ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf95d78e-99e8-4598-a40e-f6d7e99d5158", "sighting_of_ref": "indicator--3c0eceb2-f25a-499b-9614-bcde3f1f86d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93657003-31c4-4161-b48c-b5cb54cc546e", "sighting_of_ref": "indicator--3c0eceb2-f25a-499b-9614-bcde3f1f86d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11ea6fc-586f-493b-ac1b-f0c0ccbd9e07", "sighting_of_ref": "indicator--20f1a080-b50a-4527-be9c-fadb1a5c19cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94eac318-100f-4f6a-bb40-4be839faf5ba", "sighting_of_ref": "indicator--1e199463-014b-4eba-9016-033a2c25f0ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51164e76-6ce9-4eb2-8af3-c1cb3664eb76", "sighting_of_ref": "indicator--1e199463-014b-4eba-9016-033a2c25f0ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8854c84c-8c16-41a1-a3e1-47d2a7bccb0d", "sighting_of_ref": "indicator--c52e1064-af89-48d0-b43c-bbf5b81bf65a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf761dc-54f5-4ab5-b961-d4b3b1ffc07c", "sighting_of_ref": "indicator--5c6a1477-5493-42a9-9618-186baa523f64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4628ff9-a5e5-41e3-b158-bf0aca6d8481", "sighting_of_ref": "indicator--5c6a1477-5493-42a9-9618-186baa523f64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e1568b-3e86-4b9d-b94d-70c55e757e87", "sighting_of_ref": "indicator--90cc2ac1-fb29-4835-ab32-4bdfe4f6e5e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43af0603-7df9-4d67-8618-3a78e47fc1ea", "sighting_of_ref": "indicator--90cc2ac1-fb29-4835-ab32-4bdfe4f6e5e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844415b9-13e3-46aa-a7f3-f76d4300d535", "sighting_of_ref": "indicator--e9b52e09-4ce1-439d-a02c-797eb155ca30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd6509b-018c-4da9-900b-aaa51139301d", "sighting_of_ref": "indicator--e9b52e09-4ce1-439d-a02c-797eb155ca30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2a3076-825f-4d76-b2b8-a12e6958781e", "sighting_of_ref": "indicator--e69fb261-2d3f-44d4-a0aa-e3ac08809009", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a36386-0898-4d34-8795-99d1263ec4ce", "sighting_of_ref": "indicator--e69fb261-2d3f-44d4-a0aa-e3ac08809009", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17f9425-721c-4d1b-b0e8-764490561c1f", "sighting_of_ref": "indicator--c855a3c2-08ed-47ef-afc1-89a983f6553c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea12a329-a6a0-4234-89b1-dcd92713ffe8", "sighting_of_ref": "indicator--c855a3c2-08ed-47ef-afc1-89a983f6553c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0362eecd-b947-4eb8-a072-f81ec2dcc3de", "sighting_of_ref": "indicator--4ad1e648-c8a5-43b9-8a24-353acc833b00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1b828f-0ef5-46f6-a8c7-3c2af357a649", "sighting_of_ref": "indicator--4ad1e648-c8a5-43b9-8a24-353acc833b00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4f6a2a-8c61-45e3-9aff-f8eba549df71", "sighting_of_ref": "indicator--d3cb1251-7a93-400e-a4da-c527ffec57a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7cb82b-c9fe-4dc9-a490-c92328112487", "sighting_of_ref": "indicator--d3cb1251-7a93-400e-a4da-c527ffec57a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1038cc-0ac4-45f9-a672-f0417d59d577", "sighting_of_ref": "indicator--6b07be6f-c391-4a86-b9af-14d3c0813d3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f5e1f1-8473-47a9-93f5-5dd31e2cd38b", "sighting_of_ref": "indicator--6b07be6f-c391-4a86-b9af-14d3c0813d3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70a3626-e33b-46c6-b315-57ee2b4f0cf6", "sighting_of_ref": "indicator--22ed0f9e-93f8-4183-a339-493f9a7e42d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a429f-b01e-40f9-8650-c6729a51967a", "sighting_of_ref": "indicator--9e2b1c7c-e3a6-4e4a-929c-ca05d7694d6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832c1a17-89cc-4ae6-9b1e-ef9333caaa5c", "sighting_of_ref": "indicator--9e2b1c7c-e3a6-4e4a-929c-ca05d7694d6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6164590-708e-4f0a-b977-c4e62d9570a9", "sighting_of_ref": "indicator--c23b1855-b80a-490a-9f68-f5d6414ca702", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d86232-aac2-4712-8e72-ffd8ac60bf5d", "sighting_of_ref": "indicator--c23b1855-b80a-490a-9f68-f5d6414ca702", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143d2efc-de85-47cf-ba40-f0c158b26faf", "sighting_of_ref": "indicator--fa1dc448-d0d2-4d9e-9a05-e827dc233836", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e8cb75-c3ad-4ebe-b5da-b61d055b43e3", "sighting_of_ref": "indicator--fa1dc448-d0d2-4d9e-9a05-e827dc233836", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc36ebb-dbb2-4d90-bb37-3af8f000d301", "sighting_of_ref": "indicator--187814ad-ff03-457c-99cd-630c9d33cacb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7e5512-7834-4734-8d72-ed59e93776d8", "sighting_of_ref": "indicator--187814ad-ff03-457c-99cd-630c9d33cacb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6251d-4d88-42d2-bd4c-14a6f8bde597", "sighting_of_ref": "indicator--b2f61e16-2bed-48ec-84fc-2b96d1aaeeda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3459b7-3f0d-4107-9f16-adbd08599302", "sighting_of_ref": "indicator--b2f61e16-2bed-48ec-84fc-2b96d1aaeeda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46d673-560c-4dfa-9f0f-400f8f40cb54", "sighting_of_ref": "indicator--0b36b2c2-b53f-449d-8e5a-e9193b9098a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6eab8c-7f82-4ef2-bf69-7130c71ff9c9", "sighting_of_ref": "indicator--0b36b2c2-b53f-449d-8e5a-e9193b9098a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765acf26-4fa3-435d-bf69-ab21c626a01d", "sighting_of_ref": "indicator--9f348223-316e-4395-9307-5fd56f2d9ce9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9904c28-f3ae-49d5-8a89-b8a1ff4c52db", "sighting_of_ref": "indicator--9f348223-316e-4395-9307-5fd56f2d9ce9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a5cfb9-182f-4c08-9b08-eafefe595f9e", "sighting_of_ref": "indicator--9681ef04-25fe-4aaa-8298-12435ff1f2ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd58cce-e3d5-47d2-8106-318f95deb449", "sighting_of_ref": "indicator--9681ef04-25fe-4aaa-8298-12435ff1f2ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d770cbd3-e05d-4aae-8283-47719d96d78c", "sighting_of_ref": "indicator--e8cccc4b-d0f6-490e-bab6-2fd11500582a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32a86ac-08cc-42e8-9a73-5157e0a3e90b", "sighting_of_ref": "indicator--e8cccc4b-d0f6-490e-bab6-2fd11500582a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27fcfb5-a6e1-4b27-8e99-ddca06d56157", "sighting_of_ref": "indicator--d1b610f8-4aaa-4cc0-95d7-761ff17b59a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa636d2-3e14-41b9-91f0-0515ebe40c68", "sighting_of_ref": "indicator--d1b610f8-4aaa-4cc0-95d7-761ff17b59a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2912d4c-d40c-4582-9550-1b9898ba90ff", "sighting_of_ref": "indicator--3866b32f-1370-4891-97dc-30d872c7378d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c27f46d-ac55-4a71-b695-54a92e2f4982", "sighting_of_ref": "indicator--eef1603f-e912-4c61-9c2e-63bf1a508068", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa61151a-8514-4af1-9073-935b88c068bc", "sighting_of_ref": "indicator--eef1603f-e912-4c61-9c2e-63bf1a508068", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00191194-1ab8-4561-8cd0-a08797360e1e", "sighting_of_ref": "indicator--0c551f88-5919-4aaa-90f9-9743afb96c57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434c21e0-6293-404f-a751-7f4cc1ae513e", "sighting_of_ref": "indicator--8fd1821f-16e1-44fa-a20a-4e37c0f9c091", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad06bac8-2efb-47b7-b3f5-35d55df43867", "sighting_of_ref": "indicator--8fd1821f-16e1-44fa-a20a-4e37c0f9c091", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5156d96-f711-4397-a4bc-e4ce0991c868", "sighting_of_ref": "indicator--0e809f7b-fb45-40c8-8032-cf3b06f2a284", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d532b5c-98d3-495b-a953-1d7216be4939", "sighting_of_ref": "indicator--0e809f7b-fb45-40c8-8032-cf3b06f2a284", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecbe542-3c08-4986-8884-b908ddfb2d62", "sighting_of_ref": "indicator--aeb26806-950b-4b7e-8dc4-eeb186b2bfcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9001631b-f710-4747-a830-e3133158a44e", "sighting_of_ref": "indicator--aeb26806-950b-4b7e-8dc4-eeb186b2bfcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63b30e2-4d60-4481-beff-4bb14da7f606", "sighting_of_ref": "indicator--e3932db6-0fc5-420a-9099-9050dff9c4f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb2f03-d754-4c87-b7ff-33c0e8035b51", "sighting_of_ref": "indicator--e3932db6-0fc5-420a-9099-9050dff9c4f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b573cc-e25a-4dc5-ae90-d2128619bc6a", "sighting_of_ref": "indicator--22a5462d-5558-43ca-abf1-8ebd8da74090", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f665046-72f1-4a79-a004-117944ebdb12", "sighting_of_ref": "indicator--22a5462d-5558-43ca-abf1-8ebd8da74090", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff42709b-7e19-4298-aa02-7fea81cd8bf1", "sighting_of_ref": "indicator--d0c69659-cad0-40a4-86ba-6a752973b674", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c4bc76-5645-4778-afca-98af504ca7c9", "sighting_of_ref": "indicator--d0c69659-cad0-40a4-86ba-6a752973b674", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2c4e15-11c7-4503-a7e5-0df82a31cd9c", "sighting_of_ref": "indicator--357a1bbc-34dc-472f-98a7-1f9e5670cfcd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99b4931-df6a-4887-a7ab-fad30f74b101", "sighting_of_ref": "indicator--357a1bbc-34dc-472f-98a7-1f9e5670cfcd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638076d8-e6a4-4d8c-afd6-6e4f3a9b70cc", "sighting_of_ref": "indicator--1cb0e75f-b84d-4ea3-977f-f68450d89652", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5957ad-7dd0-47d1-833a-270e13dc14ed", "sighting_of_ref": "indicator--1cb0e75f-b84d-4ea3-977f-f68450d89652", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fcbbf2-917f-457d-bd8a-e267ab49f71d", "sighting_of_ref": "indicator--f4e2f21d-abfb-446a-98cb-6eea735e0b14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683d70d3-2ad3-4f94-9120-3a05416fb08c", "sighting_of_ref": "indicator--9cf4b60c-b11f-4766-a4b9-1ae808342dc3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54d8045-e5e2-4dc1-b0a6-4402033c2641", "sighting_of_ref": "indicator--9cf4b60c-b11f-4766-a4b9-1ae808342dc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c0a68-b5ce-4936-9bbd-24fa23b12362", "sighting_of_ref": "indicator--7caf7e19-0880-46d6-b14b-c843cb01367c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecfbdcf-72da-448e-8726-3a9a3f248fe7", "sighting_of_ref": "indicator--7caf7e19-0880-46d6-b14b-c843cb01367c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a680de-e2be-4b71-bce4-88391c22dd57", "sighting_of_ref": "indicator--4615657f-9032-45f6-bcd2-bf7ce2c3a84b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8525d627-68c6-40a8-8938-9aa58b3f9a25", "sighting_of_ref": "indicator--0b3ee56e-f331-4b95-a591-d06de3f49582", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f55853-8a52-44da-9693-c279542bd3af", "sighting_of_ref": "indicator--0b3ee56e-f331-4b95-a591-d06de3f49582", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3b93c3-757b-4561-a0d4-432906e47ebc", "sighting_of_ref": "indicator--0321da3a-cc69-4860-89ff-3b17cb69c678", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ad8f60-76a7-45d6-85b2-2fd0becc4b5c", "sighting_of_ref": "indicator--0321da3a-cc69-4860-89ff-3b17cb69c678", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cb551a-70ea-4b80-ace4-bfd270a462db", "sighting_of_ref": "indicator--1d5e528d-0883-4555-b2a8-efdc15ac5b63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8f5806-99d4-4882-9e79-03eab7b031fe", "sighting_of_ref": "indicator--1d5e528d-0883-4555-b2a8-efdc15ac5b63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cc3a27-15e8-49e2-ac3a-62cecff4793d", "sighting_of_ref": "indicator--529673c6-26f7-44e2-b792-6bbe9ab42e39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf70ec-3500-448d-9d44-52d0d9442155", "sighting_of_ref": "indicator--529673c6-26f7-44e2-b792-6bbe9ab42e39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e2a15d-2ef7-41e0-8e13-75e6a2945dc2", "sighting_of_ref": "indicator--b1d6e880-b0dc-47ce-a511-dc4c554088a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91b17d7-9f32-45cc-9c4d-2c1aa87f210f", "sighting_of_ref": "indicator--b1d6e880-b0dc-47ce-a511-dc4c554088a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a83d6bb-f9bc-434f-8a46-2c5dccb290fb", "sighting_of_ref": "indicator--c6cfb279-dc33-49cc-a7a8-a17e57a8657a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09828ab6-aa31-4353-a6ee-b7786cd41f1d", "sighting_of_ref": "indicator--c6cfb279-dc33-49cc-a7a8-a17e57a8657a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bbc463-486c-446e-9961-ad70c8822ec4", "sighting_of_ref": "indicator--2f2ecfba-28c5-403b-9336-ba4b64925173", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f9e58-d53a-4804-9c64-df73bab217ef", "sighting_of_ref": "indicator--2f2ecfba-28c5-403b-9336-ba4b64925173", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32353104-38f4-4f63-8f24-258261e4e6f2", "sighting_of_ref": "indicator--e1a7bd66-1fae-4d66-806e-bc8fd830026d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ae2643-ca18-4a92-97a4-d672ce8bc0d5", "sighting_of_ref": "indicator--0dcaf00a-813c-4a19-8e7c-bce66f577af8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea5575e-bf70-4a06-b895-6bdfef805798", "sighting_of_ref": "indicator--0dcaf00a-813c-4a19-8e7c-bce66f577af8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca522c-8ad8-46fc-ab43-0a94256249a1", "sighting_of_ref": "indicator--e7c86edf-7f57-4f77-9499-5e4ae30f3657", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdddf34b-8738-494a-bb64-0cc762d4aef4", "sighting_of_ref": "indicator--5c86f0a8-a6bd-4287-b55f-eb5bce74fca2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5980f22a-7b2f-48a9-8971-0c45acc9182e", "sighting_of_ref": "indicator--5c86f0a8-a6bd-4287-b55f-eb5bce74fca2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e14c49-0324-4026-a0ba-4e9eb779ea64", "sighting_of_ref": "indicator--2876d8aa-15ad-487a-8e16-cef88c990192", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242681d0-d6b9-4a43-88d4-03f77340efd9", "sighting_of_ref": "indicator--2876d8aa-15ad-487a-8e16-cef88c990192", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f92d5-bcff-4e3e-a3c7-5c10812411e9", "sighting_of_ref": "indicator--132e4f6b-e933-43e2-885d-ba5df1905420", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680fbe93-a437-4130-bbec-c7125d076eda", "sighting_of_ref": "indicator--ce27653e-4288-40b6-a36a-5e83bcf1c0ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefed1b1-6ab8-4b52-994c-fc57fa59f1f5", "sighting_of_ref": "indicator--de78d557-c6d0-48d2-9ad5-e688837a1199", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22443eb-6c8b-4ea8-87f8-b635d74b4369", "sighting_of_ref": "indicator--de78d557-c6d0-48d2-9ad5-e688837a1199", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bf1543-8d87-445f-9d59-29006e8e1a31", "sighting_of_ref": "indicator--ac669219-6405-4b77-9bf6-13c7f3586d37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c31ecb-4d1d-44ff-95db-5bf0ef4761a9", "sighting_of_ref": "indicator--ac669219-6405-4b77-9bf6-13c7f3586d37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d77d83b-418d-4aab-9508-da2770cdc5cd", "sighting_of_ref": "indicator--eb1bc122-c211-49ed-a8df-986fc92a8a7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e34db82-51d4-4068-b705-37192ffc8caa", "sighting_of_ref": "indicator--eb1bc122-c211-49ed-a8df-986fc92a8a7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec36df7-3f1b-4896-bd6b-6574e6dd59c7", "sighting_of_ref": "indicator--b5a22e02-7f24-4c19-b050-14286c789634", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf51554-ea75-494e-8bd4-c3ec12cef31c", "sighting_of_ref": "indicator--b5a22e02-7f24-4c19-b050-14286c789634", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fa994f-7689-46e1-a0c8-81aab7bfba97", "sighting_of_ref": "indicator--ac65fe50-909a-40ae-8a28-040c3010af6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e67b82-c099-4f35-98ed-c38881875e67", "sighting_of_ref": "indicator--ac65fe50-909a-40ae-8a28-040c3010af6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a440509e-eedc-42bf-a4d6-9ed97d4449e5", "sighting_of_ref": "indicator--493c3202-7cbe-455f-bd4b-f0dab85faf5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2eb7bf-3361-4f4e-bbbb-776139336ed8", "sighting_of_ref": "indicator--493c3202-7cbe-455f-bd4b-f0dab85faf5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3d3902-a5ae-43ea-a676-74d093e5a63b", "sighting_of_ref": "indicator--09e3c083-e430-4875-b7d9-7c36eb7f2030", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011820f8-1c77-4104-b138-3417cecd198d", "sighting_of_ref": "indicator--09e3c083-e430-4875-b7d9-7c36eb7f2030", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0f7f3-881b-4744-a10b-dfbe49ee18e8", "sighting_of_ref": "indicator--b935688d-b40f-4ee9-ae56-ee58296bd2f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97329dec-dc13-4ce3-8026-30733ddd107d", "sighting_of_ref": "indicator--b935688d-b40f-4ee9-ae56-ee58296bd2f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8689a360-8ea2-4c4a-a54c-f2d922669a37", "sighting_of_ref": "indicator--743d4d97-efe9-43e8-8261-34a377f40539", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51bc045-ca80-4b7e-b3a3-7b695bcde14f", "sighting_of_ref": "indicator--7effce0d-b957-4531-957b-54b8369fea7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a60f96a-4fd6-4db5-bfcb-c66f11d66e45", "sighting_of_ref": "indicator--7effce0d-b957-4531-957b-54b8369fea7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d26008-c381-430e-929f-62f327874ada", "sighting_of_ref": "indicator--784c4b08-945c-4cd5-82c4-c9b59289ff49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c3c8d-ca0b-40e6-bdfb-153400ffff99", "sighting_of_ref": "indicator--784c4b08-945c-4cd5-82c4-c9b59289ff49", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f4c65b-9b40-49ef-9133-e7710f69b815", "sighting_of_ref": "indicator--b159a9b8-a057-4418-9bb7-b059a2431d29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c245bbd8-d1b8-4763-a69d-37c31b041aa7", "sighting_of_ref": "indicator--b159a9b8-a057-4418-9bb7-b059a2431d29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6686e6-0d2e-402d-bf43-c8a1c8101663", "sighting_of_ref": "indicator--bc503755-0706-4871-85f2-ebfcdd43ef81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae09117-0c42-4381-8614-e32254cbdc23", "sighting_of_ref": "indicator--bc503755-0706-4871-85f2-ebfcdd43ef81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0d862f-e22b-48d5-bb05-9907e5008770", "sighting_of_ref": "indicator--9f297eef-948e-4c26-b4ff-09f8fbfafb60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddb74b4-1426-4926-a109-637fe2131f97", "sighting_of_ref": "indicator--9f297eef-948e-4c26-b4ff-09f8fbfafb60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bce9883-c589-4ab4-a053-c0e15ee2c172", "sighting_of_ref": "indicator--55c121ce-96b5-486c-a145-809b0c1bc0d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603a114a-506e-4fbc-b870-2d2c3e52ce83", "sighting_of_ref": "indicator--55c121ce-96b5-486c-a145-809b0c1bc0d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef8bc85-5931-42cc-8d32-a102fd427417", "sighting_of_ref": "indicator--0cc72d0d-9ff6-4908-ad8b-3f52cb716b4d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bb0d41-1879-476d-a5e5-998181adadfd", "sighting_of_ref": "indicator--0cc72d0d-9ff6-4908-ad8b-3f52cb716b4d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0198dff3-fdb3-4fdc-bed5-c431c24ac920", "sighting_of_ref": "indicator--da62afa9-c4e6-41ce-8e09-b027fdbe8f48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff76c9e9-455e-4e31-a739-441466942dd5", "sighting_of_ref": "indicator--da62afa9-c4e6-41ce-8e09-b027fdbe8f48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b782cbce-c0b2-41f1-a057-b7b0b60e1a55", "sighting_of_ref": "indicator--9941595b-645a-4c68-a74d-927801000f39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa60e1cf-4aa2-43e6-a052-3978331b603e", "sighting_of_ref": "indicator--9941595b-645a-4c68-a74d-927801000f39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431ca696-1b49-4359-ad96-02bd62d07b18", "sighting_of_ref": "indicator--2d0b6f9c-f384-43e2-beda-9422a48331ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb720df-9fed-4fc6-8da5-dc2ad417c532", "sighting_of_ref": "indicator--2d0b6f9c-f384-43e2-beda-9422a48331ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5621af9-3d43-4345-b8df-1e8cb4afbda8", "sighting_of_ref": "indicator--e2210546-0b5e-461b-89dc-4da31cba63ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1a64ca-2cbe-4151-b047-da8161ef38e3", "sighting_of_ref": "indicator--e2210546-0b5e-461b-89dc-4da31cba63ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a8bdb8-3a5d-4c25-bd85-d8f522aaf80e", "sighting_of_ref": "indicator--eb2bb72e-e85c-4a5d-988d-8e16466818b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce1512d-e73b-456b-b4eb-ce438e4a2ae3", "sighting_of_ref": "indicator--eb2bb72e-e85c-4a5d-988d-8e16466818b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514cce8a-a7c5-4ee6-8c9e-ba11c3c82d0e", "sighting_of_ref": "indicator--0eb51960-2e8c-4cc7-8259-2dc0efd78acf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96797f0d-9cfa-4be9-abe7-ec18eeea3b92", "sighting_of_ref": "indicator--0eb51960-2e8c-4cc7-8259-2dc0efd78acf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca739c2-0154-4d43-8edf-889429d9df28", "sighting_of_ref": "indicator--7d1e171e-0d3f-4a0a-91a9-cb6d0be197f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6e5e34-8ca2-45fa-8d88-623d0d6a3dfe", "sighting_of_ref": "indicator--e4b87fd3-60e3-4b2d-beca-d2d355d0eb29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e3e9f5-068a-4049-9d0f-355a3950740c", "sighting_of_ref": "indicator--e4b87fd3-60e3-4b2d-beca-d2d355d0eb29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39290d05-bbd0-41c0-b5d6-038511981a46", "sighting_of_ref": "indicator--96a09c30-c07e-4051-a25d-36805fe4a65e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6edacba-225e-42e1-b1b9-7dff4349ac5c", "sighting_of_ref": "indicator--96a09c30-c07e-4051-a25d-36805fe4a65e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6054a24-7395-4a52-9e33-2d21642d4b33", "sighting_of_ref": "indicator--06cdd8d3-621b-4518-b478-107188c12f06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0eec18-9498-4cd0-9ce4-22f43679d644", "sighting_of_ref": "indicator--1d8354ae-549b-47f2-a7e7-ada8f1112068", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118904e3-5ae1-49c9-a5d5-a0640858e4e5", "sighting_of_ref": "indicator--1d8354ae-549b-47f2-a7e7-ada8f1112068", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd9eb10-167f-4869-9404-1c2c75c5b01f", "sighting_of_ref": "indicator--82bb289a-7ba4-4717-87e9-a0b2eda5c8ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce9d1fc-ea23-4597-9aee-78249c8b3ccb", "sighting_of_ref": "indicator--82bb289a-7ba4-4717-87e9-a0b2eda5c8ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb26944-1ed4-48d5-8c3d-e23681035299", "sighting_of_ref": "indicator--5bb75b26-b083-43e0-ad44-624a892b1337", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfeaad7-445d-4035-9b8d-a8c0066993f9", "sighting_of_ref": "indicator--5bb75b26-b083-43e0-ad44-624a892b1337", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a2acdc-ebb8-4619-a57c-4350bee0c300", "sighting_of_ref": "indicator--e54c8cd2-f4ff-4ae2-b4c5-8001d100adf8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c7de25-3c91-48ab-84f0-718c5adac08c", "sighting_of_ref": "indicator--6228101e-6dd9-4165-97e3-0a3b2648cd77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fb67b9-cd75-4c18-8ae9-51fde1878bee", "sighting_of_ref": "indicator--7516d307-a4a1-4924-90c7-a707904af84a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c285ca-39da-46e4-9c3c-5abffba5a1c6", "sighting_of_ref": "indicator--7516d307-a4a1-4924-90c7-a707904af84a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fccf090-911c-4267-9179-93fb27e86a3a", "sighting_of_ref": "indicator--e608a98d-5cd8-4aee-ad94-82ec4725d484", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06654cc-8db8-4a0a-8738-c21d1bd89038", "sighting_of_ref": "indicator--e608a98d-5cd8-4aee-ad94-82ec4725d484", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864334dc-a64b-4ae4-a0fd-4a2d1c7c5e7e", "sighting_of_ref": "indicator--e5d218fd-7aaa-44c4-9073-dbbbfd323817", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5e343d-4b51-4902-b5c1-24b1375a52ea", "sighting_of_ref": "indicator--e5d218fd-7aaa-44c4-9073-dbbbfd323817", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4887e70-8343-463a-a1a2-31cd6ed9835d", "sighting_of_ref": "indicator--9c216059-db3c-41b5-8ee0-73d8828a04b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3e5ae1-a19b-4e7e-a302-f10ddc39b8fc", "sighting_of_ref": "indicator--921e5bec-9087-454f-aa27-2e81d2ff999d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf864a68-88bc-46cb-bbcf-6e5e25bbc6e0", "sighting_of_ref": "indicator--921e5bec-9087-454f-aa27-2e81d2ff999d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e041603-41f8-4afa-a807-470466d7dbcd", "sighting_of_ref": "indicator--64e074ad-5743-4993-9eb9-969a775a656f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff2875a-54f4-4132-9caf-f638d76e5e84", "sighting_of_ref": "indicator--614e41b0-73d7-412f-9fb1-ccff5e4ae6d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f7997c-a65b-4580-a3f0-d4b84ac4f34b", "sighting_of_ref": "indicator--614e41b0-73d7-412f-9fb1-ccff5e4ae6d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7232f050-6240-496f-8540-574934a49529", "sighting_of_ref": "indicator--e9f9e04d-d210-476b-85a8-ac117fcf1da8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6cbdf7-1a97-47c4-b9b5-270b3434f156", "sighting_of_ref": "indicator--abc28a05-dc9b-48ef-8734-b8a320e05527", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbadb160-729f-4296-939e-c12672d68556", "sighting_of_ref": "indicator--b8b0c227-2151-4961-a4bd-7e96230fa4d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c0bd65-9ad7-4fe2-8dd4-d442018b8fd9", "sighting_of_ref": "indicator--b8b0c227-2151-4961-a4bd-7e96230fa4d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e597144c-9d35-419a-b784-a6fb69a2d5ea", "sighting_of_ref": "indicator--93e58519-a3ba-48ec-9ef1-a0722e231a28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efff8fe-4efe-40dc-9c32-b4ae45f4a379", "sighting_of_ref": "indicator--93e58519-a3ba-48ec-9ef1-a0722e231a28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5525f136-9042-41ff-8f4f-81f0dcf410aa", "sighting_of_ref": "indicator--2ed5c14f-7ad1-42e3-b8f6-968e38fc2559", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742239f0-c696-4563-b872-714b25006b12", "sighting_of_ref": "indicator--21d3a70b-c55c-4c23-81e3-8684517d4858", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250eb778-86ae-4df8-a4e5-21d62249d173", "sighting_of_ref": "indicator--21d3a70b-c55c-4c23-81e3-8684517d4858", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74822f88-06d1-4db3-8057-8d4627405b28", "sighting_of_ref": "indicator--a6f76dfb-7848-4a5d-aed8-2b5d029832bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097481e5-4dfa-4892-aa72-b7de7b63604e", "sighting_of_ref": "indicator--a6f76dfb-7848-4a5d-aed8-2b5d029832bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae3c26-164a-4f74-a1e3-09fde1886072", "sighting_of_ref": "indicator--6737d4d0-44e0-496f-b1be-8741c2abfe7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79efffb8-e6e1-4d9a-9bdc-54976999e19e", "sighting_of_ref": "indicator--6737d4d0-44e0-496f-b1be-8741c2abfe7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39610169-292b-4e7f-b800-de0e2f768479", "sighting_of_ref": "indicator--c508f40f-9a00-4b72-aa08-e956fe789d00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88acd533-cc90-4e21-a2ab-a066e33d09a8", "sighting_of_ref": "indicator--c508f40f-9a00-4b72-aa08-e956fe789d00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8159de-a95a-4a9d-a4f7-9bb3bcb6c0c2", "sighting_of_ref": "indicator--f469cffb-1a15-45e9-b9af-7dbea42c6714", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0677b0d6-dbb3-4b51-aef6-2bb34bf8e86a", "sighting_of_ref": "indicator--f469cffb-1a15-45e9-b9af-7dbea42c6714", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15da047f-164d-4e27-bc0d-7896c3ae5658", "sighting_of_ref": "indicator--53ccb301-57d8-4047-9326-056ad965ad08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880a9266-97ae-4e08-8b49-36853fb4d3df", "sighting_of_ref": "indicator--53ccb301-57d8-4047-9326-056ad965ad08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e778da6f-93b5-4f9a-85b3-8a89767fc072", "sighting_of_ref": "indicator--024e0a85-1e58-45ed-a639-0382484ec0fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7223b52f-ceec-48a3-9e08-dbba9f2f83d2", "sighting_of_ref": "indicator--024e0a85-1e58-45ed-a639-0382484ec0fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d1e59e-b8f3-4b9c-9037-28de275bae82", "sighting_of_ref": "indicator--af6671a3-7a3b-41fc-8d33-2fb1ec46f46a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda6e149-3cb0-41a1-8e32-c1b43fd21fe8", "sighting_of_ref": "indicator--af6671a3-7a3b-41fc-8d33-2fb1ec46f46a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f629c9c-0cb9-4926-ae7a-6f27590fa067", "sighting_of_ref": "indicator--90d9bcd1-d04d-4034-a009-25d53371886f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea21609-22a0-4307-972d-35a3a387d916", "sighting_of_ref": "indicator--90d9bcd1-d04d-4034-a009-25d53371886f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6f3099-cb8b-4695-8deb-5f3c5a6d7ddf", "sighting_of_ref": "indicator--f54fb5fb-708f-4cd2-92e8-8cbbca650797", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0453b820-a3a2-4220-a785-e0b8d0b35090", "sighting_of_ref": "indicator--f21b239c-3eac-4a48-8ac4-114c1eb241f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8030e0f9-e576-4b9c-9436-067aa8480044", "sighting_of_ref": "indicator--0e634266-fed1-4a20-8f0a-66e0d3b77d5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a59a96e-ab13-435b-9795-cf1023564c85", "sighting_of_ref": "indicator--0e634266-fed1-4a20-8f0a-66e0d3b77d5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba098c4-94d8-4066-8637-7cf86e1832e0", "sighting_of_ref": "indicator--f1321fd5-ab94-4d15-80f0-35209656bef0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbdde3a-4069-4194-b66f-1cec3e4e1b90", "sighting_of_ref": "indicator--f1321fd5-ab94-4d15-80f0-35209656bef0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b27b04-db46-4d87-b7e0-02b97a19a01c", "sighting_of_ref": "indicator--9c0874eb-cfdf-4de6-939c-292e4ef33d56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d6d6d3-5a19-4481-a380-19c9e397df0e", "sighting_of_ref": "indicator--9c0874eb-cfdf-4de6-939c-292e4ef33d56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484543c0-d089-4cb0-80b5-4a3579072ad8", "sighting_of_ref": "indicator--cb59d463-4a90-44e2-930a-1a62f369a991", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343df8a6-4013-4bc6-9393-91d7da5d2459", "sighting_of_ref": "indicator--cb59d463-4a90-44e2-930a-1a62f369a991", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecafe1d2-1a6c-4c9d-84f8-dd0c6d02608f", "sighting_of_ref": "indicator--4c6ef190-1757-43da-90f2-f19fcbbd40e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05576428-6457-45a8-b383-adeff206454b", "sighting_of_ref": "indicator--cd02d608-a321-4895-85e0-5f15d6ef1700", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2acbf5-7bd4-4ccf-9531-abeef200c7fc", "sighting_of_ref": "indicator--cd02d608-a321-4895-85e0-5f15d6ef1700", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45cdd5b-0623-41a7-89a0-d7393c447c65", "sighting_of_ref": "indicator--61966cf3-5206-4713-8deb-1861eec570b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4955ff1f-bfbc-4ca6-9ffb-304ec7e34161", "sighting_of_ref": "indicator--61966cf3-5206-4713-8deb-1861eec570b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca2e618-0e9d-40eb-95fe-dc3de349b4ba", "sighting_of_ref": "indicator--30208106-7956-474b-8e04-de79097b8edd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd94e7c-ffe7-4d98-b516-c5d3c4ebd53f", "sighting_of_ref": "indicator--30208106-7956-474b-8e04-de79097b8edd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08103a3d-7fc6-457a-9462-e0aae5d8a935", "sighting_of_ref": "indicator--5058f6a8-5491-4e99-b084-81845d0bcc34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea4523d-9b2f-43b5-aa6a-fbdefc22ad70", "sighting_of_ref": "indicator--5058f6a8-5491-4e99-b084-81845d0bcc34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c872b5-1e06-46bb-8485-8ba7a7a591b0", "sighting_of_ref": "indicator--ef54ed2a-ca0a-4cf5-aadf-9285d8e5b08d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783a9a0d-b621-41c1-a515-c2ca95b1713a", "sighting_of_ref": "indicator--ef54ed2a-ca0a-4cf5-aadf-9285d8e5b08d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c39601-d503-47da-ad60-61246d3d7e89", "sighting_of_ref": "indicator--a07fefff-5bdb-4c27-a7db-4e2a721bf1a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cda4e6-51b8-4989-8a13-e27587905c17", "sighting_of_ref": "indicator--a07fefff-5bdb-4c27-a7db-4e2a721bf1a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b12154-f21a-4be5-bd3a-97875f6c97ca", "sighting_of_ref": "indicator--25219bb7-8796-42e8-adbe-273bb26b061d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33bbd4a-9f60-4b7f-942f-843c1dd78dca", "sighting_of_ref": "indicator--25219bb7-8796-42e8-adbe-273bb26b061d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd4197-a0b0-420f-bc6e-0bca339b2653", "sighting_of_ref": "indicator--5d634e53-b664-4491-b296-9e759a644f5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b34fe42-501c-4a85-8fd5-764d811dc6b4", "sighting_of_ref": "indicator--5d634e53-b664-4491-b296-9e759a644f5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f99805-e8fc-456e-97bc-ee899b807f72", "sighting_of_ref": "indicator--f6fd56c4-cc6c-4993-991d-210d7d2b4482", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079c025c-44fa-44a3-a314-a1ca78a362ec", "sighting_of_ref": "indicator--f6fd56c4-cc6c-4993-991d-210d7d2b4482", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cab59ff-ef42-4806-8daf-1ad8c17a47fc", "sighting_of_ref": "indicator--6a554dd3-bf43-480b-8470-4e6358491afc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eaa26f-dbf1-463c-8b1a-ab40758ba245", "sighting_of_ref": "indicator--6a554dd3-bf43-480b-8470-4e6358491afc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399197fd-b4a8-4452-afcd-f26e59056699", "sighting_of_ref": "indicator--5144d918-4db9-4ef3-9e75-46cbb5bd6cdb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d89b1ba-b3ff-4f8a-9321-bac67f4d741a", "sighting_of_ref": "indicator--5144d918-4db9-4ef3-9e75-46cbb5bd6cdb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff67c229-d6dd-4929-ae0f-6fa2baf51c66", "sighting_of_ref": "indicator--87b31296-4b19-4c6f-92a7-0d329afd9049", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1f305b-f1db-4bc2-ad95-08c33e07e4d8", "sighting_of_ref": "indicator--87b31296-4b19-4c6f-92a7-0d329afd9049", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d320871-01cc-4f67-97b6-b329a29c33f9", "sighting_of_ref": "indicator--d80d055e-e6c1-4623-8de2-d919292c471e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72715a67-a85b-45b6-8bf7-6de59fe59a0a", "sighting_of_ref": "indicator--d80d055e-e6c1-4623-8de2-d919292c471e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331a01a1-0897-4989-9f39-10f1a8e024f9", "sighting_of_ref": "indicator--d9775033-aa27-4a1a-8f3c-4c28dfa92b79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec144ae3-d111-4378-8c6d-30339c9eee0e", "sighting_of_ref": "indicator--9e18a80a-454e-4a4e-98c9-59923a199615", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb64875-8805-4210-8e1b-2dcb795e6e0b", "sighting_of_ref": "indicator--2d6ce734-f10a-485c-a845-faea13764b74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601baea8-4a70-4f10-be69-59877dd496b2", "sighting_of_ref": "indicator--2d6ce734-f10a-485c-a845-faea13764b74", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de44194-aaa1-4b9e-adc9-2a9c7428f913", "sighting_of_ref": "indicator--3d5fd859-a2de-475d-a83c-644385526fae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a00129c-e067-4848-94f7-996ceb430520", "sighting_of_ref": "indicator--3d5fd859-a2de-475d-a83c-644385526fae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a955b62-a7d7-4b64-9ffe-e50d68d7e9b0", "sighting_of_ref": "indicator--cd6fe7d5-c598-4fff-b0ff-dcd711c79fb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fb0382-954b-4ba8-b24f-9ca4d49c2e9a", "sighting_of_ref": "indicator--05cab5c8-eff2-4764-a154-dc6bf21622a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587648fb-696c-4322-98b6-abb15b09b346", "sighting_of_ref": "indicator--e429a57f-9c37-4b14-b6d1-26b3f4bf759b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3292f984-cf03-42d8-b91a-3daefbd2093e", "sighting_of_ref": "indicator--e429a57f-9c37-4b14-b6d1-26b3f4bf759b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea434a8e-430f-4cba-b30b-168b47a16ce9", "sighting_of_ref": "indicator--a6d636bd-f51e-4fdc-8b43-900b283b230f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dce510b-cb7f-447b-9f09-3dbcb127f3e5", "sighting_of_ref": "indicator--a6d636bd-f51e-4fdc-8b43-900b283b230f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd15c99-23c0-497b-b938-e9868ec11123", "sighting_of_ref": "indicator--c0292ad7-45f9-47dd-8cc7-956badd846cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2034573-fc51-4ccb-ae0a-1c07edfd0f73", "sighting_of_ref": "indicator--c0292ad7-45f9-47dd-8cc7-956badd846cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae28676e-ac3c-488c-8108-cdb411b49b2f", "sighting_of_ref": "indicator--302a3cba-8c67-4396-a969-da1a229103ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47fcd9f-5e08-43f1-a88a-3aa94820a5cc", "sighting_of_ref": "indicator--302a3cba-8c67-4396-a969-da1a229103ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef59ed3-5955-4831-a611-c906b033e0eb", "sighting_of_ref": "indicator--2bdbbe73-3021-483e-a29d-e1a06345ce76", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9c5e55-6d91-4905-ad94-e4e2988d84a9", "sighting_of_ref": "indicator--2bdbbe73-3021-483e-a29d-e1a06345ce76", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88c576d-f519-4cd6-89f7-766cb72d2b7e", "sighting_of_ref": "indicator--4c8870f8-b52e-492e-83b5-33fe7af69c6d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057bbe0a-09a8-4a13-8214-d2b64ef5fcc8", "sighting_of_ref": "indicator--343e729a-9018-433f-aaea-85f45a88eda5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47a2b9b-f553-4a1f-aa05-5f9dfeb1f249", "sighting_of_ref": "indicator--343e729a-9018-433f-aaea-85f45a88eda5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5046f783-cc4a-4985-b763-c3c10bae8ea9", "sighting_of_ref": "indicator--ceea03aa-6115-4e41-9da7-614009f49c02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d72c99-0d4d-4003-8176-457965541a6a", "sighting_of_ref": "indicator--ceea03aa-6115-4e41-9da7-614009f49c02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858865e6-a0bd-4eb5-8961-c5c501360b4d", "sighting_of_ref": "indicator--cc7b7d75-13c7-4f4b-8bd8-4e704ba53f86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fa3b54-9229-493c-a17d-977596e4ee7b", "sighting_of_ref": "indicator--34e3045b-a13d-4c4f-bbb1-7f940efb61d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6aa9ab6-87f5-4c19-b01f-2c9afb7eba45", "sighting_of_ref": "indicator--34e3045b-a13d-4c4f-bbb1-7f940efb61d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f088b80a-d532-426e-9e72-e7ccc1459cc4", "sighting_of_ref": "indicator--4c437e4e-3830-4a7f-a3a9-afe42094e871", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655cea43-fe84-4e46-86d5-c85d36493e12", "sighting_of_ref": "indicator--4c437e4e-3830-4a7f-a3a9-afe42094e871", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bb0af4-8303-4ba0-898c-d135ef9c8f1c", "sighting_of_ref": "indicator--b6fbb678-64a3-49a7-a9f4-9d0fe6371e82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a9b159-bf2e-400c-ac7c-527f4ca6c960", "sighting_of_ref": "indicator--b6fbb678-64a3-49a7-a9f4-9d0fe6371e82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e59b98e-e500-4c93-bc89-4d3c0f7f67e0", "sighting_of_ref": "indicator--adc90a5c-63ef-44c6-95df-62c8fc02aff0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2aa6161-e421-4aa9-8cf0-be3edba757a3", "sighting_of_ref": "indicator--4a663198-5b72-4fac-be9d-b94f06fd376a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69261d6f-5147-4f84-9977-36bcbc8e4338", "sighting_of_ref": "indicator--4a663198-5b72-4fac-be9d-b94f06fd376a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e009dac1-231e-4671-adcd-7a057cfa2655", "sighting_of_ref": "indicator--017f09b0-954f-49e8-8f95-edf5ceeb27aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6277e930-868e-4b0f-bfd8-6a9b96b6297e", "sighting_of_ref": "indicator--017f09b0-954f-49e8-8f95-edf5ceeb27aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ebc0e7-8ad6-47af-ad33-32558d484055", "sighting_of_ref": "indicator--81ab0f93-d95f-4133-b31d-514768ed2081", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e42f0c-60de-4000-89ea-ee0db5c7632d", "sighting_of_ref": "indicator--81ab0f93-d95f-4133-b31d-514768ed2081", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4accf7bd-a098-4fd7-b5c8-e5894eec5356", "sighting_of_ref": "indicator--c3768bf2-b5cb-49ac-8fa5-4d11e3b27837", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9953bbf-9c46-4483-ab27-2f29c941d777", "sighting_of_ref": "indicator--c3768bf2-b5cb-49ac-8fa5-4d11e3b27837", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b593b5-9f0b-4464-baec-22feb24c8929", "sighting_of_ref": "indicator--99324761-32b2-4dce-99f3-a602f28658d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5d7f14-859a-4446-afe9-72f356074c20", "sighting_of_ref": "indicator--99324761-32b2-4dce-99f3-a602f28658d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23bf9fb-be41-41cb-a622-fce580f2abd4", "sighting_of_ref": "indicator--a3dfb548-d113-476b-86b0-8aed25eda221", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7330b340-0e95-47cc-9111-17b73593fe9b", "sighting_of_ref": "indicator--a3dfb548-d113-476b-86b0-8aed25eda221", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b14be35-ed41-4bb3-a836-901065d9f617", "sighting_of_ref": "indicator--df8bdb02-9963-4c5b-886c-bb48bc0c84ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6181d469-637b-4d35-a149-1bd4334913a0", "sighting_of_ref": "indicator--df8bdb02-9963-4c5b-886c-bb48bc0c84ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7b31f9-4020-485f-9217-fe663d6ef504", "sighting_of_ref": "indicator--90947b5d-f6ad-4dec-b195-47474cbc9a6c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfb8910-5272-4f3b-8167-24c2c9b9ff24", "sighting_of_ref": "indicator--90947b5d-f6ad-4dec-b195-47474cbc9a6c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0c02f6-5f74-4428-af56-2847ae85f5b6", "sighting_of_ref": "indicator--ffb18794-ad20-412d-b781-f2a1c1f604d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af6ee86-f963-4802-9f22-4454e31ca0be", "sighting_of_ref": "indicator--c945ee16-04a7-4c44-b967-e08d2b2ba158", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd203614-48b3-43cb-8ebe-ee85ffce5bb4", "sighting_of_ref": "indicator--c945ee16-04a7-4c44-b967-e08d2b2ba158", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc458e-8b24-46d3-91ab-d238060100ad", "sighting_of_ref": "indicator--3bb3613c-43f7-4e73-a6a5-d120aac87e86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a11919-ad28-4d6a-be08-1d982cc641f9", "sighting_of_ref": "indicator--4955c0cc-c287-4d0b-8754-02ee56ef9443", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38e03c6-2811-4793-9c32-caf3609287c8", "sighting_of_ref": "indicator--4955c0cc-c287-4d0b-8754-02ee56ef9443", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ed99f4-f805-44b3-94e6-e58a840329b6", "sighting_of_ref": "indicator--9315d426-2fac-4550-9d9d-7d7883aaf9c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907423d9-ff2f-4433-9b3c-7a4ae9836f8e", "sighting_of_ref": "indicator--9315d426-2fac-4550-9d9d-7d7883aaf9c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf11dcf-e8da-405c-a784-5048cb44bbac", "sighting_of_ref": "indicator--0be2d811-40e0-404c-aee4-811de17c3195", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199e8d3e-d110-4e10-b1f6-10d6fd5d1143", "sighting_of_ref": "indicator--0be2d811-40e0-404c-aee4-811de17c3195", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8887d305-c5e6-45ba-881d-de5f0b871354", "sighting_of_ref": "indicator--36d54c09-9ab6-48a6-a96e-029dccc00c33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2017fd88-7da6-44d6-86a5-34793a6df357", "sighting_of_ref": "indicator--36d54c09-9ab6-48a6-a96e-029dccc00c33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a58e51-18b1-406c-a9c6-9dacc2500236", "sighting_of_ref": "indicator--51de1faf-604b-431f-8de9-133b4c9bfb2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2b1940-91b1-4b82-8e5f-cc02aaf738f0", "sighting_of_ref": "indicator--51de1faf-604b-431f-8de9-133b4c9bfb2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d09cb4e-2b02-4c77-926a-6a05ed853568", "sighting_of_ref": "indicator--11b65e6d-65cb-4aa4-ba3d-f40306660d7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d506bcc-8dd2-4649-8c52-daea78968042", "sighting_of_ref": "indicator--d8cdaa5f-0130-4452-9549-ce25ee19e06c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90b129b-cc9e-4d5a-8d9e-d472177849e6", "sighting_of_ref": "indicator--d8cdaa5f-0130-4452-9549-ce25ee19e06c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e871fec-568e-4549-a839-4f2e1f031483", "sighting_of_ref": "indicator--0456f413-38da-4dcd-ae76-fc9a1e65926d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7722fc-7573-4879-bc2b-695a335870e6", "sighting_of_ref": "indicator--0456f413-38da-4dcd-ae76-fc9a1e65926d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1096e2-7973-411f-b037-75e023401d53", "sighting_of_ref": "indicator--bb1c1b5b-cd49-488c-b731-56af0606c076", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb109b2-ce21-4582-a1d4-26155c9b7db2", "sighting_of_ref": "indicator--98ccf943-3f62-47d8-a09c-36c8b995907d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f835d61a-5505-4432-85f6-447169fc5b26", "sighting_of_ref": "indicator--98ccf943-3f62-47d8-a09c-36c8b995907d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144f9c65-182c-42e4-9221-d9ce8725eb0a", "sighting_of_ref": "indicator--5ceb1fb4-efab-46db-8ccc-09717e72603b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c01d91a-ddfe-4b5a-b77c-bc25a55075b0", "sighting_of_ref": "indicator--89a2bff0-bd02-4d30-a08e-e9d15df66e53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63e0bfa-d966-4d3b-b725-34a48cbdcd9d", "sighting_of_ref": "indicator--89a2bff0-bd02-4d30-a08e-e9d15df66e53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4f89bf-5d47-4fb1-8301-a2c73ac3f4e5", "sighting_of_ref": "indicator--e2cf5d53-a1c9-4cd4-9953-b3601e3ee0b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48e692-ebb7-4e3e-89dc-4580427db918", "sighting_of_ref": "indicator--e81e9ba8-400a-4d04-8681-b4730b65d7e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec5c7e-6224-4a17-bde0-80a622935ef6", "sighting_of_ref": "indicator--e81e9ba8-400a-4d04-8681-b4730b65d7e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c10ecf-abe5-462a-89f4-8eb95091ece6", "sighting_of_ref": "indicator--54a8ff43-8728-4815-a4ac-e96db36fb7be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19dd61b-3ec1-462c-8253-2c6293e7efd5", "sighting_of_ref": "indicator--8ee22914-bbd0-4450-8f6d-50b9b3750909", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36e7592-de0f-4eaf-9495-e93e54d425eb", "sighting_of_ref": "indicator--8ee22914-bbd0-4450-8f6d-50b9b3750909", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f6ee97-465a-4161-b299-2495692e4b59", "sighting_of_ref": "indicator--e896dd56-d6c6-4018-b1d0-48d043e2bbe6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79003df7-0b1c-4b09-88f6-dce7725838ab", "sighting_of_ref": "indicator--e896dd56-d6c6-4018-b1d0-48d043e2bbe6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d205c5e9-b17a-438a-95a6-dd76ec4357d3", "sighting_of_ref": "indicator--f10d638e-9fb6-40d8-a444-f3d9fcbc1561", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e17b08-84d8-4520-b928-49576a27519a", "sighting_of_ref": "indicator--f10d638e-9fb6-40d8-a444-f3d9fcbc1561", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86909491-0ff1-480b-8f08-6f0ba1730a85", "sighting_of_ref": "indicator--e450f8ce-d302-4ee7-9bc0-ba4eac3b122f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8527e3f6-dee4-4024-b582-ad91a1fafd5a", "sighting_of_ref": "indicator--e450f8ce-d302-4ee7-9bc0-ba4eac3b122f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb63ee69-f267-4fef-aecf-91cd94a47856", "sighting_of_ref": "indicator--5f74cc43-6492-4136-a873-9e0b387c1932", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4feeeae-5988-41d8-bb34-818c92ad8f1b", "sighting_of_ref": "indicator--0f2bec41-3b95-4f65-837f-aa6e049857ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f632b7-275a-47ea-a4fe-1b2e89c4f56d", "sighting_of_ref": "indicator--0f2bec41-3b95-4f65-837f-aa6e049857ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632d1255-f72e-4cff-a2a1-2a0719ba8d74", "sighting_of_ref": "indicator--899cdef6-e613-4ee3-b9d7-973b3d1b6daf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a738276d-6f3a-4ba8-a960-f927774568d7", "sighting_of_ref": "indicator--899cdef6-e613-4ee3-b9d7-973b3d1b6daf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d421a128-b876-413a-a26f-f49e4f169713", "sighting_of_ref": "indicator--50620dc4-f276-4404-96f8-e62539de19d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc18eecd-dae8-4ef7-ad45-1ba972e93ea5", "sighting_of_ref": "indicator--d9cdca02-7b60-4942-aeea-dd6c0e86b01c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85368978-0601-4fd5-86d0-309d3f43f51f", "sighting_of_ref": "indicator--7653c406-e5ef-463e-ab78-0dd075be20c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b591f1-9b9f-45dd-b19b-f92c064a3e2e", "sighting_of_ref": "indicator--1a77f4d8-7fd0-41f9-ab9b-c07abbb9e4b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa8d02b-d13b-4b86-90f2-275abeb94b1b", "sighting_of_ref": "indicator--1a77f4d8-7fd0-41f9-ab9b-c07abbb9e4b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd4c1f6-c541-46da-934a-0355d2d765f7", "sighting_of_ref": "indicator--d5af38d0-b7b4-4ceb-a358-638d708ccbae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239e9788-1165-42bc-97ec-ede078d80633", "sighting_of_ref": "indicator--d5af38d0-b7b4-4ceb-a358-638d708ccbae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a481186b-847b-434a-a5bc-af4816874ab8", "sighting_of_ref": "indicator--58f82c50-535e-4ea2-b4ea-11e41f197dcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13346acc-f975-4823-b8ec-c474abbc108d", "sighting_of_ref": "indicator--58f82c50-535e-4ea2-b4ea-11e41f197dcc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b3f152-bf51-4b66-9473-a371bdfaf83d", "sighting_of_ref": "indicator--f1a42857-dbc8-43dc-99c8-14d6557d9a1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6781ac-96a5-483d-bb64-24b0c14f550f", "sighting_of_ref": "indicator--36c5751f-c830-4358-a968-4f6d9694ee03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f856a8-01ec-4d99-881f-e9b1e6e32470", "sighting_of_ref": "indicator--4c6a3bdb-b962-40b5-b412-6c8d111b2a46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691294d8-9f8c-487d-9045-8f596ff4d8d0", "sighting_of_ref": "indicator--4c6a3bdb-b962-40b5-b412-6c8d111b2a46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5521737b-1de7-4c3e-a39d-df9ee6bbbb7a", "sighting_of_ref": "indicator--6c1814af-95c6-4c02-bdab-f38cd16b98aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957a83da-2569-40a1-8ea3-43949a110d01", "sighting_of_ref": "indicator--6c1814af-95c6-4c02-bdab-f38cd16b98aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12606c8-88a2-487a-82a3-24cda2c485ec", "sighting_of_ref": "indicator--60edc6a7-6592-4398-8163-58329ec30ec9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbc16cf-03ac-4a56-b04b-6d716e725df1", "sighting_of_ref": "indicator--60edc6a7-6592-4398-8163-58329ec30ec9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f03ab88-1a41-4ff5-8bda-37b33e4ea346", "sighting_of_ref": "indicator--398ee756-658a-46b2-ad87-1ba48898aabe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f540393-e808-42de-a9cb-186f72a697ad", "sighting_of_ref": "indicator--398ee756-658a-46b2-ad87-1ba48898aabe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e9a7ac-bbd6-4134-8267-819a1ee6bd97", "sighting_of_ref": "indicator--ad26617a-52a1-46bd-b85c-da97626dcb60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c79519-f9dd-444d-b8f9-94d5e95ddafc", "sighting_of_ref": "indicator--1c74f281-8f3f-4fee-ba54-7b8006d1094a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1841439-4401-4124-ad6b-6f4985fea718", "sighting_of_ref": "indicator--1c74f281-8f3f-4fee-ba54-7b8006d1094a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ad61ac-a9a4-4664-86eb-c064b9c4cec9", "sighting_of_ref": "indicator--5963c986-cabe-402d-9472-497a1535c9eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da9524c-fcb8-4b54-b397-0d6ecede8fcf", "sighting_of_ref": "indicator--5963c986-cabe-402d-9472-497a1535c9eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64792079-0241-4ba1-b6c1-d23613004af8", "sighting_of_ref": "indicator--d5727a85-ef9c-465d-a55a-b0099eded3a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b348c-93d0-48ac-a832-49fe4c3fbf75", "sighting_of_ref": "indicator--d5727a85-ef9c-465d-a55a-b0099eded3a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093e0648-a412-492b-948f-aa48f86f531c", "sighting_of_ref": "indicator--b29f3bdb-9a43-4aac-995e-59b4417ac5c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68ed415-cb24-483a-95df-3984eec2fc54", "sighting_of_ref": "indicator--b29f3bdb-9a43-4aac-995e-59b4417ac5c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bfa0c3-1e81-4f73-a52b-ff500e1f6f8d", "sighting_of_ref": "indicator--d785aa5b-c946-492d-9b01-6e63c671be05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd8f232-2978-41f3-8886-679daea2bb5e", "sighting_of_ref": "indicator--d785aa5b-c946-492d-9b01-6e63c671be05", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b24d468-c396-4bdb-9131-6672fc81ea85", "sighting_of_ref": "indicator--af590258-6083-4242-882e-9d753baaf3c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc3eadd-5967-4ab0-ba17-30ddb778e039", "sighting_of_ref": "indicator--af590258-6083-4242-882e-9d753baaf3c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5665095-de77-4da3-910c-c05a91b7b9e5", "sighting_of_ref": "indicator--c0a063b7-e21c-4b0f-a812-26a8c8947b27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67a04c1-8bd3-4fe8-a76a-344e43bcf9fa", "sighting_of_ref": "indicator--c0a063b7-e21c-4b0f-a812-26a8c8947b27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73259706-9283-425e-8688-04af02ed860d", "sighting_of_ref": "indicator--eb4f7781-1eac-48a4-8bf0-7eae1e2f86e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca155207-dc5a-4346-b208-774e80b1830b", "sighting_of_ref": "indicator--eb4f7781-1eac-48a4-8bf0-7eae1e2f86e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be7622-d459-47b7-b5d1-c29a18e646b4", "sighting_of_ref": "indicator--601e858f-2586-4f97-bf55-a72169813784", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6000ce-e93b-450b-8025-71e809fdfc77", "sighting_of_ref": "indicator--601e858f-2586-4f97-bf55-a72169813784", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e32c557-cd62-4cdd-822a-964247daa8be", "sighting_of_ref": "indicator--d30d9f8d-fa9d-4877-99a8-8f90d93c1b96", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ee4fdb-6306-4978-b91f-b1c7fc985cbc", "sighting_of_ref": "indicator--d30d9f8d-fa9d-4877-99a8-8f90d93c1b96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a30275-e0c7-44e9-8d20-d46433a3f28e", "sighting_of_ref": "indicator--1d0c1b49-92bf-4266-b2b2-01fa3ae5807d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa86b751-d9c5-423a-9afd-d76e1ef405e5", "sighting_of_ref": "indicator--1d0c1b49-92bf-4266-b2b2-01fa3ae5807d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1fd6e7-d298-4a70-a75b-85532eb71db1", "sighting_of_ref": "indicator--06df62e0-8db9-47c1-96bd-e2bda5a38ec5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e31e50-2b2d-4e1e-a75f-7bf53ef4239a", "sighting_of_ref": "indicator--0b4d14bd-c1a5-4b99-a039-bdb1f3604230", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06386a3-9fdf-4b63-b73f-e4e707709dd9", "sighting_of_ref": "indicator--0b4d14bd-c1a5-4b99-a039-bdb1f3604230", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1b677f-b875-4dc9-b774-dfe498d11001", "sighting_of_ref": "indicator--e8e4c455-4e98-4293-b434-c44f5739757f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d9b4fd-e2d7-4701-a8c0-b33174f05770", "sighting_of_ref": "indicator--e8e4c455-4e98-4293-b434-c44f5739757f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4395b124-189c-48b2-b65a-a9015d8c82b1", "sighting_of_ref": "indicator--dc59f8bd-a9fc-436a-9f2a-2f41369ad892", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353faf0d-0d73-47e7-a3e8-8b239659e6ff", "sighting_of_ref": "indicator--dc59f8bd-a9fc-436a-9f2a-2f41369ad892", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c26148d-7094-4c5a-a055-bb1cb1959c73", "sighting_of_ref": "indicator--e5a089ac-7c07-4262-a874-5d1e626a15b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c80150b-7a77-4e88-af71-db2c45d0aba4", "sighting_of_ref": "indicator--e5a089ac-7c07-4262-a874-5d1e626a15b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0ee7d6-a605-4ef4-91c7-c57bff8904ac", "sighting_of_ref": "indicator--58faec9b-997a-4a20-a512-dcff1e8866f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5210427-7915-4aad-8afb-1c01335cc739", "sighting_of_ref": "indicator--9df68e35-c864-47e5-882e-0993ecc108d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a05b1e-823f-4e72-807d-87d0ee7ba0e6", "sighting_of_ref": "indicator--7e47e1b4-0687-4f72-844e-4b0606ddbc30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94faab03-751d-4c90-a118-6f9c7a2bd1e6", "sighting_of_ref": "indicator--cd2173e8-2fb6-4912-a06b-1b3e39deed3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715bb808-ccfe-48fd-9244-ad50ef65445d", "sighting_of_ref": "indicator--cd2173e8-2fb6-4912-a06b-1b3e39deed3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be07101-dc5b-4c5a-b057-010665151791", "sighting_of_ref": "indicator--e86c671e-2c85-4339-a99b-63a2ff77029b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8917d16-e946-4494-b582-09c907a800b3", "sighting_of_ref": "indicator--e86c671e-2c85-4339-a99b-63a2ff77029b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5055f48-477c-4c46-b6ba-7e2ab9cb153e", "sighting_of_ref": "indicator--27a38fae-52f6-4359-be7f-325caf486a9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0863bc-b56c-47b2-834c-5ca1c4bee74b", "sighting_of_ref": "indicator--27a38fae-52f6-4359-be7f-325caf486a9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099af6f6-2c1b-4cf8-bee7-72d22ae91c56", "sighting_of_ref": "indicator--28de0fbf-047d-4d83-b337-17c0cf52d83d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f483dcc-990e-45dd-be82-4d1355687ef0", "sighting_of_ref": "indicator--28de0fbf-047d-4d83-b337-17c0cf52d83d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80091a1-6e5f-40d1-a0da-4caaa871417b", "sighting_of_ref": "indicator--e8d3cd3a-a2e2-4f4f-8af0-210a3cf906f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f5b345-f1ce-4147-8180-63f4933e2fa6", "sighting_of_ref": "indicator--e8d3cd3a-a2e2-4f4f-8af0-210a3cf906f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661b9a0a-2bbc-4dee-a7ae-40ef80f52dd3", "sighting_of_ref": "indicator--54568915-b1e9-4eb0-80b6-53c851a6dcdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e74722-eb75-4789-8393-4e1176ddc340", "sighting_of_ref": "indicator--54568915-b1e9-4eb0-80b6-53c851a6dcdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9115994-c1d0-490a-b707-166ba6e402e7", "sighting_of_ref": "indicator--b27d910b-8f75-4e1e-897e-75cd01dbcb06", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627f51ea-7794-43f5-a053-12cfc5e50537", "sighting_of_ref": "indicator--b27d910b-8f75-4e1e-897e-75cd01dbcb06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14053e78-aa15-4c21-9f40-1113910d05fd", "sighting_of_ref": "indicator--3623d6c6-187b-46eb-8734-785ed894889b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7eef8b-b28d-4890-9d89-78799d5a8c00", "sighting_of_ref": "indicator--267e50ee-8e3f-4dea-8c1b-31f6c51ba048", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee343fe0-ed38-4768-8e81-42686dc73f16", "sighting_of_ref": "indicator--8b054549-d5e0-4271-93e6-7f556cf4a038", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e557f8-ef6d-42bf-a365-bfd94e97c1ee", "sighting_of_ref": "indicator--8b054549-d5e0-4271-93e6-7f556cf4a038", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a596ae-695f-4479-a6e4-ba853d69ea7d", "sighting_of_ref": "indicator--792dae12-a1f7-4ff8-8bc4-693624e4089e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad8b038-c54d-4f4b-97a0-a6ddc06f7d96", "sighting_of_ref": "indicator--792dae12-a1f7-4ff8-8bc4-693624e4089e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661a0a63-041e-4909-b3f8-53086901e5cf", "sighting_of_ref": "indicator--adc4ba9c-f196-48e9-aa9d-91c44a952bb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8f1d38-8095-4a80-ace7-ea85c7c5907e", "sighting_of_ref": "indicator--ca5b8d33-2c2e-4bf0-a560-1cb4ea02ffee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25b853a-a03e-4d3c-8a26-63ebec3bdf6a", "sighting_of_ref": "indicator--ca5b8d33-2c2e-4bf0-a560-1cb4ea02ffee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc8cbf9-166b-4dca-a0a3-c19abe93c3d5", "sighting_of_ref": "indicator--79177a62-81f2-47cc-9122-3db89df261fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae51a265-c0c8-46c8-987c-b5b91c7e9cf0", "sighting_of_ref": "indicator--79177a62-81f2-47cc-9122-3db89df261fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a128e03-f4eb-4582-8058-3d8ffa43cfdc", "sighting_of_ref": "indicator--205a8740-dbb9-42bc-9c61-756cc784f727", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d443bc6-76fd-4607-88fa-b421852b14b7", "sighting_of_ref": "indicator--205a8740-dbb9-42bc-9c61-756cc784f727", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb5356b-c2dc-42bd-a8e0-e14da3b570e5", "sighting_of_ref": "indicator--5fde9e8a-9be8-4989-875b-bb7682e4ed7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bb8150-0ad9-4a8a-a905-b460c6b25934", "sighting_of_ref": "indicator--5fde9e8a-9be8-4989-875b-bb7682e4ed7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bffede5-a93e-4c9f-8a4e-d9ec18dacc1d", "sighting_of_ref": "indicator--26231d55-08ac-4bea-9e87-52d84cd28bfb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4b9dae-3459-4470-ae5c-939c0795a6cf", "sighting_of_ref": "indicator--26231d55-08ac-4bea-9e87-52d84cd28bfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23338e2-463e-4727-93be-f878380f82c9", "sighting_of_ref": "indicator--dbfcaa20-6a80-4c52-82ca-642d23411c93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e103f5-dc75-4fd2-be19-23d3f34bb441", "sighting_of_ref": "indicator--dbfcaa20-6a80-4c52-82ca-642d23411c93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f8f273-04a8-4340-bd8a-5907b8f65aa0", "sighting_of_ref": "indicator--3c897754-a072-404b-9499-31aa40373edb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab0e790-a4c8-47a0-910e-c7e97fd37c4b", "sighting_of_ref": "indicator--3c897754-a072-404b-9499-31aa40373edb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2522583-3907-4c44-9b18-2aadcec6983b", "sighting_of_ref": "indicator--2d3160eb-e477-4fd4-bbad-33a1a32469d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832d1ad7-abd3-47a0-8572-d135bed87826", "sighting_of_ref": "indicator--2d3160eb-e477-4fd4-bbad-33a1a32469d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d9cdef-0f3c-4b11-a28a-3b64f7261495", "sighting_of_ref": "indicator--5b16d33b-9480-4b90-9186-f1ecf9acf8be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f4e2b0-c8ec-46af-8fb1-5d7386fbd046", "sighting_of_ref": "indicator--5b16d33b-9480-4b90-9186-f1ecf9acf8be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392e1f35-82b6-4150-b51e-d6fa54db0b91", "sighting_of_ref": "indicator--2ac4ed57-bfca-4a2f-adff-9f906d7cde73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c52dec1-c89e-41d8-b84f-ff5a96fb23ac", "sighting_of_ref": "indicator--665e226e-557b-48e3-9c28-48add98618a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c8a803-e8d0-4cd9-a773-20d1eaa43be3", "sighting_of_ref": "indicator--665e226e-557b-48e3-9c28-48add98618a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ea0283-7f9f-4da6-9d63-7094e4d5f420", "sighting_of_ref": "indicator--aabb08c0-f937-4b7f-a65c-e6f8e0afa1e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c55055-ecfe-4e85-a05d-34006f915fb3", "sighting_of_ref": "indicator--aabb08c0-f937-4b7f-a65c-e6f8e0afa1e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b605541f-307f-4376-8f2e-422abfb87567", "sighting_of_ref": "indicator--cf0b1a3c-5576-41f4-a3f6-054a018772c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d077d127-861e-4653-89bb-728761a3285d", "sighting_of_ref": "indicator--cf0b1a3c-5576-41f4-a3f6-054a018772c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3238d3ca-6383-4093-8332-db005b70a0dc", "sighting_of_ref": "indicator--96ee7edf-1182-42fe-aa1d-631b84e37c32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85508fd7-e09b-471d-8e99-09d22232e0ab", "sighting_of_ref": "indicator--96ee7edf-1182-42fe-aa1d-631b84e37c32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbdb6ef-744d-41bd-84c2-00eb31f113f1", "sighting_of_ref": "indicator--e827fa3a-c14d-481d-9170-a71643125962", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018bc9be-c140-4461-867a-d1e8db0e2cfa", "sighting_of_ref": "indicator--e827fa3a-c14d-481d-9170-a71643125962", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad5197a-b96f-4153-af00-e747d59c251e", "sighting_of_ref": "indicator--8ed5e6d6-26b0-441e-9097-8fa0671bf354", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89bf764-4b80-4d97-b556-29e044b21e7d", "sighting_of_ref": "indicator--8ed5e6d6-26b0-441e-9097-8fa0671bf354", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d37bf44-0bf1-4603-919b-43eb6190b968", "sighting_of_ref": "indicator--44c929c7-6e3c-4f8b-bc54-441cdd3583e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca5278e-e6ab-4f49-a99e-89aca20811a2", "sighting_of_ref": "indicator--44c929c7-6e3c-4f8b-bc54-441cdd3583e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d0e091-d7af-4ef1-ad2a-56b696423a5f", "sighting_of_ref": "indicator--51209efb-97a5-471f-bb80-c32239f7badb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e294a-3a1a-41ea-91db-fc585dee5177", "sighting_of_ref": "indicator--51209efb-97a5-471f-bb80-c32239f7badb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092b466b-b835-41ca-bc07-6b5264b3e255", "sighting_of_ref": "indicator--b6fc5014-631b-4353-8ea8-4c22df8a633b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca64c318-d9b4-4b39-8d09-c5eaa3c39e92", "sighting_of_ref": "indicator--297f82d2-e1f0-4ed2-822c-0516893b7375", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66509bf5-b68d-4139-8c36-5891ed15ec67", "sighting_of_ref": "indicator--297f82d2-e1f0-4ed2-822c-0516893b7375", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcabb73-3cd6-4b9e-886b-6c55f52f46b5", "sighting_of_ref": "indicator--a975ccee-e59e-4b7e-a266-a0487b63f8da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9deda5e2-3499-4997-9d6d-2a4e670be7d6", "sighting_of_ref": "indicator--a975ccee-e59e-4b7e-a266-a0487b63f8da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1ebb1b-665c-49d7-bb58-20acb8808196", "sighting_of_ref": "indicator--f8879cb8-8644-49da-bdf1-f5f8fbf207b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55d6e19-fdfa-4b20-9686-6f39970b921b", "sighting_of_ref": "indicator--f8879cb8-8644-49da-bdf1-f5f8fbf207b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aae13f0-8289-45cf-80af-56ebd9650ce0", "sighting_of_ref": "indicator--d396f1e0-d176-45d7-8639-36db94713729", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad000ec-dacc-4313-9fb0-2dce945909d5", "sighting_of_ref": "indicator--d396f1e0-d176-45d7-8639-36db94713729", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5affcd94-3d45-47dc-93e8-9aa31cf7622b", "sighting_of_ref": "indicator--98f4da04-ac0b-4a93-be9e-ede436df58ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764f255c-6497-437a-b78b-c4a87fc9545e", "sighting_of_ref": "indicator--98f4da04-ac0b-4a93-be9e-ede436df58ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb59ce70-4ece-46c3-bd61-8900d90cfbe5", "sighting_of_ref": "indicator--c4704833-7dda-423d-9b24-de5f3e2c36c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b52bc20-cb61-46eb-8c4d-738fde5a59ff", "sighting_of_ref": "indicator--c4704833-7dda-423d-9b24-de5f3e2c36c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11412de-c25a-4858-8f74-da5b53ee6d2e", "sighting_of_ref": "indicator--9ec27d3f-7a1a-4dcc-8872-c16b9263563c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50deb045-b824-4d6d-a259-558b87d02ee4", "sighting_of_ref": "indicator--09cb561f-aea3-4505-977a-85fa6cf4b687", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668cf33e-9664-4b88-b8b3-786727ed7c70", "sighting_of_ref": "indicator--09cb561f-aea3-4505-977a-85fa6cf4b687", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c58691-c98e-46d5-a46d-62126ac76dfa", "sighting_of_ref": "indicator--b38e495a-4e7b-49fa-84ad-e7c8ddcb7fdb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6913a975-375d-4441-a2d5-538e70bf2468", "sighting_of_ref": "indicator--b38e495a-4e7b-49fa-84ad-e7c8ddcb7fdb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3015fcd7-e198-4d3d-a36f-d7697aead5f0", "sighting_of_ref": "indicator--48145870-3626-4aeb-856d-01d62920b008", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a728cb-1a95-4a58-beea-8a2375d33d06", "sighting_of_ref": "indicator--48145870-3626-4aeb-856d-01d62920b008", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a993274a-95df-4c5d-b35f-777a435d0084", "sighting_of_ref": "indicator--10d84362-8f88-4666-ae76-d8661b52636d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c10838c-4c6c-4b0b-bc4d-abe738026b48", "sighting_of_ref": "indicator--734ae599-ae5c-4b06-88e1-4924be939597", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42005a8e-b01a-4324-b49b-735dc71008f3", "sighting_of_ref": "indicator--1d7c9107-fee3-433b-80fa-8ef39169a774", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f63cc8e-6eca-4d4b-b500-03d197bc1127", "sighting_of_ref": "indicator--3d4135b4-e667-418a-ae51-451220a4d3b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94bfa14-d037-4e06-999d-4e57ef266fcf", "sighting_of_ref": "indicator--99764dce-5aa6-49d6-8d9f-d8f4e8b3a11f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd12b2d7-87fd-45f3-9fc7-f3316ab126ed", "sighting_of_ref": "indicator--99764dce-5aa6-49d6-8d9f-d8f4e8b3a11f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc2624b-613c-4270-8ae3-2f945ade9228", "sighting_of_ref": "indicator--412bb555-942f-4570-a0a2-49e53a587ab2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26aeabc-f274-4b0a-a90d-78eb2282c819", "sighting_of_ref": "indicator--412bb555-942f-4570-a0a2-49e53a587ab2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa4f322-f4e6-4470-863c-a78cdaafcdff", "sighting_of_ref": "indicator--d21d1272-164d-494e-827e-d9f1e37f999f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbfeb72-00b0-410e-962b-22cfdb2ec754", "sighting_of_ref": "indicator--7f677826-4a73-4675-a6be-d55423a9fa3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8c3c1c-b615-49a1-84fc-4fc6033e7a87", "sighting_of_ref": "indicator--e40900f7-dc0e-4760-be67-502c31a14a1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdccac1-4129-4ec1-b786-70d33515cd9e", "sighting_of_ref": "indicator--e40900f7-dc0e-4760-be67-502c31a14a1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89333c1e-c720-42a6-983d-efb29aeec43e", "sighting_of_ref": "indicator--47dfc322-6b1e-4fc1-bd5f-9de7d1d624c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957e2566-7359-4bcd-8761-fcb2cf7425f9", "sighting_of_ref": "indicator--47dfc322-6b1e-4fc1-bd5f-9de7d1d624c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9eeecf-7b87-4100-b76e-dfee26176855", "sighting_of_ref": "indicator--e2290b62-d828-40d2-b3a1-5c7371615604", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9200d6cc-706c-489e-a413-9ae48e094cc7", "sighting_of_ref": "indicator--e2290b62-d828-40d2-b3a1-5c7371615604", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a966165-b092-4282-b569-f83dd094ac6c", "sighting_of_ref": "indicator--693c7092-3170-496b-b0c6-e227cadbc14f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a38e4e-df6c-458f-911d-8475dfd4d8db", "sighting_of_ref": "indicator--693c7092-3170-496b-b0c6-e227cadbc14f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f4c205-e69d-44d6-85a6-3e147b40ecfd", "sighting_of_ref": "indicator--26c68983-15a2-424e-81f4-2162338ac39e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c96f1-a71b-47ad-afea-85ce07f9a9eb", "sighting_of_ref": "indicator--4acde9df-d6da-416b-9686-653eb9630101", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efc4936-1274-4d34-94a8-539e201992a0", "sighting_of_ref": "indicator--45dcba0a-b028-4d82-a7d4-8f750d1a428c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f2fca-e65f-4ae6-9eb8-a4b57a5ee7ad", "sighting_of_ref": "indicator--c76937d0-1dc1-4440-bcf2-0fda36c0a071", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26202517-6a0b-4c56-b46a-f87fbe7854e5", "sighting_of_ref": "indicator--c76937d0-1dc1-4440-bcf2-0fda36c0a071", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb47d04-0791-40b5-8e9b-43f3bdc82450", "sighting_of_ref": "indicator--464993ec-dd6c-45b7-8398-cde403666373", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6badf3-4b60-4050-bd38-7568a15069b6", "sighting_of_ref": "indicator--8d22dc15-1307-4c96-9bcc-2179439665f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1b3435-db3e-4ad3-a03a-9bbe22fe05a0", "sighting_of_ref": "indicator--8d22dc15-1307-4c96-9bcc-2179439665f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47a5764-d895-416f-b573-cd584db1f8c9", "sighting_of_ref": "indicator--b984efd8-1bd9-45df-8825-148b88e30620", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b1ce8-b99b-4002-9d46-48efbbb09f62", "sighting_of_ref": "indicator--b984efd8-1bd9-45df-8825-148b88e30620", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc77036-f4c5-415b-983b-037b51d367c3", "sighting_of_ref": "indicator--81e512b0-adaf-4cf0-835e-b423f1ed9038", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366c6925-380f-4b45-b0c4-3e7a65e30ff6", "sighting_of_ref": "indicator--4234c492-f4b9-4082-9296-6d962b84a799", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3029e007-73c7-400d-9712-1b48d319b57a", "sighting_of_ref": "indicator--4234c492-f4b9-4082-9296-6d962b84a799", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8db571-4f6b-492b-aaab-84f77e7ed67a", "sighting_of_ref": "indicator--d07aa568-f564-48f6-8e68-78a5c0e59fe1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc979f3-16a1-4038-a13e-34d98e1bb11b", "sighting_of_ref": "indicator--d07aa568-f564-48f6-8e68-78a5c0e59fe1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff4c275-edd4-4966-a09e-09c21fb8e7c0", "sighting_of_ref": "indicator--7746d1b4-ae41-405f-971a-ac8525bc088c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06417358-2110-41af-88fd-a243850ae7af", "sighting_of_ref": "indicator--7746d1b4-ae41-405f-971a-ac8525bc088c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db383a9-b10e-4487-9e3b-a813a41f2a11", "sighting_of_ref": "indicator--25d8a7cf-c72d-4d96-a21d-7efb84365a47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bc54e6-ee74-4dd7-bcec-1e3dc0892532", "sighting_of_ref": "indicator--4f39f674-c0fa-46b0-a567-42249dcea6fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a98c3f-b82a-41ae-8069-aa52ab4214b6", "sighting_of_ref": "indicator--4f39f674-c0fa-46b0-a567-42249dcea6fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91b2782-c67e-4fb4-ae2c-1cb4204326d0", "sighting_of_ref": "indicator--78efbaf1-0aa2-419e-bbe9-a0e97c76e19b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4896631-1e2d-4e3a-b373-7caa48b7d0e3", "sighting_of_ref": "indicator--78efbaf1-0aa2-419e-bbe9-a0e97c76e19b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2063f5ba-eb5a-42de-a7e8-d426756073aa", "sighting_of_ref": "indicator--e74e6435-b5c7-4885-842f-8de3bc7abe7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299db521-ea1f-4840-b467-df8cf75ad7e8", "sighting_of_ref": "indicator--e74e6435-b5c7-4885-842f-8de3bc7abe7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac04d87-fd85-4f6d-884e-190cd0b620f6", "sighting_of_ref": "indicator--494b5744-d1c7-4fa5-8c93-58fcf1068102", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9d7e8e-979a-40d0-b19c-aeda19476b21", "sighting_of_ref": "indicator--494b5744-d1c7-4fa5-8c93-58fcf1068102", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afc7b3-5eac-4d39-805f-2fec399ede75", "sighting_of_ref": "indicator--969eac7a-97ce-451f-b61c-57df5b9fa0a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2dcdb4-a5a5-427b-9269-952f77cd80d2", "sighting_of_ref": "indicator--5e192d48-fad9-4d22-b8b6-1b27dbccdceb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d97e0fe-2125-4983-8518-ce0eafeb49cd", "sighting_of_ref": "indicator--5e192d48-fad9-4d22-b8b6-1b27dbccdceb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f991f5-aed5-4176-a235-318fe861dfa9", "sighting_of_ref": "indicator--b609a593-16bc-4e3d-8c67-4f388cee5b20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbf619a-569d-4a07-bda5-204fb498de9c", "sighting_of_ref": "indicator--c37c41f1-9491-4781-9258-9ef5d5c3ff13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e78ec9-b768-4b4c-8d85-e1a258c937b5", "sighting_of_ref": "indicator--c37c41f1-9491-4781-9258-9ef5d5c3ff13", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5f0796-64ea-4d28-bf96-5f95ba5a442d", "sighting_of_ref": "indicator--53150aef-66a4-4f9f-898d-cbe64f80772f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a63c303-b11f-45d6-bfa5-fd29baa4cb18", "sighting_of_ref": "indicator--53150aef-66a4-4f9f-898d-cbe64f80772f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e4dedc-4f91-4247-9ced-4abe2d31b1ed", "sighting_of_ref": "indicator--f8c23c7e-c229-4e95-87cd-939f029a7237", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638d176e-0a5a-427e-baa6-ad38a87a9ab6", "sighting_of_ref": "indicator--f8c23c7e-c229-4e95-87cd-939f029a7237", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45474924-2e7d-4efc-8a26-0fbc170f1266", "sighting_of_ref": "indicator--e294c7bf-23b5-4589-9f19-c0038f440731", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f953b30-3b0f-4982-a17d-9f62780f9011", "sighting_of_ref": "indicator--e294c7bf-23b5-4589-9f19-c0038f440731", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f0dd3c-5481-4b82-80e1-1c141f09ac52", "sighting_of_ref": "indicator--42fe0720-0b62-49bd-bdf1-9129abe900e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968d799-8594-4839-ac8c-875febe8c3a6", "sighting_of_ref": "indicator--b7cfa44f-b9f6-4eb1-96f7-faa3b105e01d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7eaa1c-e76d-4bfb-a7eb-cd23a06aa623", "sighting_of_ref": "indicator--9f9fdb2f-d441-4882-90cb-d237dcf412dc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6824c8-6411-47db-b812-305314b05dbb", "sighting_of_ref": "indicator--9f9fdb2f-d441-4882-90cb-d237dcf412dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809e525b-54f3-4e07-a418-9e3c8e0006d3", "sighting_of_ref": "indicator--41bcee23-bc9b-4965-af20-386d7f27cb00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dff552-db21-429f-94d7-3536ebeb7e0f", "sighting_of_ref": "indicator--b1fb5db9-9ba7-40f0-9d8b-9f1ab3eb1745", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8a9d8-441c-4a78-903d-fcc6dfa22500", "sighting_of_ref": "indicator--b1fb5db9-9ba7-40f0-9d8b-9f1ab3eb1745", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f2afd3-b3c6-49ca-a64a-7e839beddf2f", "sighting_of_ref": "indicator--907e6707-2352-45c5-b1c3-af5369876805", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a4e29b-2bf1-4c9e-ba32-ab9a9a322c08", "sighting_of_ref": "indicator--907e6707-2352-45c5-b1c3-af5369876805", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d886758-7dff-4bf5-b8bf-8dad7d71721d", "sighting_of_ref": "indicator--f705bc9b-e427-4458-bcff-6c900f1cc133", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b554c99-739e-4c44-83b8-5fd6db789405", "sighting_of_ref": "indicator--a39fb5b8-c3fa-4fb8-a3ff-90699fc158d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9934279a-972f-48fe-ad3a-5e48e83ab537", "sighting_of_ref": "indicator--c6e72e27-34f7-4ede-9de6-523dc3934fbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7356be25-f4c2-45dc-a4f6-087c5b6e0d34", "sighting_of_ref": "indicator--7b9ad144-687c-4e9a-966c-46713bb87f4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc178bff-fae9-4cde-b43f-a42c30d08b70", "sighting_of_ref": "indicator--3911dbd7-8b02-4270-810c-e7c6afa65c8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6de921-0213-4565-9ab6-2adb4647ab3f", "sighting_of_ref": "indicator--836a17ef-2bbc-4187-a50f-65afc6ed2106", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9973b4-df10-40e6-95e3-aa475cd8e722", "sighting_of_ref": "indicator--836a17ef-2bbc-4187-a50f-65afc6ed2106", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6c8ec6-b725-4bf7-a117-041077788e97", "sighting_of_ref": "indicator--edb6b623-dc54-4f95-ac3d-8875ba7e2804", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3203cf-05b3-45bc-956f-ef31878b6786", "sighting_of_ref": "indicator--4c4f24c8-76e1-4425-b94d-fb408fbd0c1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a73199-f12c-4409-8405-cc85626ff927", "sighting_of_ref": "indicator--0578ac94-001b-406e-9377-55845704a007", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae6ddc-0c3b-4264-a67f-5d7eee39ecc0", "sighting_of_ref": "indicator--c159270f-91b5-44f3-a4fe-569b2cfbf23e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b553c-f036-4231-bfdc-6a97ed759780", "sighting_of_ref": "indicator--e3b63a4f-9836-448c-9173-11880869b715", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31400291-3f1c-4a68-98e5-4dd8a9f37afd", "sighting_of_ref": "indicator--cb7c9026-406b-4362-82fa-02dd8c9fcfbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d1af51-6ab7-4135-b5ff-ba11646dbc18", "sighting_of_ref": "indicator--b093dcb3-fcd4-4cf0-8a7f-52575d17da30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8322a270-31e8-4fd6-a66c-bb73c48f3779", "sighting_of_ref": "indicator--b093dcb3-fcd4-4cf0-8a7f-52575d17da30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db27e5f9-e2aa-4a9b-8b72-aa4e13fd1bd8", "sighting_of_ref": "indicator--d126cd8d-c788-4f1b-a5fc-f4e128636c98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d73f41-e208-4ac7-8e9a-6d3319ec3ddf", "sighting_of_ref": "indicator--9b9c7e15-0891-4f5f-a843-bcdade9abd0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdbdd0a-7d62-439c-aeaf-aba6a0c1aed1", "sighting_of_ref": "indicator--99ab2e0d-6752-4319-ba9e-aeda17bc2e45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021671d9-c02e-4c25-b307-8435dbc360b1", "sighting_of_ref": "indicator--4a0a7738-25cc-459f-8f0c-3e7785c65ce3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054b10b3-02f9-45c2-8e7f-8e6ddd8541ae", "sighting_of_ref": "indicator--efd33eab-b424-474a-8a6f-7d04689fc73b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30396ee5-1114-41ba-aefd-ece4622c6ea6", "sighting_of_ref": "indicator--c91a4ae0-857f-46d7-84ae-8f86c0774270", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c673c-c548-4a6c-ab71-5dbad7ba5167", "sighting_of_ref": "indicator--c91a4ae0-857f-46d7-84ae-8f86c0774270", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cba6269-e308-4d36-b8e5-4472b321543a", "sighting_of_ref": "indicator--d8e69891-535d-4851-bb14-452120fcea9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7976949-519b-4458-80ef-24a5bd868fc8", "sighting_of_ref": "indicator--8fec7641-5206-4bbc-8986-615ad7e31303", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbbe706-3314-47be-b0ff-d98b9647590a", "sighting_of_ref": "indicator--7ed44da3-4f0f-4641-b9dd-2c2fa8c5fe48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8615cda-247d-4bb1-b55c-20fcd680b5ae", "sighting_of_ref": "indicator--17f78990-e852-48e1-b48a-53b84e85a978", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef553e6-aac5-4966-af94-33348d7c17d3", "sighting_of_ref": "indicator--d228a872-43af-49ba-ae34-7284d1a74b13", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4649c81e-be6a-43d0-aa5c-159360e72b81", "sighting_of_ref": "indicator--c68030fc-b8c4-4655-b2cb-4e8986f6c478", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280fd00f-771b-4946-9d06-4fa8ca1c2d4c", "sighting_of_ref": "indicator--7bab0475-5adc-4f43-a89b-49912dafedd7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e50883d-4447-4e8f-aab4-ae68624feced", "sighting_of_ref": "indicator--96b3dde5-d1d9-4df0-8ea1-5ede6468cddf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd77ea3b-e22a-41d5-995d-ebfb73f69ab0", "sighting_of_ref": "indicator--96b3dde5-d1d9-4df0-8ea1-5ede6468cddf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52da2b6-d7bb-4ebd-902a-d9f6a25c4a5c", "sighting_of_ref": "indicator--d4f111cb-58be-4a30-a2b2-db93edda018c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe0565-9a2e-492c-abda-5c3c66f76e24", "sighting_of_ref": "indicator--9546a54b-ed9f-4df9-a5b9-df583271e6b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d504f2-7f44-43bc-bfa5-a97d9232665c", "sighting_of_ref": "indicator--ea2625bd-3f0d-4fb6-a939-0c04335b2acc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e7566a-7eae-4f3b-8e2a-b92a9deceae6", "sighting_of_ref": "indicator--ff8724fd-0744-47ef-81a0-772ee22e288f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b71d0b0-aa1c-429a-81c2-83189d8074f5", "sighting_of_ref": "indicator--ff8724fd-0744-47ef-81a0-772ee22e288f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2cde77-5e95-49e2-82e9-82c833663c93", "sighting_of_ref": "indicator--8120f898-f3a9-4756-af9a-48be39dbd401", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e05f0eb-5c94-4339-8610-800e2bdd2688", "sighting_of_ref": "indicator--db51f9c4-1114-46de-bd82-19013d7db291", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89eb8926-772d-4351-a8de-697a5d25b42e", "sighting_of_ref": "indicator--9406c821-c3e6-4296-92fc-55cfe917b3fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f8bb30-b041-4447-80cc-6d1524166394", "sighting_of_ref": "indicator--c6829d33-7114-4abd-9d98-1e0dbbdf9b86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ef05de-b6a9-4933-964a-3ac32f65b5eb", "sighting_of_ref": "indicator--4d9fb5d9-d65f-41d9-8d07-5c2f88baa012", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71e786c-60ed-4cbd-a496-f248ae258d7d", "sighting_of_ref": "indicator--414486b6-3122-4fe6-8c9f-68b689a904c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dda329-52da-4e55-9f63-5856c9faf69f", "sighting_of_ref": "indicator--af2b20aa-2d0c-4dcd-8df6-16b1a3dbfb87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3487f310-bd44-4bce-b38a-7b25ed053d80", "sighting_of_ref": "indicator--9afe977a-28fa-4623-8558-c5d2da3bc9e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e34cdf9-6022-4ee9-8cf7-539521865977", "sighting_of_ref": "indicator--9afe977a-28fa-4623-8558-c5d2da3bc9e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bacc33-cdc2-4d43-9fb4-db43584ee7ec", "sighting_of_ref": "indicator--90283b4d-6892-492e-9c55-a99af961c28e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d079f5-8763-4d1d-9b71-85533ae217d2", "sighting_of_ref": "indicator--46d5835f-a660-4525-86aa-da90f7845f44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34794be1-1e1c-416c-b579-31b27cc9add1", "sighting_of_ref": "indicator--46d5835f-a660-4525-86aa-da90f7845f44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f70b8a6-e44e-4cab-9c07-6354bebb6100", "sighting_of_ref": "indicator--90bae533-236d-43bc-bfcd-7cf9b90ab8cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8235653-3bd8-430b-9db4-f9f81fbdecc1", "sighting_of_ref": "indicator--ed6a6fc6-9473-4e67-b7d1-88482fff2c71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d9b95c-bb97-4c82-99c2-cb3d38be33a8", "sighting_of_ref": "indicator--ed6a6fc6-9473-4e67-b7d1-88482fff2c71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadbf46b-8ad1-46fc-8724-b5433975e24a", "sighting_of_ref": "indicator--3f9e59b2-c353-472a-b8a4-fa892b13e1a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe03d952-ab65-4c99-842e-30c1ae239a33", "sighting_of_ref": "indicator--23be55c9-87aa-4020-aed3-fda38be3b0af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d394eb6a-5306-47b8-a20c-ced8b60b50b8", "sighting_of_ref": "indicator--43eaccae-e54f-4d99-91ff-da25e6007ef4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707e79ab-bbfa-4cf4-957e-b9c133adb4e1", "sighting_of_ref": "indicator--a5556203-031c-4b5c-a077-a28f99627c78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055381cc-aec5-41c2-b185-0bd8bf094075", "sighting_of_ref": "indicator--f0ea9596-e4b7-48b2-96a2-150c0763d696", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac151b9-0275-4620-9c53-3e6be5c72a93", "sighting_of_ref": "indicator--4d19f286-9f4e-4ba5-befa-e2c8ce0e6e58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91e8e85-722a-4563-b349-7c662d944f50", "sighting_of_ref": "indicator--c5893b43-1df0-42d7-a70c-34878380c6bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95be6ee4-667f-42c5-b35c-b3f5eac1f5e4", "sighting_of_ref": "indicator--c5893b43-1df0-42d7-a70c-34878380c6bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518ec784-10c9-4373-901b-b9eadd18253f", "sighting_of_ref": "indicator--e946ad5d-2ec3-4bcd-a721-b720e166d66f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a290660-de3a-4ea3-b783-f555c0dfc682", "sighting_of_ref": "indicator--0b992e50-1394-4b4f-966e-76004e766547", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70daba11-2047-471f-93c1-6c92f826ccb1", "sighting_of_ref": "indicator--383187ad-fedc-41d6-b9bb-c570a1c41ffc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0980413d-b417-472a-a039-b12f09e79bcf", "sighting_of_ref": "indicator--383187ad-fedc-41d6-b9bb-c570a1c41ffc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9a9fd-8818-445f-bf1b-350f748ffd6f", "sighting_of_ref": "indicator--f634749c-5f81-4264-b4d1-17335d219fb5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8adf72-39ea-4b9e-a1fe-0c54ff407fb8", "sighting_of_ref": "indicator--d655a788-0234-46f1-9099-0e9008abc22d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38af4283-ce5d-41f1-a5e3-0f5549d9ad92", "sighting_of_ref": "indicator--d655a788-0234-46f1-9099-0e9008abc22d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb308fce-6b5e-43d2-bc33-8077f2a9e5cb", "sighting_of_ref": "indicator--e1a1f770-ede7-428b-b39d-0527b08fa88a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452adc4a-6c03-4c1c-8a30-424f296ea5b9", "sighting_of_ref": "indicator--47fd3753-96db-430d-9edf-21e5ba5ec18e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fb6fe5-2d38-4e19-85fa-94fcbeff0b00", "sighting_of_ref": "indicator--ecf171ce-6f70-4d2d-9f7e-577afea4f50f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdeea2e-472b-45a3-b0fe-37beac5ddba8", "sighting_of_ref": "indicator--47038188-0ba0-4997-9b73-875d5d47e0ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8343c-1f55-4c54-8a69-7446dd3cf215", "sighting_of_ref": "indicator--78625d34-08e7-49a8-b50d-ab725768755b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f42c97-2327-4467-814d-9800baa1dac0", "sighting_of_ref": "indicator--bd883293-6915-44ab-ac38-e6c09fa99c6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cf2e5b-d2c2-4d50-a5a4-53b3f2566cd8", "sighting_of_ref": "indicator--eebd2629-7882-466c-bdfd-0548b64de150", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f569cb-d30b-4adb-94f3-32390f045238", "sighting_of_ref": "indicator--fadeabb0-1112-42d2-a09f-cf35e6e133eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab758ab-402f-4658-9dd1-c6a10cc4ceaf", "sighting_of_ref": "indicator--34b1cb1d-3f11-4728-b290-e8f655089fe9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01681a62-232b-46d7-afc1-a01d6f047192", "sighting_of_ref": "indicator--362ac749-d3eb-431d-aabb-36ea96942e87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fead02b7-d350-49a2-85bb-d95a397e5af7", "sighting_of_ref": "indicator--362ac749-d3eb-431d-aabb-36ea96942e87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f498b-ee22-49eb-a745-6124e3c49013", "sighting_of_ref": "indicator--6f0d6b03-852f-4e7c-83db-6d2a122e91bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0909452b-067a-4d3e-addf-6646f302439e", "sighting_of_ref": "indicator--9c4a8df3-bd47-442e-a5e2-6d91e957063c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aebadd-2925-4039-8ec6-a7590d4a66cb", "sighting_of_ref": "indicator--9c4a8df3-bd47-442e-a5e2-6d91e957063c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3b5e9f-4842-4eae-89fc-eafd69e1168b", "sighting_of_ref": "indicator--acecd35c-247b-491a-9234-47c8f4534808", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b63582-152a-45d6-9ae5-69880a34b6bd", "sighting_of_ref": "indicator--8f53137b-ba95-49a9-bb1d-ba4a1582a476", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bd622b-a4a6-4826-bea0-e3dac40c2608", "sighting_of_ref": "indicator--8f53137b-ba95-49a9-bb1d-ba4a1582a476", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2731b1ae-2332-4bd5-8960-3bb2246d878d", "sighting_of_ref": "indicator--f8fdd9f0-a5bb-4f4e-85a6-af526938fb8e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a9b81b-b56e-4545-9e4a-7ec5ab3997c7", "sighting_of_ref": "indicator--57a67985-e435-4798-9020-2d605975d1b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8c5968-2e70-492a-b445-2e7b5fd0fbce", "sighting_of_ref": "indicator--9b75e7b8-6216-4ce6-9d0c-38836bfe1685", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34430410-07e4-4ddb-a817-02c0c4174038", "sighting_of_ref": "indicator--9b75e7b8-6216-4ce6-9d0c-38836bfe1685", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0294c6d-b516-4147-b7ce-6b2108d70d15", "sighting_of_ref": "indicator--98f1c10b-f239-4d6c-bda7-c4de0e516d23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0434a761-b8f6-4388-89c9-6b03c72f53ce", "sighting_of_ref": "indicator--3d74f421-3936-4ea2-a5f7-358e70ad48fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5199c0be-ff5e-421d-859d-007334f4b2dd", "sighting_of_ref": "indicator--2394ad40-2970-46c3-b4c6-97637376a96c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fd168d-969c-4480-8ea3-c99e521f087c", "sighting_of_ref": "indicator--c91cb9ac-0c53-482a-b2e5-11b8c809ba9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51b63b6-6108-4d65-bb82-af8f53fa5a4b", "sighting_of_ref": "indicator--0c2cd256-9fea-41e6-ab91-5185e92b1e5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b31a8d0-b120-45fd-b34c-45fca88fca1e", "sighting_of_ref": "indicator--0c2cd256-9fea-41e6-ab91-5185e92b1e5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42df6da-abd9-4c8b-98e4-db0f5582c96a", "sighting_of_ref": "indicator--b7ee12ba-6e2a-49e2-8729-42a8af554598", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e45e76-5f29-46fb-9016-39bf37c95917", "sighting_of_ref": "indicator--b7ee12ba-6e2a-49e2-8729-42a8af554598", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34be4c3-1b57-478c-8114-af14f68be131", "sighting_of_ref": "indicator--991b3914-0bb6-4509-a78f-8f19553228c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a085fac9-5005-4d53-9bba-0675e1587337", "sighting_of_ref": "indicator--11d708ce-f907-4756-b17b-9788c924c7a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daac5d3-3719-47ed-a455-803237d26933", "sighting_of_ref": "indicator--bf388d3a-928f-407f-8289-f49b0f2f69e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57497462-d728-4f2d-b227-870626a9c0fd", "sighting_of_ref": "indicator--822d9ea3-4960-42a7-b3eb-81e1b6217801", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45762708-5c06-4c02-9576-7690628f5d50", "sighting_of_ref": "indicator--822d9ea3-4960-42a7-b3eb-81e1b6217801", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f53f90-7eb3-479e-88bb-54d977de9e41", "sighting_of_ref": "indicator--01c8343b-15f8-4a52-b754-dee4ccc22000", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6834200-ba59-4ba3-bafe-fbc01286db2c", "sighting_of_ref": "indicator--7a6237f9-5d7f-45a0-b466-f8a03407cbb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a88ad8-2e39-42aa-9922-6ce8a3703d8c", "sighting_of_ref": "indicator--f4310e83-ac52-4510-ad72-be396d379f0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11d2f5b-4458-4bb8-bfc9-322ab753ea9c", "sighting_of_ref": "indicator--1ab6d896-2ebb-4e83-a951-ef55a014cc0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ced126-8e91-4ca8-b2ec-2f2860d6cb26", "sighting_of_ref": "indicator--7b3be475-1405-4608-8161-1fe4090f8d5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a05bc55-6657-4701-9bda-ac93932dbebf", "sighting_of_ref": "indicator--46f12c53-180f-4983-98ab-a4d7ab068192", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583d667a-09e0-4de5-a64d-2cc4424ef856", "sighting_of_ref": "indicator--2d4a8eaf-82e0-4516-b3c2-beae01f89b0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbd930-7d16-4245-9d5c-475dc270bc6b", "sighting_of_ref": "indicator--97f32c73-6a21-492f-b32f-5e8035ec1152", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdc1efc-c1a7-4882-bcd6-fe7bba7c3e40", "sighting_of_ref": "indicator--002e5d51-8f88-4ba8-aea3-bd4008c0cb31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a9d892-1708-42f9-b5b8-11334830ee7a", "sighting_of_ref": "indicator--82f2c1de-0481-42fe-9113-b169820fce59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12398466-0c51-409c-a660-1fff1e75ef43", "sighting_of_ref": "indicator--fbe278ed-b73e-46f9-b386-e04e4289165e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b8b0ff-02bb-4d43-95ce-4b5ba66c6db2", "sighting_of_ref": "indicator--55dfb30d-3b8a-430e-ada5-e6cfdf96acf0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd9e13e-ec7d-44fa-8036-a31805378302", "sighting_of_ref": "indicator--24997ba1-c972-4409-ba38-9fb4242a2aac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd921801-0bf7-4320-95d2-9fc7f440d44a", "sighting_of_ref": "indicator--87fc3598-0a34-40e8-868b-64a43db25e65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a2549e-d653-41b8-bf74-c596e1fdcec9", "sighting_of_ref": "indicator--87fc3598-0a34-40e8-868b-64a43db25e65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0c6754-becc-46e2-8b1d-1b102e84f3cc", "sighting_of_ref": "indicator--7940e783-5765-4ce4-b143-6d294a32a4f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1bca1-90a5-42a7-86ed-8ea93a117f50", "sighting_of_ref": "indicator--06f993db-a4e0-4b19-98e1-485739b8a7d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a86052-de14-44b6-9b20-6482284dabd0", "sighting_of_ref": "indicator--06f993db-a4e0-4b19-98e1-485739b8a7d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34075d86-f06c-499b-826b-cf473874a219", "sighting_of_ref": "indicator--278dcabb-4e1c-48ed-a808-1dfb436f3c5d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce65652-85ab-42f0-b230-2bcbf864c109", "sighting_of_ref": "indicator--19928138-b3ea-45ae-80a4-54a30a17d940", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9f1ce8-beab-40e0-8869-1d69f9b6d400", "sighting_of_ref": "indicator--aff7c312-5fd4-4a9f-87e0-84c7380811c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d776fd23-6e97-4d24-a0ca-3ea2b0af0219", "sighting_of_ref": "indicator--aff7c312-5fd4-4a9f-87e0-84c7380811c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76394f40-a21f-4158-9589-df816ba9e800", "sighting_of_ref": "indicator--343d95f6-eab1-46dc-9d1e-39b551e4b587", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adcf945-5666-4b60-bd3d-7366488a1283", "sighting_of_ref": "indicator--97814fd0-0862-49ae-a01b-2b4fc2f12fcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbc49b4-bc35-4049-a154-447da0a1f0a1", "sighting_of_ref": "indicator--2611b6e0-c03b-4d46-9803-682168ea3101", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f703c1-01a7-4ea9-bb41-008e60affa04", "sighting_of_ref": "indicator--0af65d44-5324-49b5-8516-4726f5f8dca8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3796b14-a207-4a0c-a3e1-5e8e9d21358f", "sighting_of_ref": "indicator--0af60df2-25d8-43cc-a216-13ac23d71da1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb68083-0153-4e5b-9143-cfdb4aacff64", "sighting_of_ref": "indicator--49fe3c02-a6a7-486e-a6ae-0009f98ecbc8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07473dd0-e834-42c7-9ea8-ce0dae8e9694", "sighting_of_ref": "indicator--62772ef9-cf2a-4e1b-b915-b14b8db69705", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5190d34-2e47-4f3a-be99-63c83332fc9e", "sighting_of_ref": "indicator--e081f9d7-0966-4f30-89a3-2239f7f2d4c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83071a73-e9da-4d16-8f20-92ee13ee8738", "sighting_of_ref": "indicator--dd0a9932-95ec-4d1f-9feb-88ecb0beb804", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd5fd2e-3872-4302-bacd-feead84395e5", "sighting_of_ref": "indicator--9acd28f4-2a4f-4cd7-a575-1f96e77e9017", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbe138a-7b33-490e-a948-6ee2fbec91a7", "sighting_of_ref": "indicator--c1cc418a-2d17-4db3-b79d-32a4d5fd78d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2f55df-cb1d-4d30-acb8-a1afcd9926a9", "sighting_of_ref": "indicator--f28253d6-8ea8-40c5-94d5-35328934f074", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5439cf09-dbbc-45fe-9c19-4a0fcbe7e108", "sighting_of_ref": "indicator--f934e24f-02e6-4097-8746-f6a64f1574f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4d1a0e-4ed6-48eb-861f-0d7d7a0a4b36", "sighting_of_ref": "indicator--e6e353c7-41af-4615-bcc4-970aed2198fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03dbb84-db99-43c7-b6e6-a52338f09568", "sighting_of_ref": "indicator--f7ccd441-e1f2-421c-8eff-84a70491c080", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1154bf-eca7-44d6-b854-68a40cde2b4f", "sighting_of_ref": "indicator--a03c9b26-093e-4117-837f-68d2deca3e8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d696c0-dd5e-4d93-8eee-59e83a26d73a", "sighting_of_ref": "indicator--998610e8-9c24-4e88-a66f-805625bc20ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110cd20b-aa9e-4c5c-b912-dd60967aec83", "sighting_of_ref": "indicator--11cbf09f-1693-4b8a-8b3a-f450af67863c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10244926-4490-4e4a-9548-81287a33eb70", "sighting_of_ref": "indicator--a2a64a0a-5f5a-42dd-a828-e715bd29ce60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42e1cec-9168-4101-9001-257762f2b2f4", "sighting_of_ref": "indicator--6cbb76b7-aa8e-43f0-b9d9-0c32fb599de0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3b4a28-7db2-4f38-857f-a5ae7ad19f93", "sighting_of_ref": "indicator--53af3642-8366-4036-b6a8-f6a467c3e18d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6295d4e8-383f-4120-b316-4dbd7b228167", "sighting_of_ref": "indicator--53af3642-8366-4036-b6a8-f6a467c3e18d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319a2b2e-e9e5-4e54-b7cb-b206a57c569b", "sighting_of_ref": "indicator--53af3642-8366-4036-b6a8-f6a467c3e18d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527ac10f-a34c-498f-87df-9a0e0f5faf8d", "sighting_of_ref": "indicator--512bea4b-914f-4e82-9003-a17a1e947d4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8dfa5d-979c-4054-82b2-c6918b380f0a", "sighting_of_ref": "indicator--95a2e988-7d18-449b-b3e0-1cf6c9087c2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ac659a-f93b-48d0-a930-bdcd3991da81", "sighting_of_ref": "indicator--95a2e988-7d18-449b-b3e0-1cf6c9087c2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7702132c-0e7c-4ab6-b4c0-738542e3994e", "sighting_of_ref": "indicator--259f4a9f-ed33-45b0-a6ae-9cafce67c704", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dc790d-ce2b-41d4-a618-d7383ce23870", "sighting_of_ref": "indicator--259f4a9f-ed33-45b0-a6ae-9cafce67c704", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbcfc9d-504d-431b-8644-ba9cb7aa6c32", "sighting_of_ref": "indicator--81a43fbe-f03d-4cef-a02e-f44f345a8c7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1944a6-7e34-4082-911f-43a2f6defae3", "sighting_of_ref": "indicator--81a43fbe-f03d-4cef-a02e-f44f345a8c7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22e4333-9ce9-4af5-8f85-2d937c5ce3f3", "sighting_of_ref": "indicator--81a43fbe-f03d-4cef-a02e-f44f345a8c7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1077efe3-4126-4519-ba25-ffcd5d4c3695", "sighting_of_ref": "indicator--1f4ab283-003c-45d7-9c84-92d76ae870a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da49db3-d8b4-4779-83f5-29374867f413", "sighting_of_ref": "indicator--9aca4f35-43d2-42b3-889d-e13e86c21a3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09497e3-ede5-4e98-b759-c20f7da47c3f", "sighting_of_ref": "indicator--c0ddb85a-a72d-4d16-bd57-a3bdb73d1220", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f16589-cd49-4cf5-a6f5-68fec12ee9bd", "sighting_of_ref": "indicator--6f67f196-8b8d-423b-a39c-16badd2e5110", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc2eeb5-59ee-4cc5-9772-4f892826d570", "sighting_of_ref": "indicator--eeb0475b-96c7-4cb9-91a3-284f2e827aec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc5d23-4869-4bdb-91e8-f72a4596598c", "sighting_of_ref": "indicator--32506e9f-8263-467b-be3f-68b7d3cba134", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ce4987-263b-4912-9491-48d9d5af4d6a", "sighting_of_ref": "indicator--508a8333-8201-4d71-b209-0fa36c050b3f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3918cbb2-a5bd-45be-86f4-f8b9b0478249", "sighting_of_ref": "indicator--508a8333-8201-4d71-b209-0fa36c050b3f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dd0fdc-1b8a-4cda-a8ca-215a013e2a2b", "sighting_of_ref": "indicator--396b4d55-5d74-49b3-8deb-41bdafd7db78", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ff1624-5bc3-4d1e-8d31-a966ebed5a79", "sighting_of_ref": "indicator--016c1619-dd1a-4767-b12e-dc494c577ab0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c75ba38-eebd-4b56-9a58-a8393e0bbc85", "sighting_of_ref": "indicator--7d0c4d89-8963-405a-ac93-d1f0c45dbe6b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cbcd6d-d217-4965-8aec-d6ed5b5517ca", "sighting_of_ref": "indicator--fffd431e-1b82-477d-9018-461ddee908e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518b736f-3fea-48b1-b919-9aec5f31b391", "sighting_of_ref": "indicator--7dabe8a0-93e2-4420-b916-bce8b473aa53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9384fd3-ab63-4be4-ba91-90c93790df8e", "sighting_of_ref": "indicator--6f84081f-ede8-4f20-8552-67b3beea0ca5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6771a12-cd0f-4e1f-88fe-df714a4baa72", "sighting_of_ref": "indicator--9e8822f6-73a9-4311-bdb7-ba4d69f4f7be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0f00e5-04da-4f46-b359-13c6afda6fb4", "sighting_of_ref": "indicator--66ceed0d-507d-470a-b44f-4ba8732b7208", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f8cebe-00c1-4e10-815a-350c023d5262", "sighting_of_ref": "indicator--269f7da0-3a04-4d50-9d7d-9367fca2a17f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fac7a6d-7a58-4b07-9c66-3d70d849c6a3", "sighting_of_ref": "indicator--9f5dfc84-2b9a-4aa4-8974-6a56b104edac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a944e02-b10e-47d4-ab29-220d5c06cfdb", "sighting_of_ref": "indicator--036d8881-463d-47a2-adfa-19c19fa41f1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75418f38-6aeb-440e-a6ca-f9379ea75929", "sighting_of_ref": "indicator--c4faebde-0c87-4644-9eb2-fbaa39658826", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78b651d-30bb-4205-bc57-54265bff5f8a", "sighting_of_ref": "indicator--6abc542c-6c7b-4c21-9c27-0a9d61a231b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3178444e-a413-4af4-8c71-b31ac9bca1aa", "sighting_of_ref": "indicator--35dccdba-baed-4e0a-bcb2-0ce1e1e7db38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845fc35b-0c07-485e-9f31-35c9a34105b2", "sighting_of_ref": "indicator--ef76ac9a-0bf4-4490-aade-c75f938924c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af7cba5-dbbd-40bb-9b6b-9f352ca05324", "sighting_of_ref": "indicator--3f7bff2f-9af2-4e9b-adb6-7c545b771285", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fed0da4-fc75-4c5d-979d-ba5619fad2e2", "sighting_of_ref": "indicator--6164278f-47f9-4ba7-a206-45a71e8f660e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a6d399-9eee-4251-ba09-048fd52db0cd", "sighting_of_ref": "indicator--c83acdd1-f7d6-4ea5-95fc-9d6141dcfa78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9edfeea-03f4-49ce-b00b-f23ac47a4c18", "sighting_of_ref": "indicator--4afa1284-de66-404c-8168-e9777327715d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37dd670-e27e-4f14-81ae-e76d83623473", "sighting_of_ref": "indicator--d8df95c4-f0f2-481a-bd80-70b578b87922", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d67553-8a9b-45a8-b597-f53c42b1a952", "sighting_of_ref": "indicator--d2e7a854-42ec-4d46-9739-0555d6d35011", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95564087-deac-4e70-afbd-bbeec98ea693", "sighting_of_ref": "indicator--6fb0b9ed-6847-4e47-9b1c-ea5f64c52d67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245aea32-8a13-4bba-91eb-8ea5f5680802", "sighting_of_ref": "indicator--6fb0b9ed-6847-4e47-9b1c-ea5f64c52d67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fec9801-dfdf-42ad-91ce-259fb43df35c", "sighting_of_ref": "indicator--01734b49-3fe7-405c-9d88-04708b3bb85d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c26887-adee-41e7-b3b5-8d89695f3072", "sighting_of_ref": "indicator--06d364fc-79d2-4df3-b836-57aa2e59b59f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0705e89-4ac5-497a-953d-e395e7eb3b9f", "sighting_of_ref": "indicator--ba6cac07-de5b-4291-8c03-21eeebed4288", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0870064-3013-4a56-b51d-21daed2ca0e0", "sighting_of_ref": "indicator--b8cfef35-e3b4-464a-a743-e56d51518bed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea9268e-9fec-4a48-89e8-7119f9562a29", "sighting_of_ref": "indicator--0c0ea192-8909-4c4b-a39a-cc9459ee46a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279dfbcb-8997-41da-8a53-7e69a85a922e", "sighting_of_ref": "indicator--e2dc6526-1ab1-43a5-9f86-fd42ec0cba94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca149ae-4541-422a-a82d-e15347a21f84", "sighting_of_ref": "indicator--bbd0520b-815e-4055-89db-6109ffcacd28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a850411-891a-4db0-8edb-3523f8dbab41", "sighting_of_ref": "indicator--520ab51f-050f-469a-935f-3891fe8282dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc461db-1e3a-495c-925d-e621e0aca419", "sighting_of_ref": "indicator--fe7cdbfd-aac0-4c21-a327-5aea66a627d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392a53eb-b544-44ae-b27e-8e5dceb741c6", "sighting_of_ref": "indicator--5f08ebbe-c565-464c-8cfd-654fed261ce7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b03487d-d587-4253-84f3-212f3cbb7648", "sighting_of_ref": "indicator--56313e32-22fa-4186-80b7-1ccfa832e170", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907c218f-b882-4c4f-949c-7ab9c888212d", "sighting_of_ref": "indicator--56313e32-22fa-4186-80b7-1ccfa832e170", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e0675c-6bb1-4626-a0dc-46edb6dfb883", "sighting_of_ref": "indicator--56313e32-22fa-4186-80b7-1ccfa832e170", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe055ed-995f-475d-9ef7-d5a9b427373c", "sighting_of_ref": "indicator--497e1e6a-eefa-48bf-9fd2-d12538c032af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734422d4-a137-4879-8b3b-e95fe29c6880", "sighting_of_ref": "indicator--431dd0e8-a871-4979-bed5-0f806b0c2a92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee8c8a0-45df-4847-ae5f-4809fa7db847", "sighting_of_ref": "indicator--b8487283-6ab7-47c3-a632-d9d9100b696f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3d7ad5-34ae-41b1-92f7-ded73bb36489", "sighting_of_ref": "indicator--58b12b30-d96e-4e6a-bc75-c88effcce1e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09563cc-8094-4c81-950d-efef1a212973", "sighting_of_ref": "indicator--22fcf61a-5e93-4a1f-bbb4-33fd68477cd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e85763-b767-4c6b-9f65-f04ce8511c63", "sighting_of_ref": "indicator--cc7ca9df-54dd-41fe-97db-10687d3a212b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa14a60-f956-43b4-a36a-eab8290d8f8d", "sighting_of_ref": "indicator--f3530f37-759d-4b0d-883d-257a487d38cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df78cc0-ef14-4287-abf1-56a53d7e7e9e", "sighting_of_ref": "indicator--5bcb3542-92ba-48e3-830d-1fe49ff537b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22486cc5-5425-46d6-b514-f63e2527cb6a", "sighting_of_ref": "indicator--47d72759-e1af-4e36-ae03-beb82b6ba250", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc12d44-320d-4f44-a0f8-bf72502fde29", "sighting_of_ref": "indicator--3d73e012-78f2-4dba-8787-d33055653499", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb61db89-6fbb-40fc-83c9-f3b9ae2798a4", "sighting_of_ref": "indicator--c4134131-e991-4ea6-b122-d900306d1f2e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1814bc50-c603-4863-975e-cd0ca4e92978", "sighting_of_ref": "indicator--588c6bd3-8a77-443c-90dd-d1ec1b541688", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788864e4-05bf-42c9-8ee6-75b4e6d87da8", "sighting_of_ref": "indicator--588c6bd3-8a77-443c-90dd-d1ec1b541688", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff19bba3-5f2a-4691-9774-a57a4016012b", "sighting_of_ref": "indicator--588c6bd3-8a77-443c-90dd-d1ec1b541688", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51496a69-c3fd-4c08-807c-08680da90637", "sighting_of_ref": "indicator--bdb109a0-b5aa-4d27-acce-edb2f3e83572", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4711111-4e79-4bce-a8a2-e7951d78b83d", "sighting_of_ref": "indicator--bdb109a0-b5aa-4d27-acce-edb2f3e83572", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8450a4-5c52-477c-843a-3117c24728cd", "sighting_of_ref": "indicator--bdb109a0-b5aa-4d27-acce-edb2f3e83572", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147ed3ee-e565-49dc-a5bf-3ba9385d5f37", "sighting_of_ref": "indicator--c75f0648-e32f-462c-954b-ab8f1e73c944", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263e47a2-d6bb-47a4-bd03-2e83affaee36", "sighting_of_ref": "indicator--c75f0648-e32f-462c-954b-ab8f1e73c944", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031eb73c-e077-4b78-a41f-4ebe9c2a5340", "sighting_of_ref": "indicator--c75f0648-e32f-462c-954b-ab8f1e73c944", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2664852-b526-4fac-bd3b-011e16e06611", "sighting_of_ref": "indicator--cf6529b5-854d-4896-ac9f-c75717304b3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0242551-725f-42b1-a130-b2f812239e77", "sighting_of_ref": "indicator--94f120bc-560b-4e42-87e1-b4e4eb41ef40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9905449-9d69-439d-8763-997f24909c7b", "sighting_of_ref": "indicator--94f120bc-560b-4e42-87e1-b4e4eb41ef40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfb9bd3-0e6c-49be-a1cf-026a5dc925cf", "sighting_of_ref": "indicator--94f120bc-560b-4e42-87e1-b4e4eb41ef40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c232063-3e82-4f10-a95c-f2ccee19e014", "sighting_of_ref": "indicator--5e8bd060-e440-44d5-9b85-5a4449e1fb4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cefd2a8-f424-4f9b-ab3d-c47e7d65c5ac", "sighting_of_ref": "indicator--5e8bd060-e440-44d5-9b85-5a4449e1fb4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29085080-9aed-4759-aa5e-abf145cf6736", "sighting_of_ref": "indicator--5e8bd060-e440-44d5-9b85-5a4449e1fb4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5323724-5a53-4996-8179-0b2e87dcf4b4", "sighting_of_ref": "indicator--61bbb121-f0ec-4b8c-96a8-ea8c1b10cf77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c010774e-532c-43a2-8f50-c9ac1f721aae", "sighting_of_ref": "indicator--9a3c0654-1a83-41c1-bfe7-fac4afa64cb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42f8b22-a423-4fae-9f98-f1fa824f8268", "sighting_of_ref": "indicator--9a3c0654-1a83-41c1-bfe7-fac4afa64cb4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b591eb2-20f1-4551-b262-eff3f318ad3f", "sighting_of_ref": "indicator--9a3c0654-1a83-41c1-bfe7-fac4afa64cb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117f9d36-e372-4eb2-b9a2-8f3aeb7a1b1e", "sighting_of_ref": "indicator--3a4118ad-392f-443b-b40d-d7f4a4332a92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da1a8d6-bacc-42ed-8418-393b6529199f", "sighting_of_ref": "indicator--e3845e63-0417-4da5-9cc0-bb69e68602d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4d41e1-2445-4429-9800-7ceedc202c85", "sighting_of_ref": "indicator--53ef82f4-37be-4e93-8871-108f97178080", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad292b7-85b3-4f1e-bfc5-27cfd3cea0a9", "sighting_of_ref": "indicator--bf8e2eac-74c0-4242-8d79-b0aea78d8938", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0561fd-53a2-4f53-b09b-583171c652c8", "sighting_of_ref": "indicator--9a576034-1fa3-4bdd-a33c-a2381c7e52ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461a4c46-e7a7-4ac1-b92a-ef46ee6c51c3", "sighting_of_ref": "indicator--9a576034-1fa3-4bdd-a33c-a2381c7e52ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c91325c-8fe2-492e-b0cf-3231602d032c", "sighting_of_ref": "indicator--9a576034-1fa3-4bdd-a33c-a2381c7e52ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f15566-16dc-4192-ac82-7f4da1b83f4e", "sighting_of_ref": "indicator--b170c6a1-3207-466f-b9b1-ddbc922931fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ffed6-0630-44b1-a167-8b0070d49a13", "sighting_of_ref": "indicator--9b38f96c-6ae3-43b4-9125-b6f22bc29a6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e246cb9-c867-497f-a634-6d64b00d0a83", "sighting_of_ref": "indicator--d60d691b-db31-4ca7-93c3-299370be40b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01701bb8-280c-4d6e-893c-69f67f4fe4eb", "sighting_of_ref": "indicator--4b0b4aaf-5325-4381-93f6-7a405b29fb75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21a8d34-b9c8-4ae5-b9aa-1f2964bb4fe5", "sighting_of_ref": "indicator--1d3ba21f-fe91-4d98-988c-b0f817efa891", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef6525c-f0d5-4854-9594-90d0f1bae1bd", "sighting_of_ref": "indicator--8d62b48f-1d25-4f0a-b6b4-55d2880a8493", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be34a48-a628-4f66-bb44-49ca9fab87b0", "sighting_of_ref": "indicator--ee43d712-615f-469d-ace2-dba37d78a248", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becf7f17-0068-4c13-ab76-bae4c260da7f", "sighting_of_ref": "indicator--ec20a19a-cda0-462a-b6c8-80b9390e7712", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89241a3c-1517-45a5-8b3a-ab617fc24eca", "sighting_of_ref": "indicator--ec20a19a-cda0-462a-b6c8-80b9390e7712", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbedbe0-ac8c-47f9-a95d-a22aa359d5d1", "sighting_of_ref": "indicator--ec20a19a-cda0-462a-b6c8-80b9390e7712", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c9384b-40f2-4430-9fb9-c5ef540f99e5", "sighting_of_ref": "indicator--c9e010a2-9013-4f4b-b061-1891f3d660ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1873ef23-58d0-45ac-bfe3-6cb234918d45", "sighting_of_ref": "indicator--c9e010a2-9013-4f4b-b061-1891f3d660ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b85f48a-e33a-4f25-a869-e616562332ec", "sighting_of_ref": "indicator--c9e010a2-9013-4f4b-b061-1891f3d660ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec38df7-b003-4847-befe-89418fd08464", "sighting_of_ref": "indicator--1bc011d7-a1bb-4c24-8c17-c34d5d1884e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d172fe0d-c2c0-423a-82b3-d928af579e84", "sighting_of_ref": "indicator--1bc011d7-a1bb-4c24-8c17-c34d5d1884e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08289c51-eac8-4ce1-9dc8-0d4502b381aa", "sighting_of_ref": "indicator--1bc011d7-a1bb-4c24-8c17-c34d5d1884e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2589ee-612f-43d1-8426-4bea41d702de", "sighting_of_ref": "indicator--5a6aa913-af70-421c-9d20-c4bf8af3a6b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4dba1c-d8b6-42db-a498-b69324b9b905", "sighting_of_ref": "indicator--5a6aa913-af70-421c-9d20-c4bf8af3a6b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d5d66e-681b-4c5e-b1c9-4e9fa0c8563a", "sighting_of_ref": "indicator--5a6aa913-af70-421c-9d20-c4bf8af3a6b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ec0009-2b78-47f6-a30e-b87c3fe34d11", "sighting_of_ref": "indicator--d4ecf771-dc09-422d-9af6-089478fe84ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da06a18-2e25-461c-b627-cdc71db8a4af", "sighting_of_ref": "indicator--d4ecf771-dc09-422d-9af6-089478fe84ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3a2f2c-dcb3-4726-83bd-08cf183824c2", "sighting_of_ref": "indicator--d4ecf771-dc09-422d-9af6-089478fe84ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0658d4-7ddc-44b2-af0a-16504009aa5e", "sighting_of_ref": "indicator--5b19ea5b-5306-427d-9542-757daf9595e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d10638-2894-465e-84da-de37b08b6fb4", "sighting_of_ref": "indicator--5b19ea5b-5306-427d-9542-757daf9595e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1821a911-87ea-4fd8-9d16-7ce99711c41e", "sighting_of_ref": "indicator--5b19ea5b-5306-427d-9542-757daf9595e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aeda75-c11b-4a8e-b4cf-2dfaea7a6fa0", "sighting_of_ref": "indicator--fc1e5c15-6197-4feb-828e-d50a8e4eff39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b0e487-f78d-4668-84f3-7301875f5bb0", "sighting_of_ref": "indicator--fc1e5c15-6197-4feb-828e-d50a8e4eff39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd08d7b1-1b21-4e77-ac69-392a84fa85fa", "sighting_of_ref": "indicator--fc1e5c15-6197-4feb-828e-d50a8e4eff39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbcc8c5-9da8-4e45-9d0c-87578ca99570", "sighting_of_ref": "indicator--4ad6db0d-2d91-444d-a48c-8d61ba8ae162", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba36b0e-d5ac-4240-8114-4adc0490c400", "sighting_of_ref": "indicator--4ad6db0d-2d91-444d-a48c-8d61ba8ae162", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08de5347-80a8-4145-9bec-e327cdea3935", "sighting_of_ref": "indicator--4ad6db0d-2d91-444d-a48c-8d61ba8ae162", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a093c4d-c813-46af-bde8-f41398f3bfa3", "sighting_of_ref": "indicator--b4eff95a-ff98-4fc9-af59-d65208cf328d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a804d8-05c6-42cd-8266-3a3399c472e9", "sighting_of_ref": "indicator--b4eff95a-ff98-4fc9-af59-d65208cf328d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e37ebd3-8557-43fb-a0cd-fc584593c126", "sighting_of_ref": "indicator--b4eff95a-ff98-4fc9-af59-d65208cf328d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61fc6c6-b5a5-419d-894f-502ace5224db", "sighting_of_ref": "indicator--88a0fce6-74e2-4ed1-a2ae-9c674e9c1f87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806ad6b0-aca5-4c10-8463-c4abd69be0e0", "sighting_of_ref": "indicator--88a0fce6-74e2-4ed1-a2ae-9c674e9c1f87", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332815b0-c078-4575-bdbf-bbbb2937f011", "sighting_of_ref": "indicator--88a0fce6-74e2-4ed1-a2ae-9c674e9c1f87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb75d247-3a2b-4946-8eff-fabe7388bc23", "sighting_of_ref": "indicator--632f5a90-2dd4-4cf4-9738-138d263b96bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da54360f-355b-4b3d-aaf5-c87e5006f10e", "sighting_of_ref": "indicator--632f5a90-2dd4-4cf4-9738-138d263b96bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fbcdeb-4b4c-457b-a205-4bdd486f9f1f", "sighting_of_ref": "indicator--632f5a90-2dd4-4cf4-9738-138d263b96bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67774b39-4916-46b4-9473-070f5414a5a4", "sighting_of_ref": "indicator--1aac34d9-9223-4905-806d-3e0b95237594", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6796d6d4-df63-4bf8-864c-6c0ad7e572ca", "sighting_of_ref": "indicator--1aac34d9-9223-4905-806d-3e0b95237594", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7ba5a3-a1fb-4c0e-9b59-a7f588d60a10", "sighting_of_ref": "indicator--1aac34d9-9223-4905-806d-3e0b95237594", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4357ba6-a49c-4cd3-8d0f-4008663ddb9f", "sighting_of_ref": "indicator--1cd237b0-86f7-4b63-9764-8ec824422d4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9854ce34-26fc-416b-9e84-04153f929049", "sighting_of_ref": "indicator--1cd237b0-86f7-4b63-9764-8ec824422d4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020b1199-15df-470a-bed8-55b507c872d1", "sighting_of_ref": "indicator--1cd237b0-86f7-4b63-9764-8ec824422d4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5067393-c160-49bf-9647-38a0b533cde3", "sighting_of_ref": "indicator--d67f9c20-f019-4aad-9e74-fd9a162303df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c80615-4698-4707-9089-31f8497b7bb0", "sighting_of_ref": "indicator--7215139d-baad-4fee-a611-fd4503e32b6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18a12cb-f6c5-474d-9749-08bd21ea620c", "sighting_of_ref": "indicator--740a84da-a229-4a5c-8cb2-ea5c9da51019", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc818f8a-63c1-48d0-bd8b-c517b4144ddd", "sighting_of_ref": "indicator--83e0c36c-5c11-4db5-89e9-e00b1e32353a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa3a91f-b431-4e7e-95bd-fc5129243d07", "sighting_of_ref": "indicator--a13e5254-7ea8-496d-bf3e-fa52c80bfea9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d84e90f-989f-4ed7-a435-1aa575768d3c", "sighting_of_ref": "indicator--25a460ba-4c67-48a7-a7f1-89e00df1e197", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753cc7b2-1d15-496d-b88a-cfe6dc621cff", "sighting_of_ref": "indicator--97e2d569-b7c4-49ab-913b-a85099742529", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c93f28-6b98-4d1c-bbf0-437307b1a30f", "sighting_of_ref": "indicator--c872cf08-7394-401a-a659-61f8869241cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521cf3c9-9f20-4695-bae3-5160ef9ea7d2", "sighting_of_ref": "indicator--516390fb-353e-4fe2-a6b2-554614863d40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781fa1d6-10cc-4672-b5f3-b390a3ede320", "sighting_of_ref": "indicator--e9bc4f57-6445-41ad-a861-93a52ad2550e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e7fc05-cb71-4282-be57-e94078000b64", "sighting_of_ref": "indicator--72f7436f-3f22-47e4-a37e-6f54695a7335", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870390db-74c6-4593-969f-0eabc38f4091", "sighting_of_ref": "indicator--d23f5f63-8a9e-4f1e-b81f-9e7958d75366", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d73811-408c-4f2d-a5dd-13d8a864dc8e", "sighting_of_ref": "indicator--be72919d-779b-474c-aafa-99347e6e427f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37043c6-86fa-4677-9784-9865942d3f27", "sighting_of_ref": "indicator--b8c099d8-31b0-4496-92c0-cf6ed037b561", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3d9fed-d490-4d1c-a836-0e393283ee6f", "sighting_of_ref": "indicator--62b1618f-4747-42db-b581-83790c99e3e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59559118-9de4-4cc3-ba62-bfd59dcf40ff", "sighting_of_ref": "indicator--ab557d81-9b62-485a-8563-ca9d846b9bcc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbdd3c8-4d59-451c-9181-28760bd3f61a", "sighting_of_ref": "indicator--d90011cd-aa1a-4ea1-b333-22a4c3e5fef3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fbc4f6-9bee-4598-a1a3-677e6b4d66b2", "sighting_of_ref": "indicator--1f9ca5d9-89fa-4d85-ad3c-517a0386cdaf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7da01d7-7e07-4c56-9a1e-b407b59fffb4", "sighting_of_ref": "indicator--ef598f61-a3e0-4124-b72a-2432ef59be80", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cbb9f7-c225-4118-8b6c-09cdc274f6d8", "sighting_of_ref": "indicator--ddf4b206-0516-4aea-a6b3-ea679731d6ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e255de-7d92-475d-aab7-9955f897d2e8", "sighting_of_ref": "indicator--0b81e374-d038-4aa7-bbe8-804b5f2313e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d67eaa-a371-429a-9523-81852ff22c4f", "sighting_of_ref": "indicator--c1ce8b6a-83c7-4ece-ba43-815efe6ba1b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f24f03b-5df1-42ae-bb4f-6f3963f94b63", "sighting_of_ref": "indicator--b1da1a0d-9745-4709-aff1-261033023574", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa92f948-fb5f-426e-8bbc-6e8d9c66470b", "sighting_of_ref": "indicator--7497b55f-6020-48ae-a6f5-21560d66a2bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3890b7f9-e41e-4d3f-90e1-4af60e711865", "sighting_of_ref": "indicator--b82f8775-0ea5-428c-91af-f73f3214ed78", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c4a7c0-7e0a-46f4-a7d2-09dd71ff0aee", "sighting_of_ref": "indicator--8ecb35ad-ae2b-484c-b506-93902bda1118", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453cb0d7-bd88-44c5-90c1-62bca7016a13", "sighting_of_ref": "indicator--445faf43-8310-4a54-a149-e2f8be345507", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb251cbc-80fb-4e49-930a-63ced7d3b837", "sighting_of_ref": "indicator--38492ba7-2373-4c6b-a605-f8571515baac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f3e8a9-8e38-48aa-8bd1-b7195c56eb49", "sighting_of_ref": "indicator--0dfbbb7f-49ee-401e-808e-e01e1b04a0c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b15c97-4ea8-4b26-b912-480f0ccd2154", "sighting_of_ref": "indicator--b185bb71-fa3c-4cab-96da-6347dfe08a62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd58c761-3b6f-47c0-b67c-105d68fac40c", "sighting_of_ref": "indicator--13c00b30-465b-44a4-aa99-cc4cfc44d78f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748c03b4-2b44-4f69-a7fc-ef468bb5e019", "sighting_of_ref": "indicator--6ece9d65-7371-4c30-950a-07b42e27a239", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d9afb6-1fda-41f1-a419-5b9d8f7648a1", "sighting_of_ref": "indicator--fec9b21c-1d3b-4d7f-80d5-967c587cf924", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f2dc25-85e5-46a0-bc24-97bca5bd6541", "sighting_of_ref": "indicator--f40c2962-0fb1-43f7-815a-ddf45f830606", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e5ab45-488f-456b-bd85-5fbac1d0494f", "sighting_of_ref": "indicator--e5fa3e91-6db5-484c-8103-9f3268c596a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22696dcf-4202-4bb8-94d1-dcecc2abb655", "sighting_of_ref": "indicator--934c6897-8ba9-4d09-9691-3dfd7e257ac2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d876ac-915f-49bc-834e-52465889bae3", "sighting_of_ref": "indicator--728c6f8d-2530-4ed8-842d-d3a17e7e7912", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183b61ea-e72c-4f4b-bda6-4684e2354fd1", "sighting_of_ref": "indicator--53110e81-f658-482a-abd8-2404ded890ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf61dc6-08c4-4877-9bc7-637ca6e5b6ac", "sighting_of_ref": "indicator--eaeec7c2-46b3-43db-aba0-fa9980382f5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e4dca9-58dd-41c5-a831-d301a67d0fc9", "sighting_of_ref": "indicator--806c6177-3f8e-4d6c-830f-14073e784a53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8af6dd8-97f6-46e7-b7b2-fe06d619d1df", "sighting_of_ref": "indicator--edc9e12a-df14-47f3-ba7a-f43516ba705e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd549c32-3fc1-451c-9a3b-eb34b95b82c9", "sighting_of_ref": "indicator--888449de-1deb-4eb4-956f-f1573532da2d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8030de06-5126-4d24-972b-ad013cd200ee", "sighting_of_ref": "indicator--605c986a-7e9e-4b0f-926f-fb8187b2dbf7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6735baf-cc72-4ff4-8297-0f097b0e597f", "sighting_of_ref": "indicator--5f21fd86-0707-4a51-ae42-9c1245c9d23b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcbcf19-3100-4f55-ae67-34e59cbba160", "sighting_of_ref": "indicator--6bf975a8-7f91-4310-9e2a-42ae0fb6a833", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f423e1f-dd27-4895-a501-59acc2d2f3f1", "sighting_of_ref": "indicator--0bfc3b9b-b076-4dc1-977e-c76dda005d36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730d98a-f538-4f1c-9611-1e420358cd57", "sighting_of_ref": "indicator--4d2be3dc-8651-4a0d-b053-2a22e166ff30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2717310f-538f-4d5e-9a53-bde923acd421", "sighting_of_ref": "indicator--c5744817-5f53-4981-b083-c34269607fa0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7347a476-5dba-4231-81fd-652a27d4dcb2", "sighting_of_ref": "indicator--2f84b6f8-09d6-40f8-9ac7-0d01f94e701e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a9cc95-cdda-4edd-b2f9-c4469ba89ed0", "sighting_of_ref": "indicator--7f1e9aab-02fd-4162-93b7-a28ac81c218f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6bc32a-b6de-4819-8f50-d319aaf3baf9", "sighting_of_ref": "indicator--aac95a77-1855-4b30-acf3-b5aa3f42ba01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb920e5-903b-473d-9307-6cd9c4d49b08", "sighting_of_ref": "indicator--f3914ba3-3f03-42ab-9dd7-dc7a1b38dd63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69284d2b-9592-4690-a442-1320aeff224b", "sighting_of_ref": "indicator--77917a03-dcaa-448c-a798-3bd16e459428", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e6d3c2-2ccc-4518-8fff-627495e8d041", "sighting_of_ref": "indicator--d767cc9b-1580-4e0f-bb0f-a164443da143", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e63999-cb69-49fe-8d44-be2b32bfa375", "sighting_of_ref": "indicator--c1fa13e8-5d60-4d63-b6db-e8e0c123a851", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143ee7e8-8bd3-4bd2-8898-e7067f032c5a", "sighting_of_ref": "indicator--0d4ea0c1-b6ba-48bf-b321-6c39891a74a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f6d4aa-3eda-4290-ae7a-eb1746dfc556", "sighting_of_ref": "indicator--51ce6178-db90-4243-930c-7ef9fe7be626", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdc9b1f-9dd3-44a3-985a-e92125aa17d1", "sighting_of_ref": "indicator--8161383e-35bd-47cf-8051-86579c7201fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc641c85-b76c-4ae5-bba6-db51f499cb4f", "sighting_of_ref": "indicator--a06c0afb-bdf3-4d55-a812-82c4aa3f7ac7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804a1ff7-9871-4257-88a4-c791ef2d0bc9", "sighting_of_ref": "indicator--5ae43992-f98d-45d8-a063-aa7e9bd6abac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46e252e-be1f-421e-96ed-ecbc2f8dfdaf", "sighting_of_ref": "indicator--ce18232e-76a9-455f-8bea-685be52cb2ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffff147a-731c-4e64-98d9-8f118a8f8d62", "sighting_of_ref": "indicator--291590a6-ed2c-457f-980b-ab8d14a81095", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd3da17-ad49-45d2-bf1e-7f76c047bb6f", "sighting_of_ref": "indicator--e1f5c0c7-7fc9-447e-bdf4-1231e0275837", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced208e6-347e-42d7-8d3b-26b2e565fedd", "sighting_of_ref": "indicator--a6bc2585-82e4-4a87-8c53-1632e4364b5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e1935-10be-4b41-ae60-5b43213d955e", "sighting_of_ref": "indicator--56d43fa4-a0b4-4342-9beb-fbe5db91f563", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9aaab3-8d0b-48f4-9ac7-99cc31d9beb4", "sighting_of_ref": "indicator--27104555-6421-4c95-9c79-b86ccdf8c207", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dc098a-27c9-47ce-a82b-b9edab7dde76", "sighting_of_ref": "indicator--c5fdf50d-28a8-491b-b161-780c8b56df44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c69b2a4-e07b-463a-b166-2b384a5e7c6f", "sighting_of_ref": "indicator--ac41f2d2-0d79-4391-bdb8-765715b84bd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a99a323-681f-4747-a6fe-a1802c3dd143", "sighting_of_ref": "indicator--11da6188-6bf8-4582-a6c6-c8fbaaa29e6a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f0dc89-6ff9-4afe-abed-12c6a493adfc", "sighting_of_ref": "indicator--7397dbed-0881-420c-a0df-b0afd4964ea9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0618c3a2-940c-4c70-b816-4ed924e50e7b", "sighting_of_ref": "indicator--4fd8e1c3-8299-4b04-85f4-a7315d1c48a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bcb551-5595-46f6-9f5c-b364832552fa", "sighting_of_ref": "indicator--d4de0e87-18f8-4549-8391-79cc97574ce2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2003971-ba8a-47d8-b06f-7420b66bb932", "sighting_of_ref": "indicator--e681d796-924a-4021-a00b-a3769b12da84", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af11015-717e-4131-9380-acb1c76fc8b7", "sighting_of_ref": "indicator--e7142955-b554-4abb-b4ff-40c70fd7f275", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ec1885-7fa5-433f-95d7-b821f100186b", "sighting_of_ref": "indicator--a2d3800a-ce84-4105-980b-8e98889ae94d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc61dc4-88fb-4250-ad18-1d92e420de53", "sighting_of_ref": "indicator--4b5b4a2d-5a55-4767-8e23-f78307c3815e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6c03ff-ad07-423b-ad84-ba9f7beab34e", "sighting_of_ref": "indicator--dfb28111-5183-4188-a611-ee745f23d1ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280ad863-fa38-4d9f-8abb-143b97c3edf5", "sighting_of_ref": "indicator--3c21c8b1-ecd0-46c1-bdc6-323db4a1690f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0c84f1-6ef3-4a09-b191-6c41434c7ac6", "sighting_of_ref": "indicator--500a3247-6a65-4b48-a682-f7d77a720fce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95175891-f63f-40f8-b83c-52fe7724a0c1", "sighting_of_ref": "indicator--eb677df9-2e75-46bf-a9d4-b5463017db0b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b5a5df-0719-47f5-b41e-0346d3655ff8", "sighting_of_ref": "indicator--afccfcf3-2edf-458e-80f4-2736bd75abed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214127fc-10fe-4905-9dc5-5096bdc87f88", "sighting_of_ref": "indicator--9eaf6d0c-3b95-4910-8eac-d7ab45ef720a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28d53cb-2130-47d4-af47-4ad4c6a5a237", "sighting_of_ref": "indicator--639c244b-1c25-4df4-80ad-f9f1ac4d5434", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a140260-4557-498c-86b9-1878ca38406c", "sighting_of_ref": "indicator--90e13139-f462-4b87-8fb9-f6c5bcc3a48d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef08a59-e38d-4c5c-b861-655b366aa2fb", "sighting_of_ref": "indicator--839a9c81-9f20-46b4-afee-00f7f83e71c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a228a1d-df69-45a4-9952-ed09f2ffc3a6", "sighting_of_ref": "indicator--0085d0bd-f3eb-49b5-885b-5fa64450ed36", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a570dfd-8dd4-42d6-8301-373df73c597f", "sighting_of_ref": "indicator--59ca7802-d676-43f4-b1bb-60eb631050ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1e41c3-a593-45db-ab1c-cc2a3531f9b6", "sighting_of_ref": "indicator--34a60a59-6cc7-4f98-a5c8-958857af00d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df9312c-7029-4294-8a9c-e053e6712931", "sighting_of_ref": "indicator--9734e497-7c69-4c64-aceb-df2d139bc728", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196ac6c-a5a7-443d-998d-14d994937b34", "sighting_of_ref": "indicator--4ef5d613-4421-4763-8273-8e49d33fc412", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43af40f-cd8e-4e81-b352-9b2b6e213477", "sighting_of_ref": "indicator--ccd3fed0-303c-4457-8009-9dcd38b2796f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c58d881-6e82-4971-8b2e-9a48a51c224e", "sighting_of_ref": "indicator--c5b14440-5291-4bd3-b241-7ccbf648af5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac48840-263e-4e14-a8e1-6dca823fdf87", "sighting_of_ref": "indicator--6401cc8c-f211-4486-97b4-64af801337a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e95100-b0b8-4946-9ac2-aedb5eefa479", "sighting_of_ref": "indicator--6401cc8c-f211-4486-97b4-64af801337a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e11413d-0955-4ec8-8f88-2df90156d539", "sighting_of_ref": "indicator--6401cc8c-f211-4486-97b4-64af801337a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06186ce6-b932-4757-bcd4-21d1850b3926", "sighting_of_ref": "indicator--9c6fb874-f3d2-412b-8ef0-ebf2673a3427", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f925d7-7a1d-4728-a188-3b211e5fb481", "sighting_of_ref": "indicator--34fbd2eb-3bca-4673-9f36-361ed2fab505", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e08ecf-5d07-4fef-80e0-600bb4a3fd9d", "sighting_of_ref": "indicator--3e7dd1eb-6f41-487c-a80e-a36c137cc4c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743c6bc4-af32-47d5-9e42-12923c94f0bf", "sighting_of_ref": "indicator--a7f02585-8311-4d3a-a835-db27e6d10d93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadde2f0-b811-4bc9-8ef5-fc32d0e273d5", "sighting_of_ref": "indicator--ae4c3e1b-dcd6-4090-ae48-e87b66526eba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d2bacc-5e4e-451b-9389-938a496ff6bd", "sighting_of_ref": "indicator--d16a935b-1fb2-4f5a-8988-50104ae2b425", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30c8156-d0af-4025-a6d5-bcb23ee1e953", "sighting_of_ref": "indicator--f13c6f16-01d8-4aa6-ae82-cc7e70fdb7f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cfe15c-d841-4951-ad05-d8da1898630d", "sighting_of_ref": "indicator--8fc884de-19e7-4034-b33e-ed5d2ad0b81c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab121b0-714c-4a2a-9d46-33204fd5f2d5", "sighting_of_ref": "indicator--a9b3b3c1-5202-426e-a334-af40b565f113", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9deb3b-89cf-474f-9817-ed6edf395010", "sighting_of_ref": "indicator--2d551fd5-cdc9-4ee6-b52c-21a29ba562d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901d62c9-34c8-4613-a18e-a8f6a2e58cdc", "sighting_of_ref": "indicator--2c2a74d0-05e6-444d-9bbb-c317bab235a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7997f9e-3be2-433f-9414-239cc1892513", "sighting_of_ref": "indicator--fde178d6-a634-42a9-b074-53119e7036b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca47dc4-4aa7-4829-b1a6-0fb72c8bf397", "sighting_of_ref": "indicator--5ecd4d98-de97-4044-bcae-f915d1ec75ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9afb47-26ea-4539-a60e-de605547067f", "sighting_of_ref": "indicator--96e925d5-cf43-4fcb-a5f1-3faa5d80967b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae51066-4605-4e06-ba6c-ef4cd578f550", "sighting_of_ref": "indicator--db389fac-3c89-4741-b295-72ab9f9cbc6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3753285-9c18-4f3f-a333-1972561f14f3", "sighting_of_ref": "indicator--a0cc3cff-0414-4363-93bc-c79a3f6bbfea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760d5512-a49a-4797-8edb-7f4acb79d7f3", "sighting_of_ref": "indicator--664e38cc-d679-4ed5-951f-22705845421b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ba20d1-ca0f-4b2e-bd82-9f7e7010c013", "sighting_of_ref": "indicator--c2b6575f-c7f2-487b-b483-e0bb7cefeb51", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82453512-ea9e-45d1-a796-7d5efd2fe148", "sighting_of_ref": "indicator--eb878aa9-5389-4a36-b76b-8ccb4c7487f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb816c3b-e95b-49e3-b374-1e7d390d511d", "sighting_of_ref": "indicator--8edae3c9-c53d-4053-a75e-888e63eff006", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea52d3f8-9bd7-4d3f-a5ec-ad6af812c958", "sighting_of_ref": "indicator--72fef39f-755d-4bc9-a862-43a8adaf2492", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17826c66-d163-43b0-a98b-bc0ea2b3f269", "sighting_of_ref": "indicator--be264dbf-a11a-45e7-a370-6756a2769780", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ad194-f19e-4cdd-90b0-ad419670ff0a", "sighting_of_ref": "indicator--f174c404-99e7-4839-b52a-c81106813e61", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913c4257-d243-48a5-9302-9d1b82bcfe09", "sighting_of_ref": "indicator--01e0ab4d-1d89-4e3e-bc3f-2c19db0347df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1ffc6c-13fa-458d-a0dc-a4a33a876a6f", "sighting_of_ref": "indicator--7742a7c8-c263-4110-82af-d0277e089a88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e04508-dbe8-4940-8131-4f917df64d33", "sighting_of_ref": "indicator--f097e1b1-0a56-4b68-aa48-1b377c2602b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5274197-ec71-4500-adce-28c81bc6965d", "sighting_of_ref": "indicator--8661285d-f4f7-4d31-a5a8-6c909ba47db6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee3f7a9-96ca-4093-aca2-cecc344bd997", "sighting_of_ref": "indicator--28918408-ca2a-4dcf-8d6d-98c35335b483", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7f3d0b-e7a5-4d7c-ac43-a11cd9ab2267", "sighting_of_ref": "indicator--1a23f236-4f87-45a1-86fa-56aa09828302", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c7c16f-9d23-41e2-a1e3-88247fc4dc5b", "sighting_of_ref": "indicator--b48e0183-f426-48f5-b322-1ca99ebe730c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cffe5d2-4b50-4073-9f9b-c73a71415894", "sighting_of_ref": "indicator--b48e0183-f426-48f5-b322-1ca99ebe730c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248a6e01-08ae-4f57-adcf-0f526222160c", "sighting_of_ref": "indicator--9b2d6d52-d6aa-445b-b90b-634d3cfaeb88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4477c474-1fe8-4fc9-80a0-5611ad867501", "sighting_of_ref": "indicator--9b2d6d52-d6aa-445b-b90b-634d3cfaeb88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075fd858-1da7-473f-91d2-3afe752d0428", "sighting_of_ref": "indicator--9b2d6d52-d6aa-445b-b90b-634d3cfaeb88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2587ce-9af9-42db-9fe1-f5d9829a26c4", "sighting_of_ref": "indicator--95f8e015-ea48-45d7-9227-0426d0b388a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47ba895-8b80-4834-98e0-46fd81f4e59b", "sighting_of_ref": "indicator--95f8e015-ea48-45d7-9227-0426d0b388a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b3a950-6bcb-4c3d-8030-4cc5ff78d4f2", "sighting_of_ref": "indicator--95f8e015-ea48-45d7-9227-0426d0b388a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a8798b-b825-4f35-9ac1-a1fef88d364f", "sighting_of_ref": "indicator--8af8f2a3-a170-4e8c-a880-200bac131504", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c64dd3b-b3ec-4093-8627-a2df40d275c2", "sighting_of_ref": "indicator--8af8f2a3-a170-4e8c-a880-200bac131504", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f171ffc6-212b-462b-8a84-c7fa17df8489", "sighting_of_ref": "indicator--8af8f2a3-a170-4e8c-a880-200bac131504", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849f2295-ba8b-4694-a73f-a8d499a849c6", "sighting_of_ref": "indicator--fb6bfc2f-05f9-47cc-bbd5-81ca3d881063", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272a566e-db3c-4edc-b1fd-1d963693797c", "sighting_of_ref": "indicator--fb6bfc2f-05f9-47cc-bbd5-81ca3d881063", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88222973-169d-4119-9932-cb8aeb5c9404", "sighting_of_ref": "indicator--fb6bfc2f-05f9-47cc-bbd5-81ca3d881063", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d70b6b0-af8b-4204-aa13-30aa340d7be7", "sighting_of_ref": "indicator--0ebcef61-451b-4cc1-928b-b381fabc4154", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5900bb-4b20-4dae-9e42-68b9527e2cd4", "sighting_of_ref": "indicator--0ebcef61-451b-4cc1-928b-b381fabc4154", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8237cdad-097b-4f18-b14d-bd8a152f7fcf", "sighting_of_ref": "indicator--0ebcef61-451b-4cc1-928b-b381fabc4154", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acaadfd-972b-437f-a8a0-272c920f0c89", "sighting_of_ref": "indicator--8f539fe5-e698-4c01-a112-eeb45cb88bea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1bbd65-c6c5-4930-a614-f29db2711588", "sighting_of_ref": "indicator--fecb7e08-3d05-462e-91c8-958a8f2272e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f462a531-0e85-4d5c-ac54-9e33da93fa84", "sighting_of_ref": "indicator--91754b55-6fc9-46ad-9f59-13981adc22fd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec952e40-ee5f-4115-be98-d358f86cd651", "sighting_of_ref": "indicator--3a195f06-ec11-4ba3-b0c3-48021498e1e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f583be-9f7a-41f3-b614-b1cf71399dd5", "sighting_of_ref": "indicator--3a195f06-ec11-4ba3-b0c3-48021498e1e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbfd5a0-147f-4355-874c-e8761e1bd6ce", "sighting_of_ref": "indicator--42c9df30-da82-4e4a-b418-23ed1e70c0cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bd1da9-589c-4408-b8bf-605ff01ed193", "sighting_of_ref": "indicator--485f59cc-9e48-48db-b9bb-aed9441377d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d078f7fc-4e2e-44c6-94ac-1dc371fbbb4f", "sighting_of_ref": "indicator--485f59cc-9e48-48db-b9bb-aed9441377d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95b493b-07e2-4a9b-be34-cf96a5271c0b", "sighting_of_ref": "indicator--485f59cc-9e48-48db-b9bb-aed9441377d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7c724b-4774-47a4-8c55-a8037935ae82", "sighting_of_ref": "indicator--d4a27c09-29d7-480d-8379-000587b03e27", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f30c6d2-26bd-488e-a95f-e6f4052d15ed", "sighting_of_ref": "indicator--d4a27c09-29d7-480d-8379-000587b03e27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2f603a-2895-4c8e-a3c1-2d46bd67a79b", "sighting_of_ref": "indicator--6588a817-9067-416e-981e-acbc43db8e1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb3747c-b889-4266-b4bf-54336008b198", "sighting_of_ref": "indicator--a7528d50-287e-4bc2-85f9-e29f97f4f456", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6006b5cc-ec6e-471c-b08b-104c30e9973c", "sighting_of_ref": "indicator--a7528d50-287e-4bc2-85f9-e29f97f4f456", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6a48b4-6f22-4469-a09d-da3d138458c2", "sighting_of_ref": "indicator--a7528d50-287e-4bc2-85f9-e29f97f4f456", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bb325e-aece-4650-99e9-c168574e2225", "sighting_of_ref": "indicator--b149f6c9-0146-4350-9cce-857f6079f137", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e05804-560e-4a8e-8310-a55c57b30c6c", "sighting_of_ref": "indicator--e803c5c2-9c92-4318-9c7f-b4cd0c6a1fb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea910a7b-4ac1-4b6d-b141-6ca660f6d05f", "sighting_of_ref": "indicator--e803c5c2-9c92-4318-9c7f-b4cd0c6a1fb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566a7474-8a71-47d5-a66b-b3136fa0a08a", "sighting_of_ref": "indicator--e803c5c2-9c92-4318-9c7f-b4cd0c6a1fb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476e2ed8-b83f-42d9-9df3-0871151f0110", "sighting_of_ref": "indicator--3df6226c-68d3-46e9-944b-9dfaf96d7120", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d9cddd-f79f-4555-bc2c-896f4f90e818", "sighting_of_ref": "indicator--3df6226c-68d3-46e9-944b-9dfaf96d7120", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a705e505-9ba3-419c-8bbc-1684355bb05d", "sighting_of_ref": "indicator--3df6226c-68d3-46e9-944b-9dfaf96d7120", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aafef43-4e1e-41b8-b314-12c5f53ee387", "sighting_of_ref": "indicator--d01af842-aedf-4278-bb9c-ad388b27bd6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54202cf5-f305-4d8a-a81f-abc76ea4d3a0", "sighting_of_ref": "indicator--29f2865d-46a5-470c-99bd-fd0214382702", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bc4ed3-eee1-46ab-815d-79e3d306742f", "sighting_of_ref": "indicator--42381f12-f8c6-4d9d-b1b8-6d6943e9c81c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a887d5cb-e269-430a-9a55-5726472dfd31", "sighting_of_ref": "indicator--42381f12-f8c6-4d9d-b1b8-6d6943e9c81c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1d7863-000e-422a-bacf-7bb7432406f0", "sighting_of_ref": "indicator--42381f12-f8c6-4d9d-b1b8-6d6943e9c81c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daced5f-8128-4ef7-94de-b77f22668431", "sighting_of_ref": "indicator--879e395a-1276-4c6b-871a-636d891c4849", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69073f69-4e24-4e21-b2e4-78541c902a04", "sighting_of_ref": "indicator--adaaf75e-227c-4a93-863f-f247f604940e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369d08c7-39ba-4393-a1ba-0a464117e0f2", "sighting_of_ref": "indicator--6b7fe325-18bf-4128-88ff-997592f96b0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea97bd3b-fc7e-4889-83a8-221d311bd316", "sighting_of_ref": "indicator--6b7fe325-18bf-4128-88ff-997592f96b0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f40c97-d2ed-43c6-88f8-caedbe9c7706", "sighting_of_ref": "indicator--6b7fe325-18bf-4128-88ff-997592f96b0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d771cd5d-12aa-4722-adb8-1ca6b2640630", "sighting_of_ref": "indicator--3ed8a46a-6ed7-4de0-959f-9b4ef37540da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd8d62-5474-4c4e-8e36-1a7c13577557", "sighting_of_ref": "indicator--3ed8a46a-6ed7-4de0-959f-9b4ef37540da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a92221a-5618-43ed-8358-7973b6f10bef", "sighting_of_ref": "indicator--3ed8a46a-6ed7-4de0-959f-9b4ef37540da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0a2043-89ad-47e9-8599-799936ba2ae9", "sighting_of_ref": "indicator--ad429141-244e-48e6-a27b-f22a46acd095", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5e933c-70a3-4122-8f31-00dbbe1bae12", "sighting_of_ref": "indicator--ad429141-244e-48e6-a27b-f22a46acd095", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a973ec6e-6a1c-446e-8e84-4ed58d2e8a29", "sighting_of_ref": "indicator--ad429141-244e-48e6-a27b-f22a46acd095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ddc7ba-ff19-4891-bcf4-3d86405b21d7", "sighting_of_ref": "indicator--484a45f2-c95b-4057-8c82-dbfc7f7afe31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7981a520-6917-4f61-a1b2-ebbf568ce81a", "sighting_of_ref": "indicator--50340a85-17a4-4948-9d3b-c694a414b920", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae1c7a3-b8cb-4fb3-8b33-e118d80f03ff", "sighting_of_ref": "indicator--50340a85-17a4-4948-9d3b-c694a414b920", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5909110-698d-4eb5-90d2-fe4a1745e739", "sighting_of_ref": "indicator--50340a85-17a4-4948-9d3b-c694a414b920", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f3456a-c4ac-466f-bc30-28e6570bcbd0", "sighting_of_ref": "indicator--0191e756-f81e-4dc8-ab21-ff1acbd7c40c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0589365-4a2c-4c5e-951d-11c0edf10035", "sighting_of_ref": "indicator--f0020cd5-e551-4fbe-9523-e7d4a8225d15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bbe98e-bcce-482f-acb4-488c3120ee5c", "sighting_of_ref": "indicator--f0020cd5-e551-4fbe-9523-e7d4a8225d15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa773605-8ca4-4515-93dd-e1026fdcba4f", "sighting_of_ref": "indicator--f0020cd5-e551-4fbe-9523-e7d4a8225d15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff21e7e7-83e8-4edf-8c52-b976fc4bf1f1", "sighting_of_ref": "indicator--f888d7ca-d7b3-4c34-a7d1-6995fbd52871", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ea6cb2-4423-4c2a-8d9a-39931640d3c8", "sighting_of_ref": "indicator--e3583bca-acb0-412c-a913-7204bbfda022", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6061db8-02eb-4deb-82ac-13fc19ecf923", "sighting_of_ref": "indicator--c6477c2d-d1d0-4904-bb6d-281dd2e96567", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe444c3-a0c6-4a6b-816f-e682e94efeaa", "sighting_of_ref": "indicator--2616c2d0-e270-4b09-8158-23ce207d2a0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328a91b4-df42-4f68-87ec-392640816c80", "sighting_of_ref": "indicator--778dbf82-6e8e-4b7d-9c2d-4ec24b90959d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e39d18f-4c40-4cd5-b209-2bf4cfa83848", "sighting_of_ref": "indicator--8dc9edab-7d64-45a1-89a8-9dd577ba066d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005654e0-2efe-4ec3-8509-705902618091", "sighting_of_ref": "indicator--41a952e4-f4b0-436b-b664-50dd3541b9f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c3904e-5794-48ad-9061-b0eb729a795c", "sighting_of_ref": "indicator--1bc4a6b2-c0ad-4f8e-add7-a15f3eea9ec3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8576367-fcca-44e9-a767-53eb2e376a21", "sighting_of_ref": "indicator--d98a3b06-a031-4526-a94d-0e65b9e270cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e02b688-c587-45b8-9b3c-a7715aa6f763", "sighting_of_ref": "indicator--a35dd163-90a8-4c90-af1b-1a6598fcaae7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f5bd20-1a23-40d8-abc0-d9576b37b9ea", "sighting_of_ref": "indicator--5f3a25e3-0e64-4b01-8f8d-4804b1fa5e21", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7219e4-e515-4983-85c0-bf0f0f91092e", "sighting_of_ref": "indicator--73cd50ab-3ea2-42f9-8cc2-03908402bce1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9439c784-a0a8-4eae-b24d-e97c831eba9f", "sighting_of_ref": "indicator--c58e04d1-a866-4c06-8460-20fc62fe66f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54580f-4611-4c1e-b44c-f8670ff9029c", "sighting_of_ref": "indicator--eaa60a4c-2ccc-4aad-8381-e7ce2b377eb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797640e4-38b2-4016-94d2-ed12873565ef", "sighting_of_ref": "indicator--3b6ff36a-14e1-4182-bf4d-789de0a576b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c250db8f-6dec-4f2c-bae6-2eed36e17f1c", "sighting_of_ref": "indicator--7d8e09a5-3355-40bd-a5f4-79fe1f0143f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a46aac-73e3-464f-b2ae-3fafc73f8111", "sighting_of_ref": "indicator--cd6a81fc-a9a9-40c9-b6a9-bfb267ff8f14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68606251-2186-40cf-baf0-958718f33468", "sighting_of_ref": "indicator--09b20921-bcea-4136-8116-84be0e4c7666", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7250f0-5bd6-4b43-b5c6-f9d0d120bb0f", "sighting_of_ref": "indicator--a3b1abd4-9b42-40e5-8f56-b22557fcda65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaddf79-9e1e-4f41-ae14-a2380a4b71d8", "sighting_of_ref": "indicator--d06d2b87-8e14-420b-9c85-21cbd1d9dd40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51038c9-e818-4c51-a324-3f9da5a37ce8", "sighting_of_ref": "indicator--59d63b91-4cdb-403a-be37-d3fa57344b95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3f0316-b691-4a0f-bc5b-0331c1989be8", "sighting_of_ref": "indicator--b2bb4078-7d8b-4a56-a7a6-b155b0bea0c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a433f73c-bb7e-4570-a3c2-f190fde101e6", "sighting_of_ref": "indicator--8b23bb91-b1ea-4282-b430-2e28642d7323", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199bed64-dc6e-4d36-adce-2bdab8efcea3", "sighting_of_ref": "indicator--faf2bc74-5420-48bd-b2ca-36ebc49916be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfe76e0-c229-46d9-8f65-6e78a59a6c41", "sighting_of_ref": "indicator--47e4fcbc-b708-4113-978c-b71d5071f48e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c3a37b-272b-488b-b861-3cb76d1947a8", "sighting_of_ref": "indicator--68fc6866-8650-4403-bbf1-ab0658d5c859", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7cd95f-1d71-4fab-a834-9a9a2b84a545", "sighting_of_ref": "indicator--d702d521-74cc-49b5-9f29-0ea8678e9c00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f011759b-9be7-4832-8cfb-f93e701b0ae9", "sighting_of_ref": "indicator--6fc79ba5-6bd3-4721-8aed-257d05ccac7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5ea573-ab3f-4c8a-887d-fd190e907af0", "sighting_of_ref": "indicator--27266bd9-ce7a-49d4-99c0-99b18b242bb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada44ee6-e216-4833-b8ae-f79c7ee85f1d", "sighting_of_ref": "indicator--d10e1f0d-7b10-4d52-8ece-25a68f033c6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac75e84a-87ea-4755-b2ef-fc5bf32d19fe", "sighting_of_ref": "indicator--7cb25f2e-1d9e-4e68-9dbb-e1f2219002f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a441936-df1d-4f36-a0cf-db46f23bfacf", "sighting_of_ref": "indicator--b5e20c0d-f365-4b90-a9e3-0f69660af2a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f24ea6-d5e9-4574-8bcf-d96af4ca6872", "sighting_of_ref": "indicator--353be5ee-a115-4b76-b57b-38457fe1d874", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18530a8-b478-4acc-b43e-ffd0dfd7350e", "sighting_of_ref": "indicator--8f35aa98-bf25-4865-8ee6-8255e681543f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e9d2cd-c1fc-404f-8c39-56fb1ae6d3df", "sighting_of_ref": "indicator--42ad9fc4-3e70-4585-ad55-315533a0ff17", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e93f5ed-9033-4e33-ba6d-03b3f56a454a", "sighting_of_ref": "indicator--627094f0-a9c9-4686-856c-94d959171bc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22851197-4b9d-4ac0-b941-f57b4d03f6a9", "sighting_of_ref": "indicator--a7e4abf3-c70a-42bd-896b-c041df25ee31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee6cfac-4ed2-45b9-a37e-9c55be32af11", "sighting_of_ref": "indicator--22641c61-fe53-4a3c-990d-5979a6d8a0a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841edc8c-b509-4e98-8ca1-406d1fcc18aa", "sighting_of_ref": "indicator--e12d73c1-e43f-4928-ae3d-5e6acbabf6da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f488c817-0498-47d9-bd36-e0427f1e16b0", "sighting_of_ref": "indicator--78d30ee7-18f3-409b-9c55-ad82d6eec0fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0d2cbb-3933-466b-883d-034f85171b99", "sighting_of_ref": "indicator--4f404e9f-6f4a-48d8-a20f-238a1a77af7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9353b52-10ec-482b-93ca-6ec697022db4", "sighting_of_ref": "indicator--4f404e9f-6f4a-48d8-a20f-238a1a77af7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95981d3e-6ed3-4bc3-a836-a102019d0fe1", "sighting_of_ref": "indicator--347b92f4-043d-42cd-8641-fb0bd7f41c30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95d95e6-5431-4083-adbc-b353d041e6a9", "sighting_of_ref": "indicator--53cdc769-b8e1-4105-ae66-db13f3e77699", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8babee99-369a-41b8-b5d7-085de6d486ae", "sighting_of_ref": "indicator--971f93d8-2ac9-4eb4-8e13-89b05249c523", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc0f9c1-b10d-443d-9e47-1a7ab3fc81c2", "sighting_of_ref": "indicator--bc08ee8f-c71c-493f-bb7a-9e4a893a4ead", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8951b824-0cc5-42b7-8dbf-ea2ddd0b739e", "sighting_of_ref": "indicator--bc08ee8f-c71c-493f-bb7a-9e4a893a4ead", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4471e9eb-ba44-4b53-bb39-5d99403651e9", "sighting_of_ref": "indicator--bc08ee8f-c71c-493f-bb7a-9e4a893a4ead", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef763af-93b9-4fde-9277-bb88e509e959", "sighting_of_ref": "indicator--c2e7c5c6-8e37-4a2d-8fc6-61ffbc1767b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9507ea81-6ea4-4503-944b-dc0915a76724", "sighting_of_ref": "indicator--c2e7c5c6-8e37-4a2d-8fc6-61ffbc1767b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d43b5c-50b2-4ad1-9577-f7776e843dd3", "sighting_of_ref": "indicator--c2e7c5c6-8e37-4a2d-8fc6-61ffbc1767b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb023407-4c2a-4173-8cd0-3aa697f4c4fc", "sighting_of_ref": "indicator--a58c9278-55dd-4e4a-93b8-1a85be2527a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b47512-fbfe-4e65-a0da-7eebb38391fb", "sighting_of_ref": "indicator--a58c9278-55dd-4e4a-93b8-1a85be2527a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc362270-3256-4ff5-ad21-489563123a56", "sighting_of_ref": "indicator--a58c9278-55dd-4e4a-93b8-1a85be2527a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cb146e-aae4-4e85-ab20-a542961d9a9b", "sighting_of_ref": "indicator--6db45784-6885-41c3-958a-5ce2cb648c46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832db1ce-4675-4a35-af59-84188fbd982d", "sighting_of_ref": "indicator--6db45784-6885-41c3-958a-5ce2cb648c46", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c3721-1fac-4557-9ba8-9890d1ca00b6", "sighting_of_ref": "indicator--6db45784-6885-41c3-958a-5ce2cb648c46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b76a1e-0c00-4cb1-90f5-8b205317ce05", "sighting_of_ref": "indicator--c61de29b-e8ed-4288-a9bf-368affe145af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171c3f81-2866-46f2-9ac1-b2aee7dedff5", "sighting_of_ref": "indicator--c61de29b-e8ed-4288-a9bf-368affe145af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1786583e-5ef5-46db-bf09-cafdda98bdaa", "sighting_of_ref": "indicator--c61de29b-e8ed-4288-a9bf-368affe145af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ae2024-1d77-4c41-b3e4-b9e78f75a118", "sighting_of_ref": "indicator--8d182a6a-8989-4d98-841d-0ee9705647ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03283c69-8c10-4fe6-9d57-2e03b7e8147b", "sighting_of_ref": "indicator--8d182a6a-8989-4d98-841d-0ee9705647ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3704dd-9475-4960-b263-e7da26b3e817", "sighting_of_ref": "indicator--8d182a6a-8989-4d98-841d-0ee9705647ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2c9a15-71cc-48ab-a6b7-24c335d8516d", "sighting_of_ref": "indicator--ecdaaafa-4a9c-44fb-91e2-ead36e282d19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1fe92c-38f8-4ed0-bacc-8448163e6457", "sighting_of_ref": "indicator--ecdaaafa-4a9c-44fb-91e2-ead36e282d19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff04f5f7-7703-4170-8184-b1f0a8fafd09", "sighting_of_ref": "indicator--ecdaaafa-4a9c-44fb-91e2-ead36e282d19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451718d1-7ead-4fe1-bfc9-f68faa63d8ed", "sighting_of_ref": "indicator--972714a9-ba3d-46ba-a34e-79234a33d2f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c44afc-04b6-4568-99ac-b11658a0c5a3", "sighting_of_ref": "indicator--972714a9-ba3d-46ba-a34e-79234a33d2f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51fa2e6-feea-4e12-9efa-ef1a5bb0ed2a", "sighting_of_ref": "indicator--972714a9-ba3d-46ba-a34e-79234a33d2f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d88d0a-410a-44d3-a28d-af6009feda5f", "sighting_of_ref": "indicator--f03ede32-3f06-4f54-a729-41c6581a9b86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a9192-2deb-4fac-985a-d0092dd62032", "sighting_of_ref": "indicator--f03ede32-3f06-4f54-a729-41c6581a9b86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f778966d-dc8e-460a-ab71-24f875716134", "sighting_of_ref": "indicator--f03ede32-3f06-4f54-a729-41c6581a9b86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbf45dd-6793-4913-b1bf-d5850f37f4b2", "sighting_of_ref": "indicator--bebfee6c-3b2c-4b62-913d-20366ed56db0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2b12ad-d8aa-4f22-bfb2-f2aef59fa5ba", "sighting_of_ref": "indicator--bebfee6c-3b2c-4b62-913d-20366ed56db0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9e9487-f5f1-4a98-aa0a-717a95dbbec5", "sighting_of_ref": "indicator--bebfee6c-3b2c-4b62-913d-20366ed56db0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097f929d-9e49-403b-8507-8e82cfbf4d4b", "sighting_of_ref": "indicator--3f844b71-51b5-4b3d-ab12-390f5fd6437d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f35585-4bd9-438d-87f6-ae930fa4e4e2", "sighting_of_ref": "indicator--3f844b71-51b5-4b3d-ab12-390f5fd6437d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707c37d6-f5c5-4d3e-9337-8da0c61c39dd", "sighting_of_ref": "indicator--3f844b71-51b5-4b3d-ab12-390f5fd6437d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f699e9-97d7-4c6d-9a6f-949cc9d4b609", "sighting_of_ref": "indicator--9b205479-cdac-4ccb-8a4c-df0d969f2d72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50a6e62-907c-4974-bcbc-23d6bd7fc1c0", "sighting_of_ref": "indicator--9b205479-cdac-4ccb-8a4c-df0d969f2d72", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4d587f-dca6-4727-8f4d-789f7ffc6b8e", "sighting_of_ref": "indicator--9b205479-cdac-4ccb-8a4c-df0d969f2d72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a1b3a4-9644-4263-95be-4ed62fbab500", "sighting_of_ref": "indicator--eb98d838-6afa-4976-beba-565cdbab7d9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b4ff98-38d8-4a6f-a136-6f457aec1089", "sighting_of_ref": "indicator--eb98d838-6afa-4976-beba-565cdbab7d9d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457722e1-6977-4908-9981-e00331476dc1", "sighting_of_ref": "indicator--eb98d838-6afa-4976-beba-565cdbab7d9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a919c5-a4ec-4a40-b9e4-d319ac3529ff", "sighting_of_ref": "indicator--211c4a8d-8c52-4af7-ad05-e7716c556bb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1403c94-dc87-4144-ab64-9ffded4dc706", "sighting_of_ref": "indicator--211c4a8d-8c52-4af7-ad05-e7716c556bb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f729fb76-42c5-4049-8ad7-b3a08da86280", "sighting_of_ref": "indicator--211c4a8d-8c52-4af7-ad05-e7716c556bb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48aa46-9b05-42c6-9d2f-bf6d5c792ea7", "sighting_of_ref": "indicator--285f8d55-0b79-4865-bf1c-c59126ed3c8b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d017a9-aa26-4acb-91bd-5fb37d1032ff", "sighting_of_ref": "indicator--d6203527-ce9e-4b37-915c-fc40ef13cb8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32d13c5-bc1f-4ee4-8461-b84f5fc84227", "sighting_of_ref": "indicator--7c3b4dce-8032-400f-bb86-3eef5548042c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec28be18-837b-48c7-9b7f-fb957a51ceee", "sighting_of_ref": "indicator--7af4163c-5009-47de-a7c4-606de474ea81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7433e61d-c17f-4e41-aac9-866a3219f663", "sighting_of_ref": "indicator--7af4163c-5009-47de-a7c4-606de474ea81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5a5114-75e8-44b9-8e45-7e7ce52fe21f", "sighting_of_ref": "indicator--c7785361-61ab-474c-a762-70bbd0ea94cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8e51df-2708-4155-a872-ba8fdcf0c621", "sighting_of_ref": "indicator--c7785361-61ab-474c-a762-70bbd0ea94cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0fb64c-4b77-44f5-8b6a-18394639e985", "sighting_of_ref": "indicator--0b90f69d-2246-4f10-9f6f-8b314208faeb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa29bb48-3fb8-4bcc-b943-6dcf9b4b9e3a", "sighting_of_ref": "indicator--9484c65b-364e-4461-9798-fe1cead50d83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e556153-4101-4242-b88b-b91438f30481", "sighting_of_ref": "indicator--9484c65b-364e-4461-9798-fe1cead50d83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f1f570-3ce7-4d41-b782-83dfa20d3d32", "sighting_of_ref": "indicator--9484c65b-364e-4461-9798-fe1cead50d83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33485a7d-3b61-4db3-82a6-c8575c8aadf8", "sighting_of_ref": "indicator--4ffbdac9-b587-45dd-aaa8-baa9b16da799", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb4f57f-673c-47a0-80c9-904a86a173de", "sighting_of_ref": "indicator--4ffbdac9-b587-45dd-aaa8-baa9b16da799", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d32c7-c479-44d7-a3d0-6378fb0449ab", "sighting_of_ref": "indicator--4ffbdac9-b587-45dd-aaa8-baa9b16da799", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5ffe3a-f923-4cf7-b857-baaf89ea5eb6", "sighting_of_ref": "indicator--4186da19-c340-451b-b33c-750d9daa4e15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ba718e-89d8-4371-a454-e9b99aed15d2", "sighting_of_ref": "indicator--4186da19-c340-451b-b33c-750d9daa4e15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc6e64-775a-49bc-84e7-c02d48861f24", "sighting_of_ref": "indicator--62e573bb-b07a-4d98-ad45-fa8eda065b1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6ac635-4bbe-46bf-a87f-bc1f6f69223e", "sighting_of_ref": "indicator--d3874c54-260d-4557-8b89-96f2eb22ed7a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03a388f-4620-4a1a-9997-5fcd41648b37", "sighting_of_ref": "indicator--a5d3758d-530b-42e7-90d5-7435bee7bfe1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3255fce-fa84-4495-892b-e2c30de811aa", "sighting_of_ref": "indicator--9171b9b2-0928-4b25-89d8-2f4fccee9942", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c68ebde-3c2d-4097-b636-0b2848bc30eb", "sighting_of_ref": "indicator--361a25cb-6c14-44f2-a221-7da9c7e68acd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39f4100-99c7-4f72-aabc-d445e6f0354c", "sighting_of_ref": "indicator--d7f5f9ea-30e8-46ac-b144-1bcf0b89e685", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237f4afe-3cdc-448b-b07e-d3663cf3d1ae", "sighting_of_ref": "indicator--d7f5f9ea-30e8-46ac-b144-1bcf0b89e685", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce513fd9-9523-4640-a932-8247bed082cb", "sighting_of_ref": "indicator--d7f5f9ea-30e8-46ac-b144-1bcf0b89e685", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c091b814-6495-4364-a141-7b32007514ed", "sighting_of_ref": "indicator--70ea16cf-b850-490c-b10b-80519a981641", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e69a43-32f9-4c73-869b-07c90dedf01a", "sighting_of_ref": "indicator--19f614e7-8c32-41fb-a86d-ce08f44b3ef6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a597719f-2dc5-4898-9f7d-5839e81000d5", "sighting_of_ref": "indicator--4e785aa7-cb2c-4869-a792-876c26f8a513", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b50b4a-956d-46ed-827b-480993c0f8f7", "sighting_of_ref": "indicator--799f4799-432b-473b-b665-49f9bfe79a65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99106a93-acba-4be2-8316-ec85e49360a1", "sighting_of_ref": "indicator--8ecb4980-78e3-46ac-8dd7-40640adeb819", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7a677a-33f9-48d7-ad72-5e3bb7bc9a67", "sighting_of_ref": "indicator--70e199c8-85d3-4ac0-bb92-09565a04517e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f24951-d4c3-4b3d-9007-1b451390a6a9", "sighting_of_ref": "indicator--70e199c8-85d3-4ac0-bb92-09565a04517e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b912916a-e9d2-4129-a2f9-5e9053bb0894", "sighting_of_ref": "indicator--58fa13a4-aaca-4f96-bc28-453470d2174d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a4e002-7320-4ddd-a7ca-e064d732ffa1", "sighting_of_ref": "indicator--f86e028e-3f29-47a3-ad3b-fc25eb144483", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3f38bd-94b9-4db9-95f9-b2252712f0b6", "sighting_of_ref": "indicator--f86e028e-3f29-47a3-ad3b-fc25eb144483", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c36fdda-8f67-4ff9-80a2-f835cfd9c147", "sighting_of_ref": "indicator--b3227fd7-934f-458f-a264-c79ec1b93d7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c4335f-42b3-4a1e-89eb-706fbc3981e8", "sighting_of_ref": "indicator--24643c69-df96-4850-be64-20f3a357fc5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c741e-0fe3-4b0c-b21b-3b1b373836cc", "sighting_of_ref": "indicator--24643c69-df96-4850-be64-20f3a357fc5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565f48ef-4d27-481d-8945-01004cb65fc8", "sighting_of_ref": "indicator--e3fe2bcc-433d-4efa-9f56-708d832aba67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3cafb9-34ae-47b7-af5a-f72cc215ff6f", "sighting_of_ref": "indicator--7192b906-9df8-461c-83e4-81b3d948ec5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adc4bbc-fa95-4779-a188-7cc1f386dbbc", "sighting_of_ref": "indicator--7192b906-9df8-461c-83e4-81b3d948ec5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67751ce-94c5-4ae2-bbab-b373d891d471", "sighting_of_ref": "indicator--09940a68-8e00-4c4e-bbef-55f246dbb35b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc4c19-eb2c-4f15-a70f-cabd877c43d9", "sighting_of_ref": "indicator--4fef7dd5-c47b-4487-8a0e-adc16b8e5771", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4d7f73-21e6-4de3-a389-5937001a71e7", "sighting_of_ref": "indicator--da258ede-014f-4c16-90e0-58fdb2ca378e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdf6953-d9d9-4ddb-a5e8-1b540670e59e", "sighting_of_ref": "indicator--da258ede-014f-4c16-90e0-58fdb2ca378e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5f40ac-e514-4c0a-8ba7-fa4b7924993b", "sighting_of_ref": "indicator--7388b734-0fbb-4915-80f8-b54e3d2821a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032bf4f0-0f65-4257-92d4-1817420571ac", "sighting_of_ref": "indicator--18d3a842-38a3-4be4-95a8-6376425140e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea466e7-66a5-4989-9ae9-35d8addb7f35", "sighting_of_ref": "indicator--18d3a842-38a3-4be4-95a8-6376425140e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc2bc47-53eb-424c-aae3-befb1819c77d", "sighting_of_ref": "indicator--912f2179-43a9-47c0-afc4-95107c68ab2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b47b849-aa33-4317-a3bf-becb71669a6d", "sighting_of_ref": "indicator--31008bd6-169d-48df-a09b-fa00f5036bbb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ae5fd-e1d5-423c-9853-156beb3a011a", "sighting_of_ref": "indicator--31008bd6-169d-48df-a09b-fa00f5036bbb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76f7249-8292-43f5-9b2a-02357dc0d9e4", "sighting_of_ref": "indicator--1ed2047d-ae20-486e-8936-43a05fe7e0f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c4e19-52f1-4ee2-9e0d-21c3ca7543c7", "sighting_of_ref": "indicator--e5702ace-6d0d-4c0b-afb0-a81657eef31e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f903a0fe-7b6e-4f4d-85c5-58b4e951578c", "sighting_of_ref": "indicator--e5702ace-6d0d-4c0b-afb0-a81657eef31e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f19b722-e2e1-48d7-aa96-afdaf71fa8ad", "sighting_of_ref": "indicator--c4d19f67-df68-42a7-b4e5-fb283301fed8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219d0a07-0cd2-4fb9-a257-f91f4e5b52e5", "sighting_of_ref": "indicator--7bd462ac-d9de-48ef-bbe8-7dd25499ce8b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e61c10a-ea5d-42e7-8e82-2a16767d8b62", "sighting_of_ref": "indicator--7bd462ac-d9de-48ef-bbe8-7dd25499ce8b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063a46b8-d53f-40da-9bc6-89e71a156f83", "sighting_of_ref": "indicator--435580ae-5e62-420c-ad58-8a1a5383a4e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127df206-b94d-4a33-818f-97bfc6313ac6", "sighting_of_ref": "indicator--54189284-9601-4106-8e4b-2a67442f634e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517a241a-0f52-44cd-bcc2-a562bff1777e", "sighting_of_ref": "indicator--54189284-9601-4106-8e4b-2a67442f634e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51553ec-e27c-4b95-8768-bc73a639bf05", "sighting_of_ref": "indicator--652bfa02-b1f6-4165-b7dd-29ca4683164b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddba04d4-d1ed-4a2e-bbac-dac021532b66", "sighting_of_ref": "indicator--4d97ce44-53c9-4805-804f-23a79b3c0c59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4211810-5ff3-41d8-a750-357bda6f9989", "sighting_of_ref": "indicator--f4bdfca7-6f2d-475c-8caf-3ec1cde47049", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a92656-27b6-4888-98a8-f5e16b27e4e5", "sighting_of_ref": "indicator--f4bdfca7-6f2d-475c-8caf-3ec1cde47049", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5e115b-a9da-4bce-a81b-abc77f2ad5f9", "sighting_of_ref": "indicator--f6be398d-6e21-4061-b0a1-a3afedabd10b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a432a2b-004c-493d-aecd-5a28087d67ad", "sighting_of_ref": "indicator--3d413385-5a59-42af-9a13-64a5bd1af3ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a28bf-ba52-4c8d-9370-d0c0fbeba816", "sighting_of_ref": "indicator--3d413385-5a59-42af-9a13-64a5bd1af3ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0462c0-3fa6-43d3-981c-c4b90069687e", "sighting_of_ref": "indicator--e9fbd62c-5846-4f4c-817b-c8bcb2872a5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae7c772-c84b-4506-958c-fd9a12258579", "sighting_of_ref": "indicator--d8ad5145-d63b-493d-872d-395f4f1bb0e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b62d3aa-b9c5-42dc-9bed-cb695695b3c5", "sighting_of_ref": "indicator--ea8b0102-7904-40eb-bff4-2a264746549e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8b5cad-4c37-4de3-a087-869b54abafcb", "sighting_of_ref": "indicator--6a134863-de1a-4b06-8b0e-065ba02367c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0130ce-09d7-4d21-b1c1-dea3ef085553", "sighting_of_ref": "indicator--60d41651-009e-415f-b260-13ba60d258a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c441f679-6bf1-476a-9674-3d4436434c28", "sighting_of_ref": "indicator--60d41651-009e-415f-b260-13ba60d258a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d7dc14-e596-45bc-abdd-a7649adbeb5f", "sighting_of_ref": "indicator--d3a05cf5-3eae-4ff9-8332-8233e76efcf3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b6f031-b79a-4ed8-bd37-2dd2ba3d47af", "sighting_of_ref": "indicator--3fcb03ba-2425-4461-a71a-96c95d566f5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f90e909-ac48-4b94-89c5-2d6f357c8469", "sighting_of_ref": "indicator--3fcb03ba-2425-4461-a71a-96c95d566f5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357ade1e-8e1d-42eb-8afb-e7d935d6a92c", "sighting_of_ref": "indicator--561efbe2-4fb6-423f-a4b7-f746b538c81b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfb60e4-4fdb-4f3a-9b72-693cfb9500c4", "sighting_of_ref": "indicator--c4a4c788-496e-4603-9bb1-10f42bbadb74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f21bd77-b1e6-45e4-a1c5-d093c01ed451", "sighting_of_ref": "indicator--c4a4c788-496e-4603-9bb1-10f42bbadb74", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f074772-c828-4d8a-a7d0-a00426116f24", "sighting_of_ref": "indicator--c8c8f2eb-3ba6-4987-8434-deeb5be84a8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e917007e-b6df-40fe-818d-a42095e6048a", "sighting_of_ref": "indicator--70e5986a-28db-4910-b200-e3f5dcebf572", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a90aa1c-716b-482e-8c4d-4778f5eb9ffc", "sighting_of_ref": "indicator--70e5986a-28db-4910-b200-e3f5dcebf572", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe76808-58a8-470f-96ab-ab18021f488d", "sighting_of_ref": "indicator--8b8409f9-c415-490b-9646-e3c7a70a3e52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea62406b-e0ad-4c7e-8be8-fbbc69e11b66", "sighting_of_ref": "indicator--5c0a2e70-a1ef-4e7a-bba4-915eed74de39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce6ce55-1033-4869-b2ed-27fc350bff5e", "sighting_of_ref": "indicator--5c0a2e70-a1ef-4e7a-bba4-915eed74de39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243cfa66-ed4e-439f-a37e-93b64af29f4b", "sighting_of_ref": "indicator--5ab584cd-c0f0-42d9-9172-e8140eca95c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c15a89c-67f8-4a47-96e2-87204bc9f2d4", "sighting_of_ref": "indicator--5ab584cd-c0f0-42d9-9172-e8140eca95c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05bfe6e-29f1-41ed-bd8e-8fb91bae2659", "sighting_of_ref": "indicator--57f2d09e-980b-4323-bcf6-020fb103c6e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73767de9-04c9-467a-ab3d-be86e0c3db4a", "sighting_of_ref": "indicator--d4421ec0-fea5-4afe-9c6a-322d0588c40c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6392fe-34f4-420b-b70c-d29c087a98c0", "sighting_of_ref": "indicator--d4421ec0-fea5-4afe-9c6a-322d0588c40c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d691fd-9bdb-4ac2-8213-a9e42b96a372", "sighting_of_ref": "indicator--c147b27b-7a8a-46f7-9685-b5b4cad4536d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23517fea-5fd0-472a-88fa-896a674812d1", "sighting_of_ref": "indicator--5f213797-746b-4006-8041-4af68406432d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8baea2-e2f1-483d-a7a7-ab1a00cefdb5", "sighting_of_ref": "indicator--5f213797-746b-4006-8041-4af68406432d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a06a1b-8096-49a1-98f1-0c9c9896db93", "sighting_of_ref": "indicator--e508d55b-8910-490e-a704-e27ea5b0bd48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a2e2bf-f698-4e44-a34c-fb2274f89724", "sighting_of_ref": "indicator--58e8e60c-fe7b-4d88-a30e-c27b1722131f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90f5c8-3611-4add-8f6d-b7c237b50d90", "sighting_of_ref": "indicator--58e8e60c-fe7b-4d88-a30e-c27b1722131f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61dd278-34b7-4ea4-bd95-fedd1ccceea9", "sighting_of_ref": "indicator--0b503c06-de54-469a-b90e-6f4532d8fefa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebae8c9e-1175-4deb-a1be-c9d181677590", "sighting_of_ref": "indicator--dfcabfe4-872a-468b-828b-26dd5cf92e40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3886969-105f-4275-828d-6d85eac9c9b2", "sighting_of_ref": "indicator--dfcabfe4-872a-468b-828b-26dd5cf92e40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165a2c32-4a6d-4a9b-9ddc-efa154f3685f", "sighting_of_ref": "indicator--4653db50-25f4-4c07-8bce-77a39c3fec28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6589907-77cf-4939-b4bb-ca6e48bbb1d5", "sighting_of_ref": "indicator--14595655-6baf-49f6-88bb-19bda67bc138", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0398ff1c-6c27-4614-85ba-d77a530b7534", "sighting_of_ref": "indicator--14595655-6baf-49f6-88bb-19bda67bc138", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa18c49-9947-43c0-9caf-73bce1cace19", "sighting_of_ref": "indicator--d96027cb-5254-4cfb-9a19-ff251862bd99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d1b29-eccc-4121-857f-3ccdcd5bd174", "sighting_of_ref": "indicator--dce63b19-6c1f-40a4-a222-f2bae07e7549", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328b52e5-06a3-4281-9ada-e89da85886cb", "sighting_of_ref": "indicator--ff1c1c4d-2960-4c5b-bd3b-48f25a6ff4a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a723d0be-d433-4954-a482-79593ee70c13", "sighting_of_ref": "indicator--ff1c1c4d-2960-4c5b-bd3b-48f25a6ff4a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d88461-12c8-49b6-8029-f07033446fae", "sighting_of_ref": "indicator--0e5e4942-1896-4e95-a87a-ddfded0db6ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04720d3c-cf0b-48aa-8aec-07bdbfe837e5", "sighting_of_ref": "indicator--28fc2452-3483-40a7-a07f-50c6f961bfdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ca3111-b1ed-455a-9daf-5681bc5fcf9b", "sighting_of_ref": "indicator--28fc2452-3483-40a7-a07f-50c6f961bfdf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0490cfab-930a-4583-afdd-91bb8074b643", "sighting_of_ref": "indicator--2eee8140-51b1-4cd3-bc9f-5f621a1a9b93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df68a558-367e-41e6-a720-c7c086b529f4", "sighting_of_ref": "indicator--aef39593-13d7-4740-9a2f-660158e07337", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99396901-0c1b-41fc-8471-9f015f40c465", "sighting_of_ref": "indicator--aef39593-13d7-4740-9a2f-660158e07337", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344850e7-7a27-4132-851c-3578544ebb41", "sighting_of_ref": "indicator--83fa41b6-e584-465e-a1ac-1bdf3b916c3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f7d19a-73f7-4533-b0a2-1cf277617133", "sighting_of_ref": "indicator--b1fdb8e6-cb6f-4f72-b9d4-05b7c417ebbb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c3380f-258c-4bfb-a23e-7747e6b9d54b", "sighting_of_ref": "indicator--b1fdb8e6-cb6f-4f72-b9d4-05b7c417ebbb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c94c38a-fc9d-4390-8a05-86b42f93384f", "sighting_of_ref": "indicator--d8be7491-8da5-46b2-9726-eb86d4e7c06f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67a9656-952b-4891-ab5d-295c0d563749", "sighting_of_ref": "indicator--e973d8a0-9317-4e96-b7cc-fa46c068a942", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec536d3-01a3-474a-aa9d-ae36ad73cb29", "sighting_of_ref": "indicator--e973d8a0-9317-4e96-b7cc-fa46c068a942", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05bedfe-32a3-45c1-b2f9-1a897684f6cf", "sighting_of_ref": "indicator--e7d9bf62-b44c-4e25-ae0d-dc1431333a3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0061dc5c-c270-4019-bb19-45f73168b0c7", "sighting_of_ref": "indicator--e7d9bf62-b44c-4e25-ae0d-dc1431333a3d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53bf025-893c-4dcc-b37e-238f05e5cb0c", "sighting_of_ref": "indicator--fdb14d40-ccea-475c-9d1c-dab545b57ed4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70019c9-3d9d-490c-9d47-af6ec0b861f7", "sighting_of_ref": "indicator--cde61fe6-a5b2-435e-a8f8-5083477a69bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2350c3c5-7caa-4df1-81f4-0b0026c20a40", "sighting_of_ref": "indicator--cde61fe6-a5b2-435e-a8f8-5083477a69bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7857a96-bdad-4f6d-8940-8e61b7ce7154", "sighting_of_ref": "indicator--0d042511-c8e6-4a88-a2e1-a52e1b4f525e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81553ce7-0904-4fda-a52b-805dfdb502e3", "sighting_of_ref": "indicator--582882c3-4c34-45f1-b1fd-0115420567a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cb0a7a-8483-4355-8883-f9b0dde07c35", "sighting_of_ref": "indicator--582882c3-4c34-45f1-b1fd-0115420567a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997be1fd-7d3f-4f5a-a7e7-e23290a21d06", "sighting_of_ref": "indicator--4f3f94fe-59b0-40c6-b071-2849cecdf132", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec2a6b9-bc43-488c-a8c5-07718b46409e", "sighting_of_ref": "indicator--0d6d1ba1-f0fa-4daa-8090-960bd87196c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78af1acb-cf12-4bad-b8d6-cde11b8eeb0d", "sighting_of_ref": "indicator--0d6d1ba1-f0fa-4daa-8090-960bd87196c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576e364b-1b7d-4853-9df2-fa0bc3bfc094", "sighting_of_ref": "indicator--90385018-12dc-4bbd-9ccc-6d1df8809729", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36af52f5-6e4d-40cf-b1e3-020aa2a141b2", "sighting_of_ref": "indicator--b700a3cd-f1c8-4ecb-89a8-6b650756278f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded8dcd2-dfad-4b86-8c56-788b075be88f", "sighting_of_ref": "indicator--b700a3cd-f1c8-4ecb-89a8-6b650756278f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05efb804-5388-48df-b203-8da11503c1b8", "sighting_of_ref": "indicator--ebff765d-54aa-4b9b-b0e0-2d4fd1f7d674", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88907456-e19f-4a71-bf23-1ed3f9322abf", "sighting_of_ref": "indicator--6d7e24a0-41f3-4d3f-a935-501882e8a7b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a2be97-d23e-421e-b2d5-c9c9b8123ea8", "sighting_of_ref": "indicator--6d7e24a0-41f3-4d3f-a935-501882e8a7b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69a8261-ce0a-4099-8ba4-8341ce747056", "sighting_of_ref": "indicator--32b6d28a-d2cc-47b6-8912-e6489f2c3014", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7527d65-4f09-4301-b417-17bc77686ee5", "sighting_of_ref": "indicator--e26e6b90-d20d-44bd-8bdb-860daa49b37e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62034a00-12ad-4660-93f1-120d65c41673", "sighting_of_ref": "indicator--5d49234f-c17b-4afe-879f-7b1f45f03c3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1682e6-8425-41f1-90e4-118b80b834cf", "sighting_of_ref": "indicator--5d49234f-c17b-4afe-879f-7b1f45f03c3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee0cedb-da6e-4412-a3c1-3c05c45d6b80", "sighting_of_ref": "indicator--7f7bfb70-882d-4bd9-9d9e-b4e662663232", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbb90eb-a53e-4b92-a6ca-5c00507bce26", "sighting_of_ref": "indicator--afce0cbf-bc5c-491a-8d63-0f5de7e93cb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f97ed2-5c0a-4fdd-b58a-e5c154039180", "sighting_of_ref": "indicator--afce0cbf-bc5c-491a-8d63-0f5de7e93cb3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8933f9-06b6-4041-b53f-188563377989", "sighting_of_ref": "indicator--a1fd1816-4fe2-469a-9b0e-3bbeb5f9fb9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c13fe22-09eb-47c0-981e-6617b77b0bc4", "sighting_of_ref": "indicator--549de579-a31d-42df-aade-4e8a0a3333a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6274d21-6886-4ecb-89df-09076a9fee01", "sighting_of_ref": "indicator--549de579-a31d-42df-aade-4e8a0a3333a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cff962-118b-481d-ae97-d238f7041ad3", "sighting_of_ref": "indicator--2a348975-c670-40d7-9595-137d681701e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606f25d6-8eff-48ee-ae90-9ede4ed9bac3", "sighting_of_ref": "indicator--6e4734b1-25e1-4237-bfd6-ab9e4f7ca968", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a5b246-51ca-488e-9fee-9b446e60fc71", "sighting_of_ref": "indicator--6e4734b1-25e1-4237-bfd6-ab9e4f7ca968", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406f8cac-4471-42d2-97a7-0454a579c601", "sighting_of_ref": "indicator--91f210b0-5196-4119-9948-7388fca9a068", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e73526-2f79-49f5-8f7c-4b131316510a", "sighting_of_ref": "indicator--182352d8-527d-4fa3-828c-5eee25cf8c71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccb9195-c71b-43d6-982b-941e68cfed16", "sighting_of_ref": "indicator--182352d8-527d-4fa3-828c-5eee25cf8c71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a932ba-3d2d-407d-a8dc-98bce6709602", "sighting_of_ref": "indicator--3b997cbb-5f41-4b32-9530-d0d14b79979c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80918c73-83c5-4e26-aa11-43043532326e", "sighting_of_ref": "indicator--3b997cbb-5f41-4b32-9530-d0d14b79979c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54641a19-48ca-470c-9a58-ab1388655d31", "sighting_of_ref": "indicator--97878800-504b-460a-8e75-dad36cbfae54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635b28b7-40d9-4c58-9fb6-a3e2e26695d2", "sighting_of_ref": "indicator--8a5be18d-bf0a-47a9-8c98-4955abb79d77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d36728-fadf-42b0-a0f6-bd2aa0a2cd87", "sighting_of_ref": "indicator--8a5be18d-bf0a-47a9-8c98-4955abb79d77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a23204-488b-4814-bb13-ee514a7389f5", "sighting_of_ref": "indicator--91ae5a74-3f19-4827-af1b-28ffedec3bdd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a55c888-6f49-4dbb-b432-31ccbb9679ea", "sighting_of_ref": "indicator--91bdfc35-182a-4264-a14e-abe206f322e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317f2c65-1e71-41c2-af22-4a2d6ed6ef57", "sighting_of_ref": "indicator--91bdfc35-182a-4264-a14e-abe206f322e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe21bdda-c901-4fe2-a7ac-cd28e13bf42e", "sighting_of_ref": "indicator--8dbe9b39-514a-414a-8498-a2a076f1995a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9480f732-d10f-46b6-ba18-f972635c310c", "sighting_of_ref": "indicator--4da58df8-f04d-4492-9386-46a5a198a60e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d171cfad-f46a-4b1d-bdb4-1304a31c6e41", "sighting_of_ref": "indicator--4da58df8-f04d-4492-9386-46a5a198a60e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4671ad7-be2e-44ec-b3ab-29fd60c49367", "sighting_of_ref": "indicator--9d5d0be7-9239-4964-b17b-c602a987600a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd43e293-87bf-4df4-b00b-2c8b15122dd1", "sighting_of_ref": "indicator--7f352d9a-caa0-4f19-bcce-cb28e0f99ea4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c513c6c-532a-40f6-ac4d-f12450250113", "sighting_of_ref": "indicator--7f352d9a-caa0-4f19-bcce-cb28e0f99ea4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84356dc-0ca5-4f24-83f5-d242942ac30c", "sighting_of_ref": "indicator--3e4a4899-18bb-4f22-b799-2e177f73b51f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1687cc36-30be-479a-9d27-7fb88bec6eb5", "sighting_of_ref": "indicator--3e0dfcb2-7e59-4a1b-b7c9-348b225f144a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66e4df5-1757-40dc-a50e-5a4527c41c42", "sighting_of_ref": "indicator--3e0dfcb2-7e59-4a1b-b7c9-348b225f144a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7f6d42-e3dd-4f6b-88f5-ebe5e1e20b4d", "sighting_of_ref": "indicator--58b0cd88-0063-4252-9cf8-4293ed75dca3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b1fc08-d6bf-4364-9a7b-5f751bbefe89", "sighting_of_ref": "indicator--2449abd3-85cb-47ee-a03d-5bab783e7c42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a780822-e4fa-4ca9-b575-339e59c31477", "sighting_of_ref": "indicator--7c2e8a07-273d-4e50-802f-82ee0fc5e505", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c14602-b0e6-4797-9fd2-18b405adb266", "sighting_of_ref": "indicator--7c2e8a07-273d-4e50-802f-82ee0fc5e505", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c822d059-3c73-4653-bbc1-1aaf52edbd26", "sighting_of_ref": "indicator--bc2b9bb8-8883-4792-b00e-1c36f43d3b9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b88052-d00b-4635-906b-80970d1e49a6", "sighting_of_ref": "indicator--3c2eda0a-1015-4e9e-8cff-e148b65329d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149c376f-a383-4068-8df7-6dcb0f0dcc59", "sighting_of_ref": "indicator--3c2eda0a-1015-4e9e-8cff-e148b65329d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1fd3ff-b3ee-4229-8203-3c24002d53b2", "sighting_of_ref": "indicator--19237f83-4ddb-4fc5-947b-c7adfef8cd1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3725ad28-c6aa-4aac-9316-72295cc8430f", "sighting_of_ref": "indicator--63ec38d3-8d6d-4398-ac14-e8d6a82e1b55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf9e5d9-4f74-494d-a9a0-ddda4393b091", "sighting_of_ref": "indicator--63ec38d3-8d6d-4398-ac14-e8d6a82e1b55", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91236c3-bb65-49c4-bd94-e6a0c0a1d820", "sighting_of_ref": "indicator--830c0957-1e1f-43ca-883e-7b49a24362f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6396051c-76be-40eb-9546-648ab8020d6c", "sighting_of_ref": "indicator--c748f19f-cca3-4c02-88c1-d33b0a22df54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f35ecc5-aa25-454b-a472-84bd7bb255e2", "sighting_of_ref": "indicator--dbfa7e29-9ea5-4773-aa84-9c72f535e3e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5556e66a-9c04-4e4d-925d-2d9e00e5b4db", "sighting_of_ref": "indicator--350a3d92-9be0-4b15-9177-43222372d568", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9f7f19-1097-40f7-86fa-fcc331de51b4", "sighting_of_ref": "indicator--350a3d92-9be0-4b15-9177-43222372d568", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8355045b-515e-4847-b7f4-91a23c96fa95", "sighting_of_ref": "indicator--d787c806-d24e-4c83-a2b0-84ccc175904e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28455031-12a4-40c7-aaf5-201c14397cf8", "sighting_of_ref": "indicator--d2dfec3b-c610-45ae-af11-492a1cdc0457", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba3458-ddff-4788-be9c-57cb6802c9db", "sighting_of_ref": "indicator--d2dfec3b-c610-45ae-af11-492a1cdc0457", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f350c0-ce3c-4720-a6a7-8d959529c07e", "sighting_of_ref": "indicator--d6fc3694-9eda-4c0d-967f-dc05437753e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6441a946-beeb-4507-913e-3217836ba8b9", "sighting_of_ref": "indicator--e3b5c2f6-1c03-4d24-a8ba-9df27cc30727", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec1b768-383c-4665-88df-fe5acf652d51", "sighting_of_ref": "indicator--e3b5c2f6-1c03-4d24-a8ba-9df27cc30727", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aee796d-311b-4439-9c23-66fe5c8930ff", "sighting_of_ref": "indicator--67c7405d-3d47-49f6-9b12-da1fe69a908b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9039d38a-7998-49bb-a53e-ed6b3a3593ce", "sighting_of_ref": "indicator--d1d38037-7714-480c-a297-9f638b74de40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b4dc0a-cb38-43af-9fc9-b8af10476b62", "sighting_of_ref": "indicator--d1d38037-7714-480c-a297-9f638b74de40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f5ddc7-df95-4688-b53c-91007d976d72", "sighting_of_ref": "indicator--cb510d9b-9c9b-498f-9ab1-1298d828eca9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e35c146-1943-4926-90ed-2d15298f5daa", "sighting_of_ref": "indicator--6c093025-2598-4c2f-a323-3b3b255fbfd1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b48a1ff-3e5f-46c7-ac62-49ae4ceea545", "sighting_of_ref": "indicator--e1a6bd75-66a2-480a-bceb-da0d95f82159", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b54f0d2-d4ce-4a56-ac79-f43d07b99037", "sighting_of_ref": "indicator--b3bbb283-6969-401e-9b1c-5c2af3669ff2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a34980-967c-40ee-b787-cb48528d9c4f", "sighting_of_ref": "indicator--96c48596-0640-488a-8cab-1cabe2b0ad32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5d7300-4be4-4e40-88d0-8026b78fa21c", "sighting_of_ref": "indicator--96c48596-0640-488a-8cab-1cabe2b0ad32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0767b2-f7c5-40f0-9b26-7ce3aa7bffcd", "sighting_of_ref": "indicator--7306ecc7-e48f-49d0-89ad-92fcac00ea3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96596725-f6eb-4048-9050-50e231c3b7b2", "sighting_of_ref": "indicator--453ce46d-9ef0-42c1-a269-45eb6fd4af0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd88b7e-b61d-46e2-bdc5-e36a6fa89108", "sighting_of_ref": "indicator--453ce46d-9ef0-42c1-a269-45eb6fd4af0b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a24f4a-a667-470a-b746-10a5b416e2ae", "sighting_of_ref": "indicator--a8325989-ffd0-4d71-a4a6-261be6041d95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa18157b-3e3e-4648-b444-84cd9e4ad942", "sighting_of_ref": "indicator--77783eb6-68f6-4ae1-9cda-1f5f16c7b638", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6316fcf5-d296-49d0-be9e-8d20b641563c", "sighting_of_ref": "indicator--77783eb6-68f6-4ae1-9cda-1f5f16c7b638", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf8f8f8-5b87-4185-8bd3-15aea21db599", "sighting_of_ref": "indicator--e4838dd1-644a-478f-8161-6f9e32734ff1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c58c433-7156-4196-a8a8-23b6cd5d1d24", "sighting_of_ref": "indicator--0c611c9a-9bf0-483b-b2bf-ae0d2f540947", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5145d798-87e5-48d4-8e0c-02141712d90a", "sighting_of_ref": "indicator--0c611c9a-9bf0-483b-b2bf-ae0d2f540947", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5c30ff-9a9c-4f00-96a3-97ac46674356", "sighting_of_ref": "indicator--dcbfaf37-71a4-4dae-955d-0bba51620496", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a68dee9-5fe6-4be2-8276-6ba60b326d9f", "sighting_of_ref": "indicator--d73666d6-62cf-4d2c-b00e-609e98c33e8e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50442329-2b6d-4e12-94f8-716ca9c682e0", "sighting_of_ref": "indicator--d73666d6-62cf-4d2c-b00e-609e98c33e8e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e1600e-8214-4579-8064-318ad82390c6", "sighting_of_ref": "indicator--9804013e-6ec4-447d-a98c-a616a00c59ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b321e3-f867-44b9-a503-b3f499d902e0", "sighting_of_ref": "indicator--8f3fe574-dd6d-4f0a-b837-160fe2f35fd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92241f34-e91c-499a-a34b-298c360885b5", "sighting_of_ref": "indicator--8f3fe574-dd6d-4f0a-b837-160fe2f35fd3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e67b84-d652-4a43-984d-3a6cdb5f7177", "sighting_of_ref": "indicator--c0916115-f36c-487f-9d33-fda20f544d1d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45049d65-bdb0-43d3-90b4-fb6257c6fc82", "sighting_of_ref": "indicator--c8c5ffa5-b1ab-4dd8-8068-582120f1ec0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1274b54e-c3b5-404a-9a8c-3b8b3d6a8b37", "sighting_of_ref": "indicator--c8c5ffa5-b1ab-4dd8-8068-582120f1ec0c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c28c013-8e26-4f7e-ae7d-cc3124a6d05d", "sighting_of_ref": "indicator--66be98cd-43f5-4794-bc04-0019992f0611", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52221ba8-7bd4-4d08-8149-8b8d8d36d63b", "sighting_of_ref": "indicator--f81d2d2d-896d-4c72-b146-46af790ed722", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44f9530-4092-4965-9b5a-ce2e42c9d38f", "sighting_of_ref": "indicator--f81d2d2d-896d-4c72-b146-46af790ed722", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e155697c-ca04-48a6-8dc0-de69e47f812a", "sighting_of_ref": "indicator--71b9d6df-b60a-4615-939f-3e68c97ae910", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be1f4a1-adbe-4a01-b425-bdc9ab602c5b", "sighting_of_ref": "indicator--c94996ba-41fd-48e6-a458-247c69c6f84a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517496aa-0a35-4b4b-9ed8-966e830fbfd0", "sighting_of_ref": "indicator--c94996ba-41fd-48e6-a458-247c69c6f84a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d2ff97-9dbb-4b6c-8d8e-ceb060b6b356", "sighting_of_ref": "indicator--a35b35e6-27ed-4778-a621-1e837a86ba61", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b662f-6284-4093-9ccf-14d5731c45f2", "sighting_of_ref": "indicator--a1fa8086-ffb2-4154-bd94-edfe0c31c811", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a253b0-7c3c-4295-a83b-1b997f497319", "sighting_of_ref": "indicator--a1fa8086-ffb2-4154-bd94-edfe0c31c811", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46697256-c269-47a8-9e6a-7cd9090ed8ff", "sighting_of_ref": "indicator--22a2032b-03b5-472e-93d5-7126864fe135", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cb435a-9700-44a3-9b31-ae74e1afd517", "sighting_of_ref": "indicator--2fc15a34-a424-4223-a403-7e09610741bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd82ff58-5ef2-4a43-966d-32aeb4fa23c6", "sighting_of_ref": "indicator--f383e4cf-1c51-4ef6-a24e-6a543b718605", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fee709d-ffdb-42a4-bcf9-56e303303ad3", "sighting_of_ref": "indicator--f383e4cf-1c51-4ef6-a24e-6a543b718605", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe2dd60-9c28-45e5-9857-d4c5724e279f", "sighting_of_ref": "indicator--a666fa95-ea87-4afa-b7ef-e220b97c0338", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d6bd1c-e33b-4dcd-9bf6-e1b99a0ad3a3", "sighting_of_ref": "indicator--9dff7d07-d70b-4b36-92fc-359d5844903c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560b452a-a71c-4cab-b4ba-b27307306464", "sighting_of_ref": "indicator--9dff7d07-d70b-4b36-92fc-359d5844903c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc649eaa-02ab-4021-af72-430c66138c41", "sighting_of_ref": "indicator--caf21f75-d0b9-4aac-ba56-cdc20e7310db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b535b92f-ed33-4d73-a936-acbecf84b6ff", "sighting_of_ref": "indicator--6d814a85-53b7-43b7-8989-ffa7c024aa47", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c4a2b2-7802-491a-9f2e-b644c4d22f6e", "sighting_of_ref": "indicator--6d814a85-53b7-43b7-8989-ffa7c024aa47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe324eb-1c97-4228-b1cb-9b94cad53be8", "sighting_of_ref": "indicator--b480a8f4-0a16-4309-b21a-d4bc16388ccb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba30244-608f-4b7f-b4b8-f5eeb83bdb5d", "sighting_of_ref": "indicator--40a65c74-8844-4cf5-845b-99329a107b24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee6a6fd-5463-430f-831d-3489b627d6ea", "sighting_of_ref": "indicator--40a65c74-8844-4cf5-845b-99329a107b24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16cc81e-3d8a-4046-9341-b4dffd2e3732", "sighting_of_ref": "indicator--63706ec1-5092-4645-8c5f-73bed38e36c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a952b7b-61fa-43e8-9c31-e9cc13d2d080", "sighting_of_ref": "indicator--7c17f7bc-4a42-421b-8249-0118c2c06db2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4613aaa8-9cb4-4f91-b932-c54239d3c9a1", "sighting_of_ref": "indicator--7c17f7bc-4a42-421b-8249-0118c2c06db2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6fd54c-a3fa-450d-a757-dd706f3c7945", "sighting_of_ref": "indicator--c38e87d5-53ae-4b2e-991d-87b6199daa72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a4d856-e628-47df-97d4-fd79a274689d", "sighting_of_ref": "indicator--7906cb7f-cbc0-47dd-b588-4b8ada708384", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3ede5b-83be-4994-8abf-3ab36df0817f", "sighting_of_ref": "indicator--7906cb7f-cbc0-47dd-b588-4b8ada708384", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba29f99-d215-4319-aba6-6464827a6383", "sighting_of_ref": "indicator--54e0a377-5782-4b5d-b3e2-65e30fbc6cc9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fc171f-452a-4ab7-81af-0c1f82b62293", "sighting_of_ref": "indicator--30ca64a4-ea82-4012-be03-51b9cf9de03b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a62d424-bf84-449b-9661-5eb24b34af70", "sighting_of_ref": "indicator--ebc6d973-3824-4f4c-b3ad-df2043edb3a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e3bdf5-4155-466b-9464-a9d7df80f9be", "sighting_of_ref": "indicator--ebc6d973-3824-4f4c-b3ad-df2043edb3a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308e2152-6c79-4834-8300-b805c791c1f0", "sighting_of_ref": "indicator--c90a3824-b577-4977-b7be-968d4dd06d02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e695bc0-959c-47a8-8696-be34000fb7ea", "sighting_of_ref": "indicator--1effaa56-aeb8-4320-87f9-eb999fef2d38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c639af73-1121-4e51-b00b-dbb7b08f6905", "sighting_of_ref": "indicator--bc5fa721-96d1-4a49-bbc2-77c72232cd29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9223d8-c9dc-455e-9413-cf0048684d00", "sighting_of_ref": "indicator--bc5fa721-96d1-4a49-bbc2-77c72232cd29", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f05656f-ceae-4394-98c6-e97150753447", "sighting_of_ref": "indicator--19a6cd86-5861-4aac-8015-031513b9803d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c807d0-90ca-40ab-b117-1429dfe5c059", "sighting_of_ref": "indicator--3114e872-32f4-4d3c-8a7c-643401b2c420", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e620428-51da-478a-b8cf-fc36eefd74bb", "sighting_of_ref": "indicator--3114e872-32f4-4d3c-8a7c-643401b2c420", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575bebff-4b03-4239-bdec-072571e2ea1f", "sighting_of_ref": "indicator--8d392ef5-576a-48f2-b697-0039e723dc6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f4cd1b-4f1e-4fe0-9817-7202630d21e6", "sighting_of_ref": "indicator--8559b689-beb2-4684-b935-5deefd2b2dda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b0051c-6de9-4fe8-b12a-76b292a5f0bf", "sighting_of_ref": "indicator--8559b689-beb2-4684-b935-5deefd2b2dda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60960a4-f1f5-46db-b51f-5e52a8e7b4f0", "sighting_of_ref": "indicator--fc4f37d8-80a5-40ec-9604-b2bc59bb369d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9693550-a2e3-4498-90d2-6fb8767969b8", "sighting_of_ref": "indicator--9f95de07-574d-484d-ad14-16518898ea97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63bf5c0-fcae-4a9c-a281-70536dc1b60d", "sighting_of_ref": "indicator--9f95de07-574d-484d-ad14-16518898ea97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257fa8e8-2d15-4ec8-b891-a710d9268344", "sighting_of_ref": "indicator--9f95de07-574d-484d-ad14-16518898ea97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a207277-289a-45b1-be2a-3e0b2e7db494", "sighting_of_ref": "indicator--72fc482a-1353-423e-bacd-0dce0f5d722f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32402038-079a-48a1-8e1c-f35534c99dd9", "sighting_of_ref": "indicator--72fc482a-1353-423e-bacd-0dce0f5d722f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f382b-6d93-436f-b291-be145f67842c", "sighting_of_ref": "indicator--1cada969-27ad-4884-ae1b-f13af5a5dcb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd6bbb-ade6-4b0d-b871-f77cecac5de9", "sighting_of_ref": "indicator--b85f4234-fe39-4707-8854-265f5fe8b5cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073dabde-7a52-4b16-b3f6-d91807ffdb74", "sighting_of_ref": "indicator--b85f4234-fe39-4707-8854-265f5fe8b5cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b807b0c5-8f13-460e-854c-274d24950635", "sighting_of_ref": "indicator--ca6675e8-9c0b-4e78-8176-d7735dc7757b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8af586-6aed-45b3-876d-a8ef40e41a55", "sighting_of_ref": "indicator--3871004d-a352-4e5c-91e0-6c2d3ab03899", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39a8007-8093-4f0c-b9be-75ac3761268c", "sighting_of_ref": "indicator--3871004d-a352-4e5c-91e0-6c2d3ab03899", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021cc2d9-88c3-4964-8636-f69ec60afd1f", "sighting_of_ref": "indicator--3871004d-a352-4e5c-91e0-6c2d3ab03899", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c6269-6ade-456d-930b-019a06543bf6", "sighting_of_ref": "indicator--2ba69aba-ac56-4f7b-ae91-2b280359f169", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54235d1c-4585-4c49-ac39-8481d6151f3d", "sighting_of_ref": "indicator--2ba69aba-ac56-4f7b-ae91-2b280359f169", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3d7575-de1b-4d32-a29d-23734c3caa2a", "sighting_of_ref": "indicator--d7f05f16-cd14-482c-8dd3-ee0b8170e3fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47b35dd-9cae-4816-84ca-fd19e09f6eec", "sighting_of_ref": "indicator--959e71b3-8ec3-4e72-9fcf-00e53e811a9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5941b84-fc56-4881-a4ed-4edb2ae8c471", "sighting_of_ref": "indicator--959e71b3-8ec3-4e72-9fcf-00e53e811a9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc31368-d3e4-499c-bf21-276b317aa4a2", "sighting_of_ref": "indicator--959e71b3-8ec3-4e72-9fcf-00e53e811a9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb7bb5-1525-4710-93d1-16d5e02064b7", "sighting_of_ref": "indicator--44923368-d847-40da-9701-40f225c23117", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f65151-f2d8-4dcc-bd53-c4c089a8cb21", "sighting_of_ref": "indicator--78b4f8f9-73d4-49cc-9920-00a7c28ec6fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e820680-6ecc-4eed-93e1-9a8a675b1e76", "sighting_of_ref": "indicator--a89aa813-8752-4f62-bc68-0b811d711387", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e49714f-612a-4720-a78a-9e708e9b5bb0", "sighting_of_ref": "indicator--2c08a2c4-ebbd-4740-9fc4-73469720ad8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e78d406-22d1-42ab-8a8e-4fd21c6b9d54", "sighting_of_ref": "indicator--923e3526-30a6-454b-bca0-6c14c8cc4005", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfa7b8c-e562-4b8f-a265-82e4d3a5a245", "sighting_of_ref": "indicator--7863dae9-637d-4dff-9077-e4e5789947ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260e7ad2-a76e-4939-b55f-8f08604fadd8", "sighting_of_ref": "indicator--0f49e01b-d9f5-4c6c-81ad-0ca715cb6b22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a42a7c-50fb-4383-be87-0b047357d9ff", "sighting_of_ref": "indicator--3f03ad4c-b97d-4234-a385-502ad1c8efae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca79b4a-5464-49de-8488-68bd66150cbd", "sighting_of_ref": "indicator--2040c9c4-d3f2-41a2-974d-c6c68e4fcc1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2203844e-75d7-4e0d-b935-7ff340fd8638", "sighting_of_ref": "indicator--0caee5b1-2a48-4e05-bcd0-55a0fa2bb595", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9bebfe-8c0d-4982-a7ea-8e1ad75cef30", "sighting_of_ref": "indicator--dcdbffc5-2095-4956-aa12-7279d0ed6bfc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ab6384-3c06-41c9-a86f-4c98fbb1f0e6", "sighting_of_ref": "indicator--bbcc75ad-5923-4d5a-98cd-93aa98840bdb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745a9c17-bec1-4dc0-970b-09c3f0fd032b", "sighting_of_ref": "indicator--17ddffed-574f-4c71-9951-36362aa78b0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f67611-27ea-4c5c-9cab-f1ec68eaa4dc", "sighting_of_ref": "indicator--fe3c9335-5fc1-4d14-9cdf-dca3a0ba8689", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da679b75-d4ba-493c-9a9b-b680572a1aed", "sighting_of_ref": "indicator--7c606dbd-9c22-4719-8a9d-5f07fc79a379", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76a05e4-3dde-49f5-826f-79cd44326afb", "sighting_of_ref": "indicator--4ff5e2f1-f2ce-4bfd-bf9c-eb7d3df075e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d38d42-615e-4940-a899-942acb9add20", "sighting_of_ref": "indicator--06f35ce6-61d2-4a2e-94de-8c8c9b767c96", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75a8891-2f20-436b-8296-8ff85d4160fc", "sighting_of_ref": "indicator--366b56ae-adc7-47d7-b342-d6a86c63f2d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34555426-4dae-4722-a0d1-19e4beb46582", "sighting_of_ref": "indicator--69e08604-54a2-47a6-a883-2830e08e6ba7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83d19af-5232-471f-a999-655b408d65d9", "sighting_of_ref": "indicator--aafe1b48-9287-4fe1-8129-499057ee6d4d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b75d37-c047-44bb-8c9d-e6fa41f1f9a9", "sighting_of_ref": "indicator--ef7d944b-e289-48c4-8281-ed22e8520bd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22288dcf-8f02-460b-83dd-c07b87bd017b", "sighting_of_ref": "indicator--ef7d944b-e289-48c4-8281-ed22e8520bd6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a234f0ee-e4d7-43d3-af91-1cb1a1f0d820", "sighting_of_ref": "indicator--ef7d944b-e289-48c4-8281-ed22e8520bd6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2054bddb-f066-43e2-b570-25a494ffa7e0", "sighting_of_ref": "indicator--59763e0a-f442-41de-8f3b-cd8f2c21227d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90fa16c-a1ea-4db6-9611-a92693282d65", "sighting_of_ref": "indicator--cc804279-249c-4248-bc2b-fdabe7498436", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6edca1-5842-48e2-bf67-1701f9afd379", "sighting_of_ref": "indicator--cc804279-249c-4248-bc2b-fdabe7498436", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888a5716-0a23-4ed8-8e6a-43c7a174fa84", "sighting_of_ref": "indicator--4f65e5c4-5c48-46df-b30f-cd977a391113", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d380f3f-2d82-47bc-b1e4-7495cdca5ad2", "sighting_of_ref": "indicator--11b4e702-3de1-4daa-ad10-bdb274ec0abf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46ad92d-e0c2-4e16-8af2-21cdce4c6108", "sighting_of_ref": "indicator--e81e14e3-f40f-445e-b0b8-3a2e73e44a02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da741f14-511a-4c63-889f-8b0948569da1", "sighting_of_ref": "indicator--4724ca8e-a8aa-4cef-81c6-573ddf4f9348", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290b07d0-1c0e-48f6-894a-62e7dfc6854c", "sighting_of_ref": "indicator--f620b65e-015d-4159-88a0-713e6cbcafc7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d673ae-9b5a-4041-b234-0e2e365398fa", "sighting_of_ref": "indicator--c86f68de-fa75-4fda-b77a-09862707119d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588f6002-5bfd-41d4-b7c6-497623382f8d", "sighting_of_ref": "indicator--c86f68de-fa75-4fda-b77a-09862707119d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9488f9f-7dd0-489e-98bd-239f08d2e711", "sighting_of_ref": "indicator--c86f68de-fa75-4fda-b77a-09862707119d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ced02e1-990d-4972-aeb3-9865b39224f2", "sighting_of_ref": "indicator--07e48ff8-4be3-43d8-8705-4f7aa1c4a2cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc65cf9f-7448-453d-9433-0afe2b832f4e", "sighting_of_ref": "indicator--733dfcc3-f1eb-4c39-9953-d39ab0683fdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee1de4d-2fc9-4bac-81b8-91a95becfd84", "sighting_of_ref": "indicator--733dfcc3-f1eb-4c39-9953-d39ab0683fdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dbc125-d660-43a5-825b-9814ae805594", "sighting_of_ref": "indicator--e334909a-d113-468f-963d-99dd48f68d95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f10cff-1fa5-4bf0-bc15-ae8e65df6344", "sighting_of_ref": "indicator--a5b4fb1e-ed92-4520-a049-ac37fb6e6eb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03789a26-4abd-485d-b3fd-1d8fb2722afe", "sighting_of_ref": "indicator--a5b4fb1e-ed92-4520-a049-ac37fb6e6eb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e147c18-b189-4d7c-8c12-8e947164fdf8", "sighting_of_ref": "indicator--6812396d-28a0-4b6a-9a69-b4503a9fdf41", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e2c135-20b3-40ea-a591-03853e3451b8", "sighting_of_ref": "indicator--816c7ab1-fdf5-4226-8300-99834af30dee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6da5bf1-c9ab-406b-90f4-455b499e1afc", "sighting_of_ref": "indicator--816c7ab1-fdf5-4226-8300-99834af30dee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8f0ac6-f480-432a-8d61-62f38da3030d", "sighting_of_ref": "indicator--816c7ab1-fdf5-4226-8300-99834af30dee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30345ae4-bf47-441d-8430-7621ad7f3d45", "sighting_of_ref": "indicator--8be1afc4-1b19-4756-b9a0-b899d4dfa65a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a0c627-5d3c-45ae-8915-af12a1270291", "sighting_of_ref": "indicator--8be1afc4-1b19-4756-b9a0-b899d4dfa65a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c299d68-7342-47be-b4bd-0c5ac5d12b0d", "sighting_of_ref": "indicator--41b9fedc-3aec-44f7-a7a9-e89344262804", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f5e64c-a5a3-41af-b094-063db8f02d4d", "sighting_of_ref": "indicator--41b9fedc-3aec-44f7-a7a9-e89344262804", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787b209b-3e0f-4206-908f-8bff102dd767", "sighting_of_ref": "indicator--f31a1ba9-cb74-43b7-b3b1-e4ea80b6d097", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858edea4-6c6f-4411-873a-4a269762aa7b", "sighting_of_ref": "indicator--f31a1ba9-cb74-43b7-b3b1-e4ea80b6d097", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6530eef7-c90f-415d-b534-e2d7349989b7", "sighting_of_ref": "indicator--83090782-bca4-46ef-b6a6-68669fe4f666", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af39558f-b02b-49c2-8651-2f9a36c95cbb", "sighting_of_ref": "indicator--83090782-bca4-46ef-b6a6-68669fe4f666", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e817a7e-53ee-4b6b-9e42-e838e580b4db", "sighting_of_ref": "indicator--710b0a5b-ad4f-4f97-be09-a2f0388112ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa20b4f5-8376-4459-bb4c-03e9a264de2b", "sighting_of_ref": "indicator--710b0a5b-ad4f-4f97-be09-a2f0388112ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1401edc-725b-4735-bde4-476ed1b06cf2", "sighting_of_ref": "indicator--2196b94e-293c-4a0c-8974-f952901bd4ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9156f9-05aa-468b-9a92-55a76a38ec38", "sighting_of_ref": "indicator--26428872-884f-4fc8-a888-325273272dfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94814084-16de-4854-ab73-eccda1e8cd4d", "sighting_of_ref": "indicator--26428872-884f-4fc8-a888-325273272dfe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800238d9-af4f-4853-8670-9e9bae1cc3de", "sighting_of_ref": "indicator--26428872-884f-4fc8-a888-325273272dfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcd2202-2e7d-4d3f-b950-2491b17b8216", "sighting_of_ref": "indicator--09c5e32b-4dc2-4e44-b3a1-e02c5b10ec5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4312aa-64df-4484-a3a0-dfbbf7f92f7f", "sighting_of_ref": "indicator--4d58514b-75d2-4254-a26e-b55c7c7f61d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70158774-657d-4ba9-9009-12bdca5b0592", "sighting_of_ref": "indicator--373a0e1c-8769-4338-abb8-ed8e5d707197", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2967dff5-4f57-4480-afa1-0b73bb9986b9", "sighting_of_ref": "indicator--373a0e1c-8769-4338-abb8-ed8e5d707197", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4393ed9a-2651-4d67-8ca0-839ddb92b686", "sighting_of_ref": "indicator--ca68889a-c21b-4d38-ae11-1c9893a9490a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573acc21-9ee9-4dac-92ff-8c62d1ef0f7b", "sighting_of_ref": "indicator--ca68889a-c21b-4d38-ae11-1c9893a9490a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd76cad-91d0-4fc5-875d-892a908cc75f", "sighting_of_ref": "indicator--3bfd04ca-9e9f-4322-908d-4a95dc753ace", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146f602a-1c65-4911-a86c-874dc7c9a8e5", "sighting_of_ref": "indicator--ba3d9524-443a-4125-be61-b194ae7ff899", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29f16e3-885d-41e1-8349-fefd59c7b348", "sighting_of_ref": "indicator--323c0b02-41ea-46a5-a7a9-bd0c083c7791", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e23029f-526d-4c8b-8d1f-e6f5c2b35d16", "sighting_of_ref": "indicator--323c0b02-41ea-46a5-a7a9-bd0c083c7791", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f271592e-7556-402e-bd3c-4ca98139eb16", "sighting_of_ref": "indicator--323c0b02-41ea-46a5-a7a9-bd0c083c7791", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dc4934-3213-4410-a7b0-5193a4caf827", "sighting_of_ref": "indicator--9f59a93e-6a93-4837-9e2d-833ca20b8cf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd6902f-efb5-4096-ab6c-875597ab02d0", "sighting_of_ref": "indicator--9f59a93e-6a93-4837-9e2d-833ca20b8cf4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65229df-ebf6-4eea-83aa-0802217e0faf", "sighting_of_ref": "indicator--9f59a93e-6a93-4837-9e2d-833ca20b8cf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c24aca1-8a88-47fb-9d44-d7317fb8773e", "sighting_of_ref": "indicator--b9e1c586-f92f-466f-96f0-1441e8f5784c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f343873-03f8-48b7-bb2e-4ab08073866a", "sighting_of_ref": "indicator--b9e1c586-f92f-466f-96f0-1441e8f5784c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9814bd-fb96-45f8-a881-fc7a72555e53", "sighting_of_ref": "indicator--09ed647d-55dd-4f4f-bc75-7fb6211f4cd0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bbcfda-fc0f-46af-8c95-55a7cb6878f0", "sighting_of_ref": "indicator--f1d1beb4-996c-436a-a255-b5a9ec2a0e98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c73ab67-dba7-49c3-b961-27dbeb02b409", "sighting_of_ref": "indicator--65ee88fc-1db3-4be1-9ae7-f2d6dded6806", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175011dc-31d3-4a53-bbb8-d847ae1d554a", "sighting_of_ref": "indicator--65ee88fc-1db3-4be1-9ae7-f2d6dded6806", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2130968f-e223-4417-8ad9-bf7643fe5edd", "sighting_of_ref": "indicator--3a5a13c1-e768-4463-9644-b54d44eaa6f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0238670-41be-4874-ae63-71dd4baaa440", "sighting_of_ref": "indicator--3a5a13c1-e768-4463-9644-b54d44eaa6f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9405b3-f817-44b4-a6d9-9f3357c1f950", "sighting_of_ref": "indicator--c10f38c5-a3fa-4f65-af70-cd34b4ebb4ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5450783-611f-4b15-a306-ce4562374e89", "sighting_of_ref": "indicator--0c68f348-4c3c-47a7-b06c-fa6c374c45fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe4bd48-d577-47b0-986b-11e44700595f", "sighting_of_ref": "indicator--df6d6574-a36c-4af7-a459-2df0503534e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c335ba45-46a6-4d6a-bd28-26045d5df882", "sighting_of_ref": "indicator--65d64c03-2cad-4d7c-8cbb-266b6b73f0d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93036de3-f9e8-465a-a9cc-0d7b718e0141", "sighting_of_ref": "indicator--65d64c03-2cad-4d7c-8cbb-266b6b73f0d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f2a689-aafa-4d69-936d-0444693d7a4f", "sighting_of_ref": "indicator--4c6fb7af-be5f-4ce1-909e-03f89bdcfdf2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca79148-0f38-4edd-aa69-a89153447846", "sighting_of_ref": "indicator--3ecb71ed-b6ca-4bcd-a2f3-2ccf819f2336", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c581ce8f-6a0a-4a18-b54a-628311307c24", "sighting_of_ref": "indicator--3ecb71ed-b6ca-4bcd-a2f3-2ccf819f2336", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901722af-b5cd-4557-98f3-4d047d5c83e3", "sighting_of_ref": "indicator--5a5c51f0-e7c5-4e11-8e9c-8c6410823b88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f00cf9-132f-4cd9-9323-c31218eb65c4", "sighting_of_ref": "indicator--5b304a68-1642-42bf-abcb-dae3e645acfd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a1c96c-7699-49e2-b1d4-586f909714cf", "sighting_of_ref": "indicator--3c213881-e4ac-42d4-b525-bd3619d136cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3043daf-2c86-4d90-a619-b9ecd9d43047", "sighting_of_ref": "indicator--b6b3142e-f71f-494e-b81a-5ba8c7c10ebd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5264afac-18fc-430b-b12f-fc3af39aa043", "sighting_of_ref": "indicator--b6b3142e-f71f-494e-b81a-5ba8c7c10ebd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6870f745-85ca-498e-89be-e6a9233200e8", "sighting_of_ref": "indicator--ff33fe7b-5db6-403e-b59b-a8f56a875a3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85e66e1-c7e3-456a-a97e-0fd5ddf23b9a", "sighting_of_ref": "indicator--90913dec-70ab-4b71-9928-0b564ee74524", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de84b69-e068-4b9d-8633-bd086a368f64", "sighting_of_ref": "indicator--90913dec-70ab-4b71-9928-0b564ee74524", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb4549a-6600-4c03-a678-52d918146028", "sighting_of_ref": "indicator--90913dec-70ab-4b71-9928-0b564ee74524", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff113310-32f6-4aad-b5e3-6ccec17832b7", "sighting_of_ref": "indicator--6ab36db2-2e64-4ca1-b308-6838ddcfd4fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d66b54f-c90e-4adc-af77-a028e1fbea94", "sighting_of_ref": "indicator--464a5eee-afdb-4d3a-a37f-70b6ee52af2f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d4dc10-b83e-4948-8329-057e51555696", "sighting_of_ref": "indicator--464a5eee-afdb-4d3a-a37f-70b6ee52af2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fe7e82-b310-4b5f-bf2b-d1badb7422e6", "sighting_of_ref": "indicator--44aabd77-034a-4b7e-befc-ef55dab207a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7300a4e0-d78a-49f8-85ac-2b97d953a169", "sighting_of_ref": "indicator--44aabd77-034a-4b7e-befc-ef55dab207a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6a4fb0-be7c-46f8-9bd9-c5af72f5fbea", "sighting_of_ref": "indicator--98f560f6-d905-463c-bb3d-cf9574f10f0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae4aa5e-5a9c-4ae8-a5ef-1dfde28b3c2b", "sighting_of_ref": "indicator--98f560f6-d905-463c-bb3d-cf9574f10f0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813dfbe3-b9f3-4955-aa77-7733a66818cf", "sighting_of_ref": "indicator--98f560f6-d905-463c-bb3d-cf9574f10f0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adc5554-e545-4484-9566-85f649a38206", "sighting_of_ref": "indicator--d964ed21-01cd-44d5-a128-2636ce3238b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9362c53-b339-4680-9a0b-b67f89c1deb0", "sighting_of_ref": "indicator--930e5cd7-9da0-4887-890d-c7a1aeaa08b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00368ef7-92aa-4670-b36a-592f599e1f87", "sighting_of_ref": "indicator--070566dd-611b-46da-9769-a12fde556c91", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa6b90c-fe7b-42b9-ad18-7a3c158bf759", "sighting_of_ref": "indicator--f898f5af-95c5-49cf-a886-143a5fefccbe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9317847c-a14f-431e-8025-ba256633f203", "sighting_of_ref": "indicator--f898f5af-95c5-49cf-a886-143a5fefccbe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ea98e9-04e4-41ca-82ee-6457223f76fc", "sighting_of_ref": "indicator--59a7aeae-d818-4167-9a51-949b4800ec1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa1e853-35cd-494e-98bf-d31b9db0f411", "sighting_of_ref": "indicator--59a7aeae-d818-4167-9a51-949b4800ec1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b86adf-1b0e-432a-ae84-e23f7bf8454d", "sighting_of_ref": "indicator--10a379b1-895a-47dc-b058-6f5b327ccb34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e292d21-2c6e-49a3-9aeb-8c3d39be81bf", "sighting_of_ref": "indicator--10a379b1-895a-47dc-b058-6f5b327ccb34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd0bc2c-ad92-4113-93cb-9b00f95725ac", "sighting_of_ref": "indicator--10a379b1-895a-47dc-b058-6f5b327ccb34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976195ac-26be-458d-bce8-3c843e168fa7", "sighting_of_ref": "indicator--fd9ba16b-c17f-4a9b-b22c-0165092a6582", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de12159-b02c-4b5e-852f-13d0827c55a0", "sighting_of_ref": "indicator--c1eda9fa-1e94-4803-a8e9-0f9565d8628c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5e498c-189b-4d20-9d3d-d881313999db", "sighting_of_ref": "indicator--463d802c-99d5-4467-8a11-7d12793d3610", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ac4317-ffaf-4e6a-bb06-9cdd98cf2bf4", "sighting_of_ref": "indicator--463d802c-99d5-4467-8a11-7d12793d3610", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0009d7-1bff-4068-a93d-8abd2df54c71", "sighting_of_ref": "indicator--4ef0a4a6-44f9-48a9-801b-82f4899f9a9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e111920-ee16-43e3-980f-12663771d8e0", "sighting_of_ref": "indicator--4ef0a4a6-44f9-48a9-801b-82f4899f9a9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca71582-6da0-45fd-8c51-b7947217c35c", "sighting_of_ref": "indicator--aa99cac9-03b1-48d9-80d5-2f9c0aba4cc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36de8a-96f5-4d06-b066-0a63c012bfd6", "sighting_of_ref": "indicator--3c647570-8103-4ae0-8709-c375b946c2d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9245897-5369-41b6-ad81-664939315c3d", "sighting_of_ref": "indicator--7eb13127-d77a-4725-a559-0a438503b46d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff1b237-d745-475b-992f-297296320e0f", "sighting_of_ref": "indicator--7ed7a26d-7f6b-4d98-a311-845673f1bccf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacc581f-4432-4368-bd84-e8fc77378f72", "sighting_of_ref": "indicator--7ed7a26d-7f6b-4d98-a311-845673f1bccf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6ff32b-8a9b-4e69-a9fe-68b9ce8d8622", "sighting_of_ref": "indicator--691ed4ff-e032-42fc-8188-90c0d57976ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedfc601-a5d2-4874-8514-9ed6454f9b74", "sighting_of_ref": "indicator--691ed4ff-e032-42fc-8188-90c0d57976ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1412b837-6558-43c4-a548-2731457346d6", "sighting_of_ref": "indicator--691ed4ff-e032-42fc-8188-90c0d57976ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4093fc3c-403d-4675-afbe-94836c4ee25d", "sighting_of_ref": "indicator--a2ea5e46-fa87-491d-90a1-27b2a5b8b711", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5677b8-82fe-4e50-9f3e-b038df6841f7", "sighting_of_ref": "indicator--a2ea5e46-fa87-491d-90a1-27b2a5b8b711", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe939e8-fdbb-420f-aedd-aa0580f76681", "sighting_of_ref": "indicator--e8de7985-ce41-4f92-9558-e50558546825", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d689798f-2783-428b-91d5-0c56cfe24133", "sighting_of_ref": "indicator--cb6311f8-f1f4-4da3-bb56-8d01e5a024db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82990725-d7af-408f-9d4b-4a7df66fbf7c", "sighting_of_ref": "indicator--cb6311f8-f1f4-4da3-bb56-8d01e5a024db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db77d49-51d9-48d9-a17d-2ab2504f5a32", "sighting_of_ref": "indicator--64909ce5-0c66-405f-b5d5-7136f0295a69", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a94e8cb-8013-47d1-a812-89e0e1e0f610", "sighting_of_ref": "indicator--8faf5829-003b-4b94-9555-30b45a279d6f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23950849-084d-4978-8f42-6e33330a2c37", "sighting_of_ref": "indicator--a307c983-a1b3-4ef2-9e0c-8469575f9932", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e604b590-d8b7-49ad-b968-0178d71196bd", "sighting_of_ref": "indicator--a307c983-a1b3-4ef2-9e0c-8469575f9932", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e714d9-a211-4e24-adf8-427f2078e94c", "sighting_of_ref": "indicator--4db40232-de5f-4664-9d4b-9870f861a947", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e623352-3d8b-434d-b576-a146714418df", "sighting_of_ref": "indicator--4db40232-de5f-4664-9d4b-9870f861a947", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5fc5c0-a8b7-4003-810b-e3b050150b0b", "sighting_of_ref": "indicator--5aef1b01-6846-4a75-8387-bb54096f7039", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f1149a-1a8f-4826-8191-4c7cfdbf6302", "sighting_of_ref": "indicator--66cc67fc-8376-4007-a6af-fe09c0ca0f4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5726babb-9cc6-4673-b3c4-de02a99d0f3c", "sighting_of_ref": "indicator--d609357a-5f7f-46c2-b2c4-aea2e67763f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9970e1-3798-4b4f-9ea6-a6e79dc177de", "sighting_of_ref": "indicator--d609357a-5f7f-46c2-b2c4-aea2e67763f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17649ae1-1e10-45ab-a2e7-3577eed4ffba", "sighting_of_ref": "indicator--d609357a-5f7f-46c2-b2c4-aea2e67763f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6492e391-fdb9-4a72-85d3-fdcb6df038af", "sighting_of_ref": "indicator--8ac2d252-d784-4eb9-af18-571646beb98b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a411ce9-bdc2-40ce-8c6a-bfb7f0ebc69d", "sighting_of_ref": "indicator--e9f1f1a2-1304-4c4f-bbfe-36f96d98323f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee418b6b-8c85-41e3-a563-91c7416ef720", "sighting_of_ref": "indicator--8fce3577-12f9-4df8-8f5e-1c6f0843428e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4524a727-bc54-4722-af55-6e31c9512150", "sighting_of_ref": "indicator--8fce3577-12f9-4df8-8f5e-1c6f0843428e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26981ac-b508-4097-8173-2c8ff3b40f08", "sighting_of_ref": "indicator--8fce3577-12f9-4df8-8f5e-1c6f0843428e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e114be15-6f0e-40b1-95a4-7985de2453ef", "sighting_of_ref": "indicator--b3d6b077-f537-4a74-b72d-d9511ba01895", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b8027b-40a6-4815-9826-70fd71b9a6c4", "sighting_of_ref": "indicator--6cee72cd-ef7e-4b5b-bd14-2d2d938f82e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5440b2b-67fd-498f-80eb-ec9bb2170cd0", "sighting_of_ref": "indicator--6cee72cd-ef7e-4b5b-bd14-2d2d938f82e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a37c6c2-3d26-4315-849e-d9c5fdb78770", "sighting_of_ref": "indicator--e3762fff-6746-4dcb-9c86-9f15c54cbb08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6099f9-528c-4bad-a02e-08c9e666376e", "sighting_of_ref": "indicator--e3762fff-6746-4dcb-9c86-9f15c54cbb08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5ee3fe-4e32-412a-9045-df8b7ea6eba9", "sighting_of_ref": "indicator--3ad85438-8af2-4524-b920-a09e22d52e72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d10a86a-4aee-4ea0-bc9d-aecd6f010eb2", "sighting_of_ref": "indicator--3ad85438-8af2-4524-b920-a09e22d52e72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a07bc83-e9c1-4e08-9d01-df7764b70394", "sighting_of_ref": "indicator--e43f827c-6d84-43a7-a0a9-f344573372da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc742a07-2399-41d8-bfc4-60da6bef4ad0", "sighting_of_ref": "indicator--e43f827c-6d84-43a7-a0a9-f344573372da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8985e4e7-e39a-48f8-bf7a-7a37d22b3816", "sighting_of_ref": "indicator--4a8694d4-9ae4-4784-a34a-ef5c50c55de9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450bae52-8b29-4016-97e4-bd653ff9661f", "sighting_of_ref": "indicator--a2761b74-7989-4098-ac74-6713b366d4d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1c4725-2b70-47fa-9f85-d96abaf45b03", "sighting_of_ref": "indicator--c64460c4-5b9a-41d4-b09d-dd81ea1432ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddd3f72-a404-4e06-b7c6-0c27e7fea6fa", "sighting_of_ref": "indicator--c64460c4-5b9a-41d4-b09d-dd81ea1432ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd32583e-f092-451a-82a2-d06e8dfb2442", "sighting_of_ref": "indicator--97d85f58-88f7-46a9-8e94-e89bd225bf3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd863c8-d2fc-408a-8b9a-700159bd34bf", "sighting_of_ref": "indicator--97d85f58-88f7-46a9-8e94-e89bd225bf3d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fec299e-375d-492a-8870-3d8f48a462d7", "sighting_of_ref": "indicator--97d85f58-88f7-46a9-8e94-e89bd225bf3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e589e7f-fa3c-4f8f-b01f-7d9a36722868", "sighting_of_ref": "indicator--5fbff303-2e0b-4335-8ae9-47e1255776c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c803bb94-d168-4a08-825a-d9746cc17fcf", "sighting_of_ref": "indicator--0c8b819a-26fc-411f-a733-9d7e5683c494", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2397bbe7-4bf8-4ac2-b33f-a3bb67b3da2c", "sighting_of_ref": "indicator--a56dcc6b-a786-4362-9c94-69f84636c310", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c30e6d0-a208-4cdd-8d83-202a2e5f1633", "sighting_of_ref": "indicator--a56dcc6b-a786-4362-9c94-69f84636c310", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c791200-39d7-4fc5-923a-6c3f14f24774", "sighting_of_ref": "indicator--33ff3418-2c3a-45dd-b84f-05e0553ffd18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365ec0ec-9ef0-4438-a2a2-efd7e6a9ac30", "sighting_of_ref": "indicator--33ff3418-2c3a-45dd-b84f-05e0553ffd18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53dacf7-b9f9-445b-8f53-97185a4b86b5", "sighting_of_ref": "indicator--26f6968e-db32-489d-8a3a-df4ea951500d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f95f249-84d2-40c3-8320-957fe36f4a6e", "sighting_of_ref": "indicator--26f6968e-db32-489d-8a3a-df4ea951500d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eada7a-3719-49bd-bdab-384fa6f79d35", "sighting_of_ref": "indicator--cbd6c9e8-aec8-416f-b4c0-43905a419873", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbade30-b4ff-4e2d-b5b5-6bfaeb10144b", "sighting_of_ref": "indicator--5e7b8d87-122c-497b-bd16-9719500adc0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81498717-8a42-4011-ac16-61bf0d4956a3", "sighting_of_ref": "indicator--19194de5-bbb0-4ff5-a16a-40e59522b9e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0208909c-f174-4803-986e-3dc29c1cf09d", "sighting_of_ref": "indicator--19194de5-bbb0-4ff5-a16a-40e59522b9e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b05209-62c8-4798-a3a0-a3f2217927e2", "sighting_of_ref": "indicator--76c7eeaf-3be8-430f-b654-51c2920a4235", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b9cdc1-f68a-4ade-9f18-27e0d6edf8e5", "sighting_of_ref": "indicator--0364788a-32e6-4f70-ad29-44f804623204", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8adb08-e5fa-4622-ab2c-f97d93db9bba", "sighting_of_ref": "indicator--0364788a-32e6-4f70-ad29-44f804623204", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61aa8676-342c-4692-850d-e250642112a7", "sighting_of_ref": "indicator--9716cc0f-b66f-4a71-bc39-644b3e4514df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf864e53-7c4d-4f0c-999b-1c6de3e49c60", "sighting_of_ref": "indicator--9e8dac43-15d8-431d-9c3e-125bd10ecc34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f55efd-4ed3-4e37-a72f-f27d3d95f8ee", "sighting_of_ref": "indicator--1d31cf9f-7f66-4cd9-ab34-bac6cfaa5460", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3138f9-477f-46b3-90c9-2336a6fa0d42", "sighting_of_ref": "indicator--1d31cf9f-7f66-4cd9-ab34-bac6cfaa5460", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d530114d-16ec-4379-9f17-fabd897e44ed", "sighting_of_ref": "indicator--d2ca0d9b-735f-4266-8935-2f90f548403e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eb2106-e8ed-4783-88a0-470985541d2b", "sighting_of_ref": "indicator--1468f1bc-9f1e-432d-aaa3-6358554b694b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60cf00b-7606-48a4-b31f-9a24af26eeb1", "sighting_of_ref": "indicator--1468f1bc-9f1e-432d-aaa3-6358554b694b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6eacce-4449-427a-a5bc-174633ba6973", "sighting_of_ref": "indicator--d1e2eb43-6de3-43c3-8e5a-dcb17cb5ebe3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f36293-b90d-4476-b373-3a1d37c09c89", "sighting_of_ref": "indicator--73563ab9-b22c-4e23-94ac-4f7af970f557", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bba4a9-7086-4daa-ad4a-a358700bb88c", "sighting_of_ref": "indicator--8a5c6a36-c7d6-4ed0-b468-1ca260d5e775", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7ab8c4-5359-4dbd-a1ac-353787ae6b33", "sighting_of_ref": "indicator--d39aba25-f15a-40fd-a48d-5221f4cd41dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e90d421-912a-4229-a4ee-dc2343571f57", "sighting_of_ref": "indicator--d39aba25-f15a-40fd-a48d-5221f4cd41dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f2e7fb-8ca5-4d68-81dc-5461d2d4e91f", "sighting_of_ref": "indicator--cf89ba28-750a-4b03-9793-f8aa277420f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af02e5-8224-419b-b8a6-d324da1be5c3", "sighting_of_ref": "indicator--20c99d9e-320c-4cec-9999-2a7f4c6c9afe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aae10e1-09c6-4134-bfea-f458ef59e798", "sighting_of_ref": "indicator--ab10d156-5e00-46d2-bed5-24a370128daf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44cd2c2-227a-43ae-b9fd-401aa2026f3e", "sighting_of_ref": "indicator--cb34ae4c-58d5-41ea-a80b-4ccff3da4495", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4963764-9aca-4f43-8345-78f9846abe78", "sighting_of_ref": "indicator--25783f68-3e5d-445c-9c8d-d18362d14e20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18efc0f6-6918-4795-bbfd-cfaaa4aa4419", "sighting_of_ref": "indicator--e7f43ac4-5e3a-4f1d-a8b8-fd8c32aaf12d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592aafef-a6aa-418e-b108-68dc60fbc37e", "sighting_of_ref": "indicator--f4217949-ca41-4e71-ae90-07987b6c8b9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dfa21f-57f1-45a0-9636-c3a7d1674d10", "sighting_of_ref": "indicator--f4217949-ca41-4e71-ae90-07987b6c8b9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afba43ef-ae36-4c46-8cea-b35c25317de7", "sighting_of_ref": "indicator--f4217949-ca41-4e71-ae90-07987b6c8b9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8847e7db-2f86-4ad4-abac-6ff159987bf7", "sighting_of_ref": "indicator--6d923d2b-e342-4f2a-a6c9-5be9b8dda000", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71baa11-e0cb-4ccd-b127-223a7bfdb977", "sighting_of_ref": "indicator--7727deaa-36c8-4d37-8072-961d9d4369c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66810d3-56b1-46c8-909d-db8249f05a53", "sighting_of_ref": "indicator--7727deaa-36c8-4d37-8072-961d9d4369c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceacf36-3309-4e05-9a02-de995f9f33c5", "sighting_of_ref": "indicator--7727deaa-36c8-4d37-8072-961d9d4369c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1394bdf-c50d-44a1-9754-3cd134a2f727", "sighting_of_ref": "indicator--41cfe2f1-e757-493a-be23-dd9e09c02418", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef965816-6cb5-4de3-9ef2-facdd81109ae", "sighting_of_ref": "indicator--d33b57c7-4e46-49f5-a4da-e5d85bbf3213", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1f8391-bb3c-4603-b092-a009cd1cc0c5", "sighting_of_ref": "indicator--261cd7d4-2a1a-4607-a2a0-138abf05487b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e92540f-eabd-4cef-bb09-6bd8c244d7dc", "sighting_of_ref": "indicator--261cd7d4-2a1a-4607-a2a0-138abf05487b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2e978d-80df-407c-8c1e-71762e5a5ed6", "sighting_of_ref": "indicator--b34d69dd-0935-44b8-a1f1-25e8fbd4d557", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c19153-e43a-48eb-ae06-9478e7dfb286", "sighting_of_ref": "indicator--43dd3484-9eef-4979-95fd-fac6eb19921a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d22c1e7-3f8b-49ee-8e20-199b69cfe559", "sighting_of_ref": "indicator--43dd3484-9eef-4979-95fd-fac6eb19921a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cef9f5-4fab-48eb-be6a-e6de363260a4", "sighting_of_ref": "indicator--cf7facd2-6e94-497c-b8fb-1c8104c517e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439b77d7-566b-45db-a894-6e370292490f", "sighting_of_ref": "indicator--cf7facd2-6e94-497c-b8fb-1c8104c517e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d56498-59f0-4a7d-8c51-ce8372991fdc", "sighting_of_ref": "indicator--104fa521-58c0-4bed-84aa-d0347f0d2ec1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737b7bc7-2743-44d1-a0c5-9363e2b048b2", "sighting_of_ref": "indicator--104fa521-58c0-4bed-84aa-d0347f0d2ec1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c07c1d-6fce-4676-b3e4-e75bfcefcaa5", "sighting_of_ref": "indicator--06345bee-4a8e-445b-ad1e-b5ecc758fec5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e49167e-8310-44be-8e0d-7d62c7d47b71", "sighting_of_ref": "indicator--06345bee-4a8e-445b-ad1e-b5ecc758fec5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c126fe-8908-4749-8f66-daedc4770809", "sighting_of_ref": "indicator--bcb5cb69-389c-4260-8c23-e6f393421eaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e98d4e0-5877-4034-89e5-a0305d27d87f", "sighting_of_ref": "indicator--5e2c19fe-fa18-4a50-ac06-c135f2d1ede3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fbbbed-5bbc-485c-9a85-45379efa66ec", "sighting_of_ref": "indicator--558881a1-0613-4735-9ff1-2775ca5d8d2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f85d69e-1ca1-48f2-a64c-2bbafcce0fc0", "sighting_of_ref": "indicator--558881a1-0613-4735-9ff1-2775ca5d8d2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b141b3-66f8-4a2f-90de-9f571ee90855", "sighting_of_ref": "indicator--558881a1-0613-4735-9ff1-2775ca5d8d2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13a15ad-3103-43c8-ac05-9e96f1affd7f", "sighting_of_ref": "indicator--d82c58c0-137c-4162-b79f-1134c47240c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5934f87-7113-402d-a776-7c4b3645fb40", "sighting_of_ref": "indicator--904457e9-b9cb-463e-a80f-e854cad110e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607cddc0-35be-477f-b6a6-3528ad4fbd67", "sighting_of_ref": "indicator--35680692-b75b-4249-b8f0-5b81abda0157", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf38ceb8-59f8-4704-be31-4fb59ebee21e", "sighting_of_ref": "indicator--35680692-b75b-4249-b8f0-5b81abda0157", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e200067-f47b-4305-abe9-cb6e9171e575", "sighting_of_ref": "indicator--9e7e649d-98ed-4c72-b774-f2c0112f336b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eef65c0-4d91-499a-a698-7e6bce5577ef", "sighting_of_ref": "indicator--8a2b8dc0-b762-442c-8198-57d8376b12d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf8cbfc-ddf1-43e9-914d-c477fc20876c", "sighting_of_ref": "indicator--89734791-3d58-4681-86fb-67af9aaa67ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0794ec2b-0ba8-4e00-a04b-bb1fd4b3c662", "sighting_of_ref": "indicator--4590ca0c-f41d-4045-8b6a-67e60439d33b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636b7b6e-ed70-4d51-8c60-646ba0480877", "sighting_of_ref": "indicator--4590ca0c-f41d-4045-8b6a-67e60439d33b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccbf577-2642-421f-bc7a-0b35735055bf", "sighting_of_ref": "indicator--6c3ef0fc-aabd-4b4f-9c27-eb018611a028", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5894659e-4441-4bb2-b85b-f1a97262e857", "sighting_of_ref": "indicator--65623fb3-5878-47f9-8a9b-6a016fcac849", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db88d597-b087-4d71-8686-0add12d87658", "sighting_of_ref": "indicator--65623fb3-5878-47f9-8a9b-6a016fcac849", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8fb7a5-7668-482f-b565-bf169f293473", "sighting_of_ref": "indicator--09d0c62a-1af2-418f-958e-95b46d563616", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa81cca-1ed2-44f7-a637-b310292afb80", "sighting_of_ref": "indicator--09d0c62a-1af2-418f-958e-95b46d563616", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f09e67d-2920-4904-ae8b-0b576ed2be81", "sighting_of_ref": "indicator--2ae65060-e376-4e41-a0e7-f1c67249f142", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86daf8b0-3bd4-4768-aef6-6b6b9ea223b6", "sighting_of_ref": "indicator--243785a0-a6bb-4f5b-8aaf-83984a3e5b30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc789f-5a03-4101-9984-c2618d40b5db", "sighting_of_ref": "indicator--5da0c8c0-5b3f-47ad-b03d-59dee21936a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a1d7c4-379e-4b83-a340-3844dcb2a466", "sighting_of_ref": "indicator--5da0c8c0-5b3f-47ad-b03d-59dee21936a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cf7aa1-f520-4af6-9ee2-c2755df4c4d9", "sighting_of_ref": "indicator--5da0c8c0-5b3f-47ad-b03d-59dee21936a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9926338-2e09-41c5-a908-683e350a6154", "sighting_of_ref": "indicator--67012171-86c4-4b4f-8b91-81c79c072693", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e519f15-652c-4a46-9a48-14a70e27349c", "sighting_of_ref": "indicator--a19ad506-f246-47e9-8515-f0314f8b1f50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c269d6a-eeea-483e-b812-61e812e04c15", "sighting_of_ref": "indicator--b467bd13-80c5-414d-a334-539d452fe8be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ba0a4d-3c13-44c4-a3dd-1fb36ed75a3a", "sighting_of_ref": "indicator--980e942e-65e1-4c96-b0c8-9a161591c2da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d785dc-2118-408e-9deb-55cfaa47a92b", "sighting_of_ref": "indicator--e334eb26-85f7-490d-afe6-e50449c07717", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee22c116-c5fb-4f6d-9114-b67f6946be9a", "sighting_of_ref": "indicator--e334eb26-85f7-490d-afe6-e50449c07717", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75caf881-578e-4e84-a6f2-990698a64653", "sighting_of_ref": "indicator--e334eb26-85f7-490d-afe6-e50449c07717", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c1d2bb-d69e-48e7-beac-79c7e64972be", "sighting_of_ref": "indicator--da1e3b40-d276-4e1c-be68-95e7805535ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deb375a-8386-45ac-ba8b-bb2ed2decd2b", "sighting_of_ref": "indicator--da1e3b40-d276-4e1c-be68-95e7805535ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588c1068-d495-4f5a-812d-e44841e9eb4d", "sighting_of_ref": "indicator--1768a358-9ff3-4b1d-84e1-504ae8616522", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51f3ed7-d4d9-4f32-9eec-5e7dd4efe25c", "sighting_of_ref": "indicator--30bb6d65-4708-45ac-8542-00e0ab891597", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c422d66c-f75e-462c-b86a-eccd41c1eee1", "sighting_of_ref": "indicator--30bb6d65-4708-45ac-8542-00e0ab891597", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1139a1e6-f9fd-4591-b5c4-c32a916dad66", "sighting_of_ref": "indicator--ccedcb6b-319d-4737-bf87-a371b07f85d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cd8699-332e-407f-adc1-6c40d2dbc825", "sighting_of_ref": "indicator--ccedcb6b-319d-4737-bf87-a371b07f85d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edec831-15c1-403c-9b7b-b7de1684c130", "sighting_of_ref": "indicator--7f66a834-351b-4b93-8ee3-6db4d820e1ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6b766e-8fb0-4226-9722-936f624bd8ea", "sighting_of_ref": "indicator--7f66a834-351b-4b93-8ee3-6db4d820e1ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef078ee2-69f8-45e4-80b8-06a19dcd6d89", "sighting_of_ref": "indicator--1f19a79b-38a5-490f-bd60-cc7b0528f043", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597980d6-2cec-4913-adcb-c3bfb3ad3932", "sighting_of_ref": "indicator--d6bbb987-1d2d-4da9-98f1-68cc3ff5f978", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48cac87-4b0a-42d5-a2c1-0a74d16e6e95", "sighting_of_ref": "indicator--de20b55a-9df7-4869-a3d3-6fcdb07ff4ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bbf0dd-f4dd-419d-a9bb-38af8e831e77", "sighting_of_ref": "indicator--de20b55a-9df7-4869-a3d3-6fcdb07ff4ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04484fdf-fcf1-4c63-81cd-616a6ce07bc6", "sighting_of_ref": "indicator--63992251-2153-4498-b4b7-556abe81ba1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59515f55-915d-4daf-97c8-642c97c0ee41", "sighting_of_ref": "indicator--63992251-2153-4498-b4b7-556abe81ba1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04196f6-67ad-4b62-a2e5-50f06ae793c2", "sighting_of_ref": "indicator--c5177e3b-68e2-4ba4-a090-987fc5fbb526", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a453ebf9-d594-4ad4-b7a8-1864409bf43b", "sighting_of_ref": "indicator--c5177e3b-68e2-4ba4-a090-987fc5fbb526", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bc4134-d44a-4626-a4af-31429473a910", "sighting_of_ref": "indicator--c5177e3b-68e2-4ba4-a090-987fc5fbb526", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc791ad8-bb66-46d1-aacc-3b4a1af5898b", "sighting_of_ref": "indicator--e1562c13-6780-4525-ac2f-3a83a649a583", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471c8ba6-c07b-4810-b04c-737ce1826b49", "sighting_of_ref": "indicator--d278e63b-767b-418e-b077-65a6da92a96c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd3c810-e18c-4903-97ba-ad60a916c72d", "sighting_of_ref": "indicator--92258c2b-d8f3-47c1-9de3-eadeeafd31d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a541a905-65fc-4762-9efd-ed5f83d00d9a", "sighting_of_ref": "indicator--92258c2b-d8f3-47c1-9de3-eadeeafd31d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ff74ed-1af3-49e9-9a5b-f7778eff74f6", "sighting_of_ref": "indicator--92258c2b-d8f3-47c1-9de3-eadeeafd31d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec909925-deec-4d84-8d30-7da223cce98e", "sighting_of_ref": "indicator--411ce190-aba5-4cfb-a042-91815e3fb951", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d85912-28fe-4cf1-bdd5-5e382338e81a", "sighting_of_ref": "indicator--87099170-2c89-42ab-9ee7-228b34d150ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2262a9d6-20aa-4ee5-a8d5-d9b5e7c033d8", "sighting_of_ref": "indicator--87099170-2c89-42ab-9ee7-228b34d150ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756224ce-c6db-4d47-8487-2e2f9d8a8e75", "sighting_of_ref": "indicator--bcfd407b-8a87-4d9e-a8be-f64f1909d32b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d815ad62-3a93-4caf-9093-e77d82c58728", "sighting_of_ref": "indicator--bcfd407b-8a87-4d9e-a8be-f64f1909d32b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1f747d-0542-4331-aeda-25777a8b6aaf", "sighting_of_ref": "indicator--b49b0862-cba8-4571-938d-aaf8a091571e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8efb9fa-8d1a-4959-9398-fa2ddfaa80f4", "sighting_of_ref": "indicator--f0640ec9-272f-483d-b415-c96acba636fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e359f808-f84f-4975-9a32-0ba544ae8868", "sighting_of_ref": "indicator--2377316b-d2c9-401c-9aed-69115f1c30d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6f7095-37ec-40fd-8f70-9f2b1aa8f247", "sighting_of_ref": "indicator--e55191d0-1fcf-4e9c-971e-0b3f52a5f9f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9114b4b1-5a45-4b2d-a8f3-e568016551d5", "sighting_of_ref": "indicator--e55191d0-1fcf-4e9c-971e-0b3f52a5f9f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62c20cf-3b63-4abb-bbba-c4d0512105a1", "sighting_of_ref": "indicator--bdf6211e-0f85-4849-afb5-f5827c7c8731", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53657703-cc49-48af-beb8-6d84ff956467", "sighting_of_ref": "indicator--e3da1ef3-902b-42bb-81af-b2cd984d4053", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327a93f5-5dcc-4bf4-adbe-81fa394b09a8", "sighting_of_ref": "indicator--e3da1ef3-902b-42bb-81af-b2cd984d4053", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b903c4c-1a8e-4d20-b1c2-7159a3b0ca95", "sighting_of_ref": "indicator--42bfb400-4e6d-4462-bb80-ada792b2c1a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824ec620-3b3e-42d0-b6ef-18b58657008f", "sighting_of_ref": "indicator--42bfb400-4e6d-4462-bb80-ada792b2c1a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8f4b24-a2db-49f6-b707-7b0ba65ef5db", "sighting_of_ref": "indicator--42bfb400-4e6d-4462-bb80-ada792b2c1a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7e303-4775-4202-9919-58034d98fbc9", "sighting_of_ref": "indicator--6bb924dd-69e3-49d9-a2ca-95f39a7230dc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bbe071-3d24-4802-95dd-a26801c466e6", "sighting_of_ref": "indicator--6bb924dd-69e3-49d9-a2ca-95f39a7230dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752beb14-8efc-4de5-9d5f-f696cc86e364", "sighting_of_ref": "indicator--1582a876-7e8c-4775-b9a8-d27f268a68ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efeb3e16-cd8f-409f-a8f9-c2defbd5b5f8", "sighting_of_ref": "indicator--7787f392-88ea-4bd2-9340-e3d2fce8d257", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf9f3b3-842e-4421-bbf9-bb836891e316", "sighting_of_ref": "indicator--7787f392-88ea-4bd2-9340-e3d2fce8d257", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a092f2b-0e3f-4c38-864f-31864a5304a4", "sighting_of_ref": "indicator--7787f392-88ea-4bd2-9340-e3d2fce8d257", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5de7f9-3354-4d09-82f2-fc66cb4d8994", "sighting_of_ref": "indicator--ce00219a-231f-4ec8-835f-ac165e284555", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0877fb0-4d63-445b-92db-24c424f6235b", "sighting_of_ref": "indicator--ed565df9-ba37-419f-8f20-0a0177f88b31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68ec7ba-3eb2-4395-bd98-3fdf8abe37da", "sighting_of_ref": "indicator--ed565df9-ba37-419f-8f20-0a0177f88b31", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29b539e-899b-4d04-b840-10614e2066e4", "sighting_of_ref": "indicator--2436cf47-4077-4a5a-ac80-df6e7d9ade32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0d377-71a5-4d6a-a0e9-8741a0161831", "sighting_of_ref": "indicator--2436cf47-4077-4a5a-ac80-df6e7d9ade32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b6d042-72ce-47a0-b85c-83b0c410d68d", "sighting_of_ref": "indicator--f6477f8f-6dc7-46f6-927b-5591068af8e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1329c447-2e26-4d53-ab4a-20c408a81d10", "sighting_of_ref": "indicator--588b33f7-f861-4b12-83e8-9e8c614460e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842fca90-e1b5-486c-95bb-24652d676e63", "sighting_of_ref": "indicator--588b33f7-f861-4b12-83e8-9e8c614460e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bdcb8b-22a5-4b6f-85f8-d7c265bf6447", "sighting_of_ref": "indicator--5c7c5641-2df7-43a5-9c2f-472a8462b2c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce8dbb6-e9f7-4376-863f-a7b336bdee11", "sighting_of_ref": "indicator--5c7c5641-2df7-43a5-9c2f-472a8462b2c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d45b8e1-84b4-40f7-930a-90979a22fe76", "sighting_of_ref": "indicator--45ffc426-f1af-42c8-beac-39e07cc67d7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48345692-6237-4fb9-a8a7-0cfc1f41c72a", "sighting_of_ref": "indicator--45ffc426-f1af-42c8-beac-39e07cc67d7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acbaf37-8d18-46e1-9750-de7ec548cc83", "sighting_of_ref": "indicator--ab23e7a4-2462-452d-9313-c3199c55c850", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b7992a-b05c-40ef-ab06-3a5ec2c73f03", "sighting_of_ref": "indicator--0fe22a91-e10d-4025-8e78-f0169ec40be6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1518c100-e2f2-431e-bc38-5933f8e5ffe7", "sighting_of_ref": "indicator--9231deb7-d54f-43f2-b39a-9902f34b2aef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed267072-bf69-4535-96e8-203307a4ae1a", "sighting_of_ref": "indicator--9231deb7-d54f-43f2-b39a-9902f34b2aef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510bc9f9-a11a-4cf6-8b63-5063c15ee7fd", "sighting_of_ref": "indicator--9231deb7-d54f-43f2-b39a-9902f34b2aef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07af9f5f-ef18-42e2-ab33-1bd69679d124", "sighting_of_ref": "indicator--a8e87fac-8e53-4d47-b237-17cf7a32fd24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c324632-3586-4f00-bbc0-bc9722e04d0e", "sighting_of_ref": "indicator--37ea5e97-1d96-4fe7-80d8-5ac88fb3f944", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405e215d-3400-4495-989c-f848e524613a", "sighting_of_ref": "indicator--b0414c9f-ec04-493b-bb3d-ca6cb6824b53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbadaf3-8086-4e1f-8aef-11f917067623", "sighting_of_ref": "indicator--d96f47a7-fa1a-428a-9432-4847fef42c9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceb37d2-5419-4c9b-a841-abd7cb55828b", "sighting_of_ref": "indicator--b261a45d-910e-468f-954a-2c4e5e12f013", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e452f5bc-5791-475b-846b-caeff8b8bd0f", "sighting_of_ref": "indicator--ac28af38-e64c-4778-b8ab-b0cd4714b00f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c0d708-d2fe-44d6-8a8f-0feafb195f4b", "sighting_of_ref": "indicator--95f2d3e7-ab7c-45be-812c-7f781ba6dc51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80291ced-4fd7-4371-9445-ce1e783a1331", "sighting_of_ref": "indicator--887aec1b-5b31-4446-b950-b98833bdb499", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e66850-8e9e-4073-9ac1-b4ab4b674841", "sighting_of_ref": "indicator--887aec1b-5b31-4446-b950-b98833bdb499", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fec9b22-a234-42bc-9c0f-29c4c6961031", "sighting_of_ref": "indicator--887aec1b-5b31-4446-b950-b98833bdb499", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd69c40d-71e1-4974-8096-8aac176a48fa", "sighting_of_ref": "indicator--b7534a77-145d-4543-b227-f121a5d7ed52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4c246c-0658-441a-bfd3-36df2d2d1a02", "sighting_of_ref": "indicator--4edd4173-5150-4159-97d5-a37423845d15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5fffff-3c64-4aa3-8a81-52d35bc83bd9", "sighting_of_ref": "indicator--8a93beff-6097-45bd-aac4-98d01bf386e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19162ca8-ba66-42cc-9ca8-1f1493cf43a3", "sighting_of_ref": "indicator--8a93beff-6097-45bd-aac4-98d01bf386e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a155f0-6c73-47d9-a978-ce0c0661dd72", "sighting_of_ref": "indicator--8a93beff-6097-45bd-aac4-98d01bf386e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01b5792-6ae8-40e4-80f7-07c94341e5b3", "sighting_of_ref": "indicator--688d0a31-a1fa-49b9-98fc-492b26bb08b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc2ca05-ef5b-401e-a63d-21565121a5b4", "sighting_of_ref": "indicator--1a738ee6-d6ba-41f3-88d4-ef20150ada45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c908a0d0-8970-4e5b-b416-7c5ef114a207", "sighting_of_ref": "indicator--e6806c06-6f82-4678-b104-cfc882a2cd1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838b4832-8e20-421d-b9db-e28ab2f6f0a1", "sighting_of_ref": "indicator--e6806c06-6f82-4678-b104-cfc882a2cd1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf3d889-d94d-4329-ac2b-01fe844c0387", "sighting_of_ref": "indicator--6823692b-7ec5-4691-9112-a120e1c17935", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81596f05-1de4-49ac-925d-b456c20499b5", "sighting_of_ref": "indicator--ba0822b1-2521-40b5-b1dd-56e12bb54019", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6288399c-54c9-48e7-90ab-5b0e6e2b49ce", "sighting_of_ref": "indicator--a80cd7e8-b6ef-470b-9d7c-4346c6ccbdef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8f7555-0c1d-4fb2-a413-a20d66b23173", "sighting_of_ref": "indicator--a80cd7e8-b6ef-470b-9d7c-4346c6ccbdef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce084c25-ba23-4fd7-87cb-fb54b9d4fb1f", "sighting_of_ref": "indicator--a80cd7e8-b6ef-470b-9d7c-4346c6ccbdef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2d889c-f5b1-460d-b657-e5a48c195e1e", "sighting_of_ref": "indicator--14e27531-6369-45f1-966b-8c626be9536f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab192d2d-f924-43b3-9677-646919f2686a", "sighting_of_ref": "indicator--22629315-8056-4fac-b663-98745b797203", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d262f3a-ebfb-458a-be7b-358d0ad9bd85", "sighting_of_ref": "indicator--c9557e94-661e-4372-bf07-aa0cea6a5d06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e3ae6-3378-4417-b0a7-051bf1ff2b51", "sighting_of_ref": "indicator--76ca12a2-24bf-4eab-a0fa-06610ae037f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879ed27e-4573-47dc-b632-ee017ccc0f12", "sighting_of_ref": "indicator--f626d1a3-fb88-4495-ad9c-46e6c52edefe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be134bbb-c713-4b20-874b-e8d7fe70b9d8", "sighting_of_ref": "indicator--f626d1a3-fb88-4495-ad9c-46e6c52edefe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44caeac8-9564-473a-a131-b4cc7a43b175", "sighting_of_ref": "indicator--5fd8f7a2-2eb0-45ea-bf57-af8829d552e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0242d40-b030-4708-8410-5dd4c39dc299", "sighting_of_ref": "indicator--b057c9df-f888-455a-80e0-08db63adf3dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80fea35-deac-4e95-bf51-88114c2661b1", "sighting_of_ref": "indicator--4dce37a7-d3b7-4443-bbca-d594331f3f57", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0f14e3-531e-43e7-85c0-23f45ce625c8", "sighting_of_ref": "indicator--61b41ab8-1476-4be6-9cea-8f11d0337a86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16328fad-3923-4e96-8154-be7437e31a3a", "sighting_of_ref": "indicator--1fef4e78-c32c-478b-bb62-da9d73ff45f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151d9f18-99d5-4586-9c70-66381023d00b", "sighting_of_ref": "indicator--9f0136bb-7709-4b80-8ee3-f90dc89c91e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7459ff-980c-4068-96c2-c021d5ceab37", "sighting_of_ref": "indicator--26e0f66f-36e0-4144-906d-d8db2e6f1765", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003fba74-ff73-4bc4-9e70-e8f10865894d", "sighting_of_ref": "indicator--84559a26-fe45-4f36-a193-862604766384", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d6db68-2976-4eee-8435-0ee2d0f30f94", "sighting_of_ref": "indicator--eed27e6d-a65b-4beb-a6ad-36d3f148c195", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39605561-853e-4804-9255-0e5eed82ec07", "sighting_of_ref": "indicator--878f7903-3939-4c42-a1ec-25f49474cd1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9150129-f5fc-4746-9e86-6fb7372c8ec5", "sighting_of_ref": "indicator--7c66dd3d-316e-4897-b75e-e3ecfa3efbf9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee0ce1f-2135-444c-9e8d-6c31e3f9e7cb", "sighting_of_ref": "indicator--18a41208-387f-4618-a851-73606a950b77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305b1cbf-e2dc-47c9-8ca9-15015d2f8f5e", "sighting_of_ref": "indicator--18a41208-387f-4618-a851-73606a950b77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fade0707-3ca9-428f-980e-fd3e044ebfdb", "sighting_of_ref": "indicator--18a41208-387f-4618-a851-73606a950b77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f4f7f1-8936-4318-a1fa-ac4095d0a7cb", "sighting_of_ref": "indicator--68bc1844-a8e0-4b38-b89d-1b6358436867", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d00116-0185-49cd-85ac-ae9ecceba821", "sighting_of_ref": "indicator--68bc1844-a8e0-4b38-b89d-1b6358436867", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc40110-89e3-48df-a827-213cd9b5fded", "sighting_of_ref": "indicator--68bc1844-a8e0-4b38-b89d-1b6358436867", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469f7f7a-74ff-4fd5-9fa3-962e3efb54f3", "sighting_of_ref": "indicator--d320d744-f8f0-4dbe-bc26-0ce84eaee65c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de53013-6230-40b4-b8ba-58b8f73c992b", "sighting_of_ref": "indicator--d320d744-f8f0-4dbe-bc26-0ce84eaee65c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e025f69-3dc0-4100-8b40-3a1d1e616bbc", "sighting_of_ref": "indicator--d320d744-f8f0-4dbe-bc26-0ce84eaee65c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca57d0c0-a162-4195-bb63-0e6fedbeb8bb", "sighting_of_ref": "indicator--65aaeef4-6828-4612-9c1c-7a3ed2666717", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408fd95d-dddc-48df-9004-b0c2d2fe16fa", "sighting_of_ref": "indicator--65aaeef4-6828-4612-9c1c-7a3ed2666717", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961b345b-ab25-41cd-9cd9-d21f925f2aa7", "sighting_of_ref": "indicator--e55bdcde-7639-4f8c-bc47-e74c520d7399", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8658bd-3a35-499b-8fe1-c4c83061d3ab", "sighting_of_ref": "indicator--e55bdcde-7639-4f8c-bc47-e74c520d7399", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121bbae-1cd3-4da3-8a33-8e8281bc6f9d", "sighting_of_ref": "indicator--e55bdcde-7639-4f8c-bc47-e74c520d7399", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fc452d-bcdf-4b84-bd14-153d6b467ce2", "sighting_of_ref": "indicator--4b360a4e-5882-42af-9263-871a99711d51", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f92d9c-4068-42de-8109-b68ea7b577d3", "sighting_of_ref": "indicator--4b360a4e-5882-42af-9263-871a99711d51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881aa104-a45a-4e3b-8111-a07c84da6c29", "sighting_of_ref": "indicator--4b360a4e-5882-42af-9263-871a99711d51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0cde6c-4aeb-42ee-8da7-27d015f5203c", "sighting_of_ref": "indicator--27bf1497-6943-44e5-8895-a9a56fb835a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c286b6d-7bf1-4755-9583-f6532cc2d72e", "sighting_of_ref": "indicator--27bf1497-6943-44e5-8895-a9a56fb835a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4fb593-b33f-4d6a-a54d-f9a70aabf17e", "sighting_of_ref": "indicator--27bf1497-6943-44e5-8895-a9a56fb835a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c136de-67c3-4e32-ba88-b0f651204f81", "sighting_of_ref": "indicator--86001765-8368-42d2-b97c-eecd3d24c2f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1751598-7d1e-4a25-98fc-3241221debfc", "sighting_of_ref": "indicator--86001765-8368-42d2-b97c-eecd3d24c2f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19416116-cbfa-4d2d-bbbd-8b6a038e235a", "sighting_of_ref": "indicator--86001765-8368-42d2-b97c-eecd3d24c2f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3aec10-3534-45b1-9bd3-013843c5b7d7", "sighting_of_ref": "indicator--74f317ae-3b9c-4080-86d8-044ccd1ec90c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a415b58f-1fb9-416b-965a-8de46b9ee0f3", "sighting_of_ref": "indicator--74f317ae-3b9c-4080-86d8-044ccd1ec90c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7be86b-014b-4868-bfcf-253e24ccd5ef", "sighting_of_ref": "indicator--74f317ae-3b9c-4080-86d8-044ccd1ec90c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e067113e-f03a-4466-85cb-04c37d5e6258", "sighting_of_ref": "indicator--0670ab14-bd11-4734-99c5-399206e09965", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d57283c-0494-470e-8113-fcfc52069105", "sighting_of_ref": "indicator--0670ab14-bd11-4734-99c5-399206e09965", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03863439-8382-4fde-bd51-96a64111bf9a", "sighting_of_ref": "indicator--0670ab14-bd11-4734-99c5-399206e09965", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6127c590-d708-4208-bc9e-a73a0a27b693", "sighting_of_ref": "indicator--105ba084-8ce6-4bf0-a911-aa791d433d94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532fd985-e021-4a32-920e-a8e5f7cace62", "sighting_of_ref": "indicator--105ba084-8ce6-4bf0-a911-aa791d433d94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ee3c5f-c3df-45cc-b64d-817630f98f13", "sighting_of_ref": "indicator--e35cd702-51d8-48fa-9072-7bb49b1ed1e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c4d99-c667-406f-8ba7-95dfea7cba79", "sighting_of_ref": "indicator--e35cd702-51d8-48fa-9072-7bb49b1ed1e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a53b18-3704-4d5d-a049-e8f93636d5d7", "sighting_of_ref": "indicator--e35cd702-51d8-48fa-9072-7bb49b1ed1e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4548691a-b9e7-4b66-8f6c-b535fa5c5331", "sighting_of_ref": "indicator--2d4df57b-1ed3-4323-8a81-f725d69ee138", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285ee9ae-6401-42ff-a1a6-5a95dcc3d782", "sighting_of_ref": "indicator--2d4df57b-1ed3-4323-8a81-f725d69ee138", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7205db1b-fcb0-4a5c-9c9f-c4aaae3e639c", "sighting_of_ref": "indicator--2d4df57b-1ed3-4323-8a81-f725d69ee138", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75884c34-cfc0-4f91-b6e9-2a58a8710d1a", "sighting_of_ref": "indicator--ba324a17-8c75-461a-ab70-9022d2603946", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967b652e-1ad9-462d-a0a5-96ef10b93e39", "sighting_of_ref": "indicator--ba324a17-8c75-461a-ab70-9022d2603946", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89f699f-072f-4e48-b015-6bf7f1e06cd6", "sighting_of_ref": "indicator--ba324a17-8c75-461a-ab70-9022d2603946", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177f7715-b0d4-473e-90b3-e302fcd0ce79", "sighting_of_ref": "indicator--9a46949d-8559-4842-b676-8a25d7d5850b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8597f8d7-f72f-4c77-aed2-fec05b7589c7", "sighting_of_ref": "indicator--9a46949d-8559-4842-b676-8a25d7d5850b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b1aa26-8d77-4b8f-bdcc-0661306548af", "sighting_of_ref": "indicator--4aa27874-bfdf-4332-bb87-30d883326dfd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7455db-27d0-4f2c-b34d-9e14df0c5e90", "sighting_of_ref": "indicator--4aa27874-bfdf-4332-bb87-30d883326dfd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc07571-d739-4fab-aa3c-b22e2847a9b7", "sighting_of_ref": "indicator--4aa27874-bfdf-4332-bb87-30d883326dfd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7048af1-cac5-431e-85d6-1e874627a6ff", "sighting_of_ref": "indicator--74c15dbb-8260-4a21-8fd4-923eda4c032e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c55135d-b4cf-47b4-b35b-cde8fc91d0ca", "sighting_of_ref": "indicator--74c15dbb-8260-4a21-8fd4-923eda4c032e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d5d2d2-fcd1-4eac-81da-2fcaf2b68829", "sighting_of_ref": "indicator--af725ac6-d709-47f9-867b-b66f3e773653", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130fd8a9-3b35-4945-829c-11682b33a1a7", "sighting_of_ref": "indicator--5535d01a-a792-4bba-8b2d-8e993d227af8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de45d5-2866-4bd4-a673-9b1b56a4d415", "sighting_of_ref": "indicator--ab53735c-c3e8-4dad-a29e-ee8d7c11c40d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b42ef2-49fd-48ad-a623-8e714a7d3549", "sighting_of_ref": "indicator--ab53735c-c3e8-4dad-a29e-ee8d7c11c40d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7673e9-b89b-4bc8-a0de-f8f6311d9982", "sighting_of_ref": "indicator--80251ebc-fe7c-446c-88f3-77d9f0c9b0fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cd312f-5fb7-43be-aaa9-051a2ab77c7f", "sighting_of_ref": "indicator--eaf855ca-1ced-408d-8830-e8d4575000d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405083a4-4d55-47d9-bb1d-2b287169871f", "sighting_of_ref": "indicator--39ab8722-aac2-4c2b-bae4-fe809ae17bf5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0e59bf-8660-4fd6-a370-c096aaaff59f", "sighting_of_ref": "indicator--5d4f6830-3ac7-4937-bb93-63b7df3cac55", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a978e57-8fc0-48e2-91a7-5ba944c59f50", "sighting_of_ref": "indicator--2311bd7b-62b8-4375-8f77-300a3964cfa9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cd60de-ac2c-41b7-8ca0-6e3c901fb9ce", "sighting_of_ref": "indicator--4471ef1d-76a2-4c8d-b0db-7539421cf384", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfcdd93-fe3b-40e2-876d-d69d6169bd43", "sighting_of_ref": "indicator--f1adc3c3-8732-4e1f-a980-95647950c929", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a6fcd8-1cba-4e2e-9876-d4ee97c80fb1", "sighting_of_ref": "indicator--cd17dbdc-3f0b-47f7-8dc0-646012b2ffce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6727eb8a-2fb9-474e-a4c1-11df5f548283", "sighting_of_ref": "indicator--5627374e-d4fe-4026-b0cb-b892b0652631", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bc9606-6c13-449b-a8d9-e31d9f24fbb9", "sighting_of_ref": "indicator--5627374e-d4fe-4026-b0cb-b892b0652631", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a413d442-f154-4785-8d63-ef8644960a51", "sighting_of_ref": "indicator--a71fb111-2ca6-4435-b877-ba76d3f3278a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6dfb36-9bc7-44e5-8237-2ff50f48edbd", "sighting_of_ref": "indicator--18c9d87e-af99-4417-b337-48bfa733e918", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d57c9fc-eb3e-4c75-9070-b8309a4fa44c", "sighting_of_ref": "indicator--5440f5e8-8e31-4447-beba-a86057875cf6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3454eb9c-f48e-4882-846d-732ca906e602", "sighting_of_ref": "indicator--36d2c23e-eb36-4313-93ec-ff9c78a9c6cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44089a7-ee00-4f0b-bdd4-a985b37cc9a7", "sighting_of_ref": "indicator--36d2c23e-eb36-4313-93ec-ff9c78a9c6cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18238a61-3253-4b8d-b632-90c826f5f09c", "sighting_of_ref": "indicator--2d3a60a3-cb8d-4ec8-9efc-6c095a31e187", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae61bbe0-8121-4878-8fce-0a5c2de2e36b", "sighting_of_ref": "indicator--0be60eb0-3f6f-4b8b-b358-af92391c6929", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f549dac-f44f-4ea6-83d2-00208e2c9cc0", "sighting_of_ref": "indicator--0be60eb0-3f6f-4b8b-b358-af92391c6929", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a292a60a-f1a1-4d52-9700-e6c00fe0db6a", "sighting_of_ref": "indicator--120b4363-4e11-4f5f-a9ab-d26fa9ac6958", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ac0c49-0eaa-40b0-aa38-e2ac140f1c97", "sighting_of_ref": "indicator--a8ad1dac-9891-48e8-8d03-4890f212104b", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd33e5a3-a902-4c6f-83db-b8c1a0b5cf77", "sighting_of_ref": "indicator--2c7b9a45-7eb9-4d18-b6c1-f1c956c04f3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2de8e63-3ea6-49f9-9bf4-426f391187c8", "sighting_of_ref": "indicator--ae307ce9-e43b-461b-834b-64c0de9f7ede", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ed6739-20c7-46d6-8492-ac68c823954f", "sighting_of_ref": "indicator--2f991b48-9c10-4d5f-92e1-7862a79b1165", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa80694-0634-46dc-ba69-302f6f950593", "sighting_of_ref": "indicator--89ebf8ae-2f75-47d6-a94b-6b67a379fbfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d0c73-27b4-4dac-af52-4d0442db60b6", "sighting_of_ref": "indicator--27a7bb8f-fbd0-496d-a2af-ff197eeb3bff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625a6aad-5bff-47e4-bf29-1e2a59ab1817", "sighting_of_ref": "indicator--3740a10b-1fdf-44a1-97d3-c86bcca5a6f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984181fd-60c2-4560-9c06-f4fea64d61ac", "sighting_of_ref": "indicator--4d3b2d1c-1d8d-4b63-bbb6-d3b1a527df2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b90cef9-91c1-4cd3-8b2b-4b295c9d1e56", "sighting_of_ref": "indicator--fdb49697-87d6-4746-b929-7ee0123f3f95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba401118-541e-4f5a-b2ca-57a0b9ae10c8", "sighting_of_ref": "indicator--eaed7532-4045-405e-bf1b-2a43c333f9bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bff834-846e-4c0f-99cf-28845a8f1462", "sighting_of_ref": "indicator--f3a1070b-73a1-4edc-b7df-988b234f96ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e3472f-85a6-4c08-a6d4-b94c6c5c716c", "sighting_of_ref": "indicator--bc60813b-169e-411f-9892-849bd8277b89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8383676-024f-46a7-961d-debf7cfd318b", "sighting_of_ref": "indicator--07000620-fc67-432b-8c2a-b6d6d9e984c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea31949a-d64c-4f05-9248-47f8c949cd57", "sighting_of_ref": "indicator--fc7e1ec6-44c8-4c46-8d88-79162cda24ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d68829f-ffe7-463c-a42e-b1a75159c630", "sighting_of_ref": "indicator--3251d447-40e7-4479-806b-d9c4098bb827", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fbeddf-76b0-4ae7-bdf9-5f062406de00", "sighting_of_ref": "indicator--62803f4e-ab42-4dbe-a23c-6bfe67efa544", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaef4ad2-59b2-42ae-9500-b78bbd8cca66", "sighting_of_ref": "indicator--86b807ac-0eb7-45b5-a1ac-34eef624e928", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443eaab8-4878-42b4-9fb1-f851a2fcc41a", "sighting_of_ref": "indicator--f7a0ea31-ab0a-4a94-a099-055462c62ec8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dc5c10-17ba-47cc-8e13-5139e71186b9", "sighting_of_ref": "indicator--c00ad383-77d0-4b7e-9132-dbc03ac7b8ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6971f82a-5fb7-4b60-a624-a08d5424490d", "sighting_of_ref": "indicator--549dd593-fb73-45b2-909b-87318cffd331", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9a1979-68d8-440b-9170-3ddac9350092", "sighting_of_ref": "indicator--b8fbfc03-9f6c-42af-93bd-6d1ce8020bf0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902176eb-7b1c-4e8e-9cec-415a77e0f24f", "sighting_of_ref": "indicator--a42ccf5e-a7ac-4c51-a525-a4d78b57b93a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90970682-0e42-4b25-9d28-e44d701cff95", "sighting_of_ref": "indicator--9cdfc01a-7920-4e7a-95fd-b049d8736390", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c8e290-baad-4211-b071-ecc35a0970e9", "sighting_of_ref": "indicator--7bfd0ba8-6c19-4adf-863e-dae8a86ad3e3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51af2a69-a10e-4803-9dd7-717bc0f36ca9", "sighting_of_ref": "indicator--0ce24ac0-8f01-4dd5-b885-326474b20dcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c712106-b65f-4573-b858-872c423dd222", "sighting_of_ref": "indicator--7aaa6557-10f3-45f6-8c1f-56311ccfc551", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89941fd2-c632-4987-b464-004cb149e396", "sighting_of_ref": "indicator--4bfc44f5-782f-4aa4-aadc-4a960e960cba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03ddf79-ec84-4f6b-b5e9-ab40dca342ac", "sighting_of_ref": "indicator--07bd07c0-4d5f-4cb5-a980-0de47e18ee30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9120c5b1-0283-47b5-bae3-2b58700ac57c", "sighting_of_ref": "indicator--cc47eba8-800c-4c64-b264-6a5904e357d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93a6bd0-8cf9-4d25-acf0-fa8f18439c61", "sighting_of_ref": "indicator--65801279-b919-4c08-be12-55351016dcc8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4605d3dc-3922-4c44-bd52-b20a4ad80d44", "sighting_of_ref": "indicator--e7bb1238-dda4-43e5-bdc8-5884dbf95003", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fc799a-cff9-45c9-acc3-2060af6d16b6", "sighting_of_ref": "indicator--e7d9bbec-e34b-4e6c-aa20-adf90d00d520", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ee0a43-2f93-4d0f-a326-9c80433b2386", "sighting_of_ref": "indicator--f5f754d8-57f2-4547-8daa-876d3a860563", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e807bd-922a-4eb6-9e8c-0f7ffacac66b", "sighting_of_ref": "indicator--0e26ed10-c790-43ed-a24e-8d589494cdad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118528d1-d34f-4125-b13d-33f6b538acc6", "sighting_of_ref": "indicator--286fc02a-51c9-4aa6-844e-04ac028fe105", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a31fd24-4b56-4a7f-a017-88ed5ca27202", "sighting_of_ref": "indicator--cced2d6a-7259-4ae4-b909-19ce8f91150f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01555e1-d650-483d-882c-36753118b5ba", "sighting_of_ref": "indicator--8f46af2e-0b0c-4ad2-915c-6b9281a83878", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0742f86-afb3-43e0-b470-2bac76f1d93e", "sighting_of_ref": "indicator--2350262a-d008-482e-94df-b7762d7b823f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db1d610-ab46-41c7-acf1-26979017af4d", "sighting_of_ref": "indicator--9fd565dd-88a5-4b16-9db5-4f50e5cf59aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b77ee9f-7e1b-463a-b53a-7d508fde57fa", "sighting_of_ref": "indicator--aaabb558-5895-4048-97f2-410ae4d4f5f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7663caec-a5fd-4f9c-b82a-249c575535ea", "sighting_of_ref": "indicator--17a0e90b-caff-4e42-87f0-8f27fad27afb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd10c02-7e65-4f00-afd3-4c7aca903206", "sighting_of_ref": "indicator--a2c1fd31-342d-4b42-9763-bff21e6fe972", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04f817c-5752-49c5-ab8e-0e0ef4a859b6", "sighting_of_ref": "indicator--1bf04733-5225-4f1b-b980-cf74c3be1c33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f9c4b9-4c88-4f93-bac1-63c3f0af42fb", "sighting_of_ref": "indicator--e85a1f96-df11-4087-b90d-5c9cc4130dde", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e8a5a3-ab35-406f-9c5c-f36e36d1c196", "sighting_of_ref": "indicator--a1d0c17f-1d01-4bae-92c6-a99f02111334", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f46a0c-deac-40af-9264-b87902fefc2b", "sighting_of_ref": "indicator--a3667704-72bb-4b56-a719-c98424b8db12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ace9cf4-4aed-46ef-9d3e-a0a8539c7dca", "sighting_of_ref": "indicator--490ac241-bc3e-4e6d-b64b-7731e9391c29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb56211b-c727-463c-9715-c9d299fd7b34", "sighting_of_ref": "indicator--b9e0d329-26cb-4628-b759-7604d5a9d061", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bf915e-c2d8-4211-ae8e-bb532cd71179", "sighting_of_ref": "indicator--809843cf-a3ee-46e6-bb21-8b51228447f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d50484-7eae-4e1f-ab66-9a15a3c020d7", "sighting_of_ref": "indicator--e2eb4d16-16e7-4448-9575-f855c9020e02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef75629-7104-4422-accb-829972267fdc", "sighting_of_ref": "indicator--eff14dd6-8cda-4aa2-ad32-0e21786002bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5b39b1-1754-4ec4-a333-2cc372884f82", "sighting_of_ref": "indicator--eff14dd6-8cda-4aa2-ad32-0e21786002bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0935773e-a6e5-4377-be93-8efba2845fbc", "sighting_of_ref": "indicator--d0c37f24-05ce-47dc-9827-f4b8169d3162", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d69709-c053-4a63-a8e2-ff598635fdde", "sighting_of_ref": "indicator--244f7611-ce52-4e04-80bd-8ecb0315698c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d90c54-ad42-442a-8baf-633ff96ce4cf", "sighting_of_ref": "indicator--3197ea42-0bce-4405-b3bc-62034f92ec52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af693bc4-d2df-402f-bacc-63412fb60b60", "sighting_of_ref": "indicator--bb2e0c5a-b506-437b-af5e-81b300cc402e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec04d7c7-0eff-4167-a527-988f092a5d74", "sighting_of_ref": "indicator--bf47ddd1-6048-4f35-8ce5-fc99430bbd6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08363d06-6962-4f2d-9c11-308202cc4451", "sighting_of_ref": "indicator--af96764a-8161-45be-978d-9f2b45e6aa55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487f276a-fd0a-407f-967b-542cf6373f74", "sighting_of_ref": "indicator--b8838456-b51b-488f-a9d7-473728104316", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6c7127-c737-40c2-b298-c955ad1b155a", "sighting_of_ref": "indicator--f2d12111-193b-4739-b5e1-ada52918df17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc0015c-403d-47e3-bb8e-04afa321b11a", "sighting_of_ref": "indicator--c746b077-fe9d-4cf4-b77b-d09631f402f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cbfc94-b199-4375-bda1-53efac4f4784", "sighting_of_ref": "indicator--a0e7f058-e4a6-433e-abe8-2e9458a941eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c155c37e-8ae5-42d8-8ff4-83e853dce5c4", "sighting_of_ref": "indicator--2c21baf4-8774-4fba-bf8b-6cad2b4a295d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c13c81-87f3-43f7-8662-15a40ba641e3", "sighting_of_ref": "indicator--d2a95ca8-9f5f-44d6-a681-d0a0966949df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17494ce-9262-4471-8463-3b82d71ded70", "sighting_of_ref": "indicator--c6863ac8-bd31-419a-b594-b17a7882a284", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3298ba1e-512d-46bf-aba0-52c9a6705e73", "sighting_of_ref": "indicator--d9d3b922-fd16-4d2b-99f9-5a3d6de8a325", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b354b7b-5fba-42b9-95a1-5d77802e68c1", "sighting_of_ref": "indicator--3f27e44d-5ed4-4391-be0f-7879cddb240c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c2640e-6d4d-483d-9352-327118149d50", "sighting_of_ref": "indicator--5537d88a-45ae-4374-82f1-18bc1e2c5a4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad115cc-5cf9-428b-bfb8-71e6b8ed9f62", "sighting_of_ref": "indicator--66354340-3d0a-4cb9-bea4-81c59309e999", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d3477f-cee9-4c01-ad43-9af76cf65260", "sighting_of_ref": "indicator--caa5f370-4904-4469-89ea-7f31201086f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227b7254-072e-4b74-a057-6f795d5b8c40", "sighting_of_ref": "indicator--5903d8d8-58b9-4433-8116-702aeaab6d83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5124d0d1-0e70-4a57-a719-5af6c6320c71", "sighting_of_ref": "indicator--2423dc33-377e-4e30-be5b-9878ab1c49f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458b449c-0b56-44b8-a17e-aa790f30265c", "sighting_of_ref": "indicator--e123caae-1f72-4412-884b-1395ac340467", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af267709-eb7c-4e84-b8dc-3c6bae413cce", "sighting_of_ref": "indicator--d2c013a0-d3aa-4253-a949-d09f1522fbbe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4fe9e8-4240-4034-a1dd-9910a7de528f", "sighting_of_ref": "indicator--d2c013a0-d3aa-4253-a949-d09f1522fbbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9056cfe-7dfa-4365-b9b6-dd53e202431a", "sighting_of_ref": "indicator--6f1e8071-ad4f-4195-b912-82968c1ccc40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4828db-2390-4773-8eab-8dfd4a1cb684", "sighting_of_ref": "indicator--2a0f7731-2b05-4df4-89b3-af126492f2b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6923139-f101-4754-94a1-615ab585e5de", "sighting_of_ref": "indicator--4ce45327-3cfa-40fb-85a6-1bbea3cced88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b1aa90-3d4f-4e1b-b900-4e48c232b3c7", "sighting_of_ref": "indicator--1f3dc84e-5ce1-439d-8f40-dbb773ee2f28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a9c20-bd26-4931-854b-536db273f86d", "sighting_of_ref": "indicator--246f410b-dba3-4c33-a13c-34d3e71af153", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c61927-7a81-411e-a64f-8bcc373e56d5", "sighting_of_ref": "indicator--2f85bc60-3e0e-4211-91f3-5c994feeb994", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b3c5da-fc6f-4022-9dc5-6e68df03b98c", "sighting_of_ref": "indicator--6bda4727-e5e2-407e-b1a7-ca4f240aee1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8dec2d-7eb3-4fdc-ba57-b7850c575aad", "sighting_of_ref": "indicator--d4be1f5f-ee51-4c82-8893-1ba14e57e436", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30253642-1a23-4174-89a8-fad6195d7597", "sighting_of_ref": "indicator--7c049746-38e1-45d7-ba80-c0194f3fe3b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9925c21c-3323-408e-939a-7a3ab3922e16", "sighting_of_ref": "indicator--a31ae30e-cc81-4995-b7df-79e8fc5faea3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7324e3ea-2e46-4589-8ced-e6e4c0bf63e5", "sighting_of_ref": "indicator--51eb73e6-06c6-48a8-ad6f-22bcacce151f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c603012d-ee33-43b4-8984-4d292ed376c5", "sighting_of_ref": "indicator--51eb73e6-06c6-48a8-ad6f-22bcacce151f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4b4c75-e9a5-4a02-ab94-523fb3c4213c", "sighting_of_ref": "indicator--eae1d99a-c461-4f01-9056-86c880635dae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647034f9-1bc1-4e5f-99e6-9ba7d141031a", "sighting_of_ref": "indicator--6f6801d5-80e8-441a-90da-39fd602941f2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7920d5-a7f6-4806-9a41-f3ba4e977f42", "sighting_of_ref": "indicator--e2a0c70f-888e-499c-b0de-6597cf238db5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52c57b6-5b8f-4ff0-93ea-f03727d8eb7b", "sighting_of_ref": "indicator--666afd43-7e25-4325-8b6b-41efc7e1585c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f35655-d2d0-4a58-8acb-d8e73ea7cdc8", "sighting_of_ref": "indicator--2db9672e-60de-461a-9286-bcbfbaaad6c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b443b96d-f4b9-4625-a885-ea2273166641", "sighting_of_ref": "indicator--b1c6a4f4-2ab5-4f01-ba1d-6ae07bb43c89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e3d44b-f97e-428f-b845-aad15dc4e8b2", "sighting_of_ref": "indicator--b1c6a4f4-2ab5-4f01-ba1d-6ae07bb43c89", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f551e9-671c-434b-99a8-58f8a506fe03", "sighting_of_ref": "indicator--b1c6a4f4-2ab5-4f01-ba1d-6ae07bb43c89", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12981c73-f868-4dab-83ff-17458c106781", "sighting_of_ref": "indicator--8f3035e5-5f56-4452-b8cc-3cd79f4bdc51", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e70745-33f7-4cd0-b596-62d046e3bea1", "sighting_of_ref": "indicator--d241b1e7-c015-434e-b6b8-62a24c75af30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86549859-8a7a-426f-b76e-9c433d1eebe5", "sighting_of_ref": "indicator--d241b1e7-c015-434e-b6b8-62a24c75af30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9f1d31-7447-48a0-8e7f-851fb8ee8248", "sighting_of_ref": "indicator--d241b1e7-c015-434e-b6b8-62a24c75af30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca3e9f0-8c7a-42f5-b036-4c5c25654e02", "sighting_of_ref": "indicator--e421d474-ade8-4e2e-9bdd-c8e887c04afb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64542033-6343-4e01-9e76-527c97a30b4e", "sighting_of_ref": "indicator--f6ba23ca-7c83-48fc-ad8d-af5f2289809d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbe8b73-4d33-450e-a9c6-70fbd9d0ede0", "sighting_of_ref": "indicator--f6ba23ca-7c83-48fc-ad8d-af5f2289809d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765ad3dd-9858-4c66-874a-6c041f74f1e5", "sighting_of_ref": "indicator--4eb512fc-7886-4160-b5cb-4eb919f0eb3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a4fb60-116d-418e-bd57-ee7ad4f6bed4", "sighting_of_ref": "indicator--717ce189-0b82-4d12-ae78-28133654463b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6742928c-c37b-4bdd-a973-c88f02f128af", "sighting_of_ref": "indicator--580fc054-8f78-402d-ad9a-9c544fd5c186", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a2fdd4-34f9-4a4c-a757-ce0e5b0df6f6", "sighting_of_ref": "indicator--0422c249-bbc8-477e-ade4-e5cb04ac30db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b27af36-5f92-4a8c-97ba-5a78c2926606", "sighting_of_ref": "indicator--a518c221-3cc5-43c1-85b5-d66b634354b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d862149c-0101-443e-bc24-baad366de956", "sighting_of_ref": "indicator--a518c221-3cc5-43c1-85b5-d66b634354b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7831f-dc17-46e0-86e2-fbb8fe723853", "sighting_of_ref": "indicator--09927431-1b74-4bc8-b70c-84f92df8ecd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42276aa-efd2-4262-8607-01ea2a351fe3", "sighting_of_ref": "indicator--09927431-1b74-4bc8-b70c-84f92df8ecd3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aca0a16-c875-4aa1-a749-7e7e71a4f976", "sighting_of_ref": "indicator--c583ac10-be53-4afa-a3d1-f31ea3d56a4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842399b4-9729-4d40-8e27-e6466676b507", "sighting_of_ref": "indicator--24312b12-47f5-4724-9aba-ba6b0a7a33dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cfb2ff-ad87-4327-8629-7a7d57a35d3a", "sighting_of_ref": "indicator--70bcf0c3-6eee-4552-a890-b773a4a71970", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9213ba-6fe0-4115-b4e1-849904e47b40", "sighting_of_ref": "indicator--426c1773-664c-4f36-843f-67dc650fe260", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d043b30e-064e-4579-8068-83a1aae4370f", "sighting_of_ref": "indicator--a4413ddd-b6ac-4a93-bdcc-6ae79b2d4f19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d8d43c-1d05-4bc5-bcfc-e6b9a9be73e1", "sighting_of_ref": "indicator--06816165-590c-467e-b9f3-eceb9dd0596e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67696cd7-67e4-426a-93a9-796203ab8cdf", "sighting_of_ref": "indicator--48f5da25-0f79-4f04-a45f-561428eff653", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4079514-ec73-4242-9500-d68dc2f2c105", "sighting_of_ref": "indicator--c03954db-2d0d-45d0-a11f-c60051032d60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6cd394-c498-4885-8ab2-4b0fae6ecefc", "sighting_of_ref": "indicator--25edd270-7aea-498a-acbe-9ebd7f455c97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc5fb3d-6524-45d1-95ea-2c49aea6ca2b", "sighting_of_ref": "indicator--7495585f-1fc3-474e-8778-ef2fd7257258", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc92546-158c-4792-9fbc-6040258bd128", "sighting_of_ref": "indicator--0f0dd013-709b-4956-a4dd-cbf6e985a4d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fd389f-a409-4dcb-b53d-eb89e75a63ee", "sighting_of_ref": "indicator--6537fe00-c23f-4e13-b491-bee2e0f486a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8206db-3d37-4dbd-abed-b93236008ca6", "sighting_of_ref": "indicator--40313d8b-d1d7-4fb6-86eb-99aab9eaf041", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296f3c8a-ccab-4de7-8c3a-e27c52ab91ea", "sighting_of_ref": "indicator--d01e5084-7ccd-4102-9484-cd2115547853", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e236d88b-8beb-47a7-ae8d-5e70fc250dfe", "sighting_of_ref": "indicator--3fb0c962-6584-4a86-993f-b23d3f64dd0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0417ac-8f8a-4e81-b0b4-41d7fba807cd", "sighting_of_ref": "indicator--82b6bb69-185e-4bac-bb97-80159cdd5445", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44fe471-38fa-4d83-8755-bb6cabb930fe", "sighting_of_ref": "indicator--91090de1-4011-4d23-a979-c7d39478f46a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea55a1f2-99b9-4266-a268-7973eb002586", "sighting_of_ref": "indicator--612a960b-fea5-4bec-9cf1-0cc919366b41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be3352b-155c-41aa-abf4-f6b7257b1a81", "sighting_of_ref": "indicator--1cbbd2ef-f4fc-4f36-8d1e-871dec9a1fb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fec6038-5ec9-4ea6-8280-fd0ca6ee8acf", "sighting_of_ref": "indicator--0c20a132-59a2-463b-903e-85b79ebefca0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c088b9b-0097-4ad7-b79e-c1ea6dd7a0c8", "sighting_of_ref": "indicator--1b55d51c-6919-4149-a74f-9c309fc0ba97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431f3c85-53a5-4dc4-aa1f-5f08c59c9437", "sighting_of_ref": "indicator--c65af1b5-8a18-4fb9-81c8-63dfcc6a6d60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61094d8d-42a0-4591-93c7-6b7cb8ea50b4", "sighting_of_ref": "indicator--c65af1b5-8a18-4fb9-81c8-63dfcc6a6d60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f6c3af-683c-4a5a-9241-d9b216862d88", "sighting_of_ref": "indicator--305b9861-9c9b-4454-a85f-d6491ce349c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8570344-2b2f-4e0b-b340-1666ad41fcbb", "sighting_of_ref": "indicator--5a20b396-5a85-44eb-861f-8a62ab0b0e01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30aa3fd-4e68-4ac8-a328-c507c6e94856", "sighting_of_ref": "indicator--3d33d57d-e4d8-4724-87fd-8446cdaa132d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce795f78-7166-4080-b9c7-4ca09de292e7", "sighting_of_ref": "indicator--396af4bc-4fa6-49a3-9624-6f27ac5bb4fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23891f61-2e7d-4136-b491-b6a19f210877", "sighting_of_ref": "indicator--470d1723-c81e-44c2-8d70-96a00c613799", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598b0208-87f0-4ab4-be30-2c33ef3152dd", "sighting_of_ref": "indicator--87a7b193-ff50-42c2-b73f-cb02f6d18c10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebcbac9-49a6-4161-8e83-364dd53a5336", "sighting_of_ref": "indicator--81b5d90b-b254-4058-8e9e-14a7e175f758", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81732151-579c-428d-96f5-933f0cc5c090", "sighting_of_ref": "indicator--ec949152-1591-4d7e-843b-3bc3b90c23fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cbef90-ff7c-4704-a589-fb688b56cb4b", "sighting_of_ref": "indicator--3e7f597f-eddc-4a96-9c54-9a3751e8ddca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7a572b-ec8a-41e6-bb35-d8ed575a3210", "sighting_of_ref": "indicator--fda2eb43-ffce-4610-a149-13ddeb788999", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b8ae3-3e5f-4790-bed5-0360b01a6889", "sighting_of_ref": "indicator--fda2eb43-ffce-4610-a149-13ddeb788999", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda77b96-a424-4604-99b9-442ab528d620", "sighting_of_ref": "indicator--ee51cd7b-9c14-4aa7-b8be-78297a50f9ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae379721-786a-4eeb-869a-62f64195e64d", "sighting_of_ref": "indicator--d2c5aa7e-cd33-4f79-8df2-480bfa152510", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ce393a-99ef-4f95-9e5c-209eae4982c2", "sighting_of_ref": "indicator--152744ac-a23c-4704-8d1a-462d6e2d69b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e8fc7e-6c62-4e80-8b22-3827a64ed18b", "sighting_of_ref": "indicator--d5273c4e-e0cb-4802-a696-b9e294a3c2ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e9cfc0-b354-493a-8694-982dca382463", "sighting_of_ref": "indicator--8618f1fa-7f04-4cf6-91a6-5fe95a2c1668", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9798c8-b4be-4b2d-8aa2-32951065f432", "sighting_of_ref": "indicator--9e3255ce-ad68-4c9b-8113-6a17fb3efcc9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9429884-0d54-4c66-8d6a-2052a24d1b7a", "sighting_of_ref": "indicator--2fc1953d-a812-4f46-804c-4750f88a61b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030c9eb7-8849-4fdc-8f2a-59b1419a7077", "sighting_of_ref": "indicator--737247db-d0d6-4128-b8bd-fceaeeee8c68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b935fbc1-63cf-4cab-8b84-2018be9649b9", "sighting_of_ref": "indicator--737247db-d0d6-4128-b8bd-fceaeeee8c68", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ba59cb-dd33-4a00-993e-5d9007c34755", "sighting_of_ref": "indicator--ad0b59b9-2127-4444-8cf1-4df0b2715cdb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e818ed4c-91df-4efa-af59-ba8959ff7dd3", "sighting_of_ref": "indicator--e38371f2-b9b2-42e0-8f69-a190aa528917", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0471af8-2ccf-455e-a677-b4ccae49c44b", "sighting_of_ref": "indicator--4c9b68e2-eaee-40bd-b4ce-b9faf5c34450", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace8b40-2bae-4d44-879b-3ce51ff358b0", "sighting_of_ref": "indicator--3af5d401-89c5-4ddc-9f9e-96dcd9ca4b09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801dbd2d-1460-40f3-8dc1-a4f23337110d", "sighting_of_ref": "indicator--3af5d401-89c5-4ddc-9f9e-96dcd9ca4b09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94003586-bfea-4e9a-b319-733526945448", "sighting_of_ref": "indicator--9612ee5c-47c8-44e4-a252-091de2f86dbf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff54cc-bb5b-4cfd-9c58-d244c5b68c4a", "sighting_of_ref": "indicator--86009309-1f24-43c6-9f4c-4b5992b9ff39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c346aa4f-a2e3-424a-a079-dec048046756", "sighting_of_ref": "indicator--cb83315d-905c-44ac-bbb4-16f50b254e86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ed6641-1fea-45e9-b01e-1ab1904c7ddc", "sighting_of_ref": "indicator--e3c98faa-0837-4587-afd8-a8b5f2ffc87c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8616b9-b395-4944-8872-979cd141a328", "sighting_of_ref": "indicator--308903f4-b5eb-4624-adde-1bca866c8e08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d34d76-40d5-40f9-9453-5cc484d145f3", "sighting_of_ref": "indicator--287dbfdd-555d-430c-be16-dc5e1a1828bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50af58b-d17e-4121-9bd8-bb6b32a7589d", "sighting_of_ref": "indicator--b0ad57e4-740d-4812-a855-22467ef58698", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ce19b-7060-49a6-a8ec-8b0924f07dee", "sighting_of_ref": "indicator--6a2e4253-c540-4010-b753-4ec346ebddd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f522d5e5-ec61-48a4-b16f-8bf947911d3d", "sighting_of_ref": "indicator--8a14fb53-4113-4a34-bbc5-454b6c10ab03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c101152-c39b-48a4-b45f-3437773230f6", "sighting_of_ref": "indicator--aea569cb-e30d-4d07-a6c0-d8ae105d32aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dacb03-dc74-44ae-99a5-d7f8443e7160", "sighting_of_ref": "indicator--db99c78c-57cf-434f-8e6f-58c6c5635b5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197236e0-8919-484b-8616-78e6e274719c", "sighting_of_ref": "indicator--2aabe2c6-dfed-4492-9797-d01e67fc626c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6adf7f-ec0f-4b18-a2a2-37b8e33f7ae4", "sighting_of_ref": "indicator--6c6fa86b-d88c-4196-bf89-390830b2ca9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799d4e77-ebde-416b-a2b5-e2a9e4a24d2c", "sighting_of_ref": "indicator--f5ab2648-2ee5-4d75-954f-08733bea0a70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cdb523-84e2-4a14-bfe9-7c6e06d9abb3", "sighting_of_ref": "indicator--85229c7b-7447-4d1f-9e82-2de17481484a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff7f935-36a8-4374-a81e-b26f103ed147", "sighting_of_ref": "indicator--85229c7b-7447-4d1f-9e82-2de17481484a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4247e1de-8165-47b2-9c7d-571d087f0d55", "sighting_of_ref": "indicator--0ce86e14-379d-47d4-b4d6-8b19881c4e5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d9fc0-ce46-4101-99f5-59c1f3e490a3", "sighting_of_ref": "indicator--ddbd513e-8e67-42f3-a1eb-2a2286c2ea16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff9889-2bb8-49a1-b21d-5076ad6f3d3f", "sighting_of_ref": "indicator--e99e1652-6add-4328-bd32-2e1b0c453e83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efe8a23-8611-437c-a173-a440d05c851a", "sighting_of_ref": "indicator--80277948-9243-4068-ac2e-023f0a8cae62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9372033a-d512-497a-94b8-62064001f99e", "sighting_of_ref": "indicator--0fd43ba0-30b7-4dd3-9647-d98e019dea2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ec1964-dfa6-4db4-a5c8-69c27bf5cd5a", "sighting_of_ref": "indicator--20a27116-756c-44d7-bd56-bdff4ee80f95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9a19aa-cb20-4c3f-b65e-dfda72f1fbc2", "sighting_of_ref": "indicator--11f90a26-2a8f-423c-9723-37d069568a74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562c0130-3638-4b66-9702-ccaa6eefe1d7", "sighting_of_ref": "indicator--2aeb48cc-948b-4cfe-b0b2-8ad2204b09d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e1389e-16d9-4a99-8ece-722db69acb8d", "sighting_of_ref": "indicator--89422e0b-6ea5-484c-804d-4628d0aa622a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4e6c9d-40f1-46da-b454-a4a0b9f95b6e", "sighting_of_ref": "indicator--d7718927-ea2c-4db8-9a3c-f8b876154c34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3099f807-7aaf-46fe-9dfd-c587465ad37b", "sighting_of_ref": "indicator--71694e25-0ce7-4e44-b1ed-54d9afedb91c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfc0a45-ac50-45b1-8ea0-ef0b79be3519", "sighting_of_ref": "indicator--b0996dfc-480f-4c38-9bcc-512bf6723ab9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b9bf23-8722-4adf-982f-7df677dd80a4", "sighting_of_ref": "indicator--35f372ee-d4eb-4ce9-9f41-fc3ba4b2f653", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef45462a-6a31-46d9-8166-789d08a224a5", "sighting_of_ref": "indicator--8171f5a8-e8ab-430d-8ee9-9e4e71c8f9b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dffcfa5-1fb9-424e-b59b-0f85a10ac338", "sighting_of_ref": "indicator--7693b09b-7104-4d4a-b489-eb8f1c4dc332", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bf7bcd-0dd5-4fef-a08c-d1ea46948836", "sighting_of_ref": "indicator--21a51dee-b201-419f-a9f7-d8e96b7e51d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cb2896-c683-4163-90db-a6a516f45583", "sighting_of_ref": "indicator--8fc85af8-4a7b-4688-aa47-05d78a732177", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e490c5-354e-4d58-9ac5-f83e616ac368", "sighting_of_ref": "indicator--8fc85af8-4a7b-4688-aa47-05d78a732177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3532dc99-04d3-4ed5-b20d-3760faf015a6", "sighting_of_ref": "indicator--fa464c98-0558-4202-9266-4bbd013a1a71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b205f6-a8c9-46a8-8ed3-525ae67b1b3a", "sighting_of_ref": "indicator--f00b489b-523e-48e7-b08f-8450d06b73cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bbb8d4-5696-4495-835f-a553b4ca47a9", "sighting_of_ref": "indicator--1bb0e728-e027-4eb9-9099-e82a18646439", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b965d2c-e0af-4b80-b031-3f4378a92a02", "sighting_of_ref": "indicator--e82238f9-54e0-4405-aa5b-907c98d43030", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41db1917-21e6-4571-878f-53c8d5d37eae", "sighting_of_ref": "indicator--17e319e2-e447-42ad-8429-46f8d52d5f01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367cfb78-61de-454c-a57a-895ff9e4cb65", "sighting_of_ref": "indicator--060c446c-8af5-4cf2-9172-d03743810ba5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3cc2ba-3d3b-499f-ba7a-0c915ca0bc4d", "sighting_of_ref": "indicator--3052499e-f9ce-45ce-9ce0-489ebadc4fd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7521a48a-1d4d-44fc-bc37-761a7cd286c4", "sighting_of_ref": "indicator--54b5455a-6f11-49b4-b1f8-e41e6c2c5f4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e8942f-ce78-44fa-85eb-d244945b4090", "sighting_of_ref": "indicator--1d7724ac-7475-400d-b45d-d2e59ddc2a2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bbe5c9-6dc5-46d8-8daf-8f6fcdf4e71c", "sighting_of_ref": "indicator--4cdb2aa0-51b1-4d38-96be-edd5e779a257", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a08ae0-7069-4da4-b6a8-ee3ed7cb97ef", "sighting_of_ref": "indicator--4cdb2aa0-51b1-4d38-96be-edd5e779a257", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86557865-a663-47c8-a3ef-8998eebdcbf3", "sighting_of_ref": "indicator--ff7c78d8-ab5d-40f2-aa9b-d8dcdc435921", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58675cd8-4ced-48f8-8a88-1b0fd181f796", "sighting_of_ref": "indicator--ff7c78d8-ab5d-40f2-aa9b-d8dcdc435921", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b33cd-c12a-44da-b591-51a444bc3b9a", "sighting_of_ref": "indicator--b7dcc9e9-2931-4f92-bc64-3da36f6fc470", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c944eb35-3d8f-49c9-93f6-ec8b16fca087", "sighting_of_ref": "indicator--7f5e6a36-9626-4a06-a137-3b4e96996942", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4811dfff-9c68-476a-a687-b4b5f8f797cb", "sighting_of_ref": "indicator--9fe5a4c0-a3d4-493d-a00a-ba3958f68ff1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa08370-3b73-4163-a955-d4f877fbd27c", "sighting_of_ref": "indicator--34bf5b27-4c2b-457b-8e9a-6fe69b11dca0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122bee81-49a0-48c9-89b9-bde99528aac8", "sighting_of_ref": "indicator--3e11b16e-750e-4bce-a359-92ad6bbb179d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fa8baf-1dd2-4ac3-882b-5889c7aadbbd", "sighting_of_ref": "indicator--f1ff756f-1cd5-499d-8929-18450df65181", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28e2d85-e0f4-4454-9fb8-19cfe1fe769d", "sighting_of_ref": "indicator--87d7930f-2d71-4969-9287-8899d7a9df1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a158afa9-4f4c-46e6-835a-c531c0fbb653", "sighting_of_ref": "indicator--4f93ecb3-a49d-4738-8694-52ed66744ed8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45978d0-0eff-427f-9c6c-e0aa849716b9", "sighting_of_ref": "indicator--2d6b9f0e-f95f-4d79-9bb5-2336c713275a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe61c09-dabb-462f-badf-904d141fed6f", "sighting_of_ref": "indicator--3f161a32-070a-46bd-85fb-7d559998bd25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e4c7fa-65ec-4068-9ac9-e3d92d549e87", "sighting_of_ref": "indicator--2551c476-20bc-42fa-8517-0985ebf23b96", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0162b2c-3329-4ac4-ad8e-788563ff10d1", "sighting_of_ref": "indicator--4a35f146-538b-4b2d-8f93-2bb9cdbf3043", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8c599e-60e8-48a5-a819-8e1c42afc559", "sighting_of_ref": "indicator--bc251ba0-3552-4649-88ca-cd32abff0114", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855260cf-4ead-4f76-8329-b3b56160f927", "sighting_of_ref": "indicator--262ac64c-6c8a-4a97-8951-65475a21efa2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c92376-5a56-4232-a4a6-e048a1383bc2", "sighting_of_ref": "indicator--b55fec15-ccfe-4fb2-a3bf-fd74f6a91084", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67666a21-5f69-424d-9b64-1cef4fa0f2d5", "sighting_of_ref": "indicator--6716151c-7886-445a-8e39-314122846b88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd54c4d-dcd4-44fb-816d-a692ce967fa9", "sighting_of_ref": "indicator--9748912c-5a84-4256-b3ea-39ee3ca017b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6075615c-9e2f-4343-a572-587ed345f89e", "sighting_of_ref": "indicator--e77285c5-a051-480c-b42b-f88593626c60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993de8d9-59da-4291-9b0b-5a2744eb3c7a", "sighting_of_ref": "indicator--9e6fc9e9-07d8-493d-a567-e12dfa4fc7c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455151bc-3442-4590-9b6f-2365f7d821c8", "sighting_of_ref": "indicator--d5fe527a-7894-4574-ac46-498f5f1a64bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe5107-3a2f-4939-a327-95cac39a2525", "sighting_of_ref": "indicator--ceb00b40-2831-4c4a-9488-4b4d89aa544f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f2e2cb-b14a-4ff5-a90a-11c36629f17e", "sighting_of_ref": "indicator--468a51ce-aac8-4d62-8286-e5150defb740", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cb4ef7-8031-4d63-a400-14ee5dc48e2c", "sighting_of_ref": "indicator--e922ef93-1d7f-454e-b7b3-1d654b47ddfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0904ce3a-958a-4776-8eef-b96a76548d3d", "sighting_of_ref": "indicator--00b37384-2c99-4c9f-b1fe-076d3663772b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea896c6-b356-4ac4-b0d6-c689c728a25f", "sighting_of_ref": "indicator--5fc227d1-3771-4e38-8f6c-30889c0d4620", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996965ec-a65c-4e5f-b85f-e917ef28fdcc", "sighting_of_ref": "indicator--ba2ae67f-52c8-44cb-b0bb-d0811d64ce0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b377087-3999-4755-a23c-3f2e6b6e7602", "sighting_of_ref": "indicator--ba2ae67f-52c8-44cb-b0bb-d0811d64ce0a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008de5a9-e600-44bf-84d3-a67c228f944a", "sighting_of_ref": "indicator--761d513e-2184-4654-85ff-11b016153bb7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb7490f-4718-4eeb-bc75-86c4b4f90af7", "sighting_of_ref": "indicator--30f5e24f-fd8a-4204-8ed7-669dded8b1ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0706fa-b877-4cdf-80bb-80b09ad07cda", "sighting_of_ref": "indicator--1c93099a-ff3c-4c5d-8958-33cda16d9e57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0fd5f8-3b0a-4f03-ac59-43dac1234ddd", "sighting_of_ref": "indicator--e85f2669-46cc-4d01-894e-f039f9cfddc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff465e32-b6f2-4866-88b1-28e24fc48b82", "sighting_of_ref": "indicator--12b6d8f7-4b62-4d37-a937-67f8b23471c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a3f8c4-d56f-4fa4-92cc-8afd1808f89e", "sighting_of_ref": "indicator--8516d410-0435-4986-babf-09e787c609be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b80a69-047f-4026-8f02-7f4f827214c4", "sighting_of_ref": "indicator--5db34ca7-9122-4b96-a229-5218c0116991", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c776cf9-7fc2-4b98-aed7-6bd233157bd6", "sighting_of_ref": "indicator--3fba1ada-14b6-491c-8b85-c95d61087523", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7090e651-655d-4504-8c55-cfbd1a8ea09b", "sighting_of_ref": "indicator--a633bc47-ed47-4c22-8409-126cb9826af9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba66aa6-5464-4d8f-93e7-c2103f81aaea", "sighting_of_ref": "indicator--918db999-966d-4de6-94b3-4af15b9a606e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f745b82-feaf-412a-a8ee-6d3b7e6e2aff", "sighting_of_ref": "indicator--cd671d6d-473c-4457-be56-a96833740a7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ad71ff-8eb1-493a-a903-75556ddd0792", "sighting_of_ref": "indicator--92f484d8-a6bc-430d-8edc-87a6155a8eb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2554e0e9-8426-4ce5-98a5-e796be8ddaad", "sighting_of_ref": "indicator--2a3297a6-0619-4fba-b240-e817f69cb69e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bf9d00-b3e7-4d39-9def-374cdc48de72", "sighting_of_ref": "indicator--43dd8c47-90be-401f-b6d4-6476d3f7867e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9aebbf-501f-43ed-9dc8-367e9c2b0825", "sighting_of_ref": "indicator--072c32a2-0f4c-4b20-b2d9-9a51e00bf25e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4fa220-4520-480d-ad33-c69cc1e918ae", "sighting_of_ref": "indicator--d53301e7-b0e7-40c7-8a91-faffc2ccd9f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49838598-2c17-4e55-8034-65f1017cddff", "sighting_of_ref": "indicator--29072112-ba2f-4e64-a8a5-6fa3b3c18864", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ad2e23-0cf5-4fc5-9c36-b032af7d2e6e", "sighting_of_ref": "indicator--6b252222-11ae-476e-8109-1a77e90fa1b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a0cfb8-b9f2-48a6-ba82-065984c34014", "sighting_of_ref": "indicator--fd02bc51-c7f0-45b2-9477-bb2eee2443f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8feaff-aced-466c-9edc-d74ad71167e1", "sighting_of_ref": "indicator--bc2116c2-9a4e-42c5-9efa-1bf4cd03f88e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38538185-922d-4963-ac28-df4056503882", "sighting_of_ref": "indicator--1bc4e38b-6e00-4de0-9a98-cf81b5887b2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cba6203-429c-4991-a431-7521fc0108ba", "sighting_of_ref": "indicator--d78b199a-89f9-4687-99a3-f90f623df965", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f248c6-ec51-4068-b3c2-82965794e2ee", "sighting_of_ref": "indicator--8e188769-60e5-4d7a-8ace-b072470204d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ecf35c-40ba-405e-a7eb-b9561c5eeb7a", "sighting_of_ref": "indicator--1e0816d8-aa38-41a3-88a6-14bbbb16c900", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201562f7-010f-4ce0-b68e-724537151a12", "sighting_of_ref": "indicator--b178389e-0083-44fa-a673-7921ef4dee86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb7866-ed26-4f77-a138-cb680ec349fd", "sighting_of_ref": "indicator--62733fd0-2b3b-44c8-96e6-80e10472fda5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d2c54-dca8-431e-8714-68e658b1fb63", "sighting_of_ref": "indicator--e54adc0c-0c3c-430c-a121-d7d10facfeea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d158359-67f0-4a41-a6b0-86c41d286efa", "sighting_of_ref": "indicator--619bb9fa-57d3-4fb0-a619-cfa67caeb676", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e4b978-c567-4b98-b35f-05c0b8a80f46", "sighting_of_ref": "indicator--685db73b-7615-4a01-8bb0-32c2a0a70b25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af37e9bb-9de2-4b00-b776-9e78d67f8cdd", "sighting_of_ref": "indicator--215a0f1d-f631-4c1c-917e-97b6a954d9cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a9b8bc-3339-4a44-b464-f522c3713d89", "sighting_of_ref": "indicator--11baeb79-54dc-448b-b437-3d116320b0ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f690b471-2ad4-46d6-a77d-f61867b72f5e", "sighting_of_ref": "indicator--80325c52-dacc-43f5-91f1-d17cedc252da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4a0633-2686-43e1-84ae-9a7d0f6f5da4", "sighting_of_ref": "indicator--2f45c94f-592b-447a-aaf8-adc1f0abbae3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d04adf-977b-49f8-a5be-6b39cd85a3da", "sighting_of_ref": "indicator--f6521e03-eb94-4f98-a2df-953b4d35f8a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6578d7-e578-48d8-82bb-e5a37cffc973", "sighting_of_ref": "indicator--07fbe3d1-7ee4-414a-98bc-74d55364fd94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6fab38-f4ba-4fce-9b7a-2f7b39713012", "sighting_of_ref": "indicator--a67c1efd-d9dc-4056-afc1-6bb9286d4a07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d39195f-b4d7-473b-b3d6-d3a5ae52cf69", "sighting_of_ref": "indicator--53dd2656-86b9-4c13-864a-e5b3c7e15828", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7617ee-5b91-4526-bed9-d10f5ec9b780", "sighting_of_ref": "indicator--9b323884-cc53-480a-8af6-6c7a481f5fd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641fa574-7834-49b3-bef0-004b3d417e45", "sighting_of_ref": "indicator--7b9fc358-51d4-4014-a16f-01cb63a43cd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c40b8a-41a3-464e-8f7b-84d435a3a802", "sighting_of_ref": "indicator--2ae24bd9-5a72-4a51-886d-838b0adbfd9b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938fe47f-ff0e-4a1d-b374-29ae32e88c9d", "sighting_of_ref": "indicator--2ae24bd9-5a72-4a51-886d-838b0adbfd9b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c0c345-53ab-4171-97c8-4ec01ede874d", "sighting_of_ref": "indicator--bdbcd61c-e1e5-471f-b977-92c563faa793", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc8854c-5649-4016-9aca-36ba09d1ca6d", "sighting_of_ref": "indicator--53a86409-372e-4944-86d2-ef3fadcf66b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e063c5b0-e265-4896-ab14-be0bb4e900c3", "sighting_of_ref": "indicator--2a83261a-e6f3-4e8a-94b9-3016dfb9fad2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef33dc3-5d7a-453a-a766-4901b81ba952", "sighting_of_ref": "indicator--142c51a1-b71d-45bf-a419-2118c25a93fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5cbcd3-72a5-4fdb-90a6-386d989e2581", "sighting_of_ref": "indicator--142c51a1-b71d-45bf-a419-2118c25a93fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdac77d9-0d75-4ed3-bada-557d4fbe3eac", "sighting_of_ref": "indicator--b9d10ed6-f74a-4d96-888e-8bbd808580c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df267951-5070-4840-8a05-059f322fbacb", "sighting_of_ref": "indicator--1c7933ae-deea-40f7-a2af-c878f867bf6d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e83767-e2f2-4ec4-be68-740b279d7c87", "sighting_of_ref": "indicator--07f3fb51-d4ea-42f4-b315-11e04f7ce28a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5f622d-fa14-463a-8195-d5dccde7dd5e", "sighting_of_ref": "indicator--a4869fcc-2a61-490b-946d-238b5aa4da53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca6b607-0259-4852-a6c0-fb8ee0f5f89a", "sighting_of_ref": "indicator--ea2e1e02-239b-48c2-95c8-a13920ac0f53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f98159-85ee-4a66-a169-f0c3efaaf755", "sighting_of_ref": "indicator--b2839fcf-1822-4e5e-9f63-0a22e6020665", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a077f82-3aa3-4381-a7cb-3bdde4a78539", "sighting_of_ref": "indicator--d9141a3b-2b34-4053-8788-f2aa6009cb55", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1161f4-3f10-4802-9ab7-bbae7c868218", "sighting_of_ref": "indicator--d9141a3b-2b34-4053-8788-f2aa6009cb55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c67edbc-2d2c-4270-b8a4-7d8123ffab02", "sighting_of_ref": "indicator--2c718cb3-0dcd-482c-9132-b903e94a6b4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07e9022-8d0a-4728-8883-b080a7baa89c", "sighting_of_ref": "indicator--70bdec1d-78ff-408a-95c2-1b7cd6d902cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb682211-cc34-412e-a4ac-bdc3f2fa47ea", "sighting_of_ref": "indicator--ff43c26c-5d6a-48c0-8225-b085a3f743ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d95768-9608-47fc-9e0b-4301b3c2fef0", "sighting_of_ref": "indicator--da5a4461-4437-4af2-9d86-070174eca842", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701b017-a675-4315-8c46-e4bd06d4ea32", "sighting_of_ref": "indicator--f2138605-c005-493d-a215-8672193cff7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe488663-cff7-41fa-9170-92cbdbbf0856", "sighting_of_ref": "indicator--c9e498b6-4cf6-4566-9797-53974dc58d94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82775090-e115-4543-a4c1-c75713514255", "sighting_of_ref": "indicator--f4974c12-7995-41f8-b703-125eed01abd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f82d6b3-8eb2-4e22-bfeb-4ddf4c65102b", "sighting_of_ref": "indicator--96f65bd5-835c-4912-96f8-2351c9c5bc6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a47bb74-27b3-4330-be1a-28e860ae4017", "sighting_of_ref": "indicator--c97766f1-87cd-4f2c-9797-b72b637a962b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf44bcc4-f86c-4507-bab2-6e849cd2ed3a", "sighting_of_ref": "indicator--c97766f1-87cd-4f2c-9797-b72b637a962b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0148326-b0af-4df9-a920-67718dde03b0", "sighting_of_ref": "indicator--2f0a3831-e941-4f61-b632-bbf99fae6f3e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dd67be-6b8c-422c-9b10-56678e50bdf0", "sighting_of_ref": "indicator--7da2e218-528c-4f6b-8dab-a0b734a5e3ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad828dfb-4662-4b4f-b5cd-1c272fb326b4", "sighting_of_ref": "indicator--39d10574-2189-42e8-8204-39e4c619b0e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba563cc3-4902-4d87-a6c9-41324af0e806", "sighting_of_ref": "indicator--e8b79e2c-e27c-4858-aefc-9f017f1feca6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adb935c-a0e3-4a61-aff1-c4ca370b207b", "sighting_of_ref": "indicator--90d0c5f3-ec11-45a7-a312-9cbee25f65ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dcdb9b-d675-4ceb-9c93-2c4e8a75c10c", "sighting_of_ref": "indicator--6aa78a83-df21-49f6-ba20-b8a03cb079af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd05a87-9b57-4eb3-8ee8-ca7ca0c9ba30", "sighting_of_ref": "indicator--b8c73c07-eace-4980-9405-81105f99658e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ba19e-41cb-4a59-a19a-0aedd316ac0a", "sighting_of_ref": "indicator--44ceeebd-b8ca-4fd7-8343-9a4feba2ffa9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499c871d-d5ab-4d24-b61c-c8193afe6623", "sighting_of_ref": "indicator--d923e392-0c7e-4c92-8e6c-bd94f3ea34b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3fd04a-c146-47ee-b150-288566ced30c", "sighting_of_ref": "indicator--745ab204-c9b3-4b10-98ab-a822fb60ec6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaa9d41-5f6d-45e1-8f60-c2943d030669", "sighting_of_ref": "indicator--7db7e5c5-2a06-41c5-b010-049c92c90087", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a78953-8915-410f-a794-a6b58d6337a2", "sighting_of_ref": "indicator--7db7e5c5-2a06-41c5-b010-049c92c90087", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce2c711-bfa4-4d9f-a973-39c1cd9433bb", "sighting_of_ref": "indicator--824cc343-bed1-483d-a076-bffeca170bfd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46609e0-27d4-402d-b944-e601896f5875", "sighting_of_ref": "indicator--824cc343-bed1-483d-a076-bffeca170bfd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692a4788-74fc-45b6-ad01-2308c5429f44", "sighting_of_ref": "indicator--91bbb41b-3abb-490c-adba-7b2eda851270", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175e8dac-0a9e-4dcd-8510-29a53108dd51", "sighting_of_ref": "indicator--f419722b-dd27-48e2-b8cc-62569a1ef466", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072c64bc-dab8-4de4-ba17-6acfff7d79a1", "sighting_of_ref": "indicator--f419722b-dd27-48e2-b8cc-62569a1ef466", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e591583-00dd-431c-8538-35a8720e6118", "sighting_of_ref": "indicator--63bd74d1-c058-4ff7-b7a8-97050892c0d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3ce666-83e4-449b-8369-697abb2728da", "sighting_of_ref": "indicator--63bd74d1-c058-4ff7-b7a8-97050892c0d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0690213-13be-4cd1-8de8-f42ad2135cf9", "sighting_of_ref": "indicator--599662b3-5a4a-4a21-a517-3a3f7389a22c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a3530c-e90e-4e54-aa69-44d62e0cdd80", "sighting_of_ref": "indicator--599662b3-5a4a-4a21-a517-3a3f7389a22c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1301a07-11e9-41f4-abf6-65db71b1e7e1", "sighting_of_ref": "indicator--27e3e64f-f049-46e8-8c88-0dd0154427b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5528c58f-efa6-45d4-8d25-3683dc446ed8", "sighting_of_ref": "indicator--40033701-e025-475b-84cb-3881cbe0b55c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fef50c5-5d72-44a8-b636-1f16bad39b42", "sighting_of_ref": "indicator--8b908e73-245d-4dea-8501-c20ec62c7b6c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2713b8f0-b4dc-41f4-9a04-c47eab2df89f", "sighting_of_ref": "indicator--c43bc021-0572-4fd0-a29d-60c68ee6848d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85d0021-4d6d-41e6-b793-b3b1acebfb91", "sighting_of_ref": "indicator--81227b92-13ad-4e5d-9147-09ee8f69250b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe842ee9-c048-44de-8fc5-d4eb0c6a338f", "sighting_of_ref": "indicator--60314f6a-4c4e-4447-845b-8b3d5953726e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee56aa2-a096-41f8-953d-86cfd8151e92", "sighting_of_ref": "indicator--60314f6a-4c4e-4447-845b-8b3d5953726e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca05930c-e4d4-452c-a698-35b237215583", "sighting_of_ref": "indicator--01990ddd-e55c-42fd-bd20-c412386d588c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969e5ced-bb43-4ad2-a2cc-c93c5867ea24", "sighting_of_ref": "indicator--904e5368-067c-485a-a786-e0bd2d2f10e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fdae71-2f32-4554-ad67-0fe1866d1b0e", "sighting_of_ref": "indicator--7adea12a-86fd-49fe-9c24-ccc21a0b9c53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd8c5c7-b8b6-428f-98eb-46c2974196ae", "sighting_of_ref": "indicator--7adea12a-86fd-49fe-9c24-ccc21a0b9c53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7086f57e-5438-46a3-8a4f-cd86a6f6dd2f", "sighting_of_ref": "indicator--135d1138-b30a-4f43-9e22-c2ac9f2af287", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21604da9-184b-40c4-8749-e14e16a65634", "sighting_of_ref": "indicator--f93debfb-2bda-4089-a8de-eb225ac01522", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba4fc07-4974-4ccc-9bba-0a37d0e6c96c", "sighting_of_ref": "indicator--cceca675-4f90-409a-87ce-207e6a465c67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76f8c9c-95f6-4cbf-8b0d-1c24063d3a68", "sighting_of_ref": "indicator--95f37512-f876-4ed8-8a79-a124eaf65b09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513292d6-57d8-42dd-acb0-0ea8e166525a", "sighting_of_ref": "indicator--c9b24f1d-3b72-49ed-8e73-40cd47b5919c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404cb38a-f7dd-42f3-9d18-dc4d8f8681aa", "sighting_of_ref": "indicator--ec6dbcf8-f18e-43b6-9070-5a589b8bf34c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdece29c-4fa9-4068-a2ff-81c074e2208a", "sighting_of_ref": "indicator--eb99352a-4da9-44c5-9c6f-a0d3e0cad8f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e92e63-10a2-49c2-8aa7-9cc01a7f89df", "sighting_of_ref": "indicator--f2ef5614-a3de-4437-884f-90fd36d6a94c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000c1077-715e-46c7-8ef2-d812819a23f1", "sighting_of_ref": "indicator--0d042c98-9fae-42dd-8c22-bc3d2aa00c6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9a884f-bed4-47f1-b504-e9b58cc91836", "sighting_of_ref": "indicator--8823fbe4-2eac-44c5-ad71-607c2eea4f09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3e7c35-46da-4731-a32d-ec981af7c7c8", "sighting_of_ref": "indicator--2d24d9f6-ab04-48a9-a809-7a8d8af57b08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebafc61-e50c-42dd-a03a-d3526a16e6be", "sighting_of_ref": "indicator--9829cbf1-b1a7-493f-8f48-12d773020c2d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588c5490-21d9-4654-956c-9b9b0c8407ae", "sighting_of_ref": "indicator--b7dab4fb-3348-41d8-87d0-716024a3805e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6d097d-a938-46b8-b39d-83b3f72630c6", "sighting_of_ref": "indicator--5f129d6b-e784-4d39-b34a-38bc280d5212", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ee2024-ce8d-4c6f-ae5b-127b1f10ed32", "sighting_of_ref": "indicator--8b5dfda6-7510-4d4d-baeb-62366dd589d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35063766-2e43-400c-bbd8-771ad13556a9", "sighting_of_ref": "indicator--ab5099d5-dbed-4213-bece-e32bd23be806", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b801cc14-0f1a-4bad-b785-27a679b7a3d2", "sighting_of_ref": "indicator--ab5099d5-dbed-4213-bece-e32bd23be806", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacbcbc7-5f57-40d1-836a-8e042b989a1b", "sighting_of_ref": "indicator--b999dee6-6de1-4a4f-87f2-2968e4a743ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68c23f4-528c-46a9-86d4-beb55c89734c", "sighting_of_ref": "indicator--02d375ee-f071-4a0d-b2d5-74140b9171c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87911299-7618-4990-9c34-86483531f37a", "sighting_of_ref": "indicator--02d375ee-f071-4a0d-b2d5-74140b9171c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc17551-62ee-4db7-ba4b-236d407be32f", "sighting_of_ref": "indicator--e9abf0b9-07ad-42ed-a9b1-217365c18d52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e35cea-da7b-45eb-9434-017e703004ce", "sighting_of_ref": "indicator--57806929-a732-4ee1-9772-d01a141a2a76", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204f0540-21a1-4b6c-adb2-1aeb49d7bc01", "sighting_of_ref": "indicator--843268d8-7b6e-4239-8f7a-d5caf74d1d32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee2569d-3c8e-448e-be34-9e0cf695770d", "sighting_of_ref": "indicator--e7faa3e2-e462-494f-8a01-df6077f77dd5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22b5096-e452-466d-bdec-cb58bd62d503", "sighting_of_ref": "indicator--352097f6-95c7-4a65-af85-92dc9c019baa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26244cf9-efa3-4655-9816-d77a8ad0c0c5", "sighting_of_ref": "indicator--2db37ee6-fec3-45d6-9f97-acbe95dd94bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7b6742-1262-437b-a094-38fd9ecd6d2e", "sighting_of_ref": "indicator--b1b279fe-bf26-4ab9-8ab5-dcb0a0aa56f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fcdf8b-77bb-432d-979f-88cd809ef36e", "sighting_of_ref": "indicator--ac2068f7-7b8c-4f41-a71c-692afb155911", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad000c3-945d-439e-a390-ac632c3596d0", "sighting_of_ref": "indicator--ac2068f7-7b8c-4f41-a71c-692afb155911", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb2e97f-c831-46ba-8565-24876e91533c", "sighting_of_ref": "indicator--f80def07-3b70-4d45-a660-476c48216ff2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0b49eb-c472-4119-8627-a62807e51371", "sighting_of_ref": "indicator--e8e32a6f-f031-4089-8cbc-8892c8825bfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c3bdd3-cf4d-4f6d-8b1b-a78fa6f821bf", "sighting_of_ref": "indicator--02e30234-b859-47f5-af73-df61653a8c51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c1cfb8-f113-4bcd-b317-228708393638", "sighting_of_ref": "indicator--b08841b8-678e-4e53-bf4b-a3e9800ca973", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4ae768-ed07-43a7-b0d2-7dafb8364207", "sighting_of_ref": "indicator--3dffe59e-a2db-4393-a7bc-06180b575170", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7993fb-cc89-47d5-9dbf-d33a03376c11", "sighting_of_ref": "indicator--035e298e-9f7f-460a-afcd-0588ae7716b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f172964-26b5-4981-bdc8-de63eba31456", "sighting_of_ref": "indicator--035e298e-9f7f-460a-afcd-0588ae7716b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749d7517-09a3-40a4-8dc5-5ceec7d36d99", "sighting_of_ref": "indicator--24659014-ba91-4de5-8a4a-ceea375038c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4cd058-1465-4b4d-8e1a-b0f82fd445c1", "sighting_of_ref": "indicator--fd504543-3e6a-4c31-9294-ed15e366c926", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346da59e-cf9c-4817-a53b-e0f5f9f8a7d9", "sighting_of_ref": "indicator--6af6b4aa-3741-4b1b-8a7b-52a16be35a2d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f29f97c-772b-404f-94b0-75c3ebfcb91a", "sighting_of_ref": "indicator--3b059a34-8c8b-4049-b3d1-11df2d337ccc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84ab670-253d-46ea-90e3-ea6f21caefc4", "sighting_of_ref": "indicator--8a167f91-86ab-4aaf-aae1-c1cc8f3d5360", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2ea138-865e-4757-8a59-5b86674f827c", "sighting_of_ref": "indicator--dbdd28f5-d0e2-4f59-b061-46a522b20a3f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd27110-eb87-43f1-b920-c1ac5a27b90f", "sighting_of_ref": "indicator--21eaaf50-16e8-47b4-82dc-f19cc957bd51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e54a2d-a124-43c5-8ff4-ce2314a128b9", "sighting_of_ref": "indicator--d0588a0a-bb4d-4f4b-bed2-6ebfbb5f274d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a0f8b8-6b05-41e1-ab9b-42f3b6dd2a7a", "sighting_of_ref": "indicator--6ae5315c-b50d-4b36-a251-6e3ead4a13a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6de113-040b-46c2-8f46-c828fff956eb", "sighting_of_ref": "indicator--ed568505-2ceb-41e3-b033-4f376049923c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce038562-2951-452a-9935-5add368a0358", "sighting_of_ref": "indicator--ed568505-2ceb-41e3-b033-4f376049923c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cff17f-a357-4e28-a626-15841784ef70", "sighting_of_ref": "indicator--6b7796a7-9a99-4658-9753-0df65d6e67cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3efa878-c2ec-41e6-bd4e-c929086585c9", "sighting_of_ref": "indicator--bde1fd59-9901-40d6-923a-41a497306872", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d439eebc-cb86-40c0-bb17-fcf1bef108f7", "sighting_of_ref": "indicator--395c314a-7386-4806-9fcc-cd4ac4320732", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd7a5cc-d53b-4dbd-91da-0622354ec8a0", "sighting_of_ref": "indicator--8f6bfc82-8e27-47b8-a475-027ba3afe072", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0b7381-3ef7-4f52-be0d-bb1428b43f05", "sighting_of_ref": "indicator--d4664886-8789-443b-b26f-5109e1735b78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a880b0bc-e2ee-4bf3-8648-a314c4bee311", "sighting_of_ref": "indicator--a9462915-dc84-4fa8-a48e-f5306b8bd3d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aaf77e-bd63-4157-acaf-10696760e50c", "sighting_of_ref": "indicator--ddb2fac1-f711-4ce5-8d3f-0914269ff87b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed74742-7767-472f-8311-fb6522f0fe9f", "sighting_of_ref": "indicator--014ffc75-9184-4954-a96d-e73ee4b95089", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e10d8c9-04d0-4a0a-89ea-d9c814cf3447", "sighting_of_ref": "indicator--6eb31b69-9a37-4dbc-b892-fd7808e11baf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724e4601-8f37-439b-9904-a986071aaa55", "sighting_of_ref": "indicator--163ba043-856a-4d45-b3c1-9e1dbf125d37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effcf6cd-2018-4d00-b01e-85e388611637", "sighting_of_ref": "indicator--f701bb06-a75f-49ee-b4f8-c79cc4ee998c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5b481e-404a-4520-b8c3-b268f361183c", "sighting_of_ref": "indicator--f701bb06-a75f-49ee-b4f8-c79cc4ee998c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd872d0-34a3-4407-8fce-7154f4994420", "sighting_of_ref": "indicator--f701bb06-a75f-49ee-b4f8-c79cc4ee998c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949c0517-06ee-4794-a210-7520c28d7fbb", "sighting_of_ref": "indicator--e0accabc-c389-44b9-ae4d-286bca7986fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f732d5-001b-4e5e-9733-37d6f1f12906", "sighting_of_ref": "indicator--efd16477-2c4d-4089-9c07-dcfc2b16a687", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533d76fe-bfed-47b4-a01c-a57b070d9359", "sighting_of_ref": "indicator--efd16477-2c4d-4089-9c07-dcfc2b16a687", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e247db4a-649e-4e14-babe-c5fa9ba89e45", "sighting_of_ref": "indicator--bdd781d1-2616-48fa-a3e5-41773bf11f23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e835594-be5b-48f6-9955-6c58c61e588c", "sighting_of_ref": "indicator--dbf3fdb4-c09d-4d60-8c01-17bc6cb6b163", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb0f59e-a314-474d-9ddd-5bb2089a367b", "sighting_of_ref": "indicator--3fef9704-925d-4ed7-8d03-7838e886ab4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21b976-0251-493e-a4d6-4f14b753cc5b", "sighting_of_ref": "indicator--6dfc3749-c873-41c5-a8a0-890ff0758902", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3eac59-53cc-4043-9dba-488194469fdd", "sighting_of_ref": "indicator--de6225d9-0199-4ddf-8573-d93654662e8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dedb4c-5224-49b4-b713-9f37380adbfe", "sighting_of_ref": "indicator--367517d2-7381-480b-a5b9-fc66bb89bb07", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91185044-7653-4514-8de2-8fe2c21f51ff", "sighting_of_ref": "indicator--21a171e7-a0ac-4a44-a383-9a4d5a31d74b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7c94e6-5402-40b5-80e8-a2a453e942b2", "sighting_of_ref": "indicator--6f6160f0-7005-4d57-a6d2-8e67c3b53572", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40352307-2930-4ceb-8a0f-c80fdfb20195", "sighting_of_ref": "indicator--f5326f56-3bbc-4a4a-bbe1-b998eb788663", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1570ddb-65de-4235-8236-c40fdfe26823", "sighting_of_ref": "indicator--b042304b-7c99-4d7f-b64a-f4c84a428b30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b19f420-9455-43c8-a799-1e520e3793bb", "sighting_of_ref": "indicator--aeecac14-5c56-4526-9e01-c8d360b65c10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abfe434-d7d7-40b3-8944-bf434cabd579", "sighting_of_ref": "indicator--aeecac14-5c56-4526-9e01-c8d360b65c10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ca6272-7f90-45e7-867c-21f2a2f7d609", "sighting_of_ref": "indicator--3c20ffa9-fcb5-4fa3-b4d4-2fcab371379e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bf5bd6-fc25-4fcd-bbde-1ec0bd2099fd", "sighting_of_ref": "indicator--3c20ffa9-fcb5-4fa3-b4d4-2fcab371379e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf65e4e-b76a-4c3a-8c00-afcc68000d0f", "sighting_of_ref": "indicator--343c983e-b32f-4678-bfb4-3510945bfdd5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eafd8c3-6e92-482c-8d58-6a56a680c576", "sighting_of_ref": "indicator--c0025b2f-03dc-41bd-b96f-afc3aa261175", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e4aaf7-fade-410d-845b-24d38efdcec9", "sighting_of_ref": "indicator--899cc834-25cb-4cac-8fc9-557f3c7a3a41", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb23b63-1b85-42f4-b795-6d8b3724b2d6", "sighting_of_ref": "indicator--f75836a8-5e68-43c7-a914-38f06289d8fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56b059c-b4bb-4deb-baee-853c695a4e99", "sighting_of_ref": "indicator--5ba89d38-e2b0-478b-b70a-7d3aade3d742", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3ad715-b101-4a90-8b67-15a0d6964b19", "sighting_of_ref": "indicator--da3ed989-0d36-4306-b7b1-1acd36c9bd91", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0835cf27-b8f4-4936-864b-bca9aac7d16c", "sighting_of_ref": "indicator--9f08753f-40f4-4dfb-9161-37e8daed7489", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf33346c-c2cc-457e-828d-b1d445de7843", "sighting_of_ref": "indicator--9f08753f-40f4-4dfb-9161-37e8daed7489", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d372ee7-d592-40eb-9cfe-8adba50b084f", "sighting_of_ref": "indicator--6777a7a7-30fe-4349-a979-6698c85d64f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac47e19-9802-447e-8b0d-6ebb5898c0fd", "sighting_of_ref": "indicator--6777a7a7-30fe-4349-a979-6698c85d64f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c22429b-4f40-4c3c-8d5d-a7b1c0c4dd0e", "sighting_of_ref": "indicator--bf63a72f-c9ac-4f68-b67e-349035e452a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b9198c-125f-4ab1-89fd-df187d913bca", "sighting_of_ref": "indicator--690dbce5-937b-43e7-9c3a-d6c67c5597ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d55607-7fa0-494e-b324-f3d39dd8745c", "sighting_of_ref": "indicator--599c028d-6375-4940-bba4-01abf8421100", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e7c128-5c76-4e75-9e69-cc03e938ed72", "sighting_of_ref": "indicator--eee37693-bd83-46d6-a3b2-fc24013cfa16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3263c0c8-d773-469c-9bfd-266f4525cf83", "sighting_of_ref": "indicator--eee37693-bd83-46d6-a3b2-fc24013cfa16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4bd16c-efbf-4289-9b74-b6d77e83c0d1", "sighting_of_ref": "indicator--bb4fdedd-0fd4-4340-a4e7-c35bd6d39847", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239cda24-e9ed-44df-b61c-75c51e644b5f", "sighting_of_ref": "indicator--90e8f7f2-24cb-4ee2-a488-af0a61582efe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03f9a36-df95-4b34-aced-650fa0c30300", "sighting_of_ref": "indicator--1a6bb029-9888-4f92-87e1-aaca863e826a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4a7216-2b8e-4485-b479-13b81a099b61", "sighting_of_ref": "indicator--954633d9-3ae3-4be3-9b16-8557bdf0ba5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46c9730-b24f-4604-bec0-67d82279f712", "sighting_of_ref": "indicator--a7cf754d-e7dd-4220-a2be-599227ee824d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabef657-2a91-4990-9d5c-1b6b41c32bf5", "sighting_of_ref": "indicator--cb990b6c-628d-4960-8d03-a388d1bf2d1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ff3926-92a9-43e5-a4d0-8898b7812d74", "sighting_of_ref": "indicator--6de85ef4-3382-4193-b3e3-8f5dde54296f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f04e908-acec-48a5-ac5f-3920a3a8bb16", "sighting_of_ref": "indicator--0744a2e1-258e-4083-a10a-68fb01dc5158", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaa6ba3-3ca8-42b8-a922-05bf39d01fbc", "sighting_of_ref": "indicator--57064dc6-a8b9-47ae-8e0c-67f4e7da966d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be30123a-8b6a-42a0-90e7-3cf50cdcbfeb", "sighting_of_ref": "indicator--afeae8d2-524a-40d0-a723-a41eaca86710", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f794523-dec7-4c72-8958-b091edd8617a", "sighting_of_ref": "indicator--07363915-8bc0-459e-8f9a-c163faa164f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1922ea-7c43-473e-812b-3d115ef0543f", "sighting_of_ref": "indicator--07363915-8bc0-459e-8f9a-c163faa164f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc742521-4679-492b-9362-40c81fde4612", "sighting_of_ref": "indicator--bb9f4aef-e76d-461c-b739-a8e4698ea636", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49575d03-045b-4a64-b2ff-be39362cf195", "sighting_of_ref": "indicator--685008cd-8678-4b19-b3b0-34cb681e5bc0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09c9639-f95d-4a38-b26e-ba769ebab3ae", "sighting_of_ref": "indicator--596ab9a0-1016-461f-96b3-a74fbd6aff04", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1eb9a3-6f89-4bf7-b78b-3a779451d13c", "sighting_of_ref": "indicator--cfdd7842-c3e6-4f56-8769-48b2fa27e5e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39c2db7-9ee9-4c00-a1b1-9592d2c08874", "sighting_of_ref": "indicator--1b221457-ba29-46d4-bdbd-7eaa78134d74", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b7911-628b-420d-bba2-79c838f20482", "sighting_of_ref": "indicator--f18e053d-7bbf-4ad8-b619-6be8f4c83050", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fcecca-904c-488e-af9b-2105bab4d4fe", "sighting_of_ref": "indicator--8a7ddc8f-1277-4a9d-bd36-be2d2fe256d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50872745-9c29-4960-989e-b3fc58949e2d", "sighting_of_ref": "indicator--1c8176ab-a0fe-43ce-9135-229b40cfe9bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d582fc-dca7-4d68-ba8b-51e765535d5f", "sighting_of_ref": "indicator--7d0e4f53-84ce-40e8-a20a-d2ea05113acb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b2eb8-1894-4363-99df-e229c6c50e7a", "sighting_of_ref": "indicator--a9a2ee34-9276-49f6-b7c8-46d817d812c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38db74b8-1cce-4a96-ba8f-43c248635161", "sighting_of_ref": "indicator--b0827e43-0ec3-4a1f-b5f7-1d9da489d970", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b17943-c337-4f87-98ab-fb8d6664ae4d", "sighting_of_ref": "indicator--b660ccbb-0c41-427d-83e5-933bc2d5e6bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27ee944-3288-4de8-8ad2-ccf1c67baf68", "sighting_of_ref": "indicator--04e3791e-65d3-431d-8cf3-3c2ea747a5c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f97db3-e616-4b32-ba5b-a047cd09cec9", "sighting_of_ref": "indicator--ac51ba57-2380-4c4f-bfb0-73f808c7b203", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cf2f06-f19b-4b2d-8bb8-457f7603d555", "sighting_of_ref": "indicator--14a14bed-2ec2-46e3-9d30-e0a3db3d1188", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485dbfc3-562c-4418-8ae0-0b93ccd8f943", "sighting_of_ref": "indicator--0e220052-2ada-41a7-8ce0-d7e25c92e64e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75a7672-e01a-4f8d-82dd-5a4175c301d7", "sighting_of_ref": "indicator--86fa96d9-12a2-468f-9ca1-c8d483d6ca1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6015ea1-5c09-4ed7-beec-1b752d54e029", "sighting_of_ref": "indicator--4bed14ba-56f0-4213-8c3f-78dca7fffa42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd39724-b233-4e67-b28b-8b44d95f7d1e", "sighting_of_ref": "indicator--def887b2-7a80-465c-87a7-90cf9ab68389", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a0ee9b-e9bf-46a6-97bf-d61d5fe6107d", "sighting_of_ref": "indicator--3b11b733-80c3-47e3-a60b-f4a12699eb43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a541c29-4393-4fb1-bef3-cb063a082171", "sighting_of_ref": "indicator--50c47e18-3d7e-4af6-b6ec-dbf2f1a7d4f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24577fa-62b4-4554-a095-388a5e53df19", "sighting_of_ref": "indicator--5350ee41-1745-4b1b-9329-db3289535e2d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705be0b4-8f74-49b2-98b5-c9897d68f416", "sighting_of_ref": "indicator--aaefda39-f692-428c-9645-b2762a71b82c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316fe364-d681-455b-8251-a16a816e9290", "sighting_of_ref": "indicator--ebaead14-e86e-45fd-a9c1-e4fefbb197ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877035f8-1f1e-47fb-988c-bd04b8ffa3c2", "sighting_of_ref": "indicator--1fc329bc-4615-4bf7-a0e3-d78f62e4e472", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cc3742-888b-4dcb-8905-d0ea48afd66a", "sighting_of_ref": "indicator--47c46ee3-ecd8-4e62-a0ff-4486e1b13a82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac0e156-cc04-4b34-95bf-f82d77676c1d", "sighting_of_ref": "indicator--f1226aae-fbd0-44e7-82ce-3cc0d035761f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1decf79d-0825-4c0b-a163-704c9e9c894e", "sighting_of_ref": "indicator--f1226aae-fbd0-44e7-82ce-3cc0d035761f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b089fe-c412-42e6-a691-a99e4a94627f", "sighting_of_ref": "indicator--6bbe1ef2-a34c-48e8-9a4f-2eb3efee1118", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059254a-290d-43dc-9983-cee2e2804890", "sighting_of_ref": "indicator--38906723-8887-4d1f-8123-d05b8269b9e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fdedbc-e1fe-43c9-b3ff-3856b574b392", "sighting_of_ref": "indicator--8d82b94e-58b4-49d4-a143-88a3d2c7c947", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90f5d2f-3093-401f-9e39-654f7044e59c", "sighting_of_ref": "indicator--94832d62-90cc-4a22-9c83-7ec846a4210f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbba6b-11cc-4260-863f-e491835438d3", "sighting_of_ref": "indicator--601f4812-a3f2-4d0c-90f3-e159f16fd355", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01719331-1bf2-46c2-971a-9570785845bc", "sighting_of_ref": "indicator--dd21b6a8-4616-4006-9a01-fb5e9d989396", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db7b879-a8e8-44d7-8f5b-233ab23a7e4e", "sighting_of_ref": "indicator--9eac7874-9b44-44aa-9c13-40d6310f55e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa69884-78e0-4e06-af45-0f11c3cf89b9", "sighting_of_ref": "indicator--a89402dd-7b2f-45db-81ca-445c397892e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fef0ae-4d8f-455c-9621-ddab72debdff", "sighting_of_ref": "indicator--cc701393-3f44-4e1e-a4dc-b06763bc40a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68a63c7-e3f7-40f9-9df6-bbbb40749ece", "sighting_of_ref": "indicator--2841f6c3-44a2-4a2f-b808-6d72d72fc69e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6932989-f7ba-458f-9383-be2d78409e4b", "sighting_of_ref": "indicator--ce361d03-a872-4c0c-9f17-b030f64d0dcb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e207c5-61a9-4f95-9fb2-aa79daa547e1", "sighting_of_ref": "indicator--ce361d03-a872-4c0c-9f17-b030f64d0dcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9158e29e-4543-4253-a70d-8eb32fecc6a8", "sighting_of_ref": "indicator--b34f7e1c-3058-48d0-b11b-ef3928c6585a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b983c8-7a35-4961-a1fa-f4fccca35ef7", "sighting_of_ref": "indicator--f04a47ba-5aa5-45a5-bc53-e00e78f32b00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8fca5a-f0ec-432a-9c69-f262f86a0dbc", "sighting_of_ref": "indicator--475d503c-9362-4dd5-b7d3-8eee152e8bc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f38ddc7-8064-459e-a15d-86d823fcd54f", "sighting_of_ref": "indicator--a7f8e41d-eee8-48e9-851d-04db3a7a1a02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b824681e-19f9-4171-b73d-4046cb983993", "sighting_of_ref": "indicator--1c8597c7-6719-4703-a97f-b0dc75ec6d32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b9a98b-9b2b-4628-bd9a-59dae525802c", "sighting_of_ref": "indicator--78d4dd18-3fce-4466-b950-3dcc06364cf2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4daba052-6a7b-44e2-affc-abcabc92be90", "sighting_of_ref": "indicator--1b054f2f-6764-4371-9358-a95b0c7e8ac8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2f6a0b-f4fd-4429-8bfb-17c525bd4c39", "sighting_of_ref": "indicator--1b054f2f-6764-4371-9358-a95b0c7e8ac8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776f5bb-c3d9-4cc8-ad52-4406f735c63f", "sighting_of_ref": "indicator--0543512e-18c0-4083-b9b7-94252b896e48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59ec4a3-380f-41d4-a0f8-a1dcce98679f", "sighting_of_ref": "indicator--0543512e-18c0-4083-b9b7-94252b896e48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ede482-1a00-4e8e-b1dd-e31581665582", "sighting_of_ref": "indicator--136d99f2-6ca3-44ed-8462-1543d2064e6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcf3896-e55c-4bbb-9420-c3972e37e7a5", "sighting_of_ref": "indicator--69872ec6-4299-4349-b559-9134e51017b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf21d205-3185-4ec6-8849-9abe10abbb56", "sighting_of_ref": "indicator--60c50bf1-991f-4391-a779-6bf4db6abe89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f55a48-2fb5-40f7-96b9-7b66540eab65", "sighting_of_ref": "indicator--3d36cab4-62a1-47c4-8004-3ec8fb8a6038", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15701db-b0c8-4ad0-8301-562316d25235", "sighting_of_ref": "indicator--a5f8d6e3-f44a-46ad-bebe-90b9ded6e797", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bc14ca-217d-42fe-bf15-ae362be49fc7", "sighting_of_ref": "indicator--33aae6d8-c952-4dbd-8cee-543343fca5fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc9fb62-357f-4e05-bbbd-adf3ea4afa7c", "sighting_of_ref": "indicator--65934b47-1f91-41f0-bb86-b8d4b23f02a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1389bb-7d3f-4fbf-9acc-33d6ac349b81", "sighting_of_ref": "indicator--65934b47-1f91-41f0-bb86-b8d4b23f02a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541c6348-1fdf-4a63-be3c-95e463f14424", "sighting_of_ref": "indicator--a2dba2ab-f358-4f23-a786-7800578eb734", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1235e24-a816-4557-941b-5eff93c9f1d1", "sighting_of_ref": "indicator--fe31d405-54b8-4ffb-af08-4d443e4ad673", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d064d76-411d-4a92-9796-6a9e1a1c8e09", "sighting_of_ref": "indicator--f48ab944-de92-4056-95ee-bb859f294f4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3afd20-e37d-4edb-a5f9-518184f3cc1c", "sighting_of_ref": "indicator--f30ee444-01a3-4f63-99e7-1c404e6acaa2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b60a4a-4c6b-4c3b-aca9-efe525101080", "sighting_of_ref": "indicator--6e26bec5-edb5-4885-89a7-d64ea2a41876", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2076b2e2-87f3-40eb-80e8-1d24923b673e", "sighting_of_ref": "indicator--bc807e51-e14c-46be-a3d1-4d67192c8d98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956e92b4-6134-45aa-b193-61a7bed144ee", "sighting_of_ref": "indicator--f4ca1907-e3e1-4da6-b745-8b44503ae5b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4e43b2-4f7b-406a-bdc5-bc1d023c5587", "sighting_of_ref": "indicator--aea50bd9-9603-4bd9-a9bf-2fd56cfda9b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526bbc15-63e5-47e1-bd16-6db289a4da47", "sighting_of_ref": "indicator--aea50bd9-9603-4bd9-a9bf-2fd56cfda9b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b30f90-ad0e-441d-a01a-7b4df8fb0c4e", "sighting_of_ref": "indicator--aea50bd9-9603-4bd9-a9bf-2fd56cfda9b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba445982-1c3e-45ff-b37d-f2ed9aaa7dcb", "sighting_of_ref": "indicator--4ec78b92-5d29-45df-9c5d-ea45650aacb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998147d-33fa-4dbc-8b66-d454871a8779", "sighting_of_ref": "indicator--c36a0e1e-2b32-41b1-9fb7-461bcffd6ced", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c4ce01-bec6-42d2-a685-42e594b1f253", "sighting_of_ref": "indicator--4c910b37-4b76-487e-a60f-ee4f9308b010", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edd90c0-9490-46a1-b1c1-065312d01085", "sighting_of_ref": "indicator--c9f918d5-4a09-4394-833a-f94a7414330b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b356fe-c3b4-4286-adc9-5b44b42e3ea6", "sighting_of_ref": "indicator--3d289757-3099-4d30-83d6-b9a79a379dfd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1726689-8858-4790-a25a-a96ce03a0d37", "sighting_of_ref": "indicator--e245badd-3d57-4ffa-8e04-2cd38e2d1095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d26c0-9877-42b8-9088-376e09549de5", "sighting_of_ref": "indicator--7e99ca5e-ceb5-48ea-8420-801b3c160ef6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3ca344-c44c-40e3-ac2f-23191cbdfa8b", "sighting_of_ref": "indicator--7e99ca5e-ceb5-48ea-8420-801b3c160ef6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71160124-6846-4fda-88ae-b411baa26153", "sighting_of_ref": "indicator--67f1e8af-1f75-4774-b600-91336b8afcfa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922bef18-117c-4a9c-9473-c9b0237ffc2f", "sighting_of_ref": "indicator--0a815250-2e6e-4366-9f54-6000023a4e87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8b15c3-5c3d-4148-b0e5-c72f41cac183", "sighting_of_ref": "indicator--0a815250-2e6e-4366-9f54-6000023a4e87", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfcfef8-b72e-4491-9641-01c0f90e2af2", "sighting_of_ref": "indicator--0a815250-2e6e-4366-9f54-6000023a4e87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a67dc7e-466a-4a2e-8a71-aeba1390ed60", "sighting_of_ref": "indicator--99fc9ee0-8c08-4d38-91d3-da28ff2e9104", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77ff150-371b-44cd-8913-164b86ddca34", "sighting_of_ref": "indicator--af54f5c7-0969-4fa5-85d4-f1c7a117db3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45979ff1-5d57-4f88-874f-d50f1aa9e29d", "sighting_of_ref": "indicator--dd4bf946-9cc4-45ed-9322-4cf391a19ea3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cded253-519f-4eb4-a5f1-58a12eaaae49", "sighting_of_ref": "indicator--dd4bf946-9cc4-45ed-9322-4cf391a19ea3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0545d17-cb02-4a31-9ceb-2d4c11e37f20", "sighting_of_ref": "indicator--6f9bebb2-191e-4c31-adf4-9c2c505d3f25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4ece0d-363e-41dc-b2f2-00831de10d71", "sighting_of_ref": "indicator--6f9bebb2-191e-4c31-adf4-9c2c505d3f25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc097ad-3502-4ed0-aef9-225059a64d00", "sighting_of_ref": "indicator--fe5fe154-4060-4dcd-b8ea-6303793fbd7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c6420f-6c7e-4797-96fe-fd483d6bc644", "sighting_of_ref": "indicator--fe5fe154-4060-4dcd-b8ea-6303793fbd7d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbb7927-29ce-4591-b6d4-850ef4946e90", "sighting_of_ref": "indicator--015b15c8-6e05-4444-ad57-454000c5915f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839f9c67-32d2-4573-bfd6-0c3d9186506c", "sighting_of_ref": "indicator--29caafe0-9a71-4864-bf6c-0eda21f6ab5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d3ac21-fc2e-4c79-9a93-929a4a7826b5", "sighting_of_ref": "indicator--205e1c13-c19d-4f88-8ba9-9b6fcd65cb48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db1a298-b317-4833-be47-0920a19435e8", "sighting_of_ref": "indicator--fa5378bb-803a-4637-9f2b-e5bdd3eeb094", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2367a902-c899-4eaf-8c69-83096b3d6c2c", "sighting_of_ref": "indicator--fe743a53-3d03-42df-8856-02b0d987ff1f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8139c273-1da9-434c-802b-50f758c3d2e9", "sighting_of_ref": "indicator--485e7036-3b5d-40a7-b32d-8c3bcb2a5a57", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d386afb5-e321-4c87-9303-d8da13315153", "sighting_of_ref": "indicator--f89634a1-f487-471f-89a8-55a2b073d9de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6059ed-8b7d-4a3c-8d3e-57cc95895439", "sighting_of_ref": "indicator--f89634a1-f487-471f-89a8-55a2b073d9de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97d5579-6ade-4aad-ab3c-f2c7248d30ee", "sighting_of_ref": "indicator--f89634a1-f487-471f-89a8-55a2b073d9de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37657d2c-38d2-48d5-9c8a-9b53043630a2", "sighting_of_ref": "indicator--9a2bd724-67c8-4d07-95f3-615a02f3177c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42210f4c-02a7-46ba-a1ba-99a8995faab3", "sighting_of_ref": "indicator--9a2bd724-67c8-4d07-95f3-615a02f3177c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457d813a-f822-4d30-9796-57db58f8d5f2", "sighting_of_ref": "indicator--16c47554-b8b0-4492-b597-4ce4726aec01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f832e83-1672-47ce-ab6f-458a3a1e3497", "sighting_of_ref": "indicator--c952333f-cc02-411f-accc-d7c25b25aa58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd58f87-70ac-4956-b605-4217dae518d5", "sighting_of_ref": "indicator--c952333f-cc02-411f-accc-d7c25b25aa58", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409c8a00-c84d-4fc5-905b-29cff69dc8ca", "sighting_of_ref": "indicator--c952333f-cc02-411f-accc-d7c25b25aa58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750ea22e-e539-4cd5-8a2b-dc2399cb7a11", "sighting_of_ref": "indicator--99394032-022b-41a6-ab7b-a6dd24e77ca5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01ba903-8349-44fc-b939-f74a86654745", "sighting_of_ref": "indicator--99394032-022b-41a6-ab7b-a6dd24e77ca5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e4d8ae-b328-4d0b-8c9c-69c1e7c71876", "sighting_of_ref": "indicator--fd56eb85-698b-40c3-8351-822c6c56edd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6f9299-9bdc-4a96-af52-d511f9be2a41", "sighting_of_ref": "indicator--78822a01-2942-4481-9075-e1834f385a2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fa760a-0a19-4d1a-ae67-13c500b75236", "sighting_of_ref": "indicator--78822a01-2942-4481-9075-e1834f385a2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f5bee3-8398-4594-93dd-229128d20653", "sighting_of_ref": "indicator--58fdb405-595a-4005-92b2-84c2d5ba9403", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae0e774-3e9c-4f44-ad2c-b5325160d677", "sighting_of_ref": "indicator--d14eb06a-2ac1-4af6-b00d-13467194915b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01209f0-3309-477c-9e7c-c512b50c1b6d", "sighting_of_ref": "indicator--d14eb06a-2ac1-4af6-b00d-13467194915b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80aa261b-9816-4dc0-8cdb-a657ed8355d3", "sighting_of_ref": "indicator--d14eb06a-2ac1-4af6-b00d-13467194915b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27d6b8b-c541-4bc5-ae79-7a90d7c2b4f4", "sighting_of_ref": "indicator--9816bf4b-0d1a-47a4-a679-7d68d3513899", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026bd351-e861-4388-bb39-80a688083ccf", "sighting_of_ref": "indicator--d7a48219-e651-4dad-ab34-7da6977288b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a330d730-890c-4f8a-b2d7-366b17f587ee", "sighting_of_ref": "indicator--d7a48219-e651-4dad-ab34-7da6977288b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9588c459-a011-4c71-bf00-d6537e3d5751", "sighting_of_ref": "indicator--4b244940-1715-4c45-bb02-7ba0641f8a59", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6beb6f22-eead-45c2-994b-f1695a322651", "sighting_of_ref": "indicator--cbe5b76a-7a8f-4a1e-88a1-5d2cfc7af8c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b871b7f-e020-4657-bb84-9e84f523b372", "sighting_of_ref": "indicator--0458e779-3163-4a8f-9eca-99b814fdcff5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad70705-fdf4-466b-abc6-e994c2d75c46", "sighting_of_ref": "indicator--7dcd5ea3-175c-4a84-82c9-5330a33d1678", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9ec8d8-dc3b-43b0-9d3e-4ac4ef41be19", "sighting_of_ref": "indicator--d416fb99-2107-47a1-a465-fa842e86d50a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4379df6c-017e-4a78-93b5-633fd4d39d72", "sighting_of_ref": "indicator--8868010f-53e4-4c43-ad0e-f6d70f78d453", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd4d2b9-ab71-4399-b53d-865ba1f4a1a2", "sighting_of_ref": "indicator--98b86c69-6507-40d0-9a06-de74e9d29a5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38dfffa-26d1-42c6-869c-1963ced91f1d", "sighting_of_ref": "indicator--023abfb6-a176-4066-a056-07568a2890f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a4a68b-cd3c-4752-b0f0-839a1c4a2634", "sighting_of_ref": "indicator--926f21c8-b021-44a3-ab26-bd90f4781559", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e7b329-bced-4e6e-8abc-47fdeec0daf5", "sighting_of_ref": "indicator--5ff47c5c-7ed6-4dc3-92df-4b2f9b869e0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87b376f-5a27-4313-ace3-96ca44971104", "sighting_of_ref": "indicator--5ff47c5c-7ed6-4dc3-92df-4b2f9b869e0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fe6d46-a826-44c1-a70e-97bf64a4c0b6", "sighting_of_ref": "indicator--dc1c68a1-5a9b-43d4-8764-66d56b66c7ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca206dec-edd5-4cf5-9850-74d4c6ca39d7", "sighting_of_ref": "indicator--dc1c68a1-5a9b-43d4-8764-66d56b66c7ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad177fb-32d0-4d83-b511-7bc21ee372da", "sighting_of_ref": "indicator--dc1c68a1-5a9b-43d4-8764-66d56b66c7ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a0406e-c573-41b2-b163-03427b37bc0e", "sighting_of_ref": "indicator--e7968867-0e5a-47cc-b2f0-2969d6f9c0d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcc295a-775a-41fa-b29e-90d5ea6906b5", "sighting_of_ref": "indicator--510d8ff3-424e-4678-88f8-f77bcb4ad922", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cea38f-14be-4cf4-b327-01cd232a3738", "sighting_of_ref": "indicator--156fde55-eb75-441a-bede-093f1616ab61", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b10dc1-227c-4e74-87fb-843bb995a4e4", "sighting_of_ref": "indicator--c137badd-5ed1-4037-b71e-deeff56aad5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8033e8f5-f270-4495-ab8f-6c29f0431374", "sighting_of_ref": "indicator--8efd1fb0-44da-4d92-b741-0fbbfd3704d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c703e0a2-210b-429c-9219-6b9ebb2abb65", "sighting_of_ref": "indicator--8efd1fb0-44da-4d92-b741-0fbbfd3704d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b749e4a-8d1a-4ecb-912d-ec9d3034cf93", "sighting_of_ref": "indicator--8efd1fb0-44da-4d92-b741-0fbbfd3704d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc73182-a85f-41c9-ac9b-39554edeb6f7", "sighting_of_ref": "indicator--7f6e8e60-556a-4fc3-9869-53e3d2ef4d47", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccb47f5-b178-4862-b2b0-39bb22897a12", "sighting_of_ref": "indicator--7f6e8e60-556a-4fc3-9869-53e3d2ef4d47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9814ce-807a-4d17-b4fd-d8e7115c038f", "sighting_of_ref": "indicator--6573f353-4373-4894-9509-5c9d89b2427a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d048f-44b9-42a7-9d44-8194792bfddb", "sighting_of_ref": "indicator--87ab96d9-0f21-4672-83ac-347c11ae52b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb7a09d-dd81-4d6b-86af-c3aba699478b", "sighting_of_ref": "indicator--87ab96d9-0f21-4672-83ac-347c11ae52b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75745dd5-ecb8-40fc-ba69-dd78fa88d140", "sighting_of_ref": "indicator--f3c0ddb3-c648-4759-8365-8fedee975cdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c809601-c3f7-4c2b-921d-9e62551168a5", "sighting_of_ref": "indicator--4471cbb0-475b-4839-8597-503fa9403d2d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df7af51-56ae-4063-964d-818d490eac83", "sighting_of_ref": "indicator--06e83765-d7a8-43b0-bedc-21760038d9e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91af4a9-caa6-4e56-ab86-6a7b0c91cba2", "sighting_of_ref": "indicator--0b157cbf-d65b-458d-8f08-e24005d38308", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53647bb-6b28-42ad-b444-4a24da9c5a02", "sighting_of_ref": "indicator--241fabb5-7a72-4b65-9a8f-eeb8968c21a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66ecfd3-8ab0-4157-83c1-12763e81eed4", "sighting_of_ref": "indicator--5255b5cb-9cfe-4f25-a1b5-d4d06c69c5f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4618fe16-b9f8-4663-b940-bccd4c0371cc", "sighting_of_ref": "indicator--21f68f6c-9c1b-4ffd-8426-4f651056e8e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29481c77-67c1-4f90-9f0b-cb462af6d682", "sighting_of_ref": "indicator--a2c8a0ab-4f96-464e-904d-706a87ad0506", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e761b4aa-6aa2-486c-b195-36a702568dfe", "sighting_of_ref": "indicator--4cf4d419-269e-4df4-bf86-50a2e23fb671", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9513ec39-7e67-47b6-9faa-57b754fbf069", "sighting_of_ref": "indicator--152f7e34-deb7-4fd7-9932-2465945a672f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b25a81-93bc-42b7-8559-7cb4b9a27c92", "sighting_of_ref": "indicator--152f7e34-deb7-4fd7-9932-2465945a672f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba4693b-3217-4f8d-b9d4-a5cd530fa4f4", "sighting_of_ref": "indicator--d8a25223-81e5-4cde-8f97-f0d99faa1dfe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5ebaa4-ee5e-4287-b3fc-09ec0d929729", "sighting_of_ref": "indicator--d8a25223-81e5-4cde-8f97-f0d99faa1dfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8ed9c6-3f51-4252-add1-0792470921cd", "sighting_of_ref": "indicator--e9df0944-059a-44fe-be38-65606154b02a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1d14da-bc59-46e8-bd8a-72c4419d211f", "sighting_of_ref": "indicator--e9df0944-059a-44fe-be38-65606154b02a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbba9d1-172e-4ca9-b30e-5b18b8dba008", "sighting_of_ref": "indicator--dab955fa-5f3e-460c-bf4d-f7db3e38f88b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d30ef9e-5c71-4630-82b9-71988b59768f", "sighting_of_ref": "indicator--dab955fa-5f3e-460c-bf4d-f7db3e38f88b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef9a24c-817c-40b6-b81e-d03b970caeea", "sighting_of_ref": "indicator--65f1c591-601a-43d8-ab1a-4d19da9e3fc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d3a442-7b67-47a2-afc3-2ad7e3cc4810", "sighting_of_ref": "indicator--43cc589c-fa8c-40db-a436-775d20dcc8da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea32747-5fb9-4950-9c57-8e367d136df5", "sighting_of_ref": "indicator--43cc589c-fa8c-40db-a436-775d20dcc8da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e7a240-fa88-408e-9994-8717f8aebefd", "sighting_of_ref": "indicator--83cb884c-198f-4fff-871d-acc889f1f515", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78c4230-afef-4945-9ef3-d5d43c0869f2", "sighting_of_ref": "indicator--83cb884c-198f-4fff-871d-acc889f1f515", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4ed016-ec54-4a10-9d88-757f45d30b3a", "sighting_of_ref": "indicator--b354ad2c-bedd-453a-9a68-46cd4b88489e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9d49d4-120d-49c4-83a2-871617024d07", "sighting_of_ref": "indicator--52a80287-08c2-4d68-af12-c937389f82f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fcdcf6-11c7-4a1d-bc86-c6b94f7acc8e", "sighting_of_ref": "indicator--6c08843d-8e1d-4fae-9bcc-2362c71f2f83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c277ef2-247e-47a8-bf3e-981a70f63fca", "sighting_of_ref": "indicator--6be48003-8b09-4d17-9545-2ebf14130aa2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f3ad78-6544-4258-8ee5-6e93f715cbcb", "sighting_of_ref": "indicator--d6fdf088-66eb-4458-883c-85205d68b2ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e758344-4660-4e25-9215-0e40983cbef6", "sighting_of_ref": "indicator--d6fdf088-66eb-4458-883c-85205d68b2ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a7d8ca-c392-40ae-bf21-7a3d01f0d70b", "sighting_of_ref": "indicator--35b96211-f6b3-4bf2-8d19-23e6729b4bed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af46332-0961-4dd8-8726-030cdbcd8875", "sighting_of_ref": "indicator--ae5832f2-6ab6-411a-ad4f-3afec27bc999", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4901afd3-f785-4c93-8ef0-ee2dc310d54e", "sighting_of_ref": "indicator--56a0b2bf-37bd-4994-a082-5742bd6b50b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426bde12-969c-4a0a-909e-5e5cb3f20500", "sighting_of_ref": "indicator--56a0b2bf-37bd-4994-a082-5742bd6b50b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84b7797-5059-4e3d-a8f7-1d12cfe08500", "sighting_of_ref": "indicator--9e20a83e-d891-434d-a236-a800e18686b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc4d09b-8cd9-4584-aeb0-f37d6dd6e7e3", "sighting_of_ref": "indicator--9e20a83e-d891-434d-a236-a800e18686b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087d697b-e2a1-4f65-ad3e-e24af874e8da", "sighting_of_ref": "indicator--84fa2b5f-8685-4578-8cef-345f7e2391ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7652e6c-a827-43d1-97a5-e4d32a35496b", "sighting_of_ref": "indicator--171f017c-78cb-4c9a-b17b-6ac2b3a52d21", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaf587a-1602-4899-b57f-a3f8d39a057f", "sighting_of_ref": "indicator--171f017c-78cb-4c9a-b17b-6ac2b3a52d21", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95e8fd0-0ced-4ec6-b86b-37e3b7392a1d", "sighting_of_ref": "indicator--14b9894f-12a5-4aad-a6b2-458bf841f797", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d818fca4-b527-4ec1-b792-05a82179a6fd", "sighting_of_ref": "indicator--14b9894f-12a5-4aad-a6b2-458bf841f797", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90869afd-6546-4049-a881-a579fd3628f0", "sighting_of_ref": "indicator--23df8daf-54bc-4037-a9b4-c8aebb7d8841", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6aab46-1df3-41a8-9f40-6f0949f9e076", "sighting_of_ref": "indicator--f9315dc6-f906-4968-b300-83833cd3841c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8267f4db-e0b4-46c6-883c-f61708736939", "sighting_of_ref": "indicator--fff1a626-f0b4-43a8-84ae-517c4b157306", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83bd20c-4a25-4b0e-a3f9-5a31be706afa", "sighting_of_ref": "indicator--fff1a626-f0b4-43a8-84ae-517c4b157306", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d8be33-1d84-458c-bfc2-af736fc07ab4", "sighting_of_ref": "indicator--fff1a626-f0b4-43a8-84ae-517c4b157306", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111fa672-74f5-4318-a289-94df2bed9b7a", "sighting_of_ref": "indicator--74ad5275-28e1-4b61-ba15-124f8a0b8012", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fad00d0-4bc2-4bad-9acb-607417df9583", "sighting_of_ref": "indicator--0c708fcf-f55b-4fb1-b47a-6a184932eec4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d36eb8-d71d-466e-a814-4da1dffeca50", "sighting_of_ref": "indicator--0c708fcf-f55b-4fb1-b47a-6a184932eec4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ecc69e-2bc0-48e2-91a1-643a1aebcc7c", "sighting_of_ref": "indicator--b381eb66-22b8-491a-ae1d-dfed11c3c8b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0e5ebe-b032-4522-ae1f-5f9671a5796e", "sighting_of_ref": "indicator--b381eb66-22b8-491a-ae1d-dfed11c3c8b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e4055-b36a-46cd-8402-b8861502d53a", "sighting_of_ref": "indicator--b381eb66-22b8-491a-ae1d-dfed11c3c8b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26d1f51-3774-48cc-8d74-0f7c447245ca", "sighting_of_ref": "indicator--29b37de6-d9b4-4c30-bfdc-e93ca0e0863f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b142d1c9-be07-4087-b1fb-9a0c905f6895", "sighting_of_ref": "indicator--be784489-eb9b-4629-8da3-1fade1c30393", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eab633-d62d-4c7d-9d1c-6cf42c7018d0", "sighting_of_ref": "indicator--0ac52a5b-a455-417e-9b3d-d867c0aa7afa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c7f024-6ab9-4b46-afdc-6aa428eed806", "sighting_of_ref": "indicator--0ac52a5b-a455-417e-9b3d-d867c0aa7afa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5798ae68-2e9b-4aac-ac9d-6a4e5f1f3de4", "sighting_of_ref": "indicator--e8a1ad28-c5e2-420a-b320-7fef86a8a544", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d609085-79f3-4047-98c4-4810965af777", "sighting_of_ref": "indicator--e8a1ad28-c5e2-420a-b320-7fef86a8a544", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bb93e9-6576-4ab0-84e8-6d6eac240389", "sighting_of_ref": "indicator--53076d50-a922-4874-b4ac-5801d3f01e11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515e207-7cc0-4d11-ae66-11c950bf784f", "sighting_of_ref": "indicator--0b99b034-a32e-4c96-8afc-2d2b71bd8091", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6dc462-af97-4f96-bff9-abbc6285e7c0", "sighting_of_ref": "indicator--293f4d21-4c28-4f00-a49e-20bc315be0f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec94f93-c3fb-4c28-93d1-bdd4934765a1", "sighting_of_ref": "indicator--293f4d21-4c28-4f00-a49e-20bc315be0f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8cef39-33f1-47fb-b672-84f673817c2a", "sighting_of_ref": "indicator--293f4d21-4c28-4f00-a49e-20bc315be0f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ad1f33-6c2c-435f-a52a-342564390fec", "sighting_of_ref": "indicator--c5375c7b-4998-4c85-87bb-baf2acc84356", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8af56a-0234-410f-9bc7-af33a6520b72", "sighting_of_ref": "indicator--6b3794d6-5dea-4aca-9188-133dd4ab8919", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e631bd5-da65-4556-95e9-e9a5716effe3", "sighting_of_ref": "indicator--9ed8ba7d-5ce3-4a64-9c21-07b923163d3e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b4f504-f956-496d-ab8b-786ff9cb5300", "sighting_of_ref": "indicator--9ed8ba7d-5ce3-4a64-9c21-07b923163d3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4945c4b-620c-4d77-b583-c9eb9c3fc5d8", "sighting_of_ref": "indicator--4027b7d2-9caa-490a-b926-fc42523f82a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22ec2a4-c853-4689-a523-03e04dcf9d8c", "sighting_of_ref": "indicator--4027b7d2-9caa-490a-b926-fc42523f82a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed88bf31-245f-4dcc-9511-b4fdc8914c3f", "sighting_of_ref": "indicator--ce24cc9a-f4de-4ec7-8e71-f93a8a546588", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b61507a-cc84-4e27-ad3e-a6c6452b9ad2", "sighting_of_ref": "indicator--60ef35bb-b0d4-42ad-8b2d-91d47dc0fa8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cdfdbe-8bae-4d98-aedc-4e6e5a3415b3", "sighting_of_ref": "indicator--f1bac443-9f57-4286-bbb3-35a75ce95ff9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e4b82-1fff-4f0d-9089-2c83d0a74a54", "sighting_of_ref": "indicator--b5d5032d-5f8d-42d1-a848-99eb903b14e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34968e05-c5b7-4f1f-8d27-e4be789b5051", "sighting_of_ref": "indicator--b25d9ea9-5a85-4b99-9594-8f7cf92b0e90", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd5e25a-36ad-4b7f-a9e7-851f5ab4bf67", "sighting_of_ref": "indicator--06dd0b97-8d97-48eb-ace7-8652f667db45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7af608-c56f-4c50-a991-0f589098de6e", "sighting_of_ref": "indicator--06dd0b97-8d97-48eb-ace7-8652f667db45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f26d422-dd5d-476e-8796-85b9eccef8a5", "sighting_of_ref": "indicator--47825a99-829e-4bc5-89c9-7bdb4a70cc29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7cabe9-0079-4063-bf69-3ebef9dcc5bc", "sighting_of_ref": "indicator--112eadf7-367f-4269-b201-2f46937cc94f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590bbdb1-c6b9-412a-943f-0d23b49a6e13", "sighting_of_ref": "indicator--112eadf7-367f-4269-b201-2f46937cc94f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e13880c-259c-4746-9e72-3d94b76359f9", "sighting_of_ref": "indicator--08a7acc4-6466-483d-bb59-a3aa1e8910cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd792f-9d29-41a6-b491-4eed2ccdb281", "sighting_of_ref": "indicator--181c4353-7e21-4914-9121-c8b6bb252d71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad181dc1-4728-4f6c-9ab1-ba99b37d21e8", "sighting_of_ref": "indicator--181c4353-7e21-4914-9121-c8b6bb252d71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cfba6e-0223-4ba7-a874-0b3ddf7f361c", "sighting_of_ref": "indicator--08efce81-9acc-4c8b-bc77-0234869f1b3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b39af-3868-4b6a-84cc-24568403b9ca", "sighting_of_ref": "indicator--08efce81-9acc-4c8b-bc77-0234869f1b3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb52d703-5240-41b8-b64e-28f67a36dd3f", "sighting_of_ref": "indicator--93679cf1-28b5-4dfe-af9c-4af0df100e32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b801a99-8bf8-4982-961e-b9ff0dafc901", "sighting_of_ref": "indicator--c97080eb-2094-48b1-b4b3-b0188c77c6ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ad2d0c-0677-4d2f-a2aa-e4e632a51ba1", "sighting_of_ref": "indicator--c97080eb-2094-48b1-b4b3-b0188c77c6ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd407ca3-5d96-4124-91ed-51cc5c2884d4", "sighting_of_ref": "indicator--30dfcbba-c743-4ea3-8db3-bc6a38379c3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5d9266-b008-4aa8-b5ea-e7869a4729c9", "sighting_of_ref": "indicator--85075414-a881-4ea4-a515-9a87e7651583", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bf0a42-dce9-430b-94d7-4d5f5509f453", "sighting_of_ref": "indicator--85075414-a881-4ea4-a515-9a87e7651583", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855a9893-0a76-4691-aa42-f649e984571c", "sighting_of_ref": "indicator--8d934185-c137-4215-b3a1-fbb3e51bdcc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f339b1-bda0-4159-9673-7c69917a34c9", "sighting_of_ref": "indicator--d6a5ed31-338a-485c-ba79-e83f1986debb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d042e38-a7f9-48e8-955d-f88e8ad7f555", "sighting_of_ref": "indicator--d6a5ed31-338a-485c-ba79-e83f1986debb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6f8f8a-eb6a-4e08-b0c8-701db748c6e2", "sighting_of_ref": "indicator--602dbf19-f812-4188-b4c0-4a422ca6cd7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbd8a2c-0914-489c-beb8-8004d6fff46d", "sighting_of_ref": "indicator--602dbf19-f812-4188-b4c0-4a422ca6cd7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd2ee52-2fe8-421c-82a8-a8a554bcc9fc", "sighting_of_ref": "indicator--a4dd1058-d5f9-49bf-aa5c-21b1dd77673f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9282715-c2cd-4984-8541-4b58b03644c6", "sighting_of_ref": "indicator--a4dd1058-d5f9-49bf-aa5c-21b1dd77673f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb4b261-286c-4bae-807a-76c7a0c7e34c", "sighting_of_ref": "indicator--28108f9d-f911-4364-ab47-f79dc8e1e82f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56050c1e-9fad-4f9d-8073-90407e7539e8", "sighting_of_ref": "indicator--28108f9d-f911-4364-ab47-f79dc8e1e82f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b0cf5a-77ce-4b46-8537-4ca7414ba282", "sighting_of_ref": "indicator--4b3f42a0-1ddd-43c6-b7dd-c25941ee0c56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1db15ae-212d-4703-9926-15493ea69a79", "sighting_of_ref": "indicator--4b3f42a0-1ddd-43c6-b7dd-c25941ee0c56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbcd17a-8e89-4941-9d32-abece5231efc", "sighting_of_ref": "indicator--434a5d3d-ffd7-4fe4-9e4f-e93f7e141e6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6de9962-b8fe-4758-8782-0e0e135e21d4", "sighting_of_ref": "indicator--7281077f-84fa-4460-af04-97ca6ba3048a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de8da8d-d76d-4717-8007-f0523b7a16ff", "sighting_of_ref": "indicator--7281077f-84fa-4460-af04-97ca6ba3048a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9723105b-a21b-4e4e-807b-77b769152916", "sighting_of_ref": "indicator--7281077f-84fa-4460-af04-97ca6ba3048a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b792a7ad-974f-4be0-b677-dba4ba1a9d80", "sighting_of_ref": "indicator--70fa7443-5e75-43d4-85c4-c818ff075468", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379cf8c1-d82a-424c-b21c-89b005bf6e38", "sighting_of_ref": "indicator--e7ab3553-b53d-43b1-b507-1d17be9fb7b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e078e61-4fdd-498f-9aeb-10178a2430ae", "sighting_of_ref": "indicator--e7ab3553-b53d-43b1-b507-1d17be9fb7b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4046add3-a544-43be-bbff-7d46a59e770d", "sighting_of_ref": "indicator--c509eba0-535d-4483-8dff-20c5b5f4a33a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cb22f0-3c0d-4636-9430-8f2e3aafe94e", "sighting_of_ref": "indicator--c509eba0-535d-4483-8dff-20c5b5f4a33a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94660cdc-9fe2-4395-9725-9c0c901e36f7", "sighting_of_ref": "indicator--287208eb-90a4-4142-8b7b-8891afb07d9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58509c91-71bc-44e2-af70-0ee9138747dd", "sighting_of_ref": "indicator--8becbb1e-4729-491a-81b5-74299ebb4c15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8431c8a-cc53-4252-a370-c478e3cfda14", "sighting_of_ref": "indicator--fd3f2dd5-0b16-46c1-ad19-5f5823a3adfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca82804-36c4-4303-8f86-13e821acf626", "sighting_of_ref": "indicator--fd3f2dd5-0b16-46c1-ad19-5f5823a3adfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8566ccba-261e-4c2c-9127-74024200b2bb", "sighting_of_ref": "indicator--fd3f2dd5-0b16-46c1-ad19-5f5823a3adfa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be473ef4-6f5e-4471-940e-b7126525a630", "sighting_of_ref": "indicator--54e87e5b-c20b-4bee-a627-edfc1010bdcc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13e5d01-6bc9-4635-9f78-96aeb5cd04f1", "sighting_of_ref": "indicator--4b618b7e-59d2-42e9-b85c-466a5e4384e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839724bb-03f5-4183-8e7d-b92dcfdf0371", "sighting_of_ref": "indicator--939710b8-d2af-4f3c-81de-fcebdf0441ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92263991-030f-4abc-88cb-01d0214978b7", "sighting_of_ref": "indicator--86f45bb5-9494-4b1c-b905-fc9f68c40d90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad349cff-906a-4a82-a188-7e4f084b62a9", "sighting_of_ref": "indicator--5fffe18b-f299-48c3-afdb-e9762882c264", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3522b7-442d-44af-8a76-c3aebf0097ed", "sighting_of_ref": "indicator--00c96fdc-d4f5-4f16-8bc0-5a40a42e2ec6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a9470b-16be-44cf-b18a-0692ceeb6d44", "sighting_of_ref": "indicator--00c96fdc-d4f5-4f16-8bc0-5a40a42e2ec6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157de901-4954-4a9f-8d00-a160cdbd3d0b", "sighting_of_ref": "indicator--c3c8fb9b-4ac9-4ebe-bbeb-ef99572bcd37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94529fe7-cb9d-41e1-b9b1-3807fbb93d4e", "sighting_of_ref": "indicator--fe50a5f2-58e9-4e27-a5bb-c061b7bfc171", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad2172-7e82-4a63-99ab-119c1df2a00a", "sighting_of_ref": "indicator--21bfa14e-9241-44e5-94d5-aa2b5b87edfd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bdd04e-553c-44a6-ba17-103bd6ce4137", "sighting_of_ref": "indicator--526bc428-e402-4627-8c89-44556be77068", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea6409c-2a91-42fd-a1c4-2cc620616b5f", "sighting_of_ref": "indicator--8f06dca5-27a4-4cf2-8e7c-9eab9c83e9a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ff653e-9a80-45da-b2b9-4b399a6f8882", "sighting_of_ref": "indicator--ad418960-373d-4af6-ba4c-cc5c4929c9f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c10945-4fdd-49be-b771-ab91cbc7f896", "sighting_of_ref": "indicator--ad418960-373d-4af6-ba4c-cc5c4929c9f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666e175a-3e07-4281-9c5e-3a21258b78fe", "sighting_of_ref": "indicator--7f8d52a9-5d86-4bed-8069-d8bd02793ff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7166cc96-cbc7-438e-878b-f9e73db21d44", "sighting_of_ref": "indicator--7f8d52a9-5d86-4bed-8069-d8bd02793ff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecaab5f-18a9-41b5-a4a1-ba96bda91ab7", "sighting_of_ref": "indicator--4d640a88-a6ff-4e21-a0c6-4eb86e91261e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8017bfa1-c0a5-433a-8d0b-0db9d0f4c2a3", "sighting_of_ref": "indicator--d954961d-fe9e-477b-aadf-aa524248764d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47884638-86c9-4755-9f22-d60b33054308", "sighting_of_ref": "indicator--d954961d-fe9e-477b-aadf-aa524248764d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387904a9-707f-47b4-a607-2e740bf2c8ce", "sighting_of_ref": "indicator--7153bcb1-415d-49f3-9e26-74743c344caa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d14177a-0871-4bca-88e6-825efca6b9c4", "sighting_of_ref": "indicator--7153bcb1-415d-49f3-9e26-74743c344caa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56b06e3-2303-4960-86d3-f1dc5561af46", "sighting_of_ref": "indicator--5372a2c7-3d72-47ef-b70b-662dea636513", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758e976e-8948-43a2-9b89-07b95ce1b67a", "sighting_of_ref": "indicator--5372a2c7-3d72-47ef-b70b-662dea636513", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcd4751-7647-4f26-9e4a-26c4ef32e713", "sighting_of_ref": "indicator--71393a91-2ff7-453b-8f90-1a7a55f6a24c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46045d3-1ba1-4c16-8b06-96635f4a09a8", "sighting_of_ref": "indicator--8761dc9b-1f76-421f-bb60-d65e7d9ad1db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5750b1-ee19-4dc7-95ce-85b0b5ab83c0", "sighting_of_ref": "indicator--8761dc9b-1f76-421f-bb60-d65e7d9ad1db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe09aaa-e0c9-4f43-9e15-0b1c696e7635", "sighting_of_ref": "indicator--8d5732f9-b43c-4e7d-b178-814b27f3f549", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ab19c4-c435-4a80-a68c-9783f8be1337", "sighting_of_ref": "indicator--8d5732f9-b43c-4e7d-b178-814b27f3f549", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5cda43-60de-4bcb-9f0d-75bf47c3378e", "sighting_of_ref": "indicator--217ffef4-c0a3-48a7-89a8-daafda52f413", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b74322-468f-4e43-8f48-d9f832ab6b8b", "sighting_of_ref": "indicator--b2d6a167-18d9-49ca-956c-147424a540bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649eb59c-0aa6-4651-8cce-34cb86c22174", "sighting_of_ref": "indicator--b6cdc411-dd32-4e1f-b36a-28143f65d079", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3249e520-c0af-4eb9-826b-a50fd7f9cda7", "sighting_of_ref": "indicator--b6cdc411-dd32-4e1f-b36a-28143f65d079", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439d7f02-5556-4832-9963-020332ab7185", "sighting_of_ref": "indicator--1c822135-8ef9-4ef7-a157-be7ecc253281", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27b40de-c439-4cbe-9465-f579426ac806", "sighting_of_ref": "indicator--3d18c76f-b656-4852-94ea-929424cf119c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1963fb-bd31-4ba0-9c11-886de1831f71", "sighting_of_ref": "indicator--3d18c76f-b656-4852-94ea-929424cf119c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ff786f-1b13-41ee-98de-7439c4754ddc", "sighting_of_ref": "indicator--3d18c76f-b656-4852-94ea-929424cf119c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e8e234-5559-440a-96f4-baec127f9571", "sighting_of_ref": "indicator--b3872abb-8005-4878-8d1b-e067f99c0ec3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2d2690-c3db-4051-8105-dcba23bea130", "sighting_of_ref": "indicator--c747d57d-854c-4265-bfab-824773f3f6ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a586c55f-61b7-493c-936f-edaa07ea0924", "sighting_of_ref": "indicator--c747d57d-854c-4265-bfab-824773f3f6ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5d4013-5a90-42ef-8540-22a361732648", "sighting_of_ref": "indicator--d7fa96fa-f2ee-4839-85e4-21c25b92bbd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8469a20c-32c0-4d30-a0d6-134b8de8b77c", "sighting_of_ref": "indicator--d7fa96fa-f2ee-4839-85e4-21c25b92bbd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acdea44-b9ca-401e-8490-957553a0af6a", "sighting_of_ref": "indicator--124e65df-417f-4bf4-b7e9-f64eb84a9863", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec37ab6-54d6-498a-b0ef-713f5c4e99b1", "sighting_of_ref": "indicator--124e65df-417f-4bf4-b7e9-f64eb84a9863", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4176a026-3001-4cee-9b87-395c78c83cf4", "sighting_of_ref": "indicator--ec2412b4-b3e8-4e2b-885a-ebe2175ff843", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab36344d-7aa4-4901-a200-d31f1ab2a93d", "sighting_of_ref": "indicator--319e7271-6a61-4f0a-861e-179cc05c88a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d51593e-2559-4eab-9e47-0e5f832c4708", "sighting_of_ref": "indicator--441bcb1b-53ec-43aa-bdec-94a15dc4472c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23958af6-e832-458a-bc62-e9f27d0c94b4", "sighting_of_ref": "indicator--60f90d55-eed0-45e8-8818-74bba61193b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b533fc8c-f099-4cc9-b2df-3ca99615a4fb", "sighting_of_ref": "indicator--60f90d55-eed0-45e8-8818-74bba61193b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bd6358-818f-4e55-ae90-514554bef10c", "sighting_of_ref": "indicator--6ef42eb0-5022-4386-bce5-7aae8d52a6af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4706c47b-aff1-47c0-8bfb-1ccf8dba68af", "sighting_of_ref": "indicator--6ef42eb0-5022-4386-bce5-7aae8d52a6af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58469723-4991-45d3-934e-e199613ddbbe", "sighting_of_ref": "indicator--ce55fd4a-b5ff-477e-9b27-980d5f23af51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31dc38c-be8e-458b-a194-fbcdc9dc0aee", "sighting_of_ref": "indicator--ab7bb94d-a4c9-43ad-9e0d-4bdc09d5a2da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdd33fd-6705-4fae-a1ef-ca61fdb3d0e3", "sighting_of_ref": "indicator--ab7bb94d-a4c9-43ad-9e0d-4bdc09d5a2da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eecbe19-9624-412b-8412-25a2417f38c5", "sighting_of_ref": "indicator--b74b36b4-01c7-4b25-afd3-6ec644616a8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d108e34-2f4d-4f20-a37c-7b8c064c5ceb", "sighting_of_ref": "indicator--b74b36b4-01c7-4b25-afd3-6ec644616a8d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97408c85-6380-4d0a-99b2-f1764504cb1f", "sighting_of_ref": "indicator--f77db9d4-4315-4a08-ae45-14c43fb24b0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e569f91a-10fe-404b-bb37-59ad699e8e4e", "sighting_of_ref": "indicator--235bf775-1f8b-4f33-8d27-6d5ea8a4439c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bca8f9-3c52-4330-8a56-e43111712ad3", "sighting_of_ref": "indicator--6d781774-3b3f-4f02-bfdd-93cf4207f773", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5833e260-d2f8-4fbb-a3ee-4503054e7024", "sighting_of_ref": "indicator--6d781774-3b3f-4f02-bfdd-93cf4207f773", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec92f75-8fa2-4adb-ba5a-b13d5de76020", "sighting_of_ref": "indicator--ae4a116f-87c3-4526-be0b-28b8eb995691", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51d715f-93d6-4015-805b-062fd83c5130", "sighting_of_ref": "indicator--ae4a116f-87c3-4526-be0b-28b8eb995691", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c0b39c-58e4-43a1-bd37-dfdcb94e6bc8", "sighting_of_ref": "indicator--fec7bd20-a98d-4f30-a605-5a094c3cf424", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb34d2b-6e32-4e79-aa69-e46cd8dceb72", "sighting_of_ref": "indicator--fec7bd20-a98d-4f30-a605-5a094c3cf424", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9d831e-73ca-4d8a-aa21-f99fb7bea7ea", "sighting_of_ref": "indicator--a8d38e84-46fa-4c63-85d0-449cda33728a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdb4d4d-e4eb-48e7-985c-622ca7f628f4", "sighting_of_ref": "indicator--6452bca0-6f4a-48b7-8c03-727194b22abf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8049a334-1aac-4239-a35b-1f8028c6de55", "sighting_of_ref": "indicator--6452bca0-6f4a-48b7-8c03-727194b22abf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f00f43-9aee-4be5-a843-bae86a738601", "sighting_of_ref": "indicator--0259917a-5003-4c33-b335-8d69a44b52e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5703566a-2284-4710-b054-342200f246f6", "sighting_of_ref": "indicator--0259917a-5003-4c33-b335-8d69a44b52e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c074b0a-ab09-4f0c-a01f-735e2deecacc", "sighting_of_ref": "indicator--8cc98453-3e9c-4263-887b-0db4662f4f9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5927e00-651e-4c6f-8bc0-cd93d573765b", "sighting_of_ref": "indicator--30894bb7-4843-49f0-aeea-b01dfc3206d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acc82eb-536c-43af-a77f-8a040e9efa38", "sighting_of_ref": "indicator--30894bb7-4843-49f0-aeea-b01dfc3206d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255909e1-3ecf-442f-98fe-dd432c4365d9", "sighting_of_ref": "indicator--316500ad-7399-42f1-b986-178a34f23850", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171d85c3-ea4c-4bc9-936f-c7c4c4d5d5d1", "sighting_of_ref": "indicator--316500ad-7399-42f1-b986-178a34f23850", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa600dd-f08e-44e4-9c7e-88c6acb78384", "sighting_of_ref": "indicator--316500ad-7399-42f1-b986-178a34f23850", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7066c9e2-4bfe-4408-9a60-8eb88525a15e", "sighting_of_ref": "indicator--fd63b1ff-ab81-4a23-aa2c-5aa5167e3590", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cce19c5-6d89-4d3e-8939-3461ac1c39d3", "sighting_of_ref": "indicator--fd63b1ff-ab81-4a23-aa2c-5aa5167e3590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800d48f6-ff3a-4bde-8ebb-f1397c3e2ff4", "sighting_of_ref": "indicator--d5eff323-0936-4a8e-8c31-c5c204c3553b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80e154e-8ea9-4a72-bf74-5ebe6e277f3b", "sighting_of_ref": "indicator--d5eff323-0936-4a8e-8c31-c5c204c3553b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfcbd47-d40e-48c1-8fe3-20af2e913778", "sighting_of_ref": "indicator--0c2db32c-d72e-419d-966f-da84b1a56189", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd7a62f-41a0-4586-b261-30b00e659bf4", "sighting_of_ref": "indicator--d9ad4972-35cd-43f4-bc8b-dda691e4a4fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88e461a-6ccb-40ce-a382-7f0a2b0db7f8", "sighting_of_ref": "indicator--0b7a0fbd-79be-47b3-9abc-6cf0b442187f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1099b3c1-b914-49ee-ae95-a4f7afd2dc3f", "sighting_of_ref": "indicator--0b7a0fbd-79be-47b3-9abc-6cf0b442187f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb95093-7b9a-473d-9242-513c050c894d", "sighting_of_ref": "indicator--6cc314d9-dd88-406c-82dc-128ef4d924c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eee89a4-6c8f-43d0-ba73-9e864107cbff", "sighting_of_ref": "indicator--6cc314d9-dd88-406c-82dc-128ef4d924c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88ae1ea-9675-4ddb-b1c9-9f66f4a7e693", "sighting_of_ref": "indicator--7c882d9b-d088-46fb-b720-a626b7d0f8c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c70c0c-168a-4cb3-b053-f211a2ea95d5", "sighting_of_ref": "indicator--be1e4187-ba44-4329-8e6f-faeda326ca7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1714235c-4d26-4ba1-916c-4331f9f5b47f", "sighting_of_ref": "indicator--be1e4187-ba44-4329-8e6f-faeda326ca7d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0428018d-1d2a-4ded-94d2-d9176b963a78", "sighting_of_ref": "indicator--6331b9c9-6970-4996-8c89-94a3fe313ac7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71447d4-f0e4-4241-9c60-24d5cd771464", "sighting_of_ref": "indicator--d96306d5-84b8-4faa-af61-20b685bf21b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1017fc9-28fa-4d33-ae81-f7a2807c42ef", "sighting_of_ref": "indicator--d96306d5-84b8-4faa-af61-20b685bf21b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d166ba19-a2ae-4234-864b-eca13ba0c6ba", "sighting_of_ref": "indicator--23d0a9c4-d039-4e28-9111-8c8f610c055a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabf2214-09b9-4eff-894b-0ada1fbd242e", "sighting_of_ref": "indicator--f4544db2-874a-44b0-b667-235ca8698ace", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d7f87a-fc1b-425c-80ec-7dd66406d2fd", "sighting_of_ref": "indicator--f4544db2-874a-44b0-b667-235ca8698ace", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37f43bd-3bab-4b29-9b8e-53f9ccd7b4b5", "sighting_of_ref": "indicator--f4544db2-874a-44b0-b667-235ca8698ace", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff9aba7-33f4-418c-a1e0-f73c28b3fd60", "sighting_of_ref": "indicator--05bb9e70-2650-4d26-8584-a27b9fdbfa9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b511cd1c-cbec-4d4e-a313-89c87971611d", "sighting_of_ref": "indicator--9307af14-eb37-4691-99a4-00ed0d4b4a7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd5fa71-aaae-46bc-828a-a9a12597b306", "sighting_of_ref": "indicator--9307af14-eb37-4691-99a4-00ed0d4b4a7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fb66b2-11ff-4d83-91f1-9ff8adae02f6", "sighting_of_ref": "indicator--464b0982-1715-42df-9dd5-a28b7d6ccb98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d2c0af-ff88-4a0c-82c4-25418b192201", "sighting_of_ref": "indicator--0b94e82c-134c-486c-af40-ef240a41668b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a787d4-c11c-467b-ba27-2f2d1ec3e88c", "sighting_of_ref": "indicator--51198dfe-5f43-4620-b475-3adda396e789", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c9f341-7492-4408-bf4e-75843d5ba594", "sighting_of_ref": "indicator--ef5b5051-c4bd-4a7b-b4d3-4b85e2a1c402", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81721d93-25a5-4a31-a633-e9d98ef5778e", "sighting_of_ref": "indicator--9dfecccc-ca91-4f40-91fa-dfc216545058", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58593cf9-939c-40e5-98e3-8630776685e3", "sighting_of_ref": "indicator--7339e0f3-7a0a-41e5-ae65-e97b46cda733", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf07fcf-246f-4e44-a3fd-29ac8d7f23de", "sighting_of_ref": "indicator--7339e0f3-7a0a-41e5-ae65-e97b46cda733", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c7eab2-178b-4c75-9fdb-f1e6f184062b", "sighting_of_ref": "indicator--1ebe8010-a82e-4e5d-bd60-c2344db91f44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b14d152-0e60-4be3-ae96-11ddd531cc70", "sighting_of_ref": "indicator--ad7fc1da-c1c5-4c81-95e9-1db21bdf471f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6f9e43-5bae-4890-859b-c2739570d3f0", "sighting_of_ref": "indicator--83336530-837f-4d1e-864a-caf66d3c376b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42236af3-a806-4241-997e-d854181b8498", "sighting_of_ref": "indicator--c9e7cb3e-57c8-45dc-a970-fa8348853f64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e17ed5f-3564-48fb-88cd-dd3c50792ed5", "sighting_of_ref": "indicator--c9e7cb3e-57c8-45dc-a970-fa8348853f64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c0fba-5411-4172-bd91-a1832add69db", "sighting_of_ref": "indicator--6b4fb150-7c7f-4a01-b223-f8f9dfba4014", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5da3c0-2ed2-4878-b515-773e08f88958", "sighting_of_ref": "indicator--5645e4cc-2972-4c6e-9b0e-d3d566f9efae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a56f77-c644-45a2-9362-21db04a09bc7", "sighting_of_ref": "indicator--bb345e1e-eeb9-4267-8851-7ea4517015ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaf2990-6c20-4aec-9097-043a25092f26", "sighting_of_ref": "indicator--696ecfa7-f2f5-4cfa-b37b-d929a18c7f7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9814bd11-d8f3-466c-8176-781ed3143e4d", "sighting_of_ref": "indicator--d5a58a62-af8e-4a21-b149-324a4f7f0c1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81501a32-d7f8-437d-af6d-95ac5da56cfa", "sighting_of_ref": "indicator--d5a58a62-af8e-4a21-b149-324a4f7f0c1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaa80fe-dd28-45b7-9d8f-5a3a1b64efd0", "sighting_of_ref": "indicator--eb311bca-7423-4838-8c88-f59b1e2f88a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0fb892-a40a-4d38-893c-83ec59ec5b31", "sighting_of_ref": "indicator--fdc25e06-9bce-4d7d-a69e-1db3d4ef1926", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e55b0a-2212-4fe3-8286-2041c6b111c5", "sighting_of_ref": "indicator--6322c4fd-1f29-4dfa-8f9d-958ccba4e346", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4c8d85-fcee-45f6-b4f5-cbc5dfa486e2", "sighting_of_ref": "indicator--52fafa88-8a6f-4bee-a7d6-ef0463cc20e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c053b8f1-e9d2-4bf6-a295-654396dc9e1a", "sighting_of_ref": "indicator--52fafa88-8a6f-4bee-a7d6-ef0463cc20e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00d3ad9-0f39-450f-af20-89bc87c913a0", "sighting_of_ref": "indicator--9263988c-60be-4cc3-967e-5bfd5f135f88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c69a284-0c2b-44b8-8f69-e4d9080ea1ae", "sighting_of_ref": "indicator--9263988c-60be-4cc3-967e-5bfd5f135f88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc8850d-c9ce-46e4-aaa5-fa9356391400", "sighting_of_ref": "indicator--9263988c-60be-4cc3-967e-5bfd5f135f88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61499b6-18f8-4f10-88c1-bc38fa7d6cd8", "sighting_of_ref": "indicator--81ae815b-e29a-4999-bc93-214e5030f9e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45840bf9-7859-45a8-8378-74774b8bd507", "sighting_of_ref": "indicator--a21649ab-dca5-400b-a206-2f065ff66d7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62fe9e7-58f6-4186-babc-b02ff0993b6b", "sighting_of_ref": "indicator--a21649ab-dca5-400b-a206-2f065ff66d7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dbc3c8-5c12-42bb-95dc-7bb53ee04aaa", "sighting_of_ref": "indicator--a21649ab-dca5-400b-a206-2f065ff66d7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8174b70-45a3-4389-ac06-a094020e2376", "sighting_of_ref": "indicator--d6efc4d5-5225-4a64-a4fe-9ce8e84c1844", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a9d98d-fa3f-4885-92cc-9665deb3f8ba", "sighting_of_ref": "indicator--2eb5c38a-bac5-4b61-b18a-3d38bdeb5ddd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4550a091-3a54-4e76-ab14-24d23badcd71", "sighting_of_ref": "indicator--2eb5c38a-bac5-4b61-b18a-3d38bdeb5ddd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99593ef-5de9-434f-b460-e4799f78ea6a", "sighting_of_ref": "indicator--2eb5c38a-bac5-4b61-b18a-3d38bdeb5ddd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea19c05e-ed49-4a05-8eb9-1813671693fe", "sighting_of_ref": "indicator--9eecdb4c-50c5-4699-8f79-d0e67d9ca0e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2a74bc-814f-4031-b85b-19257641a9e9", "sighting_of_ref": "indicator--9eecdb4c-50c5-4699-8f79-d0e67d9ca0e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28b0cb8-2d64-452f-87e2-3e07fccbfb5d", "sighting_of_ref": "indicator--cf22d40c-9625-4fe1-8514-bb05c7f79ef8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96af3893-0ded-4db2-950f-77259d00d953", "sighting_of_ref": "indicator--b4aee747-7403-4fbd-a7b5-3bd6f1cea088", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a7f90-e04a-4dbe-91e7-1dace398fee8", "sighting_of_ref": "indicator--b4aee747-7403-4fbd-a7b5-3bd6f1cea088", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5748f2a8-57a4-4f48-baed-c293de368da1", "sighting_of_ref": "indicator--3409d49f-75af-4a7c-9298-b743313d9cf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c56a1d-1b97-4a61-9a3e-21c5a8cacdef", "sighting_of_ref": "indicator--3409d49f-75af-4a7c-9298-b743313d9cf4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b4d4b1-244a-46d2-aa66-e08a44ef1229", "sighting_of_ref": "indicator--3409d49f-75af-4a7c-9298-b743313d9cf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bfcdcb-c285-4043-9011-ef0cf1e1304d", "sighting_of_ref": "indicator--5855ccfc-01dd-4b2a-8b05-581f9fae4ca7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b34489-54b2-4c3e-8328-956199d4296c", "sighting_of_ref": "indicator--5855ccfc-01dd-4b2a-8b05-581f9fae4ca7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb18a22d-4961-4ab9-9d97-8c3751005066", "sighting_of_ref": "indicator--5855ccfc-01dd-4b2a-8b05-581f9fae4ca7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fba76a-f14b-495b-884d-37a2d9066210", "sighting_of_ref": "indicator--c02c57e2-09b3-4850-8794-2b63953fe58e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdba91a-b934-42d3-adcf-140463bb1858", "sighting_of_ref": "indicator--89c99638-30b9-4625-a13e-1a4476853af2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7d5b9c-b5e8-4ddb-a4f5-bbd0fa45e846", "sighting_of_ref": "indicator--21cfca9b-dff4-4839-98bf-9a9b5795d45d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3565d739-3114-454e-a0d6-c8842298f215", "sighting_of_ref": "indicator--ea525583-8fb0-4359-bb3c-c2506d6b62bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54e97b5-e45c-4a8f-af6c-f48db1a691a9", "sighting_of_ref": "indicator--cf172d61-2eda-42f0-bff6-22f974117265", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e038e4a8-2d9b-41b1-8256-7d17235d6b4c", "sighting_of_ref": "indicator--cf172d61-2eda-42f0-bff6-22f974117265", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6901d53b-b229-4fb9-b659-dc771a37152d", "sighting_of_ref": "indicator--cf172d61-2eda-42f0-bff6-22f974117265", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86a2018-5973-482b-9e87-208f80d11340", "sighting_of_ref": "indicator--ccc7ea0c-cb10-489b-ab7c-f797e2224ed8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f760009-713f-4357-b65b-3a2e3ae55316", "sighting_of_ref": "indicator--6774d246-16d5-48bf-8059-ac9017384b5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736b34fd-da45-492e-9348-b0b166d999c0", "sighting_of_ref": "indicator--6774d246-16d5-48bf-8059-ac9017384b5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772cf0af-bd8d-4879-8878-fdee16127a78", "sighting_of_ref": "indicator--6774d246-16d5-48bf-8059-ac9017384b5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65511f4-c5e3-4081-9620-6c4bdc79f547", "sighting_of_ref": "indicator--d8890915-6054-4507-9f40-29b53a20027c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e95c828-a365-4fea-8edf-6e10411f1480", "sighting_of_ref": "indicator--d8890915-6054-4507-9f40-29b53a20027c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e843df77-859f-4c70-998b-58ebacc1351f", "sighting_of_ref": "indicator--d8890915-6054-4507-9f40-29b53a20027c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ef0f7c-41cd-48b1-ae54-018976e570e0", "sighting_of_ref": "indicator--1dff111d-4d6b-473b-9334-16cc76e1244b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab84fa91-0655-493d-9709-4156bbbcce2b", "sighting_of_ref": "indicator--1dff111d-4d6b-473b-9334-16cc76e1244b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b465d056-ae91-4807-9065-75515bad031d", "sighting_of_ref": "indicator--1dff111d-4d6b-473b-9334-16cc76e1244b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c54eb-8e4e-40b4-b087-00e15bbd49eb", "sighting_of_ref": "indicator--1ec11574-ec34-42dc-a300-540d9ce84215", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2140c1-a8b2-4486-83fb-4570528a491d", "sighting_of_ref": "indicator--50de728b-5360-4301-b8a3-c603c53d472f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d1b84f-0ac2-4a4c-bf60-cfdf20e03fff", "sighting_of_ref": "indicator--84ef8660-423d-4b9e-8b17-c1c3bd3e2413", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae029d-fd9a-4003-a198-db31b0f53d36", "sighting_of_ref": "indicator--55f56bed-5bff-40b9-b5d9-2f3991964381", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d880a862-c6b4-400f-840c-49a05dc94664", "sighting_of_ref": "indicator--74f4a81f-4886-469d-83e3-711a29e195c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ca505-b545-49b1-b6d4-20f3615616db", "sighting_of_ref": "indicator--136a9785-864c-4f55-b7ba-19871805a094", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8fe7dd-50b3-4f26-ac97-093ca827e1ba", "sighting_of_ref": "indicator--136a9785-864c-4f55-b7ba-19871805a094", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ed5d38-f45d-4d8b-9440-6bca9455803b", "sighting_of_ref": "indicator--136a9785-864c-4f55-b7ba-19871805a094", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e12a7ce-e794-4c57-970f-50e1436c9a32", "sighting_of_ref": "indicator--c58ae253-01c1-4ec8-b300-ab0b8d45f596", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2104157f-cf38-41b0-999c-f564619aef23", "sighting_of_ref": "indicator--1790c066-2c11-4abb-8f44-c7f9dccd16a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45894d2-6170-4766-9674-e5dea8b52536", "sighting_of_ref": "indicator--1790c066-2c11-4abb-8f44-c7f9dccd16a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff65d123-4a8e-4883-a601-a5598f2ebb4c", "sighting_of_ref": "indicator--1790c066-2c11-4abb-8f44-c7f9dccd16a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a431856-7011-4e8c-86eb-d5f33bfefb50", "sighting_of_ref": "indicator--69f15c08-1416-4f3f-89aa-e17e8353d65f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c090c10-97bf-4728-a763-810fe0d50b51", "sighting_of_ref": "indicator--28daf004-77fb-4d2f-a5c9-4129fc16f05f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a194b1-8352-4f5c-b055-0db4370d92bf", "sighting_of_ref": "indicator--28daf004-77fb-4d2f-a5c9-4129fc16f05f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd652ad-a9b8-4555-b28c-56b0a143ac07", "sighting_of_ref": "indicator--28daf004-77fb-4d2f-a5c9-4129fc16f05f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d85bb2-d95c-40f5-84aa-1edc52eaad97", "sighting_of_ref": "indicator--3ae9bbae-4fa9-44b1-a653-07c43015293f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcdc8b8-862a-46d6-a6a0-470e23dfa3d8", "sighting_of_ref": "indicator--49fba6da-bbfb-4809-8b66-f807ecc96081", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d09c8c1-02f6-4b25-9bc4-29e1e28a918d", "sighting_of_ref": "indicator--49fba6da-bbfb-4809-8b66-f807ecc96081", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f74b397-c0f8-473b-af12-6196335cc3d5", "sighting_of_ref": "indicator--b0bc3148-3c7c-4a01-8a76-7a102097edc6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced88396-7e29-4656-ae32-41344d164a16", "sighting_of_ref": "indicator--b0bc3148-3c7c-4a01-8a76-7a102097edc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d2f66a-5326-4d8c-ac15-36bae1857986", "sighting_of_ref": "indicator--b0bc3148-3c7c-4a01-8a76-7a102097edc6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60611ec-9d3e-4115-a1ac-7f2d9c28c886", "sighting_of_ref": "indicator--8bb4513a-aca2-4fa9-a455-a904ace3f9a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708e79a6-7b2a-4dc9-8bf2-605f644eb9cd", "sighting_of_ref": "indicator--8bb4513a-aca2-4fa9-a455-a904ace3f9a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0c5479-2aa4-439d-ace6-9e27eda7ac59", "sighting_of_ref": "indicator--b3a088e1-6aa8-46cd-b955-0a89f2b2c189", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4ee920-04ab-498c-a215-85bedeabf277", "sighting_of_ref": "indicator--a96dac8b-11e4-4c0e-afe8-fb0408de8bdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a60490-f9db-4401-8656-179571a248dd", "sighting_of_ref": "indicator--48f0b6f1-7970-4cd2-94f6-36713566a055", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2674f733-0662-49b0-bb11-8dce5712bd0e", "sighting_of_ref": "indicator--f30fb77a-3c94-483c-9791-5d231fb2a6c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022bc320-ea83-4321-80ad-c2de273f51c8", "sighting_of_ref": "indicator--2812b5a9-9614-4344-bbcb-e557ed93fbb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d9b006-b81c-40a4-9d1f-c24fe001f89b", "sighting_of_ref": "indicator--ace64d60-befe-49e9-a5e8-59cf1e70b78e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96ee079-dcf1-4dbb-aaaf-a9c8737e487c", "sighting_of_ref": "indicator--9315cc0a-7113-4471-a831-e35677b82c1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6d98ef-ad86-4f95-9d4a-b2110ef93fae", "sighting_of_ref": "indicator--232e1c9b-9b40-4b1e-94e4-6cccf1910be3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a29c0c-13d0-4a63-b739-6986696ac086", "sighting_of_ref": "indicator--f03352da-f90a-4889-b6fe-e7480d6ec816", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7944d2f-2d42-473a-abdd-28b0ddfa9ae2", "sighting_of_ref": "indicator--5d6406d0-282f-4272-bcc7-34e7dc7f3a43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9715f721-a65e-4b94-a246-48739042f2ae", "sighting_of_ref": "indicator--26dd125e-983a-4f48-ab2e-01c9f742a110", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f3ff19-6f25-4260-ac66-1b11114f6264", "sighting_of_ref": "indicator--ac959bf8-df33-4e72-b203-f391a7ed0220", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7791eb-d211-4bf5-a9ed-2cc0bde9bf41", "sighting_of_ref": "indicator--dff5ddfc-f33c-4586-8f45-a8ac25ae2bcd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4bec76-846e-40aa-b0cc-8b735a2c7b2c", "sighting_of_ref": "indicator--96892e86-72bd-4932-8525-22ed5a3a2dda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d77f56-7833-4c22-86ec-6431b2accc2e", "sighting_of_ref": "indicator--a2e03919-a3ff-4807-9a3a-b10159465b77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6c825d-ef6e-40ed-801a-de98ea0126f0", "sighting_of_ref": "indicator--656ad368-ae94-4447-9f97-6a8d506cc79c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9618d9b-938d-41af-b283-e078943973df", "sighting_of_ref": "indicator--f001ad94-ab28-46e8-8e29-87835c0c1248", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e78691-ed3f-4859-9872-78ba10299c12", "sighting_of_ref": "indicator--f001ad94-ab28-46e8-8e29-87835c0c1248", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147695c5-709f-4edc-932e-724b1abcc60e", "sighting_of_ref": "indicator--589573a0-6c04-4926-b57f-1831694c717b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ff24b3-9989-4242-927f-48f6afa39760", "sighting_of_ref": "indicator--589573a0-6c04-4926-b57f-1831694c717b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc7acd-10ed-4792-a3f3-6823f18ffbff", "sighting_of_ref": "indicator--589573a0-6c04-4926-b57f-1831694c717b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a69178-efbb-446a-8598-1d25e4cf1164", "sighting_of_ref": "indicator--be6d9b01-01cf-49e2-8aa1-f165c9d2b397", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d025b44-888b-4de2-ae50-f44f89cc4d6e", "sighting_of_ref": "indicator--7c4a7c6a-89ed-4676-b681-3b0fefe6dd71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6489f1a-0659-4922-96bf-3b9df16a40af", "sighting_of_ref": "indicator--7c4a7c6a-89ed-4676-b681-3b0fefe6dd71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbed41e-e5d9-4c8b-a0d9-616100188640", "sighting_of_ref": "indicator--76d47593-457f-430f-bc3e-8726870bc6d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867919c4-f90c-431e-8c8a-059fab2b679a", "sighting_of_ref": "indicator--af635983-4cbc-438b-9ac2-b42916a7f84c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b933cb-8a37-4e83-bf0b-d83fda1eb8ee", "sighting_of_ref": "indicator--6062f8f8-eb45-4f19-8b76-25e0897febc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7672d2a-fac9-427c-bee0-30c36e814edd", "sighting_of_ref": "indicator--62307774-b5d0-4ea6-b370-7277db361d1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad05ca3-bae4-4c88-909e-6fd51d081ea7", "sighting_of_ref": "indicator--f6a4aa4c-90c0-418c-a073-1de2d023d994", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fe594d-fff4-44c9-aa06-bdda25cd1ab7", "sighting_of_ref": "indicator--10b7357c-021c-4b10-83d9-1087a5e615db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a272a84-a84d-41e2-905d-187e32d1865e", "sighting_of_ref": "indicator--4fe7f243-00f1-43f7-8990-b04b07e2c38a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a258871-afd1-4efc-94bd-6a52cf265c04", "sighting_of_ref": "indicator--acaef885-18e4-4c24-85fc-cd60a2eaa464", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaf1a0c-27b5-4431-a2b7-2cd48eaafc7d", "sighting_of_ref": "indicator--33b78683-9fbb-4b90-ac2e-62a72d941c67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e429456-bf76-40a0-a324-065ced428dab", "sighting_of_ref": "indicator--04579b36-1bf0-4b6c-b68f-b9baaaf35e23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5decfa-23b8-435f-8218-738faa1e1fd7", "sighting_of_ref": "indicator--ce0a7074-3464-4a81-a1a9-5ff16e4f42d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977cb673-9c01-43ad-a264-061030a2f327", "sighting_of_ref": "indicator--ce0a7074-3464-4a81-a1a9-5ff16e4f42d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fe3fd1-b78f-460e-88cb-8aa77ac00423", "sighting_of_ref": "indicator--32a27f78-c486-4f2c-a68f-abb27427b923", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e30d11-c488-433a-9b4d-2d2446df4cd6", "sighting_of_ref": "indicator--6a7a2466-7b85-4c52-9921-a9eb9f368d55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a5def1-a39a-47d7-9b9e-2b343d4727d7", "sighting_of_ref": "indicator--c5e52f83-ec88-45c9-ae12-00e14eb91f99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b7dc69-9b76-4f29-864d-7949fe3b5f14", "sighting_of_ref": "indicator--a621c13a-368d-4c4c-8e6e-1802fa016549", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637e8fed-3488-4f16-b90d-ae3273198bf1", "sighting_of_ref": "indicator--09187e9b-0f8f-4e91-bdc9-8ad05affba4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04afb386-f4a5-424d-966d-634ffb20b1c2", "sighting_of_ref": "indicator--6a4b1f08-a948-4397-9d01-0eae9a43f993", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c1aeb-6e0b-404d-b5ec-e5715333194e", "sighting_of_ref": "indicator--6a4b1f08-a948-4397-9d01-0eae9a43f993", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f20657-c8e6-4544-ac02-d4aa5eb89ac1", "sighting_of_ref": "indicator--05051f00-17e0-4dba-b85e-ac2a7d71cfd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cae5b8-0aa2-4992-b31e-27f263265148", "sighting_of_ref": "indicator--05051f00-17e0-4dba-b85e-ac2a7d71cfd6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ecc9dd-6571-4484-beb2-d1f31d9b5373", "sighting_of_ref": "indicator--05051f00-17e0-4dba-b85e-ac2a7d71cfd6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7245832-fe2b-4e61-86f8-0f12f9c2f76b", "sighting_of_ref": "indicator--d9365004-53bc-4be5-808a-495c55839a48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98cd2e4-1d22-45fb-a329-0dda0a3588c3", "sighting_of_ref": "indicator--6f062bdf-e411-48a3-9d95-f1982f499ec0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d90245-64df-4b4d-a9fd-912ef4c56a91", "sighting_of_ref": "indicator--6f062bdf-e411-48a3-9d95-f1982f499ec0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5e5e36-b0f1-4bc3-acbf-7758f0444447", "sighting_of_ref": "indicator--6e923040-b491-4984-85ac-b7c4f1fe4e0d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edb791b-2d5b-424c-b441-30d257333124", "sighting_of_ref": "indicator--0bcaa80c-01e0-4bcf-96ac-bbecf01f8ff8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade9562c-6060-419b-bc30-ae5b33b31811", "sighting_of_ref": "indicator--41426bdc-c8ad-4678-ab83-6c97e3857a71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a79f933-b207-4e58-837c-df80534c9be9", "sighting_of_ref": "indicator--a7ffb41c-177d-42a3-ba3a-016e936d78b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448ff15b-5679-46e5-91ee-ac0fd13ecdb2", "sighting_of_ref": "indicator--a06159b1-a6ea-4fcf-982b-261678cad177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154fa8da-151f-4858-8b0c-38123a1d14e0", "sighting_of_ref": "indicator--83b0a582-36d6-45f9-a1bb-e108820bd597", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ffaa5e-20a4-4c7a-bfb6-7f63d996e91a", "sighting_of_ref": "indicator--48e8d243-e36b-4f9c-8d94-aac4d6ec900a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6770a22-e538-415d-904c-108716fd83f0", "sighting_of_ref": "indicator--3e69b198-17ab-40a1-b75b-7af098e10bd4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a364cec2-ec63-4235-962a-3bbae1428b3f", "sighting_of_ref": "indicator--c43eb5c1-785b-4a45-8902-783fc5e2f803", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb085f78-e788-45f1-a30d-c214e0475ab8", "sighting_of_ref": "indicator--9eeb5d77-b160-4acc-82d2-d3267ee7cba3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1d759f-11cc-4f7e-9ea0-8c5616dafe03", "sighting_of_ref": "indicator--03dfd5ab-5611-48b9-936b-d7f44cc4795d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1563b1ac-5dfa-4bec-be03-d0936dc06cb6", "sighting_of_ref": "indicator--5455f831-8d90-4c33-b365-a468c6d6c075", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ac9886-a490-4b7f-a971-5ae98808153a", "sighting_of_ref": "indicator--1b55b180-7d81-433a-bd09-e8a1aff6590c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea7717d-e03f-4df1-82f0-80c705e183fe", "sighting_of_ref": "indicator--8385326b-8749-4fb1-ae81-ed4b17911c58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7c1357-a001-41a7-9912-45c84a47d3fd", "sighting_of_ref": "indicator--a1938fa4-12d8-417d-81fb-dac51d96dd3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28d04fb-1c8f-4df9-9925-3ab68bd112eb", "sighting_of_ref": "indicator--2d6b67ca-0966-4111-a8d3-34035cca989b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71541722-f1db-4952-b885-236ba1239303", "sighting_of_ref": "indicator--12b4faeb-391e-4b11-b2df-924267dc882f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594c64ba-4929-4501-83b7-1d22bafb5ccb", "sighting_of_ref": "indicator--e3b85964-831d-4a5c-b769-b72d738e1832", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cffc49-4fad-4e1a-88b0-d5f8e02e8ac8", "sighting_of_ref": "indicator--26f19f23-fb8c-4ea0-b9ee-49bd5d77a5c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e6c6bb-77dc-4cbf-aab5-0d4a27d0a489", "sighting_of_ref": "indicator--c9015789-a8ff-4572-a2b1-9a649d470216", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c36864a-c866-434b-b7fe-62316e7f2249", "sighting_of_ref": "indicator--3eba4450-29cb-4977-8c7a-95c8ae0f2d83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a128f0-d315-4a7f-a6fe-008f68e4eba5", "sighting_of_ref": "indicator--8161f1d6-ba86-498d-adb6-ccef9a8c862b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbedaa1-b88f-40a6-bf7c-d67ae98eb556", "sighting_of_ref": "indicator--bebe637a-5cbb-47e9-9abc-6d72998d9afa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26643d07-3c1b-40ef-9a0c-19ddf267923a", "sighting_of_ref": "indicator--26270f2a-c10c-4bad-87fe-ab611ec93253", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a37e8a-c3b1-4d82-8fde-3fe266d6519e", "sighting_of_ref": "indicator--9da311ba-d1d5-4790-ab7a-f57ada232ad5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7331906-53e8-48e4-a01f-03621f06658e", "sighting_of_ref": "indicator--7969fc9a-d5e5-4323-bb32-65f2885f76b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36822b1b-af1e-4aeb-b17d-5ef2dc1ccd14", "sighting_of_ref": "indicator--a7df2a9e-da1a-4a57-aab5-cfd232d5e8d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a2a2e2-8e5e-4726-97d2-0e77f4fb40d5", "sighting_of_ref": "indicator--ad10f3df-6394-47f0-9076-3a51bc589e2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6dcfa5-9a72-4f08-b125-520056e3255d", "sighting_of_ref": "indicator--5a6a13bb-6a99-44b8-a9d4-1737893cbd47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c693028c-c22a-42c4-822f-51da1b21f0f0", "sighting_of_ref": "indicator--dcbd1c31-d9d4-4217-abf8-3134737da8fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788e2bec-d729-407e-977f-bfe7e1bababa", "sighting_of_ref": "indicator--83c7c24d-8fee-4c19-9b2b-2c798ce22880", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514c7757-ac56-4bfd-9c2e-c687a792949a", "sighting_of_ref": "indicator--ef6f7da6-3b96-4a22-9573-342d1352cea6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf054f2-482f-40b6-a5ae-97d97c806d9e", "sighting_of_ref": "indicator--0b6aaee3-fb2b-4653-a651-55876e4d447c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c3762a-539f-40d3-a828-2b63cc2dc578", "sighting_of_ref": "indicator--facc3d62-5b2e-47d6-8cdf-a294b0ec5df1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73411618-8333-406f-a460-10d8af1e0cea", "sighting_of_ref": "indicator--b00eca3f-c8e5-4e34-8b31-bf1c27f81106", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfa1c1b-b744-4b36-9484-44f1fbb03ee3", "sighting_of_ref": "indicator--9c9ce5b6-4f6b-4be7-911e-99f8b6fa7abb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d86eb21-739c-4dbb-91bc-68c135948961", "sighting_of_ref": "indicator--a838a780-d83e-4f22-ac52-ce347354ab7a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524d73ec-cb60-4686-b765-e38c313f70d9", "sighting_of_ref": "indicator--b79d28bb-ab70-4221-84d9-e2593bbf00c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7525bdc4-ced0-4eae-a0f7-9a6fd169ca9b", "sighting_of_ref": "indicator--3d03cbf5-9979-42ad-b447-a4ce03b4b48f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba767f1-7ca0-4809-b41e-db409b6b29ff", "sighting_of_ref": "indicator--05c9b52b-ccc9-4b79-913e-c3b3629af423", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf3f2f2-44ed-4159-ab44-ff4ccd94a7df", "sighting_of_ref": "indicator--ab7fad1c-80e4-4fff-8c6e-044140cbb0de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6603bc6f-ef3d-40ff-801d-1fec92fbe802", "sighting_of_ref": "indicator--cb7e719d-1879-4a84-9990-cb6126a5ddc0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd4989-2076-4fb9-84e4-3c1347b98d91", "sighting_of_ref": "indicator--e95fb5f1-fcf3-4f0d-a211-18e0fca7e6e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b43d0d7-9590-4ee1-9775-d3d592e695eb", "sighting_of_ref": "indicator--b23d9c41-3947-41e0-a08f-a6abcc7ee890", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859b62ec-ae4c-40b7-b2a1-f66c6bd0c41f", "sighting_of_ref": "indicator--f0cb59f3-2154-4e72-9768-919346f7758e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37eea83-a143-4aa3-bbee-81160304e547", "sighting_of_ref": "indicator--72984a38-e4ff-4557-956d-affc9279aefe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0c6973-e353-4aac-93e3-bc689f8f476a", "sighting_of_ref": "indicator--dfab2d01-0bad-40c8-8c2d-68fa5cfdc47d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7052aca-24b8-4209-b6a2-dff3642b7f91", "sighting_of_ref": "indicator--dfab2d01-0bad-40c8-8c2d-68fa5cfdc47d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e8f8b-2529-48c0-ab08-30a58544f4d2", "sighting_of_ref": "indicator--089e5dfd-de33-4beb-9b07-5f5e0409baff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e299b167-2513-47f2-a3ba-000cf519da5d", "sighting_of_ref": "indicator--2e15d937-b34a-4e8f-8bf0-61fce19d2553", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a3dbf4-00f2-4f88-bb40-873faa464e2f", "sighting_of_ref": "indicator--ec54edea-0b81-4006-8e48-f5f58038815e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc1361-8616-44d9-bfc3-bc9993259b22", "sighting_of_ref": "indicator--ac76d9de-00f7-4c3d-9c34-d33377391053", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e685d2-1bfc-4fd3-9993-7a7d8a5299af", "sighting_of_ref": "indicator--ac76d9de-00f7-4c3d-9c34-d33377391053", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f6b59e-b18b-468d-8f7b-3cf87db96afa", "sighting_of_ref": "indicator--5d43e916-e2ad-48de-95aa-ea8b7d1af412", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ec8275-c474-4692-ac70-56e11bd3182d", "sighting_of_ref": "indicator--bf9f1392-22c2-43e0-b793-d3242545a64d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a0f259-0f5e-4373-98cb-625b98631058", "sighting_of_ref": "indicator--bf9f1392-22c2-43e0-b793-d3242545a64d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08334661-a97e-41db-a46d-4f1d8f72ecbc", "sighting_of_ref": "indicator--c63ea058-6360-411d-95fa-67dff2b02cad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a89555-a73a-4d12-9ce6-f81cc5277d8e", "sighting_of_ref": "indicator--c63ea058-6360-411d-95fa-67dff2b02cad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a7d081-b062-4b63-bbfb-93cb3c6b1cc0", "sighting_of_ref": "indicator--c63ea058-6360-411d-95fa-67dff2b02cad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f86292b-6079-4719-99f7-af432e8edddb", "sighting_of_ref": "indicator--f4e5ef50-1b8d-4363-a3e1-44f60aace4ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08fb763-a5aa-49f3-9050-c622c8c6dd70", "sighting_of_ref": "indicator--88b2871d-3054-448c-8d74-7af99f61879c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8031ea-dfc6-4387-8021-0929cec1ed9f", "sighting_of_ref": "indicator--88b2871d-3054-448c-8d74-7af99f61879c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15921219-05fb-4a4b-9417-d10813c2508c", "sighting_of_ref": "indicator--b4ad6bed-eed3-4167-b1f9-fa227924f75a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12d71c1-e68b-44c3-88a3-7b597525b7b3", "sighting_of_ref": "indicator--b4ad6bed-eed3-4167-b1f9-fa227924f75a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0be0d74-f918-42a1-85c4-f988ad343699", "sighting_of_ref": "indicator--b4ad6bed-eed3-4167-b1f9-fa227924f75a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dbc926-ebd9-4398-a559-2a6774de829b", "sighting_of_ref": "indicator--ba063ba9-3294-40da-9cd9-b65717a7bcad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe1a8de-c949-4dac-95f3-9d6af0c7179c", "sighting_of_ref": "indicator--ba063ba9-3294-40da-9cd9-b65717a7bcad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6789c80d-58c2-406b-9814-af90310eeb2f", "sighting_of_ref": "indicator--ba063ba9-3294-40da-9cd9-b65717a7bcad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd288a94-9e48-47ee-b5bd-f1f0029c3ff9", "sighting_of_ref": "indicator--f5952220-62b3-4d5d-b31b-05e16cbe0b7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de746252-d434-4817-a7a3-4702dd8dc321", "sighting_of_ref": "indicator--f5952220-62b3-4d5d-b31b-05e16cbe0b7a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5f57fd-459b-4202-8628-4fe9ec1e0c90", "sighting_of_ref": "indicator--0940889a-14d5-436a-89dc-98775499ee04", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93f514e-98d5-4b8c-9834-f49ffc4dd96b", "sighting_of_ref": "indicator--b5cca8c3-479d-48f7-bfd6-0180d5bb62bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9375d912-0bdb-4711-8537-7c1eeab6a149", "sighting_of_ref": "indicator--42c303f8-092a-45fc-af3b-3bed053b7ea4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae9ccf1-10fe-4a9e-9dae-c2b1cbd495ca", "sighting_of_ref": "indicator--afc526f0-875d-4ae6-a424-6c47f9935130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c1f44b-839a-485e-986e-499d812bc2c8", "sighting_of_ref": "indicator--b1d98ee1-bfde-4d31-8109-e61849d4eae3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43891313-b40e-485b-a9ee-5a390f942d03", "sighting_of_ref": "indicator--bd67540d-0c0d-4931-86e2-d978ed71279d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b0d868-4776-4b73-a45a-046cec67ce3d", "sighting_of_ref": "indicator--692650e8-003f-4afa-9e51-96fa1914ddf6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec570b-374d-428e-92af-80ce9b803b69", "sighting_of_ref": "indicator--49ced576-b5f9-4840-bf78-b738cec918d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35cd723-d93b-4fde-8ac1-27c8c7bdd52f", "sighting_of_ref": "indicator--b522ab58-3adf-4396-a695-75c1ed76d6b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c627d9b8-a41e-4a47-bda1-de9bc74ff8da", "sighting_of_ref": "indicator--b522ab58-3adf-4396-a695-75c1ed76d6b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc470e1-72f2-426a-9a71-2b79a1011e1e", "sighting_of_ref": "indicator--02a492ca-44ea-4f12-b503-6208b1069c38", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25232413-8525-4d66-b31b-b1deef828a76", "sighting_of_ref": "indicator--e5d84dd4-0e10-40bd-9163-9eb9cea61eb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cbf576-4b9a-4558-a70d-212609068de8", "sighting_of_ref": "indicator--95d8e794-464d-453b-bbb2-60c3d9447852", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54bc81a-8329-4b47-a534-2e94cbd41dac", "sighting_of_ref": "indicator--e08fc85e-78ae-4f3f-974b-52b5fab6d872", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd33d7-a147-4e27-8001-96f02ebe3f7b", "sighting_of_ref": "indicator--fe83e04c-326c-42b4-a1ac-7ad89fc7007e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3566f-1928-44d0-bd4c-23b63bbefcad", "sighting_of_ref": "indicator--fe83e04c-326c-42b4-a1ac-7ad89fc7007e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96188bcf-7519-4659-859f-ce67f4add552", "sighting_of_ref": "indicator--fdf598fa-5b24-494c-a2f3-040fce464472", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8c1acc-0ed1-4c19-8474-af7d3b6f48f2", "sighting_of_ref": "indicator--d336aaac-486b-4ffb-a69a-518bcefba327", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cb2fd-1b17-41e5-8d30-f819409cbfd4", "sighting_of_ref": "indicator--d336aaac-486b-4ffb-a69a-518bcefba327", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bae3a1-e07a-41e3-9122-32792e3723ad", "sighting_of_ref": "indicator--c5f1161c-bb65-40af-849a-ee82eea5ab39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4aed7c-9ee4-4418-967f-66c3d9b1e60e", "sighting_of_ref": "indicator--271983c1-5f83-4b29-8b3c-331355d89bd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80031e42-94de-49af-af65-331f5f528f28", "sighting_of_ref": "indicator--971728b4-096f-4844-b55d-e42e337648b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09450b1-dc60-4301-9d9e-8dd778e3374f", "sighting_of_ref": "indicator--f00176b5-3e9e-411c-b5e8-45769baaf25d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93a19b4-f671-4e4f-a948-72347890d79f", "sighting_of_ref": "indicator--d818c242-85e4-4741-8826-41700bfd1538", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d26cede-437d-48ef-bab0-ef8723414057", "sighting_of_ref": "indicator--5cf01e24-7aa9-423e-948a-aef2e235c80d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803aa7c8-7984-411c-88c3-e423bc3c3d91", "sighting_of_ref": "indicator--de1e344a-5e76-45bf-a6f6-8581e4099d9d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e320605-edc4-4f19-abbe-e8a4fc77a7ac", "sighting_of_ref": "indicator--de1e344a-5e76-45bf-a6f6-8581e4099d9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20a70dc-2547-458b-8e19-80f0bd9914a4", "sighting_of_ref": "indicator--71460eb5-2fda-44e3-86ef-ce591bf937da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805a3162-b594-4f52-ade6-13c8da731a86", "sighting_of_ref": "indicator--c9d4a5a3-2c7f-4bdb-9239-f6cfd31150d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be123a7d-2ab4-4ba7-91b7-44b36ecab360", "sighting_of_ref": "indicator--7267377d-c294-45fd-9dd8-5fa795439969", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1811cffd-029b-446f-be85-4df02767c5c0", "sighting_of_ref": "indicator--f178bfb6-b18f-474a-a7ba-d0b166217a18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3d21f6-340b-4751-b646-6fec8fcf3adf", "sighting_of_ref": "indicator--f178bfb6-b18f-474a-a7ba-d0b166217a18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e985c31c-9e0b-432f-9fc6-cbf6f14b0a95", "sighting_of_ref": "indicator--14eac664-bdd9-48dc-9d8c-dba2cb616b8c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ee83b7-7809-4130-abf6-5bb6e75c0d29", "sighting_of_ref": "indicator--72d34dc8-ed89-4f9c-be84-366706480769", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c235461-a1d8-4310-8ac1-0058c47709ac", "sighting_of_ref": "indicator--72d34dc8-ed89-4f9c-be84-366706480769", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b1ba8a-1f72-482e-a197-32adbacda117", "sighting_of_ref": "indicator--931803ed-6e10-4afa-a96f-937202a26868", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5d6b8b-57ed-46b3-b0b7-541335058ff5", "sighting_of_ref": "indicator--897c2115-57fd-41f5-ae31-19e3f6c0e37c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79693560-a8f4-434b-a818-370dac9a29a7", "sighting_of_ref": "indicator--d4f1a802-39ac-4e10-90cd-97f3a2ed652f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948fe8e4-5212-4155-9552-95937b1176a3", "sighting_of_ref": "indicator--21c03240-4730-488f-ac56-fdf9736859a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc07428-1526-4fe9-a77e-8b7997491837", "sighting_of_ref": "indicator--21c03240-4730-488f-ac56-fdf9736859a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2e3af4-73cf-4fc0-9dc0-22a71a65b2b9", "sighting_of_ref": "indicator--5d5fe3c9-9931-4859-b002-f8536e556322", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d6205d-83e4-4919-b47e-a21318695363", "sighting_of_ref": "indicator--60f47ab1-3e70-410b-a998-d7eebc332e98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1399f3d-1d69-417c-a49a-16f056473339", "sighting_of_ref": "indicator--5312ddde-da1e-4d1d-ab78-adde41e2622c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f458be4a-d77a-40ae-a823-adbd7ac00925", "sighting_of_ref": "indicator--5a3e3586-4b9a-4840-b382-ff3c825f50a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73845737-69ae-4506-b863-b74aeb5d65cc", "sighting_of_ref": "indicator--40a06bd1-0d32-409f-b485-f4cb20a7a4e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a761b5e0-3070-41bb-9176-12a3fbb0a0ab", "sighting_of_ref": "indicator--40a06bd1-0d32-409f-b485-f4cb20a7a4e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88e5dd0-d094-4cb3-ad5b-505b090ef257", "sighting_of_ref": "indicator--bd0a9643-c92d-4618-b30a-bbf6f53def89", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d96b64d-da01-421a-b7dc-80e6278f27fd", "sighting_of_ref": "indicator--0313af72-e1ab-4aff-814e-9d29cebd149d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45719fa1-9efc-43f0-b863-29290a5d79a8", "sighting_of_ref": "indicator--8efb3db0-a9c7-4bba-8df7-d198da70ce29", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bb28be-4809-4df2-bd44-0d0fed618aea", "sighting_of_ref": "indicator--8efb3db0-a9c7-4bba-8df7-d198da70ce29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae350f20-c7cd-4ad1-81be-a223e79d2c02", "sighting_of_ref": "indicator--d625e818-1ee8-40c5-a5aa-1f7d92106592", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b157579d-1f36-43e7-b53a-ea061ac878bb", "sighting_of_ref": "indicator--fae627bc-8585-466a-8817-7631f943ac00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce7eb00-622b-4a9b-b39e-babc05606de2", "sighting_of_ref": "indicator--4546dfa6-83b0-4a1d-a86e-10d37a0f1b0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f900d6-8398-42e1-9982-d3404b6dcf21", "sighting_of_ref": "indicator--623bb300-1cf6-4161-8da0-f7fcef8c1dc8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c0643a-bc17-4f50-b166-8a4e92663101", "sighting_of_ref": "indicator--99472b68-8d14-4a31-99c4-7e18b9dda1b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1bece2-9c87-4f77-8c20-a319dc89f84d", "sighting_of_ref": "indicator--99472b68-8d14-4a31-99c4-7e18b9dda1b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d3ada0-f863-4a00-b707-c45b7f53815d", "sighting_of_ref": "indicator--32ed5917-e3e5-4727-bec7-a68e1b57e7da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093c36e9-b5c3-481c-bc55-ddc21c954227", "sighting_of_ref": "indicator--382908db-1abf-487e-adf6-5531de616031", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7f44f2-8ecf-499c-9ade-b9932f2e554b", "sighting_of_ref": "indicator--80c3aa2f-6ac3-4099-becf-b3fe0fb83184", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af1ad32-8425-4057-b0df-cb59e44481e1", "sighting_of_ref": "indicator--80c3aa2f-6ac3-4099-becf-b3fe0fb83184", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b3eead-787f-48fe-98dc-402eb8b4962b", "sighting_of_ref": "indicator--80c3aa2f-6ac3-4099-becf-b3fe0fb83184", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bdbbb-8b60-40d9-a472-cf6f9095f5d3", "sighting_of_ref": "indicator--9a17e835-fec3-44e7-a26e-f50760fc1dae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb8643f-9b2f-49c5-9222-a72909f45155", "sighting_of_ref": "indicator--9a17e835-fec3-44e7-a26e-f50760fc1dae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c7a81-972d-4c39-bdca-46e976f066de", "sighting_of_ref": "indicator--9a17e835-fec3-44e7-a26e-f50760fc1dae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff620f27-b5db-46c6-9326-111b55a4d65f", "sighting_of_ref": "indicator--7459d643-f861-4bad-a654-ee0454f02c09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe42c75-d2ae-4eef-b26a-38390156587e", "sighting_of_ref": "indicator--7459d643-f861-4bad-a654-ee0454f02c09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2abfb49-9fac-4a13-af04-b68b23d86b11", "sighting_of_ref": "indicator--7459d643-f861-4bad-a654-ee0454f02c09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca39c166-5ba9-4a0f-a4ec-a46d24b1244c", "sighting_of_ref": "indicator--afe1921c-9c97-4c6b-bacb-97ad18b482aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c024900b-a293-42c9-a05e-acc93b14fba2", "sighting_of_ref": "indicator--afe1921c-9c97-4c6b-bacb-97ad18b482aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df7b740-f2f4-4f75-8bd2-b67109729d19", "sighting_of_ref": "indicator--afe1921c-9c97-4c6b-bacb-97ad18b482aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b9623b-c891-43af-93c6-93bfeb8b7da0", "sighting_of_ref": "indicator--ff58e5df-8398-4b9a-8a72-d14dc9014aee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a935d0c0-35fe-4b71-a36f-d6340458785d", "sighting_of_ref": "indicator--ff58e5df-8398-4b9a-8a72-d14dc9014aee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af263e7c-b0b2-49bb-8f5a-ddc11169db6c", "sighting_of_ref": "indicator--a885e4a1-2084-47e6-bd8b-c14df663b749", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4067f1-16c6-454c-a8d8-2e0e9f68785b", "sighting_of_ref": "indicator--a885e4a1-2084-47e6-bd8b-c14df663b749", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c99490-a096-4567-8f05-b9db4e47ea66", "sighting_of_ref": "indicator--a885e4a1-2084-47e6-bd8b-c14df663b749", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f23b7d-57f7-4dda-8b23-a3a1ce2f3222", "sighting_of_ref": "indicator--da2207c4-5ecf-4595-922b-c624999384ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c02996f-4b5d-4d1c-97b9-9fe73b96750f", "sighting_of_ref": "indicator--f078ccbf-19ed-4d51-b313-a4072ff2650d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbb54a5-d475-404c-98cd-ad074b9c9fb8", "sighting_of_ref": "indicator--271299ad-bdec-4913-b017-cae268fee953", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31de806-b3bb-46b2-bbf7-5377f9244f52", "sighting_of_ref": "indicator--271299ad-bdec-4913-b017-cae268fee953", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e481421-0d37-4795-b904-11432e071a02", "sighting_of_ref": "indicator--271299ad-bdec-4913-b017-cae268fee953", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f493ab-ad22-428a-963e-c141502ec82d", "sighting_of_ref": "indicator--8db6a621-a06b-42d1-a8e0-0bde7b8e9949", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621e7686-f84b-4e16-b81d-8babe235b7b9", "sighting_of_ref": "indicator--efa451d9-d1d4-4397-ad5b-061da7dcf6fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82d3654-baf2-47ea-a8b0-09bc798abd22", "sighting_of_ref": "indicator--efa451d9-d1d4-4397-ad5b-061da7dcf6fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90acab74-c919-45ea-b76a-31be547e8f63", "sighting_of_ref": "indicator--efa451d9-d1d4-4397-ad5b-061da7dcf6fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb27059-dbc9-4b2d-b7d2-527ae5673348", "sighting_of_ref": "indicator--633a017c-f2a4-4054-86c7-8e0512db926c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32fb7f0-8ba3-4229-a7a2-4e3957189e40", "sighting_of_ref": "indicator--633a017c-f2a4-4054-86c7-8e0512db926c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2ced92-8777-4a10-a37c-39733ffbc7d7", "sighting_of_ref": "indicator--73b09d22-636a-4b25-8100-48d9300777ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ef0beb-7b42-4a75-ac53-71fffbafcc53", "sighting_of_ref": "indicator--73b09d22-636a-4b25-8100-48d9300777ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c544473-372a-4dc3-9cab-49cf62edf799", "sighting_of_ref": "indicator--73b09d22-636a-4b25-8100-48d9300777ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e2a34d-9f3c-4c0b-b134-61ffef194680", "sighting_of_ref": "indicator--f54c94da-7d02-47cd-8513-eba8480d02b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715d801d-e579-41c3-8977-6bcc1fc31a4f", "sighting_of_ref": "indicator--f54c94da-7d02-47cd-8513-eba8480d02b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09cd2ca-8608-42b2-9f78-8b1cb8abdd1e", "sighting_of_ref": "indicator--18e9b521-629b-43e0-91b1-69aa3fb528ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e1b6ef-1d54-4c6b-b1b8-e3cbfcf89e0f", "sighting_of_ref": "indicator--18e9b521-629b-43e0-91b1-69aa3fb528ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044ef7b5-4c0a-4039-9785-2d8a36b323ce", "sighting_of_ref": "indicator--c1fb6c2d-da9e-492e-95d9-ff9041f22240", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314612ac-e5c3-4abc-9118-21c7cccfc2e2", "sighting_of_ref": "indicator--c1fb6c2d-da9e-492e-95d9-ff9041f22240", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fac8d55-7dbc-4a18-99a9-6eeb65094c9e", "sighting_of_ref": "indicator--c1fb6c2d-da9e-492e-95d9-ff9041f22240", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d466263-933f-4ff4-99dc-fddf174a106c", "sighting_of_ref": "indicator--10758108-d88d-45a3-8583-ee300896b702", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed638d17-b1d6-453b-a6c5-99ce1cbfcc49", "sighting_of_ref": "indicator--10758108-d88d-45a3-8583-ee300896b702", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eee4d54-31de-46f5-8234-338296364fe8", "sighting_of_ref": "indicator--10758108-d88d-45a3-8583-ee300896b702", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eb9a01-6969-4fe6-9af5-6fbac5686d05", "sighting_of_ref": "indicator--57bc7d0d-9d52-48b8-99c7-e64561457458", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c68d4db-0d8d-43d9-8dac-a39e7d143292", "sighting_of_ref": "indicator--8f2adb7f-1c5b-4f0e-8a5d-b3db9a2f98a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0a9971-e959-4773-8359-39187a334a69", "sighting_of_ref": "indicator--8f2adb7f-1c5b-4f0e-8a5d-b3db9a2f98a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8549112d-cbcf-4cd9-a00c-8dc23427b24e", "sighting_of_ref": "indicator--8f2adb7f-1c5b-4f0e-8a5d-b3db9a2f98a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c457dc-d215-4c0a-a175-962240159d26", "sighting_of_ref": "indicator--1c8d2564-90e6-4a13-9b2a-ac85cea896fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc22a382-87f7-4838-8993-3a68092792f5", "sighting_of_ref": "indicator--1c8d2564-90e6-4a13-9b2a-ac85cea896fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc187b07-6829-4991-9fca-3acdaee685e8", "sighting_of_ref": "indicator--1c8d2564-90e6-4a13-9b2a-ac85cea896fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b723567-8c01-40b8-9fe3-6341f4db606c", "sighting_of_ref": "indicator--1c75f0fc-615a-4244-ad6b-d04f70e70ebd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fa36f5-0c9d-4e28-aea3-11c8b427f5ea", "sighting_of_ref": "indicator--fc8692c8-3fa9-40c1-9b0b-58b215abe3e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2976bcd3-f249-46ca-a995-f70eafde7513", "sighting_of_ref": "indicator--6c38f255-e6e8-42c8-bfb5-fa4f1e7d18b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261bd64c-5c4b-4df7-b042-0145071d9bf6", "sighting_of_ref": "indicator--6d34fc6d-137d-4725-a9f0-18238ee90099", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f9191c-cefa-422e-85eb-d40a1455a068", "sighting_of_ref": "indicator--6d34fc6d-137d-4725-a9f0-18238ee90099", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8160519-b8cf-41fc-b42c-8ab00ff8b8fc", "sighting_of_ref": "indicator--40a00ddc-a3ce-4151-82af-e0f97961cd94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382b2ff1-91c4-49e1-8c2a-1cf009839fde", "sighting_of_ref": "indicator--40a00ddc-a3ce-4151-82af-e0f97961cd94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f7646-4b0b-46d6-adc2-7698f731afb2", "sighting_of_ref": "indicator--004f4e94-2e81-4a9c-872d-5ea95a4efae3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80ef607-0d4c-4318-b4c3-d7c85aa893b6", "sighting_of_ref": "indicator--004f4e94-2e81-4a9c-872d-5ea95a4efae3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41de8e3c-a2ea-4a53-9fa1-93a47dff2777", "sighting_of_ref": "indicator--d2fda83d-3708-4532-b1a4-e5009ef0b0c0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e995f9d-59fa-4fe5-858c-3b1eece14aa4", "sighting_of_ref": "indicator--d2fda83d-3708-4532-b1a4-e5009ef0b0c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec553bc-385c-4596-b7c2-72fd2fdd7522", "sighting_of_ref": "indicator--4a712822-db7f-4bc6-ac42-ad4d3c6fd907", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed460d9c-c45c-42e1-902d-2c76d9c04681", "sighting_of_ref": "indicator--4a712822-db7f-4bc6-ac42-ad4d3c6fd907", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab7bec5-cbfc-4ac1-8ee1-6041b5c2daa4", "sighting_of_ref": "indicator--1a5f8c04-bbef-4ee7-ab12-c2e11b2cb6c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790b2273-5309-4ea2-ba08-3da269820b59", "sighting_of_ref": "indicator--1a5f8c04-bbef-4ee7-ab12-c2e11b2cb6c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd4d1a7-bc19-426f-82dc-64d1cccc48c6", "sighting_of_ref": "indicator--2036123a-d064-41f2-b4a4-7c78ffba2cbf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c88d10f-1280-4907-b3a2-519139af7051", "sighting_of_ref": "indicator--2036123a-d064-41f2-b4a4-7c78ffba2cbf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55193e3c-994f-4d96-948a-737f8e2b81f3", "sighting_of_ref": "indicator--825edd94-a013-42a6-9735-c342d1cacc0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bda97b-8af0-40ce-89b9-45cedab156a4", "sighting_of_ref": "indicator--897f2dfa-2b6f-4f73-868d-c9ff60933e2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4737954a-6031-4b75-a3ce-d93534203314", "sighting_of_ref": "indicator--897f2dfa-2b6f-4f73-868d-c9ff60933e2b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cf7fd3-90ba-4dd5-9f3f-5e96720ee72c", "sighting_of_ref": "indicator--897f2dfa-2b6f-4f73-868d-c9ff60933e2b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d155bea1-1f02-4e18-927e-c96256b484be", "sighting_of_ref": "indicator--b3b6fd76-3b27-4686-959d-d9b83107124d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2503b2d-f927-4df7-b9b4-2a139f8a653e", "sighting_of_ref": "indicator--b3b6fd76-3b27-4686-959d-d9b83107124d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42e58b4-f087-4425-82d5-3d983b8dd2fc", "sighting_of_ref": "indicator--a2d5cb63-d15d-428e-a583-de264f1cc544", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac76c17-6536-46c5-9e0e-86948149308d", "sighting_of_ref": "indicator--a2d5cb63-d15d-428e-a583-de264f1cc544", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea61655-1343-4246-ac6e-5d2e8378dbf4", "sighting_of_ref": "indicator--f10298e8-537d-44d2-86bb-6644c39d1d31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21767264-1b7b-4ac9-ad90-345f3b6fe7f8", "sighting_of_ref": "indicator--f10298e8-537d-44d2-86bb-6644c39d1d31", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bc5ead-f6d9-4ebe-9f36-ffafb4c3cf71", "sighting_of_ref": "indicator--f10298e8-537d-44d2-86bb-6644c39d1d31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf36355c-441b-4326-b959-c49821795623", "sighting_of_ref": "indicator--e8e14d37-6cc6-483e-86bc-50f1679003bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef77378-bf24-4658-9e1d-4a52da643c42", "sighting_of_ref": "indicator--e8e14d37-6cc6-483e-86bc-50f1679003bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f910f9-e167-43be-a7d8-840f8f6fad8b", "sighting_of_ref": "indicator--80d45e30-7d2e-48ae-9930-3649e72974b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3c26c-b81a-4c66-9a44-138d1c68b14b", "sighting_of_ref": "indicator--80d45e30-7d2e-48ae-9930-3649e72974b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b41d67-41fa-491f-931e-2123035873a4", "sighting_of_ref": "indicator--d1f71ffb-98b9-4c41-a9af-625184462887", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271c74f7-bd1f-4989-865e-88d5cadcba7b", "sighting_of_ref": "indicator--66a64b24-0bf9-4ca1-94fb-7446ba169a0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ab7367-0da0-4ccd-8088-543ba8379b30", "sighting_of_ref": "indicator--66a64b24-0bf9-4ca1-94fb-7446ba169a0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e51e654-fc12-4901-848e-735332224287", "sighting_of_ref": "indicator--76814c7c-8828-438f-abed-db0501a84786", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0e8aa8-5070-4ced-8e96-9c739b41c807", "sighting_of_ref": "indicator--76814c7c-8828-438f-abed-db0501a84786", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4d463a-ba13-4197-8d62-801425509332", "sighting_of_ref": "indicator--808d1f0e-e842-42a9-9542-49a4173432f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc469ac-c720-4478-bd79-cd7593bbfbb5", "sighting_of_ref": "indicator--808d1f0e-e842-42a9-9542-49a4173432f5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240f2be7-92c5-48d7-b7a9-bf3515d0e024", "sighting_of_ref": "indicator--808d1f0e-e842-42a9-9542-49a4173432f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0ef117-83e0-45e0-9155-c92b252c1967", "sighting_of_ref": "indicator--6360d533-bfb6-428e-afeb-17bb5e0d5bbb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec28fdc-27c0-417b-9e02-f79beed780a3", "sighting_of_ref": "indicator--6360d533-bfb6-428e-afeb-17bb5e0d5bbb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336ad57c-5558-481e-9ffa-037724f25d9c", "sighting_of_ref": "indicator--e4bd72f7-14ea-405f-a103-ad813f8a4dcb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34a9524-f4f9-48b1-9b82-ae8a84e48181", "sighting_of_ref": "indicator--e4bd72f7-14ea-405f-a103-ad813f8a4dcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfc55aa-266f-438f-87a8-eebcedc78705", "sighting_of_ref": "indicator--64c3ab26-74bc-4ef1-b10c-cd96437aa57a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ee218d-e71f-4397-9779-1951c35fe460", "sighting_of_ref": "indicator--64c3ab26-74bc-4ef1-b10c-cd96437aa57a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af7096e-beba-48bf-a972-5b9528edaf8b", "sighting_of_ref": "indicator--64c3ab26-74bc-4ef1-b10c-cd96437aa57a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff4e441-4f8c-4be4-925f-4ac6b1104466", "sighting_of_ref": "indicator--058a96fb-db96-4ee7-a9d1-0410a6234f22", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c728ce-258e-4995-a3df-942471b3e0fe", "sighting_of_ref": "indicator--058a96fb-db96-4ee7-a9d1-0410a6234f22", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ccabf6-9d53-4609-8cff-1caecad721c6", "sighting_of_ref": "indicator--186d11b2-add6-4baf-b347-272c0a775060", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3d106-fbf9-4736-91ca-8f466faeba39", "sighting_of_ref": "indicator--36f624fc-312d-4af3-bd0e-f54e3b029872", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8c032-febd-41d3-a61b-625ebf226426", "sighting_of_ref": "indicator--36f624fc-312d-4af3-bd0e-f54e3b029872", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e0b849-fcb3-46e9-8e8a-ee548e52da7c", "sighting_of_ref": "indicator--ffbd20b3-6d84-479f-b8b3-98a66c5b619c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45aa8dc-298e-4daf-aa6d-a4ac47e584ba", "sighting_of_ref": "indicator--ffbd20b3-6d84-479f-b8b3-98a66c5b619c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109b516b-30dc-4b90-aa1c-7457714b9d5e", "sighting_of_ref": "indicator--1c06b9a1-f0f8-4ddb-9fe5-a65accb97432", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549f1eed-ebd6-4a44-87bd-ada4d76619c1", "sighting_of_ref": "indicator--dc207d53-e0e1-4ddb-8324-5fe55b2f0233", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d378ba-c0c5-4d22-8e02-0f9b0fefd4ef", "sighting_of_ref": "indicator--dc207d53-e0e1-4ddb-8324-5fe55b2f0233", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e8f936-2c6a-4dcc-a859-406688491d80", "sighting_of_ref": "indicator--dc207d53-e0e1-4ddb-8324-5fe55b2f0233", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c98ec87-a8b3-4ff8-997f-f111251cf833", "sighting_of_ref": "indicator--5e9a5e66-ea04-479d-8f99-18632cd35e5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fb0f15-9cc9-4942-9aa1-f85b097cfc00", "sighting_of_ref": "indicator--f68420b2-becb-44f6-8142-51a09302f4d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca405b3-1278-4ffc-a8fe-073609a0f7cb", "sighting_of_ref": "indicator--f68420b2-becb-44f6-8142-51a09302f4d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ce306a-65ca-436b-923b-144ae87f7a00", "sighting_of_ref": "indicator--af231230-ebf4-49a4-b511-5e545bce0384", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3268ce50-882a-40af-a28f-11c65147f33d", "sighting_of_ref": "indicator--af231230-ebf4-49a4-b511-5e545bce0384", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae192d51-ec8a-4996-95da-ca1b984bb1e2", "sighting_of_ref": "indicator--3e67d4d9-1a1e-41bc-96ed-b8903d96e362", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6d5253-573e-4c11-98ae-cd674b1eed71", "sighting_of_ref": "indicator--3fa73065-5740-42cd-872c-38fa6cc54d13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d8c046-2283-4885-af22-76c30ffbc05e", "sighting_of_ref": "indicator--3fa73065-5740-42cd-872c-38fa6cc54d13", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f925963-96c9-4eca-924d-fc1c6ccc349e", "sighting_of_ref": "indicator--0fe9721e-f5bb-4197-ad63-14c629ddb0e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564ec8f-4c37-41ad-b840-6efd7e8824c9", "sighting_of_ref": "indicator--670f903b-bae0-4ed1-99a6-769edc3a3951", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa92862-b5de-462e-bf6f-707be70e026b", "sighting_of_ref": "indicator--670f903b-bae0-4ed1-99a6-769edc3a3951", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e746e76-75ff-4fa2-a517-efe6f053723a", "sighting_of_ref": "indicator--5bf920a0-06d6-4bc2-9435-4baee037f1bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbeadcf-188d-4f41-9471-56534926f38b", "sighting_of_ref": "indicator--5bf920a0-06d6-4bc2-9435-4baee037f1bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d355a38-a57c-413d-abfd-16c994409596", "sighting_of_ref": "indicator--e90cb6f9-15a9-4d6a-b358-856e50f41491", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9a21c4-78f3-4e10-81b1-a8017e48ea81", "sighting_of_ref": "indicator--4ec4d995-7766-4658-a59e-d0cb29d93dd0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69f987-bf47-4822-b05b-1f09595c70fe", "sighting_of_ref": "indicator--4ec4d995-7766-4658-a59e-d0cb29d93dd0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc76e3-2ce3-4692-9966-e32369306006", "sighting_of_ref": "indicator--96775a73-8b92-4560-9ac9-a3020f83d47a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f39f9b9-b20a-460a-b28c-73647dc9dc1e", "sighting_of_ref": "indicator--b60c7864-a7e4-4f8b-b394-e04969daca2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccc0695-3342-451b-bb56-8db0e8a40277", "sighting_of_ref": "indicator--b60c7864-a7e4-4f8b-b394-e04969daca2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5853eff-7e80-4d13-a99a-95c42c67fa49", "sighting_of_ref": "indicator--b60c7864-a7e4-4f8b-b394-e04969daca2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e673f91-a8c3-41a6-b60c-4fd86280f3df", "sighting_of_ref": "indicator--1b2e7359-d360-46c0-8156-23d59d83938e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4c1d49-ea58-4ccb-919a-540a56d9acb7", "sighting_of_ref": "indicator--1b2e7359-d360-46c0-8156-23d59d83938e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577311bc-d409-4cc8-a79d-c3f2bd990a04", "sighting_of_ref": "indicator--086e5a17-8ced-4eab-a6a1-7594da638f8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa015889-a878-436b-aab9-3f86e7584aa0", "sighting_of_ref": "indicator--086e5a17-8ced-4eab-a6a1-7594da638f8c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f92b6a6-bb0f-43b0-b63a-53837e3a6c47", "sighting_of_ref": "indicator--086e5a17-8ced-4eab-a6a1-7594da638f8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0ac53c-e751-4519-b710-76de8ac9f152", "sighting_of_ref": "indicator--7261fd3e-f642-4f8f-80b2-82196d76a4b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dc07c8-0ec5-417a-a764-ef24d9672c4b", "sighting_of_ref": "indicator--7fcd69a9-b3df-45ff-a1dd-fa2d821fadab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7807bd9d-e752-4e6a-b37d-1dcb71ef7551", "sighting_of_ref": "indicator--7fcd69a9-b3df-45ff-a1dd-fa2d821fadab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914fb22c-491f-4215-9bad-d4234b919d89", "sighting_of_ref": "indicator--7fcd69a9-b3df-45ff-a1dd-fa2d821fadab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdd8bfe-cfd5-4471-a1ff-b6fff2ee606b", "sighting_of_ref": "indicator--52839550-957f-4929-8d58-69faddc12d92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dac7f23-ec7f-4cbc-b39b-f02c57575ad0", "sighting_of_ref": "indicator--52839550-957f-4929-8d58-69faddc12d92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae799757-5e4e-46f8-aa08-eb10a771e154", "sighting_of_ref": "indicator--bf10fb58-602d-4342-9b81-afcfaae272cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f37ba6-65e5-4f05-aa8d-b5805fbf3488", "sighting_of_ref": "indicator--bf10fb58-602d-4342-9b81-afcfaae272cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4a36a5-66ff-4710-a4ba-ed3576018733", "sighting_of_ref": "indicator--bf10fb58-602d-4342-9b81-afcfaae272cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07158cb4-882e-4762-bd66-2fc5531e305e", "sighting_of_ref": "indicator--9b64bcf9-88dc-42db-9208-896e90f5d9b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec89af-6930-434c-9d36-38a6c606bfef", "sighting_of_ref": "indicator--9b64bcf9-88dc-42db-9208-896e90f5d9b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9665ce5-9ccf-48b1-9d27-3559d75c6c8c", "sighting_of_ref": "indicator--529ba75e-23d9-4507-82fa-561d3e848ee0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffbac9b-b79a-4add-a27b-1e0c282a1280", "sighting_of_ref": "indicator--529ba75e-23d9-4507-82fa-561d3e848ee0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c87d1ba-33dc-48f7-a244-0a28e39e77fb", "sighting_of_ref": "indicator--529ba75e-23d9-4507-82fa-561d3e848ee0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634e3131-f779-4e2a-b94f-a3c96e086768", "sighting_of_ref": "indicator--c1a870bf-f2a5-4f70-aae5-c44c530b5c09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cd22a4-1e16-49f6-ac64-ffbeba57bda4", "sighting_of_ref": "indicator--c1a870bf-f2a5-4f70-aae5-c44c530b5c09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb9280c-3b47-4b36-8b1b-129fbfc9a990", "sighting_of_ref": "indicator--9a6ab491-234d-4037-ada9-c8cca5a826a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef474b2-2220-400e-aa36-9cc1c6ce9171", "sighting_of_ref": "indicator--9a6ab491-234d-4037-ada9-c8cca5a826a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f7b979-d99f-40ab-8ac7-a7c0aa41ae76", "sighting_of_ref": "indicator--bb455d91-f8e3-49a3-bc42-38ecb2a0d434", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba76a61-417b-4fd3-a1ed-880415fabd7a", "sighting_of_ref": "indicator--25b14fc0-6dc7-41a5-801a-0f511fab5fd1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd66c4-3c3b-4047-824f-96cd76608f59", "sighting_of_ref": "indicator--25b14fc0-6dc7-41a5-801a-0f511fab5fd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33723120-f1f3-4380-b03b-3057961b7ceb", "sighting_of_ref": "indicator--25b14fc0-6dc7-41a5-801a-0f511fab5fd1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b689d41-f3f5-4540-aba1-f071b8b0d7ad", "sighting_of_ref": "indicator--29538853-7935-4e37-892f-957d77055e4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2828fc-1221-4ff6-8d03-1fafde092d42", "sighting_of_ref": "indicator--29538853-7935-4e37-892f-957d77055e4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1e11bb-9975-4c1a-af90-bd150347bd9f", "sighting_of_ref": "indicator--684da8cc-2e48-48fd-b2f5-d77e69aa8002", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c50eac-04b4-4a95-b365-faeb11d312fe", "sighting_of_ref": "indicator--684da8cc-2e48-48fd-b2f5-d77e69aa8002", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba9076f-350a-4476-8b44-ab6abcdf4b57", "sighting_of_ref": "indicator--b43af721-e130-4c90-ba27-ec281c90c51b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782dab36-7c30-4acb-b6bc-daf3c32cb9d5", "sighting_of_ref": "indicator--e4cf0f47-e6da-46f9-8255-2076fb953ba2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca88717-a02a-4fc9-a7ab-860c9788d364", "sighting_of_ref": "indicator--f5215572-8844-4c58-b52d-3221706f9941", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da795262-6f87-4125-88c3-c1ef9b84420c", "sighting_of_ref": "indicator--f5215572-8844-4c58-b52d-3221706f9941", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38ba1d8-62ed-40ac-bd24-4afdee04336c", "sighting_of_ref": "indicator--c5d0f10f-543c-4427-a836-7e3e0d96b2a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d08440-342c-4b03-8e00-be8501a639b8", "sighting_of_ref": "indicator--c5d0f10f-543c-4427-a836-7e3e0d96b2a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3311b2c-5d01-4da0-9908-7312e8183b9e", "sighting_of_ref": "indicator--c5d0f10f-543c-4427-a836-7e3e0d96b2a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c43186a-684e-4f21-958a-68de5fa78fdc", "sighting_of_ref": "indicator--f5f6dc95-fdb6-4a8b-9e5f-d101049b494a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843c3fd5-22b0-4c24-a37d-b136922e2fb4", "sighting_of_ref": "indicator--f5f6dc95-fdb6-4a8b-9e5f-d101049b494a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c5d12-6cf1-4d54-a18c-b90e57b32f31", "sighting_of_ref": "indicator--f5f6dc95-fdb6-4a8b-9e5f-d101049b494a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28fab88-ba3d-404d-8404-820d2ac150c4", "sighting_of_ref": "indicator--26cc267d-57ff-445b-bfbd-f814831908a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5bb64b-ba6a-4337-ab0e-5c035f83678f", "sighting_of_ref": "indicator--26cc267d-57ff-445b-bfbd-f814831908a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7de262c-5a78-4b0f-870e-a802c0eb00f6", "sighting_of_ref": "indicator--b7ecd5a0-e026-4bf4-a2a7-53f57a74f49e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ed6d10-960c-4072-aced-d4f999f98b7c", "sighting_of_ref": "indicator--b7ecd5a0-e026-4bf4-a2a7-53f57a74f49e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332824a9-3c94-4323-858f-b261807c7ac7", "sighting_of_ref": "indicator--cb577a28-4d37-495c-b9f4-c06576cd20b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4c173d-8725-453b-a528-0b9f795df998", "sighting_of_ref": "indicator--cb577a28-4d37-495c-b9f4-c06576cd20b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80f93e7-de23-4f6c-9d7f-c60363a231a3", "sighting_of_ref": "indicator--ebfc46b5-7420-4f9e-a201-d7d2a72c32ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46dbb8c-e9db-4850-9fd3-923a607dbf4f", "sighting_of_ref": "indicator--e774ba7a-1736-408c-9e93-c21c6b474d1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8108d19-c530-4b2d-945e-3566875ce27a", "sighting_of_ref": "indicator--7f90676a-ebcd-4145-a5fa-9f1166e408b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50a308-7fe6-4e0b-b4ac-0daef1c1eee6", "sighting_of_ref": "indicator--37867262-9d47-4302-90b8-c93a0f7bec7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b574fc-949f-43c5-b573-17ea3b973e9a", "sighting_of_ref": "indicator--37867262-9d47-4302-90b8-c93a0f7bec7f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842706a2-c42c-4071-9c23-2e62dce355e1", "sighting_of_ref": "indicator--37867262-9d47-4302-90b8-c93a0f7bec7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1637d089-bc63-45ff-a6b6-ef8af205d907", "sighting_of_ref": "indicator--1d8ddd1e-96f9-4c40-a0f0-85631b027974", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d158a64-9f37-4470-bad3-97207728bf6e", "sighting_of_ref": "indicator--1d8ddd1e-96f9-4c40-a0f0-85631b027974", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a5e59b-bfa9-4e4f-8b6d-084243bcbd57", "sighting_of_ref": "indicator--1d8ddd1e-96f9-4c40-a0f0-85631b027974", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fdf3c6-f998-45c1-9099-2b2ec3a67913", "sighting_of_ref": "indicator--ea987def-19db-4929-8f02-a58ece72b3af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff2ff90-56a4-48c5-8cab-55e45fbd6286", "sighting_of_ref": "indicator--f516b1d9-f1dd-4f97-9e18-c02dda2cb230", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b3301e-3ac9-49b2-afa5-50d3518f611c", "sighting_of_ref": "indicator--f516b1d9-f1dd-4f97-9e18-c02dda2cb230", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a302a92-570c-45e2-87d5-95b6d2a772b7", "sighting_of_ref": "indicator--f516b1d9-f1dd-4f97-9e18-c02dda2cb230", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a96cd9-8652-4f42-85ff-f572a2d7686b", "sighting_of_ref": "indicator--06b8af30-1f91-4918-8ab2-47b564554cec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f40047-cd5d-4d5a-bfe2-a323af8a3443", "sighting_of_ref": "indicator--06b8af30-1f91-4918-8ab2-47b564554cec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd15451-73c7-42ab-8998-57a824d3007d", "sighting_of_ref": "indicator--ef5dbc50-6e7c-40bb-b9eb-b63ba0d47402", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbe52fb-1d26-4e7e-bd97-c781929b714a", "sighting_of_ref": "indicator--ef5dbc50-6e7c-40bb-b9eb-b63ba0d47402", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee152963-8cbb-41fc-88d4-3a6c4ee155bf", "sighting_of_ref": "indicator--ef5dbc50-6e7c-40bb-b9eb-b63ba0d47402", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb7c2b2-d5bc-4643-99ad-2c733f0f67e5", "sighting_of_ref": "indicator--3824c949-ef0f-4048-a63e-5aa8b7e7bb08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a1b805-6b5b-4436-b745-402d3db4b900", "sighting_of_ref": "indicator--3824c949-ef0f-4048-a63e-5aa8b7e7bb08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf39f54-fa69-4660-9594-6ceb721f724e", "sighting_of_ref": "indicator--22a73bb1-e35b-4269-80f3-be9ec7e02f50", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0d2489-d70e-4930-89a1-faf3e1fb8a0f", "sighting_of_ref": "indicator--22a73bb1-e35b-4269-80f3-be9ec7e02f50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a82c28-8958-49b0-be41-8844476c9f39", "sighting_of_ref": "indicator--25fba72d-9d7d-4e69-9266-49e0c87db174", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3061466a-b094-4ece-8595-adb9c86177b5", "sighting_of_ref": "indicator--25fba72d-9d7d-4e69-9266-49e0c87db174", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7615155-4e33-425d-888c-df3e783f7e6f", "sighting_of_ref": "indicator--e87b8350-f82a-4006-8d23-322cc5a9f3fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8791fffe-51f4-4cbb-9c22-a57c448c6d39", "sighting_of_ref": "indicator--e5cc6d83-fa3e-4b60-85c5-e56a00e2005f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c85022-0913-4c81-954f-767814d6b89a", "sighting_of_ref": "indicator--da3a010f-e8b4-4b88-923e-96eef995ffbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f25e08d-cd1f-48d8-a952-e89bb01103fa", "sighting_of_ref": "indicator--3bb7a1d0-a1f1-4598-95fc-31d3f12eb86d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b78df13-2209-4979-946b-34b779cc2654", "sighting_of_ref": "indicator--cab8dd52-3804-48ab-848a-325801b2afa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33afe7af-a9a4-423d-8b73-b044e91a60da", "sighting_of_ref": "indicator--613d2cf1-f0f2-457c-bedb-0edec1bc0761", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ad579c-86da-47b7-a504-53089ce84993", "sighting_of_ref": "indicator--473d0d0b-e4c4-4e18-8188-d8f382fb72d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe71fe-de55-419a-ac28-76ba788cea93", "sighting_of_ref": "indicator--809d9274-a209-4493-b3d8-4678183a9996", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a177fc7-0c9f-475b-b17a-3a6d7c591f68", "sighting_of_ref": "indicator--806ee840-2f19-4958-b5b5-ac41c24a9044", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24cf3d3-f6a2-41a5-9f0b-723a67871550", "sighting_of_ref": "indicator--2c6e8a39-7a52-4d99-99c4-69b4447e70b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6106c628-a922-4425-ade1-97b6f2f37eb5", "sighting_of_ref": "indicator--f99dd3e5-fe76-41d0-aa4a-a08e5a580357", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b13aea0-5380-4273-ba8b-606a3c6900ca", "sighting_of_ref": "indicator--398a2119-c8be-4709-b6b3-ba7692f6a40d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991a2ebf-6673-4043-9d6f-af29cf058b85", "sighting_of_ref": "indicator--1f515b11-a7f0-4fb9-8dd4-2d2d155f1041", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5073e661-5398-462d-b173-b7bb21ff371f", "sighting_of_ref": "indicator--df260d49-0548-46a5-812a-a53e6b2a910b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6f2c5f-437d-401a-893c-f9568b2aada0", "sighting_of_ref": "indicator--df260d49-0548-46a5-812a-a53e6b2a910b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d1669a-b9ba-4148-ae6f-2f07a3345ac2", "sighting_of_ref": "indicator--df260d49-0548-46a5-812a-a53e6b2a910b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498cf276-e6ed-434d-9593-c1906f727140", "sighting_of_ref": "indicator--5208236c-f5bc-427d-9a7a-7254ed48d735", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eed350-9fdc-4d20-b123-f5f92c1f2073", "sighting_of_ref": "indicator--dc0e2e66-447f-4dfa-a6a4-a4e451d95c79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff3626b-eae2-412d-84c5-38c6430a38d0", "sighting_of_ref": "indicator--dc0e2e66-447f-4dfa-a6a4-a4e451d95c79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f1beb5-5c76-4148-ab99-3ddc83f4d6dd", "sighting_of_ref": "indicator--dc0e2e66-447f-4dfa-a6a4-a4e451d95c79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6174b7-ba6d-40cb-bef3-8640f3062261", "sighting_of_ref": "indicator--ffc8f1d1-3dfb-470b-bae8-0a247fee2d84", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cf3652-223d-409c-b403-32b924a4b19e", "sighting_of_ref": "indicator--752ef162-dbcd-4bd4-a385-c6b9d63f06fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8006cd1f-9c53-4d08-8955-839ff88ca2fa", "sighting_of_ref": "indicator--67a8b91a-449f-4f30-9fde-b4151a51421f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d24b66-99d6-4ac2-835a-4b30f7e182b0", "sighting_of_ref": "indicator--67a8b91a-449f-4f30-9fde-b4151a51421f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30e47cf-473a-4eb5-bd15-740d2a3752c5", "sighting_of_ref": "indicator--05c27c32-b486-4a89-a8ef-8899b6130fcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40119353-7749-4f7d-821c-658914df5e4c", "sighting_of_ref": "indicator--ee84b3c6-5ccf-45ea-9a99-42b940f09d9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970b8522-101a-454e-b8e5-445057c5ed12", "sighting_of_ref": "indicator--ee84b3c6-5ccf-45ea-9a99-42b940f09d9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0215b044-8cfb-4e1b-a2b2-9de9aaab71f0", "sighting_of_ref": "indicator--12e6dcab-f75b-42ff-813c-395c6c3e9f45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580be348-934c-4fbc-8a11-62885b3841e8", "sighting_of_ref": "indicator--140c8fb1-70a1-476f-9f6f-2b1d1461d1a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f224e72a-aa87-49b1-8b93-2196651ff686", "sighting_of_ref": "indicator--92379d5e-9b8a-40d0-a72e-43aae47e9ff9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf232615-3526-44fe-9d62-f7ca2b22a898", "sighting_of_ref": "indicator--b3f8c154-7cd0-4c04-867f-0b9638387e9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0466893-681b-4104-adaf-d738edf5151f", "sighting_of_ref": "indicator--2f18f0b0-c428-49df-84f4-bf723946c3c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec188ca-b4f1-48cc-9751-829e6d082017", "sighting_of_ref": "indicator--ee05483f-d7c2-40de-9029-3727c1374c33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9ca1ba-3918-45bf-95e5-7be64b919b81", "sighting_of_ref": "indicator--ee05483f-d7c2-40de-9029-3727c1374c33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9b001c-138d-4b82-8b1f-95ca9795094d", "sighting_of_ref": "indicator--b2ce8f30-a606-461c-967a-f91247942f67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305724ea-90c3-4f36-a403-38ad7ec4076c", "sighting_of_ref": "indicator--7abefcf1-7e80-46aa-b89c-401be4f2177b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f27c81-c8cf-47b5-9ad0-190947f2a6ad", "sighting_of_ref": "indicator--587cab33-7e58-4b02-908c-6833daf68829", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a94c9a-91f5-4d11-bd7e-3752aaa92407", "sighting_of_ref": "indicator--587cab33-7e58-4b02-908c-6833daf68829", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed0c0a2-dce9-4f08-ade7-78f7f79134f7", "sighting_of_ref": "indicator--cd70ac65-8d78-430e-9a39-77a2c6d5f30b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17242ae3-d41a-47c6-8cad-1faf6e29a37e", "sighting_of_ref": "indicator--a98a6ac1-72ad-47aa-b90b-3d92222717f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21276780-808a-4956-bcf4-2b9e6aa29706", "sighting_of_ref": "indicator--13da7880-3bdd-43c7-8ce8-c931db568b8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d696271-8afd-4119-a6d7-4674ec51dce3", "sighting_of_ref": "indicator--43b39c78-88ec-454d-a8b5-880ebf02a208", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abebaf3-be33-4907-8030-d4465d75ed7a", "sighting_of_ref": "indicator--aeaa38ad-7eb6-4d53-a2b1-7d5efb859963", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87d6973-16e1-41f4-89fd-c0eaee1459d6", "sighting_of_ref": "indicator--aeaa38ad-7eb6-4d53-a2b1-7d5efb859963", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd22f81-f03b-4398-aaab-62d1a64975fd", "sighting_of_ref": "indicator--e8669cca-ae27-4c68-87a4-2ace1599298b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccd8eba-58be-4715-8b1a-423372ca9e81", "sighting_of_ref": "indicator--318e8418-3d87-4807-8d9b-2b0601576010", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934760d1-d1ce-4f70-9eb9-e6d4f6000e43", "sighting_of_ref": "indicator--6dd8dcec-ad7a-47b8-bc80-d970b7e49492", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71125d86-16e7-4255-97f5-e2d2e1fa480d", "sighting_of_ref": "indicator--497982a4-861e-49e0-95ac-1aabc4520157", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1049265-01a9-44fe-8419-86ff6c105730", "sighting_of_ref": "indicator--934f6042-4ec5-4e13-b3af-f0e0cb6e891b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd69b42-b711-4a8e-8ba9-f49f93ff1cd3", "sighting_of_ref": "indicator--13b45ed9-bcf2-493c-9120-f53206f8bfaf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe4b5f-5db2-44f3-a170-927577f553f4", "sighting_of_ref": "indicator--74eb3ac5-fda1-4a47-82d1-9f69620f68a0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03f9f0f-4522-4694-919f-4fab86d05ba2", "sighting_of_ref": "indicator--fe63ecbf-d9a8-4d40-be05-b9d075a4181e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e20b7fa-85d6-4372-aeba-0316b8bf34c0", "sighting_of_ref": "indicator--ed150d83-c295-47fd-bc27-704e287d6475", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642cab0d-92a2-4614-a1b4-405c3c92bfa7", "sighting_of_ref": "indicator--e9b99ea5-89e0-40b7-b175-ddcf140bbba2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49b5943-ed1d-43b2-9600-347713fbad29", "sighting_of_ref": "indicator--4c89a615-0188-4e85-954c-6b7953cc2efc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b26b0f3-25cc-4930-bcbe-72fc9d3b9b3e", "sighting_of_ref": "indicator--22be66b8-9a6f-4ed0-a805-31ff97a69218", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4290581-de22-4b3a-9d31-86b457d93923", "sighting_of_ref": "indicator--a8eaf308-5bdb-47a9-85f1-e560b16fff5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fb608b-7597-4b1c-95ce-6ccc1dee3b8f", "sighting_of_ref": "indicator--31eef7e6-9287-492e-b1ad-b787e46207dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212227e4-8eed-4808-813b-ca0425896db3", "sighting_of_ref": "indicator--7f9d1865-b268-4fad-a0ab-0edd00299978", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f87f2f-3b29-4e19-99ef-28b8176f518f", "sighting_of_ref": "indicator--9bfe8d79-faa0-48a6-90e0-f268b20af533", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527e8a8f-835b-4ad1-9b82-37a7b1632a4f", "sighting_of_ref": "indicator--9bfe8d79-faa0-48a6-90e0-f268b20af533", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add580a2-7f91-450a-aaa8-e89c5181b276", "sighting_of_ref": "indicator--6ccfe917-d51b-42ec-8037-d534a1b0fbcb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e265b303-5de8-43ad-b317-480278e82a3c", "sighting_of_ref": "indicator--effdcbbb-89c1-46ee-be11-87095114901d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff0c108-e86b-4d67-bc38-f16bd2083695", "sighting_of_ref": "indicator--17092575-5011-4732-a537-788ba32c5af9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0be1a7-c236-4b49-9c53-1bc74db5e87d", "sighting_of_ref": "indicator--7970074c-290c-44fc-9f6f-63bf2c60135f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4b1b43-4add-4a58-86ea-aab172b14d8d", "sighting_of_ref": "indicator--1867763a-9e48-4906-a1a3-fee71b6199b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df8f40d-4eab-461e-9260-237030dd1367", "sighting_of_ref": "indicator--3f7587d5-4bcf-4856-b16d-58e0545b0200", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfada23-a7df-4208-85b1-1d5deeb4f253", "sighting_of_ref": "indicator--9bbead0b-7786-4cf7-86e8-dd110488e62c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f21459-bae6-4533-beb8-10706409d71a", "sighting_of_ref": "indicator--57fb5e00-b7d1-4bbd-ad93-a005dcb491a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58404b4b-5213-4bcd-96c2-432a34303c15", "sighting_of_ref": "indicator--b036babd-8ef6-44a9-99c9-a73ebf296df1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5a2708-33e8-4245-b68a-b3ba60beefce", "sighting_of_ref": "indicator--756dec52-73d7-4a9e-8a30-5888ce2a5cb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73e963d-162b-46d5-9f37-9864db3faffb", "sighting_of_ref": "indicator--756dec52-73d7-4a9e-8a30-5888ce2a5cb4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978225d2-6cb5-4d13-a637-ce86afa41724", "sighting_of_ref": "indicator--4b5f7fb7-b4fa-4ce7-8f83-acdfa87ddfd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea17aaf6-6cb1-42fe-9269-2a752282ce13", "sighting_of_ref": "indicator--a7752e9f-7a42-4866-96da-9d5230bb0cee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a8cf9c-8c8f-47fb-a587-959452c19b5a", "sighting_of_ref": "indicator--bc07785d-d6c7-4a48-ae12-61fb55bacf99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee11718a-dfe4-4aab-be93-0a6609d6230d", "sighting_of_ref": "indicator--d3ec7218-d72a-4230-beff-6893585fd6de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3f0a61-1dfa-485e-a189-65613fec8fff", "sighting_of_ref": "indicator--dc5df256-0f43-4246-bedb-9fa9ec84e546", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179f4a68-c7dd-42c7-8d28-25e77a869bb6", "sighting_of_ref": "indicator--a05b3fe1-6649-4184-b9ed-7ac4c1597de6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bca1f6-3600-44be-b313-e7a15dab7230", "sighting_of_ref": "indicator--a05b3fe1-6649-4184-b9ed-7ac4c1597de6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a7ce78-6064-4362-b5c8-b50314563ce4", "sighting_of_ref": "indicator--a05b3fe1-6649-4184-b9ed-7ac4c1597de6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94c4032-970a-4d04-a910-3d1963e014fe", "sighting_of_ref": "indicator--49768d29-7ebf-4043-8b0b-0668e300417f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b707b4-2778-4580-84db-3c68334700ef", "sighting_of_ref": "indicator--49768d29-7ebf-4043-8b0b-0668e300417f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c820f9-c19f-4a70-9864-12e4410793b4", "sighting_of_ref": "indicator--98612fa5-10fb-4e3f-b46b-57f35ab6bf67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3713cbdf-6093-4c22-bdb5-4fc21bd95fad", "sighting_of_ref": "indicator--c1e86340-75d0-4055-bb75-aa7864c734c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e173fc9c-ac23-4cb8-be90-d31288ee83b2", "sighting_of_ref": "indicator--4e195642-5f29-4e08-b9f5-b8294a150035", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6827cf83-6437-46e4-abb5-8c85eb3ef37b", "sighting_of_ref": "indicator--90981d94-c8f0-4ef9-a2af-4327c5b92306", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67409391-9725-4db4-b799-336cf85e4780", "sighting_of_ref": "indicator--506d5159-8564-449b-a942-b38ba2c10577", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9982ba14-dda3-4c67-b79d-ea03be878be9", "sighting_of_ref": "indicator--bda58168-ca49-43aa-b72b-1f959256333c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c1eede-982a-444f-9df8-799815cfd9e6", "sighting_of_ref": "indicator--8f0c5d5b-cc6e-442a-86c6-9343756c04da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a528b89-ddf6-4757-811e-e8a49fd333d6", "sighting_of_ref": "indicator--67ce9142-057e-457e-88fc-e8674f9cbe32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bad386-98b9-42cd-8cf3-83ce22363ef2", "sighting_of_ref": "indicator--c0d97566-15e6-447a-a463-616783fa41ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad585639-4c18-4038-bec5-0c2c233d9e8c", "sighting_of_ref": "indicator--1c7d54d3-fbdc-459f-84e6-55110978aa6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0af7f9-f77e-4e50-93ff-d624eb60a6d2", "sighting_of_ref": "indicator--d6748a62-22a0-41ac-8681-6f7c1b0b0008", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4df053-a0f9-4ad6-a214-541e8a43257a", "sighting_of_ref": "indicator--af745b03-3991-4a8c-a740-fcf5d1973936", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ad6d6-5002-48a5-9704-4337aa4934a2", "sighting_of_ref": "indicator--c8800174-2461-4515-82da-54088a513bed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdd60d9-627d-4d5d-95a3-fbfb47da65ee", "sighting_of_ref": "indicator--c663f96f-cb8a-4461-92fb-c10406af7fd3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ec25f0-5495-4a49-b5f5-771dcca0ef8a", "sighting_of_ref": "indicator--737e3378-ffe3-42cc-b798-b695d995c9f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd26fd9-4ebb-4cfe-b9c1-377e141a221b", "sighting_of_ref": "indicator--d1f98e77-2f05-4081-9d58-7080eed82f2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1238d3fb-1aaa-4fd0-bfcc-2b93cd60c780", "sighting_of_ref": "indicator--8742c754-fe0d-4ae8-bdb4-5c907b367c58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cc3206-690b-48f1-b82d-8570742d8579", "sighting_of_ref": "indicator--ef5a94b0-6fce-436d-991c-cbcf08a5ba82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4deca94e-4389-4428-84d7-886a2f724ac9", "sighting_of_ref": "indicator--b2cdc399-3b76-49ff-91d8-7065136d92a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229c6c47-e9cd-4d99-a37d-81ed3fd5d4be", "sighting_of_ref": "indicator--29056bd6-6069-4518-8c11-0ca7aab06508", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d55db19-2b21-4f5f-8bff-b83535a462f3", "sighting_of_ref": "indicator--773faad0-f0db-4c52-bbd9-30283676ab65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b956701-9541-4a6c-a77d-6b1c7c49c47f", "sighting_of_ref": "indicator--f5385740-1054-499b-9f32-7b82b6acca24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec21b3-db33-4336-a10e-9b57e8a3b117", "sighting_of_ref": "indicator--fc736c7a-536e-4bdd-90f9-984057aa49d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774f7943-0992-4c0b-90db-3ba4212bf2ce", "sighting_of_ref": "indicator--fffdbd4c-1e23-4658-9082-43736f2f6349", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed28499-2078-497c-b139-bd530c61033e", "sighting_of_ref": "indicator--e6bef4b6-9046-4aec-94b5-e5716acc93b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98ff7cf-6347-4ae8-aa5c-4a9d3745c8ef", "sighting_of_ref": "indicator--e6bef4b6-9046-4aec-94b5-e5716acc93b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ba2cc6-2df8-458d-8ba4-b5811a3b797c", "sighting_of_ref": "indicator--e6bef4b6-9046-4aec-94b5-e5716acc93b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6abfc69-36d5-479b-882b-7c922d2d8227", "sighting_of_ref": "indicator--dace3740-3af2-4a05-9c35-b54c318bf6eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb269b-c048-455d-a6dd-54b80141f7b5", "sighting_of_ref": "indicator--dace3740-3af2-4a05-9c35-b54c318bf6eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6857cc-21a8-4989-ad8e-b7fdbe8f1999", "sighting_of_ref": "indicator--dace3740-3af2-4a05-9c35-b54c318bf6eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45581d5-930a-474a-b677-6efcd660b58c", "sighting_of_ref": "indicator--e0769b18-67eb-4afe-8e99-8f7a065828af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53844996-328a-45b9-bcd3-5473d85666c5", "sighting_of_ref": "indicator--4475d68e-c735-4fb9-b1f0-283777372cc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e206782-e810-4489-9dd5-cb909a835a45", "sighting_of_ref": "indicator--31d1a0fb-21a6-4a4a-a3f5-689e2f0ab09e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7cf349-3583-401c-9f12-6f86aca23fdc", "sighting_of_ref": "indicator--ee0f4461-2456-4c1b-b5ca-87cb14fc4fb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fef853-c377-4657-936a-d3838626e003", "sighting_of_ref": "indicator--ee0f4461-2456-4c1b-b5ca-87cb14fc4fb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814a427c-db20-4f7c-99e5-3daa995ee611", "sighting_of_ref": "indicator--ee0f4461-2456-4c1b-b5ca-87cb14fc4fb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f9e167-4145-4e78-88be-d824b137000f", "sighting_of_ref": "indicator--bba5a440-f151-4ad2-91a4-51ba7c1f795e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29277f74-4da6-4791-8567-5a620bec35ad", "sighting_of_ref": "indicator--bba5a440-f151-4ad2-91a4-51ba7c1f795e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7014466b-e1d3-4ba6-86d8-92d7d6c1a7e9", "sighting_of_ref": "indicator--bba5a440-f151-4ad2-91a4-51ba7c1f795e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f722c31d-e53c-44a6-9bdc-64967c3fc3cf", "sighting_of_ref": "indicator--b8507dd3-3f5f-4839-8405-454e3ada27ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6589241-102c-405d-810f-abdd3fa2483b", "sighting_of_ref": "indicator--b8507dd3-3f5f-4839-8405-454e3ada27ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc6b01-8446-491c-8c01-4cedf79df994", "sighting_of_ref": "indicator--b8507dd3-3f5f-4839-8405-454e3ada27ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba1093-18bc-475b-81e7-e2f29e423f66", "sighting_of_ref": "indicator--705e8bb2-2052-4e21-9e8e-bd829a3fb720", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a4fe09-dc62-455b-9812-4fafc3860135", "sighting_of_ref": "indicator--25fe1718-f0ca-4240-b5db-78582d79595c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea18877-58cd-48a2-a123-d70b9e2a5fc0", "sighting_of_ref": "indicator--ab11ba75-a70e-4d32-8715-2d8e1d5f892d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3347efdc-ec46-4f00-99e3-47d957568c72", "sighting_of_ref": "indicator--fe79ec55-fc9f-461c-b892-03c4d648f6b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f1cd5c-ca69-438c-88e7-c992debb2938", "sighting_of_ref": "indicator--1ebb0007-ff04-4ec1-9f50-7bf79e4d5bef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6b35f9-6696-4bd9-8d29-85d4e7eaf1b6", "sighting_of_ref": "indicator--23a2872b-d00d-40ac-a4a9-823ae42a51f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec7b451-49ab-47ab-ab44-1bb575ccd242", "sighting_of_ref": "indicator--b6a5b110-9dc0-4bb5-8a5a-c204917cb213", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba640a14-9fa1-4b66-8d55-159fddb0e4ad", "sighting_of_ref": "indicator--99c09f7c-4297-455e-90e6-45d32c9f5858", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfca06ae-2f75-46ee-9636-1bacf608e327", "sighting_of_ref": "indicator--86f33765-1f36-4200-b67d-9e1912b7cf54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26d15e0-5a5f-48a0-adda-36fc2f8f10a6", "sighting_of_ref": "indicator--05e52d79-d782-446b-bfdb-ad08540fd30c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf38561-f4a3-4796-931b-98cfb26de100", "sighting_of_ref": "indicator--7a89d495-e7bb-4b02-886a-7ebfe8783e14", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91328b42-09da-4d83-8ad4-1db19db852a6", "sighting_of_ref": "indicator--f66d1723-2ae9-467e-afdf-7bd2fef5ffbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dacdc2-3a75-4680-81d4-b189c756c596", "sighting_of_ref": "indicator--01c175be-3bee-4012-ae92-109d0d5669e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f00a310-617e-40fe-b6d3-1a9de328b37d", "sighting_of_ref": "indicator--27858314-3da0-41eb-9c73-f17afdc597a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18d2fbf-c0c8-41f0-889f-fd17402def0a", "sighting_of_ref": "indicator--ce645246-3815-4ba5-aab2-e981d13158d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7785f5-7c00-4ce0-8c35-2fe66807001e", "sighting_of_ref": "indicator--27d70fd8-1db1-4144-8d8e-e476d772665d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f3495f-4884-4968-b252-298b3ef937c7", "sighting_of_ref": "indicator--2b075a5c-693b-4390-81a2-bfde4b4b2e9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ff8583-3c16-4f38-a391-11ef32a113a8", "sighting_of_ref": "indicator--2b075a5c-693b-4390-81a2-bfde4b4b2e9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3184b4a-2fe3-41c2-98de-19a4d9440230", "sighting_of_ref": "indicator--51baf8d0-12a7-42e6-946f-139dc0a06a4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b61d40-fb4a-4dfd-a873-fcd655d90a96", "sighting_of_ref": "indicator--0b41dc5d-a32a-44b4-8d5b-0fe7986e141b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322a0dc8-3c65-4344-b3ec-f2ec6fe8e5af", "sighting_of_ref": "indicator--0b41dc5d-a32a-44b4-8d5b-0fe7986e141b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050b5cb6-dcde-4093-a8ce-aa158edf923f", "sighting_of_ref": "indicator--4c1db7e2-5ae8-47b9-8f85-52a30a93613d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0993bddf-e97d-45c2-9b7a-3859423fb5d2", "sighting_of_ref": "indicator--ba8c2cb0-b420-4a03-8864-b5ce795045a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501b548f-b567-4258-ace3-ea17ab9a252d", "sighting_of_ref": "indicator--f0a4d4d7-f446-46c4-8bb8-498eba455583", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a908d3f-1216-4be0-b672-7ada8e87025f", "sighting_of_ref": "indicator--41c09f63-b768-4ae6-861a-4d519d5ab458", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8d320f-b5b8-4e6e-9184-d2634d4661d0", "sighting_of_ref": "indicator--b768a129-11ab-4b0c-ad56-8185abb2857b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e118e-7507-4cf4-8b47-c7c7d8c27be1", "sighting_of_ref": "indicator--c1d77e58-37bc-42a1-9368-92f5c6ae6855", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb02ab7-9b89-4363-bece-c53e72d97b10", "sighting_of_ref": "indicator--008bde0f-3323-4447-83d6-1c3c572a1e1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4be80c5-7400-443b-a899-9eda842b2e90", "sighting_of_ref": "indicator--e789c3ac-8827-4600-8812-5159b36c6527", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4df7bf-dc3d-4adb-8c3b-e59f304ea59b", "sighting_of_ref": "indicator--8c70ba15-4238-4aaf-9d47-03f796b6f826", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127754e5-1129-4381-9eb9-174490c411c5", "sighting_of_ref": "indicator--13bb7149-7959-4066-94b7-2d2fe3337bc0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbd4b17-76ab-4588-b77b-0e6aee978cf7", "sighting_of_ref": "indicator--757537c4-a6ae-4e70-ad22-a563558e5749", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aed8127-b88e-4de2-a151-407a8a6392ac", "sighting_of_ref": "indicator--757537c4-a6ae-4e70-ad22-a563558e5749", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df848a02-8b98-42d2-ac92-11017cfb5e75", "sighting_of_ref": "indicator--81a4fc83-b20b-4427-9df9-16d2eceb073f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0286b3f2-6d95-4c1b-b572-ef2db7d0d836", "sighting_of_ref": "indicator--ed3fda5e-aaaa-4feb-aaf5-84b81b936476", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd52530-b39a-4cc4-b209-b8334994dd72", "sighting_of_ref": "indicator--30a69ad4-d6bb-40a7-b5f2-ba38c7c8ebc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de90050-cecf-4de5-86ff-91f66fd3d6d8", "sighting_of_ref": "indicator--d3713475-d43a-4b67-9753-572ca99d51bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e631ffe-4a5b-49b4-ba63-be9af6ee4a12", "sighting_of_ref": "indicator--78d98687-dac2-4eb4-ab7c-98d9fe85c20c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a879c7-72dc-4555-bf8c-864afb354311", "sighting_of_ref": "indicator--78d98687-dac2-4eb4-ab7c-98d9fe85c20c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce3f78a-e5d8-4ff3-a20e-fefa9843822e", "sighting_of_ref": "indicator--ea431654-7dc0-4867-a9d8-d9272d9779b6", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a204659d-ba85-48ab-a1dc-3561a6a8cd15", "sighting_of_ref": "indicator--1cac8528-10e6-4088-ae71-972f17196513", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592549a-c283-485f-a059-245f1cc5e88a", "sighting_of_ref": "indicator--612bbbfd-bb36-466f-8497-5cac83150aab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d120f30e-4ec5-424d-ae01-2761c55c3852", "sighting_of_ref": "indicator--612bbbfd-bb36-466f-8497-5cac83150aab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764f0e63-b91c-40c3-b78c-6034aa19af17", "sighting_of_ref": "indicator--612bbbfd-bb36-466f-8497-5cac83150aab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd30f0d-eb00-4b2e-b71a-3a378dd47770", "sighting_of_ref": "indicator--90c97a27-050f-4d65-8299-913ddb9d5c05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacac494-bffb-4971-802f-4b664b70f830", "sighting_of_ref": "indicator--bc2b4f05-7bff-4d4d-9e33-ed77874c9281", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf61778-7b8b-4267-a8db-f9a88f4d6428", "sighting_of_ref": "indicator--9bd14eb7-f469-4ad6-9e86-523dd28f8edc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d444f02-a020-4e97-8ecc-e2d9dce7f847", "sighting_of_ref": "indicator--9bd14eb7-f469-4ad6-9e86-523dd28f8edc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444870b2-ddb3-49cf-8f68-a5404d0e5a91", "sighting_of_ref": "indicator--9bd14eb7-f469-4ad6-9e86-523dd28f8edc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b633bb-05de-4d88-a322-17b1f7b76886", "sighting_of_ref": "indicator--891385f4-ffd0-40a8-9834-b8862a168766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033d18a0-8725-4cca-b9db-91f01ed5744f", "sighting_of_ref": "indicator--891385f4-ffd0-40a8-9834-b8862a168766", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71416710-f8f3-45cc-abe8-dc83aaaddd50", "sighting_of_ref": "indicator--891385f4-ffd0-40a8-9834-b8862a168766", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1e70c7-1e3b-482a-a207-e2ab70c80dd1", "sighting_of_ref": "indicator--4ee2788c-035d-47f0-8bca-ea507e84feaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101595dd-efaa-4670-b883-91b121901a0b", "sighting_of_ref": "indicator--4ee2788c-035d-47f0-8bca-ea507e84feaa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce182ff-c59a-49a6-ad31-f1e6da2ba99e", "sighting_of_ref": "indicator--f23e280b-8a04-468d-92b7-e55df42e6ddd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7bffe1-2252-4679-8f4e-8bae614aed36", "sighting_of_ref": "indicator--126f3628-24d9-4be5-aae5-1aa3fe914444", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc6086-463c-486a-9743-15c21ee57dd2", "sighting_of_ref": "indicator--d8df0c5d-e312-4cfe-8706-4c5702842244", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3505c0-ec73-488e-b767-c81dcd65442b", "sighting_of_ref": "indicator--c82db79a-4518-41bf-80a2-2a70050880c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2c480a-6ff5-410e-bda7-593ab9e8b59a", "sighting_of_ref": "indicator--c82db79a-4518-41bf-80a2-2a70050880c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fe69ca-96fc-43c1-952a-780489ead96b", "sighting_of_ref": "indicator--c82db79a-4518-41bf-80a2-2a70050880c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f04602-43cb-4e13-a773-629ed6050849", "sighting_of_ref": "indicator--e822087b-eae7-4df9-838b-6c7c17a76182", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b991b449-8e1f-487c-a693-5992a3621696", "sighting_of_ref": "indicator--dd40ee00-e75b-4cf0-98af-440f0651ed81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9698fdfa-3f59-46fe-8423-1ce8e58449b0", "sighting_of_ref": "indicator--48d65082-3b3b-4e25-9c68-3e9e2ce8503a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65a5b4c-111f-49ad-b996-e7e461df4e7d", "sighting_of_ref": "indicator--6c515b49-82fe-4373-a01b-28dcc01a6ea3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49016d6f-eda5-43b7-ae65-a2a93c48e200", "sighting_of_ref": "indicator--afdc1f1c-87df-4e73-a599-f4d6e1c74f0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a906949b-9621-42df-9027-c65f132fb033", "sighting_of_ref": "indicator--cf494470-19d1-478c-a1a5-ed58c395ec35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47cba00-0582-49fd-bd3f-4f836d700997", "sighting_of_ref": "indicator--3606e433-9ab4-4d1c-8d0a-6a0e78eb1a5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd939d38-0289-4821-a200-7ce987f83c87", "sighting_of_ref": "indicator--0d2bc57c-a039-4824-8e12-f5d3d64b9445", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3fa73f-f421-48a8-bd8f-f85e3a2484f3", "sighting_of_ref": "indicator--a49de235-e11e-4420-84f1-f9b1a5e0ce09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fecf5b-2944-4097-b565-6355ac13a935", "sighting_of_ref": "indicator--6e683a0d-9dfb-44b2-b82b-c7d53eeea124", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02871f1a-4c80-4aa0-8260-016ec1670dcf", "sighting_of_ref": "indicator--44fe6a68-87c3-4baa-ab5f-b353dd79d280", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01248b88-138b-4d4d-ae54-19c7e088bc07", "sighting_of_ref": "indicator--44fe6a68-87c3-4baa-ab5f-b353dd79d280", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7889fb00-9625-4370-97e5-5d8b01b86f34", "sighting_of_ref": "indicator--44fe6a68-87c3-4baa-ab5f-b353dd79d280", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93eaa6fe-dfb6-442d-878b-bcb04f5473c1", "sighting_of_ref": "indicator--407100c5-9cc5-4dcd-97c6-b991e2e6e459", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21707840-8cfa-4c5b-84f9-323d3b4d3b68", "sighting_of_ref": "indicator--9423a2bf-1d55-4c67-a129-6a084e1ee090", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6523cb7d-2c80-4f59-9698-0433a0959395", "sighting_of_ref": "indicator--b115a5a5-a7c7-4005-a66d-89e500eb796e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3d02b8-4eb3-427b-94ee-b956b9776845", "sighting_of_ref": "indicator--aa09fc15-666b-45e6-90d2-c5b6841849e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25421449-575a-46b0-aa9c-1a168b0a562c", "sighting_of_ref": "indicator--1eece303-79f5-43e1-bace-b94f6d9a7590", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e784773-7f4d-4729-af92-2fa8b45b8344", "sighting_of_ref": "indicator--38c06710-6576-4e15-87a7-6e32caf7b716", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79877615-8b97-40ba-af3e-c507dee59983", "sighting_of_ref": "indicator--38c06710-6576-4e15-87a7-6e32caf7b716", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24017cbe-d17d-48c2-8497-f65f4bda07e0", "sighting_of_ref": "indicator--3ab988af-6a90-4720-9bd9-4da10d853b50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00275723-1935-4a22-bea0-db05be29b4d5", "sighting_of_ref": "indicator--7a2f5491-ee63-4c6c-a752-2e9e7d7a8a8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adba3993-09c3-40c5-b712-b797506d45f7", "sighting_of_ref": "indicator--7a2f5491-ee63-4c6c-a752-2e9e7d7a8a8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9a4805-8a2e-4e70-9ea7-01178dd2a009", "sighting_of_ref": "indicator--deccec3b-65c4-4d89-ba7c-6bb1edb1b01c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2025ae63-9e8d-4bb7-82f5-93a8ba3756d7", "sighting_of_ref": "indicator--3619190b-36be-4663-9166-6d25b3456ac6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823e816e-01ba-4478-a304-218ba39e1719", "sighting_of_ref": "indicator--80e51bb4-c5ed-4572-9e3b-bbe7dfdda24d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc17d114-cbac-4bdb-84ec-979345417f66", "sighting_of_ref": "indicator--9b37c834-20a9-459d-976e-93a83e13061a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11590575-843c-4e95-9c01-17bcbfb7cb33", "sighting_of_ref": "indicator--2ed04af4-a762-439e-9141-275200907f94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817cd3ca-87db-4c3f-a903-9b542d6f23ed", "sighting_of_ref": "indicator--dddd4af4-2235-4b3f-8b4a-6fcfe76a83c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32652082-3718-4907-bdd4-c88849292eaf", "sighting_of_ref": "indicator--dddd4af4-2235-4b3f-8b4a-6fcfe76a83c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b02e1dd-d51e-4c70-9f7f-1061051787b8", "sighting_of_ref": "indicator--30256e11-2c83-42e2-8903-37a3ae135400", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bf15ae-9901-4cec-a23b-482349009d1b", "sighting_of_ref": "indicator--bad2c652-fd04-4b60-8b5e-c1a8eed8b9b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141420e3-305c-4b0d-a4bf-526524ad2563", "sighting_of_ref": "indicator--bad2c652-fd04-4b60-8b5e-c1a8eed8b9b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be16fa25-8a8d-49aa-ac13-a1682b99093b", "sighting_of_ref": "indicator--77c5ef07-a3d7-4796-9708-2351d432dfeb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0d03b6-597f-402b-88da-19958253e4e0", "sighting_of_ref": "indicator--77c5ef07-a3d7-4796-9708-2351d432dfeb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff5fb50-51cc-4087-ba5a-d10892441c47", "sighting_of_ref": "indicator--fe075415-a779-48ea-a583-9b0eb2cfa1d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491e90b2-39f8-4ae2-9950-66ca61f7e25a", "sighting_of_ref": "indicator--0ce8c6e6-18d1-4c7b-a5df-2aa03f422c17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f94619-16d4-4f02-85e7-ffa3cd2180bf", "sighting_of_ref": "indicator--62346638-d1b6-4632-aea7-73e069464f93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89143428-fd7d-4726-90e6-dfaf59b1e986", "sighting_of_ref": "indicator--62346638-d1b6-4632-aea7-73e069464f93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07ff70f-a150-409f-96f1-2add0685e61a", "sighting_of_ref": "indicator--62346638-d1b6-4632-aea7-73e069464f93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed54d159-2ca7-4f3a-88dd-1a82baacf1b4", "sighting_of_ref": "indicator--82917317-7d8e-4970-9dda-c185828b7985", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d445e50-90f9-4c26-91da-150201d6ea50", "sighting_of_ref": "indicator--82917317-7d8e-4970-9dda-c185828b7985", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fb117b-705f-4799-aa10-5a27bfbabc1a", "sighting_of_ref": "indicator--82917317-7d8e-4970-9dda-c185828b7985", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394d76c8-5d35-4998-a736-12abf93b85e8", "sighting_of_ref": "indicator--549e644a-8ac0-4216-8dad-6b85a1de7e14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6232dbcf-0739-4f55-97d9-c0101be5732b", "sighting_of_ref": "indicator--549e644a-8ac0-4216-8dad-6b85a1de7e14", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d957a6-290f-4020-bd24-d373947f2dc5", "sighting_of_ref": "indicator--0a4c94be-2ec8-4304-86ce-a2edc69c2125", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d8aaa5-725e-484b-8a3d-15b4d9537d21", "sighting_of_ref": "indicator--0a4c94be-2ec8-4304-86ce-a2edc69c2125", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9c69b4-1bf3-49a0-8d2d-e81e00b5569c", "sighting_of_ref": "indicator--0a4c94be-2ec8-4304-86ce-a2edc69c2125", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffccaee0-f626-4bd9-a0cf-b299f3c6c306", "sighting_of_ref": "indicator--908e6cd2-d328-461a-81e4-cf9bf14c940a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe7be12-b3b5-436e-9e74-1d9ae20036ac", "sighting_of_ref": "indicator--908e6cd2-d328-461a-81e4-cf9bf14c940a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c36ca-6086-4eed-9d9d-1a7e7a7fd874", "sighting_of_ref": "indicator--16738405-5a73-4c43-9c43-354e8d627222", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3119fe84-5082-4762-932f-af796d4e07d2", "sighting_of_ref": "indicator--16738405-5a73-4c43-9c43-354e8d627222", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00eadf4-b716-493f-9356-c12dbe339644", "sighting_of_ref": "indicator--17f9cfed-af3b-4e4f-ae96-ad9cf09b2bd1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d219c5f8-3d26-4ab3-94b3-072c0818856c", "sighting_of_ref": "indicator--9f4cb8ec-fe35-4e35-b01e-0c70db1f06b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837a90d0-d69f-4e55-851a-7c6c81134d73", "sighting_of_ref": "indicator--8fcdc32c-e576-429f-89cf-2f892136e102", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06de03b9-97c9-4b4b-a8bb-0e51b4fb5b24", "sighting_of_ref": "indicator--39afe064-da5d-4126-af4f-757fe60c595f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd54237-228f-4446-9dd7-bb5d4a42faaf", "sighting_of_ref": "indicator--bf42e82d-7fb4-438c-8946-cacb5a97eff8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994d0a6d-7bda-4bf6-9495-a93221f3ae20", "sighting_of_ref": "indicator--bf42e82d-7fb4-438c-8946-cacb5a97eff8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6592dc-e805-4759-a8f7-7caf60ffb7bd", "sighting_of_ref": "indicator--a5f88d75-982f-47b2-95c1-4d83b086f180", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3e2327-fe5d-4fcf-a1b2-ef5ecb50ac4f", "sighting_of_ref": "indicator--a5f88d75-982f-47b2-95c1-4d83b086f180", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da234382-1d1e-498c-911d-906ec70c6e08", "sighting_of_ref": "indicator--a5f88d75-982f-47b2-95c1-4d83b086f180", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d793cca4-53a0-4572-aad9-df143f96bdfd", "sighting_of_ref": "indicator--c44ea662-114c-432b-85ab-5ba393e303cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3754f9-63c2-4ec5-8af6-5220a73cfb00", "sighting_of_ref": "indicator--c44ea662-114c-432b-85ab-5ba393e303cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f62e98-054c-43b8-8f21-b3b2cacb1e60", "sighting_of_ref": "indicator--5d974a99-4cf4-45b8-834d-8a706a812c5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a454e785-5c28-4080-9633-7176f9180948", "sighting_of_ref": "indicator--5d974a99-4cf4-45b8-834d-8a706a812c5c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7b7c6a-f6d7-48ba-aa33-023a8988c51d", "sighting_of_ref": "indicator--a702cd0a-2117-4389-ba7c-29964824efe1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5748a019-16fa-429b-81f8-5ec3907d0cf0", "sighting_of_ref": "indicator--4f6e5a52-b08e-4d41-9ee9-0531f8e5b238", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d350abc-c0b2-472f-a8c4-38371ffbaf55", "sighting_of_ref": "indicator--f71e645a-b420-41c9-a304-df6570275d42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0514e3e-c2e4-43b4-bb42-5f9082a5c269", "sighting_of_ref": "indicator--f71e645a-b420-41c9-a304-df6570275d42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72821a3e-480d-40a5-9208-8dcfa5fc5ee4", "sighting_of_ref": "indicator--f71e645a-b420-41c9-a304-df6570275d42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0913aa38-fa0b-4d36-9229-bb7cf0775ae6", "sighting_of_ref": "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1407a8a-a8d9-4f3e-ac64-479c967e7699", "sighting_of_ref": "indicator--aee44830-b663-4ba7-a424-9632ea5606d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b344748-8336-47f2-8fbd-9e5386bb8e0b", "sighting_of_ref": "indicator--8f28403c-14ce-416a-9692-4e917ecb9b8b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a374fd-fe77-473f-8fd6-aa5876124275", "sighting_of_ref": "indicator--8f28403c-14ce-416a-9692-4e917ecb9b8b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d28abfa-425d-4a5b-912b-987b824a9317", "sighting_of_ref": "indicator--8f28403c-14ce-416a-9692-4e917ecb9b8b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfe56b8-ebc9-4fb1-89d4-ce5554308b9e", "sighting_of_ref": "indicator--e4403c84-8386-44f8-9824-f5bc0534e12f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813b54a0-023f-44b2-97d8-7573ebeb6376", "sighting_of_ref": "indicator--e4403c84-8386-44f8-9824-f5bc0534e12f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fd617a-540f-4880-a703-9c26e95d41f9", "sighting_of_ref": "indicator--85051681-7c28-4a8b-88c1-6e927c89ec42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f044d3-4b6d-44ee-ad84-d224e6f87937", "sighting_of_ref": "indicator--33ab0cf2-b6cb-4ccc-876f-318967870094", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0b3069-b599-4bb4-a332-996651292e84", "sighting_of_ref": "indicator--33ab0cf2-b6cb-4ccc-876f-318967870094", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f0cac5-abd6-491d-8260-94f7538b66a1", "sighting_of_ref": "indicator--33ab0cf2-b6cb-4ccc-876f-318967870094", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3166c1d7-d89f-421a-bca2-5ca9b0da52d3", "sighting_of_ref": "indicator--d75ce6a0-cf97-4d7c-bf33-f5489e171f29", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312dd675-7ed2-420b-a153-aa4564f29081", "sighting_of_ref": "indicator--5f363550-b8b6-49cb-9db0-0b6c2a726151", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995d8226-3d0d-4f9a-8a80-de3cbff6578e", "sighting_of_ref": "indicator--6edd50b9-607d-4681-aaa6-5a9c0b963d58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f05e83c-8e16-4616-96de-5c1f238af4ab", "sighting_of_ref": "indicator--6edd50b9-607d-4681-aaa6-5a9c0b963d58", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b8019b-c601-4636-a212-f50258aeed84", "sighting_of_ref": "indicator--1a0ad370-043d-4143-a9ad-71543d86d31d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f40a205-f5ec-4b67-b6aa-37f1765ec7e4", "sighting_of_ref": "indicator--36b506c1-53c6-48b5-90a0-3c4d14b62041", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080d0b7f-17be-40d5-bdc1-8717a2949be3", "sighting_of_ref": "indicator--36b506c1-53c6-48b5-90a0-3c4d14b62041", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b32f6b-b352-4cff-a9a2-8561d2de8a02", "sighting_of_ref": "indicator--424444ad-dac4-4b42-8c82-d5f44352d42a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa26d4a2-df86-4b90-9649-deb2529aa795", "sighting_of_ref": "indicator--424444ad-dac4-4b42-8c82-d5f44352d42a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fe53e3-70d3-4c46-be06-342037c6338b", "sighting_of_ref": "indicator--ae2caeaf-8131-4be2-9c7f-24c49bbd6f7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c79d10d-f5ba-48b0-8b03-79237ee89b00", "sighting_of_ref": "indicator--a7e06c98-3175-470b-866e-13ab86bb9b0a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16211a3b-c45e-4a80-9f88-27c112f6638a", "sighting_of_ref": "indicator--67c3944c-8e96-4609-aa76-3a9aaed04d2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b864ab02-8abd-4730-afdc-c6db9270d973", "sighting_of_ref": "indicator--9ee91669-28f6-45f5-a8c5-a8c535e587e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5065ed42-2b14-4185-8a99-97d6db66f34c", "sighting_of_ref": "indicator--2bab646f-5fae-47d9-b70e-5331ca5c6df9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5314d9f-aceb-418b-b588-80b0b40316db", "sighting_of_ref": "indicator--1c81c38f-c5a2-4b80-a9a7-ca59d93e7341", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed079a60-d97a-4b3d-ac72-0615f72cee56", "sighting_of_ref": "indicator--a7b4377e-5ada-47ae-9e66-59fb8b543b5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651a3a51-5eb5-4a2f-a519-4fa517c7628b", "sighting_of_ref": "indicator--57e36f83-556c-4454-b0cc-90dbb6f5e6c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b680ea14-5224-4909-903b-fd1a6f7caaa5", "sighting_of_ref": "indicator--57e36f83-556c-4454-b0cc-90dbb6f5e6c6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432289b3-5bcf-4e84-8afb-62c3dcf87c87", "sighting_of_ref": "indicator--57e36f83-556c-4454-b0cc-90dbb6f5e6c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314cb58c-fe2c-4b11-8359-bb57d04f400b", "sighting_of_ref": "indicator--b1a0fad7-32c1-457e-9157-d7bfeca65536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657eb6e7-03b5-4c1e-a58e-10762f66286d", "sighting_of_ref": "indicator--27db46dd-d429-4031-a2f8-fbdb7f7b8a36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43736c2-cf6a-42ff-8037-e0b6e135362f", "sighting_of_ref": "indicator--6fb268b1-eedf-4111-8676-98f9ba54ea83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5c3432-ca37-47ea-a2df-d4cc61ca61a5", "sighting_of_ref": "indicator--6fb268b1-eedf-4111-8676-98f9ba54ea83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2b4ba1-eeb3-4a84-b232-db1d89fc742d", "sighting_of_ref": "indicator--6fb268b1-eedf-4111-8676-98f9ba54ea83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856ad7be-67f0-4c7b-b3d5-473ec08bca6f", "sighting_of_ref": "indicator--5883ad19-a66b-49c3-80d2-2ccacc82dbd9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fd616e-2541-4232-8881-b3e54bed5d4b", "sighting_of_ref": "indicator--35664010-49c7-4ef8-b505-4493c182c36a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c9b1cc-426f-491c-8f71-2a970d5c34dc", "sighting_of_ref": "indicator--55ed9382-28d2-489e-9894-b3fb151e59be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10609581-6507-49d0-a146-c3e129e7ec4b", "sighting_of_ref": "indicator--c2831d45-0c51-4975-92d3-024839954e4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc42467-d684-4fc5-b39c-77a7bcd00a89", "sighting_of_ref": "indicator--9a1afc2a-de44-4582-b5ab-9cc57876f00f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e3bf72-581b-4c86-96d1-b80d02645670", "sighting_of_ref": "indicator--06128337-5a32-4982-8d0b-abb450379d52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737ceea8-56a9-4a1e-8b74-509fb38e79b3", "sighting_of_ref": "indicator--08faa2e2-aae8-4f62-9883-8bfe7569c80a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b5e5e0-1a41-4525-8bef-3a50f9d6899e", "sighting_of_ref": "indicator--4d27e804-0c3b-4dbc-a69d-709ccfd1b18a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c756805-fa05-4c3c-aa09-8b7dbaf996be", "sighting_of_ref": "indicator--4d27e804-0c3b-4dbc-a69d-709ccfd1b18a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ea8a05-1de2-4f26-b061-cedddbf4e6de", "sighting_of_ref": "indicator--4d27e804-0c3b-4dbc-a69d-709ccfd1b18a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac94659-c548-4bbc-a42d-f40ea1e09a3f", "sighting_of_ref": "indicator--426cb2d4-2d49-4e05-958c-6cb58da2b2b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad052fc-2ef5-4e10-8aa9-47c63fa35998", "sighting_of_ref": "indicator--426cb2d4-2d49-4e05-958c-6cb58da2b2b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564f02b7-6467-44ff-aaf5-73878bd712f8", "sighting_of_ref": "indicator--8fbd58ef-1647-448d-bade-9edbcc54ed87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4e84a7-bbfc-4dc4-a1fa-771a5162e2c6", "sighting_of_ref": "indicator--865edc3f-707d-4915-93c0-c85277cdadcc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75306140-ea52-4fd6-98ba-3ebc67929082", "sighting_of_ref": "indicator--2a1cddac-27b8-481b-b0db-ded10783aeb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a131325-9232-495f-91cc-b617f72c74f6", "sighting_of_ref": "indicator--2a1cddac-27b8-481b-b0db-ded10783aeb3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd8996a-ad63-4614-9ca8-6145347e6754", "sighting_of_ref": "indicator--2a1cddac-27b8-481b-b0db-ded10783aeb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58b5b9a-dcaf-43c3-88ea-5ead8977ab0f", "sighting_of_ref": "indicator--cbc0303b-5186-4706-98cf-41222fc98981", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741b2b8e-996b-412a-8fcc-6bd3b949c7bd", "sighting_of_ref": "indicator--cbc0303b-5186-4706-98cf-41222fc98981", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f53fd1-e2f1-4700-8029-c7e76920c3aa", "sighting_of_ref": "indicator--b7b73f01-a592-4a4a-a504-72d3ca84d208", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5da1903-32b1-4ea3-9111-601f12f12bd9", "sighting_of_ref": "indicator--ce44d723-2448-4d73-9a06-bd4fbc5489a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73396642-f372-44f3-a39e-13c486457f0f", "sighting_of_ref": "indicator--7f17ca16-30ac-40e2-a392-51113c0757a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce81f79b-3c7b-4bdb-a45d-85cbe8dadd3f", "sighting_of_ref": "indicator--e1e7c297-215b-4688-905f-4b0c731e274b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a120099-109a-40c2-bd5d-f3b880293425", "sighting_of_ref": "indicator--e1e7c297-215b-4688-905f-4b0c731e274b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82815904-26bb-4a38-87ad-69ffa16b8159", "sighting_of_ref": "indicator--e1e7c297-215b-4688-905f-4b0c731e274b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e54159c-a292-4b35-834e-2b71c27c6800", "sighting_of_ref": "indicator--c2c4478b-47d0-4113-8c09-ca601a1ca750", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2602ba63-46f5-4845-9efc-80cb6032c19f", "sighting_of_ref": "indicator--830a154c-116e-4371-8b7c-9c6e9b16ac5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32c78f3-fb2a-44de-a4f0-470fb916704f", "sighting_of_ref": "indicator--830a154c-116e-4371-8b7c-9c6e9b16ac5d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3c8e16-1fcd-4036-9995-c097b54aa6a5", "sighting_of_ref": "indicator--817eade0-5c49-4edc-bf27-7cca3bf80416", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f545f-3c68-49f6-97ef-a18dc72fba93", "sighting_of_ref": "indicator--cc9b6ef0-8ee4-4777-b1e2-318bb1d47abc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ad56fe-4385-4b53-83dd-fe98888e7cba", "sighting_of_ref": "indicator--cc9b6ef0-8ee4-4777-b1e2-318bb1d47abc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c9b78-ea3b-4183-b1dd-9d1a7ae954e7", "sighting_of_ref": "indicator--cc9b6ef0-8ee4-4777-b1e2-318bb1d47abc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76aad8e-0f2e-475e-af78-9341b118d371", "sighting_of_ref": "indicator--23ac77de-fe4e-4598-8e79-2930fca8e3cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a2c534-cdc2-481c-acb0-dc6a18c4d8eb", "sighting_of_ref": "indicator--23ac77de-fe4e-4598-8e79-2930fca8e3cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed10346-2aae-4ce0-a231-85007677bdf2", "sighting_of_ref": "indicator--23ac77de-fe4e-4598-8e79-2930fca8e3cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1cdb05-0342-4c8f-a226-1f647486b0f4", "sighting_of_ref": "indicator--f55ff99e-f9f9-4daa-885a-0fca27b6faf8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c600f2-d665-47fd-9788-cd008ef2b9a9", "sighting_of_ref": "indicator--aadc537b-0ab2-40be-a5f2-13b425567db1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801996e9-78d4-499d-9158-211a4b73e412", "sighting_of_ref": "indicator--8d6ac024-f8ab-4766-ae47-84424b67444e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e913c231-3a9a-455f-aeeb-36cbe301ea1d", "sighting_of_ref": "indicator--90a856a3-aae5-4303-abeb-61e3f00a6ebd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9997352-41e9-41d9-8d92-f71f926988c4", "sighting_of_ref": "indicator--f0d655a8-c3a5-440e-b18b-668ace9f00ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bd6d59-e3c7-4218-89d6-02181de2b629", "sighting_of_ref": "indicator--347922d3-9c07-4468-b33c-8571670f6d7f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7fa65-96d7-4186-9a89-3e0f20afa7e2", "sighting_of_ref": "indicator--d14c0965-92ff-4090-b4a4-cd4025bead74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b397db15-deac-4476-b558-dcbe6da6c6c6", "sighting_of_ref": "indicator--d14c0965-92ff-4090-b4a4-cd4025bead74", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9f22b7-e8ab-4544-860e-0416a2de2322", "sighting_of_ref": "indicator--34971050-9dbf-49c8-a53f-8429de2025db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c237be4d-6eef-43e2-be59-6acfabbf0c3d", "sighting_of_ref": "indicator--c798ccad-197d-4bbd-a12a-fe5e3ac4eaaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea264f0-0d96-427a-8063-715483910ccd", "sighting_of_ref": "indicator--cf7eacad-0ed6-4285-bc34-33cdb3d29b72", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8f96ef-b1b8-4aca-92dc-746412aa6528", "sighting_of_ref": "indicator--30497fd6-7f15-4073-95b8-72846e476b73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd66239-ec30-4169-bd9f-76863acab14b", "sighting_of_ref": "indicator--6384238d-bdd0-4bc0-8651-fffa2bd59286", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb2e1b6-d935-4c9a-9248-6c1f3561580b", "sighting_of_ref": "indicator--6e4bac7c-f730-48d3-894d-37f32ae71ce1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd61b77b-8fb9-4560-9033-2d9f2a55dbff", "sighting_of_ref": "indicator--6e4bac7c-f730-48d3-894d-37f32ae71ce1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a3535e-e4f2-4b3f-a512-2a370c4e6ae3", "sighting_of_ref": "indicator--6e4bac7c-f730-48d3-894d-37f32ae71ce1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4de55b-40a4-413d-a3cd-23d440c877e6", "sighting_of_ref": "indicator--3ff07d56-8d01-46c6-9871-f5a998479947", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8054782e-f45c-452b-ab6a-094b9658c64c", "sighting_of_ref": "indicator--3ff07d56-8d01-46c6-9871-f5a998479947", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b79847-1832-4abe-9da2-39219e9e78ec", "sighting_of_ref": "indicator--3ff07d56-8d01-46c6-9871-f5a998479947", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57220546-4995-4087-8624-c4591d8b677d", "sighting_of_ref": "indicator--6b6ae1ee-4fee-4438-8d7a-26c4d30914a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b1653c-3ffd-430b-8451-637721cd009d", "sighting_of_ref": "indicator--3023363a-f33a-4f68-a36f-ebbe2b427d96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8ce13b-7663-48a2-87c8-d8966dedc3bb", "sighting_of_ref": "indicator--289a63b6-857f-4be7-9a98-03ab38921a71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c789c7-ef5a-463c-b96f-efb2b3ce39ed", "sighting_of_ref": "indicator--40890f97-0c79-4b67-ae87-de6ab754dd23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665efc74-06da-4d89-8dcc-6b34b3adae34", "sighting_of_ref": "indicator--a58f87a9-cbc4-40ac-967f-2738d6c3eca4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f33e0ce-3ac9-4597-9c95-4a9c32852977", "sighting_of_ref": "indicator--0a2bd9a6-a648-49b8-9e66-8c02966d2e52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a092de-9ef6-4ccb-849d-3bc78f1fffec", "sighting_of_ref": "indicator--0a2bd9a6-a648-49b8-9e66-8c02966d2e52", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a429d37c-cb36-4838-8e99-d78888aa6a18", "sighting_of_ref": "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de22fd80-cd95-447d-b1a1-21d35a649d46", "sighting_of_ref": "indicator--0599e1ef-960a-43ec-8efb-22ef982424f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb81916-b14e-4c2e-bb6e-598a598cee90", "sighting_of_ref": "indicator--1dd6d7a3-2765-4eca-9e13-8593b61caf0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f165cbd7-3f7c-44de-a25f-a5effe50c4c5", "sighting_of_ref": "indicator--1dd6d7a3-2765-4eca-9e13-8593b61caf0b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b05fc5a-810b-4088-b5bb-ef7bd9d20105", "sighting_of_ref": "indicator--1dd6d7a3-2765-4eca-9e13-8593b61caf0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af238d05-9be0-4af3-97eb-f5413eb1479c", "sighting_of_ref": "indicator--84e82521-eada-49a6-a235-00d08a29bb5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da19d9c3-6ca5-49b1-936a-a9f7d427b7c5", "sighting_of_ref": "indicator--8091122c-5a93-4c5f-bd76-961da2596e1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daea664-0753-434a-a6f6-16b3a1b57baf", "sighting_of_ref": "indicator--46c29a8a-6ff0-454a-9c32-259a280a2533", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5435d3c2-b576-4714-abb8-ef5ca499cbe4", "sighting_of_ref": "indicator--1f41481d-1363-4519-8323-71eaf220b843", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eed2df-61a8-4269-bb48-79f09d8ced72", "sighting_of_ref": "indicator--c602a88b-4583-4dbe-8c8b-876c58bef982", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aa9ee7-2da1-4a53-aead-db57823d2932", "sighting_of_ref": "indicator--a3c88d61-53ef-419d-b0a8-3c1a5e7e0fee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84000950-480a-447f-836f-899f9e826f20", "sighting_of_ref": "indicator--a3c88d61-53ef-419d-b0a8-3c1a5e7e0fee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c913d8-a10c-46bc-8b7a-40d99c8a6d88", "sighting_of_ref": "indicator--a3c88d61-53ef-419d-b0a8-3c1a5e7e0fee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2c67b4-3c1a-49ba-8fcd-eb49b6f2c756", "sighting_of_ref": "indicator--6d04e897-14e2-4102-9a8f-c2d3e4da113f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe314741-14ee-4904-b86a-d492fd1954e6", "sighting_of_ref": "indicator--ca198f77-7fe9-47be-bf10-46676b484d62", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35927f2-007b-4069-a531-e53d17a68692", "sighting_of_ref": "indicator--135785f4-8bf8-4938-af54-fd10c5ab98b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a89d13-1e5b-4fc1-adc8-0e3bf0ecbda5", "sighting_of_ref": "indicator--38c4a421-1abe-4ae3-9fc4-9403f61f6cc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ccfd4e-fff1-459d-af40-c00b5b82911c", "sighting_of_ref": "indicator--38c4a421-1abe-4ae3-9fc4-9403f61f6cc1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed5649f-7378-4a0e-83a3-705f412990d8", "sighting_of_ref": "indicator--99903e07-9d81-48c8-8463-434781331309", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acde92ca-081e-478f-87d0-c4caef807122", "sighting_of_ref": "indicator--210226ed-1822-4fe9-9a5d-f906fdd1beaf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451ccf62-8c63-4aa5-ad51-d26b9d022d96", "sighting_of_ref": "indicator--811d3dd9-2863-41f4-97c2-81b28faf69f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcaffca-e10d-4855-99c7-a1ccfcdc6226", "sighting_of_ref": "indicator--a4a2b25c-c4f7-4384-a997-f08f280a4211", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f12d2-88ca-4dcc-b965-63c23a85d5d0", "sighting_of_ref": "indicator--ced56fe2-5cac-498a-805e-3daa4d2df138", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90d2fd-49c2-4ad5-8abd-a6555edb4d8d", "sighting_of_ref": "indicator--805f42c8-8744-4cd6-88da-d28db16ed445", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c4d13a-3c70-4b86-a5ad-74fe623dec5a", "sighting_of_ref": "indicator--805f42c8-8744-4cd6-88da-d28db16ed445", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f6a934-61d4-42ca-9332-1946cd593d10", "sighting_of_ref": "indicator--805f42c8-8744-4cd6-88da-d28db16ed445", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae17bb-aa70-4913-abf7-60ba9cc07f20", "sighting_of_ref": "indicator--5f3dec96-47c4-4257-9155-1788111ce0d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b848d30-424a-4583-a517-1b0c1835e968", "sighting_of_ref": "indicator--4efbe15f-740f-4677-af65-9bed3aba47a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d9e899-1325-4b01-87eb-3627b230f3db", "sighting_of_ref": "indicator--6ac8d221-dbfa-4863-a8f9-f1a62588b31f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5266d71-af11-44e7-876a-58f940af71c1", "sighting_of_ref": "indicator--6ac8d221-dbfa-4863-a8f9-f1a62588b31f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba1bfa3-0464-4caf-95dd-a31eeceb4046", "sighting_of_ref": "indicator--9360a20d-8e57-4470-80f3-6fc5fc8ae145", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4d96d9-af2e-44e4-b575-cda7cd9682d6", "sighting_of_ref": "indicator--9360a20d-8e57-4470-80f3-6fc5fc8ae145", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ab4fd2-7aa8-4a8d-bddd-dc4ec0549223", "sighting_of_ref": "indicator--979f047a-1745-40ec-8312-7519b678e38a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1821a27e-5d8e-401a-8cff-7226e9130300", "sighting_of_ref": "indicator--979f047a-1745-40ec-8312-7519b678e38a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ab9eef-dd6d-4fe5-bd2c-5bb78632cbe5", "sighting_of_ref": "indicator--39c17da3-f0d1-4ef5-8e91-af07695951ff", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ad255d-db7c-46b4-adcc-6349b207239f", "sighting_of_ref": "indicator--fb8ed8a5-d143-4e68-a112-11957eb40e5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18434a7f-fe56-46dc-a65a-32e71c7f7448", "sighting_of_ref": "indicator--228b2fe9-50af-4ae4-a7ed-28175609a611", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b16846-db25-480b-bb3b-113f7be77cd5", "sighting_of_ref": "indicator--228b2fe9-50af-4ae4-a7ed-28175609a611", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad22b876-c20f-47dd-a6fa-b56857c3f720", "sighting_of_ref": "indicator--3a38cb42-e816-4cfc-9bf3-0d35f3125b84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f77c6fb-7429-4e38-9c25-e8d52ddadd7c", "sighting_of_ref": "indicator--c8c1f0c5-c0a5-453e-b7d3-19e77c29de5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58614e34-4770-456f-9528-16abb08698ca", "sighting_of_ref": "indicator--c8c1f0c5-c0a5-453e-b7d3-19e77c29de5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748894ab-63ff-4fea-938f-90a8f07a2d1d", "sighting_of_ref": "indicator--c8c1f0c5-c0a5-453e-b7d3-19e77c29de5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9427b08a-c9e1-47c9-9a5a-f31f4f53f98c", "sighting_of_ref": "indicator--071cae68-ca1d-4116-9159-2f0451007010", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3495219-69b6-42a4-a586-2828599a9d16", "sighting_of_ref": "indicator--ef89013e-8dfc-4067-9bb3-43bec1fd849c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4939de3b-8aef-4275-9667-1c27774aa87f", "sighting_of_ref": "indicator--ef89013e-8dfc-4067-9bb3-43bec1fd849c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bd77ca-1f47-4171-8f84-de4495c3e6d2", "sighting_of_ref": "indicator--2e8b6ae4-c6f3-48b0-b1fe-70872dbac87f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22c64d6-d159-41f6-8940-c1a6d39d6f21", "sighting_of_ref": "indicator--2dff0e03-7b73-48db-9a06-28bef84004c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf47472-3bfb-47be-9e85-b4307a720251", "sighting_of_ref": "indicator--1186d3d4-d8a3-4e07-a94d-66dbc813f1ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20582095-c0c4-419c-be7a-bb7edbd4f298", "sighting_of_ref": "indicator--5ffbbdbf-4a8c-4bfc-b305-ee59abe61037", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fb2502-5a5f-4b87-925b-368aca9950b2", "sighting_of_ref": "indicator--5ffbbdbf-4a8c-4bfc-b305-ee59abe61037", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86842637-a69c-4eae-8b44-ad24c92d3f9f", "sighting_of_ref": "indicator--081e6c09-9ddd-45c1-8d0e-917d331dd75c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985e229e-2daa-458d-9124-de7323421089", "sighting_of_ref": "indicator--49e8ae83-10d8-43fb-8def-91a10ce8d72d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095bc92d-1089-410c-bd57-515c42f0cd01", "sighting_of_ref": "indicator--49e8ae83-10d8-43fb-8def-91a10ce8d72d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b60e5db-8146-40bd-9c0f-0e36e43905fb", "sighting_of_ref": "indicator--b501419f-5a9c-40f1-87b4-7c2cbbf824e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d054bde9-49e8-4064-a3f2-0f0e16bf6b5a", "sighting_of_ref": "indicator--b501419f-5a9c-40f1-87b4-7c2cbbf824e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e04e5da-197c-4eef-b50f-5a33dadfa3c8", "sighting_of_ref": "indicator--9bdf970a-7c1a-4fde-a550-a3d84eaf21a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1368a8c-04fe-491e-8269-5e4cc6601eed", "sighting_of_ref": "indicator--e1d5e13f-3e11-4a03-a112-8897a8907e54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfb2eff-92e4-45e3-9c92-7e279c263b76", "sighting_of_ref": "indicator--e1d5e13f-3e11-4a03-a112-8897a8907e54", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908f73f9-7fef-4a0e-a2f2-2cc06cdb040a", "sighting_of_ref": "indicator--4c33aae4-fa2a-4295-b6cc-2dd043ad6e65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f25b45-81d7-4841-84ba-746bacd6a7d9", "sighting_of_ref": "indicator--a7cebfea-3ade-4c05-b1e3-41fad606c6e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477242b4-b1ca-402a-af67-fd1ecc8f04e0", "sighting_of_ref": "indicator--a7cebfea-3ade-4c05-b1e3-41fad606c6e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5c4904-5e51-47c0-8871-f3bdd76ff07f", "sighting_of_ref": "indicator--e32bced9-4b26-417b-9c15-839b4f961b2d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc744bfc-f662-4c1e-81ea-a8fab932b34b", "sighting_of_ref": "indicator--e32bced9-4b26-417b-9c15-839b4f961b2d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7be7f7-94ec-4c5c-bb36-562715918670", "sighting_of_ref": "indicator--e32bced9-4b26-417b-9c15-839b4f961b2d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0002127-d208-46ab-a34e-5363644d685e", "sighting_of_ref": "indicator--97f1fadb-df24-4061-b1e7-9edc2f28fc9b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bc923e-3cb0-4138-8bc0-e9fcb9155d43", "sighting_of_ref": "indicator--d65db6da-e686-4215-92d2-9cd0b2416d34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c38d5a-894c-481d-9ea4-353134b5c7c6", "sighting_of_ref": "indicator--c8e48f6c-6eda-46ee-871b-f5e92306e5d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd55cd2-e209-4137-ba0f-84a58c02280c", "sighting_of_ref": "indicator--c8e48f6c-6eda-46ee-871b-f5e92306e5d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f367ad-c62d-41be-9b54-68ad5ac35c85", "sighting_of_ref": "indicator--e2734486-ff5a-4fe1-89f1-20550bccf685", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7cebb5-1d88-4ab2-9088-3b6caf1df4f6", "sighting_of_ref": "indicator--3aab3901-20f9-4e37-a6f6-e4c9696d9202", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d9cbe0-1079-4075-9927-42abe4140113", "sighting_of_ref": "indicator--75ef1fda-4cdb-4f2e-811a-353a68c7506c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fda1b7e-95c2-406e-b619-db1d362cd6a4", "sighting_of_ref": "indicator--f5138a3c-c405-428c-a1cc-645ac23fe6b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae53356d-7e5c-4f2b-b2fa-88d7e2bb9e20", "sighting_of_ref": "indicator--c4fbeb4e-7b69-46b9-9bf8-85d864534b41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d2e988-3c67-4b71-b0e3-1ffb01c22b3f", "sighting_of_ref": "indicator--9dd1f2a6-77f5-404e-932b-ba6d73d0fd2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95bc6da-c060-4cfd-a6b7-200842fb583c", "sighting_of_ref": "indicator--9dd1f2a6-77f5-404e-932b-ba6d73d0fd2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde44a79-5f1e-4d96-82d3-efe03b8419c9", "sighting_of_ref": "indicator--bd4561a9-0dae-448f-942c-810918eeaf03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb977325-2e7b-4012-82fe-a1b13d1514e9", "sighting_of_ref": "indicator--bd4561a9-0dae-448f-942c-810918eeaf03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e085c6-b89f-4a78-ad8e-0f12272e37a9", "sighting_of_ref": "indicator--1ca843b3-e99c-4df0-9cc9-7380a1a455be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a52aab-6ff3-491e-bf3b-f55900da8a1d", "sighting_of_ref": "indicator--1ca843b3-e99c-4df0-9cc9-7380a1a455be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2802d5c0-5e62-4360-a5b6-cca8bed7a1e9", "sighting_of_ref": "indicator--0f96a8a6-24aa-4831-aa10-771172a0e8ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555c0a49-a0be-4ab6-b683-f4696ed0fe64", "sighting_of_ref": "indicator--6d9148de-eb30-4573-8eba-016e6057cf52", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf15681-e483-43ba-9f02-cb9b1e7f4053", "sighting_of_ref": "indicator--6d9148de-eb30-4573-8eba-016e6057cf52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0248285-2f60-4418-9206-97be44f0abb6", "sighting_of_ref": "indicator--7412f26c-c439-40b8-94d4-5b9cd2fcfce9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad76ea9-ba9b-4f6a-a049-ab51ebded86e", "sighting_of_ref": "indicator--7412f26c-c439-40b8-94d4-5b9cd2fcfce9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf5af7d-0c71-432a-bbca-ad0312fe4ec4", "sighting_of_ref": "indicator--ac2ea65d-195c-4429-97b4-0bf10553dc48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b79067-fa20-4a34-a699-95a95adfe024", "sighting_of_ref": "indicator--0405d667-1106-426f-a094-2ba58587ae58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fade6b5-c9c7-425a-9165-c3864371a7f0", "sighting_of_ref": "indicator--0405d667-1106-426f-a094-2ba58587ae58", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f6a08c-4f96-4039-bc9d-103892f40aaf", "sighting_of_ref": "indicator--a1ea7b58-b398-4787-9f8d-e694a9569865", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1599d1b-31a3-43c6-a89e-60a9aacb4256", "sighting_of_ref": "indicator--a1ea7b58-b398-4787-9f8d-e694a9569865", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42765d37-5f3b-40a9-ae93-7658e76e074e", "sighting_of_ref": "indicator--3ae5ab12-1abf-47a0-89e0-5c2f0896d88c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2465fe9-665c-402f-819d-d966cb1e28ae", "sighting_of_ref": "indicator--20136f66-7e78-4d65-8a5a-dfbb6d7416ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9032daa4-0181-407e-8f02-5ad283260ff6", "sighting_of_ref": "indicator--20136f66-7e78-4d65-8a5a-dfbb6d7416ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb340bdc-fc00-4505-a47d-1349b4804798", "sighting_of_ref": "indicator--fef6c1de-f98f-46fe-bd87-aa07723fa5ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a900ad-c7c9-43b6-9a87-17ea6bad4c60", "sighting_of_ref": "indicator--fef6c1de-f98f-46fe-bd87-aa07723fa5ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd27e2f-ee8d-4879-83d4-040ce5a0f84c", "sighting_of_ref": "indicator--aea15160-9ef6-4955-b213-672099795700", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4afaba-bdbb-4e54-934f-bda1cb31176c", "sighting_of_ref": "indicator--aea15160-9ef6-4955-b213-672099795700", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2d1e5-a348-47c4-8777-2a2ad25ca4c4", "sighting_of_ref": "indicator--aea15160-9ef6-4955-b213-672099795700", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566b808c-0ae0-4c48-aefa-4a134179f405", "sighting_of_ref": "indicator--61859e9e-66f2-4959-a1a9-408b3989b4a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72c1157-535d-4f2c-b45a-47acc7f7dfc1", "sighting_of_ref": "indicator--61859e9e-66f2-4959-a1a9-408b3989b4a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3bdc6e-2caa-47d3-a017-82f581e0f315", "sighting_of_ref": "indicator--be3e3d58-cccc-4b26-90e5-8f53e729dc1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe11577-a743-4a0a-9ce6-3df43b7fbdd7", "sighting_of_ref": "indicator--be3e3d58-cccc-4b26-90e5-8f53e729dc1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d35654e-4169-4f35-8a82-aef7373cb24c", "sighting_of_ref": "indicator--1b911abf-2e63-498e-bb6b-b5e4b39eeb04", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df3b866-47e2-4c53-8eaa-5116bf376600", "sighting_of_ref": "indicator--1bb21abc-1f49-4ce9-bfc8-a57fc8f267e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8424defc-9c3e-47d4-a22e-e53f23a2f908", "sighting_of_ref": "indicator--6e7e042c-a24b-4ad2-8310-4e45494514e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6679b040-6c1c-4114-bc0d-35301cf6dfc8", "sighting_of_ref": "indicator--bb98dbc4-1172-46d3-bbee-111812ba4127", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39e9910-08c0-4f37-9173-d204e1b795ac", "sighting_of_ref": "indicator--bb98dbc4-1172-46d3-bbee-111812ba4127", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358fdee3-083b-4b46-9cf2-f36f903eaac7", "sighting_of_ref": "indicator--c4f933fd-2122-4adf-bb00-aa68a383d9e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c581f-4b13-4c0b-9361-266b14f16993", "sighting_of_ref": "indicator--d4946784-ff48-4c5f-af19-3042ff631fbf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c9184-abd2-4082-b2c9-89b83dc26d29", "sighting_of_ref": "indicator--4b7b3b04-2902-47cb-a81f-87ead1aaa43e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f377104d-cba9-45ef-b98b-68f72defd039", "sighting_of_ref": "indicator--4b7b3b04-2902-47cb-a81f-87ead1aaa43e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91300f50-32d2-4a98-91be-89782d5bc0f0", "sighting_of_ref": "indicator--5fcc9da6-5886-40b8-95d1-21769c6cd555", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd148b7-b687-4192-af7c-964b23d887d7", "sighting_of_ref": "indicator--9b3505f9-c977-4bf8-8053-9fba7ecf5405", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857bbf14-9270-466d-ab65-7a768d3b8d27", "sighting_of_ref": "indicator--ad183c9a-0376-4414-a7b1-08404834c906", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef52605-205c-4549-8563-5d593ab5cbf4", "sighting_of_ref": "indicator--dad34352-dfd3-464c-9552-1d1a24853304", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c220efb4-94e9-4d94-a283-265b3402985a", "sighting_of_ref": "indicator--a014232c-2aa9-4adc-96a3-c10a6a8948bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff8cd9d-f6cb-416a-8164-a966613ccd6b", "sighting_of_ref": "indicator--a014232c-2aa9-4adc-96a3-c10a6a8948bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372a563b-b467-4a72-a6e0-664a345cb060", "sighting_of_ref": "indicator--a014232c-2aa9-4adc-96a3-c10a6a8948bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d622b-5684-40d4-b583-be69ed06b60b", "sighting_of_ref": "indicator--59e493b2-fd1c-4f1c-ba1f-f6085e3d4d45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a93035-3b43-4054-b252-c410c76c5688", "sighting_of_ref": "indicator--09f18dde-101c-4809-87b0-9d2a3afbeb10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdf488b-361c-4b2e-9ce6-ab2e4d1ffae9", "sighting_of_ref": "indicator--09f18dde-101c-4809-87b0-9d2a3afbeb10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79eecb70-17ba-4c11-9ee9-4254b3ae0613", "sighting_of_ref": "indicator--09f18dde-101c-4809-87b0-9d2a3afbeb10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d64b1c-c674-4b23-bd5f-52780dfd688f", "sighting_of_ref": "indicator--619397b5-fcc9-4393-8ddf-18b0ef421b79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c517b-0a2c-44bc-ab09-3a7bfbf688c2", "sighting_of_ref": "indicator--9c08d9c4-54cf-4dc8-bd0f-f0880d489249", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcf5f94-10ea-4c43-a78b-9b5b05cd043c", "sighting_of_ref": "indicator--5bee64c4-d529-4938-97cc-6af110887a88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb83558-837e-4182-83f9-3c8b5285a23f", "sighting_of_ref": "indicator--5bee64c4-d529-4938-97cc-6af110887a88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f53eba-2dff-4559-bdf2-b9d8c963481f", "sighting_of_ref": "indicator--e79289e1-92b9-43b2-bf24-bc9a4a81f521", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f7707e-d953-44d8-8e69-e26deba01518", "sighting_of_ref": "indicator--6d1c1663-aac5-4b06-876a-a5495be23d2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c06031-1843-4fc7-8375-128ec2406e7e", "sighting_of_ref": "indicator--6d1c1663-aac5-4b06-876a-a5495be23d2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164a77fc-80d9-4fa9-966d-334965cd8126", "sighting_of_ref": "indicator--22451421-89b0-4f3c-a92e-b50ab9edfd42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7cb4a6-d39c-4800-88bc-d9f61342a5e5", "sighting_of_ref": "indicator--e7fb1628-efa6-4a8e-bd5a-caabc5821cff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2037dd84-0e32-4551-a9be-4fa873bc0608", "sighting_of_ref": "indicator--e7fb1628-efa6-4a8e-bd5a-caabc5821cff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4ec275-c75f-4e3a-9211-5f61d3d0e780", "sighting_of_ref": "indicator--3d31e588-32fe-4f4e-928c-061e38aa5c42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165366a6-7864-47f3-98db-ade08a8ab30f", "sighting_of_ref": "indicator--ae2755e3-76c2-4c41-9d2a-0dee84f4cf19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea62a815-fb52-4047-9c4b-0e10cfe56cab", "sighting_of_ref": "indicator--a5d345ff-73ae-4eab-80c9-687c5c40238f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea228b3-e0b6-409c-ba8e-4f63bb81af44", "sighting_of_ref": "indicator--a4eeb3ae-29ab-4ebb-b8a1-2e91490f2903", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a562eda3-95d1-416e-8191-0008408712c3", "sighting_of_ref": "indicator--7410c5d9-63ed-4e2c-8163-c944e6d7dca8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3019e4be-98d9-48e8-8f9e-1daca4ede6ee", "sighting_of_ref": "indicator--7410c5d9-63ed-4e2c-8163-c944e6d7dca8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d917fa-b6f4-4a06-bef4-191179b9c980", "sighting_of_ref": "indicator--650d0a66-3231-451e-b07e-3b8e29ceadfb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0957c940-fd30-4b34-88d4-bce064704e02", "sighting_of_ref": "indicator--650d0a66-3231-451e-b07e-3b8e29ceadfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d8bfca-9281-4613-9e18-fa5d0ddc35b5", "sighting_of_ref": "indicator--0ea33992-301e-4735-8b9c-72365d892548", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee431ee1-c6f7-4221-b5fc-11b0700bff9c", "sighting_of_ref": "indicator--a63276c3-5097-45c7-b7b6-ca610c11cbdc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaeb3ba-c1c4-4db5-81f8-c4cab5d1d196", "sighting_of_ref": "indicator--c84e4ccd-d1e4-4170-9068-c57ee72177b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c983c63e-2acd-4bd8-b7a3-1660de823fd6", "sighting_of_ref": "indicator--74522ac0-8e7f-4761-8d62-f608c05e2042", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac605e67-7968-4037-b12f-1eba6cf35bd9", "sighting_of_ref": "indicator--74522ac0-8e7f-4761-8d62-f608c05e2042", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e504dc-b2f3-4431-a4a5-ee2d50ca2cfe", "sighting_of_ref": "indicator--76c9a7f1-8169-49f5-ac1a-91f7aff6e1e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98dcd16-6c87-46a1-b4de-4116c2606458", "sighting_of_ref": "indicator--76c9a7f1-8169-49f5-ac1a-91f7aff6e1e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af30dd62-9859-4987-8590-73317c47d2e0", "sighting_of_ref": "indicator--42924c1e-d807-4a4d-b421-3edd5b16c76a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f08291f-8964-44d4-9360-5018af7140d3", "sighting_of_ref": "indicator--42924c1e-d807-4a4d-b421-3edd5b16c76a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad12715e-9798-4ae8-a715-2223f02fbee8", "sighting_of_ref": "indicator--249119be-537e-4a8d-823e-a8c4443a2110", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452044c5-66b7-4888-99dc-81e58fef05f3", "sighting_of_ref": "indicator--c23dc12e-fedc-4505-a799-7ad2f16d7caf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10438d30-2db3-4a63-9a4f-e1b3dbd6c5be", "sighting_of_ref": "indicator--a94b13c6-32e9-406b-9263-c0db884fc917", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9255bc7b-9b04-4cb3-863c-259deacb488f", "sighting_of_ref": "indicator--c5be932f-b596-4254-a304-4c25aee171cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3455ed2c-053b-4c58-a790-bb55852e4c3c", "sighting_of_ref": "indicator--c5be932f-b596-4254-a304-4c25aee171cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b730f165-c2ad-4d5e-8e3f-8ac63c8e3c4e", "sighting_of_ref": "indicator--178053bd-a5bf-4cc5-804f-2e6f5c6e425f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9050d202-88ce-4cce-a917-62ba75efc4ec", "sighting_of_ref": "indicator--d3d16fdc-f997-4f1e-a614-6a11eecb4524", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b547cd61-a9b5-4f15-9756-234aabcbe9be", "sighting_of_ref": "indicator--d3d16fdc-f997-4f1e-a614-6a11eecb4524", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ff7298-77a5-4bc0-a9c8-789a6300f64a", "sighting_of_ref": "indicator--71f0f72d-1317-4359-95f3-c6ad2c6af469", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae75e11f-e0d0-423c-8541-736cee9cc04f", "sighting_of_ref": "indicator--1d255d0a-7dd7-4f8a-9c3f-fa3dd092e713", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c100db-7e47-4cb0-b3a3-4b8ac6ec1985", "sighting_of_ref": "indicator--1d255d0a-7dd7-4f8a-9c3f-fa3dd092e713", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0b577f-f232-4c0c-8565-4f65f47dc8c6", "sighting_of_ref": "indicator--1d255d0a-7dd7-4f8a-9c3f-fa3dd092e713", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed87392e-3f27-4ae1-949c-46d4d128456d", "sighting_of_ref": "indicator--a641cedd-055d-4439-a707-8697c4a67647", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b36d2f-e0ec-4c29-bc82-9887d45e9615", "sighting_of_ref": "indicator--a641cedd-055d-4439-a707-8697c4a67647", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72444754-b631-49a9-9116-dc00a14ce361", "sighting_of_ref": "indicator--069cbfa2-8797-4fbc-b557-5f1e2df96ece", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b94496f-5539-4e9e-ae0f-d7011b1afdaf", "sighting_of_ref": "indicator--d8a24681-6ca9-4169-a1a9-13776fea8262", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9a9e09-6dd0-4547-b341-aae7e1e94fbb", "sighting_of_ref": "indicator--d8a24681-6ca9-4169-a1a9-13776fea8262", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1afcff7-dc2e-4581-8a70-2321f242aef7", "sighting_of_ref": "indicator--d8a24681-6ca9-4169-a1a9-13776fea8262", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8c1aa3-3020-4fe5-8152-70215f62c5d9", "sighting_of_ref": "indicator--e2277905-0f24-4778-bb57-4eb02d4b5b34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e09e91-c320-47f0-89cf-1dd3dae9087a", "sighting_of_ref": "indicator--71a5d376-1c93-4cb4-b6c3-614511b8c014", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3472bb53-2b6c-4c9b-bed4-f52853896c6d", "sighting_of_ref": "indicator--d6f1c4e8-8bd0-476e-acee-19836a38628a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea06fb02-1413-4982-9bd6-608276ed396c", "sighting_of_ref": "indicator--d6f1c4e8-8bd0-476e-acee-19836a38628a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9899cb50-0125-4baf-bfab-6a8d00d66e54", "sighting_of_ref": "indicator--d6f1c4e8-8bd0-476e-acee-19836a38628a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fa514e-abd8-4e88-beb5-793309a40c9b", "sighting_of_ref": "indicator--0c15bfb0-8c4a-4121-8b4b-b2bc6ccf6799", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a23cc9d-03a4-489a-b7f7-dd1fab76ac91", "sighting_of_ref": "indicator--0c15bfb0-8c4a-4121-8b4b-b2bc6ccf6799", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b371e70a-0014-4b9d-8afe-95aeeb250209", "sighting_of_ref": "indicator--c963b275-0968-48dc-8264-c58080acf019", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ea7c51-91e9-4e1d-bcc9-2c95c5c5bb84", "sighting_of_ref": "indicator--c963b275-0968-48dc-8264-c58080acf019", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf88ace2-50ee-4031-ba6f-9587b0c421f1", "sighting_of_ref": "indicator--38640d09-6046-44b6-95d0-aa6062c9bd39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b7acf5-6574-4d74-9bad-9319849e4336", "sighting_of_ref": "indicator--22444308-0ac2-47af-ae1c-c0c0d5dc4550", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9171f82d-14c8-474b-93d2-08e911067365", "sighting_of_ref": "indicator--bc00735a-3296-49c2-be7d-f78079cb6f1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4bd236-0ba0-47ff-80ed-a4c2a9d0743c", "sighting_of_ref": "indicator--bc00735a-3296-49c2-be7d-f78079cb6f1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d3a933-a58c-493d-bac0-9973ced1acd2", "sighting_of_ref": "indicator--bc00735a-3296-49c2-be7d-f78079cb6f1d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb660d9a-7a36-440e-9c56-fc3dac997e9f", "sighting_of_ref": "indicator--da6dd8f4-92a3-4e50-9dc1-7221e523f833", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b146d-251e-4987-a61e-00443c757fee", "sighting_of_ref": "indicator--da6dd8f4-92a3-4e50-9dc1-7221e523f833", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0d407-a507-4184-9a8a-6e4b1ea41925", "sighting_of_ref": "indicator--074e8829-dd47-4f90-bd5a-283b340b20fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eb1c01-13e7-4faa-81f1-110b5ef240cd", "sighting_of_ref": "indicator--8ee6b280-e213-4931-bd30-566e7db9fd3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b38e51-0451-41fb-97d1-bd2889e1d334", "sighting_of_ref": "indicator--8ee6b280-e213-4931-bd30-566e7db9fd3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa4d3ed-1d19-43df-9222-38227f2dcf48", "sighting_of_ref": "indicator--8ee6b280-e213-4931-bd30-566e7db9fd3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46994cef-18d8-4c3a-8be0-d8abee44ab6b", "sighting_of_ref": "indicator--c0396537-68fa-4100-91d2-1fe90555bfaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afbd498-e288-4f92-9c09-d52be361956d", "sighting_of_ref": "indicator--c0396537-68fa-4100-91d2-1fe90555bfaa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bed533-d14e-4f4b-83fd-bc27bd25f4dd", "sighting_of_ref": "indicator--792cbbce-7d55-40ce-b966-d415dda80e77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf419b3-e0b4-439f-b743-a819ea5be3df", "sighting_of_ref": "indicator--c52e9424-af04-4235-9bcb-eace9a23ec49", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d317ae-d94a-42c0-b644-d44cb4d5c055", "sighting_of_ref": "indicator--51d89b06-7994-4d57-a2f9-80c267ec01c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10027f3-8477-4a4c-adfe-8cdc0ea34722", "sighting_of_ref": "indicator--51d89b06-7994-4d57-a2f9-80c267ec01c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e83eaa6-ca8d-425e-aacd-c6848577de65", "sighting_of_ref": "indicator--6aec7d89-e7f7-49f8-8d36-cef0494265a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61b35bc-1a0b-47a8-96f5-766fcec32db4", "sighting_of_ref": "indicator--6aec7d89-e7f7-49f8-8d36-cef0494265a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05149847-1dd9-4983-a2d6-c190130303b8", "sighting_of_ref": "indicator--b8d47ca1-42fb-4e8d-86cc-1ae054b52010", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35784123-fdb2-45df-8682-ae1b01b20855", "sighting_of_ref": "indicator--b8d47ca1-42fb-4e8d-86cc-1ae054b52010", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e090ee7f-e73e-413f-9b4f-74658720106d", "sighting_of_ref": "indicator--d6443b9f-4f6d-4fb5-931d-65d697a5f036", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8f318d-439c-49a6-9623-3cbae9b7e728", "sighting_of_ref": "indicator--d6443b9f-4f6d-4fb5-931d-65d697a5f036", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb34ed8-c410-4d10-8f82-938c8b93dd4e", "sighting_of_ref": "indicator--17d71fe9-7ac9-440e-98df-6e2145247dcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908597b7-e8f2-48e9-9442-08e4beba8691", "sighting_of_ref": "indicator--17d71fe9-7ac9-440e-98df-6e2145247dcf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef6f2d-34b6-4ba5-972e-6b51a5712dc6", "sighting_of_ref": "indicator--03698453-f744-4c16-84ff-37af4ee3bf0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e84e8-6cb2-4491-8e57-fb201f4862cf", "sighting_of_ref": "indicator--03698453-f744-4c16-84ff-37af4ee3bf0a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d825435b-dfff-4aa8-91e7-96a650980581", "sighting_of_ref": "indicator--b93b21d1-1005-40f8-9594-8bbd8863ec09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e1b186-d291-4c12-95d5-8759c8b541de", "sighting_of_ref": "indicator--a3283bde-5908-4ec6-8461-9500ae41ea96", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad98ccc0-b292-493b-b018-6b316c1d8e07", "sighting_of_ref": "indicator--a3283bde-5908-4ec6-8461-9500ae41ea96", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b329e04e-79f4-4725-87b6-7e4b3b88d1e6", "sighting_of_ref": "indicator--6861fd16-ac9b-4638-ae40-c5312c5d2c8d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3914eb36-be72-4fc3-9f97-26b93c55ff55", "sighting_of_ref": "indicator--d0ab1f80-c712-452b-9149-47abb3e7b721", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8920cc21-141b-4b03-8f70-6ed819af48e7", "sighting_of_ref": "indicator--573f39fc-c37b-42ca-a71c-95024e5c6d17", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8223bd-b97e-4bfa-b2e2-dcf94ef8c6b0", "sighting_of_ref": "indicator--8825f271-9e9a-4429-a471-d9a7cda71e06", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135d20eb-88eb-49b9-a8f2-7b50502d5dce", "sighting_of_ref": "indicator--8825f271-9e9a-4429-a471-d9a7cda71e06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ca1e47-4515-4274-9e48-903f8fc3b2f5", "sighting_of_ref": "indicator--8825f271-9e9a-4429-a471-d9a7cda71e06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce41b66e-3a27-4666-81e5-98bda8583d91", "sighting_of_ref": "indicator--85d000a4-9611-4b0c-9968-2d9cff780c81", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3986974c-c20e-4128-892c-518a3377d380", "sighting_of_ref": "indicator--85d000a4-9611-4b0c-9968-2d9cff780c81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ea70c9-2a43-47e7-9557-6978570b85b6", "sighting_of_ref": "indicator--13b068a6-845c-49e0-9b61-c56ac90c6f38", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7cc138-6d36-42df-a7c0-630d17c1370e", "sighting_of_ref": "indicator--5796879e-0948-43f7-80c1-fc1171d8d83e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f4ec77-ac6b-4234-8e90-afd7c9430892", "sighting_of_ref": "indicator--5796879e-0948-43f7-80c1-fc1171d8d83e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3256fbc-287e-4c92-8375-c16796daf2ad", "sighting_of_ref": "indicator--2c3784a5-5ea9-43cf-ae05-03f5eb891db8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f472e360-33a1-46d1-9822-9b67ca2aa81d", "sighting_of_ref": "indicator--e7477d53-20fd-4f3c-8fe2-14b23be7d052", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ad0ff3-91de-4d2e-8288-a0fb0445769b", "sighting_of_ref": "indicator--bab7b29e-208d-4718-8343-73833e886d3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6dc327-c018-41d0-83c4-c4f2f8233fb3", "sighting_of_ref": "indicator--01fd1f7c-878b-4052-8684-b209e8d70d2d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a131ad6c-c314-49e3-ab11-8da555fba7cc", "sighting_of_ref": "indicator--fe00cc23-aa6a-4a74-8467-9459fcd504c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143279cc-07f0-447e-897d-189a0f7cdeaf", "sighting_of_ref": "indicator--61656abe-8122-4ddf-a066-6c352faec53f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28024bb3-b8ce-41b3-8a4e-0e34ab4a8ed7", "sighting_of_ref": "indicator--fe69583f-7786-4099-83d5-8c0859fcb106", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9043efc-fc7f-495d-b84e-4f0bb1660a06", "sighting_of_ref": "indicator--f5106778-04ce-42b0-81df-0a96c700c731", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8c052b-15ed-47b8-b0c4-7f5ea86f4581", "sighting_of_ref": "indicator--f5106778-04ce-42b0-81df-0a96c700c731", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc883e10-999a-48e5-b153-527a8589811e", "sighting_of_ref": "indicator--4f508e92-131a-4aad-88f8-9e1fe2dcb913", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffc42fc-08f4-4623-88a0-2b01c7e859ac", "sighting_of_ref": "indicator--909e0339-b7c4-4306-afb1-782859cddfc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67bfc15-36a8-4313-82ba-b300c62308ba", "sighting_of_ref": "indicator--9aee978e-0fdc-4a6d-be54-c0dab100cd17", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09037821-5f24-4078-bc6f-3ac0bb5fc28b", "sighting_of_ref": "indicator--b3df516f-a2a8-4922-b69e-0e0407bfe965", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7baf4a-e79b-4ec8-acdc-8e89c59407d8", "sighting_of_ref": "indicator--b3df516f-a2a8-4922-b69e-0e0407bfe965", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0d6a12-ddb1-493d-bf78-9676fdae9d0e", "sighting_of_ref": "indicator--fed633d9-7dd9-43cd-a486-2b85c9f8f3fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5c295a-3bfe-4e83-b3c7-7c427109158a", "sighting_of_ref": "indicator--d3193284-b3cf-4e10-a924-174dd8595bf7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaeca18-d89d-43db-a662-9d834c79ae17", "sighting_of_ref": "indicator--158ff2aa-2129-4b38-9642-8f0c4bdd18cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9847413-235a-46de-84ed-e3928600f5d8", "sighting_of_ref": "indicator--7c2a3374-fbc0-4ebd-8210-3c8f8c452d98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd733284-caca-4abe-92d6-a5f24c8c1b63", "sighting_of_ref": "indicator--624ba68b-ff47-49c8-8c5a-1434930b5060", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6865519-bb48-468d-af73-2d7df1e6bb13", "sighting_of_ref": "indicator--624ba68b-ff47-49c8-8c5a-1434930b5060", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e05eeaf-90c9-42fe-bc52-7e0c9bba0853", "sighting_of_ref": "indicator--0a40a419-46ec-4214-9cd2-55a04b2531ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0966b74-050c-46aa-b2d8-2ed7e7d86bce", "sighting_of_ref": "indicator--92ffcd20-3ca7-4824-b4d2-d2a37ff91382", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc94af40-ec6f-4351-8216-2bfdc6ea7b5f", "sighting_of_ref": "indicator--1004cdde-d477-47a1-9872-6f1777cc862d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca9aa9-eff6-4804-ad29-14f7e9d28017", "sighting_of_ref": "indicator--1004cdde-d477-47a1-9872-6f1777cc862d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef76c91-6509-4b3e-917a-bf1eab9476a0", "sighting_of_ref": "indicator--598c77b7-af68-442e-a118-842183b0ea7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f587580-1b27-4df8-b660-be8c786ce449", "sighting_of_ref": "indicator--598c77b7-af68-442e-a118-842183b0ea7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cb06f8-09b1-4803-be08-5bf97bf52f74", "sighting_of_ref": "indicator--4dc6ab94-101b-4e06-b627-a497d03fe5a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c03141b-49f5-4ffa-985b-5b3793683d8a", "sighting_of_ref": "indicator--1917772b-b3b3-475c-906a-6e2a07ce0fb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54099fd7-86ea-4bf8-b21c-9a358c126a66", "sighting_of_ref": "indicator--846bdeaa-b00b-43d3-b64a-1575e3abbfb4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75c9277-99b8-4736-a94f-bfda610eef7e", "sighting_of_ref": "indicator--846bdeaa-b00b-43d3-b64a-1575e3abbfb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f7dc7c-2ad7-42ad-b16d-7c57e6193328", "sighting_of_ref": "indicator--747aa98a-a5d6-49ef-b36d-9fc4d3be3f7f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b477ae77-7f15-493a-a7f6-36718925acb7", "sighting_of_ref": "indicator--c923c59e-fab7-4319-a3ce-01272689bae0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cc9339-fa11-441b-a0fe-a36223825a48", "sighting_of_ref": "indicator--c923c59e-fab7-4319-a3ce-01272689bae0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de74e3f7-8386-458c-a4dc-6a91e1d77191", "sighting_of_ref": "indicator--c923c59e-fab7-4319-a3ce-01272689bae0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bea220-02dd-43ea-a4f0-c84d21e1fcbe", "sighting_of_ref": "indicator--ede13274-f5dd-4cd9-b338-eeed051378d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6342e3e-eef8-4ead-9562-906c6971ac5c", "sighting_of_ref": "indicator--bebc6d2a-8040-4520-8630-973be4730075", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1272af-9696-474c-ae9f-d13a75ab48ec", "sighting_of_ref": "indicator--47b35bdc-b851-4659-83c0-6891bdf259bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78185daf-9e9d-49dd-9985-5effed626c1d", "sighting_of_ref": "indicator--1e13d7f3-e689-48d4-a47f-87ef034a6933", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcdd9aa-f3f7-42e9-a8f8-ab64a4d36ca6", "sighting_of_ref": "indicator--ac959461-a1ee-4f44-b84a-9ff33c256f1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6fe8e0-6204-46c7-8a15-e410c7e68a36", "sighting_of_ref": "indicator--aae5c414-b788-40e2-90ca-a38f75741882", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761a4808-e772-4c77-8ab6-333b0643489d", "sighting_of_ref": "indicator--95f04134-3880-43a9-9fc1-757ba041fa3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c85065-828a-48a9-b53f-756f37f1a7cb", "sighting_of_ref": "indicator--95f04134-3880-43a9-9fc1-757ba041fa3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547657b4-550c-492b-b7d5-b0dbe81ac462", "sighting_of_ref": "indicator--8762c2d0-a6d5-4989-b801-93193fcaed2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79181ea8-eb54-44e1-9199-03a7f26036d1", "sighting_of_ref": "indicator--8762c2d0-a6d5-4989-b801-93193fcaed2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcca208a-59aa-41cf-94a4-b5190ab600c6", "sighting_of_ref": "indicator--8ceedded-1026-4d20-bb98-b19801f0485a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c21ea5-abe5-40bd-833a-0a01b0d99574", "sighting_of_ref": "indicator--23846a84-e2c3-4af4-b46a-e6e47e5bb5fd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3caee9-3a3a-4600-bc5a-7910fe7ef5b0", "sighting_of_ref": "indicator--23846a84-e2c3-4af4-b46a-e6e47e5bb5fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95838a05-a8da-4f39-a495-ee6172c85c4b", "sighting_of_ref": "indicator--16f74db9-f128-4413-94f5-e81d50f19e0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9446d46a-2e4f-4e94-b12a-182164e243d1", "sighting_of_ref": "indicator--16f74db9-f128-4413-94f5-e81d50f19e0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096facfb-8c52-4750-b977-b360f6f3270b", "sighting_of_ref": "indicator--9e22dd35-6ebb-45b2-a124-fd7e1524d419", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d690c6-db58-470e-96f8-d88c6cf69ddc", "sighting_of_ref": "indicator--9e22dd35-6ebb-45b2-a124-fd7e1524d419", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e877f352-30e9-4c00-a62b-4f1eb9a7670d", "sighting_of_ref": "indicator--9e22dd35-6ebb-45b2-a124-fd7e1524d419", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3cd688-fa85-472f-8a69-2fe0f5d2bb82", "sighting_of_ref": "indicator--b6d6cc04-64aa-45ca-b908-70d5d03cf4db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d506f16-a4db-44c7-89ba-86428aad21ed", "sighting_of_ref": "indicator--04acd08d-9c40-46ff-90f8-f29eb639937b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebe6aae-a8c8-4e0b-89aa-bb63d1145c4f", "sighting_of_ref": "indicator--04acd08d-9c40-46ff-90f8-f29eb639937b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feafa5e8-6634-44b7-b757-b4db7b9ecc7f", "sighting_of_ref": "indicator--69d1ab34-a6d8-45c0-879f-59238971844f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2782422-5789-4fce-a0d4-bf47cdfe4197", "sighting_of_ref": "indicator--69d1ab34-a6d8-45c0-879f-59238971844f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32782a1-0820-492f-a635-16ff24adf9b2", "sighting_of_ref": "indicator--d65f6c04-8787-4d60-a334-07ff5ddf2a2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a395d0d3-b25a-47b0-9f93-a213b6356852", "sighting_of_ref": "indicator--57c77f34-84d5-438a-baf0-3a6a1296cddf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1620b332-99b3-475e-996e-74ec1dd86741", "sighting_of_ref": "indicator--cce1d2c9-96ee-425e-b928-2e5f78e77872", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54350b97-fa42-4bf5-b495-e709e368d9ff", "sighting_of_ref": "indicator--323334cd-0fc6-4bd2-9257-5497884412c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6381e926-3360-4e94-b180-cd8c9fcaa993", "sighting_of_ref": "indicator--80656f00-1415-4c05-badc-f5e36fc06d84", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff160ce7-9ec4-4b02-a925-94cea36ca856", "sighting_of_ref": "indicator--99392c5e-ced4-4c26-8f9a-9e6a1bdce7c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf79380c-7910-450b-ac2e-50cfb7f3fc64", "sighting_of_ref": "indicator--99392c5e-ced4-4c26-8f9a-9e6a1bdce7c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0087f7-7ee9-42a8-9b17-befc446347a6", "sighting_of_ref": "indicator--e7d0a4d6-aa30-4ec4-a3ae-f013814f8b35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f07276-20a2-4fb4-b11d-373470628c61", "sighting_of_ref": "indicator--e7d0a4d6-aa30-4ec4-a3ae-f013814f8b35", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc05c78-9f2f-4a6f-b39c-51a4daaa5cd1", "sighting_of_ref": "indicator--aa217322-9f65-4f81-876c-47a48019c78d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b76469e-3e27-410e-8bc9-5215a34b9b46", "sighting_of_ref": "indicator--aa217322-9f65-4f81-876c-47a48019c78d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da6a7c5-47de-4eb2-ba41-9f8e4d7edebe", "sighting_of_ref": "indicator--8ce9f678-a4eb-4271-aea8-37d06d9c0a71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df48113c-9c07-4c8f-ac9e-74232009129b", "sighting_of_ref": "indicator--8ce9f678-a4eb-4271-aea8-37d06d9c0a71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d0935c-1b44-439e-b79b-691e8d1c9c7b", "sighting_of_ref": "indicator--8ce9f678-a4eb-4271-aea8-37d06d9c0a71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f62d37-a058-47a9-ab86-f8874fedd677", "sighting_of_ref": "indicator--23418e9d-9011-4b04-a3d1-04f49812bee0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14162b5a-474e-429c-bbdf-491ad0e95840", "sighting_of_ref": "indicator--23418e9d-9011-4b04-a3d1-04f49812bee0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2116c618-10ae-46cb-b600-cfb4f1e4111a", "sighting_of_ref": "indicator--521f4346-a257-4b5d-846f-50688da264d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7c986f-78a9-4272-8bd9-0f57c94dcdb7", "sighting_of_ref": "indicator--521f4346-a257-4b5d-846f-50688da264d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1696f2e-bec8-4013-b725-969a0296640d", "sighting_of_ref": "indicator--4cc866e8-8762-4e3b-800c-5c4b5b308bee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2fe0ee-00d5-418f-a45e-a8fa36863bef", "sighting_of_ref": "indicator--3d8e3e93-cc90-45ea-a9f6-f580e778fa62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2794b1-f709-4fea-9890-d2e6dfccc4e6", "sighting_of_ref": "indicator--c1222022-c5b6-4b49-8cda-42311668678a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da0ce90-06e6-4e08-b823-cb7b29406277", "sighting_of_ref": "indicator--712590e2-46d4-440c-9cf7-980f41c8963e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246ab939-d2cb-4e9c-9b62-98932bd559d5", "sighting_of_ref": "indicator--712590e2-46d4-440c-9cf7-980f41c8963e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4368cb51-8b27-42b7-ad40-e0fce306e87b", "sighting_of_ref": "indicator--87658fb7-4674-4d0f-8cfb-a64d103db7d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8485879-8a76-4890-a417-a174d1309672", "sighting_of_ref": "indicator--b9d96056-6c32-4f50-be1f-2a5f8c9e1356", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2edf84-cc7b-4a07-931f-0caac5cf23e4", "sighting_of_ref": "indicator--4df8d1f0-d7a4-47db-a1a6-3c40283f3576", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18ba3af-68a0-425c-8c92-6408ef91e923", "sighting_of_ref": "indicator--4df8d1f0-d7a4-47db-a1a6-3c40283f3576", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfcb138-d0cb-4086-842b-7cfd33222a46", "sighting_of_ref": "indicator--2818c7ba-9ac1-47b9-8504-6e544caa00d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c9c4cd-f008-447f-a171-adb1bbbc059c", "sighting_of_ref": "indicator--d4e6ea14-92c9-4b90-a7f4-eb6e112c9291", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf410c6e-d8ef-4d1b-a055-1c33281cb41d", "sighting_of_ref": "indicator--d4e6ea14-92c9-4b90-a7f4-eb6e112c9291", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c27599d-4834-408d-8c7e-110d27694df7", "sighting_of_ref": "indicator--8a67e63c-307c-4e2b-8250-0ca6be564078", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4fddd4-7917-420f-a7eb-5769c39003b0", "sighting_of_ref": "indicator--5fa0d787-06cc-43e9-ada1-6ad3ceed1413", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7a233b-e94a-4358-bb15-51c0ef0acd11", "sighting_of_ref": "indicator--5fa0d787-06cc-43e9-ada1-6ad3ceed1413", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee11724-4c63-4326-9f11-3389ff367db2", "sighting_of_ref": "indicator--0b501285-d4f6-4f1d-b978-498030938b95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2379789f-9050-4ffa-9900-4a7fe9470f26", "sighting_of_ref": "indicator--7a244803-052d-49ca-9022-cfbf5d2ebae4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5db148-b047-491f-8bd2-799266db1212", "sighting_of_ref": "indicator--1c9dde63-ee8d-4fd9-a7c3-4b66daf08033", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fde91b-fb3b-4733-a513-e2995914e007", "sighting_of_ref": "indicator--55dd2b43-7346-4410-b08a-55348c5ae98a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99e0fa-fb67-449b-b4d9-5cb3952e2788", "sighting_of_ref": "indicator--a304b3da-4b91-4649-b2cf-e036e0c47782", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e782d4f9-1c94-4226-89e9-7f592f8df76a", "sighting_of_ref": "indicator--e3cc5e31-7e84-491c-b1f0-c05063bb2bd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f63aea-0775-4f45-8c3d-1dc9e677d582", "sighting_of_ref": "indicator--e3cc5e31-7e84-491c-b1f0-c05063bb2bd9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d984d369-4172-48d4-afeb-81a01ec0886f", "sighting_of_ref": "indicator--b49c56c9-1ba9-43f7-a854-c7f562fa9a82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05423944-6076-41f8-a997-fbfb31a5a3f4", "sighting_of_ref": "indicator--b49c56c9-1ba9-43f7-a854-c7f562fa9a82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ef0ce-351e-44fd-b816-3102c3e60202", "sighting_of_ref": "indicator--14b46555-2115-439a-ae6e-cce9088b4355", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba1353a-baec-43d8-9f0c-404d78f7b47e", "sighting_of_ref": "indicator--56ad86bc-5733-45a2-81dc-b9ca1db8ea24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f81707-0237-49fa-b083-0aa9107f6786", "sighting_of_ref": "indicator--b581317b-d4eb-44a8-91ca-6a2e3816c835", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71840ad7-4bed-44b2-8ce4-6637c8ee41ad", "sighting_of_ref": "indicator--b581317b-d4eb-44a8-91ca-6a2e3816c835", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e26111-64f9-4b07-b39e-8f4c7f6c44d0", "sighting_of_ref": "indicator--b581317b-d4eb-44a8-91ca-6a2e3816c835", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c3d6ea-d7be-4906-8349-aaa645bc6831", "sighting_of_ref": "indicator--ff502a04-814f-4199-a8a6-e3963cdd6a86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425a074a-499e-4a62-88be-0da91fa0ac88", "sighting_of_ref": "indicator--a4676384-6433-43e7-8e63-bf19ddbef7d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de592c5-cb98-48d2-b14a-fbf9fa81fe6e", "sighting_of_ref": "indicator--cdb7a453-05eb-497f-b203-007f2b3d9971", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416a9154-0389-4206-adbe-81598ad40b93", "sighting_of_ref": "indicator--cdb7a453-05eb-497f-b203-007f2b3d9971", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d01bc87-f05e-4d6d-8ca5-a7dddda4d961", "sighting_of_ref": "indicator--31b0e47c-411b-4f5b-abca-fe6a94a010c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d5baea-1b65-4c59-9b37-6d83de319739", "sighting_of_ref": "indicator--fd82afa8-c16d-4c3b-8b6c-f94ffdd296b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7afe385-4d8d-4087-b93c-0ca1681c8724", "sighting_of_ref": "indicator--fd82afa8-c16d-4c3b-8b6c-f94ffdd296b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c541cb-273e-4b18-854e-936830ee5d57", "sighting_of_ref": "indicator--d37d59d3-0cac-40ef-b7ed-ce82e5757763", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563447df-dbf7-47d1-843f-f2b738414659", "sighting_of_ref": "indicator--d37d59d3-0cac-40ef-b7ed-ce82e5757763", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51164031-9acd-4a7a-887a-d85aa54c8a0e", "sighting_of_ref": "indicator--f8e01ff7-da8d-4d77-a477-4636652df90d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052c9a3e-1f57-450d-a585-5a9d8eb0a52d", "sighting_of_ref": "indicator--0c5d4ef9-2615-406e-ab8f-9e1663371ee3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440744bb-3910-499d-bcc1-093da355bd61", "sighting_of_ref": "indicator--0c5d4ef9-2615-406e-ab8f-9e1663371ee3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9317fad-5f85-4379-a105-83abde660c34", "sighting_of_ref": "indicator--fd7285dd-4b80-4bdc-b8a5-9c3991bf7d3b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0187268a-c458-4ebc-bd7f-26b6f1b278ae", "sighting_of_ref": "indicator--296ce6b3-dece-4594-850a-5bc1166a1131", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809d5d16-0af9-4f38-93f9-f9c5a59438a7", "sighting_of_ref": "indicator--81be0685-ee2d-404d-b501-b831cdcfc435", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09772b88-1d0e-4d53-a735-afa4e319d5c2", "sighting_of_ref": "indicator--81be0685-ee2d-404d-b501-b831cdcfc435", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ca6567-320b-4341-a595-57db41ec1be3", "sighting_of_ref": "indicator--7ab87f79-7ee8-4b2c-95d3-c8b2bf6194af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1174b94a-fbff-4256-bf6d-197320b4ce2e", "sighting_of_ref": "indicator--24d23ff7-b582-4ad2-9a14-99eaffb9e1e3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b50fe8-f183-492b-ae1d-5fd1361d9919", "sighting_of_ref": "indicator--24d23ff7-b582-4ad2-9a14-99eaffb9e1e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1991a5ae-4939-4ada-bd93-ad554f4ae7f2", "sighting_of_ref": "indicator--0020d83b-e265-4d9f-a71f-8379479eb5da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bc53d7-abf6-4548-af76-b0e1a16444d8", "sighting_of_ref": "indicator--2aff957b-38e6-4199-b746-c0c746eb45fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94fd07b-fb10-4148-aaf5-3f369cfae8f6", "sighting_of_ref": "indicator--d2765d2f-adaf-429e-a282-6f66502d4f43", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bc497b-acf3-42fb-9d92-c6ad961a1be1", "sighting_of_ref": "indicator--86102c2f-63db-45b9-9f4d-34d87d8e883d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a0e4af-6af9-4ced-954d-a8def7f5d04e", "sighting_of_ref": "indicator--86102c2f-63db-45b9-9f4d-34d87d8e883d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92a1784-3693-4527-a92d-fba2ac10eb07", "sighting_of_ref": "indicator--67bdc5de-1ddc-4e13-8196-867223d53d1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf59ceb7-c61c-40f0-b882-5ca46a2b7c34", "sighting_of_ref": "indicator--0e52329b-c2b3-4ada-bd37-8ed9f2497cf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d45918-f78d-4ed7-885d-0c6d905a7591", "sighting_of_ref": "indicator--0e52329b-c2b3-4ada-bd37-8ed9f2497cf4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea19ac74-feeb-4026-9ed8-f10b7ef071d2", "sighting_of_ref": "indicator--f697f2e9-4470-41b2-849a-14c48049ae91", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd1c0f3-69e5-4dde-91d1-7b7637495b4c", "sighting_of_ref": "indicator--f697f2e9-4470-41b2-849a-14c48049ae91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72079a10-1914-4725-91f8-2dd664816202", "sighting_of_ref": "indicator--076587db-70e8-422c-a1b4-e56a454e900e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a196f1e1-193e-4384-9bcc-71218b370ea5", "sighting_of_ref": "indicator--cf4957de-016e-4ec4-868a-7b91151f7190", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b471c30-3291-431b-9f50-c189ad807957", "sighting_of_ref": "indicator--cf4957de-016e-4ec4-868a-7b91151f7190", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6dbb86-fb67-4906-8d21-e599fdb556be", "sighting_of_ref": "indicator--cf4957de-016e-4ec4-868a-7b91151f7190", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f329b28-0777-4a13-9ec5-d5fcc14191fc", "sighting_of_ref": "indicator--d1076541-9947-4caf-a5ff-2f7c9fcb1664", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6daacd83-3b38-443c-8c33-53f776c70835", "sighting_of_ref": "indicator--e2384fa2-8c10-44e0-bf2f-6f88285f2216", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556f82b8-c9b5-4564-9149-91ea00660e95", "sighting_of_ref": "indicator--10bd2b2b-e64a-499e-b7dc-604ff5aa90f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104190c-ab06-496b-983c-770898e7dee1", "sighting_of_ref": "indicator--10bd2b2b-e64a-499e-b7dc-604ff5aa90f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b0f092-e087-4465-bde2-18eacef25e4f", "sighting_of_ref": "indicator--10bd2b2b-e64a-499e-b7dc-604ff5aa90f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9854f4-46b1-48a3-b822-5dd0ebd5f74f", "sighting_of_ref": "indicator--d2155b5c-031e-41d0-ba41-46b45d264c64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0890be79-42d7-47be-bc69-6c4655b8893c", "sighting_of_ref": "indicator--78c99cef-d61f-4a92-921c-593500d9b2da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7d4593-968e-4ba4-92c1-a7afa3d85b45", "sighting_of_ref": "indicator--78c99cef-d61f-4a92-921c-593500d9b2da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681a576d-b68c-4ebf-b58e-927994bc61da", "sighting_of_ref": "indicator--78c99cef-d61f-4a92-921c-593500d9b2da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3d175a-976e-4b3a-a1ab-7047b27318d7", "sighting_of_ref": "indicator--5a5bedaa-cfe2-4fc7-91e3-c2fda47bb4da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca023ca4-37bd-4b22-adb9-9fa583494344", "sighting_of_ref": "indicator--0ef2a5e2-5093-4b61-8a93-5940c06953a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9da8a57-8191-4f86-8ab4-f30ae4b5e015", "sighting_of_ref": "indicator--0ef2a5e2-5093-4b61-8a93-5940c06953a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ece8a1d-9a9f-48ab-b318-6cf49617deba", "sighting_of_ref": "indicator--48b64e5f-9a68-49e8-b6ee-983442e1a8ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a18d9f-4b70-4b9a-9f1e-82b95f81af71", "sighting_of_ref": "indicator--c2d3aab7-f0e9-435a-928f-b98965206229", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5328bc86-966c-456e-a7fd-53e37cbd14ed", "sighting_of_ref": "indicator--c2d3aab7-f0e9-435a-928f-b98965206229", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e89052-f512-439e-845f-f1d521fbe9af", "sighting_of_ref": "indicator--c2d3aab7-f0e9-435a-928f-b98965206229", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239f7c0e-0047-46cd-8a45-f92a78a23546", "sighting_of_ref": "indicator--0f44bcfb-5a9c-4a94-bc30-c29a6c2874ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d36db0f-323f-4716-a1b7-67296899fc98", "sighting_of_ref": "indicator--a33a13c4-673c-461f-adcc-cb1cc068d5c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111c32aa-c42e-4c32-95fd-00c3996272b8", "sighting_of_ref": "indicator--25ef5818-7a26-4e38-8784-a5676fe58e49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff13948d-a55d-413f-959b-64eab7761ac1", "sighting_of_ref": "indicator--25ef5818-7a26-4e38-8784-a5676fe58e49", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e14485-519e-4500-adf5-af624812197f", "sighting_of_ref": "indicator--c3b08c6c-0c5a-477a-995f-7ab7af4c07a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df923c20-819d-4433-b9a0-1a02540415ac", "sighting_of_ref": "indicator--4f9b0454-b043-47bf-8ef4-8510ea327864", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1acb89-d952-4ca6-94e9-7a2e8fc606c5", "sighting_of_ref": "indicator--6051a0ee-aab1-47a9-9974-391590bf8e56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5a5fc7-d36f-49d0-8297-1db7b4853122", "sighting_of_ref": "indicator--6051a0ee-aab1-47a9-9974-391590bf8e56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57c021a-5944-43fd-8048-c5c4b2418301", "sighting_of_ref": "indicator--5b1417ec-9cd2-47fd-b445-a9a6eff23048", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1b214a-f9ff-49e8-a324-c312e5b2d108", "sighting_of_ref": "indicator--5b1417ec-9cd2-47fd-b445-a9a6eff23048", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ae1750-606d-4b99-8f56-14053fbe3370", "sighting_of_ref": "indicator--d28935ca-0cc3-475b-a23c-a966065560fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ceced1-7e43-47fa-b07d-acf3e4f82fc4", "sighting_of_ref": "indicator--d28935ca-0cc3-475b-a23c-a966065560fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde7c827-0e83-4cb8-a493-92b82078ba4b", "sighting_of_ref": "indicator--d28935ca-0cc3-475b-a23c-a966065560fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d8076-75c4-41e1-99e3-bbc404c89861", "sighting_of_ref": "indicator--be8faa8e-9e9b-4295-9c86-f52b018e1d33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62745340-1a98-4a2e-98ad-c339015796f9", "sighting_of_ref": "indicator--be8faa8e-9e9b-4295-9c86-f52b018e1d33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1cb59f-f37f-4919-8c1a-606727454b14", "sighting_of_ref": "indicator--6813b045-920e-4814-8b1f-1b0230c3041c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17caa798-0426-4798-a297-b1d4dfca646f", "sighting_of_ref": "indicator--6813b045-920e-4814-8b1f-1b0230c3041c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2163e05a-9a64-47d4-bef5-b4185703af20", "sighting_of_ref": "indicator--e91601fa-4023-4dd3-ac10-90967ba015bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746a4184-a816-46b6-8b01-9b0dc76653fc", "sighting_of_ref": "indicator--bf3344bf-d200-46bd-9ccd-c69f78e6c12c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7c4e11-34e1-4e21-b60a-73776c8809db", "sighting_of_ref": "indicator--b2a89756-a92b-41e7-b3fc-0e544cd636e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec4447a-21fa-48b6-b792-aeedb13c6048", "sighting_of_ref": "indicator--127aa072-6386-41ed-8c7a-1c02fc4d415a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d70a78e-0a84-4694-a5c0-188225bd9598", "sighting_of_ref": "indicator--127aa072-6386-41ed-8c7a-1c02fc4d415a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e24943-32ee-4963-9e8c-f2411347bc52", "sighting_of_ref": "indicator--127aa072-6386-41ed-8c7a-1c02fc4d415a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ab4a04-cb27-4504-a121-003c66542ded", "sighting_of_ref": "indicator--6a624d74-f633-4bea-8e03-505058ea273b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e2e52e-4d31-4646-8e0d-0b4675ceefd2", "sighting_of_ref": "indicator--6a624d74-f633-4bea-8e03-505058ea273b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f97e5cd-a123-4b38-b534-51bb195f74e4", "sighting_of_ref": "indicator--8f83f945-2a33-4e5c-a851-f74d1e25a6fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dbacff-97b8-41b7-8cc7-94bbf8e972ea", "sighting_of_ref": "indicator--8f83f945-2a33-4e5c-a851-f74d1e25a6fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019ca9ee-045d-4d7f-b8f4-2ccfeb44c148", "sighting_of_ref": "indicator--de9afd6a-80c3-4cad-af75-21beea1dec5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00f64d4-b6cd-4888-a5a9-53f6e12ae526", "sighting_of_ref": "indicator--de9afd6a-80c3-4cad-af75-21beea1dec5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf74bd20-1877-499d-bc50-4e4d19d7c2b7", "sighting_of_ref": "indicator--47786c9f-5b3e-4415-9d86-6e5f73755be5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3784f58-43d3-4f77-bd8e-6e4194ec9615", "sighting_of_ref": "indicator--47786c9f-5b3e-4415-9d86-6e5f73755be5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8343c684-fe68-4b74-9306-ec4c85571087", "sighting_of_ref": "indicator--b5ab0580-260c-4daf-9f97-675860cc47e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbec5f11-bf83-4fd0-890e-642973b6617e", "sighting_of_ref": "indicator--b5ab0580-260c-4daf-9f97-675860cc47e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73547b01-de4e-443d-b5d4-a2ac26249f5f", "sighting_of_ref": "indicator--2e840e45-4a01-4f29-b2f6-e433c773323c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b9f8d7-8798-48ce-b67a-e1808c60fa4a", "sighting_of_ref": "indicator--2e840e45-4a01-4f29-b2f6-e433c773323c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dfb3c8-7486-4e36-9136-07356eb6a8ec", "sighting_of_ref": "indicator--a06958fb-a492-48ae-bdf8-dd2595a6d477", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee54240-410c-472f-b35e-953277a6bf3e", "sighting_of_ref": "indicator--a06958fb-a492-48ae-bdf8-dd2595a6d477", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0514d2b3-73ad-4cdb-a20a-5b0e484410f1", "sighting_of_ref": "indicator--ec301bfd-2356-4d6f-b370-2a650749c2f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a7c968-9797-49d9-9a94-6302f794d9c2", "sighting_of_ref": "indicator--ec301bfd-2356-4d6f-b370-2a650749c2f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4803754f-38ef-4eec-8c88-83da990e3575", "sighting_of_ref": "indicator--ec301bfd-2356-4d6f-b370-2a650749c2f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c6e524-32b2-4f1a-a95e-48b724435039", "sighting_of_ref": "indicator--ad110adc-66a3-46bb-aca1-1f60d1f4a722", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d70f9b-845a-4d10-9a46-906d32bc5b7e", "sighting_of_ref": "indicator--ad110adc-66a3-46bb-aca1-1f60d1f4a722", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5fde5e-a67d-47a9-b6de-448e4ee6d4cc", "sighting_of_ref": "indicator--07a6008c-4243-41ba-8517-588330a2f360", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa50ac7-4178-4b30-9268-094fcb11317c", "sighting_of_ref": "indicator--ba2aa1eb-4fb0-4ce9-a964-925d93cc986a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17acd10-b8bf-4433-bb76-7ccf030029d4", "sighting_of_ref": "indicator--1afe8e11-23da-4542-bfce-c68a82cd510e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9f946b-8d81-43de-a1c3-b0f899053225", "sighting_of_ref": "indicator--1afe8e11-23da-4542-bfce-c68a82cd510e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc407089-4992-4564-b92c-71496322d616", "sighting_of_ref": "indicator--28c31747-d965-4568-9ec2-4c0dded971cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601fa53-ea3d-41ae-a58c-5dec614e2ef4", "sighting_of_ref": "indicator--28c31747-d965-4568-9ec2-4c0dded971cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5eab96-aec8-48d8-81b9-e1e0460e4576", "sighting_of_ref": "indicator--aebbfd9c-23cc-4f67-9dae-ee4628e778f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791c99b2-293a-4172-a9ee-7f488aae7a9f", "sighting_of_ref": "indicator--b2244280-9ca5-4b88-a38a-e04e8b119eab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f95082f-546f-4c87-b1e1-d6bca5de447a", "sighting_of_ref": "indicator--b2244280-9ca5-4b88-a38a-e04e8b119eab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848cb998-5ef7-4488-ab00-33af9c71ed22", "sighting_of_ref": "indicator--ba7740ab-69e1-4f02-bc5b-3340e37106a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e951024-b3e5-4d58-895d-6f1978849134", "sighting_of_ref": "indicator--ba7740ab-69e1-4f02-bc5b-3340e37106a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daf48b2-b3be-47c8-80f6-c7ff9eaa5ea0", "sighting_of_ref": "indicator--561505c4-0d98-494f-9738-fd4c18a48b88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480696d6-06b4-4795-84b1-f1fe9c8a2ada", "sighting_of_ref": "indicator--b69d1c15-a9c7-436e-abdb-e03e73b93fe8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d356f5-8983-4938-add4-8c88617a7913", "sighting_of_ref": "indicator--e09347f5-0696-4b48-93bb-16979b8628c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3639b8f9-456a-4b3d-9c80-f39d06ded787", "sighting_of_ref": "indicator--f6a94a8b-8356-47d2-88df-387808046b1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08904acf-f700-4fcc-bf7c-e5ad072c7e55", "sighting_of_ref": "indicator--32943821-5f24-419f-b8f9-86f349add971", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06630780-9ee1-4be3-ba7e-829f6ea1dd83", "sighting_of_ref": "indicator--32943821-5f24-419f-b8f9-86f349add971", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966922dd-c419-4ba7-ad4f-50992faaf37c", "sighting_of_ref": "indicator--0d0b160a-ab6e-4d10-955c-ab1b7ba2bb73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bf1481-df90-417e-a954-9ae6ece78446", "sighting_of_ref": "indicator--e11f2ca0-a3c3-45f5-ad51-5e3764d92315", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896af6ae-367a-403a-96cc-6c4cf0b1e6cd", "sighting_of_ref": "indicator--082da050-8c74-4a15-9bba-612a88b24b42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ca770e-fbc7-4717-9feb-9ff480ad953c", "sighting_of_ref": "indicator--f604ab6d-fd2d-4fce-8c80-32282acf80b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c597688a-886f-44cd-b254-8341de508f7f", "sighting_of_ref": "indicator--f604ab6d-fd2d-4fce-8c80-32282acf80b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30281ead-52f4-453b-a624-521862ea3233", "sighting_of_ref": "indicator--d0f59b75-333d-4489-826b-d6778ebdda27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae13ff7c-e609-452f-96bd-ab2de1bdea0a", "sighting_of_ref": "indicator--d0f59b75-333d-4489-826b-d6778ebdda27", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4e1f80-c75e-447f-9966-5d13b7367207", "sighting_of_ref": "indicator--d0f59b75-333d-4489-826b-d6778ebdda27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03c98a0-e186-4240-9369-3dd2a6beaac8", "sighting_of_ref": "indicator--27f3d8cb-c80e-437c-a377-30f30eeaf7b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15646be-2314-4294-9dc6-fb60045e86c3", "sighting_of_ref": "indicator--27f3d8cb-c80e-437c-a377-30f30eeaf7b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16786452-c4cf-4f52-8580-fdabb416f937", "sighting_of_ref": "indicator--82817855-8acc-45ea-bbd6-23aff2ad7cb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a35e3e-01f5-4342-970b-1ce30290a740", "sighting_of_ref": "indicator--789b0569-34eb-487b-a60a-c6bc8055b81e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b887d4fa-8392-482e-a22f-afd5d9733b50", "sighting_of_ref": "indicator--789b0569-34eb-487b-a60a-c6bc8055b81e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8521ffd9-b5fe-4ae6-b34f-d9471dc2ca5c", "sighting_of_ref": "indicator--54dd43fd-dece-472d-87ba-7498f619ab32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302bf2d1-8d45-4225-97e0-2b3f1c1d5fbf", "sighting_of_ref": "indicator--54dd43fd-dece-472d-87ba-7498f619ab32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c690b814-4598-4550-b8ed-193d5419cac7", "sighting_of_ref": "indicator--1bc3caa4-97cb-49f5-8b99-bb76e1166f26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abc66c8-eedb-47df-9006-890e3b493788", "sighting_of_ref": "indicator--d7feefcc-874a-4ca7-83c1-33316ae31c9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920a4e0d-4a01-48cb-80a4-cf89eb835ad2", "sighting_of_ref": "indicator--d7feefcc-874a-4ca7-83c1-33316ae31c9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ae7728-4368-4edf-9ab0-6cfc4c45fe48", "sighting_of_ref": "indicator--8d2a87da-34ce-492b-9c26-f6e393e33826", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123eb36a-0536-4d23-9879-9c50bb4e9c05", "sighting_of_ref": "indicator--51ab4103-0e6e-4939-aa35-19bd3b1c6b28", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ebd0ce-76cc-459e-b8a2-7e7b2fa8b514", "sighting_of_ref": "indicator--2254a507-f13c-4054-af14-31c0d40cb56c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c80100-cae4-46d4-9d27-048d23a65ced", "sighting_of_ref": "indicator--041cc741-cc2a-4a3e-8b90-8ebbb1dfcfc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e4298c-9e50-46b8-b144-d674ce463070", "sighting_of_ref": "indicator--0fa1f4b1-c2e9-4b22-bc2f-dc5e0e6b73ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2026eb-c2d6-401f-80d0-06ed64aef72d", "sighting_of_ref": "indicator--0fa1f4b1-c2e9-4b22-bc2f-dc5e0e6b73ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2463109-2a8e-4a7b-b66c-ea723ed86dd9", "sighting_of_ref": "indicator--0fa1f4b1-c2e9-4b22-bc2f-dc5e0e6b73ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea3c63f-bf87-4eb0-a3e8-5436971267b6", "sighting_of_ref": "indicator--d47a7f06-c0b3-42f3-99bf-612cff8b4a10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109aba08-5cdd-4004-b314-736d90c50400", "sighting_of_ref": "indicator--8eeae57a-5cbd-4860-b579-ae02acc9c512", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391be646-ec9e-4f2a-84e2-184ba82ad624", "sighting_of_ref": "indicator--8eeae57a-5cbd-4860-b579-ae02acc9c512", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775d7f55-dfdf-4918-b542-6d65b726e5d3", "sighting_of_ref": "indicator--a2bf63a9-7cf4-483c-99ad-db12d1b5b38b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3d5d1a-aef7-42f6-b9f8-8bc43faf7fb1", "sighting_of_ref": "indicator--301aefc5-f7e4-49c3-9f29-2af4a464ad10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f97f45-5f7e-45f4-bfb5-4c45e71182e2", "sighting_of_ref": "indicator--301aefc5-f7e4-49c3-9f29-2af4a464ad10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d06932-978c-476a-a9fe-8ea2c4df4762", "sighting_of_ref": "indicator--68f9b5ef-7b8e-4806-a54d-820d2fd18ba5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d46b11-9e69-44c8-88cb-05451b373434", "sighting_of_ref": "indicator--68f9b5ef-7b8e-4806-a54d-820d2fd18ba5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccac4da3-a8df-4881-b1e1-5cde321f7464", "sighting_of_ref": "indicator--18b86ba1-f27e-4e66-bc0c-7b2b7654cbb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dd2594-2000-4f7b-9281-89b00fab35e5", "sighting_of_ref": "indicator--18b86ba1-f27e-4e66-bc0c-7b2b7654cbb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7113e1-8fd2-4647-afd8-c7750820871a", "sighting_of_ref": "indicator--18b86ba1-f27e-4e66-bc0c-7b2b7654cbb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846172ce-873f-442d-981b-67080d686559", "sighting_of_ref": "indicator--12c3a273-3c7a-47d2-9ce4-3160342db6dc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e129ea-6d7e-4fab-868e-669946c9e011", "sighting_of_ref": "indicator--e83f3a5e-853c-4915-b44b-e70ee1066451", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ab93c-a448-43d4-aa6f-11e920ddbd49", "sighting_of_ref": "indicator--bc8c4d2b-790f-4993-8a9a-b176aa74174e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08afc551-2d18-4110-ac50-5dc2d44a168c", "sighting_of_ref": "indicator--bc8c4d2b-790f-4993-8a9a-b176aa74174e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4b6859-8e89-4624-8250-9e8915c730b4", "sighting_of_ref": "indicator--4aebb397-f798-4cea-8d31-ad8cd8d48e4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bf784d-8194-4d40-967b-af62331ba51a", "sighting_of_ref": "indicator--4aebb397-f798-4cea-8d31-ad8cd8d48e4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4907c280-f71f-4ea3-94e8-5631c03f7ac5", "sighting_of_ref": "indicator--c3a4f39f-2656-41bf-af01-0653fc5bb90e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99a18e5-3909-4a75-9fc5-fdbaddbbd1b8", "sighting_of_ref": "indicator--eaefd869-b881-49d3-a083-9dbb35e4ca08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4469583-d485-4040-b229-772a28217e69", "sighting_of_ref": "indicator--8bbafe3b-ff4a-498b-a7d0-f197c97c0bf7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa919e65-138b-47d5-a16b-17aea67a3d44", "sighting_of_ref": "indicator--966ad7fc-7a6a-4092-be9f-dbf98d04a3c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce0965-db53-4141-a45c-a6442c568411", "sighting_of_ref": "indicator--5c717836-7a5f-4a09-891b-dd3fca204624", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb3dc7b-181b-46c2-8968-ad5ab3f71000", "sighting_of_ref": "indicator--5c717836-7a5f-4a09-891b-dd3fca204624", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4c7064-2d94-4586-ba0c-2bc5093828d7", "sighting_of_ref": "indicator--326e5fd8-4c88-4aba-9ee3-894268d5d586", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41e8bb9-4117-4209-8823-c3459104488c", "sighting_of_ref": "indicator--326e5fd8-4c88-4aba-9ee3-894268d5d586", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6affbc-334f-4656-9d30-615ff44d87e1", "sighting_of_ref": "indicator--16e34003-7b31-46cb-8ded-86fb4c8f53e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483f791e-373c-4a58-a652-ad28f444a3fb", "sighting_of_ref": "indicator--16e34003-7b31-46cb-8ded-86fb4c8f53e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8b6cc1-9f6f-47cb-9197-d9ef014fa39e", "sighting_of_ref": "indicator--16e34003-7b31-46cb-8ded-86fb4c8f53e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb32c4e-b32a-4ae7-b5e7-0a82fcf39b16", "sighting_of_ref": "indicator--b77c56de-bc41-481b-bf0b-d2c6332df054", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5567c72d-1666-43eb-8c87-f06588dacded", "sighting_of_ref": "indicator--b77c56de-bc41-481b-bf0b-d2c6332df054", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c83f649-7c23-4559-998b-246332715cf7", "sighting_of_ref": "indicator--b77c56de-bc41-481b-bf0b-d2c6332df054", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2623d0a-e0bd-4c0d-be1c-25bc5c7fa801", "sighting_of_ref": "indicator--562eebc1-10d0-4daf-9ead-842cb7ff6a2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855f25a4-26ad-4f49-b55f-86e65898aaaa", "sighting_of_ref": "indicator--562eebc1-10d0-4daf-9ead-842cb7ff6a2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31899ff-04f0-4db5-bd8c-7311da2002a3", "sighting_of_ref": "indicator--83319f1a-f73b-4668-b6ed-c43d1096ec85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d93c12-c052-4386-a80b-c1f450b54ab2", "sighting_of_ref": "indicator--4ac98e05-3446-4896-bff0-d145fab40193", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5236315-32c2-490a-a53e-c278281fdcde", "sighting_of_ref": "indicator--4ac98e05-3446-4896-bff0-d145fab40193", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8680175-8e06-44b7-bd14-3ec5f97ae133", "sighting_of_ref": "indicator--4ac98e05-3446-4896-bff0-d145fab40193", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a6cef1-edbd-4dc4-bb5c-db904394561e", "sighting_of_ref": "indicator--4b1ac19c-0731-470e-902c-0c4665f5e279", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ab73b8-4b52-43db-ba58-a6e55b1638ba", "sighting_of_ref": "indicator--4b1ac19c-0731-470e-902c-0c4665f5e279", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2d0006-d3b9-4d9f-9c60-b75a854ad87d", "sighting_of_ref": "indicator--b8d878cd-2330-413e-98d5-7c3bf1e0a0be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4434892a-1a55-4cc7-944d-033a596b48dc", "sighting_of_ref": "indicator--b8d878cd-2330-413e-98d5-7c3bf1e0a0be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9e63bd-4937-4273-9d0c-29adbc79568e", "sighting_of_ref": "indicator--44c3abf6-d682-45da-b409-cee9bcee0db5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30dcc23-0226-4bc9-ad60-ddecf9b21bcc", "sighting_of_ref": "indicator--568e8268-b18f-4a35-a198-2b2deddab69c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12505250-bb1b-4544-9af8-49e2d21131ec", "sighting_of_ref": "indicator--568e8268-b18f-4a35-a198-2b2deddab69c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b00791-287d-4e3a-ae11-d2b6428c3940", "sighting_of_ref": "indicator--568e8268-b18f-4a35-a198-2b2deddab69c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd59b476-2bb2-4de0-b95a-8226fb5185c6", "sighting_of_ref": "indicator--b7ae8536-8494-41cd-a75c-ecbb68b23b12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baef6ba-41e5-4b9c-ac54-8b2b706ca1a0", "sighting_of_ref": "indicator--09d5c384-6c53-4b94-bd8c-6865522531af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54b02fc-7fc4-4868-bfbe-31e5fb74cc1c", "sighting_of_ref": "indicator--09d5c384-6c53-4b94-bd8c-6865522531af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699bb830-0477-4ece-8e0c-469c4c664314", "sighting_of_ref": "indicator--79abca33-010e-4fbe-8f74-75f6c47f850a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e63a73-a321-4c02-9c65-6b70a990582f", "sighting_of_ref": "indicator--79abca33-010e-4fbe-8f74-75f6c47f850a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e6d59a-b34d-443f-8ef9-ad3d0aac59f0", "sighting_of_ref": "indicator--79abca33-010e-4fbe-8f74-75f6c47f850a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57e6840-dc3b-4c16-9503-1823cadd7837", "sighting_of_ref": "indicator--94b14aa6-1f7c-46de-8ab1-01e37ef19115", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d23346-4aed-4c20-8aa8-e80eaa12fc93", "sighting_of_ref": "indicator--94b14aa6-1f7c-46de-8ab1-01e37ef19115", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1bd6f2-1ea3-4c85-93ca-215032bc440a", "sighting_of_ref": "indicator--1e262221-751c-483d-ba20-3051ee4f3766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558d0877-653e-4e55-bef4-03b728f110c3", "sighting_of_ref": "indicator--1e262221-751c-483d-ba20-3051ee4f3766", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a68674e-42b9-4f94-b388-0341d1c45029", "sighting_of_ref": "indicator--1fddb11a-5870-460b-8a56-075f11967a1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b32370-9fb0-421d-aa23-1c60b46db906", "sighting_of_ref": "indicator--1fddb11a-5870-460b-8a56-075f11967a1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054f2172-8bc8-4c88-9f3b-047735630aab", "sighting_of_ref": "indicator--1fddb11a-5870-460b-8a56-075f11967a1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf2ec21-bc06-4b11-bbd4-7bddaeb31f43", "sighting_of_ref": "indicator--c3372536-2290-4084-ad25-f6845a74242f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08cd023-91c3-4a2d-b184-a385ba88b35e", "sighting_of_ref": "indicator--c3372536-2290-4084-ad25-f6845a74242f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3f13ad-1510-444e-94d8-7bac553c3fd4", "sighting_of_ref": "indicator--e768aac0-2d4b-42a5-b798-0e70c757ea4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a31282a-3adf-4c6e-991f-983b9daf52de", "sighting_of_ref": "indicator--c98a44f9-c0dd-4b89-bfc5-6810421ce0c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5148dd06-9be2-4fc3-a544-a5e5ae204d2b", "sighting_of_ref": "indicator--9bf7e2ae-347b-4aaf-bc15-1e03e4cae473", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae40e87e-c42e-4de1-85b9-78a800ed9d6c", "sighting_of_ref": "indicator--c58da695-fb9f-4a05-bb1a-6a51380079e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77495553-9d3a-4121-9d79-53c3979e2ac6", "sighting_of_ref": "indicator--32384790-f68a-47e1-bb55-3b5f3e9aacc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3b11d5-5671-4db1-a6c4-be7ac7de5996", "sighting_of_ref": "indicator--32384790-f68a-47e1-bb55-3b5f3e9aacc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb21f53-c2bb-46e0-8eaa-b3829989a833", "sighting_of_ref": "indicator--958c0bd6-c4b0-4f0f-ae0b-0794848c2f03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e71acf7-d802-444b-89db-087e789b9425", "sighting_of_ref": "indicator--958c0bd6-c4b0-4f0f-ae0b-0794848c2f03", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6576b575-2bb0-4163-b81f-53828bfa32cd", "sighting_of_ref": "indicator--958c0bd6-c4b0-4f0f-ae0b-0794848c2f03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5e4ab2-0fe9-4178-9443-b54e53317946", "sighting_of_ref": "indicator--9b47da2e-98be-44f4-ab40-fac3d1b5408c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c4fc8d-1394-4dac-8618-bd4863f6b871", "sighting_of_ref": "indicator--9b47da2e-98be-44f4-ab40-fac3d1b5408c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef4e91-45df-4e51-95d4-6dcdeca2c137", "sighting_of_ref": "indicator--9b47da2e-98be-44f4-ab40-fac3d1b5408c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc43de9e-2218-4d68-9935-50aebf741059", "sighting_of_ref": "indicator--d40a073b-ec8b-4210-a499-0b0810c44d34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84af6ae-1f24-49ca-bf4f-4c8f33658895", "sighting_of_ref": "indicator--d40a073b-ec8b-4210-a499-0b0810c44d34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6289c74b-4730-4e95-9b20-a2e831c46651", "sighting_of_ref": "indicator--0a8d39b5-6f4b-46d2-8978-ea25d9f4655d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d36074-f4ba-485a-acdc-b2f727feadff", "sighting_of_ref": "indicator--0a8d39b5-6f4b-46d2-8978-ea25d9f4655d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda9b4bb-6fca-4785-8677-d932e9368f82", "sighting_of_ref": "indicator--0a4f31e7-ed90-4071-8a91-92a760c1b219", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f22c17f-c1e0-4f10-bb14-699b7b94bac7", "sighting_of_ref": "indicator--0a4f31e7-ed90-4071-8a91-92a760c1b219", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324642c4-934a-42ec-977f-910751eabdab", "sighting_of_ref": "indicator--c7e80442-8657-4593-b8a0-ee68e0429731", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1609cc-923f-464a-83a7-fe772eaa87e3", "sighting_of_ref": "indicator--8714f41c-eb78-4216-97af-5e00db1eb7af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26e126d-0370-4583-bbeb-349fb1c08a0e", "sighting_of_ref": "indicator--19ea9d50-c597-4070-8e78-7015d066e3cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a764eb10-0e56-4f6f-ae33-82096fd3abd4", "sighting_of_ref": "indicator--c0c81b16-b8ad-482b-838f-7db3f3da71e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c08f80-41ab-445b-8bb1-1953db307a87", "sighting_of_ref": "indicator--14549aba-afc1-4137-a939-342a4c55c4b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa32c1-4939-456c-81af-a0e8de44c2ee", "sighting_of_ref": "indicator--1d5e0faa-4f92-41cf-b3a3-b5acbd8c723f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a2b85b-d150-4c8e-81ee-9af926451fa2", "sighting_of_ref": "indicator--c6a44805-7e3d-4b2b-a938-52c0f35f0c82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075ab010-e015-41a1-89c3-5f58a5d845fb", "sighting_of_ref": "indicator--c6a44805-7e3d-4b2b-a938-52c0f35f0c82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2f390f-e016-4676-9ef9-b52be93a0fec", "sighting_of_ref": "indicator--c6a44805-7e3d-4b2b-a938-52c0f35f0c82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2f9a63-fa34-4291-a8e5-2f233a56a522", "sighting_of_ref": "indicator--d82769df-d18b-49ab-8c88-cdffb01e605f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd28e6fa-50e1-4a40-a7ed-f5078057e1d5", "sighting_of_ref": "indicator--1d16021a-1ff1-4dd6-abb7-6bdeb4fb792c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc61a32-eac6-4c9b-bdbe-fbdbefde51e6", "sighting_of_ref": "indicator--c3f5e479-4ed4-4fdd-b949-9c7d9be756c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cea63ab-949f-45d7-8512-349172ef5e58", "sighting_of_ref": "indicator--c3f5e479-4ed4-4fdd-b949-9c7d9be756c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3314dc97-c979-46f5-9562-ea31901603a5", "sighting_of_ref": "indicator--c3f5e479-4ed4-4fdd-b949-9c7d9be756c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524985ba-9c72-490f-86c6-5bd4c488ac6d", "sighting_of_ref": "indicator--482c794a-aec7-4d23-8c1a-ed0874bf2098", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0ab759-82fb-4c6c-9676-30dec051b583", "sighting_of_ref": "indicator--482c794a-aec7-4d23-8c1a-ed0874bf2098", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8f6a6c-4c12-461a-8a36-a99ff563f882", "sighting_of_ref": "indicator--f614cc33-044a-4529-8828-7c9f895e9e3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d704bbcd-a747-484c-a927-1cd5a8d5476e", "sighting_of_ref": "indicator--163ce27f-7a7a-4d53-8e86-ced3bf29dda3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c54089c-9d22-4ab1-a78a-8cb8598b1276", "sighting_of_ref": "indicator--9d269994-5718-48d5-8627-4133d8643308", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60de67d0-f315-4049-af63-0fd21fde07a2", "sighting_of_ref": "indicator--36f404c9-3d3b-401f-8d87-a0d9de553ede", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff0881a-a454-40db-9b91-249b33aa693e", "sighting_of_ref": "indicator--36f404c9-3d3b-401f-8d87-a0d9de553ede", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727e0e7a-5863-49d6-875b-2e142db4f29f", "sighting_of_ref": "indicator--36f404c9-3d3b-401f-8d87-a0d9de553ede", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b81f2-aaf1-449b-a8d3-100542d1b431", "sighting_of_ref": "indicator--b5d1f0cd-a1f1-4dde-9a57-bed8ec0c078b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6c6de1-75c1-4943-a5c3-5165f2a81cba", "sighting_of_ref": "indicator--52a9e221-87ec-4e3f-a8d1-e88283ce1fe6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e868b6-97d9-4c5e-8941-f2fb4e6530d3", "sighting_of_ref": "indicator--52a9e221-87ec-4e3f-a8d1-e88283ce1fe6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0313a52-0efb-45cd-a898-9d0ed6f04895", "sighting_of_ref": "indicator--60e5b583-7f2f-4bce-814d-ac6671709280", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dddb8f-fbb4-4e96-8bb3-9a3f5dacb2f4", "sighting_of_ref": "indicator--c2f77768-a594-41be-aff8-d77179365ad3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c040f6-0e3e-4468-b07b-0764f409a798", "sighting_of_ref": "indicator--c2f77768-a594-41be-aff8-d77179365ad3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1ecc8d-bd2e-4430-a480-314d10fcc9d4", "sighting_of_ref": "indicator--99484304-eaad-47ba-8c3f-388795f030b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae981ad1-e667-494c-aac2-bba672dfff2a", "sighting_of_ref": "indicator--10d5343a-f3c8-48ca-9b52-13f25c18e27f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb15c10e-30b5-4fba-af17-f4a7ffb6389b", "sighting_of_ref": "indicator--10d5343a-f3c8-48ca-9b52-13f25c18e27f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9254f457-3ffe-4db1-9abc-dd4325f5f987", "sighting_of_ref": "indicator--10d5343a-f3c8-48ca-9b52-13f25c18e27f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0ab109-b4a2-48c7-9adb-eb92a02131bd", "sighting_of_ref": "indicator--c9b23aee-a5c5-48b2-8861-70aecfe2b91d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cb0c6e-8fab-4d0f-99ae-f95b41e0b04d", "sighting_of_ref": "indicator--6239fbc8-ffda-4ba3-96d3-911a2622e028", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa600779-20f8-416e-8be3-5e065223cd70", "sighting_of_ref": "indicator--a49a1cbe-be1f-4fdb-9e14-987033c58de4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6570f2-5c2a-45de-800c-8613584f48ca", "sighting_of_ref": "indicator--a49a1cbe-be1f-4fdb-9e14-987033c58de4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34db9486-a856-47e1-956a-5ea0d757f04a", "sighting_of_ref": "indicator--a49a1cbe-be1f-4fdb-9e14-987033c58de4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d1cc5b-f93c-4d81-a263-18e85e534dc0", "sighting_of_ref": "indicator--e0d51a81-2c5b-409b-9a68-cdf1c688d126", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c13437-8056-4ebd-99c7-23c245dbef3f", "sighting_of_ref": "indicator--e0d51a81-2c5b-409b-9a68-cdf1c688d126", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9131f1e-5552-4d85-97df-be4b3b78a889", "sighting_of_ref": "indicator--c3cfc577-2947-409f-824c-0ccf7b2a8fdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a34751-4d7e-4ab5-b5d0-f3e506b21ead", "sighting_of_ref": "indicator--c3cfc577-2947-409f-824c-0ccf7b2a8fdf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff96da3-012b-4293-8088-0b1b5f93286a", "sighting_of_ref": "indicator--ae9ffdaf-808a-4c39-8143-a08eb3c59667", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77624b6-99b4-44ba-9026-7a81166faa36", "sighting_of_ref": "indicator--ae9ffdaf-808a-4c39-8143-a08eb3c59667", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0b4614-2618-4743-b531-7a5b4f64f9c0", "sighting_of_ref": "indicator--5fabd47d-0696-4b11-a6f4-b02dc5dbf033", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb78d9f-9fa9-43fa-860a-b61300999673", "sighting_of_ref": "indicator--5fabd47d-0696-4b11-a6f4-b02dc5dbf033", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f629cf-98e9-42a6-94af-75faf356463a", "sighting_of_ref": "indicator--24f8c5be-0d33-4044-9f6b-598cd5ead76a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3dec96-06b1-4cbb-85a7-ac5d7d4858bd", "sighting_of_ref": "indicator--f60109ed-0416-40f9-83ee-cde4c0a561c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9819972-4411-4467-aea0-334d2e627ae7", "sighting_of_ref": "indicator--efb32fbe-7a97-498c-90c9-fd6a0826a731", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3270a3-71cb-46c3-b1df-9b19de322fb6", "sighting_of_ref": "indicator--eea93362-cc62-4aa5-8d1a-11f0239fffc2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e966a322-32c4-4535-ba70-b93c842361c3", "sighting_of_ref": "indicator--5085b4e2-17f5-4c60-aa8d-2af49409d381", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0fe8d0-5d1d-4968-b6c1-78f02c4b93be", "sighting_of_ref": "indicator--5085b4e2-17f5-4c60-aa8d-2af49409d381", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b42121d-3e0e-4cbf-a002-1f4a15a6272e", "sighting_of_ref": "indicator--1b35a12f-2473-4194-93c1-0e8706e03821", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e431df2-16ce-41f3-bab8-3e0d538eeb58", "sighting_of_ref": "indicator--b8939d9e-f82c-4f33-94dd-6196eec7c401", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f92433-cef8-4f54-9006-f45aa426e267", "sighting_of_ref": "indicator--aa25fbc2-c646-4296-b0c8-e8e1f2f823d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d13145b-c7f3-4b3b-ab9a-4dcb22d4b0b6", "sighting_of_ref": "indicator--aa25fbc2-c646-4296-b0c8-e8e1f2f823d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e16559-db74-44f8-bd3e-295db0e8e3ef", "sighting_of_ref": "indicator--8dceee68-59cc-4e34-91f4-88a71d677e11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cf81fc-4888-4f58-b068-60a649392e76", "sighting_of_ref": "indicator--8dceee68-59cc-4e34-91f4-88a71d677e11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f46fae-76e1-4bda-8782-fff601506c2f", "sighting_of_ref": "indicator--8dceee68-59cc-4e34-91f4-88a71d677e11", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ce00ee-4a5d-40b4-9bad-3e7a8e7d1350", "sighting_of_ref": "indicator--336b9ca9-4e6f-425f-a652-1b18c8fbe173", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d04f7c-d98b-42d0-8909-b6bcd893300c", "sighting_of_ref": "indicator--336b9ca9-4e6f-425f-a652-1b18c8fbe173", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f2c4f3-060e-4b9c-ac65-b95c5829a3a1", "sighting_of_ref": "indicator--55958a6b-7f61-4610-b356-386e44d2dbbd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfc7332-64ab-43f9-9047-760a11b9cb71", "sighting_of_ref": "indicator--55958a6b-7f61-4610-b356-386e44d2dbbd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c0a706-846a-4cf9-9cca-6d25f7c62f50", "sighting_of_ref": "indicator--44092fdd-57d9-454d-a45e-f7839fa2c226", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7e97a9-ee4e-42eb-8160-727224631a5b", "sighting_of_ref": "indicator--99e1cece-dd21-46d6-b394-1ed67e4a143d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf58065-4674-4fb0-9633-653988c14dbf", "sighting_of_ref": "indicator--3ef74be7-f1e1-400b-95f1-39ead995e465", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a517a15-07d3-4b3a-9607-c66c66dd4252", "sighting_of_ref": "indicator--3ef74be7-f1e1-400b-95f1-39ead995e465", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ac6825-b09f-4216-acfe-b033b67dc6f9", "sighting_of_ref": "indicator--0e09b901-9508-4994-9c61-f325c7fd4bd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01883aaa-1d53-492c-8c82-663bae760d2c", "sighting_of_ref": "indicator--0e09b901-9508-4994-9c61-f325c7fd4bd9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb46a402-7de0-4960-8929-95abfb9fb2e9", "sighting_of_ref": "indicator--6636ebd6-13ec-47bf-87ea-ff2934c2aef2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0ec2d1-9734-43b0-98c6-8a4ee82fd6ac", "sighting_of_ref": "indicator--6636ebd6-13ec-47bf-87ea-ff2934c2aef2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0403e48-5139-4666-b848-f0e78e9ab4b8", "sighting_of_ref": "indicator--6636ebd6-13ec-47bf-87ea-ff2934c2aef2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dba1a2-8eee-4ded-bcbc-3d60d57838ef", "sighting_of_ref": "indicator--41b215cf-8f14-498f-8eec-0d35748afbb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a400fb-4de4-49cc-94cd-bc1e99df1065", "sighting_of_ref": "indicator--e7fee69c-c779-494d-90de-56491afd8d8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521ba71b-87f7-44cb-b7f8-b546864904ac", "sighting_of_ref": "indicator--a04538ad-6882-4641-b376-bd77153d61fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836a467e-7f2c-4b05-9746-74fffec06bcf", "sighting_of_ref": "indicator--a04538ad-6882-4641-b376-bd77153d61fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b75672-94c4-440d-aa7a-bec676b6d2b5", "sighting_of_ref": "indicator--8d1a87f8-c083-49d7-a136-16eb9fcf679c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a3687f-007d-4e33-896c-7fb3efc4d456", "sighting_of_ref": "indicator--8d1a87f8-c083-49d7-a136-16eb9fcf679c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df1da90-dc6e-4396-ae91-240cf7154372", "sighting_of_ref": "indicator--8d1a87f8-c083-49d7-a136-16eb9fcf679c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f50be5-6cc3-4301-aa0b-86ef90f37849", "sighting_of_ref": "indicator--abe25cfc-7971-49b6-929d-cb3cc422c995", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27e07fc-9117-4d43-baf4-eef39e12fe86", "sighting_of_ref": "indicator--abe25cfc-7971-49b6-929d-cb3cc422c995", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f00b0-64fb-4a83-a073-2f56776686f0", "sighting_of_ref": "indicator--e9bf5a66-6ec8-43c4-9528-bded7c4ecae1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b137b57-d7b3-4922-8492-b512a6ed529f", "sighting_of_ref": "indicator--2ebc8cf5-9dd8-4b10-9769-3af182d00346", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56651b57-2006-476a-be37-297ff2d6f9e0", "sighting_of_ref": "indicator--2ebc8cf5-9dd8-4b10-9769-3af182d00346", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a410bfcf-344d-46fa-8000-cd047fce20f9", "sighting_of_ref": "indicator--1c662b5d-ce83-4cfa-8291-50689acacd44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7550c33b-dad5-428c-9cec-d46ccedd6df7", "sighting_of_ref": "indicator--767b295c-3034-4973-abbd-4d3e4e7a1d1d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a379bd2-4f59-444f-804e-8e62370860f8", "sighting_of_ref": "indicator--87472630-4d86-4349-9228-94cd9090b725", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5635d7-ae9f-4a0a-baac-b4d482996303", "sighting_of_ref": "indicator--87472630-4d86-4349-9228-94cd9090b725", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f080be42-5a40-4634-b37b-5356eb3c1d69", "sighting_of_ref": "indicator--87472630-4d86-4349-9228-94cd9090b725", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a254b687-b2fb-4c17-b87d-4a68f1e42ff3", "sighting_of_ref": "indicator--bb5ecc5a-26f8-4df4-b7f9-c98497269f71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d822321-a5f3-4f0a-b3a8-86e674552190", "sighting_of_ref": "indicator--9306ccc0-45ea-4016-86a6-45f6587e6f86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a197e7-43d4-4fd4-8e1d-dead0ef99bde", "sighting_of_ref": "indicator--fc2d6a5a-4124-4c54-87be-598870d63b6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9c1c78-679a-49c3-acea-ea460264680d", "sighting_of_ref": "indicator--62cc5540-9e8b-4d41-b00a-e259903afdba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba55153-85df-48f6-8846-b48eaadbc889", "sighting_of_ref": "indicator--62cc5540-9e8b-4d41-b00a-e259903afdba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a6864b-a631-4240-9eda-8c83be275b87", "sighting_of_ref": "indicator--c82be9d6-51a4-481e-b575-00cc892bff88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13754102-ce39-450e-b1ed-afd97febefa9", "sighting_of_ref": "indicator--c82be9d6-51a4-481e-b575-00cc892bff88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2593fd-4743-4262-b6f9-efe0f022a7b5", "sighting_of_ref": "indicator--c82be9d6-51a4-481e-b575-00cc892bff88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b61ca6-90ea-429f-bbdf-b577b8073b32", "sighting_of_ref": "indicator--d2e73413-e0c5-439b-8d3f-73d996b06a2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f116c22e-c949-49c6-bc67-67ad3cc2db75", "sighting_of_ref": "indicator--c50a2844-bcdc-4f41-9893-56d360962525", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c99be-be31-4459-a37b-39f6fa49d7ab", "sighting_of_ref": "indicator--c50a2844-bcdc-4f41-9893-56d360962525", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a97c681-e98e-4164-bb53-2351aeca03cd", "sighting_of_ref": "indicator--6fb353f6-f686-4875-8c39-85cbfb4279ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce30148-a0f9-41d5-8cb2-7b5fbbee12ba", "sighting_of_ref": "indicator--0d4a41f4-5d80-48e3-b5d6-765fd48e9f78", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eff8f5-a4df-422b-b1fe-402c87203787", "sighting_of_ref": "indicator--5e753421-e7c2-424b-b576-50a7ea28c974", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb438a02-d3e5-4557-b4b7-33ebb7b23c49", "sighting_of_ref": "indicator--5e753421-e7c2-424b-b576-50a7ea28c974", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1a6553-703e-4f34-a6fe-576c6a6c902e", "sighting_of_ref": "indicator--b28a26a7-30e3-469a-b10b-7395b65d2cb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6ab156-7dd8-404a-99ef-40bf060adb7b", "sighting_of_ref": "indicator--b28a26a7-30e3-469a-b10b-7395b65d2cb5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1a5b68-901c-44d6-9d9b-64ce0376f295", "sighting_of_ref": "indicator--7cb2df27-a4a0-481f-afc2-d750247abf8e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04823c3d-7e9c-4e6e-b871-c912b2c6a9ad", "sighting_of_ref": "indicator--7cb2df27-a4a0-481f-afc2-d750247abf8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f240885c-2b8a-4f12-a0e5-fe5dfff61508", "sighting_of_ref": "indicator--d9accb1a-c88f-41ed-bca8-0207cd5a3b4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804c6754-e200-4148-8d3d-ab5782f561f4", "sighting_of_ref": "indicator--d9accb1a-c88f-41ed-bca8-0207cd5a3b4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b2c145-0e7a-416f-b4a1-f33eee567adf", "sighting_of_ref": "indicator--4cacf6e3-0228-4930-8a4b-b3e153e1bb6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25735f3-36b7-438e-a98e-b4d2bc6b9f04", "sighting_of_ref": "indicator--4cacf6e3-0228-4930-8a4b-b3e153e1bb6d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d012e81c-1c37-4ccb-a93a-8e7875a38acb", "sighting_of_ref": "indicator--576bb2d2-1a50-4c1d-a371-e2e5f071970f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42a94f7-f3ce-4efe-b913-8f5151c17cae", "sighting_of_ref": "indicator--576bb2d2-1a50-4c1d-a371-e2e5f071970f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b998ef4e-0728-47d2-9695-96df1a697193", "sighting_of_ref": "indicator--576bb2d2-1a50-4c1d-a371-e2e5f071970f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e841734f-dca7-4523-8be6-9784fa965ae0", "sighting_of_ref": "indicator--b14587a0-3bc5-42c8-b85a-c734228a7b58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88c495d-e111-4f66-909b-bf3be0f7330a", "sighting_of_ref": "indicator--b14587a0-3bc5-42c8-b85a-c734228a7b58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf147203-b90f-4dc7-be86-bcbf620b3136", "sighting_of_ref": "indicator--08637e97-09c9-4016-9dbc-94cae95713db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49618698-8703-4343-b368-b424dacce2bb", "sighting_of_ref": "indicator--08637e97-09c9-4016-9dbc-94cae95713db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346eddf0-1e06-42d5-b5b5-96b742944257", "sighting_of_ref": "indicator--08637e97-09c9-4016-9dbc-94cae95713db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5655da-7e34-4a27-aa14-5701cabbf590", "sighting_of_ref": "indicator--41ac5d35-d7a6-4a97-94ba-3600d353959a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb6bfeb-bba2-41e2-9cf2-4e1e2ae5b636", "sighting_of_ref": "indicator--41ac5d35-d7a6-4a97-94ba-3600d353959a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cdfe36-9ede-47f4-abb3-30e857bd9033", "sighting_of_ref": "indicator--67e0b1e3-d7ad-4199-9ac2-b0a2359a68fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5d5029-a7c4-488c-abe6-26f90be02e53", "sighting_of_ref": "indicator--6bd43330-2c15-4a33-9d16-c274fb2c4ed1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb6daa-0813-49ea-8778-f64a5e1ded31", "sighting_of_ref": "indicator--df78af42-17ee-4181-b056-7c7b76c9b26e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eef0c8-57c1-4211-9b40-eee5edb2a15f", "sighting_of_ref": "indicator--df78af42-17ee-4181-b056-7c7b76c9b26e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb204b4-dbd1-4438-a033-beee349bc77f", "sighting_of_ref": "indicator--acb79f63-eea2-4e4d-b93c-e9f4f15005a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95024592-03cd-4d8c-aad3-261ce2944d6a", "sighting_of_ref": "indicator--acb79f63-eea2-4e4d-b93c-e9f4f15005a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91da5c0e-d27c-485d-99c2-a0591c49dffe", "sighting_of_ref": "indicator--1bdae6ee-6234-47b1-92c9-eeca7b780a6a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214dd066-5db1-4a2b-b728-7460b9a7ca20", "sighting_of_ref": "indicator--1fc5da0a-8348-405c-8148-7623f00eaf4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2926d115-fd98-4b17-a4bb-3b40531c3f2c", "sighting_of_ref": "indicator--1fc5da0a-8348-405c-8148-7623f00eaf4b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e907ba-e1f0-402d-86d8-342537a2f033", "sighting_of_ref": "indicator--74143529-8052-4d48-a06a-6bbc30bd0563", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ab4993-e977-421d-9059-1589abc87779", "sighting_of_ref": "indicator--74143529-8052-4d48-a06a-6bbc30bd0563", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2653620f-d439-4a2a-8464-77b99c6b7dc9", "sighting_of_ref": "indicator--21636998-ef5d-4202-912c-3b886611007d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacd00ce-c2af-49ff-94ca-7c23a7b5a3ef", "sighting_of_ref": "indicator--cb2ce9df-0e8b-42fe-be41-3233e01dd205", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc2a5ff-b802-4141-8b28-d18ebff35b8f", "sighting_of_ref": "indicator--cb2ce9df-0e8b-42fe-be41-3233e01dd205", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63526810-3c90-4572-bb05-fdfbdcc3871b", "sighting_of_ref": "indicator--c1e7e885-d588-4497-afb6-7c0edc6babd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4b6171-71e3-4f39-8e18-7d11ea20a96a", "sighting_of_ref": "indicator--b12d1891-1b95-4b09-b48f-24937c64b36c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4f89fc-fb3e-4f74-882e-f58bb5c3be08", "sighting_of_ref": "indicator--b12d1891-1b95-4b09-b48f-24937c64b36c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65380efc-4678-4d36-b7de-e9aa8a34e1d5", "sighting_of_ref": "indicator--5a18f788-4981-4d40-bec4-d481c5c8a657", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7892e91a-3a14-4e84-99cc-434126a358e6", "sighting_of_ref": "indicator--b79d9dba-67ab-418e-bf02-1c03f54fc3c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085802db-5c1a-49a0-9ab3-eee637a032f8", "sighting_of_ref": "indicator--9882b35d-596f-4b21-8ec7-43b1525a981f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6f09ef-6265-4425-a587-fcc697f86017", "sighting_of_ref": "indicator--967d04aa-30e3-4b15-b2e8-a806001b5787", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc96ec2-a500-4275-b448-93148c2ae254", "sighting_of_ref": "indicator--967d04aa-30e3-4b15-b2e8-a806001b5787", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b9b361-0078-48c9-b979-c79533ed2702", "sighting_of_ref": "indicator--7f0c362b-fd99-4e5f-a044-d8eeadcc2af8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f721baf2-a069-4311-acdf-a29d65a37ddb", "sighting_of_ref": "indicator--058bb8c7-828d-4359-8f6d-bc055731a72e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce091aa-5357-4b76-a711-578fa835583d", "sighting_of_ref": "indicator--058bb8c7-828d-4359-8f6d-bc055731a72e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10607843-5708-43b2-a2bc-bdb0a7d433b6", "sighting_of_ref": "indicator--29900271-3efa-4f45-827c-2105e1157e6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fa03ae-2c61-438b-bbdd-26806340ec00", "sighting_of_ref": "indicator--cf9c7e3f-4a48-400f-919d-6ae77f7aaf5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e01a45-7745-4365-9b8b-1a5a34b0748d", "sighting_of_ref": "indicator--cf9c7e3f-4a48-400f-919d-6ae77f7aaf5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae963dc0-5c28-4b45-9eb2-0c029124fbf4", "sighting_of_ref": "indicator--99b7c98b-76e9-4a99-9f6b-ad9ed5604da2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610f3692-c04c-4781-ab0a-5f69925013ee", "sighting_of_ref": "indicator--99b7c98b-76e9-4a99-9f6b-ad9ed5604da2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daff9c4-57cc-4c5d-99c2-0f36f7e75a53", "sighting_of_ref": "indicator--87473191-904a-4593-9677-f1872e23bcd0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6f2beb-14f4-4d3f-9503-0f3165bdd7d1", "sighting_of_ref": "indicator--a3f918ca-ae9e-4589-9bb8-566a000bcc61", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c051e9a5-db05-4c27-abe6-ab2ab5dea178", "sighting_of_ref": "indicator--a3f918ca-ae9e-4589-9bb8-566a000bcc61", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2329b9ca-9399-4898-9a15-66b7bd50090d", "sighting_of_ref": "indicator--49b4a14e-edc4-439b-8457-cbadd537506a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c70f0c-0c5b-425d-b058-02c8b7ab0902", "sighting_of_ref": "indicator--bb8654d6-7afa-49c5-bcd8-fbd07c2de380", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb00fa3-f078-4c6b-b34d-a243c5820218", "sighting_of_ref": "indicator--bb8654d6-7afa-49c5-bcd8-fbd07c2de380", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e800e5-67e4-48be-9c61-4194c6217db8", "sighting_of_ref": "indicator--44ab3244-f535-4d73-97dc-495df5aa45da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38570278-b6be-4862-86ca-69cf44fde72d", "sighting_of_ref": "indicator--44ab3244-f535-4d73-97dc-495df5aa45da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4c762a-277f-4db7-a909-33ec9c68a12d", "sighting_of_ref": "indicator--0c0aa07c-f57d-4c8d-9ee0-ee57a3b092f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cb3774-e9e7-433d-8df0-75e48c930c84", "sighting_of_ref": "indicator--0c0aa07c-f57d-4c8d-9ee0-ee57a3b092f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab19ca8b-efd0-4183-b008-5819ba2b2bab", "sighting_of_ref": "indicator--0c0aa07c-f57d-4c8d-9ee0-ee57a3b092f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88864f80-9317-4f78-ad26-5411b949bf29", "sighting_of_ref": "indicator--ec55bd2d-d031-41d4-b45a-c0deb5551892", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7022cf2-e9f9-4ea8-b6be-a2618c3df565", "sighting_of_ref": "indicator--99c7fed8-fd61-4fc8-a3db-3298615f27a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1315e9-0ee3-4b70-82a9-f8b0b194be6a", "sighting_of_ref": "indicator--99c7fed8-fd61-4fc8-a3db-3298615f27a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb26ff8-360c-4bbc-a303-adca275247dc", "sighting_of_ref": "indicator--794459e8-4e06-40ac-923b-6868df57956c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f687faaf-d8f7-4d3e-909f-bbc6b52fbcc3", "sighting_of_ref": "indicator--794459e8-4e06-40ac-923b-6868df57956c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccb5af3-df30-410a-9f5f-7b1e1cc01df5", "sighting_of_ref": "indicator--0ee8ce51-7b88-4fc7-8875-efc79a657b1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bff603-7eb5-4f7c-86c6-aac02fe1361d", "sighting_of_ref": "indicator--0ee8ce51-7b88-4fc7-8875-efc79a657b1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1deaf8c1-c875-4bf1-8f83-fc4cc621b396", "sighting_of_ref": "indicator--8fea16e4-789a-433f-8d8f-0fdb2a4f55da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24aad1ef-c993-4945-917f-22e6d2aa2c23", "sighting_of_ref": "indicator--8fea16e4-789a-433f-8d8f-0fdb2a4f55da", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b645a4-014a-4dd2-a8fa-603ad873a871", "sighting_of_ref": "indicator--8fea16e4-789a-433f-8d8f-0fdb2a4f55da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d0619f-9aee-421f-abcd-b246d7d28a88", "sighting_of_ref": "indicator--40bb0806-eb21-4ed4-b080-9931fc179cea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f065b377-c0de-4d71-86b2-5b2ce8f5d56d", "sighting_of_ref": "indicator--40bb0806-eb21-4ed4-b080-9931fc179cea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cbb53d-a5ea-4fca-9523-13802e4e67fb", "sighting_of_ref": "indicator--ca60ac4a-5af8-4ee6-b132-0419a616356e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c465b905-828e-49ba-a287-e10ee43c24b6", "sighting_of_ref": "indicator--8861b83d-0010-4ec2-a140-f7309dc2aa2b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1e7e72-6443-4832-9f3a-60b5d8fcc197", "sighting_of_ref": "indicator--5c8635c1-2099-49d8-9f00-5bb30de76c52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4ad4e4-391d-403e-9bf1-0830e5a2be7e", "sighting_of_ref": "indicator--643f5d2d-e785-411d-a24c-6b9e5fc1f19f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acd15e9-5c2f-4125-88a7-a8f9ff22d5ae", "sighting_of_ref": "indicator--b8001af4-270b-43be-b7cd-98089ea988e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44867444-8f12-4851-84fb-adfba1b6fc43", "sighting_of_ref": "indicator--76006b17-55c0-44e8-a61e-b26d8fa160f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f40dde-c446-4e59-ae24-7478cfdb141a", "sighting_of_ref": "indicator--76006b17-55c0-44e8-a61e-b26d8fa160f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e548cbf-0c42-46c3-8bc7-6295b52f6016", "sighting_of_ref": "indicator--76006b17-55c0-44e8-a61e-b26d8fa160f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22367c6-690a-4687-b5a1-d8cfbd6b9274", "sighting_of_ref": "indicator--37934898-9061-4af5-ad22-eac0d2e41e71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f38fc36-cebc-464b-be33-a2bc2bd96059", "sighting_of_ref": "indicator--4c339254-3d7e-4e42-956b-bf264fe6410c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d9a04d-a62e-4751-803e-b2d55330ca41", "sighting_of_ref": "indicator--4c339254-3d7e-4e42-956b-bf264fe6410c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d42381-f645-4538-917d-2fbf5c754e22", "sighting_of_ref": "indicator--91398140-33cf-4116-819b-81e7015571dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de525d-5d86-42e9-91f3-cebee4d03680", "sighting_of_ref": "indicator--91398140-33cf-4116-819b-81e7015571dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a102fa0c-5f86-4e60-a4df-c88342205252", "sighting_of_ref": "indicator--d4e65894-dca7-468a-89ad-c1951fab7000", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4e30e2-636f-4330-9603-e289f4e4ec10", "sighting_of_ref": "indicator--d4e65894-dca7-468a-89ad-c1951fab7000", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b725b0c-466e-4ad2-ac15-336f46c8b82b", "sighting_of_ref": "indicator--63b08f09-f0d7-4259-99b1-4c702ce9dc2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f0ddb2-01be-4368-8a8c-7895762127d0", "sighting_of_ref": "indicator--584af071-dad9-4a95-bc54-23bd8edd5531", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aee0379-4a48-4c7b-b602-15bbb40f945f", "sighting_of_ref": "indicator--1b0f5618-df4a-4b04-bf17-aa4b00e93433", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf512a0-975a-4d95-b230-f9cbec8e0bfc", "sighting_of_ref": "indicator--1b0f5618-df4a-4b04-bf17-aa4b00e93433", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c5185-3fe1-4b65-87a0-eb85af56e186", "sighting_of_ref": "indicator--ca38259b-92a1-480a-ac50-342414a815ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f2f459-3699-4db4-994c-6a9b8b107563", "sighting_of_ref": "indicator--ca38259b-92a1-480a-ac50-342414a815ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7851ab8e-46a1-4be4-93fd-0e53e6f66f55", "sighting_of_ref": "indicator--412d7755-b78d-4879-8cca-bdfd7cf317b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc724585-67cb-4655-a1f0-2e0b1cd6bd81", "sighting_of_ref": "indicator--5a8380a3-a65c-464c-8c19-4a170d2b647e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a817916b-d32d-4361-85af-5b70be31ec2b", "sighting_of_ref": "indicator--fc910064-5031-4422-ba08-6baaa84d4bb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33706f30-0366-4966-ad94-72cab3d8863a", "sighting_of_ref": "indicator--fc910064-5031-4422-ba08-6baaa84d4bb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd3ca93-b49a-4c63-bb93-fefc683f82de", "sighting_of_ref": "indicator--fc910064-5031-4422-ba08-6baaa84d4bb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249b686e-12da-42e3-b3fa-1f4afb2ed4e7", "sighting_of_ref": "indicator--48574514-94ac-4bc2-aa82-3ae6af76ccb8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52644c-b918-4c38-b80c-2bd2ed90d8ab", "sighting_of_ref": "indicator--39948965-8c92-48fe-bfba-a90b38af194d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e71684-d644-48ea-a74f-ec5a4f14e086", "sighting_of_ref": "indicator--39948965-8c92-48fe-bfba-a90b38af194d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e141bf0f-037a-419a-9b0e-8d614faecb87", "sighting_of_ref": "indicator--44fc1580-f96a-440e-ab12-8eb36a1faa57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220575bf-48ec-446e-905b-dacb760ef31a", "sighting_of_ref": "indicator--840c61db-e9ca-4d2e-a878-e1fb148a7fc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58160d7-29a7-4315-9788-c0536af22550", "sighting_of_ref": "indicator--840c61db-e9ca-4d2e-a878-e1fb148a7fc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdb2dd1-6f01-4422-9832-5a5298e5c39a", "sighting_of_ref": "indicator--840c61db-e9ca-4d2e-a878-e1fb148a7fc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e99cef-74b0-4ae2-a413-a6a7e4d7d9ad", "sighting_of_ref": "indicator--0c5bf010-335c-42f3-b7ea-7aed991a3b2d", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05469224-4fbe-4d15-86be-c7b6100f7e77", "sighting_of_ref": "indicator--60b3a127-528b-4308-a287-4d1c4194f5db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f407c5-9bdd-4a2a-a9e7-94186497f853", "sighting_of_ref": "indicator--f2f9d84a-a171-4ee4-8c25-7e843f4aad95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b46356-bf95-49e1-9fc5-4702192a014f", "sighting_of_ref": "indicator--8f3288f7-6fb5-4b85-9792-4ce67d5f7bbd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf1c443-49ff-4149-9ff8-e43f866e8b1c", "sighting_of_ref": "indicator--8f3288f7-6fb5-4b85-9792-4ce67d5f7bbd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321b010c-1b04-4af3-abd5-f51f02ddb07b", "sighting_of_ref": "indicator--042bcd5e-eb86-4e16-a2ac-5e5a20c65da9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f5f538-b217-49c8-8736-d32d666e2c77", "sighting_of_ref": "indicator--042bcd5e-eb86-4e16-a2ac-5e5a20c65da9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e69914-9c40-402e-aee8-af5a3adec346", "sighting_of_ref": "indicator--e01afda1-7736-4ef9-8781-91d7514639c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21346a3-0df1-4a01-84f3-a9718abfb1bd", "sighting_of_ref": "indicator--e01afda1-7736-4ef9-8781-91d7514639c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df482dd-b337-4f31-b32a-5c09c3416b70", "sighting_of_ref": "indicator--e01afda1-7736-4ef9-8781-91d7514639c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48522eaf-08a4-418d-b374-863516d4dd9c", "sighting_of_ref": "indicator--80d122fe-d483-447a-9ca4-645d50f92590", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da3ead-0db2-425a-a2df-1958b3332971", "sighting_of_ref": "indicator--80d122fe-d483-447a-9ca4-645d50f92590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3be315-4e44-4abc-ad2c-f1d620930213", "sighting_of_ref": "indicator--7aa11dc6-4169-42f0-9eb6-3613b0d34106", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef0f720-0d49-453f-81b9-ff6643254385", "sighting_of_ref": "indicator--7aa11dc6-4169-42f0-9eb6-3613b0d34106", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085409ca-1816-4782-a35f-b2ed5e335f5a", "sighting_of_ref": "indicator--7aa11dc6-4169-42f0-9eb6-3613b0d34106", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abd1d38-6104-4bba-a6a0-e977aae22c08", "sighting_of_ref": "indicator--0e8ebe9a-7f6b-4490-bffb-32a28863a0f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb47934-1e27-4741-90fd-35f10b4a932a", "sighting_of_ref": "indicator--0e8ebe9a-7f6b-4490-bffb-32a28863a0f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13703de1-5391-47db-842a-6fc46be1f9f0", "sighting_of_ref": "indicator--0e8ebe9a-7f6b-4490-bffb-32a28863a0f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d15daf6-ee9e-4e70-a0cb-13e8ab9377a1", "sighting_of_ref": "indicator--55380e94-1e77-4fd9-a048-c042c9342fcd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04598187-f6ee-48ae-94df-66373618200b", "sighting_of_ref": "indicator--ab3bb49a-8dc1-460e-acdd-a64b648ff983", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c597a1-0995-4b67-9627-d70927d4664a", "sighting_of_ref": "indicator--06ea88eb-68e0-4892-a984-dbc8c4319a2d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2791bc3c-95db-4a87-b59e-36d696122ecd", "sighting_of_ref": "indicator--25962167-c639-4a37-92dc-7c0a4b653b9f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e7d66d-1a1b-4302-b56e-aa8fa73341b9", "sighting_of_ref": "indicator--a1034adf-b0a5-476d-9961-ae3668fdd9aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb97e21-9bb1-4d7e-8044-33f91eea8887", "sighting_of_ref": "indicator--cf74778e-e307-42ed-946e-78daa63b6da5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bda27c4-d8b5-4314-b1b0-4da14acb8870", "sighting_of_ref": "indicator--9eafb986-09c5-495a-a779-7b461bb71479", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b828242e-b0e0-44b0-a200-ec281878f7de", "sighting_of_ref": "indicator--ea03663f-9607-45c2-b369-3b1d1899700a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef0a2a5-5aac-41f1-8789-9a9856bb6724", "sighting_of_ref": "indicator--e52a1565-1f77-4dd9-a1be-a25480695661", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a12a99b-8a9b-44fa-92fb-ce59056872f8", "sighting_of_ref": "indicator--9b4cc972-b5f1-4765-9c8e-4603b7220894", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69f40ea-223e-41b1-81c7-d88c576b4dd7", "sighting_of_ref": "indicator--d31bb486-11fc-4a5b-9744-6d293e7d3057", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d6222-3a58-4d40-a0bb-3b0f4f294f5e", "sighting_of_ref": "indicator--beb43c3e-1399-44ac-8159-93e70225d951", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b1ce5-0d5f-4186-bbd4-39e3b4141177", "sighting_of_ref": "indicator--b253a1b5-3602-40a5-a255-dbb87c464847", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cf587f-e4ff-4b6f-bf66-db0baeed78ed", "sighting_of_ref": "indicator--9c2d8a5d-c919-4d10-b4e2-92c1ad215898", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ed4383-18d5-406e-bc22-c84e5fbfd025", "sighting_of_ref": "indicator--dcf16817-1a09-491d-9d23-4bc7cbc35052", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6dc503-78bb-4d5b-93cb-9f72909f66a8", "sighting_of_ref": "indicator--69150834-1c2c-43d4-9f2b-bfbeb8855b09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f57f8c2-8a70-4ce0-8c8e-4d72f9118532", "sighting_of_ref": "indicator--0e91cbed-f237-4d11-8124-ec3b727aa493", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a80a8d-9383-415e-97d7-85ea29350140", "sighting_of_ref": "indicator--73bc3859-6dba-4729-9214-b376630fa427", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16804d6-e4e8-4a6b-ae7b-20a570e82759", "sighting_of_ref": "indicator--7c34958f-6d4c-46f3-8bae-db91a6eb63e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e245cb-af22-42ff-b5f6-9be159a19afd", "sighting_of_ref": "indicator--9932338d-f29d-4982-affb-5d3bdcead82e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c65f49-b81c-4f83-b068-6bf6f2659800", "sighting_of_ref": "indicator--149c2b21-70ae-41f5-bbb4-601d294c69bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9570dd15-fa03-45c2-931b-5e0e6a70ad6b", "sighting_of_ref": "indicator--b3320843-fc45-4723-b9fc-766bb3e57938", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a67b7d8-e249-49d7-9e3f-24349466a107", "sighting_of_ref": "indicator--51f33e68-03ec-4601-8250-b606931e5e47", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073c588e-2d68-45a0-b7ed-8daf8e0008de", "sighting_of_ref": "indicator--7024a9a2-4ae7-4d6c-a359-259517bbab48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ece4c3e-7eb3-41e4-a37d-b3998ab34ca6", "sighting_of_ref": "indicator--428fe827-9344-4764-81e0-b95b54ed21d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c236822e-8af0-4cdd-9d6d-c0c98f108449", "sighting_of_ref": "indicator--be4cfdd4-d46e-4811-a407-db647f8349ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac313482-2ac5-4967-8f5c-bd3d785f5eee", "sighting_of_ref": "indicator--0ef2878f-dce7-4f28-8f46-e7f25744e48e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d319f1-1af8-48b5-abc6-8234bb6c2fed", "sighting_of_ref": "indicator--bc2d7a5c-35dd-4b6a-9ed3-11ac662d337d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf61dd8d-a18c-490f-8aec-63407a4e3dc9", "sighting_of_ref": "indicator--617ecfce-02df-43ed-b073-e03e4ac83a26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1234703a-ab15-4bb0-878d-e05ec8e481b8", "sighting_of_ref": "indicator--ec69e572-f3b8-4195-b583-74c42bc510cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c744afec-95a3-421b-b61b-1bc39c5de750", "sighting_of_ref": "indicator--f3dfea2b-c1a9-4d05-8ad7-ce64027d4e1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e5510b-0e7a-401d-b682-fabe8714f2bc", "sighting_of_ref": "indicator--f3dfea2b-c1a9-4d05-8ad7-ce64027d4e1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1115b130-1999-4158-83ae-4649c484401c", "sighting_of_ref": "indicator--f3dfea2b-c1a9-4d05-8ad7-ce64027d4e1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3a5f27-da38-4a6d-ad91-0832aee828ed", "sighting_of_ref": "indicator--f788c0be-9847-4fcf-8d71-bb3e71577cdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43dcc61-a882-45d2-bd58-31c5c5843b74", "sighting_of_ref": "indicator--b5851dd3-4fb7-4eb7-88f6-220c7b3c6ab8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf32730f-51b4-4674-95a9-5457c0ce1a22", "sighting_of_ref": "indicator--2efe4937-2409-41a2-af6e-1686d208607d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e379c83-808f-4cd5-ae9a-21178d050853", "sighting_of_ref": "indicator--582e7289-819e-48d4-8b46-54dc485a36b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac56c3d-38bf-4ff1-b510-ca92270e812c", "sighting_of_ref": "indicator--f6a62e25-07f4-4ee7-b6ad-b2e8f18b591d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16daa37-6ff4-4048-b88d-1bae37bb9d7b", "sighting_of_ref": "indicator--46a83ee7-1282-49c7-b5b0-e37131335c3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdce19ed-d45b-471b-b5ce-4679cfffa8c5", "sighting_of_ref": "indicator--46a83ee7-1282-49c7-b5b0-e37131335c3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a976f25f-6969-4df9-bda2-0d51dccd7edf", "sighting_of_ref": "indicator--46a83ee7-1282-49c7-b5b0-e37131335c3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb3ad33-fb95-4273-9ca3-e0e55af15989", "sighting_of_ref": "indicator--c57db696-894c-4090-84b7-385ab281baab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106f2efb-31ca-4080-af36-cc85b3fb7e0a", "sighting_of_ref": "indicator--c57db696-894c-4090-84b7-385ab281baab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8831f4-a414-4a25-9203-f2f9cc7a9e82", "sighting_of_ref": "indicator--d7c2aaf7-fb7e-4b25-b222-016d7fa383b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637fa92d-a884-440d-b987-c460d795513c", "sighting_of_ref": "indicator--93fd7008-4c85-40ad-8e7a-ea6b9de9b51f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9ad38a-5ae3-4e0a-bd58-b4ae1a7a022d", "sighting_of_ref": "indicator--2f56681c-e2ab-4c4e-a6bd-db9b826eb658", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e432a808-24ed-4443-8b43-83179222784c", "sighting_of_ref": "indicator--decbaab7-2206-4622-b824-0d1261b45e36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf11f13-8c03-4d4e-a35b-312c8eb187db", "sighting_of_ref": "indicator--2be62588-b18d-4ab8-ac57-9853ae3e3fa7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c335a4b-7325-4bbf-94be-893830ee6286", "sighting_of_ref": "indicator--ee1b892e-839c-4844-b4d8-4bf4d09d48a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f580022-3834-468d-b79c-4630bb93765a", "sighting_of_ref": "indicator--67fe7e68-1329-481b-be2c-9f699468bf5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730267e9-64eb-46c9-9455-6b51b4c4efce", "sighting_of_ref": "indicator--dfa3abd1-7609-4ce9-9d5e-5df0bf4bb864", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bb758d-28d5-4e1f-903a-9b0fc8b6f3f4", "sighting_of_ref": "indicator--dfa3abd1-7609-4ce9-9d5e-5df0bf4bb864", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1842c3d1-84f5-45c0-a5da-f0c545f6bb1e", "sighting_of_ref": "indicator--dfa3abd1-7609-4ce9-9d5e-5df0bf4bb864", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02242ba-9fb0-4a9d-837f-133ded445a5c", "sighting_of_ref": "indicator--0b4b34e5-49df-456d-bd52-e0fd766a0927", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9753fd19-bbf0-4ef9-b382-03ef8f0546d4", "sighting_of_ref": "indicator--0b4b34e5-49df-456d-bd52-e0fd766a0927", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abb8e45-9174-4ff0-a398-139e81ae4a46", "sighting_of_ref": "indicator--0b4b34e5-49df-456d-bd52-e0fd766a0927", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a9089c-729f-4ee6-8977-e296cb238ca0", "sighting_of_ref": "indicator--f9984f4b-f714-4d74-803c-7e6b3f0e4255", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9334f5-121d-4dca-999c-0231bc895a8a", "sighting_of_ref": "indicator--0e90eacd-1cc3-4e33-8690-0ec76feac845", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02901c0-486a-4b83-8c84-838c321fecbe", "sighting_of_ref": "indicator--7ac8d8ce-84f8-48ad-b974-e5b76e3c6b97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c656ca2-8962-4f2d-bc44-006593dda9de", "sighting_of_ref": "indicator--7ac8d8ce-84f8-48ad-b974-e5b76e3c6b97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e411b1-ff77-456e-a6aa-6b949a27c4cb", "sighting_of_ref": "indicator--7e870825-474a-4bdc-983e-f1483f07945e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436a1662-78d4-440c-ba08-2aebdd5e07e6", "sighting_of_ref": "indicator--c571d43a-f680-44d0-9e79-68cd71bf2acb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce5a87a-b11f-4f95-ad2b-78dd5ae1691f", "sighting_of_ref": "indicator--57223780-3ad9-4cb4-8bc0-a89f56d1d0db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1793e38d-aea6-4f0e-8ae6-ae2ba56003cf", "sighting_of_ref": "indicator--e949176c-b363-419d-9bdf-b2417b9cba45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4825a56a-b923-46db-8eb2-f1dc7a3d6ab9", "sighting_of_ref": "indicator--8aca7a27-0a78-4a91-9bda-5d07d962bb4d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7460b998-08ee-4ef4-b7db-4902a4cbdc56", "sighting_of_ref": "indicator--9f01052b-9ff5-47ab-a9a6-0dd8cb8ba1ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4b5936-16ef-478a-9039-be684c031ba0", "sighting_of_ref": "indicator--d3495c08-1b7f-4c8b-8ff3-c12c4eb1cc5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b652be-bd29-4f10-bdec-149338e350d8", "sighting_of_ref": "indicator--9de1375a-26b5-4bc1-9178-b9116e5fe0a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ac0063-3d04-466c-9023-7d3966953cca", "sighting_of_ref": "indicator--d5a923d1-c5f5-4843-9f7f-fe9e49555969", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d33f1-854f-4724-990f-df3df4aa6044", "sighting_of_ref": "indicator--62b63295-a3c7-4308-ae57-728c43712e2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3870ed-5583-4cc4-beee-802f5a98dfe5", "sighting_of_ref": "indicator--78af6f8d-8543-48b2-a093-9261e51c6e16", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d606f1-a7b1-42de-a428-5d51f55447a4", "sighting_of_ref": "indicator--1f947b17-a1fe-4254-afe9-8146671866f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d03762-6a99-47a6-9ba1-8d396f74c0f8", "sighting_of_ref": "indicator--0dec3ee0-9edb-4ee7-8be7-524841141e6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd553d3c-ad29-4315-97bc-8259bb2740d4", "sighting_of_ref": "indicator--cfd509b4-dd53-47e0-970c-5a938ea23f8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a529dc2f-d6fc-4950-9706-5ac36d22ece9", "sighting_of_ref": "indicator--9895d767-2aed-49d2-b0c6-4fa9d7d4099e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f8547f-2987-4cfd-aef8-671a70a6ea41", "sighting_of_ref": "indicator--90f87f72-a16d-42ef-88ae-1b11e254337b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6007137-addc-4e2d-8920-e4c5a52e00a7", "sighting_of_ref": "indicator--e2ec76f9-3025-4bf1-a0e4-fa95a8a6f62b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e002600d-a0d8-4106-94f9-de02749f1100", "sighting_of_ref": "indicator--e2ec76f9-3025-4bf1-a0e4-fa95a8a6f62b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d803f0a-4f91-4053-8838-03795df271e7", "sighting_of_ref": "indicator--ac33b03d-3de5-4115-a599-40e79913d690", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86285a69-11e4-4746-9f7e-f2db46d515c3", "sighting_of_ref": "indicator--55194ada-5db1-4cb4-91e5-6ff2441c611a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aa7941-1dfe-4789-8385-8cfc7ac480f0", "sighting_of_ref": "indicator--55194ada-5db1-4cb4-91e5-6ff2441c611a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd0561c-cb30-46bd-a465-6aaec5bd90b5", "sighting_of_ref": "indicator--98658a4d-9ee2-4289-908b-c76e8f8edb67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be59132-956f-4743-96e3-8bb58fd74610", "sighting_of_ref": "indicator--dea5d149-0d04-4f7d-82f0-80eb394c42c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66efd6a-9936-4a60-989a-9bbe630b004e", "sighting_of_ref": "indicator--88446d0e-0e07-4d48-a5a6-80c6fc4df80b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68a9e42-5168-4242-a5ac-280395c83449", "sighting_of_ref": "indicator--68763684-765f-4bea-bf0f-7b6772cb8006", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6970f67-5877-4220-a137-4e4df6953d19", "sighting_of_ref": "indicator--abe949be-e8d0-4a8a-b307-96fa835c6295", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0e526-e9aa-4fc1-adb4-d5f4f2e86805", "sighting_of_ref": "indicator--d2f9dbc1-8cea-442d-857f-a0a1a682852d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda78b6-f598-4aed-9679-eb2b7320100f", "sighting_of_ref": "indicator--f31cdd54-020c-43d9-af40-8f0895900e84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d1c14c-e615-4f16-ba9f-97e87c154ed2", "sighting_of_ref": "indicator--097867b7-44d2-4e70-9bbc-06e56b1b77d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a4a344-f37a-4280-811e-760afc5b7c2e", "sighting_of_ref": "indicator--e3547774-485e-4064-8c85-bae83019132f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1aa5a6-eb88-4e57-92a1-475e4e43e347", "sighting_of_ref": "indicator--a171f0db-4f43-4cc2-9031-5fc761158a94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfc96ac-b1c1-4ee1-b25a-cb51dc98da29", "sighting_of_ref": "indicator--a171f0db-4f43-4cc2-9031-5fc761158a94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf16312d-6063-4d33-9aa1-56ba90746aea", "sighting_of_ref": "indicator--059c9a0f-7173-40f0-836f-dea4ca05f47f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53411b84-d256-40de-bd4e-9b9842b7247f", "sighting_of_ref": "indicator--ad71affe-a99b-4585-83ce-73a0d8f5c4c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c949d1be-3ca8-4bdb-a70d-16e3b31de51a", "sighting_of_ref": "indicator--f423f4a0-ce7d-4193-8d81-12a7f5c2a407", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7ada36-7e25-4b0d-aa33-3d22324b61f1", "sighting_of_ref": "indicator--f423f4a0-ce7d-4193-8d81-12a7f5c2a407", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb5d0db-a3b0-4c6c-b2bc-a1ffc27606b5", "sighting_of_ref": "indicator--79be022c-53fd-4646-9820-b89400c7d99c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4114461c-3053-428c-a990-70e8ba51d2e1", "sighting_of_ref": "indicator--796da6f4-92d0-4001-95eb-f517539fb7b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b15c09-339a-4ffb-a139-4c51c0b856c6", "sighting_of_ref": "indicator--5292331b-5c0b-485c-b43d-8dcc566f0750", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2803fe6f-717c-4c30-a0df-720d24c1a4ff", "sighting_of_ref": "indicator--56fa9120-10eb-4cfc-8dd3-7c3b6526a6ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b663520-324b-403d-8095-c4f0ff0a1360", "sighting_of_ref": "indicator--0e4c45d9-e426-4102-88c2-cbaa16d47971", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d343f30-ab50-4227-821c-51cd102522ed", "sighting_of_ref": "indicator--7af9a1e0-26bf-4b15-802f-b3c4196f0972", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb9733-21ef-4581-abb8-8e64877d1eae", "sighting_of_ref": "indicator--6fbedb36-524b-4b1b-9d12-d5a48becc016", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1efffc-e9a2-498f-9698-6509bbc39e0c", "sighting_of_ref": "indicator--8b8bc36c-2e8c-437b-a99b-42f4e65af08c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33332d17-1ab7-4ee9-b49d-20ebaf31cb67", "sighting_of_ref": "indicator--528494d8-c1d2-44c3-9257-a0db6172f100", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb16e93-f68a-4214-bb1c-d35a29f7832b", "sighting_of_ref": "indicator--f9594298-a818-4139-b49d-e9919185c5c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aabb277-5a2f-49ce-a4f2-0367b4d2fd7a", "sighting_of_ref": "indicator--db18f076-bb5b-4504-874a-47ba76dd9bf5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c5e0b4-ba33-45d0-bdd8-f5c3d37af196", "sighting_of_ref": "indicator--c3555fb2-177e-4b80-8ae9-75c8201fe332", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be3740f-ad18-4b42-a7d9-2293a2dd0e95", "sighting_of_ref": "indicator--c3555fb2-177e-4b80-8ae9-75c8201fe332", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9110b849-e3a3-4858-964f-1e1e3ebf31cd", "sighting_of_ref": "indicator--a6b19445-606d-4be8-8b65-8e9136c6ccb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d343e41e-0873-4947-9248-c008b1537339", "sighting_of_ref": "indicator--bd41856b-35d7-41fa-bb33-a5d580d9b1c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfe9e6f-afe5-4931-b46e-e02c915a0492", "sighting_of_ref": "indicator--1b313357-2093-40a8-ac52-d7e7b76ecf3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dd362a-a394-4ec3-8e67-fcf9a5cda6fa", "sighting_of_ref": "indicator--1b313357-2093-40a8-ac52-d7e7b76ecf3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb3d887-1011-4849-8c7a-4a15426a4b2b", "sighting_of_ref": "indicator--031143b8-99e2-4d12-8b0c-625538d45de7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3795b4bc-b432-426f-9b6f-7b709ccc7dbf", "sighting_of_ref": "indicator--5b2dcfb6-284e-4799-b3bd-8528f8b5622c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45402c0c-d411-4abe-a4d5-18589db63e7e", "sighting_of_ref": "indicator--79ab7edc-c082-4eac-9c25-a1a3bb78502c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dc0c2c-afdc-40da-858b-51c705d934e3", "sighting_of_ref": "indicator--550ee004-cab8-4a49-93ce-9df5657dbbb8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416fe50d-469e-44e6-aac1-6bf5f305d5bd", "sighting_of_ref": "indicator--550ee004-cab8-4a49-93ce-9df5657dbbb8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bd57ef-27ae-416b-ae1a-043dab684550", "sighting_of_ref": "indicator--d6cb664c-8d69-4743-bebe-34605327bdb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53135f0f-7309-484e-ab51-e108747f0b19", "sighting_of_ref": "indicator--c7b66fa8-f7b0-4ab9-8983-ab7d82394f55", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a93bfd-eb5a-46fe-965e-46bc6e1b6d94", "sighting_of_ref": "indicator--c7b66fa8-f7b0-4ab9-8983-ab7d82394f55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d894761-b677-49f9-bcc6-7b93c289ac26", "sighting_of_ref": "indicator--d0369943-c3cc-4c05-8121-b70b8b5e885c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f49617-470b-4fbd-a352-9f968fbac5cd", "sighting_of_ref": "indicator--d0369943-c3cc-4c05-8121-b70b8b5e885c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9bf49-2b46-4188-afe7-c8719b8a45c3", "sighting_of_ref": "indicator--cd46c2c4-166c-461b-9142-8050a17c6aef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02d341a-87c3-45c0-8530-cb2c6625020c", "sighting_of_ref": "indicator--bc98cdf1-769b-41b7-be9e-526a3ad49d05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a18e02-08f9-4688-bda2-6c557c0ec9cc", "sighting_of_ref": "indicator--c61a3fa2-8591-4942-b924-80f0acc09107", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d85b4-7b5c-4dce-8589-c3e24e12430c", "sighting_of_ref": "indicator--fa7aa70a-e4c5-4b74-bab4-fe53c96c4c6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536b52c5-6522-402b-a20e-28d1b54c195a", "sighting_of_ref": "indicator--dd84310d-6a3a-41ad-b33f-07140f4d8280", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959bddbe-409f-4941-b554-458e4a1c39a9", "sighting_of_ref": "indicator--2c0585a4-b60c-43c0-ab18-0e2cbc4cd85d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853c52d6-4ca5-498d-839c-33f0ce57fe52", "sighting_of_ref": "indicator--75d65c16-3340-4c5b-8991-ea35e4cdb870", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d73c343-9343-4118-902c-d0b482c7de48", "sighting_of_ref": "indicator--75d65c16-3340-4c5b-8991-ea35e4cdb870", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12338168-0af9-47e0-878a-80801d1808f6", "sighting_of_ref": "indicator--3b081992-7054-4527-b650-85ff0ebcb29d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee0f31b-6d95-4d7b-a81a-3eddb024bf35", "sighting_of_ref": "indicator--47f3b614-2163-45cb-a3ad-004869c4cf16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5818a60f-80f7-4be5-8893-76926ff981cb", "sighting_of_ref": "indicator--0a54e7a9-04a8-477a-a30e-6ac01b602a59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0af32-ee81-4b95-9248-fe83872dfb10", "sighting_of_ref": "indicator--306a8b90-401c-47e0-b52b-10d516b49c61", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351534b2-5eb4-4b53-a615-88077f6df7a3", "sighting_of_ref": "indicator--8b699a21-3905-4818-8715-594e9f84fd9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c712fc-16a9-4a26-8b80-f41f29cf0458", "sighting_of_ref": "indicator--8b699a21-3905-4818-8715-594e9f84fd9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d45402-cbef-46c4-a469-d770afbe9787", "sighting_of_ref": "indicator--8b699a21-3905-4818-8715-594e9f84fd9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b509704e-fe9b-402f-bc14-4e8df613b8e4", "sighting_of_ref": "indicator--4123a26d-49bd-4cbf-a037-76da8f407735", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320cb417-8226-4dd4-9913-ba997c64f899", "sighting_of_ref": "indicator--eb1a589b-5918-455a-a1ae-f5fff8380734", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c81ba25-760d-43cc-9f2a-7ef76c754893", "sighting_of_ref": "indicator--2562fad6-2201-443c-bfcb-c5d4d2728dd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf2105-5c1a-4e11-b48f-32744db93ce2", "sighting_of_ref": "indicator--2eb82504-60f2-4479-ac6e-c87ce80b39dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40822e4-2ff7-4b01-98da-4c0630f76f2e", "sighting_of_ref": "indicator--e99a81dd-700a-43df-b7e1-7ad5fbf441ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280222f8-5358-46a6-a014-277eb8fc6185", "sighting_of_ref": "indicator--4f6e429f-86e0-473c-8cb7-55e601b88959", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42180ddd-e882-4104-8f5f-48d33c8afa3d", "sighting_of_ref": "indicator--323fe284-62ff-46eb-b108-750a9147a1f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1a6eef-66fa-459f-a0af-fc005fa34920", "sighting_of_ref": "indicator--323fe284-62ff-46eb-b108-750a9147a1f2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50bdb6c-93fc-4155-b9ea-ee3998e91cc5", "sighting_of_ref": "indicator--dfcacad2-246b-40b8-a241-ce6483112d0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11c587-bcfb-4341-bdb9-76fc1ba3829a", "sighting_of_ref": "indicator--51e233c8-3f6a-4e13-90b1-dd2a71af3bbf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f55210e-d837-49dc-84bb-82fba62d10d9", "sighting_of_ref": "indicator--b9fcd3b4-b15b-4347-94ec-beb6ce4376dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d94aa6-6016-4c45-8c0f-628b3af4163b", "sighting_of_ref": "indicator--e633c93a-7e0f-46ba-a49d-50dee64c9a37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffbc8d9-33f6-4596-a97c-5a436d3ade46", "sighting_of_ref": "indicator--5792d9b6-3b69-44c4-a2b1-4cfb66554ebd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b0e58-e96a-4f1f-ba7c-3d61939872ff", "sighting_of_ref": "indicator--5792d9b6-3b69-44c4-a2b1-4cfb66554ebd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce18d005-f2e0-459f-9460-21737582fc0f", "sighting_of_ref": "indicator--3af37c0e-7360-445f-9193-e2bd2d120983", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d468ca34-4f8e-486e-90ae-7414fd44b683", "sighting_of_ref": "indicator--0072c3b4-e93e-4029-9088-ae67b2385338", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603dd7a3-95e3-4e66-8c2b-5594ca68b053", "sighting_of_ref": "indicator--89a4be97-a1b5-4198-853f-4f5a2d9075ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b264a-4c4b-4d7d-a6c6-bec4bd0429fb", "sighting_of_ref": "indicator--f7b3e3a2-8801-4e06-80d3-976cc4b734a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d850b71-ca8c-4fa8-acf0-290535383988", "sighting_of_ref": "indicator--7efff852-9597-4032-86f6-3dd9653944d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569d477b-1670-4c09-976f-7e8ef3b47aca", "sighting_of_ref": "indicator--74243d1f-a227-44a4-b5b9-2a69474f7cda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054d9241-c8cb-472f-8045-9fee1ae76da2", "sighting_of_ref": "indicator--dffdbe3b-fbde-4f2a-b3df-71cf533d2504", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c22eb97-bf91-4d98-9721-feffbefc299a", "sighting_of_ref": "indicator--7ff3dd38-5042-4be3-a46b-81b793e2fe10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afebfe7f-f8e1-4643-b4cf-4a8d02f8e5fb", "sighting_of_ref": "indicator--5db17786-38e3-4e60-af7e-e7715cbb7a20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1b16c9-d9e7-4c11-90bb-f323e8d0effa", "sighting_of_ref": "indicator--e5d491cf-4275-459b-a3ff-417ab2326eab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6b693c-e72a-4ee3-8c3b-2bf3175cbb3d", "sighting_of_ref": "indicator--290a9da5-33b9-4710-8ad6-69df0fd164b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faafaae-9595-46d8-8fe5-6a1971d74490", "sighting_of_ref": "indicator--b8f1fea3-d539-4df4-8802-33320bb73686", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36afc24a-cd40-41b4-9d4d-ef0f7a7723cf", "sighting_of_ref": "indicator--4b3e6827-f0d9-4a58-8416-d0bcb8ccb48b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980bfd81-2583-4afa-aaad-2ea1340ff434", "sighting_of_ref": "indicator--51ee463f-ddba-4a35-b0f1-0eaa2c963b44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de76a3-520b-4662-abdd-75f95cd1213a", "sighting_of_ref": "indicator--6e63a7f5-f243-4bec-acf2-f72539778702", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ad9ad5-9cc3-4e37-8a31-3aa1ffe0d1af", "sighting_of_ref": "indicator--7a9ef134-1b54-4641-87f3-402769b6cc43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d725067-3792-4841-8942-f3d64ce17c9f", "sighting_of_ref": "indicator--bcd2b836-ee4f-4428-9691-0d78686b40cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be369d79-fa1e-4d37-b278-d10867158739", "sighting_of_ref": "indicator--47af05f3-0b4f-4cb3-98e1-496517f8202a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801c29e8-e817-4e23-922f-ed59c3f85c1c", "sighting_of_ref": "indicator--4a3a0fd1-e259-4839-9c63-fcfc509eb3b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56f4119-e618-4fdf-9770-395964dbe30b", "sighting_of_ref": "indicator--2722f3b1-68a4-42df-819a-d41b776feb6f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b303aa48-628e-43a6-8915-679ffab40de0", "sighting_of_ref": "indicator--aeee5b1a-c914-4a52-9b21-21730701766d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b003b6-04d4-46ab-896f-fbe361ea315e", "sighting_of_ref": "indicator--19fd703f-e644-4507-8811-dc35ba0a4924", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c56e56f-085b-4336-b856-245a4b0914b0", "sighting_of_ref": "indicator--6369b1c9-e64d-4014-b583-61ad65122ba4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aba821-a409-444d-b161-0ec630c1d252", "sighting_of_ref": "indicator--0e1a672f-7e74-4093-bd78-3ad50e13ada3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bac2a39-c124-4d4d-a0fe-a1e3fdd54f35", "sighting_of_ref": "indicator--0e1a672f-7e74-4093-bd78-3ad50e13ada3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a9dea1-6eae-40aa-8a89-fbe46e88fba8", "sighting_of_ref": "indicator--bc950f61-1050-485d-8343-4d07ad434e6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cbd96a-c462-4e83-bb79-bfc416a2fe62", "sighting_of_ref": "indicator--c56331aa-2001-4a32-a9c4-19ee7a30db9f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b968857-0f35-46ab-9145-e6927a556676", "sighting_of_ref": "indicator--071f4665-24f6-47e4-8547-79729955fc01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efaf9c7-c858-46cb-8a5d-553cfa05a139", "sighting_of_ref": "indicator--74879013-5c58-43db-beed-c9634cf67247", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c577bf-198f-4d1c-a73e-5bf171ec5bd4", "sighting_of_ref": "indicator--e397898f-4212-441e-9a7f-67b071566267", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58667eff-0d74-4901-a934-f4370c90712f", "sighting_of_ref": "indicator--70cd6b9b-c51e-4fcb-b3a2-fa3a3e29b14e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b886190c-f14a-408f-83fb-c9984f0dbc1e", "sighting_of_ref": "indicator--3af10141-19f8-4bf7-bcd0-cdecdb5531f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee6912e-2615-460c-9607-5631d7dde90f", "sighting_of_ref": "indicator--694d3b29-03b7-45ea-b1dc-114b1073c347", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce78f2ef-c9f6-430e-a56f-c3ccc187b698", "sighting_of_ref": "indicator--69d31836-02ff-4782-b26d-4aa296094599", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456f971c-6a84-424b-8e78-b12e23b15311", "sighting_of_ref": "indicator--b08e7cdc-83ab-4fa3-919e-9300d0df3595", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a0d9fc-110c-4163-b595-7785d07b53e8", "sighting_of_ref": "indicator--b20190bb-7e25-4ac0-bb12-719c4320d6dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab8cf41-c069-40f0-a1f0-791567102f85", "sighting_of_ref": "indicator--a7c82c3f-5f7d-45e0-a098-719ee913acc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d49ea3-841e-4cd7-b81d-d49bab7a7390", "sighting_of_ref": "indicator--536d1ecf-a927-4e00-8d86-f81987f05458", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35352019-64b4-413d-84cf-073e719ab35f", "sighting_of_ref": "indicator--6e927af7-5817-4a4f-94a5-3d7fbea93c9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78044f29-5699-4735-8620-6a0e7d3d0c03", "sighting_of_ref": "indicator--6e927af7-5817-4a4f-94a5-3d7fbea93c9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fc6118-526a-4643-af81-99d374228857", "sighting_of_ref": "indicator--f00f3e45-ae1d-4da8-b0b9-000c609e11b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475d0c8b-7a41-4413-85cf-2c5545fd6217", "sighting_of_ref": "indicator--f00f3e45-ae1d-4da8-b0b9-000c609e11b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7874e5b-ca88-45d2-9d1e-293e45ef1cda", "sighting_of_ref": "indicator--92bbab21-beea-414b-8406-6e3e7cd97338", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c86be2-f9e4-47db-824f-1a2c10f25dea", "sighting_of_ref": "indicator--faff1390-c24c-4488-a371-148e1ebca077", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27547e4f-ad2b-4c33-a25b-6c24c3eb9faa", "sighting_of_ref": "indicator--e232b595-4a3a-4d70-ad9a-b48183d1b506", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e751a5b-5c3b-4dba-99c5-c340d6c1b875", "sighting_of_ref": "indicator--e232b595-4a3a-4d70-ad9a-b48183d1b506", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4e4dff-f439-439d-bc7e-0f119144e110", "sighting_of_ref": "indicator--699c0013-3e7d-467d-845c-4e3fe1e3f9d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f619b-a31f-497a-96d7-9fadad955ed4", "sighting_of_ref": "indicator--58a4fb49-091d-4a86-b469-bd1f837551b0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f98229-c66e-48af-a900-f430c68f4d5f", "sighting_of_ref": "indicator--62c3518e-bb00-491a-8eab-d33895ce2df7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c328370-c9da-4baf-82c3-e9316d519efd", "sighting_of_ref": "indicator--0eb003a6-749a-40fa-b653-aa74e3c0b6c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510a1f25-8e36-4881-bf51-dde10142436d", "sighting_of_ref": "indicator--124318ff-e2bf-40f4-acf8-f05b77e0de25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b98da44-d128-42a7-863e-538ec407bde6", "sighting_of_ref": "indicator--ec4c69eb-57b1-4add-a9c1-9f2a36c17ee5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c3ccf8-23b5-4247-96f9-b9dfe766ecb3", "sighting_of_ref": "indicator--fcce91ea-219c-49c2-bfe8-e008fc5a6c42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8f58a8-f58f-409c-9b39-be5cd33eb072", "sighting_of_ref": "indicator--92feddf5-c37e-4854-9b26-37499e5a3e78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe71d17-f21b-49ad-8bf8-0d23c0ab3c7c", "sighting_of_ref": "indicator--68629e67-d9e4-4050-8a8b-6f281ab4766e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85748ace-55d1-4320-b1fc-0178ea74b9a7", "sighting_of_ref": "indicator--9c1a5a38-4bec-476b-8f53-792ab9c6152f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02225ea5-fdc0-4f51-8a7f-2954bfa58aab", "sighting_of_ref": "indicator--47c91211-b4cb-40dc-ba38-412d66e5f089", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51e7b30-48bf-4317-bedc-bf6efbbcda4f", "sighting_of_ref": "indicator--4f7be1d7-7638-426a-9856-19d4c19f1d42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b927ef-3490-46ff-9fdb-29432e94410a", "sighting_of_ref": "indicator--2d760c5b-5667-4923-b90c-b950af4a8f3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07b2c66-b62a-473b-a10d-3464c8daa6df", "sighting_of_ref": "indicator--13548624-e1ca-4ebc-a87e-55ba8080d6d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe962ed-d7f9-4baa-9f53-cbd271e51077", "sighting_of_ref": "indicator--d9571542-baf5-4dc9-a9ec-53d11b6b7b76", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547ebada-1354-43a8-8dc3-b2ad82ec0693", "sighting_of_ref": "indicator--d9571542-baf5-4dc9-a9ec-53d11b6b7b76", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8afbd7-bc2a-4ff0-9a94-350446bdbb3d", "sighting_of_ref": "indicator--e7b6e73b-0885-4a80-b983-e9033a5974a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454f41c8-6524-4372-82f9-bc074c9b3a7a", "sighting_of_ref": "indicator--228bd807-54d7-4a4f-bfe6-db0af480bcdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da2a4b9-4639-4186-a473-6a5719f1ba57", "sighting_of_ref": "indicator--df7a7079-1ebb-40ec-bf98-765cc71be798", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccfdb70-52e9-4c21-88a7-45444aa2edb7", "sighting_of_ref": "indicator--34329c65-570a-4517-b5b6-19f8c03e222d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36cf2ed-1edb-48ec-83a3-7e8dc8a463df", "sighting_of_ref": "indicator--d0ad4493-70d2-4e56-863a-8923b359e7a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e69754-8fbd-438a-8f19-22b3d2ec6857", "sighting_of_ref": "indicator--20b6df79-eaf0-4332-b561-f9c77a7875a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a168d502-e862-4825-ac7c-82cfcf0789f8", "sighting_of_ref": "indicator--64d85e06-a259-49cd-9f6a-d0798cd7b5e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4dadaa-7149-415c-9377-a49f982d07a2", "sighting_of_ref": "indicator--64d85e06-a259-49cd-9f6a-d0798cd7b5e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e637ce8-d927-4742-9383-b71fc7730c4d", "sighting_of_ref": "indicator--ebd148fc-0d17-41b1-b54c-62a2b4b11c68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f963e769-ac63-46ff-961b-a0c26a3e4ec9", "sighting_of_ref": "indicator--42024fb4-ff75-46cc-8719-46bc502c2bac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b2301-ec33-43a3-a64e-a9c0d8da73e5", "sighting_of_ref": "indicator--f08f20e3-8870-433e-8c94-f0d8e8530007", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1fef69-1b80-42bc-8e7b-9da68c8791df", "sighting_of_ref": "indicator--db672f65-5b57-49d0-91b3-fa4293c883bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6c5ef6-81b5-4fe4-a8a8-a8e7ebc60705", "sighting_of_ref": "indicator--107f5f81-18b8-4b4c-9199-996b871d11f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05840bb0-939c-48c9-880e-1333348a7bc4", "sighting_of_ref": "indicator--4f9409c2-6ebc-46d9-9364-11b827a7a2f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef8f80-d3cf-4bb1-b89d-ebf9f6928534", "sighting_of_ref": "indicator--32384b18-3ccd-48b6-aeb8-0797e85e22f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba02bf-9c70-4b2c-b1e9-463c4ed1968e", "sighting_of_ref": "indicator--1f043401-74aa-4b59-bacc-951a1fb1e4da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc5b161-22b4-4a73-b327-f3b0d24e648a", "sighting_of_ref": "indicator--4eedde76-e6f4-4125-ade0-6655345cb350", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba99544-851d-4e22-9c8d-5b086f7fb510", "sighting_of_ref": "indicator--4eedde76-e6f4-4125-ade0-6655345cb350", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69df3f6c-1927-4ab1-91b9-fe07288cd3a0", "sighting_of_ref": "indicator--1baa4df9-9d00-4f2a-b0b6-17796fc9f77a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfc3afc-9a24-4133-80e3-913f1387b2ff", "sighting_of_ref": "indicator--2216ceff-3a4b-4dca-b904-4ea69bad8836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9be4b1-c25b-45cd-9245-eb3d9dc1a79d", "sighting_of_ref": "indicator--fa3c9acd-9fe3-445e-a443-22528a2ea5e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09736ff0-ebdc-4cea-890d-6b5f7e64d402", "sighting_of_ref": "indicator--262636dd-e300-4cc0-95bd-6b00882b4beb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6737351-0b43-44fc-b0ba-e82ef63f5c3c", "sighting_of_ref": "indicator--262636dd-e300-4cc0-95bd-6b00882b4beb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4f872-b50f-4961-8c99-73750ce6d31b", "sighting_of_ref": "indicator--e23f4a90-89ea-4ad5-8791-ead41c60d6a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d986d033-4562-4d1f-8c98-2e2297ca6b1c", "sighting_of_ref": "indicator--e23f4a90-89ea-4ad5-8791-ead41c60d6a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655240e4-8a32-4ad1-85e4-1a95f17614d0", "sighting_of_ref": "indicator--dba5409e-4344-43ec-9941-ebba1b3c4423", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d781936-8973-4dde-806b-4dcd3c028d8e", "sighting_of_ref": "indicator--cf6fa4a6-2181-4093-96ca-d3baedb94b90", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd8721c-288a-4d12-ada7-f9530107868e", "sighting_of_ref": "indicator--de75b9d7-82b5-438d-816b-d1754b315786", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326d33b4-5e09-44ce-b19e-9ba9a9d2d7c1", "sighting_of_ref": "indicator--2d08217c-c516-47b9-a1aa-27774672d6e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0fa011-4711-4ead-8bc6-19116f91cbc0", "sighting_of_ref": "indicator--161938c8-3537-4726-ba8a-497b45ce9dd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cd1cc5-d1de-487c-899d-68bba13b46b1", "sighting_of_ref": "indicator--cba6e3b6-1476-4c48-98aa-f1182a09e9db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b143c38b-ff98-4e3f-8c97-e6d9ac0935b2", "sighting_of_ref": "indicator--c8fe790b-4fd8-40e6-bdb7-a81e7cc45c23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d42fc00-9dbb-45bd-8dd0-2bc821fe2527", "sighting_of_ref": "indicator--5bffc104-9152-426b-91ed-7d5d947f770a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6126efac-4187-40f8-bb05-1cbd4e752e90", "sighting_of_ref": "indicator--5bffc104-9152-426b-91ed-7d5d947f770a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ad3428-e768-446a-b052-64bbc40ba65a", "sighting_of_ref": "indicator--4e6af028-197d-47a3-aa9c-b3b139926603", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f5e851-f8e0-4bd2-8650-ac419fa0b619", "sighting_of_ref": "indicator--ca7c1002-a13c-45d8-9eb5-d7f90297b5c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a528fa-257c-483f-beec-fb67f16a8c07", "sighting_of_ref": "indicator--974bddd1-9a20-4226-9cd8-2cba4f82dfe6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a2443-7c9d-43e9-bca8-39c6a52c71b2", "sighting_of_ref": "indicator--e09c5ac6-b253-4dc1-967e-e0b7707159ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14f7975-b867-42db-b5ba-ed4a1870d7a9", "sighting_of_ref": "indicator--4f5e940c-a6ad-48e9-af74-8141a6ee6588", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88562508-4940-4d98-a0c0-72077fafc117", "sighting_of_ref": "indicator--7e7f1634-aff4-406b-96f0-a3430828625a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7393cdb6-2f0a-457b-838d-96a60df9aaff", "sighting_of_ref": "indicator--57a54ae1-89c0-4c5c-86c8-b2c5fbf71ea3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450f23e1-8a73-489b-8da4-37cc23428a90", "sighting_of_ref": "indicator--1d0db233-df61-4ed2-8e0b-b7ebd1b4c558", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4040b5de-4dc2-4cf5-93a9-d3d3cafc3e6d", "sighting_of_ref": "indicator--e77b3b1a-0964-4eab-89ef-128e33185b0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9026454d-ac22-46e9-b5c0-81384764c765", "sighting_of_ref": "indicator--2f25d611-cb47-48a2-a933-5812681455ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c1c1aa-043c-414c-9a9c-e4220082dbf8", "sighting_of_ref": "indicator--b7196a92-18d3-4902-ae2e-1b63305e8bcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be27f95-73f2-4b30-a099-4b7de34a787d", "sighting_of_ref": "indicator--c379a99d-23e3-4d20-a373-8f94d6316ff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977217af-5656-4ddc-a4c2-1eb7611f2c65", "sighting_of_ref": "indicator--c75753de-1683-462a-ab26-6c41892b2b60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f42e4e7-3e71-44c9-b421-e7e9750e4f95", "sighting_of_ref": "indicator--43f7df1e-ad83-41f7-81fc-65155dc95661", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea4f83f-2347-4a5a-a331-b03d5d54ba82", "sighting_of_ref": "indicator--d87b1eaa-980a-4163-a8d0-8f4b56befe1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f2dfc0-268d-437a-a8e1-3facaa1e3b60", "sighting_of_ref": "indicator--cf31e632-1eb7-4e4c-95af-4c377434b330", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116543f4-6a37-4913-ae2b-ac3cb9ba77be", "sighting_of_ref": "indicator--f1fd0717-65ba-4cd6-aced-bebead5d305c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e73ada-c3b4-4038-ab1f-57b81cdaa4c2", "sighting_of_ref": "indicator--27ba9e9f-21ca-47c0-9915-2756fe8d551f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19549d3f-9c49-4215-8327-ceb3bd4b094a", "sighting_of_ref": "indicator--27ba9e9f-21ca-47c0-9915-2756fe8d551f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9510d77-1d04-4676-a69f-3b473dbbacf6", "sighting_of_ref": "indicator--27ba9e9f-21ca-47c0-9915-2756fe8d551f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7045af62-1080-4a22-91bc-ae1fdb71c332", "sighting_of_ref": "indicator--399086d0-00f7-499c-8ed9-f0a790453a63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffa2e99-a379-456f-912d-c4eade9ce717", "sighting_of_ref": "indicator--06dbef92-2f3d-4c20-99e3-a182d0e5ba94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50473ddd-9882-4e86-beaa-ded7219c4633", "sighting_of_ref": "indicator--c31c5269-69af-4888-8c1a-ab31813dc393", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344a795e-f4af-4cad-ae81-86d514641388", "sighting_of_ref": "indicator--c31c5269-69af-4888-8c1a-ab31813dc393", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66255127-2cee-4a11-9d10-41471b5f6d1b", "sighting_of_ref": "indicator--827492a5-0d38-47c0-88b1-e859ce9fbaac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf0ef0-1e2c-42bd-9e14-c92e97611971", "sighting_of_ref": "indicator--ea35cff0-d2e4-4920-9c31-7f017eb350a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738e9d85-c63e-4989-b9ad-cd38e4832823", "sighting_of_ref": "indicator--ea35cff0-d2e4-4920-9c31-7f017eb350a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a502325-cd28-4d9f-906e-4025bd621810", "sighting_of_ref": "indicator--4e7d69ba-49f2-416e-a275-f37896332bcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f88a7f-17be-458b-a214-007e42307d7a", "sighting_of_ref": "indicator--4e7d69ba-49f2-416e-a275-f37896332bcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b76c7e-affe-49a1-923d-d5ace8813580", "sighting_of_ref": "indicator--ce0b4351-4964-418f-be17-279409a85d95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596d4ebf-8ddb-485c-9f59-2cfe02df2bf6", "sighting_of_ref": "indicator--ce0b4351-4964-418f-be17-279409a85d95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8478a69d-acf0-4bd7-af09-5ffcabf5d6bd", "sighting_of_ref": "indicator--05dec809-770d-40b9-8993-ec2eb5d71087", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f289da5-acd7-45dc-b2fa-a48f2fe77bf5", "sighting_of_ref": "indicator--27d69e88-c1ca-44cd-9691-043d858e0438", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8175e9-ff9f-4e2a-8f56-7aefdf8ada32", "sighting_of_ref": "indicator--65369cbe-4212-414d-ab18-c0481901ef6d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4342438d-4d79-46ae-bf94-a15df7758a52", "sighting_of_ref": "indicator--4f77f285-6d5a-471e-b0ad-b095758d5c3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db42816-9933-4380-baac-61651ee8877c", "sighting_of_ref": "indicator--4f77f285-6d5a-471e-b0ad-b095758d5c3c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba1e888-bfd3-4dbf-8851-310ce06e2c52", "sighting_of_ref": "indicator--4f77f285-6d5a-471e-b0ad-b095758d5c3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313893c7-dcfe-4df1-9502-e87265e310b5", "sighting_of_ref": "indicator--d612ddef-c048-4e3a-b7b8-3326473fade8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b5daa3-428f-4273-b399-e7866021bbcb", "sighting_of_ref": "indicator--d612ddef-c048-4e3a-b7b8-3326473fade8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ad69cb-146f-45ff-a296-861f6caa9674", "sighting_of_ref": "indicator--d612ddef-c048-4e3a-b7b8-3326473fade8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1164e2a8-2edf-4bd6-a0b9-9ec762aa21d6", "sighting_of_ref": "indicator--d01d7bac-ec73-4543-9f8e-805afdeb156e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0430e67-65ba-4b8f-9b99-6f66c588fcbb", "sighting_of_ref": "indicator--fe59fc09-300e-4598-862f-46a7f0730258", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae1ebe-d953-4707-83eb-504b71e99435", "sighting_of_ref": "indicator--643e31aa-a863-4795-8cca-a818f10a4883", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b68342-67a5-46ba-a613-c2dc7d406e5d", "sighting_of_ref": "indicator--ce600f6f-cc83-4932-a50c-c753d30215db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235e158f-68a6-466a-bfb4-931bfcda4f68", "sighting_of_ref": "indicator--11e20e7f-36a5-4849-ad15-aa7b482f4e70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194e8976-7575-459e-a00c-74e46e281f86", "sighting_of_ref": "indicator--c9657264-d03f-42a6-bf1e-b498416af976", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3b819d-5258-4433-8f96-a7893380f445", "sighting_of_ref": "indicator--c9657264-d03f-42a6-bf1e-b498416af976", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249e3c7-3f01-4e8b-a6d8-d81bbd98a166", "sighting_of_ref": "indicator--b981a01a-c552-4638-8af5-12d55deb2741", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b3d89e-7154-4062-b31d-baf838862848", "sighting_of_ref": "indicator--8bde3d4b-0c04-440a-a2c4-841cb693d77d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019a049b-243e-4e22-96b7-c0ee529479db", "sighting_of_ref": "indicator--38e3a884-c691-4155-af7a-02a5b07f4ea5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed8bc44-a87c-4814-bf04-7ec45fae5683", "sighting_of_ref": "indicator--1c58d23c-d9ef-4d99-a816-8789032fde1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3a2eb-daba-4aaf-9d2d-ce049eaad679", "sighting_of_ref": "indicator--3c4f4dca-6c57-4f02-a3ba-49a6501e7a88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47952c89-59f2-421a-9765-9f665f05c6d6", "sighting_of_ref": "indicator--3c4f4dca-6c57-4f02-a3ba-49a6501e7a88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47046c01-7eec-42b4-896d-f3dff589d74c", "sighting_of_ref": "indicator--d18aea01-cce4-4e7e-a785-848a4a42778c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22d73c4-29d9-4b7d-8243-7982f1c9e3bf", "sighting_of_ref": "indicator--3d0b7509-0666-4475-8e17-07978da602bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d8c48-31cf-433c-8807-a83b1d50ef7c", "sighting_of_ref": "indicator--3d0b7509-0666-4475-8e17-07978da602bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75989825-392b-40bc-8bc2-049fe5b7ccbf", "sighting_of_ref": "indicator--3d0b7509-0666-4475-8e17-07978da602bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b81f01-1aa9-4239-9be3-eaddc2c99eee", "sighting_of_ref": "indicator--ddf06afd-a485-49d5-a7d5-258b5c5e8285", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc831d1a-7554-4ab1-a47c-f54bce57911a", "sighting_of_ref": "indicator--0cb7ce32-9009-42bd-abc2-67832e4cf6ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914e0d48-fb46-4d15-8b58-d810dc61052b", "sighting_of_ref": "indicator--bea7c7db-72f5-43bb-8b86-782cc5cfdcf7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d07fb80-4fff-407f-885d-dfe5c833512d", "sighting_of_ref": "indicator--bea7c7db-72f5-43bb-8b86-782cc5cfdcf7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573f5ca9-8cea-4f48-87d5-2ef335453a2a", "sighting_of_ref": "indicator--0667ca54-f3cc-4c9d-8d3a-1343b35b8fd5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72810785-406e-48f0-bbba-d39e2dfa573a", "sighting_of_ref": "indicator--f2d3e92e-3798-4ced-9468-24ea428ca43f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8241739b-0ba0-4f56-a72a-a821452a2d47", "sighting_of_ref": "indicator--58e822c4-a4dc-44e7-a073-c672dbf5d82c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a8bfce-9337-4b16-8c5b-1b1b2a400f4a", "sighting_of_ref": "indicator--96174902-307f-49e6-a924-23ad706e3f19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814507ef-fcef-4be2-8ed5-943e5d4adc17", "sighting_of_ref": "indicator--7699cee8-e1a6-4c4f-aab3-e79002de1fa6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db82073e-b7bb-4d13-bfb6-c6d563381832", "sighting_of_ref": "indicator--7699cee8-e1a6-4c4f-aab3-e79002de1fa6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39523c6b-36e5-4386-95bb-0688c938107b", "sighting_of_ref": "indicator--7699cee8-e1a6-4c4f-aab3-e79002de1fa6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7dbb2f-ea8d-46cf-9453-764db2f7fe06", "sighting_of_ref": "indicator--26d32c5d-a50d-4e68-869b-197b7645c75a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc5dd88-8d33-47a1-8f92-e7b885a36de9", "sighting_of_ref": "indicator--26d32c5d-a50d-4e68-869b-197b7645c75a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f17dce3-fdd9-4d71-9a3a-7533b3639216", "sighting_of_ref": "indicator--26d32c5d-a50d-4e68-869b-197b7645c75a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658cc975-ac8c-41c6-bdd9-11d4f05501bb", "sighting_of_ref": "indicator--6169fe3b-25e7-4aea-8563-da9112fd1b67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf1ccc-a9b2-4d4e-a4bd-5833e8872748", "sighting_of_ref": "indicator--6169fe3b-25e7-4aea-8563-da9112fd1b67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014accae-4ac0-4a13-9e64-0ede690fa500", "sighting_of_ref": "indicator--6169fe3b-25e7-4aea-8563-da9112fd1b67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a110ea-df4e-42bd-b786-0a41f921ebad", "sighting_of_ref": "indicator--ad066d0e-e672-4ea7-a386-fd8346dd2492", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b1082-3805-49d3-a55a-c47d39fbfc29", "sighting_of_ref": "indicator--ad066d0e-e672-4ea7-a386-fd8346dd2492", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bdbede-4bab-461c-87da-3719f697ceb3", "sighting_of_ref": "indicator--ad066d0e-e672-4ea7-a386-fd8346dd2492", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69999a8a-538f-438d-9c64-d302f313946a", "sighting_of_ref": "indicator--e55ba2f4-c5e3-4ea0-9026-952c1cb76df4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515af40e-a4e2-4988-8c3c-14840f59c67e", "sighting_of_ref": "indicator--50090d60-d100-4eb6-94f2-716b264d60c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc12abdd-b105-4bb4-a5ce-2df55232a04b", "sighting_of_ref": "indicator--072d9724-2a21-4977-8bef-a6fcff16d8cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94574c29-8058-4ffc-bd1a-f16a779fe3fd", "sighting_of_ref": "indicator--072d9724-2a21-4977-8bef-a6fcff16d8cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e7b3f9-3370-4a3e-8ca6-d3a93a7ab942", "sighting_of_ref": "indicator--072d9724-2a21-4977-8bef-a6fcff16d8cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be5e9dd-7086-489e-a91f-1e13ace69e89", "sighting_of_ref": "indicator--2c445d1f-267e-457a-91c5-f5c7b2ff3ba5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da37fe37-f653-4c30-af42-7329e6dc9bea", "sighting_of_ref": "indicator--5d749b36-32e2-424a-9fc7-10f6c9a2106d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a9b758-35da-4b56-b681-05f020d4b2f1", "sighting_of_ref": "indicator--83712f27-15bc-44e4-82a8-f8303c39f49e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b4f7d-eca2-4310-be88-b6825d5fe0cc", "sighting_of_ref": "indicator--83712f27-15bc-44e4-82a8-f8303c39f49e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981cbfbb-a839-41d7-a91e-b653d1316039", "sighting_of_ref": "indicator--83712f27-15bc-44e4-82a8-f8303c39f49e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164a3aeb-2541-44f1-bd3c-4b65203abbaa", "sighting_of_ref": "indicator--0be59706-ab5a-4100-a685-0fec635aaed3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb77cf9-b21b-427c-b66a-623368c3f96c", "sighting_of_ref": "indicator--0be59706-ab5a-4100-a685-0fec635aaed3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0923485d-aae6-4101-8880-d59f9e85419a", "sighting_of_ref": "indicator--0be59706-ab5a-4100-a685-0fec635aaed3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4c5f11-bab5-4e89-bd74-033bd450f358", "sighting_of_ref": "indicator--12bd1642-2e53-49a1-8ec7-a9e7cabf0874", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ba1ebf-28e2-41d6-afc3-f14ed6a18ebe", "sighting_of_ref": "indicator--12bd1642-2e53-49a1-8ec7-a9e7cabf0874", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b34c92-bc92-4c93-9edb-ca5dd1f3dd57", "sighting_of_ref": "indicator--12bd1642-2e53-49a1-8ec7-a9e7cabf0874", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5892a5fd-0ecf-4f12-a7cd-a03427f74ff9", "sighting_of_ref": "indicator--b550626f-5b6e-4d6b-93fe-ca884f70b5a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f412437a-26b1-4e97-b223-a54b37c1b252", "sighting_of_ref": "indicator--b550626f-5b6e-4d6b-93fe-ca884f70b5a0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e18fb2-22ff-4dd1-a859-080d6eac8c96", "sighting_of_ref": "indicator--b550626f-5b6e-4d6b-93fe-ca884f70b5a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb631243-7579-442f-9cd2-d40f8e9099cd", "sighting_of_ref": "indicator--42caf092-11d9-498f-8671-6cea8aa5c8e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640c2b8f-784c-4b29-a5b5-bddc36675be5", "sighting_of_ref": "indicator--42caf092-11d9-498f-8671-6cea8aa5c8e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106fb43a-1f85-4bc1-a455-f2ec9fc73ff1", "sighting_of_ref": "indicator--42caf092-11d9-498f-8671-6cea8aa5c8e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cb87d5-fc96-426b-8948-6e4c665ac352", "sighting_of_ref": "indicator--3ad16c41-2125-4a3c-bfba-b7f43980f8dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a48fa75-9e0a-4e5b-9a75-9ad2dbecfc0a", "sighting_of_ref": "indicator--3ad16c41-2125-4a3c-bfba-b7f43980f8dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00bf78-3b65-4e71-bdc6-070f71a19678", "sighting_of_ref": "indicator--3ad16c41-2125-4a3c-bfba-b7f43980f8dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d16cd3-8194-439c-81e1-dc410b96b611", "sighting_of_ref": "indicator--65883e51-4415-42dc-8515-8d336aacfd24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19d28f9-b349-43d0-bd60-ee89aa5e751f", "sighting_of_ref": "indicator--5f19dc27-57b6-42f0-adef-ccf5dbd594c4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430bdd3c-6da9-4a20-a1fd-90141fb1049e", "sighting_of_ref": "indicator--5f19dc27-57b6-42f0-adef-ccf5dbd594c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a6d097-4dae-48d7-9010-8cd03cbaf953", "sighting_of_ref": "indicator--c5cbe35e-fcf7-4502-9147-2c3ced4d30d0", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b0ba8-dc8f-4ef1-851d-d1416a102f16", "sighting_of_ref": "indicator--f78e9913-b8a6-4942-80f8-c80f8d400c00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81317a59-4840-414f-a957-cf3c6b12b731", "sighting_of_ref": "indicator--9f2c4265-9651-48ec-8385-1273a33ced27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e29b8c8-8c4d-4ba8-ae30-019fd5c8bd38", "sighting_of_ref": "indicator--9f2c4265-9651-48ec-8385-1273a33ced27", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9f47ac-fed3-415b-8554-13d58ec64140", "sighting_of_ref": "indicator--9f2c4265-9651-48ec-8385-1273a33ced27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fce37c-45c1-4876-9d26-7850de40973d", "sighting_of_ref": "indicator--e37388f1-a5b0-436a-b193-966e557a93a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fda8e86-55b3-4b9d-a645-0d51d81aeff9", "sighting_of_ref": "indicator--e37388f1-a5b0-436a-b193-966e557a93a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cdbaa3-fc2e-4122-9b2a-c8f3cf512883", "sighting_of_ref": "indicator--e37388f1-a5b0-436a-b193-966e557a93a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48857183-99e1-4051-868c-b54fe25fe28c", "sighting_of_ref": "indicator--9253792e-484a-4e5e-ab1c-1b4fa3dce6b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c88106-6ef5-483a-9e49-f77921db43dd", "sighting_of_ref": "indicator--9253792e-484a-4e5e-ab1c-1b4fa3dce6b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d6c3f7-05ae-4762-84dc-3ab62451b8fd", "sighting_of_ref": "indicator--9253792e-484a-4e5e-ab1c-1b4fa3dce6b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1671ef-fd07-403d-bf3a-6f9db65b41e5", "sighting_of_ref": "indicator--ae21ba54-ff75-46ba-90be-5be0d9298417", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07abdbd6-245b-4187-8a18-a7a6a3c7fcc2", "sighting_of_ref": "indicator--ae21ba54-ff75-46ba-90be-5be0d9298417", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa224ad-2aa1-459d-9c71-29e24cbabd04", "sighting_of_ref": "indicator--ae21ba54-ff75-46ba-90be-5be0d9298417", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e949e0c4-217d-4b59-b7bc-fa3711b71915", "sighting_of_ref": "indicator--b0a760df-068d-4fae-b682-c46f71966372", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7a0a54-8862-42bf-b662-a852dd9a80d3", "sighting_of_ref": "indicator--b0a760df-068d-4fae-b682-c46f71966372", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98a2a55-7517-4b4e-90dc-214aadd48a74", "sighting_of_ref": "indicator--b0a760df-068d-4fae-b682-c46f71966372", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfffc29-9606-4b02-85a1-4e5b29290179", "sighting_of_ref": "indicator--911461af-a1bf-4cff-88cc-047c7fff36f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3df5e9c-249b-447a-a93d-bfda4f75ccf4", "sighting_of_ref": "indicator--911461af-a1bf-4cff-88cc-047c7fff36f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8976f3d1-ebbf-4d2e-9208-00e3529c50de", "sighting_of_ref": "indicator--911461af-a1bf-4cff-88cc-047c7fff36f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fde5ed6-336a-432b-b061-298f29146217", "sighting_of_ref": "indicator--d9ce9ed2-73d4-4f8e-9fd0-f1bb8b168dc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4bc742-c77a-494e-b5a8-f8b81dc24fd0", "sighting_of_ref": "indicator--d9ce9ed2-73d4-4f8e-9fd0-f1bb8b168dc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e90abc-0821-410f-af0a-91fbbc920ab5", "sighting_of_ref": "indicator--d9ce9ed2-73d4-4f8e-9fd0-f1bb8b168dc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4acab53-f360-4491-b18d-02166fda531c", "sighting_of_ref": "indicator--69ba2d2d-2d33-4683-9da9-300ea8f3fc87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859bd762-e380-4090-8092-03ad87ef98ae", "sighting_of_ref": "indicator--69ba2d2d-2d33-4683-9da9-300ea8f3fc87", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1486c39f-62b3-4696-a831-f981807cc46d", "sighting_of_ref": "indicator--69ba2d2d-2d33-4683-9da9-300ea8f3fc87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee06a04-46a6-422e-8bb6-2c1339f7c8d7", "sighting_of_ref": "indicator--30a06868-a1a8-48c6-9b52-dc49a17506fc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade42e56-4a6f-490b-9b9a-2e13bd4cc7b7", "sighting_of_ref": "indicator--5da2c3e9-7e7f-42f8-b8ca-a95489d06c14", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9c2470-9854-4b80-8ef0-8468138829b6", "sighting_of_ref": "indicator--98eb42fb-24ee-4168-93b0-fb83606fb38f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cebac1-9422-41c6-a193-533933fddc93", "sighting_of_ref": "indicator--7fa61c76-5591-4443-bbc3-a44d171fa185", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e9c80d-aea0-4bc1-8f11-e62ae458d3d4", "sighting_of_ref": "indicator--7fa61c76-5591-4443-bbc3-a44d171fa185", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a081479-25af-4168-8c50-87156e23fdc0", "sighting_of_ref": "indicator--6adc1cba-75c8-4b5d-9642-f8154e63f878", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d21ae3-a298-48f7-9b50-40ba1f577046", "sighting_of_ref": "indicator--ec727823-91fb-4c0a-b894-b2699a93eb74", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a161a39-3b8f-426e-a212-b7fc21a306a8", "sighting_of_ref": "indicator--e9691bf4-cbb1-47a4-9036-ecab9ca3fbc5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbe6e53-ba61-4361-b819-23ea0089d5dd", "sighting_of_ref": "indicator--b0fdd36b-69be-4241-b434-b0b4bd743bc9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f80095-81ec-4599-a290-99b295c1ccbe", "sighting_of_ref": "indicator--b0fdd36b-69be-4241-b434-b0b4bd743bc9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7966a034-0921-48d4-b01f-615740937609", "sighting_of_ref": "indicator--b0fdd36b-69be-4241-b434-b0b4bd743bc9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9fe07f-c6df-43b1-b765-9d4dd4c47c47", "sighting_of_ref": "indicator--1ea8b4d9-6d2d-4406-bac6-202e4041a9ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab3d6e6-5058-4654-a768-b2a4a546543b", "sighting_of_ref": "indicator--1ea8b4d9-6d2d-4406-bac6-202e4041a9ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b1f5ea-1f20-4692-abdd-6da632f54485", "sighting_of_ref": "indicator--f4114e5b-e7a7-47df-8c57-40b15c80ba1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f34d1a-d243-44e3-9197-103a33b785ba", "sighting_of_ref": "indicator--f4114e5b-e7a7-47df-8c57-40b15c80ba1f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bc2545-535c-4ec9-aac0-fe89ffe1f5b8", "sighting_of_ref": "indicator--f4114e5b-e7a7-47df-8c57-40b15c80ba1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8400fc89-7af7-4c06-a8b5-c23e90d3fe0f", "sighting_of_ref": "indicator--4df667fa-e036-4f0a-9d8e-3c5010c2a043", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57759103-c1e1-4dc3-8539-8e3575189781", "sighting_of_ref": "indicator--ac713f3c-dafd-4251-9dbe-1c8bc8e43f01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500bfe1c-1c02-4bc6-a86b-7ce5732acffd", "sighting_of_ref": "indicator--ac713f3c-dafd-4251-9dbe-1c8bc8e43f01", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb90603b-a7d0-40c2-9408-25ad427d8204", "sighting_of_ref": "indicator--ac713f3c-dafd-4251-9dbe-1c8bc8e43f01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4935fa89-87e1-4ccc-a48b-a7f8a1487b20", "sighting_of_ref": "indicator--29b299ca-23f1-44e8-912e-f81e6d00d344", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb72ccdb-8a4c-4924-a387-654629a8d404", "sighting_of_ref": "indicator--29b299ca-23f1-44e8-912e-f81e6d00d344", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a64f01e-b6c3-4310-9d0d-cebfbb937050", "sighting_of_ref": "indicator--fce9ea19-75fe-4b23-9fe5-7f269ab53667", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234c846d-b98e-4f28-aaaa-d2ca13918dfa", "sighting_of_ref": "indicator--72b10281-a043-4aa3-b2ad-2d4a15a3a62d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef94cad-e3fe-42f8-b8b8-ec11b58afd52", "sighting_of_ref": "indicator--ce109595-4b35-41d6-ac96-fcb4af4f3fc4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e70f86-a82e-44b8-8eff-d6ae0a8f0663", "sighting_of_ref": "indicator--14bb5819-0f5c-4e1f-8dc9-ae5731025c11", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b83d3-018c-4288-8400-ef81fe3e2a76", "sighting_of_ref": "indicator--06a7377d-4d89-4a87-8f17-2b1a7b550ef2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22707bf4-d7ca-4268-93c9-6ebb31ca8eda", "sighting_of_ref": "indicator--37222493-3c33-4986-adf5-b2ff3a528397", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5399e952-7e53-48cf-bfeb-c0e16e63f2de", "sighting_of_ref": "indicator--12d440a3-1930-43d5-b46c-18a8875c09f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06253352-04a4-4885-a3fc-61b89e08f815", "sighting_of_ref": "indicator--0fba3ad6-28fa-465a-8ae4-544bfd73bb94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa5dc1-779f-419b-a532-a3c8d9e0248a", "sighting_of_ref": "indicator--15e27e52-dc9a-4b55-996a-ec2dfabaf7fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e14846-e312-4658-b171-4c5b2cbdb741", "sighting_of_ref": "indicator--146a85eb-1ce7-4215-a6ea-5ff41be629b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959895b1-6ac7-41a6-9c49-8c14108092f0", "sighting_of_ref": "indicator--157b6909-354f-44b1-be38-20535f5c2fbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3fd0f2-fabd-4a2a-8302-9bfc87928597", "sighting_of_ref": "indicator--cf563cf5-b878-4a0f-a20d-2ffcf27a4f25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721d0c70-051d-444a-95a0-059d91dfc638", "sighting_of_ref": "indicator--54dfb8ac-a1a9-41fb-b6e7-51f9e7864ac2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed4dcf8-a281-49ec-b96d-c2734384e046", "sighting_of_ref": "indicator--bf016bf3-ed6d-4096-a65c-761dd3b74a25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01ce5d0-539b-406b-99df-b418cd3e65c4", "sighting_of_ref": "indicator--8957dc56-c999-42be-ba39-24584c418ff0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b80a5c4-4c98-4a43-8dfd-c8c5e4798b16", "sighting_of_ref": "indicator--f168b1c8-dea1-48b3-b05b-468b47f004b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efaf1e1-2328-46f7-8c59-c6ec2c5fe7f8", "sighting_of_ref": "indicator--7484b53b-a685-4d61-862f-ea8974bd756c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da7f53b-43aa-42cb-8aaa-03ccbac7c212", "sighting_of_ref": "indicator--9e0a08f8-dea8-469f-bb11-d21a6ffacb6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ede22a-b1ed-432c-bc58-38d4a6a431af", "sighting_of_ref": "indicator--ff2d2309-4319-412a-837b-ade47fcd083d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70980b-8f5e-4cb9-a604-6a394a10a89e", "sighting_of_ref": "indicator--7a641098-9558-43ad-aa4f-3af1edc6fb0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef292e-9405-44d6-92ce-bc089aaf161c", "sighting_of_ref": "indicator--0d3b09f3-b9fb-452b-a916-61f92ad878f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05762712-c5d1-438c-ba68-9e12c3e15596", "sighting_of_ref": "indicator--28d59656-fe0d-4e0c-a44a-7f7100bac67a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8858a467-97aa-438c-abe4-baa5825f12aa", "sighting_of_ref": "indicator--28d59656-fe0d-4e0c-a44a-7f7100bac67a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7dc9cd-4ac2-4a82-b8ff-bda7e2ecacce", "sighting_of_ref": "indicator--00a459c8-348f-4ef4-829f-4a544b576f77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd6b5ca-a958-4fde-8f62-45112073952c", "sighting_of_ref": "indicator--1271b755-bec4-4862-80bc-b19af287ae05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d33cfb-1ec7-4572-922b-ce9f9f45d508", "sighting_of_ref": "indicator--bfb38260-e422-4157-ba05-fcfdb2f78482", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8c825-7888-4745-832b-300fa5353275", "sighting_of_ref": "indicator--bfb38260-e422-4157-ba05-fcfdb2f78482", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061d1d16-3cd0-417e-ac60-8e044f4530ec", "sighting_of_ref": "indicator--bfb38260-e422-4157-ba05-fcfdb2f78482", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d23fe41-258a-48fb-8937-28dafc32d85d", "sighting_of_ref": "indicator--ba60492a-522f-4134-aeda-0ce980a11f7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4d457-cdb5-4e05-aac0-207344fbc5ee", "sighting_of_ref": "indicator--c9d4325b-b914-46b3-966b-13d79fe11705", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccb8699-efdb-4974-a80a-8fbbeac633b1", "sighting_of_ref": "indicator--d8f7d616-57b8-409d-81e6-853ed1a80225", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8439fcb0-b955-4897-963f-a622eeac4465", "sighting_of_ref": "indicator--42ba1b45-0556-483f-9349-63d570558777", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ca2089-ff57-4885-b174-b6bfde775403", "sighting_of_ref": "indicator--ed4275f0-0749-4b39-a28c-5299eba7b443", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73a700c-b723-42bc-b7c7-d7269d3b4890", "sighting_of_ref": "indicator--83a293ae-0672-4e75-a8be-77114fb034ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62363860-36b5-41a9-a549-ee5166254703", "sighting_of_ref": "indicator--4e2c6eef-3bc7-4996-976c-a4da29f1088e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d282a1-d283-4ab5-9852-02bd69e5da11", "sighting_of_ref": "indicator--0d8b617a-e983-43d5-88b1-f1153350e32c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74484d77-f92e-4613-b5cd-f1a9d52996e5", "sighting_of_ref": "indicator--0d8b617a-e983-43d5-88b1-f1153350e32c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8918e791-c001-4c1b-a98d-2edd4f0a42e4", "sighting_of_ref": "indicator--ce533900-7e8e-4173-b273-3796bb4bc184", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb715a7-7474-444f-9775-de9f9384f1be", "sighting_of_ref": "indicator--c6b7d46b-ca00-4f9b-bc0d-a17df1c1d6c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d995533b-1786-46ba-8713-691f89c8e533", "sighting_of_ref": "indicator--9023ebfa-96eb-471c-93d9-ea465f485442", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426082ac-7d82-4ef9-a828-08db4b7e7d6b", "sighting_of_ref": "indicator--1b7c5bba-1f2a-4158-9ca0-5734e92a67c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88d5f5b-5351-4e56-af0c-52e6973e118e", "sighting_of_ref": "indicator--8490ff59-4ade-4d40-b91c-2dfe3206df05", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd62b049-58b4-44ed-a078-874972ef3210", "sighting_of_ref": "indicator--5bc9b395-0ce8-4a05-96bc-012c5a23ce9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7713c4e9-4b70-47f1-8a68-c81bd6bf4316", "sighting_of_ref": "indicator--386911e5-6ca5-41d9-ad69-687e93e50d42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57341bf3-1ae4-4a22-b073-866b5d86769a", "sighting_of_ref": "indicator--a88d4d97-3abe-4fb7-9358-13a57737b7be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d92f4f0-83fb-4eee-b0a3-7a5a791271a7", "sighting_of_ref": "indicator--9f77fcd2-b2c8-4944-952d-7031845e0d52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20abfa55-a46e-477f-a754-4da006469c3e", "sighting_of_ref": "indicator--d89f1a47-94ab-45d0-ab0e-61326c34a5f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ab9d70-d9fc-41df-a845-872abdbc46ee", "sighting_of_ref": "indicator--34a63e88-702b-43fb-b6da-f02d99dae0a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd339257-b011-4432-a91f-0520ab7b3f91", "sighting_of_ref": "indicator--503e8274-08ca-4a1e-b1e2-13a76d59a4d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e014c8e1-c7f6-40e2-acc6-4c39e6e516ec", "sighting_of_ref": "indicator--2e96ba6f-2b21-4d41-b027-654a2ee17335", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8263d311-81ab-486b-a375-5e7898fed462", "sighting_of_ref": "indicator--ba4c0844-9fdb-411c-95ca-ad1f0c700c10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e84aae-01ac-472e-89b7-246193137327", "sighting_of_ref": "indicator--ba4c0844-9fdb-411c-95ca-ad1f0c700c10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f91f44-90c6-44ee-8a94-5ca8e387ebcc", "sighting_of_ref": "indicator--ba4c0844-9fdb-411c-95ca-ad1f0c700c10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cc0829-248d-4dd2-a977-41a9db1eec40", "sighting_of_ref": "indicator--e66af864-9dbf-49c8-a7c2-b9d9dad497b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f51c02-ecce-479d-87dc-bf456c1ae03d", "sighting_of_ref": "indicator--63e8f9aa-a8ca-4e20-a04d-3b943c55802f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d2d29d-5a1e-4c50-810b-95d034d59ae5", "sighting_of_ref": "indicator--19a20593-8e14-4386-8b11-347ef96dc38e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd39b6ee-ab67-4220-9d67-da4392432fb6", "sighting_of_ref": "indicator--7204a933-33c6-45f1-b8e2-216bd8e4e08a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ecf5b-2a04-437b-a8fc-3554e7367a29", "sighting_of_ref": "indicator--38003ec4-c796-41a2-8b05-b315ec83d9dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857b0e2c-323b-42e4-9121-6417a3d4ea02", "sighting_of_ref": "indicator--1159d7f9-6d96-4485-8b9a-b529986736a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ab2ca-c1e2-443e-a8a4-d5a1b9b4bf6f", "sighting_of_ref": "indicator--1159d7f9-6d96-4485-8b9a-b529986736a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8a5897-1c01-41df-b738-27cc5d2f2996", "sighting_of_ref": "indicator--a8cf8bfb-1992-4983-add5-b95e8f2ac8d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fcf13a-b7fa-4984-b6e7-6feb2e72e0dd", "sighting_of_ref": "indicator--6c36c112-e1a4-4cf0-b1b0-613e95a88d71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d62325a-e128-403b-878a-047c412679a2", "sighting_of_ref": "indicator--2592d30e-55fb-414d-8bf2-ea9da92feec1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401aa6b0-6b5d-48b5-95f3-2888a5c7397a", "sighting_of_ref": "indicator--e79ce013-061d-4e98-b64c-5e73dff0ee4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee00fa-17fe-4a48-b4c1-c52a094e2930", "sighting_of_ref": "indicator--4871ed04-e776-4a16-a348-788505465d39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23558021-d0e1-4d7d-b863-61a3fd2e8807", "sighting_of_ref": "indicator--4871ed04-e776-4a16-a348-788505465d39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d417fe7-9bcd-4179-bed3-c38e2c556827", "sighting_of_ref": "indicator--4871ed04-e776-4a16-a348-788505465d39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da5d8ea-9695-4c8f-b55d-98e7755cb0a5", "sighting_of_ref": "indicator--de424c0b-bb3a-49a7-98a9-cfe85ac78ddf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674d774b-dc4c-4697-b1be-e9297d0a2fae", "sighting_of_ref": "indicator--de424c0b-bb3a-49a7-98a9-cfe85ac78ddf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ae3f25-a9e9-430a-938b-94eb5e14c0db", "sighting_of_ref": "indicator--b7bb3069-d93c-4e0e-8565-a9098ecb2d7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16ef28c-7273-4750-9e81-76a5d2765c60", "sighting_of_ref": "indicator--284f506c-6323-4abd-bf40-048a85424206", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309ef7a1-8e2b-4f69-b231-9556d74c69d8", "sighting_of_ref": "indicator--9f1de636-f210-46f0-943f-05b158a1b6e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18b667b-37b7-4585-9b57-e966cf9406f5", "sighting_of_ref": "indicator--9f1de636-f210-46f0-943f-05b158a1b6e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70242741-b3b4-4c8a-8e3d-cb0fc90ad515", "sighting_of_ref": "indicator--9f1de636-f210-46f0-943f-05b158a1b6e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9245473d-7984-489a-87af-2b17d158041c", "sighting_of_ref": "indicator--abf2c71d-2baf-4b82-952d-3d01216ff379", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487f73c4-d702-40d8-ba15-c3705a3922c3", "sighting_of_ref": "indicator--0b560267-4f16-46cb-a736-1241fe70cf6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca0666-bc4a-466f-991d-c3f4681e0781", "sighting_of_ref": "indicator--d36fb4d3-5f3f-49ea-ba1f-3437c4c7914c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e59570d-40e7-493f-81b0-daef4b1dabab", "sighting_of_ref": "indicator--af01eca9-bc67-431e-a39d-5e99d1c25e5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf1546c-7593-4d3d-a6dd-e58afaa0ab8c", "sighting_of_ref": "indicator--97cfb427-095a-4e5f-8843-be6feeda2e65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c448d95-9cfc-4cc1-82c0-ee55a58ed897", "sighting_of_ref": "indicator--97cfb427-095a-4e5f-8843-be6feeda2e65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869b97ff-f7ea-46dd-ba81-85f800950235", "sighting_of_ref": "indicator--97cfb427-095a-4e5f-8843-be6feeda2e65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c72fef9-7a9f-4c24-ba71-0ebf00fd584e", "sighting_of_ref": "indicator--7ae5a80e-2303-432f-a95e-ca3469de5474", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82c17e8-e80b-4c40-90de-c261c69492d2", "sighting_of_ref": "indicator--1b06abcf-e353-43b3-b982-91229412195d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee50545-531a-4c0e-994e-9412b5843adb", "sighting_of_ref": "indicator--b9ad845b-e201-4931-9125-66799bb91aa2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db09a74-b19e-4a0d-b75b-8bf071e7c5a2", "sighting_of_ref": "indicator--a981aa45-c592-49e4-bcf0-ec2d402f83f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06389183-d11b-4bae-bea3-10bbca4cd919", "sighting_of_ref": "indicator--eaadea83-c97b-404a-b21c-d4eae04cd03c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716938f4-4ffa-4787-8158-6eea7144a1f5", "sighting_of_ref": "indicator--4c7ed6c3-9025-4af6-b16b-3a1b8e429236", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55130db4-4fae-4589-ad33-feddce688851", "sighting_of_ref": "indicator--4c7ed6c3-9025-4af6-b16b-3a1b8e429236", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6535c2c6-c473-4a38-81e4-22c790b14159", "sighting_of_ref": "indicator--c31007fe-d579-4d6a-a539-1eb257d844ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ae1667-3b49-4d82-bcbb-505697b67bd6", "sighting_of_ref": "indicator--c4322d98-9c6d-4309-b650-acccb2eb7b71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04c7241-b028-404d-a9ef-7f8712da8f45", "sighting_of_ref": "indicator--c4322d98-9c6d-4309-b650-acccb2eb7b71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e72d16-66ab-4386-917c-93df4a731fd6", "sighting_of_ref": "indicator--c4322d98-9c6d-4309-b650-acccb2eb7b71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ca865e-051b-47d8-bd32-5566a82b91fa", "sighting_of_ref": "indicator--79ac5e5a-d883-4def-b13c-a61a9f13bc7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a99226f-cd6c-4a8a-bb22-ae5a9b7a9a8b", "sighting_of_ref": "indicator--79ac5e5a-d883-4def-b13c-a61a9f13bc7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6ac0e7-0e72-48fb-8ed6-ca6763610903", "sighting_of_ref": "indicator--79ac5e5a-d883-4def-b13c-a61a9f13bc7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4918d0f4-0264-415d-ba24-4c8cb69be595", "sighting_of_ref": "indicator--55ddbb58-20a6-47ee-a2f2-96c3df5a2ed9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0882c7f6-8014-4c34-8e90-870c59e12898", "sighting_of_ref": "indicator--55ddbb58-20a6-47ee-a2f2-96c3df5a2ed9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add3b1fb-9164-454e-bb37-5363e8a57e8a", "sighting_of_ref": "indicator--55ddbb58-20a6-47ee-a2f2-96c3df5a2ed9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f981233-dfdc-46a6-89b8-c38ebdbab671", "sighting_of_ref": "indicator--8667216a-a3fb-418c-aa67-0872f46da90d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfbd54b-fefe-4e5e-b4b3-15839fbbb12f", "sighting_of_ref": "indicator--8667216a-a3fb-418c-aa67-0872f46da90d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fbeea4-d05d-4e06-abbc-8074ac4e4ab4", "sighting_of_ref": "indicator--8667216a-a3fb-418c-aa67-0872f46da90d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a6c89c-94ef-4b57-b5a7-7de8702ba2ee", "sighting_of_ref": "indicator--1ab993b3-8f77-43db-848f-37691debd5ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ba0e5a-8554-44d6-8fb7-7fe8bebdde68", "sighting_of_ref": "indicator--1ab993b3-8f77-43db-848f-37691debd5ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d485bdc-399f-4f23-a256-c29fd7f08681", "sighting_of_ref": "indicator--1ab993b3-8f77-43db-848f-37691debd5ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81e3260-910d-4a9a-8692-02e383d79934", "sighting_of_ref": "indicator--f1ce1699-0dee-4f2f-90e8-0c174c827b5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dcc118-37da-4aad-8e4f-7bd1dde50838", "sighting_of_ref": "indicator--f1ce1699-0dee-4f2f-90e8-0c174c827b5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ec6d65-d986-4ce7-a43c-ef33710e8952", "sighting_of_ref": "indicator--274d2f9f-d394-483d-8340-149e30b15a28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6823556-a81c-42ed-a3da-ac5b5d31080f", "sighting_of_ref": "indicator--29644e32-939f-47d0-8133-989490d8a3b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117dac35-4e21-49e3-bcfa-405e60b820fc", "sighting_of_ref": "indicator--bd462071-9935-469f-ac03-814bed2d6be1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecc4941-5745-4050-bc59-a90b13f5d01e", "sighting_of_ref": "indicator--bd462071-9935-469f-ac03-814bed2d6be1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47a50cf-1b8f-4fcf-b4f7-25912b793746", "sighting_of_ref": "indicator--bd462071-9935-469f-ac03-814bed2d6be1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46af611c-e82a-4dd1-9d53-1a9039c8624e", "sighting_of_ref": "indicator--011e74cd-78ea-4b95-9a2f-2a8039e1e233", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf364f1-2368-4cba-938a-d7e28807b55d", "sighting_of_ref": "indicator--011e74cd-78ea-4b95-9a2f-2a8039e1e233", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42022ded-1b90-434f-b59c-1c46a36fe4d0", "sighting_of_ref": "indicator--011e74cd-78ea-4b95-9a2f-2a8039e1e233", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f96d386-b35e-4dae-8084-ef4fce5c403c", "sighting_of_ref": "indicator--2aac5671-c463-45eb-975b-893c9b75d4ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b644a98c-d59b-41a5-91d5-759d5a5fa559", "sighting_of_ref": "indicator--2aac5671-c463-45eb-975b-893c9b75d4ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99409972-7c42-4f32-860a-a60086a1f281", "sighting_of_ref": "indicator--2aac5671-c463-45eb-975b-893c9b75d4ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c5fc11-63fa-404e-9cdc-5ac590a88975", "sighting_of_ref": "indicator--5c5f8d7c-6e83-4a5e-b122-8349c7139ce9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e7da1e-5a5e-4bff-90e4-9ffdc39fb3bd", "sighting_of_ref": "indicator--5c5f8d7c-6e83-4a5e-b122-8349c7139ce9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4ab98e-c628-4476-87a8-093e058aca77", "sighting_of_ref": "indicator--5c5f8d7c-6e83-4a5e-b122-8349c7139ce9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c5d1d0-5b42-447a-81ce-495dd3160392", "sighting_of_ref": "indicator--d46cd209-c575-48d7-9bd0-25b2a47832a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d6da6a-6264-44e8-9297-e5b7f075d06e", "sighting_of_ref": "indicator--d46cd209-c575-48d7-9bd0-25b2a47832a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5894b9da-eb0b-4a17-80fb-d3a326e9f4f3", "sighting_of_ref": "indicator--d46cd209-c575-48d7-9bd0-25b2a47832a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536edc68-49f0-426f-84bc-4fceec57956e", "sighting_of_ref": "indicator--ab1a465a-c3b5-4005-9cf6-08c04992fa24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545f0af7-c3a0-42c8-8148-7b734a5405e7", "sighting_of_ref": "indicator--ab1a465a-c3b5-4005-9cf6-08c04992fa24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f05cd2-a2b8-4e46-9be2-5b9fa88f967d", "sighting_of_ref": "indicator--ab1a465a-c3b5-4005-9cf6-08c04992fa24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1939b1-727c-4b90-92c9-77705a8b77b7", "sighting_of_ref": "indicator--ca31a4de-5e82-4551-8e56-0c77ee6d7d33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f25be7-d193-4519-a221-fb0c7ea54679", "sighting_of_ref": "indicator--ca31a4de-5e82-4551-8e56-0c77ee6d7d33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a3cc84-c2d4-4d16-a831-b24647e9e8f8", "sighting_of_ref": "indicator--ca31a4de-5e82-4551-8e56-0c77ee6d7d33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870707a4-c2c6-4f0c-9371-ebd037ddea98", "sighting_of_ref": "indicator--76e55240-f7a6-440e-9218-20c6d699ec32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75885df2-67cc-469c-af28-d8288e2a319d", "sighting_of_ref": "indicator--76e55240-f7a6-440e-9218-20c6d699ec32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24376cf6-39e7-4a78-836c-9fe15b747de8", "sighting_of_ref": "indicator--76e55240-f7a6-440e-9218-20c6d699ec32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be756036-6fe7-4057-b5c7-05ce559b84bd", "sighting_of_ref": "indicator--e2f7ea02-78ee-490a-8992-b07516513e83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadaba7a-4032-4325-98b7-2c3b91f544c2", "sighting_of_ref": "indicator--e2f7ea02-78ee-490a-8992-b07516513e83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42511f3-2a72-4c1c-a251-3a1e8572231f", "sighting_of_ref": "indicator--e2f7ea02-78ee-490a-8992-b07516513e83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc558d17-d622-49ce-884d-4cd13636a41c", "sighting_of_ref": "indicator--16c5e3f7-43c6-40b8-8815-90202d68d998", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fc2c2c-f888-4153-b9d2-dcf7cbc3961b", "sighting_of_ref": "indicator--16c5e3f7-43c6-40b8-8815-90202d68d998", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348f3915-6395-4c41-8946-7bfc3c6c94c7", "sighting_of_ref": "indicator--16c5e3f7-43c6-40b8-8815-90202d68d998", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e0504a-06af-4253-99f8-87f737153427", "sighting_of_ref": "indicator--a9f091e7-915a-4aba-99b2-076bd6b3e25a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56833482-94ed-4d71-814e-6515fd2eced0", "sighting_of_ref": "indicator--a9f091e7-915a-4aba-99b2-076bd6b3e25a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b01767e-d4b6-4be9-a9e9-682d598d3498", "sighting_of_ref": "indicator--a9f091e7-915a-4aba-99b2-076bd6b3e25a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b475d7ca-7d2b-4678-9f91-71d31e7f4416", "sighting_of_ref": "indicator--483d69e7-34f8-4eb9-8d9c-0224d66b08cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf82db43-ffc4-42f4-8c1f-d85b3479f08c", "sighting_of_ref": "indicator--483d69e7-34f8-4eb9-8d9c-0224d66b08cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ba094-17bd-4f66-9c56-f1eb5cd326af", "sighting_of_ref": "indicator--483d69e7-34f8-4eb9-8d9c-0224d66b08cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b348db3-f4f9-490d-bbb4-0483b7190a1e", "sighting_of_ref": "indicator--d06735c4-4f7c-4804-b4d5-7dfff49b16b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0ea21a-f33d-4a2d-9003-21e62aaf315c", "sighting_of_ref": "indicator--d06735c4-4f7c-4804-b4d5-7dfff49b16b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe90bc8-5ccb-45f1-b34b-cb0d3587270e", "sighting_of_ref": "indicator--d06735c4-4f7c-4804-b4d5-7dfff49b16b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e296e565-518c-4b2f-a8af-bb9497fb1bb7", "sighting_of_ref": "indicator--34127a9f-42cf-4297-8ca1-85ea8beb223e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3032ece2-f333-463b-ba00-8995b61e2024", "sighting_of_ref": "indicator--546cd612-c5d7-4e87-921f-58cd2cd5ea22", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0209ab8-3ad0-41ab-b0ff-7068f060a827", "sighting_of_ref": "indicator--dc5234fd-4263-43c1-a43c-16675860bcc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477bebdd-56f0-4ddd-87b1-9428a95a3e10", "sighting_of_ref": "indicator--dc5234fd-4263-43c1-a43c-16675860bcc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b5e086-339b-4864-a936-854b6d0f12bf", "sighting_of_ref": "indicator--c4f1d45a-9dba-4022-a496-706ec7148909", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccac5b07-fcd0-4d38-84a2-3aa2f76ffb17", "sighting_of_ref": "indicator--5fe2d2e7-91fd-4cab-ade0-5937ae250f2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b06388-0757-4d4e-9516-c1ccbc9ff0d8", "sighting_of_ref": "indicator--5fe2d2e7-91fd-4cab-ade0-5937ae250f2a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1d571a-485e-47ca-9af4-f61b0fc06905", "sighting_of_ref": "indicator--5fe2d2e7-91fd-4cab-ade0-5937ae250f2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb9dd31-fa5b-4d85-b167-f644cc1681af", "sighting_of_ref": "indicator--9f9f51b3-4bb3-4315-8bd7-9b646527d9ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c616a6-c460-481f-a2ed-577df3a8feaf", "sighting_of_ref": "indicator--cdf4c206-3145-467d-93ef-a8691319d975", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2ee4be-8226-496a-9245-94b537df8145", "sighting_of_ref": "indicator--cdf4c206-3145-467d-93ef-a8691319d975", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d6e9f9-8dcc-45ae-bfef-1cb78d473e00", "sighting_of_ref": "indicator--cdf4c206-3145-467d-93ef-a8691319d975", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0063ec-008b-4635-8743-a8bd40b14ebc", "sighting_of_ref": "indicator--7bc1ffed-7493-4d98-b6b5-eaa0eb5f69d9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8bac30-2975-407d-82b3-0cc78d3cee2b", "sighting_of_ref": "indicator--7bc1ffed-7493-4d98-b6b5-eaa0eb5f69d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409ef334-722e-45db-8e22-ccb148bf0e78", "sighting_of_ref": "indicator--0be5f9c3-9ba3-4d6e-8553-73ff4208c6e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecc1e36-6c6a-4c10-a5e1-93bef2eef5ad", "sighting_of_ref": "indicator--0be5f9c3-9ba3-4d6e-8553-73ff4208c6e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec917cda-ed98-460d-a65d-9f19b3da1608", "sighting_of_ref": "indicator--0be5f9c3-9ba3-4d6e-8553-73ff4208c6e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67379b8-5591-4a4a-a63c-f341f3bd74fc", "sighting_of_ref": "indicator--35939941-252b-4aae-aa2e-745620a2da08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b8735-b0f7-43da-9727-5f7e296af6cd", "sighting_of_ref": "indicator--35939941-252b-4aae-aa2e-745620a2da08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e83a56d-357a-45d6-8313-78ea6e8a8b2c", "sighting_of_ref": "indicator--35939941-252b-4aae-aa2e-745620a2da08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f89c653-a51a-4c24-b8f7-377acadc38e3", "sighting_of_ref": "indicator--0de5ab20-aa13-433a-840d-9562cf6f04c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95766c1-3527-49c8-87bd-ffb24d592f7b", "sighting_of_ref": "indicator--0de5ab20-aa13-433a-840d-9562cf6f04c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780b8873-01c5-46b3-9efe-ce82f68d0e3d", "sighting_of_ref": "indicator--0de5ab20-aa13-433a-840d-9562cf6f04c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc9c558-beb9-4c4a-ae09-c7f6fcbd97f4", "sighting_of_ref": "indicator--7e115da7-cee9-4a2f-9b97-d0051a65afd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12531990-446c-4760-9474-a20b6dec6155", "sighting_of_ref": "indicator--7e115da7-cee9-4a2f-9b97-d0051a65afd2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f915bcbf-5bfa-4a61-a020-5d74e3df0af7", "sighting_of_ref": "indicator--7e115da7-cee9-4a2f-9b97-d0051a65afd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf2370e-0e38-42fd-bf0e-e1bfa638d97f", "sighting_of_ref": "indicator--4a12e417-7203-4957-9aac-358a2902e27c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb35638a-5def-4ff9-a3cc-f9ea5ce80e97", "sighting_of_ref": "indicator--cecafc84-e7df-446c-8b9c-e179d86ee8f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0422beb9-84c4-4c46-8dc7-609ba36851d1", "sighting_of_ref": "indicator--cecafc84-e7df-446c-8b9c-e179d86ee8f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c680d8ec-1c0c-408c-82dd-87117c856c1b", "sighting_of_ref": "indicator--cecafc84-e7df-446c-8b9c-e179d86ee8f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31349fb6-5f29-462c-8437-d5aabfd25f95", "sighting_of_ref": "indicator--34f56d8e-eb98-4ca0-ac3a-a879a2f05d93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee5b413-b453-4d1d-b997-86db984d99f3", "sighting_of_ref": "indicator--34f56d8e-eb98-4ca0-ac3a-a879a2f05d93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2ca4da-1707-40a2-baa2-85116dfabc95", "sighting_of_ref": "indicator--34f56d8e-eb98-4ca0-ac3a-a879a2f05d93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a761f-840a-4e76-ab6d-dc126fcf9626", "sighting_of_ref": "indicator--c64c25dc-4d71-45b7-b805-2e021d487413", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee57a620-a682-4f04-8606-9a70e3887c43", "sighting_of_ref": "indicator--ee41e7d8-4490-4186-a0e8-05261dce6ca5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7328d25-07a1-4659-8bc7-89e1143bdd79", "sighting_of_ref": "indicator--ee41e7d8-4490-4186-a0e8-05261dce6ca5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e58b846-b8b5-48e2-b44a-1d1a6b9b1f4e", "sighting_of_ref": "indicator--ee41e7d8-4490-4186-a0e8-05261dce6ca5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f00d4c-8975-4f3b-bd11-acc0161726b2", "sighting_of_ref": "indicator--f2f92b17-ed26-4415-b5c8-95bdab76d959", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f530e2-7f30-4da8-b3c1-56ba954b42c9", "sighting_of_ref": "indicator--fe48547f-997e-46e5-9e23-7c64eea3f89f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ddea60-f593-402c-b0de-21922d143f21", "sighting_of_ref": "indicator--fe48547f-997e-46e5-9e23-7c64eea3f89f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fc469a-73c2-4e8f-a793-923e95187d05", "sighting_of_ref": "indicator--fe48547f-997e-46e5-9e23-7c64eea3f89f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112e408e-01fc-4ea3-a309-cbb8bbec042e", "sighting_of_ref": "indicator--4415fa45-48a4-407a-a4f7-f3235fccdf08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c047c0d-3464-48f1-b3c1-7adc54671318", "sighting_of_ref": "indicator--3bd57432-545c-4e57-b44e-000b615c2268", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa327150-1cb2-4bba-9fa9-25f73e9af5fe", "sighting_of_ref": "indicator--f47e1ef1-b507-4076-9a0c-90b2c1994a14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641e681d-689d-4cd7-b89e-a34e2369f9c4", "sighting_of_ref": "indicator--f47e1ef1-b507-4076-9a0c-90b2c1994a14", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb62364b-45fb-42a1-a31a-f3aa7848bd1a", "sighting_of_ref": "indicator--f47e1ef1-b507-4076-9a0c-90b2c1994a14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8400debe-a47a-4fa3-9c46-9dfd971c5dd4", "sighting_of_ref": "indicator--8e1edcce-4c58-4ff9-9639-ff75df9d1ca2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9061a5-ac3f-472f-a213-c22bf10c591b", "sighting_of_ref": "indicator--8e1edcce-4c58-4ff9-9639-ff75df9d1ca2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a751bf-b6cf-42d7-88e2-8ec329b4117b", "sighting_of_ref": "indicator--8e1edcce-4c58-4ff9-9639-ff75df9d1ca2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5986982f-cc48-4982-8644-b7e3282a45ef", "sighting_of_ref": "indicator--b9bf47c1-d7f8-4479-81a2-981c4444f9b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945bef0d-eb21-45f9-b57d-e998875b8810", "sighting_of_ref": "indicator--ad5beb56-5728-41cc-9ba5-d2a2171ee8a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1fd7f6-26e4-4534-82b5-8cdd13f62c0b", "sighting_of_ref": "indicator--fcf53d00-c6b3-4f9b-90af-766d6e5b3fbb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6682aa32-1300-493f-9603-68e365f16178", "sighting_of_ref": "indicator--c9f4c36f-231b-4c56-b35c-94c65c9ff44d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd7e096-c3ce-4681-8969-560108b5620b", "sighting_of_ref": "indicator--c9f4c36f-231b-4c56-b35c-94c65c9ff44d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0450d2-9eb0-46e2-a6a0-7a98e621690a", "sighting_of_ref": "indicator--c9f4c36f-231b-4c56-b35c-94c65c9ff44d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2415cbce-4a75-4e04-8575-7f481dd85cc4", "sighting_of_ref": "indicator--8ca7ca6b-5d14-47a3-a771-131e461c586e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1f4692-1ab6-4838-9c48-96cffdfd7851", "sighting_of_ref": "indicator--8ca7ca6b-5d14-47a3-a771-131e461c586e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6454b002-f4c1-4ff0-83ad-b20013e4e1b4", "sighting_of_ref": "indicator--8ca7ca6b-5d14-47a3-a771-131e461c586e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3502fa-ae47-4e43-9988-40ccd928af70", "sighting_of_ref": "indicator--8d308bfe-6036-4b36-88f9-3748cf032fa9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccab4e7d-5363-4112-b4f4-bfc7f8921bb7", "sighting_of_ref": "indicator--8d308bfe-6036-4b36-88f9-3748cf032fa9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255a81b9-abde-40c9-bbe0-86710cebc507", "sighting_of_ref": "indicator--8d308bfe-6036-4b36-88f9-3748cf032fa9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c293a83-983e-477b-8e6b-3d3f7b91c6e4", "sighting_of_ref": "indicator--83e680ca-d7da-4e2a-8c0a-f18da68e1f9d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c75db-0bf6-4ede-b213-887fa1c3de4c", "sighting_of_ref": "indicator--83e680ca-d7da-4e2a-8c0a-f18da68e1f9d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7c96ac-dc30-4ae2-902b-5cecba1f06fa", "sighting_of_ref": "indicator--83e680ca-d7da-4e2a-8c0a-f18da68e1f9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669bbc94-5aa3-4ae2-834f-330f0257e856", "sighting_of_ref": "indicator--0bfbbb4f-878f-437f-9e3c-c4d3f2a53b48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9477b27e-ba8f-4fd3-85f5-402889867186", "sighting_of_ref": "indicator--0bfbbb4f-878f-437f-9e3c-c4d3f2a53b48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42964589-f8f2-4bd9-8c0f-007df777107c", "sighting_of_ref": "indicator--0bfbbb4f-878f-437f-9e3c-c4d3f2a53b48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491994b5-fa4b-45aa-ad6d-2339745bf123", "sighting_of_ref": "indicator--cc261441-4257-483e-8b6b-ac0ce2db65d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b93e41-d9b2-4922-a46c-35e9cbddad72", "sighting_of_ref": "indicator--d308749c-7c6c-42cf-94ae-f289497ad09e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fbcef5-d42e-4142-be36-b3079e88f8d4", "sighting_of_ref": "indicator--bff60b5c-2377-4438-b396-b223a127c118", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60e3ff3-22b9-4cf7-ab81-debbe444f209", "sighting_of_ref": "indicator--eeb58d58-e394-4284-9678-b05c54e47214", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dcaa6c-088e-49ae-b0a0-b76c563a8e8d", "sighting_of_ref": "indicator--7e5c86c2-c69d-4fad-aa7f-e1d090d94981", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113e1dd4-299e-4c14-aabb-04059434aef9", "sighting_of_ref": "indicator--ac6f1f80-2aa7-4826-ba42-40b30af64fb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd5873-b00f-4644-a2f3-60ea1fa1e737", "sighting_of_ref": "indicator--d56fccb3-6776-46ae-a494-5c5b6be27885", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5754aa-3161-44ff-9b7e-d704ab42b65a", "sighting_of_ref": "indicator--4163171e-5987-4b71-85c9-cab083903d37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac827d-8012-4674-b411-974c8b2344e8", "sighting_of_ref": "indicator--4163171e-5987-4b71-85c9-cab083903d37", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8223aaf0-8232-4bfb-958b-7d7f49d297fa", "sighting_of_ref": "indicator--4163171e-5987-4b71-85c9-cab083903d37", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ad1e3d-25c9-4378-bfbf-e0ed0bd4460f", "sighting_of_ref": "indicator--e4dd6f9a-0752-4b43-8c1a-9f7c549b0684", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8da972-7c0a-4883-b29a-fec4d5626b55", "sighting_of_ref": "indicator--e4dd6f9a-0752-4b43-8c1a-9f7c549b0684", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32dadd5-ff8b-47ec-b564-5472a68a3bab", "sighting_of_ref": "indicator--9d9fd815-e653-49c9-9170-50511b973efb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab4d1cf-d7b2-4e08-a826-36f825b7d670", "sighting_of_ref": "indicator--9d9fd815-e653-49c9-9170-50511b973efb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a53cf-b64d-4e12-9c94-341b9eca747c", "sighting_of_ref": "indicator--9d9fd815-e653-49c9-9170-50511b973efb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98a845a-f20f-4429-86f0-abcf19d0c60c", "sighting_of_ref": "indicator--fdc4841d-e4fd-49c0-9af4-2610082d5802", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13c4f4e-1dd5-4ca6-921a-01321a795fed", "sighting_of_ref": "indicator--fdc4841d-e4fd-49c0-9af4-2610082d5802", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0098c42-b41b-4d3f-a352-d6ece0134172", "sighting_of_ref": "indicator--49abe622-dd37-4623-b238-2d00f708386e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576840f5-2520-4e78-ad3b-5acd3ef7495b", "sighting_of_ref": "indicator--65bdb35e-1f63-413c-a7b1-a9cb76b4f682", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f79bb43-d8c6-43b1-8c9f-793d94652a5f", "sighting_of_ref": "indicator--1d1e49c1-06db-4f2a-be5a-ea22c2773e2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76177532-3160-4678-8c08-cec1295218bb", "sighting_of_ref": "indicator--2a77cc8f-e1d3-4655-a169-348b54cd07a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a3e55c-91df-4c00-86de-34ec898b0380", "sighting_of_ref": "indicator--81161977-750e-4b57-8ce7-60014a7b54bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16940e6-203e-4a08-838e-9b02e8c9514e", "sighting_of_ref": "indicator--4dc11d5b-7c91-4c4a-935f-aeff3bf84a14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a86e4a-832e-4d26-b81a-1d531cc2c6e7", "sighting_of_ref": "indicator--c5f8ea21-2baf-4bb0-8c23-efde70d772cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42965732-354a-47b4-a31d-2c1fa46b6f5d", "sighting_of_ref": "indicator--a57c7112-dc0f-431b-b077-d490aa5833b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc1c055-a57e-40bb-8f99-1dd7555a9d4f", "sighting_of_ref": "indicator--c487e90b-b143-4aec-85e1-542d07ab4422", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a47fc9-072d-4492-b7c9-f28cee1084b0", "sighting_of_ref": "indicator--891423d4-35ac-47d4-bd3b-3c18847496d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aff650e-683a-4216-939e-924ee33e704e", "sighting_of_ref": "indicator--19ef433f-56d3-4a27-a436-6c770987f6f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb039775-e690-4c16-84af-59f0f547d4d0", "sighting_of_ref": "indicator--b83b2312-dc12-4e0e-91a5-e4e3453837cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce8a1c9-0922-4fee-9392-0d9956b85be9", "sighting_of_ref": "indicator--70f7c45c-41d9-4f4d-a50a-85fcea543d22", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d9f697-b7c7-41be-901d-1f5f49a1fe19", "sighting_of_ref": "indicator--70f7c45c-41d9-4f4d-a50a-85fcea543d22", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa4d5fd-f69d-48a9-8300-77f10744ab62", "sighting_of_ref": "indicator--70f7c45c-41d9-4f4d-a50a-85fcea543d22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c822563e-3e68-45a1-9bf3-fdf644aa61b4", "sighting_of_ref": "indicator--134c0ec0-5e52-4163-a511-befcbbbc5871", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141d3bf6-333a-4bed-8005-fb24061640e2", "sighting_of_ref": "indicator--134c0ec0-5e52-4163-a511-befcbbbc5871", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0cef9a-f6e3-4ecf-ab02-1874ac50ceb8", "sighting_of_ref": "indicator--134c0ec0-5e52-4163-a511-befcbbbc5871", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1488b80a-25f6-49d1-9a53-2b8d03a2b7c3", "sighting_of_ref": "indicator--deee27cf-d558-4876-a6c5-59bb385b59e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f9dde7-36c2-49b7-8eba-37d21940daf9", "sighting_of_ref": "indicator--deee27cf-d558-4876-a6c5-59bb385b59e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1730b758-be2c-4307-969e-b8bee8ccf9ca", "sighting_of_ref": "indicator--deee27cf-d558-4876-a6c5-59bb385b59e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8c3208-98b2-4fda-acf2-683cebea0d75", "sighting_of_ref": "indicator--75eeb6b5-28bf-447f-ac66-845384bcca32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fa73d0-efbf-4f91-b204-98e697d45b56", "sighting_of_ref": "indicator--75eeb6b5-28bf-447f-ac66-845384bcca32", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e12272-400f-47ab-b43c-3a8a77b011ec", "sighting_of_ref": "indicator--75eeb6b5-28bf-447f-ac66-845384bcca32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b656e5-4e71-4b03-8a63-feb28df1b5de", "sighting_of_ref": "indicator--c5fd1531-3e0f-45d2-88d4-a60e71f814a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be32e532-8e10-495b-bf8b-21dfa7d0fb11", "sighting_of_ref": "indicator--8ddf1567-b7f4-4da4-a17f-ae26fc146e82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d66f3-9006-418c-b18d-b74dfe2dc7db", "sighting_of_ref": "indicator--103c91e7-dd88-4217-bbd6-3008f2987b0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc95144-cf78-4b71-bf67-3702a0811f9e", "sighting_of_ref": "indicator--62caa48e-601d-4b72-922d-a8d748f62a10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4b91bb-e9d8-4e30-8dbb-add9433b99fb", "sighting_of_ref": "indicator--f4888dd5-74f3-46a7-9d0e-b2f06daf78a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdea209-4823-427b-865b-27b40e0a5ae7", "sighting_of_ref": "indicator--7b33b84f-e2f2-46ba-abcb-73c34fd21b3b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aea7bb4-39fc-44e4-8f40-bc3650d98f73", "sighting_of_ref": "indicator--4959a1cf-bf36-4a7a-b627-a2339976e9b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa6bec7-7746-4e7a-b065-cc625919a547", "sighting_of_ref": "indicator--d52b72f1-48c8-4128-8b2c-f02fdcba5531", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b69054-b153-4b40-b551-a788872e7a66", "sighting_of_ref": "indicator--d52b72f1-48c8-4128-8b2c-f02fdcba5531", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d180cbb-ee62-40a9-b91f-75adba75a98d", "sighting_of_ref": "indicator--a1e1aa4f-4d14-499e-8d80-f28c6989e6f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5bf0b4-e3d6-4596-8668-7067b68702f4", "sighting_of_ref": "indicator--a1e1aa4f-4d14-499e-8d80-f28c6989e6f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1007bb-1f58-4486-b937-272c9eed8a57", "sighting_of_ref": "indicator--4bf87366-3974-4361-ab64-2fbaec2e89c6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acff32cf-d94e-47cd-ba21-baebd4f78740", "sighting_of_ref": "indicator--1441227f-668a-45c0-a720-e5267decf46d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9163a0ad-9289-42c7-a94b-cba6824d1636", "sighting_of_ref": "indicator--1441227f-668a-45c0-a720-e5267decf46d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5c4081-b6e8-4956-9cc2-0482cc7f4ca3", "sighting_of_ref": "indicator--1441227f-668a-45c0-a720-e5267decf46d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd267d64-0d0f-459a-88a2-e54d13ca8315", "sighting_of_ref": "indicator--428d0b35-94db-4a0c-806e-1c2ddbe14a88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3637e3e-afcf-405b-99c0-709401bbf125", "sighting_of_ref": "indicator--428d0b35-94db-4a0c-806e-1c2ddbe14a88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa050158-893b-4da4-afee-b6ad6f8bfdfc", "sighting_of_ref": "indicator--428d0b35-94db-4a0c-806e-1c2ddbe14a88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bf388f-e1b0-41d9-8556-8fadffd9ee5b", "sighting_of_ref": "indicator--ce57bffb-e10d-4261-8808-e9949fb9e9a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ea9336-2372-47d3-8658-2397c2e971dd", "sighting_of_ref": "indicator--ce57bffb-e10d-4261-8808-e9949fb9e9a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d886c41f-0d55-4cde-88b6-de090d2e6d3d", "sighting_of_ref": "indicator--ce57bffb-e10d-4261-8808-e9949fb9e9a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4b1bad-501d-4c72-ab37-7a762cb2592a", "sighting_of_ref": "indicator--e6b02154-fa43-41b0-848c-3e67b5eced8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511e0c67-00db-4f40-8738-14337f472d51", "sighting_of_ref": "indicator--e6b02154-fa43-41b0-848c-3e67b5eced8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d833ac-6ec9-4665-bc3f-9b496caa19fa", "sighting_of_ref": "indicator--e6b02154-fa43-41b0-848c-3e67b5eced8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e4f041-b1ae-43a1-b0d0-0bc2bebbfbf0", "sighting_of_ref": "indicator--8c2595e5-f31f-451f-8b0f-9f3644677f9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281c1494-487e-495d-ad73-a61eb8ca91a2", "sighting_of_ref": "indicator--8c2595e5-f31f-451f-8b0f-9f3644677f9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d5e566-3fb1-4e63-a113-d11aac93a040", "sighting_of_ref": "indicator--8c2595e5-f31f-451f-8b0f-9f3644677f9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d44c448-2b57-4f65-b4b9-12154f9f4841", "sighting_of_ref": "indicator--53570a57-e745-43a0-9cd5-e0331f08b60a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1d2110-d524-4412-995b-452a47e0216b", "sighting_of_ref": "indicator--53570a57-e745-43a0-9cd5-e0331f08b60a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379c0355-137d-4cee-b2c5-7260e8f37b71", "sighting_of_ref": "indicator--0dbf4c7b-8d3b-44a1-a13d-d205cc2aeda1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f44ee31-b6d8-4fe7-9fc3-f96cb5dce2d9", "sighting_of_ref": "indicator--0dbf4c7b-8d3b-44a1-a13d-d205cc2aeda1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbca3e9-c4cb-444f-b6b6-61d3f7566bca", "sighting_of_ref": "indicator--0dbf4c7b-8d3b-44a1-a13d-d205cc2aeda1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c88ad29-8480-4006-a88a-3ad4a7bd10ff", "sighting_of_ref": "indicator--8f0936ad-29d5-442f-b545-d0ee0da21f9b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909f7e07-8ad3-4bc8-a156-a144e534c1ff", "sighting_of_ref": "indicator--8f0936ad-29d5-442f-b545-d0ee0da21f9b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00a7671-7707-43e3-9db1-5ae10de41ac9", "sighting_of_ref": "indicator--8f0936ad-29d5-442f-b545-d0ee0da21f9b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dfc9c7-1a24-42d9-9af7-8d62d6f3f649", "sighting_of_ref": "indicator--a64b1abc-78bd-4858-81bd-9f4d25fe9129", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbde30e2-4516-42ba-a88f-14a88b122d15", "sighting_of_ref": "indicator--dc67552f-9288-493e-8950-da06acf509de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bcdc01-1695-471d-a04c-e5b5373bf046", "sighting_of_ref": "indicator--0b5450aa-fc58-4df5-832c-43792563dbae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d90189b-5751-4b20-a15c-626468d20f35", "sighting_of_ref": "indicator--8eb3b31e-9477-4716-8079-972bb63a535e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7693207e-d69c-49a8-b091-7337d9d8a8d4", "sighting_of_ref": "indicator--beae6008-a32d-4913-ad56-21b31ef7b2e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a96e10-ac97-4926-93bc-adfd21f0bf97", "sighting_of_ref": "indicator--9f4555b7-b210-45df-aa29-504ffcd244fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5edbac-900e-43f2-aec6-986b0b8b8b94", "sighting_of_ref": "indicator--8451611c-3474-4260-8b26-82dab8a77d27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2a50fc-0ca0-49c0-a9c6-2d6dd592013c", "sighting_of_ref": "indicator--8451611c-3474-4260-8b26-82dab8a77d27", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d706cc0-5190-4e16-8e5d-92290f95567a", "sighting_of_ref": "indicator--8451611c-3474-4260-8b26-82dab8a77d27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237fb2e7-9f49-420e-a3a3-0d3ba0e9244a", "sighting_of_ref": "indicator--357336fc-dd1b-45df-a2ab-6dee35990438", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f91e673-67c5-4513-884a-f7540212f4a0", "sighting_of_ref": "indicator--357336fc-dd1b-45df-a2ab-6dee35990438", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee22056-b449-4654-8a1f-e24980dcd196", "sighting_of_ref": "indicator--357336fc-dd1b-45df-a2ab-6dee35990438", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca53f0f-be36-4658-8365-c16c0cc536ab", "sighting_of_ref": "indicator--40a9a60f-c5cc-4d43-aa62-1c1c001f41be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf40641-2826-487b-80ec-4e83b4ff970a", "sighting_of_ref": "indicator--72260aeb-c6d6-4648-b035-fe441bb844f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28cd88d-b07b-4f47-93ee-3c1f77b435d7", "sighting_of_ref": "indicator--f5caae1c-9f75-4c7a-a52a-41f8f4f8fb7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e006182-27fd-4bcc-aae0-83f57ec88718", "sighting_of_ref": "indicator--f5caae1c-9f75-4c7a-a52a-41f8f4f8fb7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dc90f7-0869-4b16-9b31-4410a3dbf0ab", "sighting_of_ref": "indicator--f5caae1c-9f75-4c7a-a52a-41f8f4f8fb7a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d399ca3-76e0-4f37-9c40-018105dba150", "sighting_of_ref": "indicator--0c616949-5021-4e2e-85f8-2804c94aecdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a223ea-7631-418a-85d0-9056a615bc70", "sighting_of_ref": "indicator--752a33af-f1e0-477c-84f7-230d4b31e599", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b3a2ca-6c10-4649-b133-862663447350", "sighting_of_ref": "indicator--2caa80bf-961f-45d0-8899-573dd34a031a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c111bb33-7ba3-4791-acd2-06261033bc2d", "sighting_of_ref": "indicator--2caa80bf-961f-45d0-8899-573dd34a031a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da095732-9a99-4acf-a5e3-9acd4f65fa0c", "sighting_of_ref": "indicator--2caa80bf-961f-45d0-8899-573dd34a031a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d85bee-dd29-42f9-87fe-7515ab3bdafb", "sighting_of_ref": "indicator--3b86257f-a723-4186-bbae-05177c2f6e43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8619c15-b9f7-4067-9643-cdbfdda07cc5", "sighting_of_ref": "indicator--3b86257f-a723-4186-bbae-05177c2f6e43", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0ef6fd-1d2c-4cd8-8565-e2e5c170693c", "sighting_of_ref": "indicator--3b86257f-a723-4186-bbae-05177c2f6e43", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e1400f-e11d-42e7-be41-5e109388fe75", "sighting_of_ref": "indicator--f4fc643c-0752-42df-add4-07be808a15af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27631b47-9ea6-4b0c-b04f-0a69d8f8c9a3", "sighting_of_ref": "indicator--f4fc643c-0752-42df-add4-07be808a15af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9334be4c-9995-4a8c-8485-9b224679ed37", "sighting_of_ref": "indicator--f4fc643c-0752-42df-add4-07be808a15af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43455173-1eab-4fa3-97a4-70bd982320c4", "sighting_of_ref": "indicator--0696c3ed-6dc0-4bdb-a9d5-e378a2d8ef88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b362207-7216-432e-afbf-a70792c948e5", "sighting_of_ref": "indicator--9c2d43fd-6418-4dee-878e-38bc5636b8ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe64bc0-d3c6-437a-acd7-45b4613beabc", "sighting_of_ref": "indicator--9c2d43fd-6418-4dee-878e-38bc5636b8ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1b1837-833c-452c-9f40-694fa7dec161", "sighting_of_ref": "indicator--9c2d43fd-6418-4dee-878e-38bc5636b8ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19dd88d-4d93-4f6e-b882-26764753712a", "sighting_of_ref": "indicator--fe8ba5a0-81d4-4218-b435-654d3e4825bd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44741a1-260f-4303-902d-3f147c3bc97b", "sighting_of_ref": "indicator--fe8ba5a0-81d4-4218-b435-654d3e4825bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3a4f49-2d7a-4d75-adbf-4765d399fc48", "sighting_of_ref": "indicator--787b2c2b-8a65-4fbe-8343-03669ee31e5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80d4236-e95f-4955-9b7c-4b9c66338f60", "sighting_of_ref": "indicator--787b2c2b-8a65-4fbe-8343-03669ee31e5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a73e0c-5df0-431f-981a-a12613b46a1b", "sighting_of_ref": "indicator--787b2c2b-8a65-4fbe-8343-03669ee31e5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228c9b1d-3b0f-407e-9c15-fcac0d60bf40", "sighting_of_ref": "indicator--a51d1867-c01a-4cc8-89a8-7de52464fa23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ceae5d-2152-4352-b76c-dea81e183648", "sighting_of_ref": "indicator--a51d1867-c01a-4cc8-89a8-7de52464fa23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cca1db7-cafe-4c8c-8857-66798240a373", "sighting_of_ref": "indicator--a51d1867-c01a-4cc8-89a8-7de52464fa23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea062f9-fdfa-4e5c-b1b5-5dbf2b698841", "sighting_of_ref": "indicator--b3ad506b-5a67-4498-b480-4462ff9729ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2ad9d0-f675-4b29-bcad-3bf77880b9cb", "sighting_of_ref": "indicator--b3ad506b-5a67-4498-b480-4462ff9729ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50eac2e-4bd3-446d-a221-90a14e24f446", "sighting_of_ref": "indicator--b3ad506b-5a67-4498-b480-4462ff9729ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50105b8d-46ce-4868-aad5-d8e14420218b", "sighting_of_ref": "indicator--20aaaa61-9b96-40db-bf55-652c7ba5dd3e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561bbc4-d57b-425b-a09e-3ba5b40606d5", "sighting_of_ref": "indicator--20aaaa61-9b96-40db-bf55-652c7ba5dd3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ecd6a6-491f-4966-9474-974859ec9619", "sighting_of_ref": "indicator--36f0276f-1fca-4f22-bba7-be5affd67034", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadf1e8a-e93b-40f0-b588-d57f9e078018", "sighting_of_ref": "indicator--36f0276f-1fca-4f22-bba7-be5affd67034", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3101508b-d75b-4126-b147-9b77a590b652", "sighting_of_ref": "indicator--36f0276f-1fca-4f22-bba7-be5affd67034", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4929e5-c6d3-48dc-bc3a-3fac9ae748fe", "sighting_of_ref": "indicator--4bdb54c6-8f85-42c2-9957-0a51604f78c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0949e6df-7b90-46ef-865f-b839b68126f5", "sighting_of_ref": "indicator--4bdb54c6-8f85-42c2-9957-0a51604f78c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6270f439-0ca4-4def-a0f4-51e74b284d5b", "sighting_of_ref": "indicator--6648d2f4-4674-4970-affd-dc32c594642a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac5fcde-a1cc-4a34-b70d-bc421e2ecb75", "sighting_of_ref": "indicator--7c18284a-2bb0-44b6-9650-758160907754", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dc4bae-48db-448d-8f14-f493c33e7b1c", "sighting_of_ref": "indicator--816804dd-e4e5-415c-b04b-924e666be1be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6576da64-1033-49c8-9cff-a7c995947f7a", "sighting_of_ref": "indicator--09ced798-634d-4e84-bca8-962e7e92ebb8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524bbdd4-81f1-4937-b644-09f322b0eb5d", "sighting_of_ref": "indicator--09ced798-634d-4e84-bca8-962e7e92ebb8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007e8a19-b7a9-4c66-afa9-6f6c7f18407c", "sighting_of_ref": "indicator--de4cf4b6-3be8-426f-ae40-c4a6f38ca483", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225d5590-3209-4fd5-931c-cee30a4c7299", "sighting_of_ref": "indicator--de4cf4b6-3be8-426f-ae40-c4a6f38ca483", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7647e6a-d41b-4520-909b-d8f1824c5a91", "sighting_of_ref": "indicator--de4cf4b6-3be8-426f-ae40-c4a6f38ca483", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1692fc82-1b91-4827-9f23-298f7bf5a3cc", "sighting_of_ref": "indicator--de5dcf8d-c1fe-4f9b-b0c7-697cf8e29d3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca595e1-c840-4bfb-9bf1-c50c13cdc1b6", "sighting_of_ref": "indicator--18e2bff0-00c1-48dc-9ed2-0641037854fd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20644c48-e613-4666-a101-e70909492f70", "sighting_of_ref": "indicator--18e2bff0-00c1-48dc-9ed2-0641037854fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff64dc4-d113-420a-b27b-4a21eccb849f", "sighting_of_ref": "indicator--18e2bff0-00c1-48dc-9ed2-0641037854fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb070931-b5b1-4c38-8c76-07c3f05c4210", "sighting_of_ref": "indicator--60a1221b-83c4-43d4-b0c3-8e5b92c9d1d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927984fa-b9c0-42ca-a31b-4fb9848ebde0", "sighting_of_ref": "indicator--4c0ce98d-ab6f-45d0-a3ac-c10f86dc239c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe8e75a-13b8-4638-b3b3-823682731909", "sighting_of_ref": "indicator--4c0ce98d-ab6f-45d0-a3ac-c10f86dc239c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5c8672-03a1-45cc-b1a6-4a5e1cf7588f", "sighting_of_ref": "indicator--0ebaec52-58bd-46d1-8981-6f21f6f4adec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6253f54-e4ba-43f2-bc78-a9daa8a1738f", "sighting_of_ref": "indicator--0ebaec52-58bd-46d1-8981-6f21f6f4adec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555427fe-6633-47f2-a4a9-906aaef4c530", "sighting_of_ref": "indicator--3aeedfde-5c8d-4cce-ab47-57d11c024b23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a87d33b-43ee-4c5c-8e16-f5279a3522e7", "sighting_of_ref": "indicator--3aeedfde-5c8d-4cce-ab47-57d11c024b23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0436d397-1bab-40e4-8ea2-b0057df73835", "sighting_of_ref": "indicator--64bf1888-2c81-4a12-bbb4-7cc013ecf05c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf00609-751d-4859-b751-4af8fadb2a02", "sighting_of_ref": "indicator--64bf1888-2c81-4a12-bbb4-7cc013ecf05c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d0ef07-7af4-4b86-8146-284856cb2f4d", "sighting_of_ref": "indicator--64bf1888-2c81-4a12-bbb4-7cc013ecf05c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597f1bed-2675-4b8d-b4f7-78d38cf103e4", "sighting_of_ref": "indicator--bed128fd-5905-4556-9709-152dea9d2f62", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a6677f-47d7-41ac-ad39-a228906321bc", "sighting_of_ref": "indicator--bed128fd-5905-4556-9709-152dea9d2f62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3b7708-6958-4274-af3e-df50a0c5b401", "sighting_of_ref": "indicator--a43f6c0f-9d21-438f-822e-78ad593c555b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60ffac1-a405-4e6b-a8d2-9d5b9445f278", "sighting_of_ref": "indicator--a43f6c0f-9d21-438f-822e-78ad593c555b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6023abd-0069-4975-b18e-f4209f67bfcf", "sighting_of_ref": "indicator--edb2d944-119b-4ca4-80f8-bcd4577c5778", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4741806-132b-4aad-8777-e3676d24f537", "sighting_of_ref": "indicator--edb2d944-119b-4ca4-80f8-bcd4577c5778", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e287cfa8-aa47-4b0f-988f-48c949cdee1d", "sighting_of_ref": "indicator--7a23d752-204a-4b20-af5c-ec6ba3b0fd9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b749c8-7073-4c9b-b0e2-0700bd1cab68", "sighting_of_ref": "indicator--7a23d752-204a-4b20-af5c-ec6ba3b0fd9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b509c5-6a6b-420f-9fbb-b13fe1b231dd", "sighting_of_ref": "indicator--7a23d752-204a-4b20-af5c-ec6ba3b0fd9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa028f15-9f41-4681-b9e7-cceb176e307c", "sighting_of_ref": "indicator--74d77ba7-b7ca-4661-91de-08bda3001b98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893a0cfb-b20f-472d-9b05-c456c5abefcb", "sighting_of_ref": "indicator--74d77ba7-b7ca-4661-91de-08bda3001b98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996a7998-fd42-437a-8c3a-8854bb14b005", "sighting_of_ref": "indicator--0b2b6517-3071-46c1-ac24-becc48a2423c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387a8f35-c569-47d9-8a84-d061339f9d78", "sighting_of_ref": "indicator--0b2b6517-3071-46c1-ac24-becc48a2423c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171e4763-7305-4efd-aa39-79f101f07f0a", "sighting_of_ref": "indicator--c2c93d08-4a33-4614-802a-613e14bb0e53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7454eed-0651-49ce-9608-fb2c76d57602", "sighting_of_ref": "indicator--c2c93d08-4a33-4614-802a-613e14bb0e53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555f4ddb-9700-4ed8-abf0-f450828a8ce8", "sighting_of_ref": "indicator--7adb0221-6cdd-4cd5-a6bf-8f1f9b02f83f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ccd9d3-052b-4478-ab25-91ed69260b60", "sighting_of_ref": "indicator--7adb0221-6cdd-4cd5-a6bf-8f1f9b02f83f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babc17ba-290c-49be-94af-39bb11feeab8", "sighting_of_ref": "indicator--db537d40-276f-4066-95a1-5cfe70a3f91c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7542f91-6e45-475d-8976-b058d0010824", "sighting_of_ref": "indicator--db537d40-276f-4066-95a1-5cfe70a3f91c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535239eb-a78f-44b0-a117-d540b5fbc601", "sighting_of_ref": "indicator--bc997bec-f032-4a51-9109-fce4300a9c26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977dde05-0675-4181-9c94-b7889f06392b", "sighting_of_ref": "indicator--bc997bec-f032-4a51-9109-fce4300a9c26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d4118a-bee9-4551-8e51-548590332c7e", "sighting_of_ref": "indicator--bc997bec-f032-4a51-9109-fce4300a9c26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd75c4d8-b080-4519-aa26-b0df30ad18e0", "sighting_of_ref": "indicator--2aa7959c-1d2d-45e6-99ae-d86cfb079a3e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d753ff-c91f-4325-acea-03531593a332", "sighting_of_ref": "indicator--869a5ea5-44e6-4039-8e14-b59b5777cf6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f624f6-3414-4d6a-891b-bd584edcf24e", "sighting_of_ref": "indicator--869a5ea5-44e6-4039-8e14-b59b5777cf6a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19ff626-f237-478e-a341-805a5ccc0bbd", "sighting_of_ref": "indicator--869a5ea5-44e6-4039-8e14-b59b5777cf6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcfd660-c1b7-4a63-bdab-67971088a9ed", "sighting_of_ref": "indicator--72dbd9b2-8696-4451-943d-cf0b1b34c9bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703a65f0-db2f-45c3-8606-ce2d74a6524e", "sighting_of_ref": "indicator--72dbd9b2-8696-4451-943d-cf0b1b34c9bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d0392d-5aa3-47cf-b421-a7d109380d22", "sighting_of_ref": "indicator--afa37eff-8afb-4cf9-ab02-b0bc0a244142", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6971a08a-c834-4c22-9957-d6693d01cc17", "sighting_of_ref": "indicator--afa37eff-8afb-4cf9-ab02-b0bc0a244142", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8546815d-fe3c-49ac-9049-dd44b827a59e", "sighting_of_ref": "indicator--717ac9b9-deec-4829-b218-31ffb60b178a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce5c843-d707-476d-bc4d-3b3d7ebc8c94", "sighting_of_ref": "indicator--717ac9b9-deec-4829-b218-31ffb60b178a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37b4c3d-5e07-49b3-b22f-521d014191ff", "sighting_of_ref": "indicator--b7431b59-4b3e-42be-8e7d-099e9cf2d4fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4c5b94-c754-4f04-8226-6604bfd63fb0", "sighting_of_ref": "indicator--1b304d62-bf9f-4b5c-8137-5b9ddff92f08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c293742-b78c-478b-9e9a-29d27a4ebd84", "sighting_of_ref": "indicator--1b304d62-bf9f-4b5c-8137-5b9ddff92f08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22348c48-df9a-4120-9b56-a575bedf3a1b", "sighting_of_ref": "indicator--0ffd558d-eed6-4320-a7a4-d2f13795064b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6120d0-6e2d-4375-b7e4-27925db17291", "sighting_of_ref": "indicator--0ffd558d-eed6-4320-a7a4-d2f13795064b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ef04c7-40ee-4bd0-8272-03ca0537c2a9", "sighting_of_ref": "indicator--3336b55e-eb3a-4710-9745-1e78912ae4c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a656592a-7467-489e-bb57-941713127212", "sighting_of_ref": "indicator--3336b55e-eb3a-4710-9745-1e78912ae4c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc59112e-161d-4774-bba2-bbf2a1e4e2e2", "sighting_of_ref": "indicator--a67bc83e-799b-42ec-a30f-9877bc7c56af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7587ac-de1c-421d-ac97-aad38cd319f7", "sighting_of_ref": "indicator--090dd3e8-254c-4274-9676-29a5448fb6f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a092e-9811-4a8c-b752-27aaf4cd8ea4", "sighting_of_ref": "indicator--090dd3e8-254c-4274-9676-29a5448fb6f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7694863c-84b9-4d4b-a40d-218cb5f23f47", "sighting_of_ref": "indicator--0903e470-e527-4f5d-84e1-f574e9cfed2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b210fa96-2744-42dd-bffa-b8ae9a33d502", "sighting_of_ref": "indicator--0903e470-e527-4f5d-84e1-f574e9cfed2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b39c36-0fd8-4f7b-858a-a182ed080579", "sighting_of_ref": "indicator--56bc74c7-4d95-4202-8538-ae4a41344b8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eb7e36-8a47-46bd-8cf4-57bf022fa0dd", "sighting_of_ref": "indicator--56bc74c7-4d95-4202-8538-ae4a41344b8c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b77378b-3b73-4321-b885-e3638ad2b0c5", "sighting_of_ref": "indicator--56bc74c7-4d95-4202-8538-ae4a41344b8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a38407-81e0-4e84-9169-e266937a2ff8", "sighting_of_ref": "indicator--e8ae048a-4127-4a17-b979-734142533136", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b078aace-2b3c-431d-90f1-34bf10ce5298", "sighting_of_ref": "indicator--49f53034-399e-4745-bccd-d7c245ab5d9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96088885-aa87-4645-b55d-c4b865621842", "sighting_of_ref": "indicator--39db3d2c-6d6a-46f4-9cc8-fdae967b1435", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cca62bc-0641-47b5-bc47-20d821341e86", "sighting_of_ref": "indicator--39db3d2c-6d6a-46f4-9cc8-fdae967b1435", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0e45aa-095b-4038-af73-3190bfd7e80d", "sighting_of_ref": "indicator--0af0b4b9-31d6-4908-8f90-05e522dcd032", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ac83dc-5229-480b-abae-bfddb16a5ac9", "sighting_of_ref": "indicator--bb91efa1-62bb-4d8c-8e56-c587be6c1103", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4e0d96-ecdc-4079-af8d-d2aed98b0d9d", "sighting_of_ref": "indicator--bb91efa1-62bb-4d8c-8e56-c587be6c1103", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d05049-01db-43a2-a72b-d8df20afdcf2", "sighting_of_ref": "indicator--98a34e62-a9e9-45e0-b282-3c953fb4f0df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b26a2f-25c1-4810-b216-f9c3feb27add", "sighting_of_ref": "indicator--98a34e62-a9e9-45e0-b282-3c953fb4f0df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22f91c0-b219-4e66-a39c-f7cc27fa61a0", "sighting_of_ref": "indicator--98a34e62-a9e9-45e0-b282-3c953fb4f0df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d3418d-2936-40c1-89a9-1161e2d5fb78", "sighting_of_ref": "indicator--bd8f198a-4b3a-4981-9968-650443f9217e", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bcf708-48f7-43e7-84f1-f17d272e06da", "sighting_of_ref": "indicator--23aad197-3951-4086-a7e4-f6191f65c164", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3376d652-ef3c-4555-b5dc-65f858da6804", "sighting_of_ref": "indicator--23aad197-3951-4086-a7e4-f6191f65c164", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7745fd61-a674-4188-a7cf-b37738159ff5", "sighting_of_ref": "indicator--04348733-458b-43b9-a79c-55add9c57130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec5a639-9919-416b-88da-dd2d00300da2", "sighting_of_ref": "indicator--62e4bf66-9665-40c0-b62b-bb2f5d33a384", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b712820-5b16-4167-91fb-335b9ca4f547", "sighting_of_ref": "indicator--508c6b5d-a78c-4d9d-abde-81d46214055d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0039cc97-7d56-4761-a27b-d394e3c1a1fa", "sighting_of_ref": "indicator--508c6b5d-a78c-4d9d-abde-81d46214055d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53220a44-43a6-41d1-822f-65744a50dd80", "sighting_of_ref": "indicator--508c6b5d-a78c-4d9d-abde-81d46214055d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d316d6df-e5db-47a5-b419-95b465502349", "sighting_of_ref": "indicator--97d7e705-aa4a-4822-9b2a-d8943381eb1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0307ba70-abf0-4eb9-ad00-74d3f4ca899f", "sighting_of_ref": "indicator--97d7e705-aa4a-4822-9b2a-d8943381eb1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3031b0-c6b2-490e-aceb-fb254720f3fa", "sighting_of_ref": "indicator--97d7e705-aa4a-4822-9b2a-d8943381eb1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a40c722-f15e-4d90-a383-389bf0bb52f0", "sighting_of_ref": "indicator--d1c202be-a147-47db-97f3-79a55b36c6ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0a5f19-0c74-49a2-b43c-67ff8cc09ead", "sighting_of_ref": "indicator--d687fe86-863a-4f47-a866-eb376b150604", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f838590d-c783-4769-a2ca-9cbdc2f705a1", "sighting_of_ref": "indicator--360aba06-1558-402e-b25f-979799fe8569", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242c7be8-71fb-4fd5-ae60-b7a964428ce6", "sighting_of_ref": "indicator--1b0a329e-2330-4278-b71d-ddf770b958e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8c2b4-c857-4a92-aa67-777755d5d5ce", "sighting_of_ref": "indicator--1b0a329e-2330-4278-b71d-ddf770b958e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e9889f-714a-4bba-9c96-7216feb4c111", "sighting_of_ref": "indicator--fca692f3-ae72-4300-a8a3-ce0e80eed83d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7459139-a837-4e5d-986b-bcc31dd1b096", "sighting_of_ref": "indicator--1bca84d0-b169-4471-8a78-ceaf3dda3e6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a90791-3cdb-43d0-90d6-c8971072aaaf", "sighting_of_ref": "indicator--8df559ed-0aab-461f-942e-2f4483df9dab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5a42fc-4806-4363-8f8e-fed747b846ec", "sighting_of_ref": "indicator--7afe0640-6b7d-4e9e-aeff-5a22b8147b12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1292b719-afdb-463f-b20d-d98f584bbc03", "sighting_of_ref": "indicator--7afe0640-6b7d-4e9e-aeff-5a22b8147b12", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ba5b78-5d61-4bef-9069-330f94d646f3", "sighting_of_ref": "indicator--8ee5770f-c428-4e37-916e-666934343ecb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cff72c-d949-426f-9d89-abb4ac6fb6a2", "sighting_of_ref": "indicator--8ee5770f-c428-4e37-916e-666934343ecb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a6f2bc-4a60-478a-8bbc-41fb8cb9fa36", "sighting_of_ref": "indicator--8ee5770f-c428-4e37-916e-666934343ecb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d91f74-9717-488a-96c2-fbada88d6ceb", "sighting_of_ref": "indicator--b03e2488-f984-4b86-85b3-929920c781bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0c8f8d-0515-4402-bb9c-a3eba9fae592", "sighting_of_ref": "indicator--51147a35-1a71-44f1-921b-fbf5f2715b60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff09fc6-4e05-43ad-88ae-c7b35e2ab9bd", "sighting_of_ref": "indicator--964d0db6-0e3e-42dc-b0ce-ab4ad44d595c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985e876c-b251-409d-a735-4ddf5dbcbfe1", "sighting_of_ref": "indicator--eb4025e7-92df-489c-824b-d4663c36f909", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec25e392-ac07-46cc-a79f-1191fdfe58da", "sighting_of_ref": "indicator--46235913-11e9-428c-8a20-ce916e215151", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579998ca-5888-4027-bc82-68d4dd5972be", "sighting_of_ref": "indicator--7cf5d06c-18e9-4188-9bf3-83b9c428c3b4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e0f15-895a-45e0-b441-9787008dd070", "sighting_of_ref": "indicator--218653e4-96c4-4e37-9dfc-38ced93802d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948a8885-ab18-461d-8263-888d4f0c52ce", "sighting_of_ref": "indicator--c6f00723-73e0-40db-8e54-818c877abac1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61207eb6-cdca-4112-8054-4ad6004583f4", "sighting_of_ref": "indicator--0dc0b1b5-88e8-455e-8932-3c09458be257", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c979377e-a6c0-43e9-9d83-35453f7e6f55", "sighting_of_ref": "indicator--49de70c1-b88d-4245-813f-350073445a84", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc542f5a-84c9-4a7e-b91c-0b5c338fd3e8", "sighting_of_ref": "indicator--cd2ca9cc-7c33-4b8a-9d3c-2df7bc006613", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e553c6b3-4b51-40c3-9dc9-aba16d87d97e", "sighting_of_ref": "indicator--3f6a1ee5-f981-4895-b886-db95c1a5e9dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164f6662-b3ce-46c3-8587-45e4c859f659", "sighting_of_ref": "indicator--765fd6eb-82c8-47a4-b70e-ccd400f29c90", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4bb5a4-c897-4d7a-b011-f491d7af1872", "sighting_of_ref": "indicator--d6bfdae1-3a85-4257-8b9f-9ba79b8a7e9d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0de784-79e3-4159-9b78-40122d6a80ab", "sighting_of_ref": "indicator--4ab2650d-a9d2-4927-b24e-d2e279affc0d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a74761-4582-4960-9324-57e9762909ea", "sighting_of_ref": "indicator--01793e31-631d-4e3e-a02d-7199ed359515", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c4c03e-320f-425f-b104-efd38cc85a14", "sighting_of_ref": "indicator--23b6636d-93f7-4810-965a-0408dffc3cdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bc6ef1-c7f2-4d73-b73d-054872872fdb", "sighting_of_ref": "indicator--fa709069-95c1-4a85-83fd-7583d4d7b3cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b65cd6-f1ec-40ac-ac9a-5707c0730e21", "sighting_of_ref": "indicator--0b581d64-ba79-496b-874d-eefb044cebdc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eab96c-b08c-4af3-a999-aeb2707a26f0", "sighting_of_ref": "indicator--17d86018-c525-4571-979a-24f21282ba2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649887ca-5fcd-4d17-b700-594026e97eb4", "sighting_of_ref": "indicator--17d86018-c525-4571-979a-24f21282ba2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81cd8c-88c9-4b4e-a3de-de5803d26684", "sighting_of_ref": "indicator--06deb7a5-1231-4516-8489-dd0517d78be8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8e5eda-628d-459d-b4d6-0b3f0e05ffd8", "sighting_of_ref": "indicator--f1bcd7ac-0c91-434c-88d6-d547bb4ead62", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa47d18d-583c-40c7-89e5-015a9779ea48", "sighting_of_ref": "indicator--19d934f9-e47c-4546-858b-89e8ec463fe4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b501cc40-adc6-4130-a507-d06ff72f361d", "sighting_of_ref": "indicator--3996d37e-7670-4929-9cf4-91f41e873cbe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed777d0f-093c-4a24-978a-4ab02635d9ae", "sighting_of_ref": "indicator--4adb141c-ec90-4fee-8894-2929c9f0f8cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e4aa4c-6635-40f1-929d-58f96d24662f", "sighting_of_ref": "indicator--52aad611-cf05-4c3f-ba4e-0c0024bdfe92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df30ef22-36eb-479e-8bc7-4caa162c24f8", "sighting_of_ref": "indicator--f3bc41a3-fc0c-4c1a-abd5-5b7928f4da11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e926067f-e1f1-473b-b6d1-7069a696c713", "sighting_of_ref": "indicator--e1791468-61c6-4941-88c1-dbd7d6395acc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb42a0c-d52f-4e3e-bf7b-57942c11c3ff", "sighting_of_ref": "indicator--104de924-29ae-44b7-8129-716491d89286", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a45c13-560b-41b5-9908-cbc00d75f701", "sighting_of_ref": "indicator--1e725bd7-5fba-4c0f-b0ef-bba135af16fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e97375f-95b2-4785-b2fa-c20e7dc4d670", "sighting_of_ref": "indicator--d8313044-5b9d-4664-b7d1-c9261b8cc9e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3c4d92-62e4-469f-800a-d2b91f248499", "sighting_of_ref": "indicator--e5733688-18b2-40be-9516-5ad57c194851", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1ca4d0-20bf-4e76-8cc6-26701d4cb81c", "sighting_of_ref": "indicator--5e2cb044-6d5b-4510-8734-35e97b5da733", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1699361c-2e5c-4f04-91dc-e723b0e9df51", "sighting_of_ref": "indicator--4be49696-3891-46d3-9de4-084d395ce98c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735710e8-cb4b-4fae-9da8-394cfdafbd6d", "sighting_of_ref": "indicator--834d0195-5702-42e7-9046-3e3c0ffa20a7", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060282e8-2173-4673-90f1-01a35f3e1c23", "sighting_of_ref": "indicator--0bb31948-4517-4580-9f84-0ab92427ffe9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0560a18a-4a44-411c-acd1-b12ef1aef70d", "sighting_of_ref": "indicator--44e6d1f5-d7e1-4e0a-b60d-5c562850fc4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a20486-9bd2-4d2b-9153-59f224463f46", "sighting_of_ref": "indicator--f4ace311-daa1-4eb6-8f4e-64f4e391ab04", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52cb17c-393f-4be4-bd35-aa66e73fd4b1", "sighting_of_ref": "indicator--5cf295de-bec2-46ac-81d4-6d0a21c4c7f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f3588c-6c66-4e8d-b86b-d35ca4d83fca", "sighting_of_ref": "indicator--df1a5346-9dbe-453e-b289-61ed5105efae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1f92f7-cd47-4c46-a2ed-d8e707aa0744", "sighting_of_ref": "indicator--24e6ae25-5ef2-40ea-bb86-15189fcf8941", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff09e1f6-6e70-40c5-a5a6-9481d164cecf", "sighting_of_ref": "indicator--08ffcd51-21a5-435c-9180-3e54fa1c6fd7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5026e6-d19a-4c38-9eb8-8e2f9e2e944e", "sighting_of_ref": "indicator--f9030c48-615c-4b79-ab35-8c9de095937f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e34a44-255e-49bb-b1da-2b5f2102d74f", "sighting_of_ref": "indicator--29b0bd8c-729b-4206-a430-c2ba7f601061", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c92933a-ea75-46fe-9e4b-a19a42fea07d", "sighting_of_ref": "indicator--8fae5b3b-56a7-4c76-9ad9-41a995e6b646", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d68a66-b941-4f53-8e55-104c57841d22", "sighting_of_ref": "indicator--6e8fd3aa-5be6-4d43-a899-80d6da3d3a74", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c6b88-ba7e-4359-8f60-3a001d856a37", "sighting_of_ref": "indicator--d66fabd5-4372-4fe8-b987-75db1a430e66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacb4c39-2c12-4b27-ae6a-5148157c363e", "sighting_of_ref": "indicator--cb07c896-e78f-4ec4-85c8-9bb7d941320d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a62170e-5071-4c3f-9d15-ca67805fb359", "sighting_of_ref": "indicator--647fdf01-d369-470c-b03a-d3169dd6cc78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b54a5a9-f579-4fce-a29e-a726de7bd8b9", "sighting_of_ref": "indicator--647fdf01-d369-470c-b03a-d3169dd6cc78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7ab2f8-bcb7-4ae1-a2ef-edff2f8c1864", "sighting_of_ref": "indicator--6f30aa18-4584-4042-96c5-306a7625fdbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e2bdbb-ad8c-4d78-8ade-79bb8651cd7d", "sighting_of_ref": "indicator--683de0eb-cd57-443f-a6db-ab74aef51ecb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b43bfc-d08e-46d3-a38f-77ee0ec029e6", "sighting_of_ref": "indicator--822d8ec0-b72b-4fa6-976c-d1af5c406d1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82b621b-579b-4e4a-b693-b4dcf4dcbe99", "sighting_of_ref": "indicator--2d5c802b-b7cf-471c-ad51-95e2c7d8b8f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775c984a-f851-4cfe-a063-7d29b5e87ba4", "sighting_of_ref": "indicator--e783299b-851f-489b-859e-e921228d8e86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deb2aca-9a35-4425-a7e3-099b203b37e2", "sighting_of_ref": "indicator--c0484023-3ae6-493e-81ef-545cd14f22c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcfac65-1118-4140-9a2e-19d99ed937be", "sighting_of_ref": "indicator--c0484023-3ae6-493e-81ef-545cd14f22c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21826636-7292-436e-8915-90bd77610b48", "sighting_of_ref": "indicator--21b637b1-cb20-43fc-8a99-9682e8d0f408", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec59451-94ba-4fd6-bbf3-99166a22d686", "sighting_of_ref": "indicator--99fe7c53-d2f8-483f-986d-6706d815760d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d937be-8739-4b66-aada-23a34e4e8b76", "sighting_of_ref": "indicator--067042a8-57e0-44f8-9511-770151396398", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5770174-483d-4e94-b436-f6fb4f07f2e9", "sighting_of_ref": "indicator--af63965c-dca3-494e-a1ca-6a72a2fc9b6d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d50ea20-dbe0-4524-b663-6b2b254b6f40", "sighting_of_ref": "indicator--0c295a21-06a8-4f3e-b5b8-1fb29bf653bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32578f3-0716-4273-bff1-98c6e830eec3", "sighting_of_ref": "indicator--41495f7c-1445-4dec-b925-9f11e11b5f2f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bfbe85-d52d-4fb9-ac84-f78122ff7fb8", "sighting_of_ref": "indicator--2e9002f7-51b3-4ac2-8e14-964477d969ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af1a9ae-a240-4bf7-baa2-97e7221f2d9d", "sighting_of_ref": "indicator--509d9127-ef04-4344-99fd-ee2f19a255cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e33b36e-f3f2-4680-b561-b8dfd2b1002f", "sighting_of_ref": "indicator--f1063056-0679-46dc-87ad-fbd585806a80", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04be613b-42e7-4e6b-b7ea-0b08a92d3f11", "sighting_of_ref": "indicator--985cb4d8-00de-4bef-94fd-1ddefaae8f18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbe5c48-6780-49b7-becf-3a5c14a69fce", "sighting_of_ref": "indicator--9462bc45-7b75-4aee-ac8f-8e22b4cb1f53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519ecf72-cfc2-410a-94cc-3bcc71fea981", "sighting_of_ref": "indicator--f9af6b35-aed9-4812-b8c6-2d398975a53e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef3ecf0-271f-4280-9b31-1b2367bd6d2b", "sighting_of_ref": "indicator--f9af6b35-aed9-4812-b8c6-2d398975a53e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65243196-d91d-49d1-96ff-e0e4ce3202a9", "sighting_of_ref": "indicator--21025558-762e-49d1-b48a-f14d4e8054e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb0a454-0172-40ca-886d-1e97c14d9992", "sighting_of_ref": "indicator--bd375b6d-fe88-4220-aa1d-7fbc5b451682", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5a178d-4d61-40b7-b68f-a9b46959533b", "sighting_of_ref": "indicator--c9a1dafd-b3f9-451b-809e-96a78638ef82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e870c-1abf-4565-8d63-42cd71104967", "sighting_of_ref": "indicator--8366c13f-467f-432f-a61e-b02518767ceb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee2eb7b-ff47-4d53-a036-996fba30075d", "sighting_of_ref": "indicator--586141aa-febd-40da-b116-74fe300ef391", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3638342a-9866-4b00-81e9-428bedef12a8", "sighting_of_ref": "indicator--f883d79d-bb63-4a08-be5a-50e24f8db8a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7f779f-8c35-4462-a041-7f40153e2c29", "sighting_of_ref": "indicator--4983aa9b-b74f-4050-9c61-8eb84b11a99e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d707c12c-3d8b-4b11-8875-dcda72c27cd4", "sighting_of_ref": "indicator--b2a99797-65a1-4dfa-8d3f-85dbddedce87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdc6ce5-370c-40bb-8e95-ad1e55678847", "sighting_of_ref": "indicator--c3dcdee5-5fcc-4d0e-9779-e683360758fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6927adbc-bd4d-4f09-9349-a6e7d09cfd1b", "sighting_of_ref": "indicator--ec5cbf4a-677b-464b-9b04-e59760dd0514", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532b56ae-35db-413e-819b-f9da3b34216c", "sighting_of_ref": "indicator--9e617f6d-3cc6-4960-ad36-404f3cd11e60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a422293-7cb3-4322-b24b-c852deb720ac", "sighting_of_ref": "indicator--78d03678-55d8-444c-89d9-971ab3bd620d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44541eb3-3c9e-46db-99c5-6efa55886cea", "sighting_of_ref": "indicator--4584841e-8d44-4304-833a-fd0c0e458876", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4252f6d5-6e5f-4717-b9ce-57d3c44c9cc8", "sighting_of_ref": "indicator--7e908a81-84fb-4de2-839c-66cb01317e87", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b26849-0d84-4366-b952-a9f89b713cc2", "sighting_of_ref": "indicator--a74db112-0e25-4134-95e7-00ba87c53a8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7914dc5-ce35-4273-afa5-60e8b9a49577", "sighting_of_ref": "indicator--fe14c80d-97c2-491b-827e-a64e44ad8ecd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaec562-1ea9-47ba-aca3-fc40012f790b", "sighting_of_ref": "indicator--755922a7-7cc3-4088-91c8-f7d05238d00f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f18aa86-3735-435c-b73e-be05704247e2", "sighting_of_ref": "indicator--a35f1491-8ebd-4353-9f56-d6fde8038224", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f805e-2986-499e-b9df-3a49a265244e", "sighting_of_ref": "indicator--a1e8aea6-a4b6-48cf-bef1-d90615a28585", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aa06d4-e793-4948-b27d-3a9af8e01a38", "sighting_of_ref": "indicator--27aa89da-6340-4488-bf17-ca66174974fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a292920f-d178-4496-a5b8-a755c50ed280", "sighting_of_ref": "indicator--e8536778-57d4-4b33-9930-69deef699835", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fe9d62-9c1a-4ca1-b97f-88e5d18c1e94", "sighting_of_ref": "indicator--ce2b7d4c-c54f-4220-8697-ddd4c6501dab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9ae3ef-9a1a-42f0-9a05-7d34bece5215", "sighting_of_ref": "indicator--31f4d283-6ca9-40ae-a75c-1fd421945b69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3538948e-f710-47c6-9d59-821af0500f52", "sighting_of_ref": "indicator--a3ff8a0a-bd63-426a-9300-a2e24c3c2848", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cc9ff3-a94b-4d53-8785-0301c0e24013", "sighting_of_ref": "indicator--a3ff8a0a-bd63-426a-9300-a2e24c3c2848", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e9db2b-1618-4001-a569-791fb23452fd", "sighting_of_ref": "indicator--c36c6210-12c9-40ba-9387-69820014a259", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2975e8e3-6b1f-4636-98be-9f44d01631d3", "sighting_of_ref": "indicator--25c38ba2-04c2-4f63-a53b-e55f66bd0fb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ce4477-c901-4ee3-9219-797dda057646", "sighting_of_ref": "indicator--521450d4-61e0-404e-9301-8a5114aa3e7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b763e1aa-81d4-48d2-9155-4af8410c5967", "sighting_of_ref": "indicator--0ee9538f-79a3-4496-8bf7-06c0374df5f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb52817a-f5bb-48db-8c43-2754d4ce3707", "sighting_of_ref": "indicator--96c8b3f4-d763-411f-98f1-02ff892ed086", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4624aef4-b02d-4cb0-b044-b3fd6fc9211c", "sighting_of_ref": "indicator--98b07fed-8dc5-4990-8db3-1218d9610425", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7c52d2-6256-4d21-b041-7d6057e8fa5e", "sighting_of_ref": "indicator--b715dda9-75f1-490b-887f-9fa174b05094", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6bce22-3468-4b05-bd9a-252083297ee7", "sighting_of_ref": "indicator--881d0346-9794-4fed-8ded-1601e6312bc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462f5d04-6783-4ceb-b511-135b2c4164dc", "sighting_of_ref": "indicator--fd375ed5-39c4-40e9-a5eb-29e7dd2dcf6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b817cc-6fbe-4fb3-9deb-a0987f023003", "sighting_of_ref": "indicator--ae199237-f937-4077-a2c6-9405b06e24c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd458bbf-774f-451b-8763-8d2f73429341", "sighting_of_ref": "indicator--6384f9a6-fce1-4f0c-a9b8-fd43f6fb6601", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94877cf-c459-4bc5-b7fd-f5df71f73e5e", "sighting_of_ref": "indicator--a00ceee2-68e6-4713-8c35-ab7593591182", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74019017-5374-4a82-a223-7002b8144801", "sighting_of_ref": "indicator--a00ceee2-68e6-4713-8c35-ab7593591182", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1323493e-8766-4d71-bc76-c12aee7eb1c4", "sighting_of_ref": "indicator--15370566-7505-417b-8e6e-d9726c7a7e59", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3b26bc-9b99-485a-8e22-93acb814ee2f", "sighting_of_ref": "indicator--9b5eded7-9674-4cbe-a754-39212dcbb943", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffed652-b63b-4de7-8de0-7f5099283300", "sighting_of_ref": "indicator--f9f4e751-4306-4ab8-bafc-af18b6a9ad24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a929ecaa-dcf7-4261-99f7-ce90705a21ca", "sighting_of_ref": "indicator--2542f106-186c-471b-808a-85187901677e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d42668-5440-4a88-a17f-5edb422777c6", "sighting_of_ref": "indicator--447359b1-e8da-4cfe-82c0-258b472df71f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c4fe64-30c2-4e1e-acb8-6bec25e1ed03", "sighting_of_ref": "indicator--05791b4e-c47c-41da-9461-6e8166b30f2e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f31b7f-1b44-49e4-ac61-6f20356d4ef8", "sighting_of_ref": "indicator--1b40c991-e848-4636-8fe4-ab363a276caf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fe6c81-a853-46d9-a81c-d5b1dda75761", "sighting_of_ref": "indicator--5dbe0f50-a402-4a87-aa3d-de57b3573515", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db610fdb-0b29-4ac2-953c-3ff6d8ac7174", "sighting_of_ref": "indicator--ac1a554a-423d-493b-aad2-6881ea2ca44c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6887995f-c3da-41bf-a79d-9261ea6c7b6c", "sighting_of_ref": "indicator--5f0fb5b5-2eda-44ac-8423-96d493513933", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7fc020-adf4-4fc7-975e-0a301438e213", "sighting_of_ref": "indicator--28a12184-eac5-428b-9494-3e40e43e2fc8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f266e2a6-59e6-4f1e-a3d3-05d970296855", "sighting_of_ref": "indicator--817f4af3-9f7b-4e31-aee5-865e873bd923", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea5d569-68d7-4f21-88f9-607956ac9a24", "sighting_of_ref": "indicator--76f9897e-d5bf-4c60-8e87-e11b85f966e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62575220-9ba3-4922-93bf-455e19c5e44c", "sighting_of_ref": "indicator--287ce6c7-bdae-4ee3-adfc-bc88e95e0c19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48946370-91c5-40b0-8fc8-d3e9b4bf2f39", "sighting_of_ref": "indicator--1a7f5674-fbe7-4f91-a2eb-c9660ab111e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025cbcc5-c2af-4f35-bfc8-8a9bd175696a", "sighting_of_ref": "indicator--cb185d3c-c51d-4272-b89f-708369b355e0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba08a9cc-4093-4242-9a3b-de8ddb8576d5", "sighting_of_ref": "indicator--bb8807c8-dedb-42f4-85dc-2fe19eb4728c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6e0582-7e44-46d4-a382-e85dca6c8a28", "sighting_of_ref": "indicator--9d8058e8-f275-49ff-a44a-a038c2b02d22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa7831c-a165-4a56-aa18-68556f897013", "sighting_of_ref": "indicator--b42dae2c-8c10-4d84-8803-9e534e14557d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8298f37d-0c88-4859-9b57-91a2ab2cd30a", "sighting_of_ref": "indicator--999d928f-f003-44a4-82d7-381560cb0cc2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc85f69-a2b7-4336-b3b3-7e53c909c16a", "sighting_of_ref": "indicator--0c689ee7-6593-424c-8cab-909993bf6711", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5345ab6-e6c0-4708-ac67-d6c3fdb63f41", "sighting_of_ref": "indicator--394e5cf6-61a5-4504-ac7e-c8afe986b238", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75860514-6aed-4573-a4f5-ae44186b3114", "sighting_of_ref": "indicator--a6535075-2229-4f09-8de8-5b54d0aecf57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7f95bf-980c-4a00-9912-99cf1b148b4c", "sighting_of_ref": "indicator--a4628a94-0071-4067-bfd7-0ab249d4907c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c2270-087a-4bb3-a03e-55306c2f77ec", "sighting_of_ref": "indicator--e0221ec2-bd13-426a-8fab-5f154acd5247", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9948f8f2-b732-4ab8-91a1-1d53f090348e", "sighting_of_ref": "indicator--c3680aca-aff7-425f-a8fc-63dd1a2799b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fe0ef5-1172-45b2-be3a-8ea3b1536e6b", "sighting_of_ref": "indicator--1f5b335f-9c94-4e9d-bb85-208a0976cf8b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95711f4a-568d-4795-bd3d-9392acd4d043", "sighting_of_ref": "indicator--4c86dbc3-af0f-489f-af41-76215849adec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2593db12-f1a6-4244-8b25-84cb8e1c3772", "sighting_of_ref": "indicator--3c811c6e-ab4d-4d25-abc9-a84848a150a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c8cd22-3006-4b82-a918-5b0db864fc9f", "sighting_of_ref": "indicator--ea1a2a75-4fff-4d6d-ac46-f02b0ac386c0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf794c58-7879-45ad-b58a-30a1258ab8a0", "sighting_of_ref": "indicator--27c656a9-6775-4435-8f67-ff43db88fea0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d6efa7-f6bb-4f3b-8fa1-5024a70783a6", "sighting_of_ref": "indicator--27c656a9-6775-4435-8f67-ff43db88fea0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699fe205-0fd0-4aa9-8aef-9b29e62c4618", "sighting_of_ref": "indicator--0fb3e7d1-8b39-477d-94f6-0ae18cb3de36", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e7ced7-e5ee-4606-acf5-52b02a70ea0f", "sighting_of_ref": "indicator--aee23ee7-ca71-45b4-a6f0-d6a114789dff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93349af5-338e-441e-8c1d-f876f32b5772", "sighting_of_ref": "indicator--88636e17-0d29-4d0d-8c1a-68b6fc10bebc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94438de-a568-4e6a-a05c-f7768d3050ca", "sighting_of_ref": "indicator--1f31fed0-9ea3-4093-ab5b-68871e40b6ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdf858f-d4bb-40b2-be31-1ae7a6b91ae9", "sighting_of_ref": "indicator--1f31fed0-9ea3-4093-ab5b-68871e40b6ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2703a2-215c-4dba-8ae5-c0f1a2303733", "sighting_of_ref": "indicator--35164ba8-e771-4298-9dfc-85026e248f1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e8abbc-b033-4748-b835-1a8e4afaac1f", "sighting_of_ref": "indicator--8a3a909e-8c8d-4ae0-93a8-835fc98ad06c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1da3e3-b1e1-48c6-a564-623ed356aa4c", "sighting_of_ref": "indicator--5083fa4a-7bf3-490c-93b8-dda79969954f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be30459-ec7e-4a62-a507-3d173c7acedb", "sighting_of_ref": "indicator--834d47b6-8f95-460c-9439-4cedf1cfdf73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64644082-c6dc-4d38-af32-986e4653250b", "sighting_of_ref": "indicator--6b447be1-062d-4212-a53a-b382e88aae12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec7cd5e-3521-4875-b49b-39ba32bb8efb", "sighting_of_ref": "indicator--3addcc25-beb7-4352-bbc9-5a51d851ed44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0102b3d-87df-46a6-bc5d-edaed263d0d6", "sighting_of_ref": "indicator--b80a8621-ac8d-44bc-be28-0f40e14584fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204889f4-67ab-4938-b92e-e6fb1fdc97d4", "sighting_of_ref": "indicator--335fcf39-2759-4a90-a9f0-97c34a41d902", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a06988-6bee-41a4-bd92-9da9651d31ac", "sighting_of_ref": "indicator--98a3f972-a563-4a09-a3dc-ca7184a9a39b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba55e4f-a62f-456d-8271-2272c147e90f", "sighting_of_ref": "indicator--d090d706-33bf-417f-add3-a193ac2bace2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ea0e1-61ea-4528-a2d4-d62b1973542e", "sighting_of_ref": "indicator--6b798ba3-90bf-43e4-b742-ff8ffa6d8bee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f9d8ff-7ae3-496f-9b76-ac74c20166c9", "sighting_of_ref": "indicator--17584c4a-6cfc-474c-9d3e-7d5f14320bf4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96443554-7cb6-4666-af44-bd74746a1518", "sighting_of_ref": "indicator--8ff81779-199c-41aa-adee-4cf6d6998503", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddb037f-b3a6-45ed-9867-adb7b4f822ce", "sighting_of_ref": "indicator--86c13a67-e53e-44b9-855d-09cd71e0afb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90315626-65ca-46b8-8221-8282cbe97039", "sighting_of_ref": "indicator--6ffa1491-1c80-4471-bb2e-eabb7f04d5ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76f3329-addb-4627-8bed-43777b5a315f", "sighting_of_ref": "indicator--c242c2a9-1863-4cdf-b394-227fa080cbfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da2b98-563b-4569-bef6-f2713c6f0529", "sighting_of_ref": "indicator--56eb569e-d618-471b-bb6a-2744745f6e33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ce88a8-e8dd-4768-9751-e1c4893400ca", "sighting_of_ref": "indicator--c68cd3fc-0962-466a-a414-281d96e46b99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df89eff-8a73-43ee-b3c0-077b7b9fefd3", "sighting_of_ref": "indicator--e68bf62d-c0df-436b-95fd-db4bbed9098b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb490b0-dc23-4526-a6aa-868ed2c884c1", "sighting_of_ref": "indicator--2f55d076-3fdb-4c3f-9f77-e4a6232f2d51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a51985d-bd8e-4c94-9d2a-f769f195ce3d", "sighting_of_ref": "indicator--7b7c9200-ad90-42cf-bcc5-d9173e42c86a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5bf3fa-e2b0-4add-80af-e2aa55a9d1a4", "sighting_of_ref": "indicator--33d4ad6e-6b88-48e5-823f-8f966a9b8d44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8f8a3e-6f97-4ddf-8295-ef7a9b06dd59", "sighting_of_ref": "indicator--ebd9a9e5-94f3-405a-9cc1-76a87c64494e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25913db6-264e-4599-8823-fc28c3a5fce1", "sighting_of_ref": "indicator--9f6bfc2c-f5d6-47a6-833e-94f7d2cb10ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf7752-85ea-45b0-8a21-95fe412d79d6", "sighting_of_ref": "indicator--2d8248e2-95bd-42cb-b557-e95ab412a7d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4156dc2-c7ae-4bd4-90bd-2bad18cb8193", "sighting_of_ref": "indicator--5253bbde-56cf-4409-8b18-97fe38c20139", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb6cdbc-4664-4d79-b2a0-cb21e47979ad", "sighting_of_ref": "indicator--0541ca1e-f808-453b-a354-699e13995f37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6860c9-73db-42f7-9249-5ac305228c77", "sighting_of_ref": "indicator--5d51f362-6757-4e28-adbc-10c6a0554f1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2755a7f8-0dcf-4449-bd50-62afc07e0251", "sighting_of_ref": "indicator--fe916d2a-dd28-496a-a5b8-deaf6bd62f45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eab564-24d5-4831-89a5-2a16f55c4a32", "sighting_of_ref": "indicator--9fbc90dd-2f60-400c-b148-4bbc54cf350a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd6018c-3463-4af5-8c44-7b91082c9cd9", "sighting_of_ref": "indicator--c5b9cfbe-b56b-46fa-bbf5-a3576bb720ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad8f185-35bb-49b3-afbf-c1d13d5e9eb8", "sighting_of_ref": "indicator--c65198ee-ae10-4cf2-9530-cbe6d0f426ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4443a3e-7575-4077-b5ab-2061b1044feb", "sighting_of_ref": "indicator--ee4084b9-24f0-43a5-a34c-145ec8ee7b0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0051e9-8518-41f1-9ff3-22531ffd6871", "sighting_of_ref": "indicator--2c682a56-7e6b-4a7a-ad73-38ef8e85dfd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c293141-2790-46ca-9b4e-86165832ed4a", "sighting_of_ref": "indicator--8875942a-f89b-4a09-9729-63fb6d60aefc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149fa8c9-91d3-422d-8e74-f9ce7d30b39a", "sighting_of_ref": "indicator--f1d62262-405b-4e3e-aa8b-95fef0b4a6ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c324141e-21c0-412c-a08e-67901838f659", "sighting_of_ref": "indicator--7610f2a2-ce66-48ac-b684-e7e7d559be29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c61e8f-af82-47a4-8beb-2dd75251ecf7", "sighting_of_ref": "indicator--5e32fde7-7695-4783-8f80-8f3ed960c177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f010528b-351e-434d-a945-eea6836791cc", "sighting_of_ref": "indicator--770e088b-c930-4be4-82f2-42dc3d21f277", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22882610-2a40-42ff-9ca3-df410237dcc7", "sighting_of_ref": "indicator--27053ada-382d-417b-920e-3aab669362ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f092c05a-353a-4bf9-9da5-3dad329b31da", "sighting_of_ref": "indicator--2e85ebad-d7c8-42f1-997c-2b7d01507017", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6900c2-ed60-4c5b-864a-5d82b1d44fe3", "sighting_of_ref": "indicator--be7664aa-f850-4d8a-85f1-c1f45ca07c9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887ba1f5-5092-4e1c-bff4-c295aaba03ae", "sighting_of_ref": "indicator--be7664aa-f850-4d8a-85f1-c1f45ca07c9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb5b624-e1dd-45d5-b651-f27a4e494551", "sighting_of_ref": "indicator--ec7bc671-cde9-4856-8f21-7137045d10f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b92757-eb92-4848-b668-fd809f7bf447", "sighting_of_ref": "indicator--5e225aeb-aa43-4119-bea4-abb6faf390df", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c0e513-ffc5-4647-b47d-e32aeb676f52", "sighting_of_ref": "indicator--183efc24-ef42-4e61-9ae3-534c9a87f46d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea58600a-3fe2-4944-b446-24750fa2f409", "sighting_of_ref": "indicator--001f8763-b0c2-4772-8c99-d411de35f5cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a908455-3544-4ac7-ba52-92b1872897d6", "sighting_of_ref": "indicator--1a5f7e76-5359-4e48-951a-5fdfb6d56be2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f036dd1-ec18-4b2b-a7f1-60cd4f72cd1c", "sighting_of_ref": "indicator--8eb6dda1-7b5f-46f1-bb26-52ce98a1156d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd74f3a0-779a-4e83-8e6f-47836cbd026e", "sighting_of_ref": "indicator--2badf3f2-b3dd-4fd7-9b73-ef07ef48d5a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc63d5bc-d674-43d2-a0ed-8530249080d2", "sighting_of_ref": "indicator--843fcbb7-9771-4266-9922-76d18e59408e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ca8445-11a3-4320-9e5e-9ca33a845bf1", "sighting_of_ref": "indicator--8e3f142d-0857-4f31-bc82-f7c1fc7e5e6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba393b8d-dab5-4e60-ab48-70fbb208038d", "sighting_of_ref": "indicator--9407ec1f-8e30-44a6-9389-074ddf627345", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c906ac9-6d78-403a-9750-b9aaefd442a6", "sighting_of_ref": "indicator--66771a48-7c29-46a9-9e7a-bda8d9ccc5f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8697c878-bd2a-427e-a629-5d8359f59f35", "sighting_of_ref": "indicator--262e2ea7-de84-4ba1-a44d-fe9f8dfb08bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864c5874-62f6-411d-9c54-80b94df306cf", "sighting_of_ref": "indicator--f0c0aeed-7190-4470-9978-c033d7ed07d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8133d6-cb26-4ea0-9f1c-61a8159758cd", "sighting_of_ref": "indicator--7108d6a8-7d70-4a15-9114-1120223f0209", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c63beb6-084c-48ae-a326-2b9b43f3a78a", "sighting_of_ref": "indicator--a603e0c9-2d89-454b-908f-9c59a94f3fb7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb4391d-191d-4cf5-803e-0c0e928fd61d", "sighting_of_ref": "indicator--442bcd3a-ed48-4c0b-ba4f-d52dce231c5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c5efa5-daf3-4eac-8694-6153f7cb4cff", "sighting_of_ref": "indicator--5aff2e12-7c97-44dd-9be4-bf6f8fd2f45e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f951e920-02f2-4378-a374-4c7c44673ae9", "sighting_of_ref": "indicator--e0c5c5b1-9ae1-4518-88ee-4f8a1fafec23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c2a439-5438-46a2-a1de-33041922de05", "sighting_of_ref": "indicator--fe99feec-5a18-4445-8726-de950cc937a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1c0389-c85b-40d6-8e6f-e3baef84b9c0", "sighting_of_ref": "indicator--6073a559-d121-4a94-8463-a31a2102ab4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c01118-85b2-40dd-9831-49eaebf0ffb5", "sighting_of_ref": "indicator--e62876db-0893-4728-9765-e8d1c6718dfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa24ec2-7830-4e28-8907-0bb88367e59c", "sighting_of_ref": "indicator--b4adbb70-c37c-4931-9a28-f54c889a9c73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a12368b-4575-4719-912e-993c518acc0c", "sighting_of_ref": "indicator--13495a11-e69a-4ae6-bb5c-4adf4229bb3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6d2ba6-9556-42cb-bf0c-1a681cb5ccee", "sighting_of_ref": "indicator--2e7c589d-b394-49c9-ab91-58069378b28e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8eabb-9937-4a11-a025-e0fb9a1883f0", "sighting_of_ref": "indicator--224d50fb-befc-4a9e-803a-275fcde5e5a8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a858ef4e-d084-4f86-969f-f0edeb2205c3", "sighting_of_ref": "indicator--2a7c0fce-da2e-49dd-a996-f9e305af1dae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e950d093-a26f-4d18-abda-9062ee978ce7", "sighting_of_ref": "indicator--df57ce03-c9b1-432a-a4b8-40d44cf9a7ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab08a4a-1070-4242-9f6c-b3cb7d455686", "sighting_of_ref": "indicator--f404b9a1-da67-4d3d-a4be-4ddebfa0440d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea60c3a1-59e4-43e9-9b6a-c96952be7aac", "sighting_of_ref": "indicator--12d5e8e2-0d14-4d1f-bb53-9e4bf3538490", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a3e3a8-8b57-4109-a503-69c8281ce7b6", "sighting_of_ref": "indicator--cdd761cf-8367-4fd7-82b0-9166aa27fa35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a354b3b3-bae5-42a5-9beb-70d4ccb14d64", "sighting_of_ref": "indicator--34bbb5a6-ddee-4c02-82bc-31fecafbe7ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eff18d-2177-474d-973e-345d34382a15", "sighting_of_ref": "indicator--3e9d52b6-2b08-4330-9717-eb416737c4de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ce1028-2433-4580-8b36-2c2f003c6174", "sighting_of_ref": "indicator--228b8f51-8b1c-4d4d-b1c8-2dd25c558c8b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35419c8a-4c29-49aa-80ff-3696efe8c870", "sighting_of_ref": "indicator--f508c813-9381-448e-aaff-51a823c356f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989e3ca0-538d-4db3-be8c-236429eebca5", "sighting_of_ref": "indicator--d2a1b472-9553-4f77-b093-38f0bf88a980", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b267d7-214f-4478-98f0-22cb1251d6cc", "sighting_of_ref": "indicator--bcd25acf-6ed1-43ed-88f3-cbf60f44cae0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686e3026-4001-48ae-8064-8417a0c62f32", "sighting_of_ref": "indicator--bcd25acf-6ed1-43ed-88f3-cbf60f44cae0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20beb4a6-8f42-45be-b008-a82e2df6bf19", "sighting_of_ref": "indicator--780062eb-28ae-4981-99f8-39100b9d90bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19a459c-eff6-48d5-9395-5598d50d6ca4", "sighting_of_ref": "indicator--d2c9b4ff-8e1d-4934-82f7-87b104a153b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf95e170-76e7-4fe8-abe3-dcc4b723500d", "sighting_of_ref": "indicator--86aa786b-dfae-4700-a820-52f67cb9a5ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a365040c-e8de-4b6f-a9a6-5abd7f52c8c9", "sighting_of_ref": "indicator--5ba17769-6f2a-413d-9d23-1b281c7cc2da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0133f85-63f3-429c-aefc-c09990577260", "sighting_of_ref": "indicator--e0b0e152-80be-4ef6-8ab5-be5f9682126d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b7cb5d-a459-45b5-9d51-08ee0a96abca", "sighting_of_ref": "indicator--abeb516c-cc9e-4b0c-a885-deeb3bc2333c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e69cda6-5ca0-4280-90a7-030741c86806", "sighting_of_ref": "indicator--d53d4677-7240-4542-aad3-c5d813d86205", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56754a34-9d3e-485a-96a9-7ac098ad83ea", "sighting_of_ref": "indicator--e67d2c56-f30f-4e57-b003-cc03cc0023c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca57bbb8-7e27-4940-9a7d-19f2446488cd", "sighting_of_ref": "indicator--0c3e6198-d306-4cec-8c7a-06d5e5294a9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8108744a-ec3b-4bfd-bce9-d889bed42c5c", "sighting_of_ref": "indicator--65cccf0b-9659-48fd-9d6d-cad048c0546f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda36b86-8e6b-4926-97db-28ba5a740e39", "sighting_of_ref": "indicator--0d3f74b3-f954-4790-ac94-370f14bb62a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead820e2-5fbc-4c37-8765-5ff1f0ff36f3", "sighting_of_ref": "indicator--0d3f74b3-f954-4790-ac94-370f14bb62a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eff9aad-6609-4b73-8fcc-184e0b41648e", "sighting_of_ref": "indicator--69d40387-316e-4f6e-aac5-cc228b1eb847", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57ca8cc-8b7e-4aa0-998b-96aa3bf93738", "sighting_of_ref": "indicator--d2e6079d-e8b7-4e99-97ee-99085d4eec46", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe6d28-3f6d-4120-801f-7954360e6907", "sighting_of_ref": "indicator--1cbdbc81-a842-4a95-bf17-56fd5274ac0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d6d485-b4f9-4c35-a9da-1731f9e82132", "sighting_of_ref": "indicator--9dce61ea-8871-431a-a27c-ff9c18eb30c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde55726-d57d-4803-942f-1cb039924fce", "sighting_of_ref": "indicator--2866a6d8-0137-4333-beab-54f52897425d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f643c219-7bc6-463b-bc07-02c254826f5b", "sighting_of_ref": "indicator--2866a6d8-0137-4333-beab-54f52897425d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cded626b-3a85-4452-96ed-9dafb3559423", "sighting_of_ref": "indicator--7aa87fcf-2d93-4424-aa34-2dbef4587191", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b22ee5f-b465-439a-9bf2-fc544094d465", "sighting_of_ref": "indicator--8aa4b62b-dd29-4a87-8522-f4966d7e7206", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84785f4-ec2c-441a-b65e-0821567d1f76", "sighting_of_ref": "indicator--5e1f384f-1702-4d58-86d2-6c65d9a8a8d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d97ed7-5044-4e70-877a-56d91f3d8e30", "sighting_of_ref": "indicator--5e1f384f-1702-4d58-86d2-6c65d9a8a8d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f9f78-b2cf-4c14-b7f3-a222992fe8fd", "sighting_of_ref": "indicator--5e1f384f-1702-4d58-86d2-6c65d9a8a8d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c6a819-b7a2-4530-b83c-b046ea78318d", "sighting_of_ref": "indicator--b9500e3a-7ba0-4bb3-bc0c-bf0d9f4a5d44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6805e983-7066-4c00-b437-bf148f5e9560", "sighting_of_ref": "indicator--7cf63900-45a1-46d7-bfd9-84b6acdfd21e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfdfa4f-9b92-496c-93cd-495ed8c92ae0", "sighting_of_ref": "indicator--7cf63900-45a1-46d7-bfd9-84b6acdfd21e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3e3575-8656-47c5-b433-3ac80e9d5b9b", "sighting_of_ref": "indicator--7cf63900-45a1-46d7-bfd9-84b6acdfd21e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba138f5d-e03c-4359-a25c-f73d8697006a", "sighting_of_ref": "indicator--e85f741d-fcd8-48cb-ba98-4b11291d9340", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e084102e-f18f-4284-9b64-3ef96a669db9", "sighting_of_ref": "indicator--4794b82b-2fb1-4be9-8697-aeea31a21784", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f8b55-6379-4528-83e8-2c9427a753ca", "sighting_of_ref": "indicator--560bb92c-791f-4d33-9ff2-59c6ed485f0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92331bf3-ab3c-4a12-b17f-acdeb983a41c", "sighting_of_ref": "indicator--560bb92c-791f-4d33-9ff2-59c6ed485f0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a0248-ac0e-4f6c-949c-a92e83fd11af", "sighting_of_ref": "indicator--4af556a6-499a-44bb-80b6-b8de2a3eddb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d34652-59c9-4857-869a-b866db09d247", "sighting_of_ref": "indicator--c0e75d24-99df-41d8-817e-44732abc9e97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ec2698-7d92-42c6-bbec-678b443d3505", "sighting_of_ref": "indicator--569303b0-fd95-4166-ab7b-976b2e93427a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3850b6f3-8cab-471b-a809-57dacb392fea", "sighting_of_ref": "indicator--87492550-3d91-4848-b304-3f7d675ca287", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadefdf-9daa-47a6-936a-4dd4d5a5aa39", "sighting_of_ref": "indicator--9f9ceb35-882b-41d1-8469-6961a0af9d25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044e51fa-4a8a-4a8c-9c12-e7ee6f62a4b0", "sighting_of_ref": "indicator--c6fe14d1-9492-416a-8995-3efd2d71474a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da55fe5f-7124-4700-bf35-8adf1011833c", "sighting_of_ref": "indicator--d7016244-3567-4db1-80a3-c4b6a3ddfe54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78b210a-dc4f-40a5-9ec8-b138399c38d1", "sighting_of_ref": "indicator--29bfb06c-df6c-4c64-8381-a5cf22fc9779", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828e17d9-0acc-4364-b8c4-ade3d7522e62", "sighting_of_ref": "indicator--267dcfdf-2b3b-4561-87fd-eedca266ebb8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a12e08-046e-43e5-9628-336980225e77", "sighting_of_ref": "indicator--27ea1c54-6cf1-45e5-97cb-e4be02f4870a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01657cbb-61ee-414a-a0ef-dde9deaed6d7", "sighting_of_ref": "indicator--d3dfa510-c160-4527-b349-b2336c269194", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252fc06b-3b47-4cb0-b3ac-c849b157df4c", "sighting_of_ref": "indicator--d1f02425-e00c-4c05-bdff-cf3b8d602a9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceb56eb-00a6-43f4-8f65-25d770a2884e", "sighting_of_ref": "indicator--fe7250cb-0fe7-4f8f-b916-2a4bbee76284", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43783eae-ed0f-46a7-8762-5a125b11842a", "sighting_of_ref": "indicator--28f3417a-282d-4839-aeb9-c38a8d0a7afd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a80659c-c3c3-49d8-9efb-6633df061fb8", "sighting_of_ref": "indicator--c2c78da2-de6a-4acc-80f4-0a6f8226085c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10c60c0-2851-439b-98e1-90269c97ffe1", "sighting_of_ref": "indicator--b815a263-2f96-4a11-b9d5-9f9d8960ad9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1050ed74-c569-4cb4-8490-e2086a240208", "sighting_of_ref": "indicator--9be5c549-0ac5-4b6d-8bd2-d0fb3be17f1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fe1b14-d4f8-4051-8b71-3e466f7d276c", "sighting_of_ref": "indicator--9be5c549-0ac5-4b6d-8bd2-d0fb3be17f1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424a134e-facb-40f4-95db-584a1e6608d5", "sighting_of_ref": "indicator--75e892fd-7520-40e6-ba68-0e8ee07a34d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20247ca-6bc2-4932-9fca-668989b6b6fd", "sighting_of_ref": "indicator--548638d5-7c63-42b4-9bb7-e640e1c0c0b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba3ebf-10b9-4924-becb-717c51132cf5", "sighting_of_ref": "indicator--bf638052-ed56-46f8-a1be-c1691f34a69d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c967053-c79d-4837-9afd-40a70fd29982", "sighting_of_ref": "indicator--60e8905f-7e8d-4c59-8aef-d912c6f430c5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ef5624-eb7d-4533-81d1-740665765a6f", "sighting_of_ref": "indicator--93d1ebf2-b29c-427e-9e2b-b53ad6e95e7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece37373-4a63-41f8-b927-4faad252e8f4", "sighting_of_ref": "indicator--2a45bcd1-1b6a-4bf0-b399-0ed6e5d3f3ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149f793a-aff1-46cd-9f6e-29812e6e74cd", "sighting_of_ref": "indicator--e501a656-6b10-40cd-a670-3204a643f8d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d88d82-8dbd-4cd3-baad-58559db389e1", "sighting_of_ref": "indicator--2201ee84-b93f-48fb-8d27-bec7f5eb4fbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb4abc7-655b-4567-8b54-da27e1926dc1", "sighting_of_ref": "indicator--5e7d1d9e-9089-4d00-861b-ff8adbd4ea9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dbb144-ba21-4411-b723-e7b45293e120", "sighting_of_ref": "indicator--9cd123e7-db98-43b2-80f9-5f901b271a85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762964a7-dbac-4020-9235-8e5ca3dbf1dd", "sighting_of_ref": "indicator--1168fb0b-16cd-41de-a989-57dcce9bf8dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ca35bb-1022-4109-ad06-5fc6c5347202", "sighting_of_ref": "indicator--00404deb-9cfd-4b6e-9aab-b23577d3ec82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67843c53-ba86-47f2-821f-453c2197b150", "sighting_of_ref": "indicator--6b7765e1-b550-46e8-80ab-bc5559dd2d5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dedf63-bad1-4161-8f7f-512b85b4dd08", "sighting_of_ref": "indicator--272a7e7b-ee4f-4b0c-aeae-1a15c06a7eda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482a92de-4fa5-43b7-827e-afd0d9ad82e9", "sighting_of_ref": "indicator--d44d13de-fd4a-411e-80d8-8638be34f5dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dee6e3-2ca8-4ea8-a18c-b32cbf0d15d3", "sighting_of_ref": "indicator--863f5ce7-6c9b-4139-b91c-c9dff54fd955", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d626f75-dc88-4ea4-9e05-558762161ccb", "sighting_of_ref": "indicator--4116a480-2298-4c62-b916-49fd17521cb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4bb44-6497-41db-b28b-c0a11ff9f2e3", "sighting_of_ref": "indicator--7bc196de-7b16-40f5-8be3-37c74ece4cc6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93ed804-88d0-4ca8-b1ab-1c5507feb684", "sighting_of_ref": "indicator--ebff781c-9c37-49a2-a6f3-a613e4d2d2f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36514179-cbde-440b-920d-5dddc1c364df", "sighting_of_ref": "indicator--f999cc30-70fb-4b02-a9fc-1a5aaaca22a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1917591e-ee05-46c2-978b-57a8c072effa", "sighting_of_ref": "indicator--fbbae413-c6e9-4d84-a6a0-736e2adb7936", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc0affc-2ae2-4f5b-80e8-96132fe15efb", "sighting_of_ref": "indicator--a2cb247d-f981-4667-8b7b-aa5a40a5b337", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37928b0d-0434-45f9-9474-3f295cd03f85", "sighting_of_ref": "indicator--d5b245dd-19f1-41ac-be01-91c2f79d8c4b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccae4388-fdf8-4521-ae56-9e423b3e3dac", "sighting_of_ref": "indicator--c5906cd6-f97b-4a5e-8186-766336ec3a07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2dba1d-788f-48d0-baf5-9ce581e37b8e", "sighting_of_ref": "indicator--c3be43c9-37d9-4478-bb2c-4055e2bb3731", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f34d8bf-0714-4cab-a95a-974758086daf", "sighting_of_ref": "indicator--1f6ba333-f6f1-4692-ba55-d9a0af03d9bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edb2225-d85c-4404-ba60-e9fa828d55de", "sighting_of_ref": "indicator--d5e349dc-0c0a-4991-88f9-16d85cff900d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49906914-f863-4098-80d2-8b9bedbc1966", "sighting_of_ref": "indicator--235d3cc4-26c6-42b7-8c33-95264deeb36c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f9e0ca-24ed-4f0d-ad8f-38a41119ab15", "sighting_of_ref": "indicator--235d3cc4-26c6-42b7-8c33-95264deeb36c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5c0f59-9ae7-4360-962c-d6f5f9dc4d12", "sighting_of_ref": "indicator--2411b7ae-6c9e-42f3-8da9-2a17a0fbc45b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27abc078-cd5f-48e6-806f-22df7d637054", "sighting_of_ref": "indicator--2411b7ae-6c9e-42f3-8da9-2a17a0fbc45b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284fd391-a6b7-4b21-b244-f1a35c0f1d4f", "sighting_of_ref": "indicator--901eb31e-b7ae-458b-95a9-9608a759a841", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a4f19-e6fe-486f-b191-6800fd53f7e8", "sighting_of_ref": "indicator--4cd13d84-e476-494f-944b-16215c5ee587", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7621275-12c3-4c67-b3a1-6c58f71db8e9", "sighting_of_ref": "indicator--58a5cb33-fd21-42d9-93c6-8329ca76a3fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e57f32b-e663-46d8-b9b6-5c934b6b9b54", "sighting_of_ref": "indicator--58a5cb33-fd21-42d9-93c6-8329ca76a3fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32171b37-394f-45d9-a82b-48c3a9ae8232", "sighting_of_ref": "indicator--034d24d7-c7d5-4f5e-9e4c-97a1a05a6da3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd077f2-14cb-48ad-a8e3-8d03cf337aac", "sighting_of_ref": "indicator--d66895ec-2a57-4584-8b23-75af83719e14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e15c52-38ec-4c19-91ee-99a0a1c2855d", "sighting_of_ref": "indicator--dfc18941-dc73-4f6e-a3cd-ad6e453641ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a5b285-5160-4598-83d9-f86133bd9cf8", "sighting_of_ref": "indicator--cedcc0e5-7fd5-4dd4-953e-1f9f638314f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91790a3d-cc61-4d40-bd56-c0aec5cce58d", "sighting_of_ref": "indicator--fe674ef4-5a34-4dd1-9810-de561d7f0b16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb23c68c-5d91-4d40-b1ce-151f8c9a6241", "sighting_of_ref": "indicator--fe674ef4-5a34-4dd1-9810-de561d7f0b16", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fdc7f8-5db1-45fc-91c9-4177fd8b19f1", "sighting_of_ref": "indicator--45889612-dd60-4d0a-8fa8-2eff8e6f2a34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8281c8-d713-41cd-a98b-15457ad75a9c", "sighting_of_ref": "indicator--d0f14dcc-1c3c-48cc-bc7f-13eede7793e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ad693c-13cb-4dc7-b3c6-b712718c7d68", "sighting_of_ref": "indicator--3c5f0e6d-2c7d-4414-9285-67fac18cd1f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b2ee5-f55a-4209-8e7d-cb57b2f42b32", "sighting_of_ref": "indicator--a057f23e-d974-4758-ab56-4cd59d63e4dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b51b176-28d5-4cb6-90eb-3e0580e616f6", "sighting_of_ref": "indicator--77311cc8-d4cd-497b-a7bb-7ffa903b22e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0bfa7f-7aaf-4b0f-be3d-a5a3b8082c77", "sighting_of_ref": "indicator--0bd855ee-1f1a-4960-9490-6eac8bf064b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db13430-51ce-423b-a1bc-a644d17c7517", "sighting_of_ref": "indicator--a1e04a32-4af5-49fb-8e73-1c6acbafde91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db5b014-f467-4d0c-9408-6ae7a62120e7", "sighting_of_ref": "indicator--d1dc46f5-47a3-43f6-89cd-5b677a09d628", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b090ed-28f2-4303-8f61-cf0e682364d3", "sighting_of_ref": "indicator--87b09911-e07f-4c3f-aec5-e0307551a178", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0d0a81-46df-4609-b22d-738e066af514", "sighting_of_ref": "indicator--99b006d8-ec2a-4c42-b3b9-a1c69fcbec19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9440d7-69b1-4f1a-ac25-c6814d4955d3", "sighting_of_ref": "indicator--99b006d8-ec2a-4c42-b3b9-a1c69fcbec19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56cf019-1fda-49c5-b748-c8fd7438bb41", "sighting_of_ref": "indicator--eedc1f9e-81cd-4cf5-8af6-7291e828f130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cc3fdc-91a0-48dc-911f-9e7977ae15b3", "sighting_of_ref": "indicator--30b042a7-0369-43b1-b3ef-0e74b96e1caa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10283023-3f95-45f9-806d-630c32323333", "sighting_of_ref": "indicator--0320b1ca-b868-4309-be19-75cc64c442ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d60953-a309-4aff-8464-072f12148d02", "sighting_of_ref": "indicator--27844a74-c99f-4516-a797-a05766f3f292", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3727aaf-2614-40fe-81a3-b8178464cde6", "sighting_of_ref": "indicator--16880087-3227-46bc-a776-1b186a70b784", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeddd70b-f38d-4f7e-844f-00f044da4c8a", "sighting_of_ref": "indicator--6c077a8b-7bd4-4952-940d-12c5c6dfbe06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6834648e-de18-4308-84ce-ddb41f990426", "sighting_of_ref": "indicator--f8cc2395-a18f-4fbb-b9cc-bc6962872088", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c8146c-88cb-4462-9d09-e1e10523e8f7", "sighting_of_ref": "indicator--01e19a4e-1c18-497c-a3bb-395220192553", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275fdf47-803a-4e28-89a5-0ca4302d77d9", "sighting_of_ref": "indicator--6b26e9b4-5556-47cf-8e6b-de75a070190d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ec6c4d-2dc6-4c13-83ce-da341a6efc4a", "sighting_of_ref": "indicator--7ed7cf74-5bdf-44c0-bfac-6490179e5c24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a76e9b-abbb-4b2c-9dbe-bab43d331467", "sighting_of_ref": "indicator--04e186df-53af-4411-9e67-6c000b4e7864", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fabd526-e3a7-44bb-a5aa-d40db4ff722b", "sighting_of_ref": "indicator--2bf9477a-76b4-48c8-8dcf-4b72535bfa67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f3e328-cfee-4ad4-a0be-39ec9fe261e1", "sighting_of_ref": "indicator--89d72359-0f1c-46c0-aade-442e4cdec590", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5327754f-5560-4f43-a5aa-b0eb8a847c3e", "sighting_of_ref": "indicator--89d72359-0f1c-46c0-aade-442e4cdec590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48da1544-fb9c-4ceb-9372-7d90f1417458", "sighting_of_ref": "indicator--fdc11ece-2126-4fea-a9d0-374c3752bf14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7adb58-d0b6-4444-9301-f3500c6df8b7", "sighting_of_ref": "indicator--86112996-05a0-439e-b699-d825625ecce2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a0236e-7251-4209-a654-d06335456129", "sighting_of_ref": "indicator--e8839456-f4c2-4a79-8475-432d64fe3f75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3040545b-98cb-4a42-afbb-f31c03d5cc2b", "sighting_of_ref": "indicator--7831d680-5ef1-414e-a0b7-d890036b1b4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb96a529-c2b7-4ce4-863c-cf185b66d32d", "sighting_of_ref": "indicator--3df1ebcd-8ae8-45dc-baaa-e06ea07e4975", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe83ac03-fee3-4cd8-83b7-33c795b36ff6", "sighting_of_ref": "indicator--02cad11e-297b-4f93-9b08-ee837b1a2a36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f3663-0e5a-4ae0-899e-aab35f63aef2", "sighting_of_ref": "indicator--2c767135-b439-4105-9f3e-80309b20befe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358c1adf-9cb6-40a3-92b9-94f573c89e4a", "sighting_of_ref": "indicator--20bc7ff1-7ead-4803-a4f4-786793b5a9a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70136fc5-d04a-42ad-81ca-4edb7a8139dd", "sighting_of_ref": "indicator--9b6b775c-44fc-470c-b308-46b56f5bf544", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e71ef57-3350-497e-bd38-f34f59eea720", "sighting_of_ref": "indicator--3cd07e59-5ecf-4957-b445-bd6aa9967611", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc968f8-0bc4-40b5-83c8-20daaaa853e6", "sighting_of_ref": "indicator--7ffe762d-9fad-4731-bd69-db047f6d66f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9672b0-431d-4697-8e10-d6ec042516b6", "sighting_of_ref": "indicator--6f3ef48a-5cf3-4764-9d7e-4c660b2d7dc7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a6141-90e7-4f80-b932-9d97b3fb8db9", "sighting_of_ref": "indicator--56d43f57-1948-41bc-8844-7eae1b26df19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c289e55-82f0-47b0-976d-fcde17addb6d", "sighting_of_ref": "indicator--c922fb1e-cedd-4e4f-9f0b-e1c92e30f800", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa6b292-a158-44e1-a249-94b82eec4cf2", "sighting_of_ref": "indicator--536f8214-3f13-40c4-9dd5-6a04fd59f1de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18a650a-30ba-4f86-b9b4-113f8c01a86b", "sighting_of_ref": "indicator--46a257e6-5b79-44da-91f8-6f9d6d81bbd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361fff84-c82f-4b4c-a4bb-bbd8681222f3", "sighting_of_ref": "indicator--e0f5311a-66f6-4c48-a375-3555aefe183a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26df75d7-0ffe-4920-9a5f-d3bdfeb7c790", "sighting_of_ref": "indicator--e0f5311a-66f6-4c48-a375-3555aefe183a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8e58fe-588f-4684-bdab-b554ca54a163", "sighting_of_ref": "indicator--4a15c1a7-8a79-45ec-81bf-9d156e50c6c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1291400e-30a3-4eba-8d9a-5f3fc0d2e878", "sighting_of_ref": "indicator--3ad528bc-cb0c-46da-bdc7-04d3dff6f47f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29a09a6-da0a-43b9-815b-d8bf1e5fb553", "sighting_of_ref": "indicator--b0317253-81f8-4849-a4a6-6da72d69d13f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352d5f7-5dc4-4070-a734-2a2839dfc780", "sighting_of_ref": "indicator--e85cff8b-e580-4673-b397-66cc14a24a3b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6564ed-97ae-4782-b0cb-61eb4a67ee62", "sighting_of_ref": "indicator--5c35a93a-8c3b-4f87-a34e-382b316c4a77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7487a573-7f0f-498c-b784-d6a1437aa44e", "sighting_of_ref": "indicator--a2485a97-3844-4cfb-b6dc-557324cd6a43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc9f299-30e7-47fe-a06c-4dfc9524f8fc", "sighting_of_ref": "indicator--ef599ead-8d44-4af4-a238-5b6ef59ba2d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e617a681-6e88-4d02-b265-921b197a5e99", "sighting_of_ref": "indicator--99b45f2d-e2df-48df-83a3-e0f628c71ff1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4813bcb8-fc6d-47c4-b68f-b02be44222dd", "sighting_of_ref": "indicator--d5c3aa9b-22d1-4b5c-a251-4c193ca30be7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0fd1ea-43ff-4485-aee3-2a203b4d6432", "sighting_of_ref": "indicator--c93f49bf-db4d-45dd-8356-ee916e4a2d19", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168253d3-06cf-4d6d-8787-5d9b62253529", "sighting_of_ref": "indicator--5efcc321-3414-433c-960b-3c5df0dd69d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71711e6c-2f25-4e5c-9f0e-3284c41fd185", "sighting_of_ref": "indicator--78b69312-c4d6-4a6a-b470-fd2c86c76716", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c897ce-d274-4745-a00f-78236bae6ae7", "sighting_of_ref": "indicator--51eec102-7b39-4572-a177-7d11cae04b33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55995ac8-3885-45cb-b764-c2068e7cc9b1", "sighting_of_ref": "indicator--771d867f-2fce-49b7-8430-19151dfb6b3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dccda15-b6af-4f43-850d-3487e43b0e24", "sighting_of_ref": "indicator--493a10a4-3b28-4cf4-94f5-53145e96834f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b8cfed-9cae-4dea-b563-06c2aa457f11", "sighting_of_ref": "indicator--642e6749-e666-4fd6-a8f2-0bbb14fb64ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f04449-096e-48e7-b36f-8c08d5a87835", "sighting_of_ref": "indicator--04cae19d-e0c3-4398-b6c3-c28d9294359b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c52dd3-533b-4e05-a76e-642f34d249ed", "sighting_of_ref": "indicator--ef995dad-eee7-43a5-bd4c-f5da2f13f343", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2161a45-3d71-423d-948e-3868d83c359b", "sighting_of_ref": "indicator--443731e4-91c8-4087-a237-c6f72d4ac631", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3308fa00-5bb3-485e-b604-9fa18ff04632", "sighting_of_ref": "indicator--fce645e1-99f4-4343-bc70-2e0a760e0ef9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a784487a-19b6-453c-bb58-9fbba7f43b9e", "sighting_of_ref": "indicator--37d7a5b0-2c38-4474-a6d5-5b80def09c94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e051a00f-7f5b-4efd-9442-7d23cf7bf862", "sighting_of_ref": "indicator--815c3855-6ac9-4c93-aade-cbc1ad281cc3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ed6f66-78ad-403a-b166-ae8d7448c246", "sighting_of_ref": "indicator--815c3855-6ac9-4c93-aade-cbc1ad281cc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18bc1ae-031c-4aea-8a3b-6caeaabe6cab", "sighting_of_ref": "indicator--a909cff2-b1d8-4b40-8706-939b3f88cb97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c61928-bc74-462d-acb3-da42ff33aca2", "sighting_of_ref": "indicator--65287327-7721-41ee-8456-4469df2fccae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecf7bed-6c84-4f28-8c99-4106657bf82c", "sighting_of_ref": "indicator--8fbd95bd-ffad-4a62-ac17-830cf04e8c54", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2103842-d4a0-48de-95a0-a2655e7ddf25", "sighting_of_ref": "indicator--da0ca1f0-471b-4751-bcdb-12dea7f842f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de22af2f-be06-43b9-8429-91fb4f4a3881", "sighting_of_ref": "indicator--da0ca1f0-471b-4751-bcdb-12dea7f842f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e07a6a-d4aa-4b6f-9d10-72ee894d4d6b", "sighting_of_ref": "indicator--d64c0c63-e477-42f6-a60b-b9e5ae40c11c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbd37fd-340e-4b09-8656-6bf282f45f25", "sighting_of_ref": "indicator--5787671f-9973-47a4-8fd4-35b22d12f084", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c0fe1a-a131-494c-9d27-a2b525927d1b", "sighting_of_ref": "indicator--5cac3df2-a9e5-416a-9063-30354461827c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d656b52e-0b92-4758-9469-7981c3a2ea6c", "sighting_of_ref": "indicator--a63179d3-f294-4f8b-b066-54ce898766c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038fe6aa-9ec9-44d5-81c1-73a7644eb94f", "sighting_of_ref": "indicator--1bf1c0a8-81e5-4333-87f4-75971bc3ce8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd588d0a-c67e-44fd-b85d-f81c0909801c", "sighting_of_ref": "indicator--43e7b5de-c492-4e4d-bf82-d4b48ab2cc65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613c7c31-27c0-4479-a9fd-e23632265976", "sighting_of_ref": "indicator--29df72a8-4b2b-4085-ac64-f56c4375b6d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b66e4f-d292-408f-9d5f-248ca0922f96", "sighting_of_ref": "indicator--8f44828f-1d3f-4498-b0a7-677fc54216d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba794fb-fdb5-43fc-8fb4-2bedf291da99", "sighting_of_ref": "indicator--3ce2c56d-faca-4dd3-abe6-10e7756ae901", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b429795-b8f9-4410-b7c4-888282c31986", "sighting_of_ref": "indicator--aa98b245-735f-4ab1-be4b-77ba7e3f4acd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd86de1-65f2-42e8-a2f9-aad74d0e68d0", "sighting_of_ref": "indicator--4fc72e1f-dacf-4eca-a4e6-676f1bd64bc8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3ad02f-5f75-4611-a6ac-1490e589de54", "sighting_of_ref": "indicator--9e828a64-f6e8-4ea3-aacb-7cf249316853", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d80c7-a102-45b5-8280-06645d37851c", "sighting_of_ref": "indicator--71537fc8-e96c-460c-a746-e3fa87d5afb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80616020-890f-4362-8fb3-37aab8781ace", "sighting_of_ref": "indicator--cbd1f900-0e24-4869-9add-01bae3fc7c30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5fd3fe-7cc6-4d30-8b80-07a02e406e53", "sighting_of_ref": "indicator--5b028653-b599-4675-80bb-be72b81ae155", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311711fb-e0a0-4c77-97a4-a3c1a11856a9", "sighting_of_ref": "indicator--b8beb20a-c78a-41f1-82c6-9d41b1333097", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9cadb8-0c67-49e2-bf00-704166f57706", "sighting_of_ref": "indicator--cf94290c-0968-4000-9e8a-b1568098d1c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b39f98-8641-40da-8ee1-f4e459e6529c", "sighting_of_ref": "indicator--c5065c5e-f1e4-4259-bd44-a83d308084b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdbf6eb-51c7-4c35-ade7-218c3b28ca8b", "sighting_of_ref": "indicator--977fba7f-e818-43f8-9ca3-221628eb75c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd13f60-1b74-4b47-b20a-158f5ad449ce", "sighting_of_ref": "indicator--bdcaf346-3c54-4d39-ab53-36109fd460b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a5d668-a91e-49ec-8bc9-7750b17be1d3", "sighting_of_ref": "indicator--5a2e61af-d1e4-461b-ba8d-4fbabc603d13", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec54c56-50c9-41a2-82a3-64726b6f9d27", "sighting_of_ref": "indicator--937a5ad8-fc6c-4d5e-b98e-8a4f76a6a1ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d00d36f-fd1c-4765-ad1c-bbae4ff1d3f9", "sighting_of_ref": "indicator--a7e96971-e40d-4f96-875b-a0e2e2c6a0c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5444239-ac8f-4910-980d-74e92378a2d5", "sighting_of_ref": "indicator--a7e96971-e40d-4f96-875b-a0e2e2c6a0c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66555179-b467-493d-a58b-ada8092ce042", "sighting_of_ref": "indicator--cd1f9bff-1267-4748-a69d-fcba4dc9d635", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d3713e-aec2-4dfe-9f93-cf06836398f0", "sighting_of_ref": "indicator--8e2a70d7-42fb-4846-8af0-af6c64fa4905", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8e3735-07f4-455f-bb63-cbd985f624e7", "sighting_of_ref": "indicator--1d4a6db8-fde4-468f-96f0-e8d06918716f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82de6ac3-40f9-4f4d-8784-3c439bfda4f3", "sighting_of_ref": "indicator--1d4a6db8-fde4-468f-96f0-e8d06918716f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12280d57-b0b0-491a-b317-953665d1c202", "sighting_of_ref": "indicator--f7a64ed9-b207-4416-bcc1-475a9ae9b32b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284199e0-bda5-4e95-b4ee-67094440ca21", "sighting_of_ref": "indicator--4ff1cd60-17c9-40f8-a7f3-80147414584c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618e77b9-24bc-4eac-a6e7-fc4ee3721ec2", "sighting_of_ref": "indicator--1299ad28-7557-4b1c-b739-60eec0e8b241", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496f85bd-2793-4169-b7b4-62c9298178c7", "sighting_of_ref": "indicator--a7e1a503-38fd-4f24-a735-d0e222514ed5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f226bc-876e-49bd-a88a-4af7a12bb578", "sighting_of_ref": "indicator--66c87381-9f0d-47e2-b40d-c5262d808661", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977e2bf4-ee85-488d-8703-76e2f9de3fc4", "sighting_of_ref": "indicator--66c87381-9f0d-47e2-b40d-c5262d808661", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db588eda-68d4-4176-92c7-41a15df1c930", "sighting_of_ref": "indicator--fbebed93-810c-453e-9ea2-8c6a4f12511e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96ba3d9-f3d6-46cd-83d6-845cc220e313", "sighting_of_ref": "indicator--fbebed93-810c-453e-9ea2-8c6a4f12511e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95316fd-2337-4475-af43-0e1117000fdb", "sighting_of_ref": "indicator--fbebed93-810c-453e-9ea2-8c6a4f12511e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d651aea0-0b78-4f8f-8105-004e1e6ddac2", "sighting_of_ref": "indicator--0030d1d4-490a-4621-b64f-553af90d5ca9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633e0e72-4675-4604-9ce2-91d0e771acf8", "sighting_of_ref": "indicator--c2bc0b4b-6816-4fd7-a9e5-5747649e7a64", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05f066c-f149-4679-98ad-f22d5db91e90", "sighting_of_ref": "indicator--4707f9c1-f602-4480-a73c-15dc302d0920", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b196b11-ec2b-481f-b29b-a97f8073076e", "sighting_of_ref": "indicator--12e590de-a2df-44cd-b0ed-f346bb876305", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a840a61-f5de-4191-bf55-e15abd871fb9", "sighting_of_ref": "indicator--82dc65a4-521c-4ce9-a852-5a7d60fee7be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55942cf9-fe29-4f67-ad3b-3704a5860a76", "sighting_of_ref": "indicator--8b7d59f4-9d5b-476c-8403-b2717597e1de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3488f35-d955-41e1-90f0-91ee3c360347", "sighting_of_ref": "indicator--90b8ddc6-e4cb-4a34-837d-7e0761319578", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab335972-588d-48cd-b866-62cab7846884", "sighting_of_ref": "indicator--2100ef02-1b2b-4662-a34d-d37c554fe135", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b043c4c-b761-4184-b611-88afe51b7b2c", "sighting_of_ref": "indicator--7382b4b8-0e29-4fa1-a0d2-4c3dc251c1fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adda798d-c506-4edb-a208-5d4a02d80236", "sighting_of_ref": "indicator--47426787-5af5-45d7-a29b-2bc08d23162b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674fb579-1dd4-4d00-a1dc-2177d1a76b4b", "sighting_of_ref": "indicator--6eb06a75-ea9e-45a5-b84b-771ff6b3a3b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf56f7d5-33b8-4352-ac42-b02eb6bd65f7", "sighting_of_ref": "indicator--e1b2c0f2-ab84-429c-8a5a-c278bff5e766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c2284f-4f56-4a4b-a829-bcb6dfd48c67", "sighting_of_ref": "indicator--c8ebe589-9daf-49ca-8c01-f83cceeea468", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b918e37-c119-45a0-8811-6572569a6ef1", "sighting_of_ref": "indicator--55e5f4a8-5439-4812-8851-f3b3cd06536b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c09876-f3f6-4b12-996d-6abf7e18231c", "sighting_of_ref": "indicator--bc8cbdc0-b1c9-4157-84ad-190cae35ecba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40954b10-2fd7-4b61-9ad1-200083cfd529", "sighting_of_ref": "indicator--c6f0b0c3-a42b-4743-922f-7f3f0f32bb5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27afecee-d55b-47fa-ba10-339eaca3f819", "sighting_of_ref": "indicator--78fedd54-c842-4278-bcf2-4c0cc73e4b84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99de63a0-1be9-441f-aa68-920554767326", "sighting_of_ref": "indicator--dd9c23de-6b0c-474e-8bcb-1700e2b77a30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb1ef95-c546-4a51-8e60-303ad64d95ed", "sighting_of_ref": "indicator--53895b2d-a13a-46ad-a4ac-77401199ca78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b2da6e-3076-4c81-8758-3a3dd7608fa0", "sighting_of_ref": "indicator--a67b6839-f2ec-4d53-813b-ae5a948fb533", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da66261-fd79-4bc3-86b8-5c87e7dbcc6e", "sighting_of_ref": "indicator--50f68ae2-b497-4033-8f40-1116971dfeae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7de938-41dc-4485-bf90-c985fd38cc7d", "sighting_of_ref": "indicator--8679f4d5-564a-4675-a71d-d550f650622e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa52e12-7074-4f4c-8ea0-507480ba3c7d", "sighting_of_ref": "indicator--c1cb4b5c-b806-4b02-bc73-bbad5b6bc30e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79c1921-2210-4946-8991-144fb758d252", "sighting_of_ref": "indicator--c1cb4b5c-b806-4b02-bc73-bbad5b6bc30e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ffa02c-238d-4549-973a-47ac4f3a7a8d", "sighting_of_ref": "indicator--c6136808-b07a-46de-8a92-224d0619e34f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45715576-149b-49da-b357-15c0f277d3bc", "sighting_of_ref": "indicator--1ecc4f95-f6fc-480d-a0a7-3c621c314e95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef4a85c-047c-4d96-921c-b4cb730337b2", "sighting_of_ref": "indicator--dee1b643-b751-498b-8c8e-d1158e0befaa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba18fc99-23c3-44a6-b30e-a51b9002096a", "sighting_of_ref": "indicator--313fc7b3-5993-42d0-b86c-30e3ca8e3862", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6189692-5e62-4a4b-b56f-cf30ae105c48", "sighting_of_ref": "indicator--313fc7b3-5993-42d0-b86c-30e3ca8e3862", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0fb0a9-e6cd-4679-983e-a651d2477bc6", "sighting_of_ref": "indicator--a73b3ab8-2468-44d3-a847-ef297fb048d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0044e3-aeaf-4ba1-8b73-059deca43497", "sighting_of_ref": "indicator--42714a0d-8779-49db-a65c-bcd5254d50ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56c02b3-7776-410b-ba02-e9372a655c0d", "sighting_of_ref": "indicator--6c57c1b2-3a81-4149-9fc2-2e7071deff91", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b03d11-f8bf-4c22-85b5-936016ff49d6", "sighting_of_ref": "indicator--72f2527e-79d1-4df5-94f8-e186aaa07b73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb6c6d5-1156-4078-a77f-7f35e0dbfe3b", "sighting_of_ref": "indicator--72f2527e-79d1-4df5-94f8-e186aaa07b73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccec93e-c1a9-4fe4-bc0f-cfe7ecc26537", "sighting_of_ref": "indicator--05bc9313-3f2c-4ec7-a129-b628d9ea5244", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0420007-027e-48f0-8eb2-57d2d217bd85", "sighting_of_ref": "indicator--a9c1fae6-ac52-4ef2-b3cf-08d61dcc9bb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13abc2ba-ad8b-4be9-8f63-395636fc5921", "sighting_of_ref": "indicator--4b67cdf8-0ac4-4d4b-a9ee-f811abe26fe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e407e048-3a28-41c6-b811-5f14ec6c116b", "sighting_of_ref": "indicator--4f0b18bf-27dd-4a00-a64f-db2f3955e6cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54eaf07-b1e4-46e6-b7a0-d61a679feecf", "sighting_of_ref": "indicator--da88df1f-343f-4cd8-9de6-8b66e29a1459", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8069cd9c-9a8e-4032-b072-1f12d8c84962", "sighting_of_ref": "indicator--53a6246b-c52b-41f7-817a-9bdf102c1c5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87953e-1949-4031-bea0-93904e4cfad9", "sighting_of_ref": "indicator--c2a6c1aa-ef0d-4c67-a078-f74b1fd17d52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941b8abf-890d-4fea-a2a6-44c1d31fcf77", "sighting_of_ref": "indicator--5a79dc33-f1bd-458c-9b6b-1764042847d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ff3783-b4d9-45e0-b843-041fb3de8bee", "sighting_of_ref": "indicator--c3283b9f-d4a8-4c07-b624-6252d151247e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537d1800-34c5-45d6-b15f-67579baeec72", "sighting_of_ref": "indicator--c3283b9f-d4a8-4c07-b624-6252d151247e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92439766-b0c3-4a36-bcc2-8f32d2751b3a", "sighting_of_ref": "indicator--c3283b9f-d4a8-4c07-b624-6252d151247e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0d3423-2b3c-46a7-923f-6fd0dad9d0f3", "sighting_of_ref": "indicator--6432e4ae-6457-49e9-9e17-82ccc8b92db2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e60314-bc6a-474c-ad23-1702025ef21d", "sighting_of_ref": "indicator--a0cd1e0b-12a9-4e69-8300-6adcb2ea48c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ccd7cf-3b6c-4f72-ac9d-1a73026bed91", "sighting_of_ref": "indicator--49d18fb4-5450-4109-9590-4f9b5cd969af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba1143c-52f6-49a6-aefc-aa7e144b4b8a", "sighting_of_ref": "indicator--49d18fb4-5450-4109-9590-4f9b5cd969af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d15c63-5f05-4ff5-8de4-31ae36be379b", "sighting_of_ref": "indicator--7d5a501b-6d05-43d9-83d7-fa4d15819454", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6353bda-4d42-4dfb-a3fc-29865653c63f", "sighting_of_ref": "indicator--f38717fe-df8e-4195-96f1-b93d21f6cb4e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ec34e6-9241-4b3f-8a99-f0b2c87d1558", "sighting_of_ref": "indicator--f38717fe-df8e-4195-96f1-b93d21f6cb4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16c0e98-6478-4a7a-a9bf-346e29225b8e", "sighting_of_ref": "indicator--f38717fe-df8e-4195-96f1-b93d21f6cb4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9135b22-fa7c-43ce-ad16-7609ab296798", "sighting_of_ref": "indicator--86d8422a-bd6b-45e5-978c-9ce849d47880", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e70b3be-99e5-4387-a26c-085c954a1efa", "sighting_of_ref": "indicator--86d8422a-bd6b-45e5-978c-9ce849d47880", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c2616-67f0-4f11-b8f9-78ca9a362dd2", "sighting_of_ref": "indicator--3448b41d-c745-45f3-aa39-bfbe71e44511", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e195d71-ad81-4b44-ac3c-5e3d58232de2", "sighting_of_ref": "indicator--d82f3a1c-0142-46ff-9fe2-7d7d88631c74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9a9d38-699c-44cc-9a97-5628c4a52e4e", "sighting_of_ref": "indicator--d82f3a1c-0142-46ff-9fe2-7d7d88631c74", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485f0f07-61ff-41e3-9455-f8e37c96bca7", "sighting_of_ref": "indicator--d82f3a1c-0142-46ff-9fe2-7d7d88631c74", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e7e429-c156-4990-b3c4-35e33ff65663", "sighting_of_ref": "indicator--dbb2fcbd-26ec-4185-a792-3a5cc87664a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b962c67-5a00-4c1a-bc84-c23982e54c99", "sighting_of_ref": "indicator--8354e755-cd0b-4361-beb3-065ffa752f16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb8dcce-1c92-4cef-89a8-4d6958912c6f", "sighting_of_ref": "indicator--3f7ac76f-c24e-4077-93c2-4dcbd60ae79b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2b9a3c-afaa-4a66-9142-a95a82b6d757", "sighting_of_ref": "indicator--188bba69-7572-4ae4-a1be-2a3c3cdb3f93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c68b0f-1619-49e1-9570-a502c85fde4f", "sighting_of_ref": "indicator--ae4cf6fd-acc9-4f59-a427-8d692a60b68c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63781fe-8f47-4543-99fc-4e44dcffc523", "sighting_of_ref": "indicator--fb458c6f-a3ad-4f6e-86cb-5ebf7e84c3b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2914f3-7fea-4b9c-9bc5-49ed80bb0ae0", "sighting_of_ref": "indicator--fb458c6f-a3ad-4f6e-86cb-5ebf7e84c3b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ba5365-f662-452f-a750-08a1ea8e4e7e", "sighting_of_ref": "indicator--44ea8b24-7870-4256-bcaf-ce326f92263e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04aa3319-adc0-4bc7-9a08-af055ad55365", "sighting_of_ref": "indicator--23583211-a048-492e-a35d-e8092058e207", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54564814-f9cd-4a6f-b6c7-bc052e39eb1e", "sighting_of_ref": "indicator--98af4297-a82a-470c-8c45-a1e3f55f7dee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e8677-4576-477f-8516-d606621fbf55", "sighting_of_ref": "indicator--7fcfd57d-bb6e-4986-b298-9ac33d436e59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9233d968-640a-43b5-8577-1144e2a20fe3", "sighting_of_ref": "indicator--7fcfd57d-bb6e-4986-b298-9ac33d436e59", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61bb4b4-713c-46f7-bc7c-e763317f2b26", "sighting_of_ref": "indicator--7fcfd57d-bb6e-4986-b298-9ac33d436e59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf65ff01-8827-40c8-800c-89bddff6feb9", "sighting_of_ref": "indicator--c7b549b4-913b-4c0c-b9d9-f0a7a1849b53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba052d-34eb-4f59-8844-204e1ce0d3fb", "sighting_of_ref": "indicator--045ea0b7-c2b3-4c2f-bcf3-872178d8ec4e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed16c10d-661d-4a94-9583-b2993e7881c6", "sighting_of_ref": "indicator--ebe6d9d4-ba38-4a6a-8886-46c7d8dfc582", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb6d392-0c4d-497a-8cbd-63e6420f5f59", "sighting_of_ref": "indicator--78dc0b42-f4af-4fd7-acaf-ea9dcbdba275", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f3b5f1-a829-463e-bd97-0ebb19338aaa", "sighting_of_ref": "indicator--78dc0b42-f4af-4fd7-acaf-ea9dcbdba275", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6a2510-b871-428f-ae7b-027a84ab4b0e", "sighting_of_ref": "indicator--f9cfb99e-01bf-4e24-a585-856ce0f8193d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da2eb54-1069-4315-a774-adea3e045b6a", "sighting_of_ref": "indicator--608d57c0-b9fe-461d-a289-0cab3daf6b11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171b0171-31a9-4d73-acb8-691686afd90f", "sighting_of_ref": "indicator--c7ad87ac-09b0-4002-9e28-26b930f7b297", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18db876-ed07-4d70-b8d1-877fdb9eda42", "sighting_of_ref": "indicator--159860e9-aea4-498d-80d1-3ac6ce2c6eec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edade22-9e89-4945-9746-2550bca2a52b", "sighting_of_ref": "indicator--159860e9-aea4-498d-80d1-3ac6ce2c6eec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76d710a-6603-4526-a9e4-b492dfc44960", "sighting_of_ref": "indicator--ba2312d8-3fa8-4a18-89c3-722bf3f975b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a750c4a-9b24-4d6d-ba96-1a3d16afc41a", "sighting_of_ref": "indicator--7419a3b0-3785-4205-9edf-4ff01796db53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf303ead-ea37-4716-85a5-60dcde2649c9", "sighting_of_ref": "indicator--97beaaa9-4e24-4b40-a57f-ccb0a6f3754a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5872bb1f-2528-46c4-b114-2f86aa5b2bcc", "sighting_of_ref": "indicator--c0c347ee-656d-4f7a-91ee-a4f156675014", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b710b2-6d8f-4465-8cd6-b9a515792172", "sighting_of_ref": "indicator--bcdcef40-f49d-4e98-bf0f-1aeddada84a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c496e5b8-868a-4fd8-b1e6-abf294a22f87", "sighting_of_ref": "indicator--297e0ef8-9ac5-4426-a385-b13d120ffc03", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a1e89c-35de-4bd6-ac5c-265df15e27ce", "sighting_of_ref": "indicator--5df9c5a8-9592-422a-9c37-6b77f22f022c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2360ca66-59f2-4e91-93ca-c3da196d8cdd", "sighting_of_ref": "indicator--86208c66-9933-4dfd-b966-19707db739d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf98c4e0-0259-4013-8ecf-4724446ce95f", "sighting_of_ref": "indicator--618a5259-625a-409d-8e83-e1dab4966381", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c1a15a-4276-4752-abdc-793290f015ba", "sighting_of_ref": "indicator--3f2aca11-bd13-4da3-a75b-691c9cdf949b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81efa67d-a06a-4ca6-b8e2-1a66eda22e99", "sighting_of_ref": "indicator--d4f057a5-f04f-4aaf-aeda-ac0ed2474dd5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba5c9de-8c31-486f-b3ba-1788d0737559", "sighting_of_ref": "indicator--4716f511-18ba-47ad-b535-c6d097d8e98b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901e3967-d530-49f7-8474-6c1fe560c379", "sighting_of_ref": "indicator--35bc5978-65ef-42f7-b9f1-9cdb7be1c9f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeebdc1-5bee-4638-bbb7-d947a2291c5c", "sighting_of_ref": "indicator--2eda7883-3460-42c4-aa74-f8acb7b5eea6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9dd2df-db1c-4488-8180-8a4bde0827d0", "sighting_of_ref": "indicator--a2aa0899-1a14-41c0-8705-258486729147", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8703cf66-cb62-4ec9-a961-b3f265bd1f80", "sighting_of_ref": "indicator--a2aa0899-1a14-41c0-8705-258486729147", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460e7009-0a71-4ee0-b341-f434b807ba30", "sighting_of_ref": "indicator--a2aa0899-1a14-41c0-8705-258486729147", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce84c6b-7232-4b53-bb50-8f2ed43088b4", "sighting_of_ref": "indicator--90363e60-c661-4e3b-a9ca-8884f129ea65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d068fc-47a1-4080-af76-d46ed229b4bd", "sighting_of_ref": "indicator--72865630-4b80-4928-818d-d952c0666dc3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7186738b-31a3-4411-b634-313facf258e7", "sighting_of_ref": "indicator--3c0029ef-b1e9-4d19-a1b7-52c79e706c9e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4575a4d4-3ab5-4789-8912-150455ded241", "sighting_of_ref": "indicator--3c0029ef-b1e9-4d19-a1b7-52c79e706c9e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fb19bd-0ad1-4601-920a-eff15b41f56d", "sighting_of_ref": "indicator--3c0029ef-b1e9-4d19-a1b7-52c79e706c9e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9dc902-5ae9-4995-a9a3-21f6b89cc16f", "sighting_of_ref": "indicator--a0edbe47-92a7-4c26-b4a4-879f36dc1506", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cff97a3-0fa9-4bbe-a7db-074b21b51cb9", "sighting_of_ref": "indicator--a0edbe47-92a7-4c26-b4a4-879f36dc1506", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edddb99-f31a-4b0f-8bba-98e7f1775580", "sighting_of_ref": "indicator--43c32aac-4d70-4eb6-952e-f4bf59189690", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae81ed2-e903-4f19-8cc4-8c8695649f34", "sighting_of_ref": "indicator--f3beed9d-d37a-4cac-b8fb-46af8dee662a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58613732-ada3-4866-949f-3ac504f7b44f", "sighting_of_ref": "indicator--f3beed9d-d37a-4cac-b8fb-46af8dee662a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ec7712-b737-4ae8-88ca-3571b2484091", "sighting_of_ref": "indicator--78bcf2a2-8cc6-4eb2-af0f-aeb754289fe5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b747f8e-605d-4a20-8f3e-c81e9e14bd6a", "sighting_of_ref": "indicator--f296cab1-f3f5-4ba0-b6d4-57dbd230a16a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec8968-eb3c-45ce-9e54-d29d0165d920", "sighting_of_ref": "indicator--f296cab1-f3f5-4ba0-b6d4-57dbd230a16a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4700ea0-4d6c-42ca-9eba-5a878d8d93c7", "sighting_of_ref": "indicator--f296cab1-f3f5-4ba0-b6d4-57dbd230a16a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeab8ec6-e7b5-411b-8cfb-cd6acc704744", "sighting_of_ref": "indicator--abe1f622-82eb-4b14-bfe1-4f148dcee47c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dc4fb8-7d18-4529-ae52-c498ea5baa88", "sighting_of_ref": "indicator--abe1f622-82eb-4b14-bfe1-4f148dcee47c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d50147-44c5-4a1a-b036-078cb29b1438", "sighting_of_ref": "indicator--abe1f622-82eb-4b14-bfe1-4f148dcee47c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a632a90c-decb-41af-9ad6-7407aca929ef", "sighting_of_ref": "indicator--4ea0326f-4729-4e75-9c74-0f6d65b9f063", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccd42f7-bd00-47d3-bf07-1cb58235e2e5", "sighting_of_ref": "indicator--4ea0326f-4729-4e75-9c74-0f6d65b9f063", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be82cff6-5a23-4c97-9dfc-5a71c1148e58", "sighting_of_ref": "indicator--434220b3-3af5-4a34-8722-746ec9b92091", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49f854b-52e6-4c09-81e7-dc515ee1561a", "sighting_of_ref": "indicator--434220b3-3af5-4a34-8722-746ec9b92091", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1819c9-e08b-4f10-912c-525eee612eca", "sighting_of_ref": "indicator--434220b3-3af5-4a34-8722-746ec9b92091", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d21123-9fb2-4147-a9d9-80ecf64174ee", "sighting_of_ref": "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d15b48e-37a5-4f65-8910-c5aa6a365677", "sighting_of_ref": "indicator--39ec68d3-2877-4f6d-803f-02443b327a59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a015f1ef-b3af-4d0d-a07c-9756bcf275f3", "sighting_of_ref": "indicator--a1719373-c76d-4a85-80d1-6df8884b4ca7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce7f60e-567b-49a3-afc2-edf43ddd6bd5", "sighting_of_ref": "indicator--a1719373-c76d-4a85-80d1-6df8884b4ca7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11401d6b-d15c-42f7-94a5-6adddfca10fb", "sighting_of_ref": "indicator--48c0c288-df4a-45da-adaa-20cb930d437c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77900295-61f6-466f-9a2a-807338633bb7", "sighting_of_ref": "indicator--d8674d71-9cb1-4029-9d64-59e0a0cd70ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c0a90b-a95a-4c4a-a963-0439cabf9b7e", "sighting_of_ref": "indicator--431e9ac5-cabc-47c8-b0f7-d74a41ad970b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fe60e2-0031-4e3b-8346-a3d5c9a080c6", "sighting_of_ref": "indicator--4c7abdd3-a69a-4cd1-9b47-53b6fefbab96", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb9974b-3f9c-4e7f-9588-662b6bc2c98d", "sighting_of_ref": "indicator--239f5b37-d281-4828-afe9-13b6dd6b84c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eec6bb-3c56-4e0f-9210-5f2873f32fa0", "sighting_of_ref": "indicator--00a44e22-2531-4a5d-a13b-3d9e9be304bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c3fc9d-af0e-4421-856e-a4839b1ad5d8", "sighting_of_ref": "indicator--c0780046-e556-4149-b389-eb24ffd0b50f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549d73ef-3507-40c2-bcf3-026cc9eea32b", "sighting_of_ref": "indicator--c0780046-e556-4149-b389-eb24ffd0b50f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00a6064-f509-4171-a4b9-09864664baa1", "sighting_of_ref": "indicator--c0780046-e556-4149-b389-eb24ffd0b50f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4122b7-3b58-40d5-818d-373fdab414ce", "sighting_of_ref": "indicator--1ef8571d-5e56-4a66-8d91-aa879d12fc2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56d874e-c703-4164-b050-0bc2580f93c7", "sighting_of_ref": "indicator--1ef8571d-5e56-4a66-8d91-aa879d12fc2b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7843417f-6c1a-4cb1-aaac-91c8cca2d2ac", "sighting_of_ref": "indicator--46dfd803-ec7d-4121-acd2-a1de1e2d0103", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f07488-133b-416a-99fb-a466e5adac47", "sighting_of_ref": "indicator--55d0999a-71c1-44d1-a0f8-82d6e728f3cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67140e85-f054-45d8-96e8-d0b1007ffd5c", "sighting_of_ref": "indicator--80723781-a69a-436c-bd8a-689a2d3148f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3098a189-2d64-4b8f-a27d-96b7d9b7be3f", "sighting_of_ref": "indicator--cf4f639a-3a68-4695-8e80-2a5edf972a0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cabf07e-fb5c-4834-981c-e94e05817b84", "sighting_of_ref": "indicator--3cfbc52f-66d8-47bc-918a-7d204e39d9ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69efef4-7cc4-4824-a216-2afd958a0283", "sighting_of_ref": "indicator--8046d93d-2782-43a4-8bc9-f874425069c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5e5a5d-facd-468c-80fb-ad2507c652e1", "sighting_of_ref": "indicator--6c2d02f1-276a-442a-a1b7-7c408d74dbbd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0f8da0-9d47-4631-9217-5ea9ca778053", "sighting_of_ref": "indicator--2b22305c-8767-492f-8553-0f3dfc8d0327", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49596184-d714-46f3-866f-0cad9bf6bbfd", "sighting_of_ref": "indicator--36200cd1-a862-4820-9a8c-3c842469c618", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9879b74-da00-420d-9cda-e6a4ae369ce1", "sighting_of_ref": "indicator--def754f9-df97-4967-a622-2fab3fc9c4e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6daad5c-d79a-4e35-a5d2-a958b0c695c3", "sighting_of_ref": "indicator--def754f9-df97-4967-a622-2fab3fc9c4e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9d7431-e841-4f2e-8a21-58e0487f1e30", "sighting_of_ref": "indicator--ce421bfe-da4c-49d5-8dee-6800bd438337", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a29e5a-a1d7-4714-9ee9-bc337943a129", "sighting_of_ref": "indicator--d094c400-57f0-419a-881d-fbccdbb6559a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7386f29e-2a0f-4578-be07-fe96ab6f5ac6", "sighting_of_ref": "indicator--7f9a5814-48ce-4c23-bcbc-64a8396935a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfa6a34-dfa5-4667-813a-d183465ff13d", "sighting_of_ref": "indicator--e26a316c-0de9-4077-8e95-4ad989ce7808", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbf1014-8bac-4faf-a6d3-d5e7215fcca7", "sighting_of_ref": "indicator--2e81dfeb-92c2-48d2-934e-353b8a769cf3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0ed05e-4b86-4357-958b-ad4fe9424081", "sighting_of_ref": "indicator--08eff965-08d1-4614-b0be-71b7d74f52ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a63811-19d1-4104-aeb7-374e2b325b4d", "sighting_of_ref": "indicator--878b9bd6-b6b4-46cf-871e-e26abafad10b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b41bbaf-ca5f-4ac0-af51-f13969b328f8", "sighting_of_ref": "indicator--9b2e569f-6578-4bc4-b3b2-17bc8fa6d822", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb542acf-0663-4887-94c0-1170824f9829", "sighting_of_ref": "indicator--b4b3a933-6340-47ef-b953-7e1922ae2fcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0735e1-f4ed-4d1a-b466-57e34bfc3410", "sighting_of_ref": "indicator--47cc6dc7-992e-42ac-bb54-37414bc318d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e513864-8cf6-4f2b-84f5-ec1d60d5cbd4", "sighting_of_ref": "indicator--70fbbe25-8163-4afc-973e-82e33f75bb8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b9b94c-cacf-44e7-a750-f18ec28d403f", "sighting_of_ref": "indicator--70fbbe25-8163-4afc-973e-82e33f75bb8d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c55195f-9f12-45f6-b1ef-faa893c697ba", "sighting_of_ref": "indicator--62346125-95db-4c75-a386-a04b72c2dd28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a0eb69-5d8d-410c-a8ba-5b55aed9fd12", "sighting_of_ref": "indicator--a389ebe4-4d5d-409d-beda-47ab0b6bec2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29945ee7-a188-48ca-906b-ffcbb15ed9eb", "sighting_of_ref": "indicator--5d7c2c8a-6b92-4485-88c0-41b8496c5897", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedb4d0c-2fa3-48cd-9526-2c28c04323ff", "sighting_of_ref": "indicator--8ab55d44-c864-4ad7-b80f-cb4b7f311b0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5003628e-a22f-4288-b2bc-f9f18a6b451b", "sighting_of_ref": "indicator--fa736a24-3bb9-4a78-9b8e-4153779c9234", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceef44f-8b15-4d60-b520-34231aac328b", "sighting_of_ref": "indicator--fa736a24-3bb9-4a78-9b8e-4153779c9234", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f8a3d3-b500-467c-90c0-e94cc4bb68f6", "sighting_of_ref": "indicator--39ea335a-7759-433a-8dc8-80ed93f7263c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3da4d7-a2d6-4563-bbca-d195dd285115", "sighting_of_ref": "indicator--f626c6e3-3fa9-46b6-a62d-f257080a34be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1350868c-3c86-4127-995b-265235451dbb", "sighting_of_ref": "indicator--923a370e-18ff-45cd-8045-4c1a821afc30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589f4c7c-886b-4c4e-bc58-a2fed194fc8e", "sighting_of_ref": "indicator--5c2c3df9-0cd8-4d66-a4d0-e76ba0d7b305", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79354a5-4ee4-45c9-aa20-713b0722437a", "sighting_of_ref": "indicator--5c2c3df9-0cd8-4d66-a4d0-e76ba0d7b305", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c58ae96-e2bd-4f34-9edb-8d5059d73182", "sighting_of_ref": "indicator--5c2c3df9-0cd8-4d66-a4d0-e76ba0d7b305", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1540b77-a22f-4b59-aa3d-571520f26139", "sighting_of_ref": "indicator--2fc9c6b3-33c4-49fe-84b8-3f7389bfed7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da5a09c-0406-4a7f-bc6a-cfe0c15dcee3", "sighting_of_ref": "indicator--1551e484-57bd-4e6b-a442-f93c2c36ab2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfa2b7d-f7a6-4440-9593-44068c9d090e", "sighting_of_ref": "indicator--1551e484-57bd-4e6b-a442-f93c2c36ab2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65149aa6-8ae4-4299-b934-f4d3f4146174", "sighting_of_ref": "indicator--1551e484-57bd-4e6b-a442-f93c2c36ab2c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b248032e-4dd5-4cef-a5e9-40e3254f2e78", "sighting_of_ref": "indicator--106767e7-b245-4930-be02-0664b6ac0e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b32281f-6a50-4a5a-8109-b154fc4e4b94", "sighting_of_ref": "indicator--a9bf5dee-394a-4b88-9b24-88947025d066", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c53719-2a13-4a9f-8aa6-736efbcd5c7d", "sighting_of_ref": "indicator--759053c2-4a5d-4adc-abed-8180c84b88d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4c740e-4648-419c-b08b-d474be4e8cd5", "sighting_of_ref": "indicator--a5c09544-0a7c-4513-a7ab-9b760d992afe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241ee042-108a-452f-be24-6a260b684949", "sighting_of_ref": "indicator--9483e9cd-77b8-4652-a9b7-0a01bd894e40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a0a4b8-1ec6-4089-84a0-494aef4050a8", "sighting_of_ref": "indicator--7a41c6b7-dca3-4316-8bd9-f975be299bfd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cac8c2-3e1d-4626-8da0-72e6719cd6cf", "sighting_of_ref": "indicator--58ca4074-9708-4c6a-b2d6-09791658bc58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b901c7e2-fb6e-44f9-9c9d-66fce2eb3c39", "sighting_of_ref": "indicator--58ca4074-9708-4c6a-b2d6-09791658bc58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4f1320-c4a9-44e0-9102-39822b6cc746", "sighting_of_ref": "indicator--4f914ec4-5616-46d7-97e7-3cd1c027d2c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc91784f-3131-49cc-9316-2347589e496c", "sighting_of_ref": "indicator--aa16d31a-192c-426d-b63e-28697d31adab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4e3724-a762-402d-b038-f6e73c6cce4f", "sighting_of_ref": "indicator--62d955ac-b64d-44a1-8d60-079357fd5a62", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddce2206-6c59-4924-ad6f-8e4763a064f4", "sighting_of_ref": "indicator--de267f0b-33f5-4ee6-acd4-78508ef6b1c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5e1274-b880-4a83-a1e4-14d2dc15bf75", "sighting_of_ref": "indicator--ee1343ee-00cd-4bef-9499-c2c27aabaca2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d8c5db-5122-488d-a9a2-62ae57ac8873", "sighting_of_ref": "indicator--ee567e24-7d7d-413d-ac0e-d6bcd9eb74fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d1a8e7-8762-4b64-bbbb-f58011adc6ca", "sighting_of_ref": "indicator--18e2f985-5973-48b7-b699-9457ea132f41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a61a807-8203-4d77-bd67-4cb87ed078b0", "sighting_of_ref": "indicator--26b4c249-d91b-44a0-bde3-339b48c48549", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e9d417-0070-466d-a4f5-adb37db8af11", "sighting_of_ref": "indicator--b4d2d897-eabd-431d-84a6-7301673acd2b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cf98b7-e755-43b7-9e4c-3852dfc2dc67", "sighting_of_ref": "indicator--04ae3467-54d3-4067-979e-3edff0c98535", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae0bce-9083-45fa-b706-3a8e19d035d9", "sighting_of_ref": "indicator--04ae3467-54d3-4067-979e-3edff0c98535", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45791467-2e47-4f0b-8ee5-6e96bce7f737", "sighting_of_ref": "indicator--7d7b77bd-497f-4c8c-ad3a-c27eef60f488", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e5ecfd-8c1e-463b-9820-5aee6cad6d16", "sighting_of_ref": "indicator--e42f5c1a-3dfd-4c02-bd6a-273bce78c87f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45299ea7-8959-40b9-8617-ef0dd68d238b", "sighting_of_ref": "indicator--d1f4ad51-953b-4b2b-9bf5-619efde7d04a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8d8dc-d0fb-4c53-aab2-cba1efcfe219", "sighting_of_ref": "indicator--ee528a5d-43f9-489d-a39d-ed7f97ab1fe1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ae3991-2cb2-46bf-879f-894ebce5935a", "sighting_of_ref": "indicator--b60c8b9a-a603-4a57-9ddc-2d48011dd0b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241a0e78-d994-4779-8b12-f3ba12e57707", "sighting_of_ref": "indicator--5d4b7e03-0dde-4202-a286-1d3e0900a05d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3930f6-f864-433e-b48a-7b816722232f", "sighting_of_ref": "indicator--4e5bf55a-7f26-4278-af1c-678715657bc4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbfd180-d227-4957-80f0-3d6eb829ad77", "sighting_of_ref": "indicator--1b893225-c827-4b82-b65d-7680d97373ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4b76b7-d1d2-4fa3-9094-e96f4726d832", "sighting_of_ref": "indicator--d413fa03-645c-4479-acf1-0d289cbdf1db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c09abb-717e-415a-b339-3e059474501e", "sighting_of_ref": "indicator--187661b5-c144-48e4-b832-52ef06ba19b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebff443-1364-413f-86d8-568f4ed83a24", "sighting_of_ref": "indicator--2786fdb1-78a1-48f9-a69b-0ea21d0717f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650afb2-fb73-4853-b5df-15add729af94", "sighting_of_ref": "indicator--3cc27931-a9a7-4dba-b93c-a91ca92e417a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0c2d7b-fa23-4b98-b119-2f83685cd7ab", "sighting_of_ref": "indicator--815a1aae-25e7-48f1-95b1-e3092846c7da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b38e09-3e33-48be-9463-6e7c583c5cb7", "sighting_of_ref": "indicator--8f1848e6-7b0b-4a31-bbe9-d69eb1239282", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c3ca07-0e19-42d5-86c3-d9b20cd5dd56", "sighting_of_ref": "indicator--8f1848e6-7b0b-4a31-bbe9-d69eb1239282", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4349edb-81e6-4073-bf58-a5fe4afba006", "sighting_of_ref": "indicator--d7b187a5-3d2d-4457-8621-859722eb993b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c67d37d-c12a-4a41-b4da-e019927bcd98", "sighting_of_ref": "indicator--106af879-0ea2-43fe-97e7-b9f306d5a80c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542956fe-a59e-41dc-8412-40692cfbb0b4", "sighting_of_ref": "indicator--c1a34133-7c67-49e0-b72c-b92326c792b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff3a1c-2bab-4c47-816d-7c4cff2d3730", "sighting_of_ref": "indicator--fac289ac-de66-46bc-b170-4c9d693f74dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a860fb-eb70-45fd-bb0c-1d604cf2ab8e", "sighting_of_ref": "indicator--82de1fa9-f4ab-4ce1-8ed5-4389e75618fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c57edc-0569-479b-b39b-ebb0dd94cdc5", "sighting_of_ref": "indicator--87233d67-8d5a-4bdb-b124-0989628e54a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15fe405-451a-4573-b2b4-69bca9b26706", "sighting_of_ref": "indicator--e5e6335d-1c1d-41f1-910c-b69550ede05b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88e271e-384d-4a26-b308-c144ba52905b", "sighting_of_ref": "indicator--6e5ec365-5cd7-4eba-ae23-24ea2ec84052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3ae01f-a747-4eb3-9297-26545d42cda0", "sighting_of_ref": "indicator--dce06285-9a91-4334-b90c-9fdee937d4f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71551811-95df-4074-89d8-23c9fc755dc8", "sighting_of_ref": "indicator--fc02f665-935f-47cf-9f28-4a783e7ee40e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee718bd-4e15-462e-8569-645ec3ea9db5", "sighting_of_ref": "indicator--8af0c2bf-a3ce-4c93-a1b3-a0c8faff8ece", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c36fb5c-5444-4ed8-b1be-4f9fbd354359", "sighting_of_ref": "indicator--48d6943b-299b-4716-b37b-76320821eb97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc52485-f764-4e36-a630-62121cadb87e", "sighting_of_ref": "indicator--d380e880-e462-4537-b595-d8b536e41be5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a5971a-c431-4083-997e-98a0ed1169c4", "sighting_of_ref": "indicator--9828e357-8ff0-4b85-a08d-852b471ddc23", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eff682-a736-40e9-a1da-51edcf299b58", "sighting_of_ref": "indicator--9828e357-8ff0-4b85-a08d-852b471ddc23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae01de1-1e78-46c4-b328-551d8b6749a3", "sighting_of_ref": "indicator--9880e40a-e128-41dc-b0e6-3ebc1ca2ea77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a17a28b-85b3-4e28-b862-dac174f9ee40", "sighting_of_ref": "indicator--d57ed008-df2f-43b6-979c-1f645227e6af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b500f574-ceb1-41f9-a0c4-2e4496b2d9c8", "sighting_of_ref": "indicator--9f80d03b-50cd-4886-a749-4811fb8ffd9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ce1ed6-edec-4d03-b64c-8c94d3773341", "sighting_of_ref": "indicator--fe09e24f-e0dc-45f4-8b7e-117ed9d685b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa9e51d-ea3e-49f3-9413-fa80a7b39dca", "sighting_of_ref": "indicator--c16b25bb-49b0-44e0-8ac8-ff56770d91fd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083227f8-fe95-466a-a7cb-0c8d026f36af", "sighting_of_ref": "indicator--1463085a-4f68-4d8c-a1ad-0a289d990d99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607fd923-0de6-4168-be7a-34b01774865c", "sighting_of_ref": "indicator--e49d7236-3903-4ba0-b3c4-38c1dec940ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16276e6f-0c0c-4280-90fd-652415956ef0", "sighting_of_ref": "indicator--7d4587d0-2f2e-4e4f-bd5a-484a1b844361", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ac0f4c-b405-43a9-aa6d-bd37cbc8b23b", "sighting_of_ref": "indicator--2a516ffe-a31d-47a4-8c07-41c245b7e0ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e35553-a2ee-4775-9c74-b2d037dcc533", "sighting_of_ref": "indicator--f253eab2-25a7-4233-917a-af20eb45dcae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0221e59-a500-4eec-bbad-1bef87c14520", "sighting_of_ref": "indicator--f253eab2-25a7-4233-917a-af20eb45dcae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae64e894-3975-431e-b09b-3628e5b9dd37", "sighting_of_ref": "indicator--d46dac49-26f0-4317-8b89-a92901aa97e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becb5e38-6228-4ac7-8ad5-ab2eda5c5b12", "sighting_of_ref": "indicator--e95ec19a-2477-41a3-ab2a-62eb733f2dcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d460fef-5272-4ef3-bcd8-95dc2651dd9e", "sighting_of_ref": "indicator--55de53e0-d369-432e-b9a4-a77a62dc8876", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d66e16-8df5-4853-8d61-9b4433e8b455", "sighting_of_ref": "indicator--1353646e-efa5-4eaa-845a-5479fc4871bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112fc761-ddba-4912-9fe3-c70a74241822", "sighting_of_ref": "indicator--a0f4b747-0d55-4007-ba61-1097f834b24a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07af1cd-2229-4be5-927c-c01eacf4a7a6", "sighting_of_ref": "indicator--2ad20a97-6466-4125-9b48-bf305d4437a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074089c0-c83f-4849-8540-f4d9a88dfaf4", "sighting_of_ref": "indicator--a9525a60-7e36-416e-8485-de4294ada48a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cf5fbf-fdd4-4531-a7e4-a05d45b78655", "sighting_of_ref": "indicator--a9525a60-7e36-416e-8485-de4294ada48a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3695a7be-2df2-42d4-bf22-b3c204a472a1", "sighting_of_ref": "indicator--a3230f74-33b3-4745-8454-d577a0ec90de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beef217-ee02-44e5-aa1d-7cd63c37c9f3", "sighting_of_ref": "indicator--0e6ac3f0-da19-468a-a859-6db9281d9ea6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece98873-dc01-43aa-a423-a05d7a49adb6", "sighting_of_ref": "indicator--5054f9ab-4e93-4f3c-a2ad-24b8aef562c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a208efa9-f89b-433e-8e25-2a180e842727", "sighting_of_ref": "indicator--a1d62e53-26e1-48a7-a699-ea3357f0e418", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42c64fa-9a65-4131-8357-36e68cb51818", "sighting_of_ref": "indicator--46098b62-2644-44aa-9d90-78881b137091", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e8c305-d2e2-448c-93fc-eb38f7cab355", "sighting_of_ref": "indicator--4322a3a2-0612-47d8-ae44-c89e27b044c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f6e58c-ffe6-417a-ba2b-46960aeedc8d", "sighting_of_ref": "indicator--98e3e98a-46a8-4fe5-99f2-3371fb272856", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e34397c-720d-4d70-8942-ba47844e775d", "sighting_of_ref": "indicator--74060373-c7a5-4c02-80a5-64d9c2a4d4cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7b96d7-e94c-4fa6-9824-873425d0489c", "sighting_of_ref": "indicator--010122f0-1448-4f87-a830-fefb429cd7b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a856b32d-971a-4b33-863b-3d3469c3f861", "sighting_of_ref": "indicator--11fb97d3-c83e-44f3-9b86-6cce0ee28e94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbcb957-d52c-449b-967f-93582c6739e2", "sighting_of_ref": "indicator--49d0b7f8-946c-4d60-8cec-2eb6ef480341", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11863b5a-bfbb-4ed3-b82b-528a4a3f17c6", "sighting_of_ref": "indicator--761f455d-dfb9-44f6-8c4e-eb61d03822aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aba9209-1f81-406d-bb49-fffa95bc2e3e", "sighting_of_ref": "indicator--0fbddd52-9444-4223-973a-17b4345426ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380cd1a7-29cb-4bde-a334-7d686b2dafe0", "sighting_of_ref": "indicator--0fbddd52-9444-4223-973a-17b4345426ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8082b-2acf-40a8-a5e9-deb3bb5b0c8e", "sighting_of_ref": "indicator--98099356-9c51-4e66-855a-49ac7196f606", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72436c-c3fb-4328-9932-f87047cd8d08", "sighting_of_ref": "indicator--519ab50f-5380-432f-84ef-86d0fc4524a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3e7b77-e0ad-4834-8f27-8f5fcbc66921", "sighting_of_ref": "indicator--72f528c1-bf7e-415f-8a62-719917d31ec2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962fe386-95c6-4e83-9525-368dc81f2ac3", "sighting_of_ref": "indicator--72f528c1-bf7e-415f-8a62-719917d31ec2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f808567-44c5-4b65-b846-b39d89b4e5f3", "sighting_of_ref": "indicator--7b1b467a-9e91-42ad-b467-7f8860a53bc2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b69a8d2-c12c-408b-a12d-37be37aac12e", "sighting_of_ref": "indicator--f9b38336-f6c8-44f4-aa62-3e55570b5308", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b033a2-6f7e-44c7-b601-11b422720109", "sighting_of_ref": "indicator--ed3182b1-4234-4bec-abe1-1a88f019749c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f32bc6-98f9-4d8d-86d8-cf908a8e81b5", "sighting_of_ref": "indicator--d89de064-8c52-4018-ad9a-f61702c0a605", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213bdacf-693f-4ed3-8efa-c4cbf93809e1", "sighting_of_ref": "indicator--625c7c7f-a78e-4d29-b6f0-a1e730cbb9e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ee27ec-ad70-418e-ae97-ee2c5c33a568", "sighting_of_ref": "indicator--625c7c7f-a78e-4d29-b6f0-a1e730cbb9e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca07f689-c2cb-4286-a003-32cca99e9506", "sighting_of_ref": "indicator--becc3a21-a87e-489a-b7e0-5d38a4b99db1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff33cb2d-2688-4dd3-a7ef-e796ea946fef", "sighting_of_ref": "indicator--9464e98f-36d0-490e-a532-c810e661202c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b651ae4-f1d5-4485-b282-b97221d66174", "sighting_of_ref": "indicator--376463ff-a166-488d-aa97-01ed0092df4a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd56fa-e1e1-4080-b52a-ef4b640eb868", "sighting_of_ref": "indicator--376463ff-a166-488d-aa97-01ed0092df4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635dae2a-9fc5-45f5-a1ac-17b8b5c3e45c", "sighting_of_ref": "indicator--0697bdd8-9440-49eb-b661-156055faa834", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de213719-2003-435d-992b-5206256799a2", "sighting_of_ref": "indicator--0697bdd8-9440-49eb-b661-156055faa834", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b205a497-81ab-4a3e-9914-0d173811efc5", "sighting_of_ref": "indicator--2c9702d1-d5ed-4e10-888d-4a35721d2016", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c0044e-3ef1-4846-995d-67d628760b2a", "sighting_of_ref": "indicator--2c9702d1-d5ed-4e10-888d-4a35721d2016", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6586390-8682-4b3d-ba29-ffed8ecba5e0", "sighting_of_ref": "indicator--2c9702d1-d5ed-4e10-888d-4a35721d2016", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1595fe-68c7-48b8-b446-51177f8d4d70", "sighting_of_ref": "indicator--4d228d3d-6499-42ef-9ec0-c7834230988d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f8d8f9-a3b0-4e1f-9fe2-f982a69258d8", "sighting_of_ref": "indicator--4d228d3d-6499-42ef-9ec0-c7834230988d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d924cf-4603-4ad1-8c94-614740fdf92b", "sighting_of_ref": "indicator--08a99912-fa77-4868-b241-0da172a96447", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ba3a05-1b98-47e8-860f-163de0adc236", "sighting_of_ref": "indicator--0832b12a-fb47-4aff-a291-9f56e7d04a7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00767901-52b7-460e-8f8b-ab6b8884b852", "sighting_of_ref": "indicator--0832b12a-fb47-4aff-a291-9f56e7d04a7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c525f1-d2ed-4049-a9cb-b381c95dfc57", "sighting_of_ref": "indicator--a382d0f0-0232-41da-a8b3-9bbf2a07e795", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6cc77a-7979-4d6c-a145-46f0d4ce8bdb", "sighting_of_ref": "indicator--a382d0f0-0232-41da-a8b3-9bbf2a07e795", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b920cb6-3693-4ecc-a381-296b6f08ec4f", "sighting_of_ref": "indicator--a382d0f0-0232-41da-a8b3-9bbf2a07e795", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11317a3-7b83-4a78-8ccd-611d1901c470", "sighting_of_ref": "indicator--f5f2c907-9699-4c1d-8350-4a9d93918e43", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afb77f6-ccb7-4434-861d-45040d41fabe", "sighting_of_ref": "indicator--334723c3-5289-4c86-ac5c-0d5f32afd1f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313d38c8-cf4b-4496-859e-a694021c9022", "sighting_of_ref": "indicator--334723c3-5289-4c86-ac5c-0d5f32afd1f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bfe681-c868-4352-9e3c-8462e65d95a9", "sighting_of_ref": "indicator--334723c3-5289-4c86-ac5c-0d5f32afd1f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3275ed-9a5d-4f34-a678-977f4b4fd591", "sighting_of_ref": "indicator--3c6fc27d-7575-4fd1-a52c-0f8be97f106e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0390052-6b1a-4299-baed-5048a5b847d5", "sighting_of_ref": "indicator--0f8721f5-f32e-481c-99a8-4c83daa1a83b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99f3755-ecac-49d3-adf0-99a55f3c7398", "sighting_of_ref": "indicator--d769993e-eeea-49fc-9356-af447347bcd5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98228e2b-d52a-4252-86bc-72524dd2b3d3", "sighting_of_ref": "indicator--c49350b3-02b0-4741-bec5-43ac36a5ecb2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7ef7a2-ef71-463a-9c47-1bed91878b84", "sighting_of_ref": "indicator--c49350b3-02b0-4741-bec5-43ac36a5ecb2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c5f2b8-e52c-40e2-9bb8-97f0a8fa7446", "sighting_of_ref": "indicator--07b0bb6d-e457-4ca2-befa-abd6df4dc89c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7961f4cd-c76a-44fc-b6ab-44dd0747eb30", "sighting_of_ref": "indicator--880f3e2f-dcef-4d6e-bc72-8df8e8bf2894", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f0e891-de45-429b-be41-264ff3ee479b", "sighting_of_ref": "indicator--b97eb51e-d823-40e8-8c2d-27f569202ab5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3835023-1f54-4935-9347-3082815aa15a", "sighting_of_ref": "indicator--ab4f4da1-bf6f-4457-9e01-84ce32b06892", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f879e05e-7bde-4326-9b59-7ddb67346b15", "sighting_of_ref": "indicator--6ca47f88-cf8b-4f39-9313-f4fe4718a121", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c94f64c-4ef3-42a7-88b9-b806c018021d", "sighting_of_ref": "indicator--568a353e-9e31-4a3e-9ebb-240c3c8297a0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d8f108-5c97-4f7c-93c5-ced611029f26", "sighting_of_ref": "indicator--a25e2952-1a92-4727-88a8-3944968dfc0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca361704-a892-4392-a503-b12a2d25d5fb", "sighting_of_ref": "indicator--35414945-748d-4910-97c8-4cf4b74e9570", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac82735c-38d1-4c8b-9409-b604f1907373", "sighting_of_ref": "indicator--e5bb8445-47b3-4c88-ad03-257f6d402129", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e3d90e-2bae-4ec5-98e8-9b02d25b3669", "sighting_of_ref": "indicator--26a54507-cfda-4e21-8269-5545aa7644f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50e5dc1-45d8-4d6c-95b8-a7e178fefd90", "sighting_of_ref": "indicator--26a54507-cfda-4e21-8269-5545aa7644f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254dacb4-5965-4100-8cca-38d808d8412d", "sighting_of_ref": "indicator--1a4ba2c5-4115-4acc-9899-ac92340d6d2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d53e76-2b7c-466a-9c0b-c8a92188a864", "sighting_of_ref": "indicator--12e67e68-bbc0-44f6-90a1-d58592305d33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d377e09-dd8c-4037-b626-3ea43b09445e", "sighting_of_ref": "indicator--76aacc21-6427-4901-8104-dc120b46deaf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce913b8-dd3f-4515-9ba2-aca2cbd28fcc", "sighting_of_ref": "indicator--03d71c15-129c-4dc2-936f-dadbaf870ca4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a59e3b7-9ca6-4a0d-ab78-9eba91d175ea", "sighting_of_ref": "indicator--dc306ef1-118c-4e09-9c93-f74469c17f26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98063775-5c65-4592-80f5-4a1f6087c6e2", "sighting_of_ref": "indicator--8e9caf68-5b5d-4fd0-b093-17eec643220e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3230be-9631-4428-af9a-9174e5bd3490", "sighting_of_ref": "indicator--651bcdda-e886-48a5-8929-55b25fcb691b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de63f6f-8231-42db-bfa0-7b69dbae9267", "sighting_of_ref": "indicator--6c6aec78-2f35-4bc7-9fc0-74b860751dd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942b468d-0801-4ebf-acb2-93decc4a86c8", "sighting_of_ref": "indicator--a6b5ffaa-39f4-4948-b509-2483d36dfbbd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2050b24-875b-49e3-a7d8-be624ceac658", "sighting_of_ref": "indicator--93b66093-86a4-411e-84ab-3c3568e8a185", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf9b537-d734-43b6-9971-623a522541c6", "sighting_of_ref": "indicator--adeb9307-b230-4a3f-b0a5-86e291b28d7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ca4f33-a76e-4e41-9bf2-4bfcbaf90ac4", "sighting_of_ref": "indicator--63e8ce8c-e8df-4ca5-81f9-b451529b68ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a012c8a-e6b8-4f6d-bff8-4a3eaae7eb83", "sighting_of_ref": "indicator--f79a2019-2b23-4ac8-98c7-efa2da46991c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecabef2-adf1-4013-b21d-7233609a3b91", "sighting_of_ref": "indicator--f79a2019-2b23-4ac8-98c7-efa2da46991c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769bafae-8bc6-4c57-bbb6-4a82e377eb35", "sighting_of_ref": "indicator--f79a2019-2b23-4ac8-98c7-efa2da46991c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f873936-f118-4005-8890-8ba428937c06", "sighting_of_ref": "indicator--0ef73f8c-75ed-4723-81a8-dba2fdc23deb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1896ad74-899a-453c-8f4e-bc8968757c9b", "sighting_of_ref": "indicator--47cc7fb0-1361-4376-ac62-4b10e9f5818b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11c5f6a-92f2-46ba-8e92-dfeea922af84", "sighting_of_ref": "indicator--ee672767-a835-469b-98c0-f953da90211f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a854c727-7369-43be-9f95-94600d0e9db2", "sighting_of_ref": "indicator--ae41b726-d4d1-4d42-9425-a47005312909", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8b4001-0a77-4e33-aca3-c1d14ad1a524", "sighting_of_ref": "indicator--f84c1ccd-8807-41ba-bff0-489d4acae50c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d631a40-83b3-4c57-a91b-65eb43d03abe", "sighting_of_ref": "indicator--d00567b1-7e72-448c-bc25-cfa408b879f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca912f-6229-4cf1-89d3-b99f35bd7bcf", "sighting_of_ref": "indicator--b958cebe-b5bc-481f-a5bf-4d6a43671900", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b290c-7f9d-4fb6-b5f4-755891da1bbf", "sighting_of_ref": "indicator--6cd98b86-750a-4e46-a51b-eb49ededa621", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c60d56-002e-4409-a0a8-e24f2ac44d30", "sighting_of_ref": "indicator--4bf63dda-6387-4bae-94eb-f23ca7aff377", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85be2b20-a852-44a8-a404-4ce503080bba", "sighting_of_ref": "indicator--4bf63dda-6387-4bae-94eb-f23ca7aff377", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725640e3-02b8-49fc-9dde-2cf22436f08c", "sighting_of_ref": "indicator--2abe2f6a-1122-49b5-b4c1-d187ffd3cbbe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca37a91-4404-49b7-aaf3-106676c2d5b3", "sighting_of_ref": "indicator--1452cad0-3bb8-45d9-8eff-19bf572bb0a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c520fdf9-fba3-4d70-acd1-a16e266d0b6d", "sighting_of_ref": "indicator--11764d10-dc84-40e5-a32e-738f4a767533", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac1297d-35f4-404a-b51e-219372d4e45e", "sighting_of_ref": "indicator--9ffc4be2-0b22-4059-9469-6c8ba1595085", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f870c20-d0aa-4540-ba6c-79d2eb1ef800", "sighting_of_ref": "indicator--7e164e8b-4973-4be4-9e10-27827100811f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a62414-cfe2-494d-9d27-cf22ccf72390", "sighting_of_ref": "indicator--640c4195-bf3a-4510-be8d-977e98eeff5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9339104d-d0d5-444f-bba1-930ae944a99f", "sighting_of_ref": "indicator--640c4195-bf3a-4510-be8d-977e98eeff5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edf9902-ce46-4e0f-bf31-152628c31730", "sighting_of_ref": "indicator--7afc5c62-6594-41b3-8dc4-117775d005fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32757d53-ec2b-4ab0-a68a-013b9d5ff553", "sighting_of_ref": "indicator--d1023d5b-a874-4962-abee-74600f01607e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a05a79-9f25-47a6-a113-91933735220e", "sighting_of_ref": "indicator--74cae419-67e2-4a4c-b3d3-e1e27b5def53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5243c5b1-3d03-4839-89cc-fdecdcc77157", "sighting_of_ref": "indicator--ebbd1c27-7b4f-4b32-8f5e-5467bc613cf7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e64c039-869c-4ff2-855e-5debdbf6b8fc", "sighting_of_ref": "indicator--ebbd1c27-7b4f-4b32-8f5e-5467bc613cf7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8733f2-bcc3-43e9-a054-c6df237d137f", "sighting_of_ref": "indicator--f1a7fa81-159f-4f1e-9bdc-d58cd6e172c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbeebac-4443-4e53-a593-85bff34ccc36", "sighting_of_ref": "indicator--f1a7fa81-159f-4f1e-9bdc-d58cd6e172c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3634766a-2031-42c1-afd3-35c0888e2d60", "sighting_of_ref": "indicator--49a82201-3b29-4b32-8190-6622640a1a33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5172a71-4310-4c38-bf06-555db9581494", "sighting_of_ref": "indicator--49a82201-3b29-4b32-8190-6622640a1a33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb40700-b439-4a59-ab47-f360c7cf63f7", "sighting_of_ref": "indicator--d222ba8d-0d7f-40e7-aaa4-618f985c5464", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55928a6e-7707-43f5-8586-827e557741b5", "sighting_of_ref": "indicator--d222ba8d-0d7f-40e7-aaa4-618f985c5464", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d133c58-33f7-421c-a62c-a8bf2dc577a7", "sighting_of_ref": "indicator--4088d3d4-f112-4272-96b4-37b2724b7948", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9a81c4-65dd-4cf3-ad34-2475ffaeb91d", "sighting_of_ref": "indicator--e616bd1d-e8bb-4c06-b47c-51a4c38e6b35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02ed52e-ac81-429c-87e3-48928cdecee9", "sighting_of_ref": "indicator--abdfa70c-1bd6-4a71-af28-57228bbea595", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df538a6-1203-429c-ba1c-2ac2fb78dbb1", "sighting_of_ref": "indicator--abdfa70c-1bd6-4a71-af28-57228bbea595", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c53894-820a-4cf4-8f83-de2188b77d39", "sighting_of_ref": "indicator--9451db74-f8d2-4711-80b7-c7849858d3a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74ae222-e743-4d65-89cd-a4788dd8efbe", "sighting_of_ref": "indicator--82899685-6942-4d22-b84c-4d7acdc39461", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037d81f2-7681-4fd6-9f42-d8a3c4574f3f", "sighting_of_ref": "indicator--807b572b-a3b9-4300-abf1-5447ca57f100", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef13275-31b3-42ca-9960-262659f573f2", "sighting_of_ref": "indicator--807b572b-a3b9-4300-abf1-5447ca57f100", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa21cf90-01a5-419d-9d1a-72b408efedbe", "sighting_of_ref": "indicator--c303fe0d-2017-4421-9958-c7b61154677a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a952f2e4-7db2-47db-9e5c-c896db33ee78", "sighting_of_ref": "indicator--c303fe0d-2017-4421-9958-c7b61154677a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0254da2-d1b2-4ec1-af12-1f2ad2eaba24", "sighting_of_ref": "indicator--ddc427d3-d7ea-4c41-b32f-1dcac679908f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503bf00f-e07c-4657-93e1-0345701f12ef", "sighting_of_ref": "indicator--ddc427d3-d7ea-4c41-b32f-1dcac679908f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f27a0-6907-4226-817a-ae815f80f893", "sighting_of_ref": "indicator--e14244fb-b9e6-47ff-ab85-548732ee52ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff365fe9-f932-4bf5-bdda-8be96f0a3a49", "sighting_of_ref": "indicator--f987d759-13ad-442f-8dd2-0beba6decb70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b320ef0e-c1aa-44f2-9cda-c45b9b2b8436", "sighting_of_ref": "indicator--cbe6b43b-f410-4b29-8438-56deb884118b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3420f43e-85a5-44df-b3a0-699469d44917", "sighting_of_ref": "indicator--cbe6b43b-f410-4b29-8438-56deb884118b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69387259-182e-432f-97ed-2ebe22a5fa6e", "sighting_of_ref": "indicator--9f1c5ad6-2da6-43a0-b14f-7447c99c4fa3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4ce4ef-3bd2-464d-b769-92b96334522b", "sighting_of_ref": "indicator--9f1c5ad6-2da6-43a0-b14f-7447c99c4fa3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67217834-1bf7-4bb6-bee8-251efb176a88", "sighting_of_ref": "indicator--5738abf3-3465-47c9-90b7-b69e4d2c9105", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bff486-bd2c-45c1-a5ef-248cdccdf172", "sighting_of_ref": "indicator--a313444b-a21b-4233-a11b-d6466735a57e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3048d179-ba9b-40b3-a3f3-65f80567dea2", "sighting_of_ref": "indicator--a313444b-a21b-4233-a11b-d6466735a57e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5f2b23-7fad-40ee-9758-41f486aaf1da", "sighting_of_ref": "indicator--a313444b-a21b-4233-a11b-d6466735a57e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97033b-80a2-4125-8dc8-63cfcb6d2e16", "sighting_of_ref": "indicator--b1ca8102-cced-42b7-a6e5-2ff43d1290e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c2e969-e6e0-406d-ad8e-e24c1b97cef3", "sighting_of_ref": "indicator--b1ca8102-cced-42b7-a6e5-2ff43d1290e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66e47ed-29bc-4e6b-8864-19bd6a25c728", "sighting_of_ref": "indicator--674f6288-973c-4689-b0f2-b8b0c867279e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d59c36-f9c4-422b-894a-2687049d8813", "sighting_of_ref": "indicator--2038197a-e5b5-4652-8937-74bc3c22a3e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a95c6a-9151-44e7-9025-2a29aae99a7a", "sighting_of_ref": "indicator--1183fd36-876a-45d8-8a5f-409ac3bc6f52", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd13a6e-8c59-4bd9-924a-efca22c59320", "sighting_of_ref": "indicator--24c10da7-691f-4f47-a248-a2b294cb7768", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ca706-923e-46d9-a15c-92086b8405a0", "sighting_of_ref": "indicator--24c10da7-691f-4f47-a248-a2b294cb7768", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e52c638-890f-44cc-a4ba-dbb47f7a4578", "sighting_of_ref": "indicator--2878d41a-0b56-488b-9a2e-0583779c453e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7367a3-47ac-427e-b035-446bb594737e", "sighting_of_ref": "indicator--d58ede1c-474c-4188-ab62-e661e30e2d91", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21f60b8-f6c5-413b-b6c4-0b050a3829fe", "sighting_of_ref": "indicator--55a1726d-ef02-4da3-ba06-07a8891d53b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9802ebea-f286-49de-acf2-daf69fded7b5", "sighting_of_ref": "indicator--0c109677-248d-4c98-9358-f0f311fb55fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567591d4-7b43-42a3-a190-44b92f9a3b21", "sighting_of_ref": "indicator--0c109677-248d-4c98-9358-f0f311fb55fb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0060bed-85d8-4cca-b250-1f92090ba7f2", "sighting_of_ref": "indicator--818ccaa6-f349-4c25-add1-cbe414624b33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7edff5d-93f0-4833-a42b-5f8273fdbd49", "sighting_of_ref": "indicator--818ccaa6-f349-4c25-add1-cbe414624b33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc58350-fc49-4ed2-9668-425bf58d5adc", "sighting_of_ref": "indicator--75fd36df-c4d3-423d-ba84-526b76eb16ac", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e6e78f-414e-4612-be13-42d4fd33c664", "sighting_of_ref": "indicator--75fd36df-c4d3-423d-ba84-526b76eb16ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4463e62-57b6-44b4-8edc-c654f0d9ec9d", "sighting_of_ref": "indicator--4c0d13f5-c494-4cc5-b0f6-397775e6f42d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb3cca-8cdb-4379-8ed6-f1834d2b0182", "sighting_of_ref": "indicator--4c0d13f5-c494-4cc5-b0f6-397775e6f42d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43ab5f3-07d4-4ef4-8469-0e96232c72a4", "sighting_of_ref": "indicator--f8d97e08-dfe8-41c3-bea6-96baf9e400b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370fc91d-4792-4682-88fa-724b7886f589", "sighting_of_ref": "indicator--f8d97e08-dfe8-41c3-bea6-96baf9e400b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c9f80f-8923-4623-ba78-29bc3ba00e15", "sighting_of_ref": "indicator--1e5a4974-9322-4001-b1ff-691187da3484", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ce757c-ac4a-4423-99e6-bf54251f4740", "sighting_of_ref": "indicator--2b00f950-862b-4f62-94cc-5eb1e38c6389", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eecfd36-fb04-4b92-b429-3c862b31ef53", "sighting_of_ref": "indicator--2b00f950-862b-4f62-94cc-5eb1e38c6389", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9304fbbe-9478-4898-873a-754784215075", "sighting_of_ref": "indicator--8afee2ac-5f2b-4fd4-8dda-d8b784b83ac1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ce572d-51cf-47fe-9565-198252b157bf", "sighting_of_ref": "indicator--8afee2ac-5f2b-4fd4-8dda-d8b784b83ac1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55248b7a-c4a9-4069-8bd3-a3d6d4537ff7", "sighting_of_ref": "indicator--41f7ef3e-02b1-44df-8d73-4be7fdc55b50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9e2973-73b3-4490-b8b5-218303f2eb69", "sighting_of_ref": "indicator--41f7ef3e-02b1-44df-8d73-4be7fdc55b50", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca1944f-1c1a-45fc-baf0-84d571b7c863", "sighting_of_ref": "indicator--fedfcb6f-0a91-430a-855e-fb38a7b8e782", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48ac21-965a-414c-9c66-a5268e02fd27", "sighting_of_ref": "indicator--bc5119c3-0ee4-404e-b854-f8b0085c15ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ebaad0-c789-442f-ae30-e35a6d726934", "sighting_of_ref": "indicator--344df48a-41a9-4ba2-a752-187dab3afa84", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d0fbdf-cc90-4c05-a473-bfa46fd9d23e", "sighting_of_ref": "indicator--cd98b573-e55f-41d1-89f5-235bd555912e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babe8fd3-de38-422d-8166-1c08e3bbe1cf", "sighting_of_ref": "indicator--7b6ff8ae-5a83-4565-a5df-6375da025ce7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704c7a7-5bc4-4875-aae4-7486ed629399", "sighting_of_ref": "indicator--f3c0fdb7-f43c-4dc9-b9d1-5e19bfa982cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7980c5-95bb-43d3-9c41-8ee0568e5ab6", "sighting_of_ref": "indicator--6ce624cb-5d1f-4496-819b-2d78e7576201", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891a213d-1f0e-436d-b840-78a1798e6d7a", "sighting_of_ref": "indicator--6ce624cb-5d1f-4496-819b-2d78e7576201", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48b9d35-cfe6-437b-ac0d-0a89e4a700eb", "sighting_of_ref": "indicator--88beb675-5c6d-40a9-9522-9bafc7b4d14a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d60311d-53f4-4c62-a3ff-17b76569031e", "sighting_of_ref": "indicator--9b08c32b-5ba6-4f80-aa83-153397c876e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed110bd-b2cd-4d60-916e-f8821db15208", "sighting_of_ref": "indicator--a4c83a79-c512-4f9e-94b4-e6337a0deba0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0144c0-503a-4f64-a0c3-6709893c5685", "sighting_of_ref": "indicator--a4c83a79-c512-4f9e-94b4-e6337a0deba0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ac9f7f-f524-447b-afa4-7c27a8380557", "sighting_of_ref": "indicator--0b63c7bb-b54b-4033-a426-c0aac22a6d65", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c017de33-f7da-49cf-b411-18e8ab386364", "sighting_of_ref": "indicator--66b3fe41-994d-4576-8115-c2c483ce54b2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873384d8-51f4-466e-9d32-32356a8a565f", "sighting_of_ref": "indicator--999b6125-c520-4ffa-b630-20ecdd83ec33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e57c0f-ca00-45c0-8597-484f30073171", "sighting_of_ref": "indicator--999b6125-c520-4ffa-b630-20ecdd83ec33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513532e0-619a-4abd-a463-e36d5ae00566", "sighting_of_ref": "indicator--2d97892c-7f67-4485-b6a8-9e2bc02f136c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6741aa-42db-4c3c-9991-58c632a4f64a", "sighting_of_ref": "indicator--2d97892c-7f67-4485-b6a8-9e2bc02f136c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c079c5-3e7b-45f1-9fe7-30a67929fad2", "sighting_of_ref": "indicator--480babc4-9fa8-4085-894c-8241407283f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6aaa99-1205-456e-a2ae-237590970ce2", "sighting_of_ref": "indicator--480babc4-9fa8-4085-894c-8241407283f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf2e65b-ff73-4376-8227-977bf6fac51f", "sighting_of_ref": "indicator--4766faaa-c06f-409d-a7b0-64010c2a5c44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40798c3b-9a8b-4a8a-b9c7-d1e1640dcb17", "sighting_of_ref": "indicator--e91413ce-e858-4a61-ad84-ff11f8c663c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfdd28e-305b-422c-b125-b218630f6a5b", "sighting_of_ref": "indicator--984fed7f-9f76-4986-9b57-bd02a1652da0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f70a128-9f95-4492-9e62-b965381a41dc", "sighting_of_ref": "indicator--984fed7f-9f76-4986-9b57-bd02a1652da0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a962f1b4-c719-47db-a616-3d1891fedda0", "sighting_of_ref": "indicator--367ebeb4-128c-4977-9d47-83d9a8afec65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478bc54-fd1a-417e-bf6f-d31e49f56206", "sighting_of_ref": "indicator--ec56ecbb-f44c-408b-873d-ea7e33cd408e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fa2b37-b732-4840-ac5f-99c8737fa8fe", "sighting_of_ref": "indicator--a5ea7e94-0ae9-4f81-ad7d-c681325ea83b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae109470-099e-446f-ba45-2ad3f15e7e9b", "sighting_of_ref": "indicator--896ae882-6146-49de-9c30-f13b503d1146", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f5724b-5df2-436b-8e3e-0eb8a6286513", "sighting_of_ref": "indicator--55b02877-d29d-42ed-8752-31e962e66cff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ad7532-6c3d-4e62-83aa-c7a314fc9431", "sighting_of_ref": "indicator--f2fd96a9-eea0-44ad-8058-1f6756a773bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e4fcd2-0ab8-48f1-b93e-d48e302f53fe", "sighting_of_ref": "indicator--515edd3b-8bda-44dc-9d58-ecf67bfa465d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e02e4d-977a-4ae3-a26c-f4bfbea04192", "sighting_of_ref": "indicator--b02dbc2b-c209-4172-8130-9f328de6d151", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9f8237-5c5e-4ccf-9c07-2fe615a9f5e6", "sighting_of_ref": "indicator--baabc483-f79f-4937-a3d8-3a18c7746b94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0e0715-c4c9-4174-b155-525d57d29c23", "sighting_of_ref": "indicator--baabc483-f79f-4937-a3d8-3a18c7746b94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d64500-9483-4a85-ba41-367ab4fd1ed5", "sighting_of_ref": "indicator--ebcb131e-a59f-4e2a-bcbf-71833463a538", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51357657-48ea-4d93-98ef-5e161b03f95a", "sighting_of_ref": "indicator--f5661429-1579-450a-9839-fb0376555481", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d82a19-04b6-44c3-a4b2-93d91cb48fdc", "sighting_of_ref": "indicator--f5661429-1579-450a-9839-fb0376555481", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21e944c-c48b-4220-a7c2-f01949b8f82c", "sighting_of_ref": "indicator--4d7453fb-0902-4000-ac2d-c0bf1ec376ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f365f9-5cd0-4c45-99bf-b8861bc99d94", "sighting_of_ref": "indicator--6e807962-a8fc-41e1-8e96-19b4dc64c496", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a1169f-7f9b-4fe7-add1-5520e88c9c36", "sighting_of_ref": "indicator--95d00e1f-bf1c-448c-870f-8d81efabf5f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0fe230-6b22-4e31-bee1-9c5152126272", "sighting_of_ref": "indicator--95d00e1f-bf1c-448c-870f-8d81efabf5f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee1519f-284f-4085-bd96-f6dcdd118001", "sighting_of_ref": "indicator--f9f986ff-d6f7-4988-ac34-3b880c77406f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cd21de-4280-491f-a8b3-900fd9935cdf", "sighting_of_ref": "indicator--6488c95c-292b-44f9-a5c7-0ae0989daff8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6046d60-8cd7-4420-8078-a5c0012f45ad", "sighting_of_ref": "indicator--6488c95c-292b-44f9-a5c7-0ae0989daff8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c137536-eaef-4c75-bf5a-c3dd07779b3d", "sighting_of_ref": "indicator--ca2f5a68-a082-4eab-bec0-09dd2393cbf0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d2abc3-f08a-4ab1-91e9-d4897afaf9c9", "sighting_of_ref": "indicator--36e7f9e2-cd56-4724-93d7-8d8f952657ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9c3c13-49e5-49db-92c5-ecf97f1955b4", "sighting_of_ref": "indicator--36e7f9e2-cd56-4724-93d7-8d8f952657ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48022ee-4fe1-42b9-a47c-8d930c50a3fc", "sighting_of_ref": "indicator--4a3a3078-acea-4775-9d68-793464db061f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede44d37-91ca-43bb-87de-deed0353674b", "sighting_of_ref": "indicator--4a3a3078-acea-4775-9d68-793464db061f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6919a32b-11f0-4f33-9336-3a24b8eeabcb", "sighting_of_ref": "indicator--30a484a3-6b32-43d0-9d08-4c5924a2bf7f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3db6c28-9600-4a7d-bbdf-f7fbf4b17691", "sighting_of_ref": "indicator--30a484a3-6b32-43d0-9d08-4c5924a2bf7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332bd4b7-894a-47ad-ab30-0feb44958c93", "sighting_of_ref": "indicator--21985ee0-f757-4b3e-b974-03371f480980", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae97cda-49e8-456a-afb4-4e3f0deb9b83", "sighting_of_ref": "indicator--21985ee0-f757-4b3e-b974-03371f480980", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f21757-32da-49cb-abcd-c113d5264d71", "sighting_of_ref": "indicator--21985ee0-f757-4b3e-b974-03371f480980", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaae1a2-5721-4831-8dce-cb54218b297a", "sighting_of_ref": "indicator--75e41c25-452e-4818-92df-9d35e9f7e27c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a189fc47-d367-4999-bedb-8aa079977329", "sighting_of_ref": "indicator--75e41c25-452e-4818-92df-9d35e9f7e27c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaa3c1d-dbbc-41b6-9d7b-a6aaa4594bdf", "sighting_of_ref": "indicator--75e41c25-452e-4818-92df-9d35e9f7e27c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b567258-348f-4f11-bdb2-d011c96136b6", "sighting_of_ref": "indicator--75f7bc6e-be31-419d-a419-38d5e1cb308d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613aabf2-1e2e-484a-87df-280ebd414b58", "sighting_of_ref": "indicator--02522c20-41de-4d47-bc2c-4c59f219e1cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de89ebdb-891d-4e5e-962c-8cb5b9191cfd", "sighting_of_ref": "indicator--02522c20-41de-4d47-bc2c-4c59f219e1cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f2d553-ff70-4bd4-ab2c-6acdc911450a", "sighting_of_ref": "indicator--1ba5ce5b-3adb-4ac9-913e-663bd782a706", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b243b2-360b-4289-a501-ccf8f7bf5437", "sighting_of_ref": "indicator--1ba5ce5b-3adb-4ac9-913e-663bd782a706", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2a68c0-6e56-4ae4-9713-852b5c8a130b", "sighting_of_ref": "indicator--17e3f740-7ae2-47d5-a119-435bba9c5362", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d769f79-6a36-46ad-ada7-111329aae98f", "sighting_of_ref": "indicator--247b50d2-32f3-40cb-b26c-359ee9a85062", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f240bcba-1d7f-467e-8858-3141ea07ecd8", "sighting_of_ref": "indicator--032aabef-22d3-4dd1-9146-4dc6c133db7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b1f983-82c3-4e1d-ab17-2e1d90090137", "sighting_of_ref": "indicator--a363a08b-6863-4e7d-94b9-081ddb7b9327", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33417526-90aa-4aea-ad3a-f6019d309779", "sighting_of_ref": "indicator--a363a08b-6863-4e7d-94b9-081ddb7b9327", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8bc6be-a28c-4a69-b681-ee582bededc3", "sighting_of_ref": "indicator--70b63bcb-3ec2-4f5c-a804-ae618d50beda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed4ae09-62ae-4ff9-acb1-9e19700f0e87", "sighting_of_ref": "indicator--70b63bcb-3ec2-4f5c-a804-ae618d50beda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258cd0aa-5fc4-4a84-945f-8ee7a4996676", "sighting_of_ref": "indicator--7ac05bf9-a393-405b-9d36-ea5333bb00b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fa0bf7-e6e1-45c5-b28a-b52e7946f1a9", "sighting_of_ref": "indicator--bb7d7ce5-b88b-445a-bdda-1ed3bfc51a30", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8f6798-1750-4b34-a031-688e1df33c25", "sighting_of_ref": "indicator--bb7d7ce5-b88b-445a-bdda-1ed3bfc51a30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeb3ec9-2b83-4f48-867c-d4978ae6b5ad", "sighting_of_ref": "indicator--05659b57-3fe6-4c82-a010-8f145f7a7b5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919536e8-1f0d-4f0d-977e-d355c2a0aa5e", "sighting_of_ref": "indicator--05659b57-3fe6-4c82-a010-8f145f7a7b5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45b0fa2-8933-4900-b4ec-d63e5b4a995f", "sighting_of_ref": "indicator--a5f42640-013b-4a57-96bb-1c1a68edadb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfe6b68-6266-42a2-bf4d-bf2d399026d4", "sighting_of_ref": "indicator--a5f42640-013b-4a57-96bb-1c1a68edadb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64965709-4770-48cc-adbb-dedc4afb13e2", "sighting_of_ref": "indicator--fe86116b-b2da-4fd5-b683-697fc62bd1fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4033e115-051d-480b-a336-ae392564b00f", "sighting_of_ref": "indicator--e315ccc9-3e4f-450f-958f-0a3b768b6ba1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ed5985-4a62-4039-b557-5473e69cb7e8", "sighting_of_ref": "indicator--aa271aac-11f9-49d5-9612-98978cea3664", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89fe2cd-3722-4886-af03-ba89b2d82607", "sighting_of_ref": "indicator--8d4c1a1c-aac1-4d65-99a0-8681b6e037b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42c747c-db22-40f9-9f98-ac7897abd441", "sighting_of_ref": "indicator--8eac847e-959d-4830-8172-6ce2c93bd88a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c826cdc-7238-4da3-91fe-ea3801bb843a", "sighting_of_ref": "indicator--8eac847e-959d-4830-8172-6ce2c93bd88a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e51511-b5d9-4f40-b172-ae7cfc12d2b2", "sighting_of_ref": "indicator--997e70cc-0eaf-44d5-bbd9-6cc87a22c70b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca023c4-e8a7-4d1d-979c-ffd8ad4e3a48", "sighting_of_ref": "indicator--7985dca0-3b81-4405-b585-11a2236c9fdc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aa60f2-e832-4500-8032-b21ded45cd45", "sighting_of_ref": "indicator--7985dca0-3b81-4405-b585-11a2236c9fdc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be456abb-177b-4e8c-b38a-1b98f7962e1f", "sighting_of_ref": "indicator--7985dca0-3b81-4405-b585-11a2236c9fdc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b833042-40ba-454e-8ae3-3b0776d86131", "sighting_of_ref": "indicator--7872eb55-4b3b-41f4-8ee5-17ddfacd358e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92a620e-15d9-4db4-861e-c34be9ac9d36", "sighting_of_ref": "indicator--f5115882-1e28-4d0b-89f0-fb72a6cd020c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f13c79-3207-4b96-81da-6859a7df1910", "sighting_of_ref": "indicator--43227e58-0871-437c-8692-63d4a0c75df6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692c39ff-f888-4b38-8503-c5654fc9d435", "sighting_of_ref": "indicator--ec2681dd-f981-478b-94bb-e8d120d3493a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d42b1f-0cd6-4d11-a7d7-5c215f19a2c5", "sighting_of_ref": "indicator--f1ddc8cf-2846-4039-ba31-04351e85e716", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336e7c55-a16d-4dea-b9fc-14549012c24b", "sighting_of_ref": "indicator--51a9161b-dacf-4c08-9563-69d0247a1a8b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e784363f-611d-479d-8bd4-9222b6d5e568", "sighting_of_ref": "indicator--71f8b861-7de2-4d65-a144-098809f57496", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60521fc4-e4a1-4d8e-bf1c-567ef2062997", "sighting_of_ref": "indicator--b1a6bd88-5841-41d4-941a-4fade0a6a390", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b385f7-2b58-4779-b73f-88eb3a6d5c9c", "sighting_of_ref": "indicator--5b659812-52b2-463d-8113-70f8303f4415", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d17d1c2-9fb2-4f75-993e-9e03b91648a0", "sighting_of_ref": "indicator--62c648a9-1166-40dc-acc1-6eb730e3a938", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e20775-809c-4ee0-afaa-ff08c831f050", "sighting_of_ref": "indicator--ca2681e1-a53a-429a-b0d5-0e91592f5c2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d456f1d6-3ebc-4017-957e-56558ad77df9", "sighting_of_ref": "indicator--54baf9fd-a4c6-4f11-87a2-835c60f16c86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238865e2-d068-47cf-be46-ca9a121061b9", "sighting_of_ref": "indicator--baced607-a6c1-4e4a-a7a6-edf6f7509d33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9791236-7eb6-42b5-9191-5e6ce186a2d6", "sighting_of_ref": "indicator--bb793f95-1dd1-406a-ad08-bc02a43074bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7e2d38-935e-49b2-a531-d6336f5dc0d7", "sighting_of_ref": "indicator--2b36a037-2237-4449-998d-4098a28a8e88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dd2169-6d54-4e7e-8728-755e20e43a5e", "sighting_of_ref": "indicator--adfb46f1-693a-45d9-9abd-3bd2221cb680", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d11fe10-19fc-44e0-a21b-7c64b174de82", "sighting_of_ref": "indicator--adfb46f1-693a-45d9-9abd-3bd2221cb680", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad0e013-61e9-4688-9d70-a676150c89cc", "sighting_of_ref": "indicator--d52b8037-42b3-41ad-9198-2e6b72e05b50", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b500691-0402-4f00-964c-def7da741db3", "sighting_of_ref": "indicator--3deb2e8c-bb52-4215-aa35-e1bcd8a01011", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d68a1cf-36a2-4a79-8bf8-a5075758bed8", "sighting_of_ref": "indicator--273bf3ca-c9a1-4223-ac45-b0f1affdefec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266ebfbd-8df6-45d6-97b9-9820d8295fa7", "sighting_of_ref": "indicator--6917a8ca-cd9b-4378-97c4-865e3cc9f982", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e0f14-2eb3-4240-93a6-f2bef5d6b976", "sighting_of_ref": "indicator--3f5d5f55-b384-4ac6-890b-0afe8858643a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98de698-13d5-4092-81df-b8b31aad7fd6", "sighting_of_ref": "indicator--3f5d5f55-b384-4ac6-890b-0afe8858643a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8f45b8-69c8-4c34-87f8-fb333ec64ca2", "sighting_of_ref": "indicator--2ab3298c-37ca-45ec-a1dc-a41801678398", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eefce54-1ce5-4901-87c7-88a621b55140", "sighting_of_ref": "indicator--2ab3298c-37ca-45ec-a1dc-a41801678398", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f066950a-14b9-4039-a70b-beda1b3cf66f", "sighting_of_ref": "indicator--42c1a054-2394-4d38-a91c-33a94f4d5e12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a668c83-4868-4d2f-8629-6a051c9e524c", "sighting_of_ref": "indicator--7d8e76f1-2d15-44a4-b32d-ace624208370", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae31e40d-8881-4a0a-9e1b-a3cfaa0622c0", "sighting_of_ref": "indicator--1e1f4113-01e0-439b-9d0b-f294a85ce0f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b1883b-4a0a-4e03-a055-c0034abe6baa", "sighting_of_ref": "indicator--d6510ca1-029e-447f-b9ea-3619ae4d5c1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5201a51-8c08-46a8-b2bc-7d74b5af7900", "sighting_of_ref": "indicator--d6510ca1-029e-447f-b9ea-3619ae4d5c1f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac8ea73-b10a-43bd-b4fd-5eb5e3634fbb", "sighting_of_ref": "indicator--3728a933-0aa3-4057-98b3-1dc8ba5c9c0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd22a3a-ecfe-4bcb-b9e0-d7e87e7e10c5", "sighting_of_ref": "indicator--3728a933-0aa3-4057-98b3-1dc8ba5c9c0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a989d9e1-24ca-47e4-89bc-53d23b26e3a7", "sighting_of_ref": "indicator--07da4655-1c38-400f-99ba-f5e648c1f898", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b706c28-e43b-4bed-8417-e85e7a1a6929", "sighting_of_ref": "indicator--d0ebb737-e0cc-4ee9-92c0-e2f79970ef91", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b857e68-89d7-4e3c-b0d9-023e708d8779", "sighting_of_ref": "indicator--cd6c4be4-24c8-4cfb-9b8c-974205c7349c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d53dae-3b27-4727-a9a1-3857855328a4", "sighting_of_ref": "indicator--b0d33690-0d44-4107-b700-b00fff01b7ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb5d3bc-bd8f-4850-8009-31ed360ad27a", "sighting_of_ref": "indicator--689b9e2e-a291-4121-a867-2ff007080280", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d413d1b-26cd-4add-9f87-760262f336cd", "sighting_of_ref": "indicator--bdb9437b-ec7c-41d1-9f55-3763432e91cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be6e353-fd5e-4ece-be13-3f71cfb80c4e", "sighting_of_ref": "indicator--a1e48777-fbc5-4b2b-ab10-4622447b18db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909008da-70c7-413f-b174-b0475cbdcf24", "sighting_of_ref": "indicator--a1e48777-fbc5-4b2b-ab10-4622447b18db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81df3d1-9e2e-4b51-a332-ac824459ad8d", "sighting_of_ref": "indicator--2d379259-ffe9-4207-bd18-b6830a0fbc67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ab150e-98f1-435f-bd97-9064ffaa8959", "sighting_of_ref": "indicator--2d379259-ffe9-4207-bd18-b6830a0fbc67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4919d7-8e3f-444a-a2ed-b54881528ccf", "sighting_of_ref": "indicator--b3c4c6bf-6062-4a9e-92df-70bc560dd4b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae4760b-59a4-43ba-b1e5-7ed15ec77431", "sighting_of_ref": "indicator--b3c4c6bf-6062-4a9e-92df-70bc560dd4b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd7bcc8-819f-45f2-9c39-74575392e6d9", "sighting_of_ref": "indicator--df49e522-a040-4b8d-ba57-0361025c2f4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20676d7-8ab1-420a-ad46-4096fad7c143", "sighting_of_ref": "indicator--be6c659b-091a-4436-b463-47e546cf3e07", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e550d09-d552-43bb-aff9-262c88b64238", "sighting_of_ref": "indicator--be6c659b-091a-4436-b463-47e546cf3e07", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4873f6e-0c35-4d59-851a-93880b75a690", "sighting_of_ref": "indicator--8f932c19-e6e4-40d6-9118-f8b561db9853", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f6d7e8-82e1-4ba8-8ddf-debbd86fdfc7", "sighting_of_ref": "indicator--316bbb46-ddf6-4427-97ad-732a95b0123f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcbce85-108f-4f6c-ba20-60db9b3d903a", "sighting_of_ref": "indicator--2cec50c5-3993-49b3-9ede-99e50ee02bfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccbe0e2-aa6f-4d7e-a22b-cca786802125", "sighting_of_ref": "indicator--6425407d-7d3b-4db0-94a0-2a2930f6bd56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd308b47-a8cc-47b8-9d0c-ed516e6fa96e", "sighting_of_ref": "indicator--51278a69-2445-43bd-a453-52ae9a792c11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4fdc7c-13e7-4f29-99c7-6ea0f56a1228", "sighting_of_ref": "indicator--c6fb6b6d-6457-4943-8087-a1ad55a8b1fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512ce2d4-ba0d-4f23-89a2-ae6889867b7f", "sighting_of_ref": "indicator--27ec01f3-e371-4a2a-a0b0-b1d8b2861b5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd9fbdf-fac6-435c-b4bd-e37ff44794fb", "sighting_of_ref": "indicator--2963c21b-cd62-41c2-b60a-2e2362000de7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f40591c-569f-449a-876b-9112d10abd68", "sighting_of_ref": "indicator--4f39166e-f279-4e27-8fa1-7a55d6043eee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4589c22-0e12-4a5c-bbe8-a4fdc611b48f", "sighting_of_ref": "indicator--7d327807-346e-4944-ad8f-39b8043677cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b3cf66-4f0d-4582-9bfe-65923238a18c", "sighting_of_ref": "indicator--7d327807-346e-4944-ad8f-39b8043677cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b923e41f-4e70-4afa-8376-cda19d99b72b", "sighting_of_ref": "indicator--27749999-0a3e-4116-afc3-c9623aafdbb8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f1073-5ed3-48b6-9a58-9df6473d558c", "sighting_of_ref": "indicator--9f849a49-fbf6-4acc-8169-190ee9cd4abc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46761e9f-e0e8-4419-916d-10141ecd0d97", "sighting_of_ref": "indicator--e0fc3e2f-f4ba-415e-9950-261fe7236e40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141ae0f4-1d5c-463c-a5c2-418779faac11", "sighting_of_ref": "indicator--f8aea81c-6473-4492-9a91-b9e2cd9cd14b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d20a239-a223-414f-9efb-f6772c679f96", "sighting_of_ref": "indicator--7e8b0f82-ca2c-4a5b-9f3c-23037d820749", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4211e43-6634-4dda-a778-805d1f15ef31", "sighting_of_ref": "indicator--b00d5bcd-9c12-4878-a754-36accd2b12f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7324ffe-0808-4e14-af6d-f70ee4df42a9", "sighting_of_ref": "indicator--11ccd7bb-10a7-4543-8103-eeac70e50999", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bfc4fc-0de0-4b14-8e24-8dbd20adb842", "sighting_of_ref": "indicator--fffb1124-94fd-413f-8945-ae73dd0296ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6fff29-e6fa-4164-a68e-74df4e302e82", "sighting_of_ref": "indicator--d74f70e1-43ee-440c-9587-e6595e9046d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855d03ed-8e5c-4d6e-b50e-3fa7e4192083", "sighting_of_ref": "indicator--11c5d7e7-d161-4100-81e9-df7dcb5d5fb9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed81c62e-e8c0-4c58-8d9e-f48e509e8b9a", "sighting_of_ref": "indicator--11c5d7e7-d161-4100-81e9-df7dcb5d5fb9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16deefd2-2390-4cbf-89a0-f061a062272c", "sighting_of_ref": "indicator--ebed9302-7dfe-43f1-9add-bdc2a897ba11", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b274b717-d310-4d34-a7bf-7f0af4b90231", "sighting_of_ref": "indicator--32aaa2da-2385-476c-b514-fa8f25c2a215", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b69ec56-b5af-4012-aaa0-95847a6c57b0", "sighting_of_ref": "indicator--56fd3804-e2f1-47b9-b4e2-e85e72a17766", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2908cb15-6bcc-49f9-883d-e93605b2c796", "sighting_of_ref": "indicator--ded55e20-3d6d-40f5-83bc-fd2fea851ded", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e529a542-268f-4d50-a235-909993136519", "sighting_of_ref": "indicator--901edcda-4784-4a8c-88c0-862aab0a2a16", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda7ebc8-746f-4086-a6c8-c676b93385d9", "sighting_of_ref": "indicator--f3c08a0e-da1e-48f8-950d-906d2fa2ce3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718fc23a-baa9-4818-8853-95f7b7fc8a2d", "sighting_of_ref": "indicator--f3c08a0e-da1e-48f8-950d-906d2fa2ce3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3f7cfa-3424-40f5-9933-f6579bc17e55", "sighting_of_ref": "indicator--f640373f-3a12-4933-ad49-707fbce873a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcabc61-abae-4365-b822-00d1aebee5e4", "sighting_of_ref": "indicator--301a15ad-eb66-4fc1-bb55-83145ed6ecd8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c8f4b-9242-493e-af97-bb89c8c7eb6b", "sighting_of_ref": "indicator--02b67a47-2476-4dcb-8b31-c0de249eedd6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e29c6e-e325-40e3-9df5-84a147121804", "sighting_of_ref": "indicator--7332e2ac-c656-48ab-bcb8-7a4e5b315dba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fc7fb8-2297-401e-92b4-9541bb9205d7", "sighting_of_ref": "indicator--74f9abbc-6580-4b0b-b78b-a416362047e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef63902-b77b-4e84-b1df-b0757e99ff24", "sighting_of_ref": "indicator--74f9abbc-6580-4b0b-b78b-a416362047e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a948675f-4630-4c86-bcf6-7ec854cd171e", "sighting_of_ref": "indicator--c19c2256-dd98-42de-b3e9-5240ab6458d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080fc1cf-096f-4912-b573-d4ec54170c17", "sighting_of_ref": "indicator--2d2e9408-8fd3-4716-8682-cc06b07e9426", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2245ea-239c-4add-91de-ec9ebe417803", "sighting_of_ref": "indicator--bc891715-b152-44f4-be45-e6a7077126f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c146569-b73b-4817-843b-5953add76792", "sighting_of_ref": "indicator--c2663c4d-9a20-4f1c-80db-e0b8c474f163", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a0b82-30f3-4c41-9a6e-86df2e9f03c9", "sighting_of_ref": "indicator--c2663c4d-9a20-4f1c-80db-e0b8c474f163", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ec1588-fb5d-432f-be78-070aa193cf64", "sighting_of_ref": "indicator--e3002b54-83c0-4a5e-a443-1147952f7450", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f645fca-0098-4eb9-8e87-8dfe701bc584", "sighting_of_ref": "indicator--15792c4c-7f74-498e-81c8-77732a5e42b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0657e3-d14a-4a44-9c81-940d72d57425", "sighting_of_ref": "indicator--7ea347a2-a948-4b5a-9f1d-cc5d679e4101", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf1e501-ac82-4729-b1fb-28f183c57f19", "sighting_of_ref": "indicator--f8775497-cd03-4503-8cdd-2256630563ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d64a5ef-cff9-49d3-a6bf-d7fe58441415", "sighting_of_ref": "indicator--f8775497-cd03-4503-8cdd-2256630563ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbf8907-c819-4b77-8b10-dc0bf2c68d90", "sighting_of_ref": "indicator--df2af01e-6ba4-4463-822e-f49a60d704f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bf3927-63a1-494d-9b2e-96c4a94eb2fc", "sighting_of_ref": "indicator--0af04d87-db8c-4206-9ea8-b0d66161d9d3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0d6b6e-fb82-4079-badd-fc4c9a1f4bc1", "sighting_of_ref": "indicator--0af04d87-db8c-4206-9ea8-b0d66161d9d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345729ef-1149-43cb-996c-e8f56f8d903f", "sighting_of_ref": "indicator--17d650f5-2468-4af8-8885-3dde36255e00", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88b6cb1-2961-45f6-aa33-210c1ec99841", "sighting_of_ref": "indicator--17d650f5-2468-4af8-8885-3dde36255e00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3911b19-a8bf-4bf0-a640-a928e2b33d75", "sighting_of_ref": "indicator--1d57c567-2dba-46dd-9398-13e05b466352", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f18cb9-7f6c-49f6-a97d-42c29ecf6e16", "sighting_of_ref": "indicator--323d3365-3bcc-4a3b-be89-2db2b1b7ffd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8526fcaa-7095-4929-9c92-a4a32d10a786", "sighting_of_ref": "indicator--323d3365-3bcc-4a3b-be89-2db2b1b7ffd9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2aef76-bfed-49a4-bdd4-9305d046fbcf", "sighting_of_ref": "indicator--d2b92085-0b1c-4484-9948-7428b4a6e222", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72297f5f-e73a-4534-9b2f-3aad14006b8f", "sighting_of_ref": "indicator--eb9b9163-ad00-4f54-9c80-cc9f902b33ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b2d17e-faa8-45d3-a4d4-14e40def824f", "sighting_of_ref": "indicator--eb9b9163-ad00-4f54-9c80-cc9f902b33ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069a7e5-9d66-4063-9955-a53f7e3527c6", "sighting_of_ref": "indicator--90486013-ad9d-4971-bcc3-42731f6687f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a57ab7-d7a3-4fb3-a275-bde9bfd00e74", "sighting_of_ref": "indicator--90486013-ad9d-4971-bcc3-42731f6687f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1d2175-66fc-4502-bdbf-4dfd77779bbb", "sighting_of_ref": "indicator--8ca4cbd5-3260-43b4-b77b-f503121c4810", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0719151e-504d-44ca-ac70-27a0f6e40bc5", "sighting_of_ref": "indicator--07031af0-972f-4381-bc6f-038f295983ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c7716b-652b-41f9-92fe-090f03817118", "sighting_of_ref": "indicator--07031af0-972f-4381-bc6f-038f295983ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1e27a-793d-4a86-905f-b6be3306a638", "sighting_of_ref": "indicator--67326d02-455a-4469-9c0e-04daef7c22fd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b255d99a-b32a-4a55-8815-bd73c1094e7e", "sighting_of_ref": "indicator--bdefdaac-9bf3-41e6-8de3-5e87ec52ba6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68986788-17c5-4977-a981-43ad34e471a5", "sighting_of_ref": "indicator--4e874ac0-6506-4213-b9e5-44973c4ce616", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32419bbe-3ca2-41c1-a57a-24eab728c50a", "sighting_of_ref": "indicator--4e874ac0-6506-4213-b9e5-44973c4ce616", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0421b6d-3b45-46f9-85d9-b8860a19cbb0", "sighting_of_ref": "indicator--4016785b-e4fa-4710-a0c5-591df8306ffc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0f6ff4-b1b3-441f-9d1f-7dbf47b01157", "sighting_of_ref": "indicator--2f3fa2d8-86cd-40de-a632-29df18823742", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f312b5bb-0993-4d2d-af8f-de9d9bf4f188", "sighting_of_ref": "indicator--2f3fa2d8-86cd-40de-a632-29df18823742", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c84a4d-7e69-4494-9fef-4d25d2625c4f", "sighting_of_ref": "indicator--ccbc5796-882c-41ba-b311-eef5377203c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087a3eeb-22e5-43e8-8188-3bab5be08946", "sighting_of_ref": "indicator--bb1074bc-6e4a-47df-b7c7-fcdbaafb7d24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dea5e3-de45-4909-8e25-d6f521c86e61", "sighting_of_ref": "indicator--a7e00643-cf43-43b5-ba27-63584b48355f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b7eb82-affd-4b19-a768-0ebcc839f767", "sighting_of_ref": "indicator--12cf585d-bea1-46fc-8ecc-dcd232157f94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d27b0-3ae6-4f65-b1cb-32e544c5ae5e", "sighting_of_ref": "indicator--6a642e85-3bfb-4d76-870f-8f07580e1759", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b24d5c-f4fc-49c7-846b-f968f96bcb2a", "sighting_of_ref": "indicator--6a642e85-3bfb-4d76-870f-8f07580e1759", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3b6ac4-23b6-4b7c-9f91-951351837703", "sighting_of_ref": "indicator--d055e1a0-b279-4e09-bb82-780baa915e50", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089ee843-ffa1-4de5-8e97-e3af618d305e", "sighting_of_ref": "indicator--b9301034-bc75-4e64-a93f-d5005d442c33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce54b8d9-716c-4fdc-bd99-79d7b33df594", "sighting_of_ref": "indicator--58f08440-4ef7-477b-9421-294368063419", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7024a3e5-b2a3-431f-a739-d915edcdfc3b", "sighting_of_ref": "indicator--58f08440-4ef7-477b-9421-294368063419", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9da780-db59-4981-b028-099026f542f1", "sighting_of_ref": "indicator--7f4a6a1a-46c9-441a-baab-e4ae71633a11", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681bfb8e-6c5f-4058-befc-b4dae87d058c", "sighting_of_ref": "indicator--2e965004-7b99-47eb-95d9-8257118394e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba23eeed-d113-4d57-a7dd-f00f9a21dea0", "sighting_of_ref": "indicator--34e637e7-8d73-4505-b536-70814dd15a3b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a861dc-4a31-4775-b1e9-284ba45603ab", "sighting_of_ref": "indicator--a752890f-4a00-4aa5-b96a-212220495685", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbd72b0-4e47-401a-82bf-929bb79755d2", "sighting_of_ref": "indicator--4ab6ab14-4714-4497-8f4d-840bba99db75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916d70d6-2994-48a1-a8d2-799fe133a5df", "sighting_of_ref": "indicator--14a5e24b-9751-431f-8679-cede0c89762f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc23265-4eb0-4491-bc6f-418c712dd1a3", "sighting_of_ref": "indicator--4c319ea5-40c9-4193-8804-5f2cbb245598", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9babb4d9-1848-4f59-a86b-35fcd00e0a7f", "sighting_of_ref": "indicator--36c72a1c-7adc-46ba-8fa8-2fbb176b37f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f54a0a-b0ef-46a8-abfe-e89ff8bf5102", "sighting_of_ref": "indicator--06f84230-a8e3-421f-8de3-435229370d64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923930f8-67cc-4d9b-bac0-39027faf8d5d", "sighting_of_ref": "indicator--e56c18e1-0077-4428-bc82-7cf002231dcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96357faf-5442-419a-b748-dfda32d602a6", "sighting_of_ref": "indicator--e56c18e1-0077-4428-bc82-7cf002231dcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2f2c31-8c01-4560-b409-118ee043c5e9", "sighting_of_ref": "indicator--740204d2-0e0a-4848-a018-10c559557ad0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88869fef-9422-40be-8222-414ec7e9263e", "sighting_of_ref": "indicator--740204d2-0e0a-4848-a018-10c559557ad0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18fc3e8-01e4-4954-8dd6-380de73789d9", "sighting_of_ref": "indicator--648de8d4-9abe-4765-b214-774b717b0bbf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fd1da8-58f8-413a-bfc9-d562fe14775e", "sighting_of_ref": "indicator--4a6c66ce-1322-47c9-ac73-6d03f42e8ff7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e0e07b-6821-4aab-9c0c-c1f7a444b490", "sighting_of_ref": "indicator--4a6c66ce-1322-47c9-ac73-6d03f42e8ff7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a186dbe7-b6bc-462f-94fd-ccaac20d3ec7", "sighting_of_ref": "indicator--4a6c66ce-1322-47c9-ac73-6d03f42e8ff7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e4ef5e-61b9-4769-808b-2785e8630213", "sighting_of_ref": "indicator--d53eddd1-33c1-4cd2-9029-abb294c3ed21", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7b0306-e188-41bf-89da-6dea7841fc93", "sighting_of_ref": "indicator--d53eddd1-33c1-4cd2-9029-abb294c3ed21", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b685a9-753f-4c54-817f-6188cd148ac8", "sighting_of_ref": "indicator--14291b4a-3099-427a-919c-cf12e1165cd8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5278e4ed-a054-4b48-ac9f-3200dc10a69d", "sighting_of_ref": "indicator--c3f3fc79-176e-417e-a2a1-9e132e1ba6f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390a2867-b8e0-46a2-bfb5-d5aba7d533f3", "sighting_of_ref": "indicator--85379650-c4ae-41af-a155-130768afd2c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd96596f-b784-486d-92b9-3b53de093673", "sighting_of_ref": "indicator--85379650-c4ae-41af-a155-130768afd2c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4f8add-06af-4d78-8acf-9e01eec60995", "sighting_of_ref": "indicator--245f3d3b-94f5-4bfe-a3f8-12b788a79c5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e022d5a-46ff-4966-a247-013a3782e133", "sighting_of_ref": "indicator--84de8daa-0e9c-4908-85ca-a37fa4b79208", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd18380-da03-4b2c-9b0d-5b18cc876de0", "sighting_of_ref": "indicator--8e84828d-366b-4d90-9c1a-ab2c0f5f0ed5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f821a-05bc-46fe-946c-024fdfa68f20", "sighting_of_ref": "indicator--75e58e6b-992d-439d-b71a-242ae8cec459", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae9596d-e3d9-4712-a296-eed7da718a56", "sighting_of_ref": "indicator--9c32144e-acfd-49e4-b134-8bb0c32f2e2b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf6a0fe-b2aa-4aa3-8e57-ebe6d6809666", "sighting_of_ref": "indicator--4cdcb0f1-e0f3-4ce0-b75c-81fa7c2359cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec90e2e-c1fb-4a43-bb1b-c35305333bd8", "sighting_of_ref": "indicator--84880829-36b3-4c46-a3e7-267571fff229", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d13a46b-ca2b-4feb-acf7-dfa405c5bc45", "sighting_of_ref": "indicator--001b46df-845d-4f63-aab3-f510cc1c3857", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ecd2e9-b92c-4792-96b5-6e005beeb1a4", "sighting_of_ref": "indicator--001b46df-845d-4f63-aab3-f510cc1c3857", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe25fe20-0a79-4dec-a099-868c1ca9fd69", "sighting_of_ref": "indicator--001b46df-845d-4f63-aab3-f510cc1c3857", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c01a598-14f7-47ba-91d3-3baf3f837045", "sighting_of_ref": "indicator--fd05f933-9ebe-4416-b6f6-7023eefdd6ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73afcf84-ee3d-4a67-a05f-560f771bac73", "sighting_of_ref": "indicator--92ff43f9-57a3-4e94-9658-12e0a6576e66", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37405bbd-468b-4166-a28b-719b7f5908c6", "sighting_of_ref": "indicator--bc23ce14-a1eb-4082-b273-29432a8d2fa0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7e3122-26ec-42f0-8bb6-bf65b6168045", "sighting_of_ref": "indicator--bc23ce14-a1eb-4082-b273-29432a8d2fa0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045c32be-248a-484f-9319-c304f46d5ba6", "sighting_of_ref": "indicator--2cae70f1-d23f-4b67-a7b1-e2a8ae42d89d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08a8e4a-bb54-4014-9716-5de99ed509e7", "sighting_of_ref": "indicator--2cae70f1-d23f-4b67-a7b1-e2a8ae42d89d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a273f6-1d02-4e0b-94e9-f3836628b2a1", "sighting_of_ref": "indicator--2744f9dd-49af-4aea-aab3-c49992d913ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d2888e-16d0-4f77-aba9-280fa4100e96", "sighting_of_ref": "indicator--758e2d2b-c75d-4f7e-afb6-f1937ce870a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc34638-b649-4dd7-a818-dd0d143df505", "sighting_of_ref": "indicator--2f3ddc82-f95f-4598-a211-d2f15120f0dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efae5846-fb16-4d0c-b039-d8ffdfe02abb", "sighting_of_ref": "indicator--70053c14-2784-4165-803f-8ac59dfaebf4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c523b6b6-50c6-479c-a1e8-ac2744400f85", "sighting_of_ref": "indicator--07ef42a3-bb85-47ca-ba2c-dd544c08f8be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37bff63-a552-41d6-980b-b9eeb40faecd", "sighting_of_ref": "indicator--07ef42a3-bb85-47ca-ba2c-dd544c08f8be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f0f6e8-11db-4596-85f2-4806b04cffeb", "sighting_of_ref": "indicator--07ef42a3-bb85-47ca-ba2c-dd544c08f8be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332a7265-1464-427f-b924-be35623e5b06", "sighting_of_ref": "indicator--747a16a9-a6a1-477c-b233-cd6712dcf4e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934ca4a8-502d-424e-87aa-157b54ee5407", "sighting_of_ref": "indicator--bc6ee4bf-7461-46ff-84c6-05f08ebae22b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3779c9c-2352-4705-adb0-2c4873d7018f", "sighting_of_ref": "indicator--4c3f8b34-3873-4283-83b3-109dc2caa5cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6b6ed1-ab02-42cd-87e0-b6cd174a86c7", "sighting_of_ref": "indicator--3b6a28c6-f4fa-47f7-bd7f-8b17401209e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbabcaa-4f3f-4f9e-b2ef-c5c2b309b063", "sighting_of_ref": "indicator--3b6a28c6-f4fa-47f7-bd7f-8b17401209e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5997ef56-792c-43fa-9f64-f59d45048755", "sighting_of_ref": "indicator--80f53004-afb6-4e9e-8160-e1c67f420bc2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dfb2c6-32ff-402d-a4b3-df26554d8b2f", "sighting_of_ref": "indicator--dd10ab9f-6ec5-40b1-8680-f222eaafdb5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0a7bbd-75a3-4f57-ae18-9e4ce5735ee0", "sighting_of_ref": "indicator--7d41122c-8ecd-47d7-9c44-68ef3e1cd701", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c017ac0-82fb-43d4-aeaf-d5a7b3d595c1", "sighting_of_ref": "indicator--7d41122c-8ecd-47d7-9c44-68ef3e1cd701", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b4138f-bbb4-4ade-a1a1-c7fc2539c534", "sighting_of_ref": "indicator--9904c733-b15d-4244-ae38-8006b8504d1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9fd0a6-da9f-4869-b0e7-c49714677fa0", "sighting_of_ref": "indicator--0745ed51-b8d3-46e7-ade3-aa87acc7d5db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e9654f-6aef-427f-9fe3-a1c99d90c117", "sighting_of_ref": "indicator--a8987cbb-da0b-4e52-a1f2-f2bc41debf8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295016e5-7d02-47dc-97da-6e958d25afc4", "sighting_of_ref": "indicator--76d57b19-5530-48be-91e2-6dc675f0dfd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2012f3c0-0169-4e22-9cfa-00fdcfaffbf7", "sighting_of_ref": "indicator--29d802a1-7fd0-48bd-a815-f019ee10cc6c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4b396c-1682-4117-b508-b05c709974cd", "sighting_of_ref": "indicator--39077bfe-41c6-4641-a76f-be396a89a3c5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c6bbea-f53a-4edb-b9c2-4114589b3553", "sighting_of_ref": "indicator--ae72d79c-c121-449d-8792-2a0f99e0eccc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cf7fd5-d23b-462e-aa34-a59fca188bb1", "sighting_of_ref": "indicator--ae72d79c-c121-449d-8792-2a0f99e0eccc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0051b7-5dc2-4da9-b7b0-c429828d3b5d", "sighting_of_ref": "indicator--3a6a5588-c0c8-4bd8-9fd8-e94e86b8de4d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fe99f9-3e4b-432f-b227-4f6b97773c6e", "sighting_of_ref": "indicator--1c040ffe-1ea0-4c2b-b539-2a460afbbf24", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eafac88-8745-4388-8b8a-07f129521f3f", "sighting_of_ref": "indicator--ebe265a0-fc68-4efc-abf0-6f4291729f5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e67032-c0bc-4faa-a3c4-0feed676e099", "sighting_of_ref": "indicator--e602e1a9-a0b6-4b93-89ca-ecf7124387b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ccedfd-56b4-4c2c-8a82-73f5cb96305b", "sighting_of_ref": "indicator--e602e1a9-a0b6-4b93-89ca-ecf7124387b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eca466c-cb07-4ad9-b093-0c69574d877f", "sighting_of_ref": "indicator--e602e1a9-a0b6-4b93-89ca-ecf7124387b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a768d6-0b3b-4cd4-ac56-677950a024e5", "sighting_of_ref": "indicator--da92fda6-6e99-436a-9a41-94d57c366f42", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04529ab-13f0-4393-93d5-18d25567c0c9", "sighting_of_ref": "indicator--da92fda6-6e99-436a-9a41-94d57c366f42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4a4309-a842-4a77-a533-52c14d996c16", "sighting_of_ref": "indicator--95d9f8b9-9eb9-4067-85f3-513b2a3074a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca13706-df3f-43ee-b720-68f0950183b5", "sighting_of_ref": "indicator--f4e6fea6-5abc-4adc-b60e-07676d3709e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3f980a-76c2-442e-a390-c5e359e868f1", "sighting_of_ref": "indicator--f4e6fea6-5abc-4adc-b60e-07676d3709e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9933fdb9-c6f3-4591-8511-f81bf1960fb6", "sighting_of_ref": "indicator--7e5f1dd5-6818-4361-b6b2-54050b279ac5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a35c0a-46af-4b09-b9cb-de6c793e5fbc", "sighting_of_ref": "indicator--7e5f1dd5-6818-4361-b6b2-54050b279ac5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc40881e-0449-429b-954d-0228d1ea2feb", "sighting_of_ref": "indicator--e200392a-84f8-47cd-98e3-072486271393", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0c9cce-170a-463f-887a-0ab782ac60f5", "sighting_of_ref": "indicator--e200392a-84f8-47cd-98e3-072486271393", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ff82e0-c0a3-4342-b1f3-d64caed1c0a6", "sighting_of_ref": "indicator--e200392a-84f8-47cd-98e3-072486271393", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a790c06c-8890-4cf3-8d2d-b415f51b76bf", "sighting_of_ref": "indicator--dc455b66-2f8e-4fec-8ef9-973a69b1974a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12ddf65-d6e2-47e7-8588-b9bfd4a30383", "sighting_of_ref": "indicator--caf61d31-1131-4802-970b-eff4daa3f01d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2e54a0-e94c-4aec-b013-5464bc2893dc", "sighting_of_ref": "indicator--e78a3fad-b171-4d85-b01e-806c9a9703e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b76cf-6d91-485f-b331-964b2824cce7", "sighting_of_ref": "indicator--3cec6054-b17d-49e3-b87d-a54bd64597d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a59873-ddf1-49b5-b043-774c99bc76a3", "sighting_of_ref": "indicator--3cec6054-b17d-49e3-b87d-a54bd64597d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d051f883-3721-4c02-9ec4-ae175e284202", "sighting_of_ref": "indicator--5f3f531e-c808-41a7-97fb-cbdbed0b23d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb75e733-fdbd-42be-b0e0-6b62d6714d5d", "sighting_of_ref": "indicator--5f3f531e-c808-41a7-97fb-cbdbed0b23d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eee8590-c79d-4e28-a369-ac49db66fe30", "sighting_of_ref": "indicator--b46a4970-94b9-45f2-86fb-f1ccde8368ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f114503-6459-430d-b0f5-b73d1cb86178", "sighting_of_ref": "indicator--2cab270f-0875-414e-9b83-c40edd458f6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad2cecf-97a8-4610-b4ba-a8519c00e907", "sighting_of_ref": "indicator--f3abc7d1-a16f-49e2-a7b6-a259a5730a8b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8300c91f-71c4-4f0c-b934-70d95696c3f5", "sighting_of_ref": "indicator--1e2f6b64-7b18-4e0c-bbee-6d724bef07a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c663ecf-5feb-4d2f-a803-69e4e99f7c52", "sighting_of_ref": "indicator--0c94de1d-e2fc-4aad-9604-9deac85d01c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1cce0b-dd6a-4f87-a9f7-9465be3e386e", "sighting_of_ref": "indicator--e99b24d3-451c-4f8a-b341-53649419732f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b84fec-68c1-4458-b7ad-cd91b33c06fa", "sighting_of_ref": "indicator--e91a4915-45b9-46c3-9436-ea4bf8e83205", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10186779-6146-44e3-9328-5ca5031933df", "sighting_of_ref": "indicator--e91a4915-45b9-46c3-9436-ea4bf8e83205", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fae2e02-a20f-4050-b51a-33a100c0ce5f", "sighting_of_ref": "indicator--0d697b26-07f8-489f-93fc-7f16b9a692a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991debb8-c08f-453c-afbb-1b1ad72e317b", "sighting_of_ref": "indicator--7c590c8f-eccc-4858-9fc8-f39666e924e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c26e66-fe98-4cf8-a491-ea47c4a32ffe", "sighting_of_ref": "indicator--7c590c8f-eccc-4858-9fc8-f39666e924e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73743eba-5d99-4e3c-bea7-6606597479c3", "sighting_of_ref": "indicator--65413fc3-04b1-4497-8617-083696de5226", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1884c084-6513-483d-895b-643985abaf43", "sighting_of_ref": "indicator--78a7151c-8494-4528-955c-571170cd930b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f06ebce-9c82-4566-a88d-70dfcbc0a602", "sighting_of_ref": "indicator--78a7151c-8494-4528-955c-571170cd930b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccfc010-f055-4e37-b579-49cc48180f03", "sighting_of_ref": "indicator--83484e4d-2d55-4893-83a8-40fe1d78382c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c95c1a-8fe9-42d3-a82a-269392affaba", "sighting_of_ref": "indicator--83484e4d-2d55-4893-83a8-40fe1d78382c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e06b89-41bc-43fc-8465-653544e966b6", "sighting_of_ref": "indicator--0f0ae175-98d5-4bae-b8da-97978e4d1df2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8243b460-c0cc-4c29-b6d4-fc785c97ef8e", "sighting_of_ref": "indicator--0f0ae175-98d5-4bae-b8da-97978e4d1df2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e6b9fd-2403-493c-8da1-fb3c5a292b4e", "sighting_of_ref": "indicator--fa2a6edb-f68e-4f4a-8329-c5b4def19c12", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2d25f2-a42c-4f86-9ce9-9a6d65b9f5fd", "sighting_of_ref": "indicator--b24a2d11-4b27-49ad-b3d6-328a3b41ee8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff50fdd7-6ada-487e-86fe-7c886f331936", "sighting_of_ref": "indicator--ce9cd03d-e277-40a3-a755-57a57a8de288", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07059cb-06fa-4253-bf63-dc11516fd485", "sighting_of_ref": "indicator--efab505e-2e85-484d-9c3e-b0ea3c2bb797", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f829262d-8670-4039-a04d-c0861265054a", "sighting_of_ref": "indicator--70b48729-91d4-49ff-90ab-9c868102cbe4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9ba07c-b7b3-4d80-9c5f-9777c0620d1b", "sighting_of_ref": "indicator--70b48729-91d4-49ff-90ab-9c868102cbe4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eb4344-918e-4d66-b47e-8b20325786bc", "sighting_of_ref": "indicator--77886034-ea9d-4fb5-a814-24add1bc4751", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baf21b2-8778-4afb-94c0-ef8cb1feaf6a", "sighting_of_ref": "indicator--5b058a3e-2a70-42e9-87ab-70a3b025770e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc132e-93c0-4a1e-8744-0927050cf33b", "sighting_of_ref": "indicator--5b058a3e-2a70-42e9-87ab-70a3b025770e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fea95d-4210-4ef8-ae80-09418fbed15d", "sighting_of_ref": "indicator--5b058a3e-2a70-42e9-87ab-70a3b025770e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2008ff-7152-4257-b424-2f562610da1b", "sighting_of_ref": "indicator--ce70c1a0-4fa3-48c0-a197-f8b35832fa2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104a7cbf-c068-4557-ba82-33a86ff2956e", "sighting_of_ref": "indicator--7662ec37-0c51-4e6c-84ec-bfa3f38fc40a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d5be87-3d11-4dc5-9373-e2969203bd5d", "sighting_of_ref": "indicator--cd4c8913-b1a9-4f17-824a-136f54cdae25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c22490f-98ae-43d1-a736-3576de145346", "sighting_of_ref": "indicator--cd4c8913-b1a9-4f17-824a-136f54cdae25", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432c520b-2112-401b-8f3c-d8e46a5fbc29", "sighting_of_ref": "indicator--25331318-aac5-4191-9fc8-c03c4e228ca1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af013d54-3483-49b8-90de-595fe49f4e7e", "sighting_of_ref": "indicator--30f6531d-1eaa-48b3-a4d3-7c63301e939b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3344a2-1c6e-4e48-938a-2135d01ed2ad", "sighting_of_ref": "indicator--928e98aa-45d9-4b44-9cb2-1c2621c75a39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdff778-14d5-42a6-99fc-016633ae4fa9", "sighting_of_ref": "indicator--5117ab66-d3e3-4f55-917a-f223f3af83ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d81923-0f51-465b-9769-a9c67b2802e4", "sighting_of_ref": "indicator--6f792f31-7e70-4a0b-9170-6904841ccff8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee03b2f-da02-4280-a039-7719e4fba095", "sighting_of_ref": "indicator--a18bb253-54f9-4232-bb37-18276e331872", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d7be0e-f857-44a9-9ed8-33c0c54dd621", "sighting_of_ref": "indicator--be2a77a1-56c6-4ebf-90c2-eda81cd2204d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3e4736-e84d-4366-8866-d7e9764174cc", "sighting_of_ref": "indicator--86994ecc-25f5-4b6e-bc2b-3a0bf167b18f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b3aa8f-a03c-45cf-8a3c-5ee7b7cedb08", "sighting_of_ref": "indicator--86994ecc-25f5-4b6e-bc2b-3a0bf167b18f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b894cbd-7638-482c-8caf-731618f05a6f", "sighting_of_ref": "indicator--2b612f1c-39f8-4250-bfbd-a77a1203a4de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dc0099-a4bf-41c2-babc-8ec70b85244f", "sighting_of_ref": "indicator--2b612f1c-39f8-4250-bfbd-a77a1203a4de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e82bcde-375e-45fd-8870-bcee4a59c2ab", "sighting_of_ref": "indicator--2b612f1c-39f8-4250-bfbd-a77a1203a4de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b6edaa-599c-48b4-8607-4533b217a5af", "sighting_of_ref": "indicator--72e7ab66-e0b0-4f74-b14e-1c8e6909e31f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e87c90-f897-4410-b3de-46d6be798995", "sighting_of_ref": "indicator--d21b1bd9-1962-451f-b5b7-bc577e523424", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec939b3-2692-4431-81ba-6d2f0ed0b69c", "sighting_of_ref": "indicator--d21b1bd9-1962-451f-b5b7-bc577e523424", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2c0f99-88a4-444f-b4a4-e17d5078769b", "sighting_of_ref": "indicator--76a1a205-ec25-42bd-bd62-3bc1d4f4bd79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f7326b-b514-4abc-98a0-5cd863be901e", "sighting_of_ref": "indicator--76a1a205-ec25-42bd-bd62-3bc1d4f4bd79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fb0ad0-efbe-48b6-adc4-2d6bccc6032b", "sighting_of_ref": "indicator--755f80a1-8cb5-41c4-8d9f-809981d22714", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda7bed7-88cb-48b7-9cbe-404cc2c27bc1", "sighting_of_ref": "indicator--f9bc58a2-f31e-43de-b510-e4e09753439e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1374ae2-1fa9-4da8-86d1-f6dbdf31ff8f", "sighting_of_ref": "indicator--f9bc58a2-f31e-43de-b510-e4e09753439e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca988096-d7d5-4177-9296-fa61c5e623b2", "sighting_of_ref": "indicator--623bd2f1-baaa-4498-a319-fcb77972a7eb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500002e8-dad9-4b69-add2-13b48523337d", "sighting_of_ref": "indicator--cc612ca6-cf6c-409a-a215-8233a6d55a45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bb79ba-77bb-4684-8381-03c7bb19fafd", "sighting_of_ref": "indicator--2cdef3f5-7f8b-4064-bd71-c539e1d445d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596897cb-926e-4e4b-8398-59d01ef834f3", "sighting_of_ref": "indicator--15b2f1b8-373e-4b49-9856-47fbf59848f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65626af9-a159-42c0-9ef5-d330a0b94f22", "sighting_of_ref": "indicator--15b2f1b8-373e-4b49-9856-47fbf59848f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01ab2bc-a6fa-4c68-85f1-e4a76b613645", "sighting_of_ref": "indicator--e4c61e5f-6c78-4154-835a-042dba00d41d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1235ac36-8eca-4231-bfba-5b418a7588bf", "sighting_of_ref": "indicator--02d2f0df-03e9-42fc-b6aa-90538d7d7c1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23eac03-9016-4f79-9964-1759e8f609e8", "sighting_of_ref": "indicator--02d2f0df-03e9-42fc-b6aa-90538d7d7c1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a329c6-45ae-439a-9bb1-61cb1220cc55", "sighting_of_ref": "indicator--ff6033b0-f655-478f-9263-46e97cb353dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1719659-ff19-463e-8be7-1fee3855bed9", "sighting_of_ref": "indicator--ff6033b0-f655-478f-9263-46e97cb353dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d277d5-3d3a-4a9d-b3ac-992f764e7a6b", "sighting_of_ref": "indicator--7f013d5e-be6f-4095-a43f-67506a90b26c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341acd23-ab62-47f3-b11c-8c59a66c141d", "sighting_of_ref": "indicator--91a6ec66-eb06-4952-bdbd-f1e2457e9d95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769f6b8b-8ba1-4011-8d28-3d2e09ab2b2e", "sighting_of_ref": "indicator--508db384-5b0d-491d-9725-3ce6ac9dbc92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd788e2-fb05-49bb-9996-6dfd30072836", "sighting_of_ref": "indicator--508db384-5b0d-491d-9725-3ce6ac9dbc92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbb5502-5aff-4bdf-b583-2d86a39b56be", "sighting_of_ref": "indicator--9c244e44-8c13-423c-8193-577270e73fdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e589004f-2622-4aca-929e-9db3850d77ad", "sighting_of_ref": "indicator--9c244e44-8c13-423c-8193-577270e73fdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c20d1b-e6da-48b5-9939-449505b8fc25", "sighting_of_ref": "indicator--9c244e44-8c13-423c-8193-577270e73fdd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e48cd8-4351-45ce-926f-45f0aac26e61", "sighting_of_ref": "indicator--e87bd38f-ae0a-40ec-afc4-ece293446659", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b91bb9-8603-4b7e-9612-e81d9a9a3dfc", "sighting_of_ref": "indicator--e87bd38f-ae0a-40ec-afc4-ece293446659", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d84dfd-1c76-4163-b144-9fad547e126b", "sighting_of_ref": "indicator--5191a578-c679-4d48-a3ec-2c07878afb3b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfb1744-393b-4775-9574-b4b700606f93", "sighting_of_ref": "indicator--51b4ad46-2187-4b9e-8c46-aaef34c3ff7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a025b567-4ddd-4d1d-9127-517bfe2ce3fa", "sighting_of_ref": "indicator--b524fadd-73ac-4899-997f-ea0a65a05053", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4e8e05-8863-407b-86d4-d833f8b145af", "sighting_of_ref": "indicator--55db2237-5b0c-49f5-b12e-4b7f3d9fc1a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13654032-d359-4f52-a27b-9cfb2e4ee24c", "sighting_of_ref": "indicator--55db2237-5b0c-49f5-b12e-4b7f3d9fc1a1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9889747f-fe1e-4a14-88cc-5cf8b08b0480", "sighting_of_ref": "indicator--8d45b0e6-6b06-4ada-8707-97c074e684b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34558a30-d6ed-4894-ba18-2f4346e7e648", "sighting_of_ref": "indicator--8d45b0e6-6b06-4ada-8707-97c074e684b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ffc904-4d7e-437a-bedc-c9968bbbfa65", "sighting_of_ref": "indicator--d7bd1b99-a569-48f2-b541-93c9fd0548d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5600c2e-87c6-42c7-8cd9-991a48ab3e8e", "sighting_of_ref": "indicator--10702f3e-02de-49eb-9707-09ee02bd7589", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7c418e-4c40-48eb-9770-a8e305eea9c9", "sighting_of_ref": "indicator--10702f3e-02de-49eb-9707-09ee02bd7589", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97f814b-b39a-4bce-b112-c672b6cb168a", "sighting_of_ref": "indicator--7c950c82-70dd-4d57-8e1f-fae7f7939bda", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce4127f-c875-4e1a-ba10-e3e1f5394585", "sighting_of_ref": "indicator--1d397775-a83d-4f46-96e2-d977c795fc61", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3833c240-b9e5-4579-ac9f-a2f99acf9097", "sighting_of_ref": "indicator--1d397775-a83d-4f46-96e2-d977c795fc61", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cede2433-1102-4b99-a2c7-7cde7b2ffc4f", "sighting_of_ref": "indicator--aa10856d-b96d-4b1c-9154-8a0939c876e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a095b3-678f-4797-b111-86d4f8ab0d2e", "sighting_of_ref": "indicator--097b8297-1bcc-4ab2-be7f-0f2ebb7ee04b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29876d57-98dd-4738-bd19-217bb50bb413", "sighting_of_ref": "indicator--097b8297-1bcc-4ab2-be7f-0f2ebb7ee04b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c030a8a0-49d3-435e-8f29-f9d96d11f82a", "sighting_of_ref": "indicator--c340c384-9e95-4013-b711-03850ae67320", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e28243-567c-4ccd-8747-38198a8efe68", "sighting_of_ref": "indicator--c340c384-9e95-4013-b711-03850ae67320", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff8897-57f0-4adc-bd43-b924f24c78d9", "sighting_of_ref": "indicator--cc6d7ba1-1d37-464d-8aec-e560c8f12a93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728cf16a-b6bb-4676-9932-9d631234b089", "sighting_of_ref": "indicator--cc6d7ba1-1d37-464d-8aec-e560c8f12a93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58414f9-230c-4c1b-8eaf-7164bc520a06", "sighting_of_ref": "indicator--c81c77fd-335e-44da-a229-8e2e71f4a00f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fba3473-c565-4a1b-a36b-507def3e8bf2", "sighting_of_ref": "indicator--c81c77fd-335e-44da-a229-8e2e71f4a00f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286cc27e-3160-4fc6-be16-6cfed4a48f93", "sighting_of_ref": "indicator--c81c77fd-335e-44da-a229-8e2e71f4a00f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f37723-5ce0-46f2-916d-c62a15422eb8", "sighting_of_ref": "indicator--be52a9df-1234-419f-91d2-b34f23f0d232", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7065da86-789c-46f2-9e9d-cdf2e4e6b7f3", "sighting_of_ref": "indicator--be52a9df-1234-419f-91d2-b34f23f0d232", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a42b509-0222-41c1-9bdb-0612d9b5382b", "sighting_of_ref": "indicator--be52a9df-1234-419f-91d2-b34f23f0d232", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb7072c-9caa-4acb-b746-47c7b3861fbf", "sighting_of_ref": "indicator--2dbc303b-b7b6-4bb2-995a-8586af85424e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4d42ee-df11-4f7b-b16e-a3276ce8700c", "sighting_of_ref": "indicator--c1c67eab-9eb3-4113-86b5-7e9075338167", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645b729f-d9d2-425d-acbb-86d19ad032c2", "sighting_of_ref": "indicator--13790735-b6c4-4aad-a6fa-8919af20c842", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8d12c-1891-4648-8999-16581491dd89", "sighting_of_ref": "indicator--13790735-b6c4-4aad-a6fa-8919af20c842", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39da550d-9276-43f9-a6d1-1e6f85166eb7", "sighting_of_ref": "indicator--13790735-b6c4-4aad-a6fa-8919af20c842", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77c5e7b-3cf7-4353-9608-7368f1f7aafd", "sighting_of_ref": "indicator--306ef391-43c2-461e-88f2-d7a8338a711a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba96c95-1dfc-492f-8fc1-495ad81a5e88", "sighting_of_ref": "indicator--0a92de5a-3669-473b-ad31-36a2d5dd2992", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715f3435-2342-4cbf-9c9b-cd698e8e0fa7", "sighting_of_ref": "indicator--ea09fc3d-94b2-4064-b36c-d38f208f2e83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02950586-56a1-48ed-9f4e-a81bd2f63c19", "sighting_of_ref": "indicator--e5ea113a-bfa7-4ca0-b7df-0f1e93758e02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad2c72f-e45a-4d61-812f-d637d7434383", "sighting_of_ref": "indicator--e5ea113a-bfa7-4ca0-b7df-0f1e93758e02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0306c8d-4924-4670-9e42-e6abadd4cb99", "sighting_of_ref": "indicator--a0950c05-5bf1-48ce-83e8-1ecd0d5b60fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d349add-2046-4e27-a8eb-0ee12671de44", "sighting_of_ref": "indicator--ef2d974f-af9b-4100-b11f-015233c128b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735766df-9c04-4be3-ba10-d18ec96105a5", "sighting_of_ref": "indicator--a8b11b7c-3faa-4876-a7a3-52e904066261", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d05f39e-12d5-4199-9fae-c770390b10d8", "sighting_of_ref": "indicator--d8258f05-a0f3-4f9d-b9e2-23a40d7b9d9d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a4c1f-6238-4836-806f-6fe4be53dde8", "sighting_of_ref": "indicator--a4aadf2e-b36d-469f-99a5-04f169196f71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243bb248-ef25-4b52-a8a5-d0e897a248a1", "sighting_of_ref": "indicator--a4aadf2e-b36d-469f-99a5-04f169196f71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a7f0f9-d70c-4121-adb0-e52a538d0136", "sighting_of_ref": "indicator--99c5af95-76b3-438e-8780-5ee7520df6af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88974d07-7f07-43ee-8fe5-aeb30a0770fa", "sighting_of_ref": "indicator--8843fcb6-5c43-4ff7-b27f-41998e327b0f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf4cef6-58e1-4545-b3e8-21c259368658", "sighting_of_ref": "indicator--3a54b0df-cf8a-4c98-bab4-3403776c5202", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c562bd-ede5-4636-afc0-57ca7f056c5e", "sighting_of_ref": "indicator--01415de2-367b-4a6b-8c4a-ba74892cd16d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96e480c-c178-4224-8775-9ceaa18952e7", "sighting_of_ref": "indicator--01415de2-367b-4a6b-8c4a-ba74892cd16d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ed50a-5010-490d-8d70-8ca8f0b9dc7b", "sighting_of_ref": "indicator--1a492247-e157-4438-80f9-9f23e461f4f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfc3273-db21-4939-b6f8-6716f1b18d0e", "sighting_of_ref": "indicator--4ead3378-1122-4e37-b4ba-3d3e868145b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e74dfe-1b8f-44f5-a2aa-b024d9df8ca0", "sighting_of_ref": "indicator--27e33f8b-151f-4bed-815d-ed47ca47c768", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277114de-a70d-470e-9a6b-5c7cec6285c2", "sighting_of_ref": "indicator--27e33f8b-151f-4bed-815d-ed47ca47c768", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f170bc3-ce25-4128-aff2-3d06c1af8920", "sighting_of_ref": "indicator--1558fc15-9eb5-4c88-86b0-f2ce08c4c0af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3431de5d-b9a9-41dc-aabf-fae3303f0115", "sighting_of_ref": "indicator--b23159ae-e846-4c9e-b38d-a8b3ac7f4a66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10b5712-cd97-40fe-92c4-01334e4846a2", "sighting_of_ref": "indicator--53507ace-cc72-455b-a0d2-4ec0933eaec6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a313b59-8ddd-4812-b9ae-4e4b28bd5b4e", "sighting_of_ref": "indicator--53507ace-cc72-455b-a0d2-4ec0933eaec6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d567c0-226b-44e3-a853-737f2294bf39", "sighting_of_ref": "indicator--4d0cc0e5-d18a-4e8e-a6da-79f3a3476edc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24432075-eaf4-4876-9be9-3766c8d48aa5", "sighting_of_ref": "indicator--4d0cc0e5-d18a-4e8e-a6da-79f3a3476edc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5952059-a5c6-4949-aec3-a9ef07f244ae", "sighting_of_ref": "indicator--4d0cc0e5-d18a-4e8e-a6da-79f3a3476edc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f0731a-3b28-442c-afb6-e5540da46620", "sighting_of_ref": "indicator--cc19b1c9-c9f8-4f66-ad4d-4c01e270cf5b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19108a9-0b42-480f-b98c-4d2bc85749b1", "sighting_of_ref": "indicator--97355313-44f5-4236-afc9-d0bdc7f78a4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9e82b6-46b7-4a6d-afbc-95a9b0c8c442", "sighting_of_ref": "indicator--ff3bb4c3-bf3a-4d67-a520-f3e664629eea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dc468f-9c00-4af1-86cd-3f38d0735dc6", "sighting_of_ref": "indicator--ff3bb4c3-bf3a-4d67-a520-f3e664629eea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d625a2-be18-449f-9593-045f6e27dca2", "sighting_of_ref": "indicator--b49c4a4c-748a-480e-bd71-07487323ecac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ec3c37-2c78-4b34-bbc3-2257da65f087", "sighting_of_ref": "indicator--44ff4a5f-7d95-409e-8e4e-1ac94c742b7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02939b03-65f0-48e8-8fda-ad24dce40c14", "sighting_of_ref": "indicator--44ff4a5f-7d95-409e-8e4e-1ac94c742b7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b47592-8207-49ea-a44d-4f7862b3c6d6", "sighting_of_ref": "indicator--44ff4a5f-7d95-409e-8e4e-1ac94c742b7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7571086e-eff3-4505-af8e-67204777bfda", "sighting_of_ref": "indicator--e1b71227-6412-4375-996b-1842b94483b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c727f5-5d7e-454b-b71e-fd02543796e6", "sighting_of_ref": "indicator--e1b71227-6412-4375-996b-1842b94483b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f535ba09-2c01-4e17-b2e5-2c194e9620d7", "sighting_of_ref": "indicator--d8ff7f98-4998-464d-b2f5-2f154595bb0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bd2377-38c3-4366-b6dc-9bcfe8c33325", "sighting_of_ref": "indicator--d8ff7f98-4998-464d-b2f5-2f154595bb0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07530f6b-1f80-4169-ad01-1aa4cd0f7851", "sighting_of_ref": "indicator--814b46e0-7be2-4c63-af9a-f8fd146ad20c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b14873-fd81-49fe-9047-8591fdf2e6a2", "sighting_of_ref": "indicator--854db7d3-d5c3-4567-b1b6-084dfedb1f7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44ed014-00ed-46b1-b19d-976a646106b4", "sighting_of_ref": "indicator--854db7d3-d5c3-4567-b1b6-084dfedb1f7d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c18b036-9b1f-4b4e-85fd-966562cbe15e", "sighting_of_ref": "indicator--854db7d3-d5c3-4567-b1b6-084dfedb1f7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7144495b-eb19-474c-84a0-29a2c2ef4ae3", "sighting_of_ref": "indicator--108a2104-d2c0-4e4b-b27b-3a3e28c81da6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3187029-2619-4961-893d-8d5ebdf78738", "sighting_of_ref": "indicator--108a2104-d2c0-4e4b-b27b-3a3e28c81da6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17ef6f3-caf4-4301-a1aa-dbc8690c16bc", "sighting_of_ref": "indicator--108a2104-d2c0-4e4b-b27b-3a3e28c81da6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f3ea31-c06c-412f-aa4d-242c6dce7cd8", "sighting_of_ref": "indicator--140642e3-759d-4ee4-b71f-8bc9bb255e2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6481ac5-bbda-4e55-8303-f13fa12b36e5", "sighting_of_ref": "indicator--e003d514-5d90-4dee-b7a9-a25743c210ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d757a3d-76a0-4740-8afe-b510d101df2c", "sighting_of_ref": "indicator--e003d514-5d90-4dee-b7a9-a25743c210ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523dd495-d439-41a0-86f5-3cccbe66a655", "sighting_of_ref": "indicator--9c805714-a570-4269-a9a5-7b7e7f1e3eae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4be690c-35ad-42b3-a7df-b5ffa5391d28", "sighting_of_ref": "indicator--9c805714-a570-4269-a9a5-7b7e7f1e3eae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639b3254-8a0c-4866-b94f-ec1b2d5b553d", "sighting_of_ref": "indicator--9c805714-a570-4269-a9a5-7b7e7f1e3eae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f861783b-40ae-4d90-b517-b3c752da2a66", "sighting_of_ref": "indicator--194e72b4-29cd-4e3d-9a3f-5ca4d4063e0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cd2160-7132-486f-8fb3-c5893b8cee4a", "sighting_of_ref": "indicator--31f76584-b702-4119-b732-dd1fe491ab94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae3cc8f-8a97-40e4-87cb-32cf1cb40017", "sighting_of_ref": "indicator--2a0b61a3-5da7-457d-94ed-4424857a231c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819dc1f9-77d7-4015-b6c4-3d3f92614b9f", "sighting_of_ref": "indicator--2a0b61a3-5da7-457d-94ed-4424857a231c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389f8b05-7720-4d95-b335-d286c75a8def", "sighting_of_ref": "indicator--0272aa9b-5ba8-4df8-bab9-bbf32cacb9dc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fe45ea-7136-439a-aa41-b15eccd93863", "sighting_of_ref": "indicator--e630c2ff-78a3-4348-ad99-e097fc110eee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a6314f-3602-4115-a038-25c4934656e7", "sighting_of_ref": "indicator--ca1fae8f-abe4-4d0d-a521-84afd85d10d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e148d039-4f27-44f3-9f8e-536be15ad004", "sighting_of_ref": "indicator--ca1fae8f-abe4-4d0d-a521-84afd85d10d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b889b87-50cf-40df-9fc4-62015ed19976", "sighting_of_ref": "indicator--9b9ac626-9a1d-4aa2-90a1-fdabce87a77a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967490a7-0083-47a9-975e-1876668ff71c", "sighting_of_ref": "indicator--b04ee178-63aa-4fb6-945c-44f79fe8ea79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a313154-dd52-462c-ab79-d353860da9fd", "sighting_of_ref": "indicator--b04ee178-63aa-4fb6-945c-44f79fe8ea79", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0bea47-df3a-4d09-b9a6-475bf09ca47c", "sighting_of_ref": "indicator--40f6c321-6abb-4bd4-a2b5-33fee26126eb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bb90a1-77a7-43bf-893a-505c2ca74f13", "sighting_of_ref": "indicator--ea1f9dd4-ee4b-4561-972f-38593f2cc08f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04603626-692c-4063-a5e3-8066574fd49c", "sighting_of_ref": "indicator--29568d61-b939-4db4-896e-957715d3a635", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8254e070-f5a1-4d77-a7e7-152153d85783", "sighting_of_ref": "indicator--d7e2f81c-2e4a-482f-9697-c984e387de64", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f7adb7-ae04-409e-bfc2-6ecd3c44a4c3", "sighting_of_ref": "indicator--d7e2f81c-2e4a-482f-9697-c984e387de64", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab56a98-f1c3-4a2a-b7a7-b508c0b09681", "sighting_of_ref": "indicator--99dcc351-afff-46b7-9232-d53d3112cbd3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0b6442-882b-45b4-b159-180927a84b26", "sighting_of_ref": "indicator--ad85a1c1-07d2-40d6-aec0-b4282d5ca123", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6168bcec-efbd-4e0e-95de-1b079913e5bb", "sighting_of_ref": "indicator--4358b626-c569-4a69-b1ce-c34e0a4b14a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266507e5-160d-42b9-b06c-f14fe0159bfc", "sighting_of_ref": "indicator--b090d520-7f39-4e3d-b385-f6089ef8359e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb3b60-d878-4b18-83c3-04a00b5e384c", "sighting_of_ref": "indicator--b090d520-7f39-4e3d-b385-f6089ef8359e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62dd6fc-e74d-41fd-8f8a-7ab67b6dc555", "sighting_of_ref": "indicator--b090d520-7f39-4e3d-b385-f6089ef8359e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29522911-a80c-4482-b882-25a7a984bf46", "sighting_of_ref": "indicator--b4bf863d-b803-410d-8b81-545e9771356b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4070ae02-47c6-46b1-83f2-a530fa19e403", "sighting_of_ref": "indicator--5e5aae64-f710-4286-9c72-7d1832ec8baf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd75b2fe-0caa-4d74-b565-934027161479", "sighting_of_ref": "indicator--8da0556b-558c-4de8-bf07-a3b964a9df55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ececb8a3-f5bb-4d94-b60f-0593b14b83c4", "sighting_of_ref": "indicator--f286ad1d-2a72-433e-a4e7-910f48bfa927", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d417b0f5-f45a-4543-be41-e4ae094c6c66", "sighting_of_ref": "indicator--5c599a40-3f93-4b3a-a859-50af6d0ccef1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aef4372-7f63-409c-aab9-6501cee3e008", "sighting_of_ref": "indicator--4cb37739-ecf5-4d9f-88e3-aedd7a721938", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c117e113-dce3-41dd-80c2-331b6e0e8be9", "sighting_of_ref": "indicator--4cb37739-ecf5-4d9f-88e3-aedd7a721938", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab904d8-d0fb-4244-a562-6a5a7b5bea4a", "sighting_of_ref": "indicator--4146e315-a718-4dc3-9b9a-a7878bfc3814", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ed7980-46a0-4cff-920d-c3c030265f7f", "sighting_of_ref": "indicator--237ed22f-0e2a-43ff-87fb-ba33207bb749", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cd1d9e-ed31-44d6-a8f7-d46d06091c49", "sighting_of_ref": "indicator--b25fe6db-6990-45a0-bf53-bf7ec6a89585", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae74f6a-7462-4a87-ba69-e3e83d99d851", "sighting_of_ref": "indicator--08fcf99b-219f-4789-8682-90a4fb9599d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904970cf-d544-47d9-abe2-9a09070f9e91", "sighting_of_ref": "indicator--08fcf99b-219f-4789-8682-90a4fb9599d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b2b22f-51fa-4973-958a-2848ac7818a4", "sighting_of_ref": "indicator--a85d44db-382a-4b08-9353-df77492176a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ada500-52c2-450b-9236-dbd562047bdd", "sighting_of_ref": "indicator--529771ab-135f-43ec-885a-c555200ca764", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef3b566-eed2-433a-9b2f-011f64ee9f64", "sighting_of_ref": "indicator--fb3bf129-47b0-4f7e-8e09-b12904645d92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed978496-5964-4e4c-9573-bfd6081de660", "sighting_of_ref": "indicator--fb3bf129-47b0-4f7e-8e09-b12904645d92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f8b0b4-b23f-4d81-ac34-e609e4fb1ec9", "sighting_of_ref": "indicator--89e95f71-ff1a-4e29-a6fa-108493c44c3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f7b2d2-37b0-4d45-95d6-7506c46afaba", "sighting_of_ref": "indicator--270db484-cd59-4b49-b8b3-af0a11e73b25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc08c611-0537-4407-bd25-524a5b317333", "sighting_of_ref": "indicator--270db484-cd59-4b49-b8b3-af0a11e73b25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f0c943-26bc-409b-9e23-abec40bc2902", "sighting_of_ref": "indicator--5982d421-3cf3-4678-bbd4-6ace8dcbc3b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9552fb-2f89-4573-a6d9-c6c85249ad4c", "sighting_of_ref": "indicator--ba39d175-b3a6-495f-9c08-d0972ac22188", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf3dbe0-a045-4e49-a9ca-2f140ac0e3cc", "sighting_of_ref": "indicator--93156b55-a098-4420-8c3a-c57eba370a2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d63c37-75da-4223-adf1-f30c5196f442", "sighting_of_ref": "indicator--93156b55-a098-4420-8c3a-c57eba370a2a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb6b55e-03a7-4ba4-9c60-ed8f38c62b13", "sighting_of_ref": "indicator--d71d976c-677f-4228-bdb0-f3832352ee1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e51fbf-96d8-4041-8e47-391ab9571f0e", "sighting_of_ref": "indicator--aacf21b0-f139-4e2e-9a4c-15d1f1948cbd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c92a9c8-ac87-45df-8695-ca6b0e668833", "sighting_of_ref": "indicator--b56f2d80-8305-4f5a-a2b9-025c121195a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbffc1e-4ed7-419b-a8d9-60297404f489", "sighting_of_ref": "indicator--1192171c-64e7-4ede-b338-f51eedec3c97", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4bee77-ea8c-43bd-95e2-ec4cea935e9e", "sighting_of_ref": "indicator--1192171c-64e7-4ede-b338-f51eedec3c97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d0e9ac-34dc-4a1b-ae8a-90202e969871", "sighting_of_ref": "indicator--cef1629f-12e6-4ab3-b4fa-cc8fdb3fb680", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9988e54e-604f-4645-aa24-b5c64ce3cd38", "sighting_of_ref": "indicator--2fe1cf77-5682-417e-af5b-e513694e8a95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcde5ea4-58d0-490c-969f-128e9c3f6064", "sighting_of_ref": "indicator--a8cee0dc-8bc2-4d83-8a44-8ef3485b4954", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7637d5-c904-4b25-b2d0-4294cd4b8d3e", "sighting_of_ref": "indicator--96b3c410-ff2d-4d7f-96ca-8448d210c620", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f39751-82d7-4740-b0ce-73cf478a4c20", "sighting_of_ref": "indicator--9c41e54f-3fe0-4175-a6a3-c9ea1860e14f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ecba5a-d703-4cac-a5d8-a111d8c47a01", "sighting_of_ref": "indicator--f9921359-787c-4660-b208-98b3bc2c1740", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c703b3-8954-4b3c-984c-cb887816bfe4", "sighting_of_ref": "indicator--10213b25-0d51-40bc-876b-eefe895bd62e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bf0c53-a0f8-4d02-913c-1e6675d94327", "sighting_of_ref": "indicator--10213b25-0d51-40bc-876b-eefe895bd62e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1ac4d1-1ce0-4d66-9ef2-5233a72f4969", "sighting_of_ref": "indicator--0cb2d752-58c9-405d-a07b-26f414a8e372", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fea55a-15d4-4e69-8663-36d009d54ec1", "sighting_of_ref": "indicator--0cb2d752-58c9-405d-a07b-26f414a8e372", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7d00e9-b60d-47bf-b398-0ed1182f1904", "sighting_of_ref": "indicator--e9d37581-1acf-4085-96bc-93b48b9aa9a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a17a4-8e45-4dc8-858b-fce511880e18", "sighting_of_ref": "indicator--e9d37581-1acf-4085-96bc-93b48b9aa9a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9f7f25-2380-40b5-8720-877f5b2351b9", "sighting_of_ref": "indicator--963e09a2-8d16-4f9f-8cb8-b4a7d3e30d92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc3278c-c403-4cb2-8066-24ed1e9323fb", "sighting_of_ref": "indicator--963e09a2-8d16-4f9f-8cb8-b4a7d3e30d92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d73cc5-7055-491b-9275-1198cff9d96e", "sighting_of_ref": "indicator--4365f7ba-ab0e-4947-b6fc-1732524aa256", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48481eda-2eb4-4631-845d-ff34a485e467", "sighting_of_ref": "indicator--84c736f8-443c-45f0-a98f-4d8dc28423d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03bf047-733e-4c2d-94e6-d76c80fd6095", "sighting_of_ref": "indicator--4a2c0416-79f5-48d4-9d03-1d2b11eb0b84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d866cda7-ac48-4585-91da-047fa17fdaf0", "sighting_of_ref": "indicator--623eb334-ac03-411a-9dce-4469df5ad91f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecebdecb-0420-4513-834c-277c30f61bb5", "sighting_of_ref": "indicator--623eb334-ac03-411a-9dce-4469df5ad91f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33afcbe-8702-406b-868f-8c14b895cb03", "sighting_of_ref": "indicator--e9e8fa6f-2461-4953-9a14-5bb55fa566b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f106ba3b-dbee-4b5c-a78a-01716d7e8e22", "sighting_of_ref": "indicator--f4f098a3-d746-43a8-872d-373f99f376c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8427a827-632b-4d8a-baff-31be86b4670f", "sighting_of_ref": "indicator--f4f098a3-d746-43a8-872d-373f99f376c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c53fc2d-31ae-4a8d-a800-552d0e38c309", "sighting_of_ref": "indicator--ce3140cb-f333-4383-8bef-68121d29130b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fdb4a7-224f-4f0e-9f78-3269415cd632", "sighting_of_ref": "indicator--621148e2-b6b7-42cb-bff0-f8f3038856d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6492ef6f-959b-4f22-baea-3350bfab7e7c", "sighting_of_ref": "indicator--9bbf2957-c05a-4a4e-8bd8-e5923c99b296", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba90e1e-6ba1-4606-8047-1ea0fd393089", "sighting_of_ref": "indicator--d797bf30-fed8-4274-8ac7-9b9e39833ba2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e775110c-0f02-4422-a435-7f0f6d26609a", "sighting_of_ref": "indicator--2ae1e68c-8f1c-4513-ba8d-720eed4dce06", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba6aa8-64fc-4640-96c8-1b52921d0450", "sighting_of_ref": "indicator--e1d9ee22-8610-4782-95cc-7bb4cfd5b020", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945799a5-b795-4eba-a35d-9d6e4986d183", "sighting_of_ref": "indicator--e1d9ee22-8610-4782-95cc-7bb4cfd5b020", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc191cd-2457-413b-8575-ed668a1b8e05", "sighting_of_ref": "indicator--df97cbe6-cfb8-4254-8b10-c0a65ccb4244", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0fd3f2-8b64-49ad-ba0a-b2ecf1e42c60", "sighting_of_ref": "indicator--df97cbe6-cfb8-4254-8b10-c0a65ccb4244", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da4eb32-d3ff-4abf-bff7-1cb64454eb3c", "sighting_of_ref": "indicator--a6933c65-cbb5-4984-ad2d-a994411fbffe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d102fe23-013f-4bb8-941d-54d9e9286d2b", "sighting_of_ref": "indicator--a9543935-d3b4-48c1-8194-4db1c6eb6b66", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ed4ff1-dedb-4b27-95f7-2240c985edac", "sighting_of_ref": "indicator--15e804fd-32e2-49ef-8c93-49a63bd41ba8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700f4b41-6541-4936-b815-02520a86898d", "sighting_of_ref": "indicator--b2363aa5-81d2-4cab-b80c-bcb55cd1745b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8b75c3-a5c9-4b69-8099-1cdc2bec64c7", "sighting_of_ref": "indicator--1ebd9667-a088-4c54-a716-0ecc281ce2c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7245c924-9c4a-4ce1-80c9-d0336477474e", "sighting_of_ref": "indicator--1ebd9667-a088-4c54-a716-0ecc281ce2c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe2db67-e233-4c12-934a-8963e1567670", "sighting_of_ref": "indicator--06b76a36-c088-4721-a1d3-008ca0580f69", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4550058e-ba57-49c5-87b6-06a3404438ba", "sighting_of_ref": "indicator--06b76a36-c088-4721-a1d3-008ca0580f69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5082f0c6-ee0d-4f47-8084-2069ef76e800", "sighting_of_ref": "indicator--2199b404-0975-4aee-a99d-950ea51a9d28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3085f21-a08f-4471-bdf3-b4faa4d3e1d1", "sighting_of_ref": "indicator--54a97629-5fa7-42b9-818c-fbbf22fc4f40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87387e34-43c9-478f-b216-23fef6fd9e06", "sighting_of_ref": "indicator--54a97629-5fa7-42b9-818c-fbbf22fc4f40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f68fd7-c410-42de-b13c-40832931f97c", "sighting_of_ref": "indicator--482abb15-b49e-4520-b4b0-e7a4b574a6ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e07ede-14e4-40d1-b6d2-629d533d5637", "sighting_of_ref": "indicator--482abb15-b49e-4520-b4b0-e7a4b574a6ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6b27f8-f2e0-48ae-a86c-bfc88f684ef9", "sighting_of_ref": "indicator--3a775bfb-0be7-4ecc-9d2d-3fad0d6e915a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe52012-28af-4f53-8033-d28e6daae7cc", "sighting_of_ref": "indicator--43a926a9-533a-4c85-ad69-186d96c84fdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7da503-f1be-42be-9e09-7da8477dfdf2", "sighting_of_ref": "indicator--9c5a4596-3bdd-4135-a48a-4905fc2de9d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76e6e5a-f9dd-46c3-b025-e942e0c6ca8d", "sighting_of_ref": "indicator--9c5a4596-3bdd-4135-a48a-4905fc2de9d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8768b33-9cff-49a8-a73b-870c6b423ef2", "sighting_of_ref": "indicator--9c5a4596-3bdd-4135-a48a-4905fc2de9d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6652e4-3d47-4cf6-b8a1-f8bdf7dc6e8c", "sighting_of_ref": "indicator--3ba67c38-9970-4d52-8ae9-4fb572c17c8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75744664-46ac-4ff9-934c-8de5b5260c40", "sighting_of_ref": "indicator--3ba67c38-9970-4d52-8ae9-4fb572c17c8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfef380-16db-48d5-b99f-1ca3256ab189", "sighting_of_ref": "indicator--3ba67c38-9970-4d52-8ae9-4fb572c17c8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b91d2d-aad1-4fe2-a896-ebde8b00c2c4", "sighting_of_ref": "indicator--e93bed42-f2c7-4a25-b9a8-5fc6fd353eac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45617d78-fbf3-4c4e-bfc2-afeba41b5100", "sighting_of_ref": "indicator--484be653-8e7a-42d3-9c7f-500907747bef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7f1e32-8cb8-4592-a5c6-ad5a66ab76eb", "sighting_of_ref": "indicator--3bcfdf2c-eeff-4624-8256-24e05c000905", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055146cd-fe11-490f-968a-0cd49d43ee22", "sighting_of_ref": "indicator--4fd576c4-83d3-437b-93e8-6265dca6261e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9064a8a2-e6fb-4087-a1ba-43edb9daca68", "sighting_of_ref": "indicator--61b10545-882a-4d20-887b-151d87b8f9e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004238e-0035-4fac-8296-abd49c9d7197", "sighting_of_ref": "indicator--61b10545-882a-4d20-887b-151d87b8f9e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bb6f9d-9db4-4b15-92d4-935673d906f0", "sighting_of_ref": "indicator--9c52fd3c-7080-4847-898c-b04678d7bac9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b5c009-bd33-4514-b184-4d208324c486", "sighting_of_ref": "indicator--e0e12520-8cbc-40a7-88ae-7abec6b414e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21800085-7ee4-4ef6-bcfa-a387d6d8f0cd", "sighting_of_ref": "indicator--e0e12520-8cbc-40a7-88ae-7abec6b414e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fedf9ed-6ce7-4075-aac0-0d7e4ba92ba3", "sighting_of_ref": "indicator--e0e12520-8cbc-40a7-88ae-7abec6b414e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393e3ec7-9ff3-486b-b13d-a1fd4403e0ea", "sighting_of_ref": "indicator--e76d71e8-008f-448b-8c24-29bc66456849", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383c9b22-e5ca-4f6f-9c74-799a551f431b", "sighting_of_ref": "indicator--e76d71e8-008f-448b-8c24-29bc66456849", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99f2787-cee6-42c6-aebc-1a21144d4b18", "sighting_of_ref": "indicator--e76d71e8-008f-448b-8c24-29bc66456849", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e16b3b-3190-4cf6-89ff-d4e86d1db667", "sighting_of_ref": "indicator--64a9269b-9cd7-40fe-8da6-52e7474e0406", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca8f83-918c-4f8b-ad34-82527e63a36d", "sighting_of_ref": "indicator--430646d0-33e6-403e-8407-709e558d04f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeb1eec-da55-4f2c-81ed-a1962692d0b4", "sighting_of_ref": "indicator--430646d0-33e6-403e-8407-709e558d04f5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca4b493-b146-4fe2-adf2-170eae7d545b", "sighting_of_ref": "indicator--fbef632b-c0cc-4d57-8724-9744921fc89f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5193fdbc-7936-4138-93cc-efe74272ec9f", "sighting_of_ref": "indicator--92f1c429-0130-4417-9aea-b5382094648f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d579dd-43fa-4547-b478-8774d10a8eca", "sighting_of_ref": "indicator--c9642830-c201-4b45-b38d-4fb5a758ef8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541d7144-5af6-4a24-af39-fe006eabe630", "sighting_of_ref": "indicator--c9642830-c201-4b45-b38d-4fb5a758ef8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f36d6c-c808-45ff-b2d9-b36ff94a65e2", "sighting_of_ref": "indicator--c9642830-c201-4b45-b38d-4fb5a758ef8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb31591-6b4c-4b0e-8d90-87309f1f7236", "sighting_of_ref": "indicator--2a3b476d-16e3-4e0b-a32f-a76dd7c15336", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1bcb4e-50d9-4241-8421-98677b8d28c3", "sighting_of_ref": "indicator--2a3b476d-16e3-4e0b-a32f-a76dd7c15336", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3524c405-1d7d-425e-a171-032f574b1e3b", "sighting_of_ref": "indicator--ef8ea33f-428d-486e-aaab-9cd863f14249", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95394ae4-bcc1-411c-8096-389af57d613a", "sighting_of_ref": "indicator--9cba34ee-ebe0-4cae-bc80-b98b2d758dfb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28418672-77b7-47f1-9743-e557b2f90c27", "sighting_of_ref": "indicator--9cba34ee-ebe0-4cae-bc80-b98b2d758dfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d260fda0-421d-4088-ab12-e0cda3c0f100", "sighting_of_ref": "indicator--255151f9-807e-44ca-a230-fc405e02e452", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c346ad9-3ef1-4dc6-967f-0d4abedfb767", "sighting_of_ref": "indicator--365cc3c6-143c-45fe-8596-620e69d582cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4550db18-cd38-4a6b-a134-d14d7efcbf0a", "sighting_of_ref": "indicator--365cc3c6-143c-45fe-8596-620e69d582cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847c6f2e-e916-4697-941f-63ffff23691c", "sighting_of_ref": "indicator--150ef49b-bc7a-426c-942d-5e2114189fbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5a6b1e-a0a0-4bef-aa49-12f1e464dbfe", "sighting_of_ref": "indicator--150ef49b-bc7a-426c-942d-5e2114189fbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6462ee1c-680a-443d-905f-adca3df1afa0", "sighting_of_ref": "indicator--3eabaefa-0f0f-40c2-8638-a4e3c24500c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec908ce7-7dff-4a65-87a0-af6e6eb85409", "sighting_of_ref": "indicator--e0a43db4-cc90-4b40-9e80-fe7dbb28fc22", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b608d09-960c-462b-b97d-56d274656495", "sighting_of_ref": "indicator--e0a43db4-cc90-4b40-9e80-fe7dbb28fc22", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa47f55e-6059-4a14-b26f-b1cdaa274c5a", "sighting_of_ref": "indicator--97609ef1-766b-407b-8b5a-16e5ff3d8c2e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516fcbd0-6dd0-4e9f-a977-a0fa0fcdb515", "sighting_of_ref": "indicator--a39af141-6625-4446-ae85-b0604fc38206", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097b083f-5ba8-485d-af69-241b5b670851", "sighting_of_ref": "indicator--f3418508-e88f-405c-b55c-013cef72cac6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b2973-8dd5-4611-9b50-8d37028843b6", "sighting_of_ref": "indicator--f3418508-e88f-405c-b55c-013cef72cac6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f6330b-3890-4e37-b56a-8299f92e974b", "sighting_of_ref": "indicator--9ab6ace0-4882-43b9-8079-a9682d19d4cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352560c-7cc7-484d-a20a-75ce16b76540", "sighting_of_ref": "indicator--9ab6ace0-4882-43b9-8079-a9682d19d4cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc2440f-b500-439d-b25e-eef4d80fc78c", "sighting_of_ref": "indicator--9ab6ace0-4882-43b9-8079-a9682d19d4cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af07ab09-ee41-4815-a621-bc5e3481d7a9", "sighting_of_ref": "indicator--996dbb51-1f90-4a06-8eab-f3e3a03f6852", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c65c276-7973-4b84-b7fe-accca8e1de85", "sighting_of_ref": "indicator--996dbb51-1f90-4a06-8eab-f3e3a03f6852", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ab477b-db5f-4c1c-9364-4ca35409c055", "sighting_of_ref": "indicator--996dbb51-1f90-4a06-8eab-f3e3a03f6852", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0967447-2e3b-48a0-b811-360ce22a5299", "sighting_of_ref": "indicator--21f3ac3d-86fc-41a0-aa06-fa291ffe9a55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6eb4ec-3fd2-413d-81cb-09ac2a99f5b5", "sighting_of_ref": "indicator--1e5c4b62-a9dc-475a-b93e-63aa755a9c46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8b58b-98af-4a2d-8ed4-ba51e3f29849", "sighting_of_ref": "indicator--d8bb9a88-f5c1-47d7-87d7-984dc44ea20a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d9fc4e-20ce-4683-986a-a2411d84169a", "sighting_of_ref": "indicator--76dd38ea-7bb2-4790-bc01-e671b9b589ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94117b20-d91a-433c-9231-71cb2c0ac689", "sighting_of_ref": "indicator--76dd38ea-7bb2-4790-bc01-e671b9b589ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83937fe6-edbf-4f61-9e36-aa3967c00a72", "sighting_of_ref": "indicator--d795e2b0-2dcf-422b-93f4-58b773df0351", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c49279-9524-42b9-ab12-2603a6d9eff6", "sighting_of_ref": "indicator--d795e2b0-2dcf-422b-93f4-58b773df0351", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfee74f0-da72-4850-bb71-b8beccf2fa0b", "sighting_of_ref": "indicator--9ba769d2-95b4-43c5-8be3-98e43855063f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e15569-7c5e-4c61-97e6-f6690492111b", "sighting_of_ref": "indicator--67e7e79e-df58-4212-8182-51c4bdb74bfd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1b45e-5ce0-429d-9b15-5fdd5192ffd2", "sighting_of_ref": "indicator--67e7e79e-df58-4212-8182-51c4bdb74bfd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddbe1cc-8ab3-4b7c-a2ac-0d994ac44cf1", "sighting_of_ref": "indicator--afe26159-d8f3-4d7a-8eda-d947f232a4de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff51d8c-084e-490b-a700-3362b0d9f831", "sighting_of_ref": "indicator--afe26159-d8f3-4d7a-8eda-d947f232a4de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ca1d0c-f391-4fce-9c90-05ac325f398b", "sighting_of_ref": "indicator--bc01d40b-4821-4da5-a17d-26b82038264e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6adafe6-7926-4be9-a16d-c9dd78605112", "sighting_of_ref": "indicator--952b9472-1c69-4e38-94ca-4e7021db0b40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c12576b-9776-4a39-a5bf-6edfed492b59", "sighting_of_ref": "indicator--952b9472-1c69-4e38-94ca-4e7021db0b40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae30bf26-a02e-441a-ae4e-038c7432ca2d", "sighting_of_ref": "indicator--ea285d4d-33ea-45e2-a024-db79ecaf17b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a322ea-3ce7-413f-b056-86330adf0563", "sighting_of_ref": "indicator--9eea5a55-f811-4862-a7b0-a4651e1a617d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f80940d-274f-42d1-8698-2a46a15693d4", "sighting_of_ref": "indicator--6fb5208b-788d-453f-ba5e-7c80ff2eb45d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a28ff3b-b45f-46ba-a7d2-0ad1c4ad53fa", "sighting_of_ref": "indicator--77b75a11-f47f-4d43-b7c3-fc67f9f19a75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ba20e3-d704-4e5f-9c05-10b16b97be18", "sighting_of_ref": "indicator--77b75a11-f47f-4d43-b7c3-fc67f9f19a75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674543fd-9257-4c60-ab7a-f93030bc38b5", "sighting_of_ref": "indicator--77b75a11-f47f-4d43-b7c3-fc67f9f19a75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0664107-1a71-483d-adbc-69adf6ca8a62", "sighting_of_ref": "indicator--afe0ef9f-df11-4dbd-8b36-addd749aad51", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d1fb0b-0f97-4a2a-83e4-879ce0fc8846", "sighting_of_ref": "indicator--afe0ef9f-df11-4dbd-8b36-addd749aad51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca62fb5-2a1a-40a0-a305-38a9c9a82b3e", "sighting_of_ref": "indicator--afe0ef9f-df11-4dbd-8b36-addd749aad51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c83200c-3fba-4687-a3b8-0de8f97b88b5", "sighting_of_ref": "indicator--444b3fc1-8922-4d39-a531-3e7a26e71394", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279022d0-2650-4261-9737-84882b57177c", "sighting_of_ref": "indicator--444b3fc1-8922-4d39-a531-3e7a26e71394", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc58be2f-0931-44fb-a6a5-21c50f2b004a", "sighting_of_ref": "indicator--941f8b15-08fc-40c4-812f-6f3fdb25c27d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9629efc-2c21-445f-b98d-b5ebad1c7deb", "sighting_of_ref": "indicator--941f8b15-08fc-40c4-812f-6f3fdb25c27d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165cbb3b-384e-4faa-8326-c509880b3ed6", "sighting_of_ref": "indicator--941f8b15-08fc-40c4-812f-6f3fdb25c27d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acaac7c-6931-4c75-a611-e9e987195002", "sighting_of_ref": "indicator--c93cdef2-ef6f-41e2-bdea-05b1726568e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc5e82d-cc89-45e9-aab2-6da6e36b8a0a", "sighting_of_ref": "indicator--c93cdef2-ef6f-41e2-bdea-05b1726568e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf12758-dbf6-4a74-b99f-d0261f6ff83a", "sighting_of_ref": "indicator--c93cdef2-ef6f-41e2-bdea-05b1726568e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff08c193-e900-4a4f-bf09-14092bd74c4b", "sighting_of_ref": "indicator--857abc16-91be-4acd-b996-e42b10a1259c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f7e1d2-093e-4798-9de4-6f011d4bc304", "sighting_of_ref": "indicator--857abc16-91be-4acd-b996-e42b10a1259c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed4c454-a2b0-4b14-8017-7d7986e88db7", "sighting_of_ref": "indicator--857abc16-91be-4acd-b996-e42b10a1259c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3eb5c8b-4877-40cd-ba9a-6c2931b75dc4", "sighting_of_ref": "indicator--39660155-1be2-4cf1-be0a-068c0f95db71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5a3d9-ef78-4bd0-b684-3234c367e822", "sighting_of_ref": "indicator--39660155-1be2-4cf1-be0a-068c0f95db71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0592c58c-809c-4336-a2c5-7c71fc76ee24", "sighting_of_ref": "indicator--39660155-1be2-4cf1-be0a-068c0f95db71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c9f0f8-f574-4e21-96ab-45ad355aaf57", "sighting_of_ref": "indicator--a1f0684c-522b-4a57-93ff-e6f37843a10f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cf00f6-1d47-443c-987c-72c81987b196", "sighting_of_ref": "indicator--a1f0684c-522b-4a57-93ff-e6f37843a10f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8293ea-401a-47ca-a917-ea4e04be6cea", "sighting_of_ref": "indicator--8e8f9b3f-bef2-402f-9757-62c008d280d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75824a5a-3877-4077-b8c4-5de7b5aef6b6", "sighting_of_ref": "indicator--8e8f9b3f-bef2-402f-9757-62c008d280d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950aad5d-553c-4d24-92c7-ec74fe7605e2", "sighting_of_ref": "indicator--3acbdcca-99fa-4abf-9132-bf0d3b104c44", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc95a029-03e1-41aa-be1c-c8274f43eceb", "sighting_of_ref": "indicator--3acbdcca-99fa-4abf-9132-bf0d3b104c44", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca56631e-1630-4431-8618-0db58727e0f3", "sighting_of_ref": "indicator--3acbdcca-99fa-4abf-9132-bf0d3b104c44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3c9308-88df-4bc3-ba0e-491e0b5cba0f", "sighting_of_ref": "indicator--9ebd0dd8-b26b-413e-a5c9-c23a18bf0408", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321853c5-16c6-4730-9b98-af2b16eb2b79", "sighting_of_ref": "indicator--9ebd0dd8-b26b-413e-a5c9-c23a18bf0408", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ff06be-48ec-4c44-ab77-3f4fda0efed1", "sighting_of_ref": "indicator--9ebd0dd8-b26b-413e-a5c9-c23a18bf0408", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7687d57-d573-4e7b-9aee-4a045954b0cf", "sighting_of_ref": "indicator--9ac7cda2-45e5-49bd-bd4c-c7cc345a500b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b4ddc-7c23-4b8d-958b-9def1ba7ebf2", "sighting_of_ref": "indicator--9ac7cda2-45e5-49bd-bd4c-c7cc345a500b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e719df1f-e393-4764-a686-79a4cd614e03", "sighting_of_ref": "indicator--4bd07d2a-be77-4109-a499-09319708bd85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58afee89-2b37-419e-bcbb-6119f086e4df", "sighting_of_ref": "indicator--4bd07d2a-be77-4109-a499-09319708bd85", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8e81f1-a252-4e15-b0d7-6d6edf879be2", "sighting_of_ref": "indicator--fbe47933-9099-4f34-bd27-985d9080cb42", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7794a21f-51ae-48a4-ab96-166f298cbeb5", "sighting_of_ref": "indicator--fbe47933-9099-4f34-bd27-985d9080cb42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bad0042-8c80-4c54-85c4-00d9c7f81af8", "sighting_of_ref": "indicator--03144dc5-8f06-4c1e-8d90-459d9b48682d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7f0bc1-9aa8-47f8-863d-f3945f9a7da9", "sighting_of_ref": "indicator--03144dc5-8f06-4c1e-8d90-459d9b48682d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19aa32b-efde-4645-8f72-d854000601ed", "sighting_of_ref": "indicator--7f3703a2-1429-4497-9722-ea13ec6d8cce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8ca7bf-f09a-4d75-aca8-119cd79d89a2", "sighting_of_ref": "indicator--7f3703a2-1429-4497-9722-ea13ec6d8cce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd95110-8341-4a63-abdc-e11de1390653", "sighting_of_ref": "indicator--58aea122-2aec-4cf5-b0da-4ade43f53f2c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b08486d-a7bf-41e0-aedc-c0d002de92a3", "sighting_of_ref": "indicator--03c5dd7f-5dd3-47dc-9282-731ef2815b95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd82402-6486-49a5-82b2-850829342af9", "sighting_of_ref": "indicator--fb07b8ec-7ecf-4c2d-9f92-d3f6c8c29c0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30148f74-26c3-41b8-b1f8-849d23559e9c", "sighting_of_ref": "indicator--fb07b8ec-7ecf-4c2d-9f92-d3f6c8c29c0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe736769-70a2-4a41-8f1a-048820242ccb", "sighting_of_ref": "indicator--307774a3-563b-4b12-94fc-f4c08bb20e55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a37d26-f295-4c32-9480-60f4802278de", "sighting_of_ref": "indicator--85832ac8-7ef4-4a70-a81e-b982bc44a8f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637f14a8-b574-4a14-8d5c-a1fd9eea8f3b", "sighting_of_ref": "indicator--85832ac8-7ef4-4a70-a81e-b982bc44a8f7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6545a4-65d1-4a2a-82e4-4b5316d98add", "sighting_of_ref": "indicator--8ba1859f-2a63-43f2-b32d-1e3a74728e01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f55918-538f-404f-96de-fd5444a4966d", "sighting_of_ref": "indicator--8ba1859f-2a63-43f2-b32d-1e3a74728e01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7a3400-9345-4b4a-85e7-fd84a43499d5", "sighting_of_ref": "indicator--7177a602-0e37-4445-a924-61ca9aa2a100", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e10daf-e5f8-41b6-98c3-71a7cce16f64", "sighting_of_ref": "indicator--7177a602-0e37-4445-a924-61ca9aa2a100", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ba2756-c552-4bf5-85b9-69e84266fe51", "sighting_of_ref": "indicator--4a7d058d-fa4c-4bf9-9e83-edc616280a5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8a95e7-b433-4740-ad74-ac3226f5dc09", "sighting_of_ref": "indicator--4a7d058d-fa4c-4bf9-9e83-edc616280a5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9882c3-171c-4a57-966a-f5d74aad2e1e", "sighting_of_ref": "indicator--4a7d058d-fa4c-4bf9-9e83-edc616280a5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788ac1df-d0bf-4efe-ad91-baa4eceed270", "sighting_of_ref": "indicator--d9863aca-245a-4981-9d99-1041ad2ff0ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e866f3e0-8fd1-4f72-ad48-40ad566b8b6c", "sighting_of_ref": "indicator--d9863aca-245a-4981-9d99-1041ad2ff0ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9e1ea4-71d5-4b60-a378-d598047e68ef", "sighting_of_ref": "indicator--80ea39d6-ecb8-465f-98e4-d04d99560e4c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e0c6f0-cc75-4f5d-b957-e11d06341264", "sighting_of_ref": "indicator--80ea39d6-ecb8-465f-98e4-d04d99560e4c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb20ec7-c7de-41ce-9987-d09a1e48a410", "sighting_of_ref": "indicator--80ea39d6-ecb8-465f-98e4-d04d99560e4c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ed5808-6269-4801-a142-fd5ff7f3fb6a", "sighting_of_ref": "indicator--aafd1815-4adc-4e3e-a158-cdea0f44d6d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12def6fd-91d4-4335-ab92-c9ebb398cfd7", "sighting_of_ref": "indicator--aafd1815-4adc-4e3e-a158-cdea0f44d6d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f79c441-b329-455c-9754-d6a032c460c7", "sighting_of_ref": "indicator--aafd1815-4adc-4e3e-a158-cdea0f44d6d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d08d761-e885-4947-a408-dbb23e706fef", "sighting_of_ref": "indicator--de62ba4f-0fd3-462e-8046-ff2be061433a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89282870-e3c7-4ebc-9abd-50211a530688", "sighting_of_ref": "indicator--de62ba4f-0fd3-462e-8046-ff2be061433a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a795f3e-7500-4dd6-b3e2-87ba3c5e5c4d", "sighting_of_ref": "indicator--de62ba4f-0fd3-462e-8046-ff2be061433a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aaa220-7c0b-4d0c-9790-258aef58592c", "sighting_of_ref": "indicator--afb446dc-a5d7-49c6-943a-91bae45000ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32983fcd-322d-4edd-87ab-d80c2579a491", "sighting_of_ref": "indicator--afb446dc-a5d7-49c6-943a-91bae45000ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7d2b03-f9c2-4575-864b-4880e35fb245", "sighting_of_ref": "indicator--afb446dc-a5d7-49c6-943a-91bae45000ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9ffdc1-8de6-48d5-bfc6-7d511bc254d3", "sighting_of_ref": "indicator--c6771788-8a4b-4d4e-9fc8-8d4166e3199a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a6d889-0e12-494b-a161-6c1eba832f62", "sighting_of_ref": "indicator--c6771788-8a4b-4d4e-9fc8-8d4166e3199a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcd28be-cc32-4040-8bbc-e9b258b431c0", "sighting_of_ref": "indicator--c6771788-8a4b-4d4e-9fc8-8d4166e3199a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5cb50b-5439-4628-9930-e33c1781288d", "sighting_of_ref": "indicator--f35a6022-cea2-4098-a9c9-29662f54c4e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b72fcd-96be-47ef-a396-a10d07cec608", "sighting_of_ref": "indicator--f35a6022-cea2-4098-a9c9-29662f54c4e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0762a98a-7d13-4b4f-8110-8ef5ba882fd0", "sighting_of_ref": "indicator--f35a6022-cea2-4098-a9c9-29662f54c4e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b866e0b9-cead-4298-bdc6-79fba6f2e932", "sighting_of_ref": "indicator--71012c73-db21-4300-bdbf-9183fdfafa89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85567330-cd7c-4bef-9130-ab68c2d7eed1", "sighting_of_ref": "indicator--71012c73-db21-4300-bdbf-9183fdfafa89", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b384978-c38d-470d-b634-0c30676fe4df", "sighting_of_ref": "indicator--ee2c5f4e-6181-4ee3-a4e9-3fe2681ceec1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15ef610-f0c4-47e2-8041-54c407947b10", "sighting_of_ref": "indicator--ee2c5f4e-6181-4ee3-a4e9-3fe2681ceec1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71abca5d-d8f4-4ce0-aa8d-753849dc152d", "sighting_of_ref": "indicator--2c8b5223-0dc8-47db-be56-369e2213f36e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1c3d50-dc48-4078-b319-7999a60c8e5c", "sighting_of_ref": "indicator--2c8b5223-0dc8-47db-be56-369e2213f36e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e470546e-cafe-4baa-8646-5636ddc50b27", "sighting_of_ref": "indicator--665946ea-bb25-48af-8f66-326967c2ceb2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2861b937-30fe-4181-b7c2-4f6e9ac81910", "sighting_of_ref": "indicator--665946ea-bb25-48af-8f66-326967c2ceb2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb5b25b-d970-4f7d-b7fb-8210eb735736", "sighting_of_ref": "indicator--665946ea-bb25-48af-8f66-326967c2ceb2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2db4fc3-8e1b-4680-a1ce-5f5ca1d3b8ef", "sighting_of_ref": "indicator--d5f77d49-5064-4654-9355-04c74b78a3c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3faed4-545e-4366-af47-9089e382f7f4", "sighting_of_ref": "indicator--d5f77d49-5064-4654-9355-04c74b78a3c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98560356-c8ab-43e3-a24f-751af0782d45", "sighting_of_ref": "indicator--d5f77d49-5064-4654-9355-04c74b78a3c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bcb898-d73a-4f79-9533-dd6d3be2a355", "sighting_of_ref": "indicator--10edf0be-863d-49f0-8b92-3af26d341927", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09dbb8f-8428-4af3-ab14-ecb809489531", "sighting_of_ref": "indicator--10edf0be-863d-49f0-8b92-3af26d341927", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35962a6b-bfa9-4803-84ac-8e5ce21bc8dc", "sighting_of_ref": "indicator--10edf0be-863d-49f0-8b92-3af26d341927", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca0fb52-827a-4a4f-9648-b3047ea7b5b6", "sighting_of_ref": "indicator--9a366c62-cca1-4d4a-ab4b-7846f0f6a723", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f011889-51df-4214-baca-7b08a351bf52", "sighting_of_ref": "indicator--9d0530e8-c159-4d45-8cef-c025b06d2c13", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a26b15-1f64-436f-8367-ac83620cf029", "sighting_of_ref": "indicator--ba9034c5-0678-44c2-87ad-03a37bc4e89d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613fdc23-0bf9-4e6e-9935-f1cadbcd8091", "sighting_of_ref": "indicator--eae6ae28-3ee2-43d1-aa73-c541b50b2558", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db4a7ae-8b67-4c42-b67d-bc39a935539c", "sighting_of_ref": "indicator--2ba376c6-2955-4719-a0d0-fab62d118cd1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041cb1f7-9a4a-47e0-9b63-3cfcf699e761", "sighting_of_ref": "indicator--9308841a-6ece-4097-88a2-a194968b1af1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c118e51-fed8-43af-bf62-65e2230be009", "sighting_of_ref": "indicator--bf80335d-1a86-46a1-8056-63d9f8a15710", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3fe4d9-3274-4c66-852a-d30bf3c3eee4", "sighting_of_ref": "indicator--d57b3a98-3136-4acb-9483-ef2a430105a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a357f2f4-a079-4d56-9ce1-19d0a59a4415", "sighting_of_ref": "indicator--cd958097-a605-41d5-9a14-48a75e3a90bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb2cc2c-35ec-4658-80d6-b91a32ca7193", "sighting_of_ref": "indicator--e15f55f0-be83-435f-a7ea-a105f3b71518", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7282f5ee-dff9-44fb-bf53-0909e6b41d99", "sighting_of_ref": "indicator--4c507736-fe66-4dea-a3dc-bd0ff047227c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0d76e0-6c3a-4d8b-b96b-8441b5334a7f", "sighting_of_ref": "indicator--3c6e63df-e725-4555-a68b-38c1ca41dba9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a38f6c1-69d6-4b2a-a4ae-910e77f717d8", "sighting_of_ref": "indicator--3c6e63df-e725-4555-a68b-38c1ca41dba9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7870b268-6b2b-4ad8-8ce3-1dbc9b686ec6", "sighting_of_ref": "indicator--3c6e63df-e725-4555-a68b-38c1ca41dba9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda02adf-513f-4660-a952-3afc8ec50322", "sighting_of_ref": "indicator--4078dfa4-e0c6-4e34-abd5-f3d82f9f18cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b7179f-5f96-4573-9fe8-ed27de4c342f", "sighting_of_ref": "indicator--4078dfa4-e0c6-4e34-abd5-f3d82f9f18cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb550d58-17f6-4219-8a94-9b1e541f1034", "sighting_of_ref": "indicator--4078dfa4-e0c6-4e34-abd5-f3d82f9f18cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae79e13-10ef-473c-8ae0-2e720d792ba7", "sighting_of_ref": "indicator--66fe55c0-620d-4efe-ae15-15fc6bfc73d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8bbd5-3811-40f7-a46a-a5da4dfa4800", "sighting_of_ref": "indicator--66fe55c0-620d-4efe-ae15-15fc6bfc73d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e52d87-5437-435a-b252-2f8a6b42c669", "sighting_of_ref": "indicator--3747885d-b7d6-4eb0-b261-341edd7323f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7886bcc-cd33-4b59-987e-34bc45726d7f", "sighting_of_ref": "indicator--3747885d-b7d6-4eb0-b261-341edd7323f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d79a2f1-c354-4da6-9e7b-53461c3dd6ae", "sighting_of_ref": "indicator--63e42804-a4ca-459a-92d0-65ae546dd124", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6e26ba-e195-4f4f-a608-1a0a1ff550aa", "sighting_of_ref": "indicator--63e42804-a4ca-459a-92d0-65ae546dd124", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50d69b5-588b-4276-8cab-f6c4e68e48b8", "sighting_of_ref": "indicator--63e42804-a4ca-459a-92d0-65ae546dd124", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcb3a82-f792-4c93-aa40-a36388a55e1f", "sighting_of_ref": "indicator--3ec31b90-3d3a-4b47-8538-99219f03a5c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946bd670-ae65-45a3-b0fa-52ea9734d072", "sighting_of_ref": "indicator--3ec31b90-3d3a-4b47-8538-99219f03a5c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513d3b52-1baa-41aa-aca8-f241ff7b70b8", "sighting_of_ref": "indicator--5fdb86d4-51d1-4c8c-a780-e498a392bfdd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc2de1b-eae4-4ac4-b9cb-57e6e98b4ba3", "sighting_of_ref": "indicator--a3aff060-0f3a-4b3c-93e0-ce2304682610", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afd75eb-e379-4530-9eac-1c8b0934c51f", "sighting_of_ref": "indicator--d48e66ad-4f42-4bf6-bc01-0ddf7fac76e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57419778-24c9-47d9-b542-a7994d13ea3a", "sighting_of_ref": "indicator--d48e66ad-4f42-4bf6-bc01-0ddf7fac76e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1869e27-83ba-4db4-b119-241a33474885", "sighting_of_ref": "indicator--d48e66ad-4f42-4bf6-bc01-0ddf7fac76e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3f29d2-0ecb-48d0-b6f6-d336d138599a", "sighting_of_ref": "indicator--08c1a9ee-51a6-4a67-83eb-d44edc025868", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1c6f24-aa38-466b-ad2b-c5cf0c128ccf", "sighting_of_ref": "indicator--08c1a9ee-51a6-4a67-83eb-d44edc025868", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db373cc5-a388-40eb-9495-3c74b022c5fe", "sighting_of_ref": "indicator--fc20b2e0-7c00-429b-9525-3c62d658cb7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d793e35a-8048-47d3-bff8-71beccf7829b", "sighting_of_ref": "indicator--fc20b2e0-7c00-429b-9525-3c62d658cb7c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e73091-6429-46fa-bbdb-4350f9dc7810", "sighting_of_ref": "indicator--fc20b2e0-7c00-429b-9525-3c62d658cb7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73078b5-f276-45bc-97b3-f3c30f739442", "sighting_of_ref": "indicator--b0942f4e-be32-45c5-95e6-32be24a32b82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df04453a-ade2-4f0b-a69f-9038e9c6c18a", "sighting_of_ref": "indicator--b0942f4e-be32-45c5-95e6-32be24a32b82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb56d6a0-7d5b-41b8-8473-4bf637bc7596", "sighting_of_ref": "indicator--b0942f4e-be32-45c5-95e6-32be24a32b82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ea7687-4e4b-46c4-a2ab-6154017619e3", "sighting_of_ref": "indicator--f561899d-2aa8-43ea-b7f1-9d76e78a4abd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c73ee7c-2123-4a95-999c-d09572d81cee", "sighting_of_ref": "indicator--f561899d-2aa8-43ea-b7f1-9d76e78a4abd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1ddcb6-33c0-4acd-b343-8c9a8aafe3b2", "sighting_of_ref": "indicator--f561899d-2aa8-43ea-b7f1-9d76e78a4abd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a58623-18a3-41c8-a2b3-037c00feee9f", "sighting_of_ref": "indicator--5540115e-b69a-4f90-8d7c-0be67d08017f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531de6bb-8f01-4e24-bed8-3b0a786224b5", "sighting_of_ref": "indicator--5540115e-b69a-4f90-8d7c-0be67d08017f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87dd411-2ad7-4fef-a53c-7274b3709f69", "sighting_of_ref": "indicator--baf238be-e423-4dff-83b2-08ba5ff6aeb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7cd9fd-fbb5-402b-922b-afeee7100934", "sighting_of_ref": "indicator--9753588d-32f4-4bbb-9f89-15c9517b9762", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f460ba4b-4f92-4dc6-8340-1b78fc9e26e5", "sighting_of_ref": "indicator--354e286a-1b6f-4853-b491-123a14011e73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722bf4e9-8de7-4420-8f77-e64563d316fe", "sighting_of_ref": "indicator--a8161d36-5163-4056-93bf-841e6ce8d88e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745695bf-739f-4cd4-aa5d-e6eabe8c08c8", "sighting_of_ref": "indicator--4eb702fb-ef8b-485f-8cf4-262329298442", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95065bdb-48d9-4d9e-a3e9-d68a442e463e", "sighting_of_ref": "indicator--d52cd9c1-51e3-4afb-8587-84d2c41db17d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a393cd-a0e6-42cf-b95d-8f88bf9adfc7", "sighting_of_ref": "indicator--830f8dcc-d4bd-49c0-814e-65965eebc16f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5df3040-e5e7-411a-b17d-9b14933a8e9c", "sighting_of_ref": "indicator--97e68842-8d33-4734-8dea-71233b1aa374", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9b90a8-9efb-4c40-9d9f-ee7a9423a139", "sighting_of_ref": "indicator--20339c51-e827-44b8-98ee-f6f5671fb7d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3618db4-31cd-4b18-bc8e-d2fee42c7828", "sighting_of_ref": "indicator--fadb6129-86a9-48e7-8762-745fef111567", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507ade4-16e5-498f-91df-c4b3ad97452b", "sighting_of_ref": "indicator--3538519b-4759-48bb-91e3-78754024f479", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3332c170-94a9-4d95-afb7-b2ea30d5e785", "sighting_of_ref": "indicator--cb2152b4-c259-4ee4-9967-bce22c3a57b2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3f4f9f-cbe6-496e-ab23-04182fc12d43", "sighting_of_ref": "indicator--38ff014e-7b8f-441c-82b1-82763c627324", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9c067b-a0ca-4a07-ba1d-efabf77d57d1", "sighting_of_ref": "indicator--38ff014e-7b8f-441c-82b1-82763c627324", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69a110f-ac72-479a-90e2-7120efbff886", "sighting_of_ref": "indicator--38ff014e-7b8f-441c-82b1-82763c627324", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb8a128-f81c-4d7c-99a0-fc0000679da8", "sighting_of_ref": "indicator--0967db6c-e4c2-4333-87e8-dcdefb42c83b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf59b8fb-b539-4bd2-b7d7-c858f348258f", "sighting_of_ref": "indicator--0967db6c-e4c2-4333-87e8-dcdefb42c83b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f89f7-eda1-4d86-8d38-53cf5bb76104", "sighting_of_ref": "indicator--0967db6c-e4c2-4333-87e8-dcdefb42c83b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ff3070-6534-4263-a553-1025fd6b4c75", "sighting_of_ref": "indicator--656816ab-facb-44d3-a05b-1b804e906f28", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133832d7-e7b4-427a-aae8-4d7b6d7ccee7", "sighting_of_ref": "indicator--656816ab-facb-44d3-a05b-1b804e906f28", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84e1d0b-bb85-4479-8f68-442db4ba7de4", "sighting_of_ref": "indicator--10d3be63-90b3-48fa-8b3c-a3f71d2d9ff5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b7ed6d-f104-4aa6-9862-4b9f19e7d9f0", "sighting_of_ref": "indicator--10d3be63-90b3-48fa-8b3c-a3f71d2d9ff5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e9428c-3894-42a5-980d-437feca059e1", "sighting_of_ref": "indicator--10d3be63-90b3-48fa-8b3c-a3f71d2d9ff5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9e0349-0909-480b-90e3-3a7c038e47d9", "sighting_of_ref": "indicator--3fb908e5-77fd-4e51-9946-e607549c8d19", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c191e7ac-039c-486d-a446-ec11086853f7", "sighting_of_ref": "indicator--3fb908e5-77fd-4e51-9946-e607549c8d19", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80967b6b-44e2-4aaf-a023-5f535ac0689d", "sighting_of_ref": "indicator--fedf3bf2-b5cf-438f-8af1-559231bded9f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee52b3b-c932-4f0c-8846-54889d4f5b2c", "sighting_of_ref": "indicator--fedf3bf2-b5cf-438f-8af1-559231bded9f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855588ec-3ff5-4b9d-b46a-047146ad79b2", "sighting_of_ref": "indicator--3ee9f98b-a293-4dbb-afb5-ea65e98d42e9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d10b88c-fa6c-4f68-a86f-ae86eeb9fc05", "sighting_of_ref": "indicator--3ee9f98b-a293-4dbb-afb5-ea65e98d42e9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f69f6bd-cf6e-418c-9bf7-72a553789b21", "sighting_of_ref": "indicator--3ee9f98b-a293-4dbb-afb5-ea65e98d42e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cc9682-ecea-4068-8a89-bdecbe5fd445", "sighting_of_ref": "indicator--3e9a218f-4869-47db-8b22-b7eb16503fe0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a361e0cd-ce19-4618-ac41-08fb7b7b92df", "sighting_of_ref": "indicator--57e4849a-cad2-4ad5-9cb9-4e027e775e39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715d6116-b91c-4a01-a20c-c9cdeded0de0", "sighting_of_ref": "indicator--57e4849a-cad2-4ad5-9cb9-4e027e775e39", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2cf955-6966-47de-a3f2-5d6844693284", "sighting_of_ref": "indicator--57e4849a-cad2-4ad5-9cb9-4e027e775e39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ae18e6-b5b8-430f-a77f-b08b46821f28", "sighting_of_ref": "indicator--d5f1155e-042a-4d81-9ce0-c1b389436e85", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7214878-4a67-4c68-a980-5ba434f35221", "sighting_of_ref": "indicator--d5f1155e-042a-4d81-9ce0-c1b389436e85", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d530983f-3919-4df4-bf3a-049c1f9f8c61", "sighting_of_ref": "indicator--acb10f1a-3bdd-4e2e-aaa2-5f583abaf38b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0714936-6c44-4b84-a427-f99b00926567", "sighting_of_ref": "indicator--acb10f1a-3bdd-4e2e-aaa2-5f583abaf38b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6e2b2c-de6d-4824-837a-b6549c7cfcad", "sighting_of_ref": "indicator--acb10f1a-3bdd-4e2e-aaa2-5f583abaf38b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63463350-1917-437a-85ad-66eb8bad3ffc", "sighting_of_ref": "indicator--6c73e690-414a-41d7-bfb0-7ce9ff667484", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994b3294-529c-4534-9f2f-4a5a776f7dd2", "sighting_of_ref": "indicator--6c73e690-414a-41d7-bfb0-7ce9ff667484", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc224ea-bd49-4350-87c4-e4b1b8dda500", "sighting_of_ref": "indicator--6c73e690-414a-41d7-bfb0-7ce9ff667484", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0360383-d43f-4d61-b8da-15c77e5ded44", "sighting_of_ref": "indicator--d1c781a9-915b-45a2-b2fe-eaabb5b5f1f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ca0ad-823d-482d-ac1f-613d12700a33", "sighting_of_ref": "indicator--d1c781a9-915b-45a2-b2fe-eaabb5b5f1f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e16e3a-6bf9-45a6-811a-2ecddc1d0772", "sighting_of_ref": "indicator--d1c781a9-915b-45a2-b2fe-eaabb5b5f1f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28494e34-1de2-42c4-be7a-2d84bc39afc5", "sighting_of_ref": "indicator--0d5f04d6-b92c-4481-9121-f6a82b281f09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8625d369-8eb8-4343-8214-21dc36ef7950", "sighting_of_ref": "indicator--0d5f04d6-b92c-4481-9121-f6a82b281f09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dc2c8c-7e43-417e-9c5d-dfeb683a768b", "sighting_of_ref": "indicator--0d5f04d6-b92c-4481-9121-f6a82b281f09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0414a64d-2b9d-42dd-8ac8-11122af01e08", "sighting_of_ref": "indicator--47f914d1-598a-42da-97e4-7b03f0e3e8ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64f3695-04e9-4d36-819c-b6ff7cf744d1", "sighting_of_ref": "indicator--47f914d1-598a-42da-97e4-7b03f0e3e8ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878d6b1-00ba-4b38-b69a-b5ab1e250d59", "sighting_of_ref": "indicator--e61487f8-eb92-4cf9-89c9-db7ae81cff33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c093551-f4e8-4dd7-913e-f832098341e7", "sighting_of_ref": "indicator--e61487f8-eb92-4cf9-89c9-db7ae81cff33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2214a8-bc7c-4c4f-96ba-c2ab65b964e4", "sighting_of_ref": "indicator--639f7e88-e825-4773-aa64-759a868cd3bb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea51aed-4609-4dcb-82fe-e27d84925c9a", "sighting_of_ref": "indicator--da5f84b9-6f44-49c6-b051-e2ebaaeef9f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a84dd4b-35c3-4cdb-95b1-b19831c5a46b", "sighting_of_ref": "indicator--f40c4dd1-e83b-48e1-bb8a-90a24ce846b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c8bc04-94fd-4442-9cb5-3a3540d444c5", "sighting_of_ref": "indicator--909e6069-8e6e-462b-9d25-2344545d6e70", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b2997d-cd39-46da-8758-8d7f59efe39c", "sighting_of_ref": "indicator--d139bced-be15-4e93-848d-16f4abe602a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec484381-158c-4d7d-b5b3-b1b269182a22", "sighting_of_ref": "indicator--52d6b6a5-eb32-4a2c-8e49-ae641ae5275d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81ab1a4-5bd6-4e47-976b-1231c15ec6fb", "sighting_of_ref": "indicator--9718fbdb-3997-4dbb-9da2-366d43714264", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9f769d-e324-49db-9a37-e94ea586d734", "sighting_of_ref": "indicator--9718fbdb-3997-4dbb-9da2-366d43714264", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b9b320-89a6-48ee-a840-db5476f3381a", "sighting_of_ref": "indicator--9718fbdb-3997-4dbb-9da2-366d43714264", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6235ce-5629-44b9-8d08-2df40943da41", "sighting_of_ref": "indicator--bc948e0e-855a-4a33-8793-cf2b9bccb4b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49637066-1282-48e6-860c-049fe5c6c46e", "sighting_of_ref": "indicator--bc948e0e-855a-4a33-8793-cf2b9bccb4b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef36878-14c1-414b-80a1-28f1d74cb64d", "sighting_of_ref": "indicator--bc948e0e-855a-4a33-8793-cf2b9bccb4b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aefbc6-cea3-4def-81ca-c309ec467e46", "sighting_of_ref": "indicator--063a4c54-e56d-4fd5-a9be-79f1e70d59e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffa6f75-bf45-44f0-97b3-871e6becd1cf", "sighting_of_ref": "indicator--063a4c54-e56d-4fd5-a9be-79f1e70d59e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0986fb-ec3d-4a65-9511-955a05be40de", "sighting_of_ref": "indicator--063a4c54-e56d-4fd5-a9be-79f1e70d59e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e6875f-f05f-4315-817e-f101746cb49e", "sighting_of_ref": "indicator--4a6db37e-02d3-4917-a1d4-11312172e6c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f80bb0-b2ac-44e1-90ee-0bf6225aca74", "sighting_of_ref": "indicator--d564138e-6fa0-4eb0-bb96-349c35b3d8d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d50dc5-39e4-4959-a956-8c058b3e00c2", "sighting_of_ref": "indicator--d564138e-6fa0-4eb0-bb96-349c35b3d8d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9c86a-c206-4bc8-9f53-aa37fa0c60c3", "sighting_of_ref": "indicator--13fc07b8-d264-451f-87ba-8e7ca1173a0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9ab661-b18b-4791-a5ec-ff0ab79ab99a", "sighting_of_ref": "indicator--13fc07b8-d264-451f-87ba-8e7ca1173a0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0cd7cd-7e7c-433e-930a-ec83a3bc977f", "sighting_of_ref": "indicator--13fc07b8-d264-451f-87ba-8e7ca1173a0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89d3a54-c0e9-40b8-bc54-4f91edef4cdc", "sighting_of_ref": "indicator--1b1c3170-d9c7-476f-98f0-a6a38a56e864", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731557a6-909b-44a2-a45b-4eb414cff691", "sighting_of_ref": "indicator--1b1c3170-d9c7-476f-98f0-a6a38a56e864", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b64c881-1e62-4df3-b6f6-d1b65924ade6", "sighting_of_ref": "indicator--1b1c3170-d9c7-476f-98f0-a6a38a56e864", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2614c3b1-5492-40ee-bc67-54eafc1fc6e6", "sighting_of_ref": "indicator--dcc0a75e-f8c9-4597-a515-ea9fcdffa95f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e070539c-828b-44b8-a8f6-ce212de5905c", "sighting_of_ref": "indicator--dcc0a75e-f8c9-4597-a515-ea9fcdffa95f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2205954-0770-4788-aa83-59c567b31d92", "sighting_of_ref": "indicator--dcc0a75e-f8c9-4597-a515-ea9fcdffa95f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594cd1de-c867-4558-91a4-bc6ee6463f61", "sighting_of_ref": "indicator--584c4404-784d-45a9-86b7-26c405bf9b47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f53e12b-a919-429e-a670-036cfef27912", "sighting_of_ref": "indicator--584c4404-784d-45a9-86b7-26c405bf9b47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d3e7c3-7e0c-4037-b31b-2bda779f78b7", "sighting_of_ref": "indicator--a7d0e0be-65e0-4e82-962a-0e269b5a2acf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd6155a-cdcb-4bb6-b096-105c691d6bf9", "sighting_of_ref": "indicator--a7d0e0be-65e0-4e82-962a-0e269b5a2acf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed31dad-524a-450a-a1fb-180b0b8c9994", "sighting_of_ref": "indicator--a7d0e0be-65e0-4e82-962a-0e269b5a2acf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fcf2e9-a1e7-497e-8f24-a589e41ed26e", "sighting_of_ref": "indicator--291d6b8d-cde6-468e-8fee-ea5228c2321a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a2fcca-22f8-4ec8-9f69-9ea4e99d4f27", "sighting_of_ref": "indicator--291d6b8d-cde6-468e-8fee-ea5228c2321a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db94122-e104-4b62-9270-925198176332", "sighting_of_ref": "indicator--291d6b8d-cde6-468e-8fee-ea5228c2321a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1b2cbb-5a65-46bd-a11c-740ee61d3145", "sighting_of_ref": "indicator--da2635ef-c80d-40a0-801b-203dff166c88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632e71e8-60ef-480b-8994-647feff16010", "sighting_of_ref": "indicator--da2635ef-c80d-40a0-801b-203dff166c88", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65373ec3-d3fe-4610-8096-7515b775338e", "sighting_of_ref": "indicator--da2635ef-c80d-40a0-801b-203dff166c88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e78f710-bbd5-4d5d-a93d-7135906e046e", "sighting_of_ref": "indicator--e807b61f-6a35-4186-9cde-b692fa641f6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1abbd79-92b5-453a-8ffa-41f33f56e6db", "sighting_of_ref": "indicator--69b7f5ef-71d5-48b3-801e-d8d9ca075bc7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaed874-6624-4dd4-960a-828529ac8134", "sighting_of_ref": "indicator--69b7f5ef-71d5-48b3-801e-d8d9ca075bc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c9c290-b2e2-43b8-aa1f-8f037ca287b1", "sighting_of_ref": "indicator--90f9c343-caf6-4fc0-bf62-685e310637e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b645ec09-bb10-4e02-9582-f788c4ccee64", "sighting_of_ref": "indicator--90f9c343-caf6-4fc0-bf62-685e310637e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81288a4-d869-4b1b-b794-f5476bb8afbd", "sighting_of_ref": "indicator--b56028f5-833f-4887-aaee-c59c42507035", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bf96b6-e4b7-486a-9396-df3a6b01cd13", "sighting_of_ref": "indicator--b56028f5-833f-4887-aaee-c59c42507035", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e92a78a-57d7-4f26-af14-b88a0f2f2c76", "sighting_of_ref": "indicator--b56028f5-833f-4887-aaee-c59c42507035", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d50a22-cf47-4eec-bed2-6835e350cba9", "sighting_of_ref": "indicator--9e9aff39-59da-4fc7-93b9-c936b78b2e8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0e175d-d5d3-4c1b-a3f3-14f12579c8d7", "sighting_of_ref": "indicator--9e9aff39-59da-4fc7-93b9-c936b78b2e8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800b82bd-ee94-4d9a-9061-10b5344370c0", "sighting_of_ref": "indicator--9e9aff39-59da-4fc7-93b9-c936b78b2e8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f39244-eafb-4bf0-abb5-a50923a8c847", "sighting_of_ref": "indicator--c344f56a-0750-44a7-8bea-c65070a67515", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b329887-966e-454a-9067-51e159a4e348", "sighting_of_ref": "indicator--1aea6311-2167-4852-99e1-1197abdc8297", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71820dc9-f8eb-4f4c-9fb3-e1b684c6947a", "sighting_of_ref": "indicator--1aea6311-2167-4852-99e1-1197abdc8297", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04becf23-1f61-44b1-b991-8185d33dd362", "sighting_of_ref": "indicator--0e1f9586-f9f0-4612-8ea3-b76085f98738", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3781ff85-d823-4571-b197-af968055ef3c", "sighting_of_ref": "indicator--0e1f9586-f9f0-4612-8ea3-b76085f98738", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ac96f9-6c8a-44ed-9bcc-45c8d2bc75b6", "sighting_of_ref": "indicator--20f1cf80-3b35-4796-9f0c-614d1b9c7ec4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c93e903-3027-4766-ba5a-5bce5d231643", "sighting_of_ref": "indicator--f8370f49-890b-4af6-8832-8fbeefc8c6db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73b22f5-8296-43bd-8727-3ce1453e3881", "sighting_of_ref": "indicator--f8370f49-890b-4af6-8832-8fbeefc8c6db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0c74e0-1beb-4037-8534-90d894a34c45", "sighting_of_ref": "indicator--f8370f49-890b-4af6-8832-8fbeefc8c6db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b60bdf-7609-482b-ad13-718f5d1efc94", "sighting_of_ref": "indicator--43c5b799-64e5-4834-a631-1ec5530e6680", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41a0640-4453-475b-a5bb-2f491d31dcf2", "sighting_of_ref": "indicator--43c5b799-64e5-4834-a631-1ec5530e6680", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e48dab-5cd9-4fb8-9ce9-8de496c5de5f", "sighting_of_ref": "indicator--43c5b799-64e5-4834-a631-1ec5530e6680", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3696156-f550-4a60-8210-af2f3882909e", "sighting_of_ref": "indicator--9cbe7a9f-a66f-4e5a-9421-b09e5492bd8d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208b57c1-2564-454f-991f-be1e3b6bb75d", "sighting_of_ref": "indicator--1d7f071c-0029-4ceb-9c6d-a8029f8c52b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237a8abf-27c9-46c5-8b4e-95bad1885032", "sighting_of_ref": "indicator--1d7f071c-0029-4ceb-9c6d-a8029f8c52b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca50c16b-4083-4764-8589-bb410129ccaa", "sighting_of_ref": "indicator--52ea18b1-fefd-4978-97bf-268ae57e3a67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b13c519-2069-4da5-aee5-6f4a981c3371", "sighting_of_ref": "indicator--52ea18b1-fefd-4978-97bf-268ae57e3a67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ae8298-6223-4ed5-8be3-486e9947bac1", "sighting_of_ref": "indicator--b1e480e4-3760-45cc-b565-725fc800d304", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83ce7fe-9276-48b3-9ada-6746e227a16a", "sighting_of_ref": "indicator--b1e480e4-3760-45cc-b565-725fc800d304", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3cfc19-7b04-455d-95a1-b6c8fe0b68bc", "sighting_of_ref": "indicator--d77fa10e-c767-45ee-86c0-7934663ba56b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c49ac76-82e2-42de-a6a8-ed48473fc2cd", "sighting_of_ref": "indicator--d77fa10e-c767-45ee-86c0-7934663ba56b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b40980d-9d29-45fc-8872-d4cf89f648ae", "sighting_of_ref": "indicator--d77fa10e-c767-45ee-86c0-7934663ba56b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789329db-ae3f-40dc-a8d8-23e3c25e245d", "sighting_of_ref": "indicator--4fc873e9-8774-460c-8ba4-72a30e111653", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d306a9-ecf4-43a2-90b2-b5e71e414549", "sighting_of_ref": "indicator--4fc873e9-8774-460c-8ba4-72a30e111653", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9902a4d4-81d2-453f-9403-f23e9bbe7419", "sighting_of_ref": "indicator--981007e1-02b8-46a1-be95-fb11a00ed275", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6008b65-2a06-4abb-972d-dadf3c60d540", "sighting_of_ref": "indicator--981007e1-02b8-46a1-be95-fb11a00ed275", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e76d706-9226-45ad-8d15-be70bf7af38c", "sighting_of_ref": "indicator--f6fd908d-7d66-4ca9-855c-fa8120ec645c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ab582b-af40-4140-ab2e-7ad0cf089cfb", "sighting_of_ref": "indicator--f6fd908d-7d66-4ca9-855c-fa8120ec645c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7a9734-1a25-4513-8502-cffc548176fb", "sighting_of_ref": "indicator--9c05dd05-cbc0-4954-a97b-60294488852b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a638dc7d-c424-416d-a117-d9a1cc357a9b", "sighting_of_ref": "indicator--9c05dd05-cbc0-4954-a97b-60294488852b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafb2c72-2619-4ad7-bfdb-1b402ab08ac8", "sighting_of_ref": "indicator--94b257c4-ad32-4c55-b5ab-1bc4bae67e5f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e7b433-649c-46fd-b72b-a4108908c2b1", "sighting_of_ref": "indicator--94b257c4-ad32-4c55-b5ab-1bc4bae67e5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6602018-7796-438c-bbe0-6c3fc4b58095", "sighting_of_ref": "indicator--94b257c4-ad32-4c55-b5ab-1bc4bae67e5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b0f262-f8d4-460c-8e0a-fd379294899b", "sighting_of_ref": "indicator--af21c568-26a9-43c3-90b5-68105dbaf43c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4096b0e-01c7-4edf-bdda-c2a14dd8d40c", "sighting_of_ref": "indicator--8abbd0a7-609e-466d-9938-a82b2dfc5cc9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055a157f-b4cc-4149-b837-e873512f0693", "sighting_of_ref": "indicator--8abbd0a7-609e-466d-9938-a82b2dfc5cc9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1f1956-f229-4d73-97e5-5c518fdc58b3", "sighting_of_ref": "indicator--8abbd0a7-609e-466d-9938-a82b2dfc5cc9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48da8c5e-fa7f-48db-98e8-68f841f55c51", "sighting_of_ref": "indicator--f2c1f0e3-848b-409e-895d-1cbfbd59869e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39081c11-7d25-4b06-b74e-11b1e44a694d", "sighting_of_ref": "indicator--f2c1f0e3-848b-409e-895d-1cbfbd59869e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33509ac-f81a-46f2-8486-a9c7356aeed3", "sighting_of_ref": "indicator--846ceede-4792-43b9-aa11-e29d91e590aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272b33e5-22b6-465e-9395-63a946ced1f2", "sighting_of_ref": "indicator--846ceede-4792-43b9-aa11-e29d91e590aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bb0c7f-291e-4a5f-abc2-69992e1a621c", "sighting_of_ref": "indicator--846ceede-4792-43b9-aa11-e29d91e590aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b67b2d-b1db-4f1f-bc35-4a94c820a082", "sighting_of_ref": "indicator--933da2c7-0f02-4987-8af4-9f89afceb9d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c3345-a982-4e82-aa21-504472c0d968", "sighting_of_ref": "indicator--933da2c7-0f02-4987-8af4-9f89afceb9d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54f1e72-ba6b-4d4f-badb-bdcf04b73516", "sighting_of_ref": "indicator--ac59389c-1df6-48eb-a0a1-92e866ed9ff4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473f02f2-c599-4fac-9d3c-f7ab4cd967ad", "sighting_of_ref": "indicator--ac59389c-1df6-48eb-a0a1-92e866ed9ff4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1357add-acd0-4f03-8b32-6686526c92ec", "sighting_of_ref": "indicator--ac59389c-1df6-48eb-a0a1-92e866ed9ff4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2c194a-6eec-40bf-a23d-b09ddf24ad42", "sighting_of_ref": "indicator--ec2d9b30-cd10-4f50-b26c-2078eb68f5a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fe20ad-f66b-413c-87cd-d140159b4d72", "sighting_of_ref": "indicator--ec2d9b30-cd10-4f50-b26c-2078eb68f5a9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d083b8-22d8-4a25-9e8f-be66b2f67d32", "sighting_of_ref": "indicator--ec2d9b30-cd10-4f50-b26c-2078eb68f5a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ddce8a-7edc-499c-8cc9-868600cdcce8", "sighting_of_ref": "indicator--babe7327-0227-4526-818c-2321b30e6595", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a15823a-21f1-4cb9-aa87-1f8ab904dff8", "sighting_of_ref": "indicator--babe7327-0227-4526-818c-2321b30e6595", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d8e763-a9f9-4e11-99b1-8b1a75afcd8d", "sighting_of_ref": "indicator--babe7327-0227-4526-818c-2321b30e6595", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2046e24b-f1b2-4e39-94ac-b5d3afd7e063", "sighting_of_ref": "indicator--587e1071-6b2b-4826-8646-4db36b8ae1e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ab28bd-ad51-4d55-bcd1-0e240d74b73e", "sighting_of_ref": "indicator--587e1071-6b2b-4826-8646-4db36b8ae1e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3855fd-0656-45ed-9d42-1ab981d03277", "sighting_of_ref": "indicator--e5b78d38-40fc-4ba0-838e-e6d35eb927a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd825db9-75d7-450f-ba94-aaeaf130e39a", "sighting_of_ref": "indicator--e5b78d38-40fc-4ba0-838e-e6d35eb927a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f3405f-9758-4d36-b00b-57dbc179dba2", "sighting_of_ref": "indicator--e5b78d38-40fc-4ba0-838e-e6d35eb927a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eeefba-fcc1-4253-853f-158d51880af8", "sighting_of_ref": "indicator--85e6700b-f546-486d-b0c5-bbaad74ee7e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d14972-f8b6-4924-b008-3833886a2db8", "sighting_of_ref": "indicator--85e6700b-f546-486d-b0c5-bbaad74ee7e2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b940ea2-38f4-414b-93f3-36be285e93a8", "sighting_of_ref": "indicator--85e6700b-f546-486d-b0c5-bbaad74ee7e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa21776d-ad89-44aa-bdc1-946f18ffde72", "sighting_of_ref": "indicator--a009c729-93e7-4dfe-bce8-d364cd80009f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3f5301-92f6-49cf-b2bc-8849ea9524f9", "sighting_of_ref": "indicator--a009c729-93e7-4dfe-bce8-d364cd80009f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c3b940-fc52-46a4-8db6-7bd872c5477d", "sighting_of_ref": "indicator--fb3ebb90-37c9-449b-9dac-12929f6e92dc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd04744-25fc-4da6-8adc-46379f7bc77d", "sighting_of_ref": "indicator--fb3ebb90-37c9-449b-9dac-12929f6e92dc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5892bd-15d1-4e24-8297-5a90826b88a8", "sighting_of_ref": "indicator--fb3ebb90-37c9-449b-9dac-12929f6e92dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bba2492-a6c6-4dba-807b-189f4958694c", "sighting_of_ref": "indicator--2505b16b-b4c4-4530-9117-6fe37c2b942f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38104389-cd7f-4a76-8795-bf302c3c3ce5", "sighting_of_ref": "indicator--c4c9e258-3524-44c4-92fd-4a7e50b89f45", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b1fe3c-4dfa-4bf6-a6c1-52a62d0e3efc", "sighting_of_ref": "indicator--c4c9e258-3524-44c4-92fd-4a7e50b89f45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ff0437-1dd1-4215-87f0-a831ba3d32f0", "sighting_of_ref": "indicator--c4c9e258-3524-44c4-92fd-4a7e50b89f45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b924d667-0deb-48aa-9771-e012580bf38b", "sighting_of_ref": "indicator--2bac8dc8-3849-4de2-8ba3-7d868d8ee3ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e2bfa5-d26a-495c-b4c9-59a2620f27aa", "sighting_of_ref": "indicator--6986f6f6-759a-4044-9112-9eb22bfed6e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0eb9c8-45c4-4b49-8f6f-d96325724361", "sighting_of_ref": "indicator--63593135-35af-4870-917e-bb79432ec397", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a6b9b1-94ec-4a1e-ba8d-46b97eff97f8", "sighting_of_ref": "indicator--0abaffed-c91f-4d1f-8b71-0a6953085d85", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a011417f-6684-4163-8e9e-9b1fd2c70226", "sighting_of_ref": "indicator--f9c1be5c-65ef-4350-b7d4-cba9bf242ef3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bf5d5c-5a7a-4baa-9f18-4e61100b0191", "sighting_of_ref": "indicator--a61c513b-fb08-4709-9eb2-c0b53d124e08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b99890-2410-45ca-b1a2-4a3d8d1f3454", "sighting_of_ref": "indicator--58282622-bf86-48a1-91ca-84ff713d90e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e64506d-a5d5-4468-b224-601e6fd49ea0", "sighting_of_ref": "indicator--58282622-bf86-48a1-91ca-84ff713d90e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e68a829-b1de-438a-affd-8ccc5b298c17", "sighting_of_ref": "indicator--1c054106-2758-4a82-bbbf-b448c5970719", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37533b10-0887-423c-b4e0-d9caba917e0b", "sighting_of_ref": "indicator--6b314c56-ff1e-4b73-9a17-2c86d93b89de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10759785-18b1-4733-a26e-828c3cc455b1", "sighting_of_ref": "indicator--bda50433-4d8b-42d2-bc20-8a69e7b80220", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9edf7b-f20f-4895-b340-994790ad60ea", "sighting_of_ref": "indicator--7b172501-a15f-4af7-9157-58e2e50bcf4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a650707c-a441-4a00-8460-b6722e04113e", "sighting_of_ref": "indicator--4fdf1203-8dd2-4459-8d7b-2dd6f9f91bc3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec726297-c5e6-48d9-94df-a54c8f2ee123", "sighting_of_ref": "indicator--4fdf1203-8dd2-4459-8d7b-2dd6f9f91bc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7e06de-5e04-48dd-9802-3f66da3f2819", "sighting_of_ref": "indicator--8df3a755-f158-443a-a312-2ed27cb446af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e0289c-d3dc-4276-b110-240e7b6ff24a", "sighting_of_ref": "indicator--12ea14df-8a2f-4030-bd85-d9a522cbe0e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778013b7-451a-4e58-898e-5e418d1a6510", "sighting_of_ref": "indicator--12ea14df-8a2f-4030-bd85-d9a522cbe0e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b4c30-89b7-45c1-8619-a3b07cb73216", "sighting_of_ref": "indicator--12ea14df-8a2f-4030-bd85-d9a522cbe0e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b0cbb7-87d9-4526-8716-8e77774a0d7a", "sighting_of_ref": "indicator--bff56f53-4e0c-4f72-b719-2e00853980a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e725e6-2da9-4f16-8845-f556566c926c", "sighting_of_ref": "indicator--0e269747-b4d9-45d6-bfa1-d51e0e29f47f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17de5778-dc86-412a-8544-968a4ca246a3", "sighting_of_ref": "indicator--03e4cd1b-8891-482b-a8ef-d33a2fd982d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68efba9-c962-4c1e-8aee-63a57e8b7940", "sighting_of_ref": "indicator--0611a33b-c775-4832-8565-440683b0bf68", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961d3a8-ec2d-4b6a-b1b2-581595b50631", "sighting_of_ref": "indicator--4244df4f-3c30-4a0f-b8df-035b42206855", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84085084-9aa1-43cc-adc9-2b4660dfa56b", "sighting_of_ref": "indicator--4244df4f-3c30-4a0f-b8df-035b42206855", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bde073-320c-42ba-93df-49893e467577", "sighting_of_ref": "indicator--51244331-c661-4bfa-b696-b744c65292e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a255ad-2a60-4e10-859a-391895f0d9ce", "sighting_of_ref": "indicator--51244331-c661-4bfa-b696-b744c65292e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa9fa39-9b08-41a4-a6cf-90a42c224af8", "sighting_of_ref": "indicator--51244331-c661-4bfa-b696-b744c65292e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4afb84-9fde-4d7e-bd7e-47b95a6e50fe", "sighting_of_ref": "indicator--4ac7f477-9ae3-4f98-a8c1-e9020b3c3b94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d44925f-071f-4dfa-a13e-b51f6bc44be4", "sighting_of_ref": "indicator--4ac7f477-9ae3-4f98-a8c1-e9020b3c3b94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07be93ae-923c-4956-ac4e-cc0b122b6b46", "sighting_of_ref": "indicator--4ac7f477-9ae3-4f98-a8c1-e9020b3c3b94", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b342e7-4580-43f7-a066-f8e295cc8476", "sighting_of_ref": "indicator--06a1b463-0866-479f-943a-4295ef230af2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e714ac5-e8f8-4477-a2f3-b68ce9df8015", "sighting_of_ref": "indicator--4ff6f411-a5d0-422b-8b1f-68dbeb767233", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00763adc-90a7-4548-8899-f47d565f50f9", "sighting_of_ref": "indicator--4ff6f411-a5d0-422b-8b1f-68dbeb767233", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d66dbd-a6e9-403a-b1fc-d6de188ac2b0", "sighting_of_ref": "indicator--4ff6f411-a5d0-422b-8b1f-68dbeb767233", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d5cfea-c92b-461d-8aeb-b090aece520c", "sighting_of_ref": "indicator--b6908102-167e-465a-a540-fd3ec530a171", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd632d4f-821f-40ab-b44d-118046e2d0a5", "sighting_of_ref": "indicator--b6908102-167e-465a-a540-fd3ec530a171", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d702d286-459c-4417-8434-d93e06a4fb8f", "sighting_of_ref": "indicator--b6908102-167e-465a-a540-fd3ec530a171", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f81e43f-ea05-41d5-8c88-9abbffe801aa", "sighting_of_ref": "indicator--e0cc0824-b3cf-4263-8228-7ba1f52eb76c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c342c8af-9724-4ada-b01f-f05836705730", "sighting_of_ref": "indicator--e0cc0824-b3cf-4263-8228-7ba1f52eb76c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cdda6f-454e-45ac-b5ac-000b783c4631", "sighting_of_ref": "indicator--e0cc0824-b3cf-4263-8228-7ba1f52eb76c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a5be7f-d309-490b-98c8-683018618b93", "sighting_of_ref": "indicator--300bfeb8-81e8-4ebf-8d53-7400b9dccfef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1733dbee-fef5-4232-9a56-77f70f546a03", "sighting_of_ref": "indicator--300bfeb8-81e8-4ebf-8d53-7400b9dccfef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3284a9-6a73-4bb0-886d-73e2567f2659", "sighting_of_ref": "indicator--300bfeb8-81e8-4ebf-8d53-7400b9dccfef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e35f107-ec9a-4081-a537-54cc70176d73", "sighting_of_ref": "indicator--58d1451d-f120-4017-8f85-f9aea235f33c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b125ea53-2db1-452f-98ee-a81d833ebb2c", "sighting_of_ref": "indicator--58d1451d-f120-4017-8f85-f9aea235f33c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a539d39-d1d6-460c-bcfd-ccce08f9cd6f", "sighting_of_ref": "indicator--58d1451d-f120-4017-8f85-f9aea235f33c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ae29c3-48f0-487c-8a7b-fb991ea1743b", "sighting_of_ref": "indicator--f0d0c786-ae6a-4f1b-bc6d-0ee6a933911a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e89266-e4af-4f48-9fc6-d162fe546bb1", "sighting_of_ref": "indicator--f0d0c786-ae6a-4f1b-bc6d-0ee6a933911a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91cd590-1f10-4ed5-ac2a-60e3132107d8", "sighting_of_ref": "indicator--f0d0c786-ae6a-4f1b-bc6d-0ee6a933911a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1e35fa-760d-471e-9ffe-4a2250eb77ee", "sighting_of_ref": "indicator--6d220719-a5fc-44d4-8c8c-798006ee3e58", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7859c900-893c-4f15-9e58-b0ec371d330c", "sighting_of_ref": "indicator--6d220719-a5fc-44d4-8c8c-798006ee3e58", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23db2a0-3957-41ac-9336-12f7cf0c77ba", "sighting_of_ref": "indicator--6d220719-a5fc-44d4-8c8c-798006ee3e58", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb3289d-a9ae-4d0c-a4e0-7e49eccf8ca2", "sighting_of_ref": "indicator--6bb48eba-2854-43b5-929d-565519caaff1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c38b69-ca60-4889-9788-7ea1bfe3b75d", "sighting_of_ref": "indicator--6bb48eba-2854-43b5-929d-565519caaff1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9cd926-a3c8-466f-af35-6642e4743b4d", "sighting_of_ref": "indicator--6bb48eba-2854-43b5-929d-565519caaff1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8255f6d9-6d7e-44b8-91eb-a0102d5e18ab", "sighting_of_ref": "indicator--5453fbda-f1e6-43aa-a9c7-4d7d59ad49c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b7ba30-5bec-4295-8b1e-b459f762dcb5", "sighting_of_ref": "indicator--5453fbda-f1e6-43aa-a9c7-4d7d59ad49c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6d3aa-a32b-47b8-bd92-4a8bf873f92c", "sighting_of_ref": "indicator--5453fbda-f1e6-43aa-a9c7-4d7d59ad49c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411936f2-2958-4e48-a6e5-40e60e5df51d", "sighting_of_ref": "indicator--470c60b0-e011-425b-9c9b-1f0aed840d1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ac8c2f-8b43-4bf5-b303-3efff5d0f1e4", "sighting_of_ref": "indicator--470c60b0-e011-425b-9c9b-1f0aed840d1a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f98024-ca2c-4551-a81f-0a0a059528b3", "sighting_of_ref": "indicator--470c60b0-e011-425b-9c9b-1f0aed840d1a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc21ba93-424d-495c-a959-847996355798", "sighting_of_ref": "indicator--a0ad1e7f-1972-43e1-9029-eefedf63eaf5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2db166-4343-4893-8b5f-db85e04dc557", "sighting_of_ref": "indicator--a0ad1e7f-1972-43e1-9029-eefedf63eaf5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413595e2-0cea-4b11-8a19-6392a339b458", "sighting_of_ref": "indicator--a0ad1e7f-1972-43e1-9029-eefedf63eaf5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6857f0cd-625d-41e6-b9fe-5c5a521e1c6a", "sighting_of_ref": "indicator--b19ff231-e4a7-4932-a89c-1bb383ea9c53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a09b58-1d3c-42cb-b26a-7b219ee5b661", "sighting_of_ref": "indicator--b19ff231-e4a7-4932-a89c-1bb383ea9c53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a683438-7ee8-44be-a0ac-d9d4ce5013e1", "sighting_of_ref": "indicator--b19ff231-e4a7-4932-a89c-1bb383ea9c53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248db340-5e0d-4032-870f-9a4bb2add216", "sighting_of_ref": "indicator--e3b5a2c4-501a-4275-9685-3ecc209e7141", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65d20a4-6425-4a20-b375-6d0e968966b4", "sighting_of_ref": "indicator--67c13860-0641-4d55-9afe-cce3224ad5e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be4ab15-9058-456b-955a-ce6a94e465d3", "sighting_of_ref": "indicator--2b3e1302-a9b8-4bfd-b647-5cfce1ddcf3a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac41467-6ba2-4750-b4dc-e21c57bcd51d", "sighting_of_ref": "indicator--442147c9-90bd-441d-b027-ead5ffd06260", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3848620-ea6b-4112-a356-2127e19ec11c", "sighting_of_ref": "indicator--599716d4-5654-4097-bc12-7e81967ffcf7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f57f4d-7251-4ec3-ac98-aae534886af0", "sighting_of_ref": "indicator--e3d59861-2d5b-4924-9b42-c006500dedf0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1f4028-8835-454c-a9e7-b6e81f0c45a2", "sighting_of_ref": "indicator--52dc5725-290d-4dba-ba8e-c4b7be47faa0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02bc0a8-673f-466f-acab-dbfe7c6e2017", "sighting_of_ref": "indicator--5b4af732-f5bf-49c1-a16c-aa4fdb202d33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d326d65-ca12-45f6-a022-1d96116b90ee", "sighting_of_ref": "indicator--a5791297-ee78-4af4-af4e-f2e54eaa4fa9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d34ede2-a724-452f-ad61-863ccd038eea", "sighting_of_ref": "indicator--a5791297-ee78-4af4-af4e-f2e54eaa4fa9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfd0fb9-567c-4abb-8caa-c2023b15587b", "sighting_of_ref": "indicator--ef2094a5-8ec9-40ef-9c65-e61bc9b027d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb0110f-5362-456d-ab9c-b2346018ee97", "sighting_of_ref": "indicator--1a31a14f-4a46-45d2-adff-f914d3352da0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b40478-64c8-4384-b9fb-188631c0d76c", "sighting_of_ref": "indicator--bbb2ab81-79ed-495f-afa4-376b28981c1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde4b5ef-93f2-43e4-b986-747b921b4c30", "sighting_of_ref": "indicator--0f754529-bab2-40ed-ac1c-23a667b1b7b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c6aa17-9d5d-48c0-8c3b-da034405b98e", "sighting_of_ref": "indicator--efbf0602-292c-4c2f-821c-d7d43bd111f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d2c9c2-1463-48a9-a2f8-15cac1cac128", "sighting_of_ref": "indicator--8d4cec68-2411-4c98-b8d7-63337c764fff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984fc156-9f53-46c6-9935-1bed44c618a5", "sighting_of_ref": "indicator--a7cc3396-283e-4d8f-9e50-61f05b17b46c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06822d29-e04c-48c9-ad41-413f51426bfa", "sighting_of_ref": "indicator--55140131-e4bc-4cfb-a1d4-5d727a2cba89", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec583ef8-b8ed-47bc-8b05-acc81dbcea4b", "sighting_of_ref": "indicator--a64c9aee-8475-4fbc-b035-9e07f39592df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc6c58e-d060-49a7-92c1-fbebf4e858b9", "sighting_of_ref": "indicator--94b645f2-4d6d-477a-af83-606c49a8da10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86abaf23-a195-4d16-a858-a154d732d849", "sighting_of_ref": "indicator--2fc05144-2427-4eb9-86cc-994fdbef608d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db8fc4b-eb99-4929-b3df-17ebb8709b46", "sighting_of_ref": "indicator--2fc05144-2427-4eb9-86cc-994fdbef608d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eddf4f-979c-410b-be30-258aee21131b", "sighting_of_ref": "indicator--2fc05144-2427-4eb9-86cc-994fdbef608d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b379d62-cfe0-4d98-995c-5bbeca6b815b", "sighting_of_ref": "indicator--b535f618-36ca-46f6-8acf-51a32ec92285", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5c0c42-8c27-4b18-a909-70944d485254", "sighting_of_ref": "indicator--fd61e023-e27e-4541-950a-1954e52568a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9542ff-1faf-488e-ae79-97f573c5aabe", "sighting_of_ref": "indicator--45f24acc-eaf4-4618-8fce-e7aa65f54df8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2741f3-d131-4509-bd0f-b549a236520c", "sighting_of_ref": "indicator--45f24acc-eaf4-4618-8fce-e7aa65f54df8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db62c841-efe6-45c3-82e2-cf2caef77662", "sighting_of_ref": "indicator--45f24acc-eaf4-4618-8fce-e7aa65f54df8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9de590-f5dc-489e-bc20-8e42964ebf33", "sighting_of_ref": "indicator--a576fec9-ee1b-4b0c-8d6e-683c785109b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763e3d94-a5e1-4a72-9441-ed1f6b6b10a5", "sighting_of_ref": "indicator--a576fec9-ee1b-4b0c-8d6e-683c785109b1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b1f50b-650a-4d4c-bb75-83bd45fef517", "sighting_of_ref": "indicator--a576fec9-ee1b-4b0c-8d6e-683c785109b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120bd810-f897-4e47-a4db-9f12fb44021c", "sighting_of_ref": "indicator--d612f9e3-aa40-4c13-a0ac-f1b02c0f57fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e0802a-ce18-40b0-af9e-00810f534a12", "sighting_of_ref": "indicator--5770c791-a8a7-43e1-bc2f-39ade975de51", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ddca9b-713c-4fa2-9752-883105b6c703", "sighting_of_ref": "indicator--5770c791-a8a7-43e1-bc2f-39ade975de51", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f861b158-d7f1-43f0-8dd9-d2a84d499692", "sighting_of_ref": "indicator--5770c791-a8a7-43e1-bc2f-39ade975de51", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bb68c1-573d-416f-8763-3ffb4d43a1a8", "sighting_of_ref": "indicator--0d5e4395-f191-4d3f-a5a0-cbfd98014327", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2320e29b-d770-4cb2-879b-c41a6f670d80", "sighting_of_ref": "indicator--0d5e4395-f191-4d3f-a5a0-cbfd98014327", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200b3dec-f5b1-431d-860f-192671b91587", "sighting_of_ref": "indicator--0d5e4395-f191-4d3f-a5a0-cbfd98014327", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b463ac0f-358e-4199-bd5a-15bf6b4e2481", "sighting_of_ref": "indicator--c4d8a40b-3e3a-4693-b92a-36ed2f8c6e1c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9198dec-b3be-4d66-81d1-c2c3b9b84afc", "sighting_of_ref": "indicator--c4d8a40b-3e3a-4693-b92a-36ed2f8c6e1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518534a2-0fdd-4cd6-93f3-a98fc8b22fbd", "sighting_of_ref": "indicator--bcf20af0-c804-47af-9308-eee03b6c5887", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c54c37d-d8cf-425e-bdc3-ccba6cc6485a", "sighting_of_ref": "indicator--bcf20af0-c804-47af-9308-eee03b6c5887", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fac862a-6525-404c-9d06-21171e8e1e6f", "sighting_of_ref": "indicator--bcf20af0-c804-47af-9308-eee03b6c5887", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c4e041-93d5-4991-bbd7-1d6e6cb34517", "sighting_of_ref": "indicator--029bf42a-da23-401b-8be8-3d665d84f2b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e149e614-c993-487d-8202-241be94ebb46", "sighting_of_ref": "indicator--029bf42a-da23-401b-8be8-3d665d84f2b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6080083d-fa03-4c5b-878c-8bab59bdf02f", "sighting_of_ref": "indicator--029bf42a-da23-401b-8be8-3d665d84f2b9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe02a29-3a63-4707-b4d6-59b09b19644c", "sighting_of_ref": "indicator--2c1f7148-5205-4f85-a5aa-29ad04352108", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cca0e3-15b6-437a-8b5f-ec5a96ca1ae7", "sighting_of_ref": "indicator--2f8d9927-c41d-4069-bf4c-8ed59c52738d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205d561d-0629-405c-b595-6f94b8d08a59", "sighting_of_ref": "indicator--42a87dd2-e76c-4ed7-b184-c21eb43aa7e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc96df3-b7a6-4812-aa6e-5acd7b4121cc", "sighting_of_ref": "indicator--42a87dd2-e76c-4ed7-b184-c21eb43aa7e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d461e0-7e8f-4aa7-a623-e0dc71565c24", "sighting_of_ref": "indicator--42a87dd2-e76c-4ed7-b184-c21eb43aa7e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455bc35-dd71-4a84-a0f0-b065fbee8697", "sighting_of_ref": "indicator--861d8370-3b4a-4021-9c6f-bbe97d265418", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbf2252-e5ca-47ba-99b0-f467be178f6d", "sighting_of_ref": "indicator--e4d24cea-1b11-4f75-a31c-400bf5f0ae35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538a2e2a-fb25-4019-85be-ef3523ce74d1", "sighting_of_ref": "indicator--e4d24cea-1b11-4f75-a31c-400bf5f0ae35", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7067361d-95e7-4c3a-bf34-bd010376936c", "sighting_of_ref": "indicator--e4d24cea-1b11-4f75-a31c-400bf5f0ae35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d081c7-6cae-46f9-9a94-3b6f416a0777", "sighting_of_ref": "indicator--5e071132-060e-4e57-964f-d7708659f09d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e7d708-48c5-4593-a020-3d13198ad807", "sighting_of_ref": "indicator--5e071132-060e-4e57-964f-d7708659f09d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38346bd3-7bc1-440e-9d7f-d3319994eeda", "sighting_of_ref": "indicator--5e071132-060e-4e57-964f-d7708659f09d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79157327-77ff-4e9d-b026-235bcd15a84a", "sighting_of_ref": "indicator--c2af273e-28e0-42e2-9815-d70eaba5c482", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3938562c-5b90-4a2e-8070-e2badfd1d413", "sighting_of_ref": "indicator--c2af273e-28e0-42e2-9815-d70eaba5c482", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f336a6a-0b81-4240-96c6-ae5bcd7f5f30", "sighting_of_ref": "indicator--c2af273e-28e0-42e2-9815-d70eaba5c482", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca01886-f9f9-4b42-b310-814ee1de3506", "sighting_of_ref": "indicator--8dd07b76-8834-4976-b032-67c4bd3eefd8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733c6b43-eee5-4c60-a954-78c1dd230dc9", "sighting_of_ref": "indicator--8dd07b76-8834-4976-b032-67c4bd3eefd8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60bb7d1-f952-45b7-bd89-5e8e1739f7d2", "sighting_of_ref": "indicator--8dd07b76-8834-4976-b032-67c4bd3eefd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be70b91-d16e-4b81-853d-a374d49452b5", "sighting_of_ref": "indicator--a8cbc8a8-eeae-4cec-91cb-edb908b494ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745eca07-06ae-49f5-8005-781ff5b09520", "sighting_of_ref": "indicator--a8cbc8a8-eeae-4cec-91cb-edb908b494ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a08f46-f2cd-440a-85e7-b462cb7dec13", "sighting_of_ref": "indicator--90071988-4c83-408a-9507-69f6451f6757", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adb3f70-7d59-4b87-b11b-10e085a867cc", "sighting_of_ref": "indicator--90071988-4c83-408a-9507-69f6451f6757", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7789818-782c-40b1-a29f-2868a998a584", "sighting_of_ref": "indicator--ebdeaf42-f0d1-4f8a-81d6-97118b8b8940", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b37f9b-7717-4a2e-8e2d-e4fca2b4c3b3", "sighting_of_ref": "indicator--ebdeaf42-f0d1-4f8a-81d6-97118b8b8940", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d91789d-ce9b-4efa-9324-23b1ebefcc06", "sighting_of_ref": "indicator--ebdeaf42-f0d1-4f8a-81d6-97118b8b8940", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8435d9b-b5ff-43af-8fbf-c4878e0a3a70", "sighting_of_ref": "indicator--c59297c1-bd68-4542-afc7-153113fb5b5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b75de0c-976d-4e59-b2b2-ec0e8b281103", "sighting_of_ref": "indicator--3c268c40-c246-4079-9566-74db2a7cdcab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48475c2-fe6c-4e79-8230-b32affd2d140", "sighting_of_ref": "indicator--3c268c40-c246-4079-9566-74db2a7cdcab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c8ca12-2d70-474f-a565-cfe1d28764ce", "sighting_of_ref": "indicator--984a3298-19b6-459e-8fcc-11c583dab089", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141943d4-e5e4-4335-9944-6e43ac312b83", "sighting_of_ref": "indicator--984a3298-19b6-459e-8fcc-11c583dab089", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d75e59b-e3ee-4683-a301-5c0523e89b2e", "sighting_of_ref": "indicator--984a3298-19b6-459e-8fcc-11c583dab089", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571a906-3f59-4d36-9ec8-b5be2c5626ad", "sighting_of_ref": "indicator--587b03bc-7ce2-456c-8a7b-6bc970940584", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab003e88-f3ff-4653-b56a-36034ee4addb", "sighting_of_ref": "indicator--70618a19-d831-449f-ba91-4caeab5fa544", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6af4f1-db7d-4c07-a306-b2bee08de519", "sighting_of_ref": "indicator--93a10fbf-0156-4a91-a990-af712f690b7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bdf7aa-8339-466d-be32-e6fc4ac6acef", "sighting_of_ref": "indicator--93a10fbf-0156-4a91-a990-af712f690b7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bba187-4400-4afc-bf13-6d9dba37763a", "sighting_of_ref": "indicator--22762e54-8dfe-47a9-a09e-64dc7e1312a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daca62eb-0b40-447a-b914-5eebe2b413c5", "sighting_of_ref": "indicator--4c51561c-c2d7-4b01-aac4-2bc4d4520a34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc67960-cb23-4ee4-8432-c090704585a0", "sighting_of_ref": "indicator--4c51561c-c2d7-4b01-aac4-2bc4d4520a34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9d0da0-42cf-4839-a0d6-0bab4886c392", "sighting_of_ref": "indicator--4c51561c-c2d7-4b01-aac4-2bc4d4520a34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b25898-9d58-4c26-969e-78e36b17e0b3", "sighting_of_ref": "indicator--79ca7e23-7a5e-4d1c-a8b2-404e4b8e0283", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b539d9e8-8a66-436d-b0af-7554af3213c0", "sighting_of_ref": "indicator--af705103-5938-497c-9809-da51f3ad93b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9e056b-849c-4afe-99bb-5be56233bc70", "sighting_of_ref": "indicator--af705103-5938-497c-9809-da51f3ad93b8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09738060-78b8-4da4-9986-5e7da97c8036", "sighting_of_ref": "indicator--af705103-5938-497c-9809-da51f3ad93b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a99363b-f422-4638-aef6-72c944425bc3", "sighting_of_ref": "indicator--4c38164f-257e-4c82-a604-3ab2fac53436", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f50483d-8729-4d63-8295-c7368294c9ba", "sighting_of_ref": "indicator--4c38164f-257e-4c82-a604-3ab2fac53436", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e417be13-caf6-4406-bf67-93e7adaf235e", "sighting_of_ref": "indicator--bb603a28-1ff6-49c7-87d4-563510b5df5b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea85ff60-05d4-4687-9e15-00bca9576133", "sighting_of_ref": "indicator--3b8d45d6-9a72-45bf-88ae-9c546e1d4549", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c32fc99-7eee-4f0a-90ef-06a092a31c24", "sighting_of_ref": "indicator--21d70b5e-351c-40f2-9bfc-c21dac26d54c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462b569f-083e-4f77-bece-6e8e1617da97", "sighting_of_ref": "indicator--ff5644fd-2ee4-4cb0-b86c-44302a9757db", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6466f97e-e282-426e-88e5-65522882baab", "sighting_of_ref": "indicator--ff5644fd-2ee4-4cb0-b86c-44302a9757db", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de64e5e-8ada-4303-b56f-79589bd1cc17", "sighting_of_ref": "indicator--ff5644fd-2ee4-4cb0-b86c-44302a9757db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a1040d-3885-4a08-a8f4-f4f68fb1bf00", "sighting_of_ref": "indicator--6065b00e-62aa-42d9-a096-08c075bc2d47", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c111cc4-0c2b-4d17-bdee-b4d683cca984", "sighting_of_ref": "indicator--6065b00e-62aa-42d9-a096-08c075bc2d47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e98ead3-ebb3-4583-a38b-a681a34ae11a", "sighting_of_ref": "indicator--6065b00e-62aa-42d9-a096-08c075bc2d47", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c914bd-ca55-4714-a963-03da4de37f2e", "sighting_of_ref": "indicator--4f678749-89d5-44e4-9588-c06bff53859b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26d02b3-203a-4673-a6a4-6358efc8998e", "sighting_of_ref": "indicator--e59cb4e5-6c7d-4f21-91c1-5165a08c7202", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8076971-a6ec-4054-9c15-fd9ba23c0f3e", "sighting_of_ref": "indicator--f2e42a94-c482-430d-9db1-addd1ed71045", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6563c6dd-de70-44ee-b3ef-0773941076ed", "sighting_of_ref": "indicator--f2e42a94-c482-430d-9db1-addd1ed71045", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19b8d72-68d1-453c-aa26-6fd9e7c15adc", "sighting_of_ref": "indicator--cbd25a7f-76c0-4e4d-aae1-3295ae7f8200", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153fc2df-414f-47a0-a003-20f29d18f469", "sighting_of_ref": "indicator--cbd25a7f-76c0-4e4d-aae1-3295ae7f8200", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe88dc-33f8-401e-92aa-b61c4476d82d", "sighting_of_ref": "indicator--cbd25a7f-76c0-4e4d-aae1-3295ae7f8200", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f023404f-9bd0-477b-9395-20b62504ece4", "sighting_of_ref": "indicator--45f1a263-f00b-4394-8d3b-612edd716ead", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7165f658-302e-49fa-a1bd-324549bccab8", "sighting_of_ref": "indicator--fd7723cc-15c9-4cde-b986-4d41cd01726e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45de1dc3-1a82-4dd2-a36c-0c0117a6ede8", "sighting_of_ref": "indicator--af4808f6-00de-4666-ba04-ce2b6f9d76e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c728d80b-7658-440a-83fc-85c5ba56574b", "sighting_of_ref": "indicator--af4808f6-00de-4666-ba04-ce2b6f9d76e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0794b2f5-883c-422b-a2e9-3fe688ec9910", "sighting_of_ref": "indicator--af4808f6-00de-4666-ba04-ce2b6f9d76e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5981490e-0e56-46e3-9e55-b2cb3a5b5800", "sighting_of_ref": "indicator--e6ee10f9-6082-4e27-b874-74c8a13a8066", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5efba52-f4a2-47bd-9073-b69f242ef1d4", "sighting_of_ref": "indicator--6a931b58-da69-40e2-9ccc-ebe303096d75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d4217c-cecd-41e3-8751-7345e77d6a7d", "sighting_of_ref": "indicator--6a931b58-da69-40e2-9ccc-ebe303096d75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec5ba91-8687-4d7f-8165-966e6cb2138c", "sighting_of_ref": "indicator--784878fa-2dca-4e7e-bd93-0bb63f222d80", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535208f1-f6c5-4c93-b1eb-d53c8773589e", "sighting_of_ref": "indicator--6de1f6d6-c987-4d06-bdfa-92785878d596", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d7590d-bc24-4659-90e9-25ab5b16e2cd", "sighting_of_ref": "indicator--79085023-5da7-44da-ae1d-6946eda18e23", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ea1726-021f-4541-a6d4-cae88f722935", "sighting_of_ref": "indicator--0ea9c872-e132-4136-a27f-7c9260a58a26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d3d02d-fd89-4e1c-9527-c15e0d925bc2", "sighting_of_ref": "indicator--0ea9c872-e132-4136-a27f-7c9260a58a26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f04a5b-8f32-44c3-9741-77de8f20740a", "sighting_of_ref": "indicator--9198682e-7bf8-4c77-a6ba-fff361e07456", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c5d619-820e-41db-95fd-00e346273652", "sighting_of_ref": "indicator--9198682e-7bf8-4c77-a6ba-fff361e07456", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9f145f-0414-4f15-bd30-4b945b96a7c3", "sighting_of_ref": "indicator--15912cf7-955d-4874-93c6-e7c2deb320bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef79ccb-dcab-4d5d-8775-ed77222d7f49", "sighting_of_ref": "indicator--0c825d12-f803-4468-ad1d-a27784769edf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0687422a-d868-4c76-aac0-9b3b04084ad5", "sighting_of_ref": "indicator--2583d1b7-4131-4406-961e-080b2b46f6bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57113395-52a1-4212-b9d2-58e2b88b81a5", "sighting_of_ref": "indicator--728eb9e2-2276-4ecc-905b-17431c823136", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd565cc9-507d-4a36-ad09-bed9be6646c6", "sighting_of_ref": "indicator--728eb9e2-2276-4ecc-905b-17431c823136", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d888d3-a2c0-49ad-9515-94ec46843ec5", "sighting_of_ref": "indicator--728eb9e2-2276-4ecc-905b-17431c823136", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662e3c86-641a-4388-b219-af65896d8955", "sighting_of_ref": "indicator--52d2c388-9be4-4c45-9e5b-8fff82754c46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7fcb1f-0870-4651-aaf3-56bf35f9e00a", "sighting_of_ref": "indicator--32d5a7f5-1190-40af-a913-018cf12a0845", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01052f06-0dff-4d38-9ba9-7ab531cd1025", "sighting_of_ref": "indicator--d495a5e7-e95d-4881-a9d1-eeaa0dca1dcb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4508d76-df2d-46f8-a6a1-073c442cb561", "sighting_of_ref": "indicator--baaa2f64-1ba1-4f97-989a-4a5e1950a431", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3293a09-b950-4893-a621-0ce3618448ae", "sighting_of_ref": "indicator--cee4d4b0-8e66-40c6-9833-97dd746f6476", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b878138b-70c0-42eb-aa07-04a84ea8b6de", "sighting_of_ref": "indicator--f53d3bae-412a-41b1-ba39-e31b15b22e61", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d94242-4eca-4d80-86d3-d6f8968e063d", "sighting_of_ref": "indicator--c11eebc8-f446-483d-9607-73bae38e33d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c172f-5fc0-4b1b-9bec-3637ff083ba3", "sighting_of_ref": "indicator--c11eebc8-f446-483d-9607-73bae38e33d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583a3d5a-55a9-49b2-8a1a-a9d2c95300ca", "sighting_of_ref": "indicator--a78ad847-186f-4eed-9810-cd2ad195db19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a001e5c-a31c-4ab2-99de-4ab795d58d6d", "sighting_of_ref": "indicator--861df15e-9cdc-4c87-80c6-c6ad8601bfde", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c606f1-7265-45f8-ab4a-2455bf2af142", "sighting_of_ref": "indicator--861df15e-9cdc-4c87-80c6-c6ad8601bfde", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2b4b98-5625-4e31-a089-7b12102ef566", "sighting_of_ref": "indicator--861df15e-9cdc-4c87-80c6-c6ad8601bfde", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be171123-5bbc-4c15-8494-643883a16ec4", "sighting_of_ref": "indicator--1f719e63-4c26-4988-a4f3-3135bc9433d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5e53f3-0b7a-442d-8f1e-c444a37d0ea3", "sighting_of_ref": "indicator--b33c90b7-844a-48cb-b7d8-c6d7157f25ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0279b140-fb73-4bcb-840f-f16da6ee53c1", "sighting_of_ref": "indicator--8ea835fb-e396-4b0d-90e2-87852f64025c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeb1a49-ab56-4efc-9207-b99ecc2197f1", "sighting_of_ref": "indicator--8ea835fb-e396-4b0d-90e2-87852f64025c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922e957c-81f4-4c30-b5a3-32947a1cd5e6", "sighting_of_ref": "indicator--8ea835fb-e396-4b0d-90e2-87852f64025c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e984781d-47d3-4abe-8535-a154ae132605", "sighting_of_ref": "indicator--dc7a8cad-527a-4a5c-a066-f9657491cc32", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c73145c-1264-45c9-aec5-101bc02805b9", "sighting_of_ref": "indicator--89c157b0-dd30-46ec-bee4-a1db22b7399a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7fe5e8-4f38-4135-8c53-7cd62ba4e0bf", "sighting_of_ref": "indicator--89c157b0-dd30-46ec-bee4-a1db22b7399a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c123782-c4c4-4b92-9863-7fe87430cf2f", "sighting_of_ref": "indicator--89c157b0-dd30-46ec-bee4-a1db22b7399a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a1c80e-c54d-4867-baa6-6d01c9e4e25b", "sighting_of_ref": "indicator--6a13e584-e4b1-49b2-a4b0-298bfa085f6d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bedfc41-1a27-4e3a-87f7-cfefa54291e1", "sighting_of_ref": "indicator--8d2ae722-f62b-474a-9b78-16c89ef5ded9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b301f669-0039-4c9e-98b4-f2d444730a81", "sighting_of_ref": "indicator--6560a5a1-341b-4893-a5c9-cfc85601adb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d77e4c-46e3-4312-87e9-9fb8d02a8a47", "sighting_of_ref": "indicator--6560a5a1-341b-4893-a5c9-cfc85601adb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7888c3-74f4-4244-b666-c7b36f5304a8", "sighting_of_ref": "indicator--6560a5a1-341b-4893-a5c9-cfc85601adb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74602938-0169-484b-a942-97872c2423f1", "sighting_of_ref": "indicator--208ffa31-737c-4266-9de1-362828b679ba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3124c0-44cd-4d93-9aa6-5093010401de", "sighting_of_ref": "indicator--28762251-3325-411e-87b9-6960a1d73584", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1dadae-3da5-4629-8ca1-e7cc2e9b3a66", "sighting_of_ref": "indicator--28762251-3325-411e-87b9-6960a1d73584", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1103d-b3f6-4821-9195-3c9af5e31310", "sighting_of_ref": "indicator--28762251-3325-411e-87b9-6960a1d73584", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79414a8-fe0a-4874-a7b3-4ced1c7849df", "sighting_of_ref": "indicator--5e4141f8-cb2f-4106-abe7-727efd1c2aa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254362a0-4b36-48cc-85c2-da60ceb6d91f", "sighting_of_ref": "indicator--5e4141f8-cb2f-4106-abe7-727efd1c2aa5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6059b02c-0d6a-41ca-afd5-2b3162ec6cba", "sighting_of_ref": "indicator--5e4141f8-cb2f-4106-abe7-727efd1c2aa5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d97a861-b741-47e1-942f-deffb604355f", "sighting_of_ref": "indicator--34f19df3-3895-405f-b15d-a7f3c69dfbeb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7e719d-5a2b-4c43-b355-f7b08b5429ce", "sighting_of_ref": "indicator--34f19df3-3895-405f-b15d-a7f3c69dfbeb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48206754-733b-4b71-ac2f-c86f0764ea00", "sighting_of_ref": "indicator--34f19df3-3895-405f-b15d-a7f3c69dfbeb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b6f038-d322-4fbd-928c-54a3c23c4f5e", "sighting_of_ref": "indicator--ac09d5eb-fa93-4ee1-a421-3bca02e813e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb34654-6b17-45ad-9b15-57760a20bb23", "sighting_of_ref": "indicator--ac09d5eb-fa93-4ee1-a421-3bca02e813e8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f92e218-35c7-4c13-b2db-56a681fed884", "sighting_of_ref": "indicator--ac09d5eb-fa93-4ee1-a421-3bca02e813e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b8ee97-de04-4cb4-b457-637b2558e3c4", "sighting_of_ref": "indicator--844a2261-fae3-4ac0-813a-cf9b20ad94a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865aecc0-e6a4-4140-ade7-4a9c62bec0e2", "sighting_of_ref": "indicator--844a2261-fae3-4ac0-813a-cf9b20ad94a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cc1fbf-ac56-4299-a031-7c6048cccde8", "sighting_of_ref": "indicator--844a2261-fae3-4ac0-813a-cf9b20ad94a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a1dc37-9457-4e25-ae5c-8a3ee2fe069d", "sighting_of_ref": "indicator--ad755c74-0cc3-4689-a6ca-11819a1fb069", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb354883-2eef-44d0-a0e0-9a72b4c462b2", "sighting_of_ref": "indicator--ad755c74-0cc3-4689-a6ca-11819a1fb069", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f0d22d-216a-4ffb-84d7-92cc2ed3947e", "sighting_of_ref": "indicator--ad755c74-0cc3-4689-a6ca-11819a1fb069", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af88a13a-bd10-460e-8fd4-bcb31c7009a6", "sighting_of_ref": "indicator--8d20f258-9c3b-42f8-b64d-1b685d4a8a71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1e6409-057f-4606-8994-3b259b2d475f", "sighting_of_ref": "indicator--8d20f258-9c3b-42f8-b64d-1b685d4a8a71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a9725f-1fc4-4f22-b27f-ba3568a2582d", "sighting_of_ref": "indicator--8d20f258-9c3b-42f8-b64d-1b685d4a8a71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8916065-4efc-41b7-a972-cc0c1e2291c6", "sighting_of_ref": "indicator--123b68d3-42da-4082-a207-eae884ffe5b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e649a750-7039-4a84-a8ff-35b93a7fef31", "sighting_of_ref": "indicator--123b68d3-42da-4082-a207-eae884ffe5b5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6658e332-78d1-4a2e-91ed-5ae8edbe4cfa", "sighting_of_ref": "indicator--123b68d3-42da-4082-a207-eae884ffe5b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd15ae74-c741-4fa1-9e65-be52e88580cd", "sighting_of_ref": "indicator--a6a81286-781b-4453-8e29-846072cfbe05", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008351b3-efb3-4b02-87a2-3016edae456d", "sighting_of_ref": "indicator--a6a81286-781b-4453-8e29-846072cfbe05", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b8ffd9-b273-482a-b221-330f189b6483", "sighting_of_ref": "indicator--a6a81286-781b-4453-8e29-846072cfbe05", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bae00f-28d7-4129-92ee-c01e6d1bb62e", "sighting_of_ref": "indicator--4c0882f3-836c-4296-8a84-bf408c9b7f93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46592d0-722b-4b41-9afe-3cb34773f393", "sighting_of_ref": "indicator--4c0882f3-836c-4296-8a84-bf408c9b7f93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21798107-c977-4a3a-905c-72aedbb2a22c", "sighting_of_ref": "indicator--4c0882f3-836c-4296-8a84-bf408c9b7f93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb701307-f36a-47ff-97ea-97e674163b88", "sighting_of_ref": "indicator--faac7180-e04b-4d22-83a2-e66c4ef3e5c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4f096a-7b68-4b9b-8041-2758b28a68bd", "sighting_of_ref": "indicator--ea924729-62a4-417b-8475-5bd0716f3596", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbd735f-fe19-4250-a269-b7c37436e795", "sighting_of_ref": "indicator--ea924729-62a4-417b-8475-5bd0716f3596", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b625ed-7f1c-47a8-b80a-0f51147aa187", "sighting_of_ref": "indicator--ea924729-62a4-417b-8475-5bd0716f3596", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab922947-fcc1-4336-b136-e8343f316ce9", "sighting_of_ref": "indicator--77d088ed-37b7-4af5-a414-8bc29bfc417d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10546744-5746-45fc-8930-501ea7b2a5a0", "sighting_of_ref": "indicator--77d088ed-37b7-4af5-a414-8bc29bfc417d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3b9949-03c0-4074-b58a-4e70b26595ff", "sighting_of_ref": "indicator--77d088ed-37b7-4af5-a414-8bc29bfc417d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5345ab2b-f5c5-402f-a60b-82bb4d477edd", "sighting_of_ref": "indicator--09b73fe5-af28-444f-b59b-15c11433aa88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbed6b3-85a7-4425-bb70-35b9ccc75e18", "sighting_of_ref": "indicator--c7e5fec0-08c9-4af2-8a7c-fab9be42803d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba55a82-0bc5-402a-86ca-254a7d1211b3", "sighting_of_ref": "indicator--09cd2753-691a-4183-97a7-744e3c6ec840", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdad59a-5c42-4520-bd11-22a5c613c27d", "sighting_of_ref": "indicator--c314b754-c6f7-4b06-ad52-1854a0ed2c60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66913633-97d2-4f36-b15f-3c57fd0e60bd", "sighting_of_ref": "indicator--06410803-9178-4712-8412-0c9900914b31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e41e29-b9e6-4454-92ad-782cfceae84f", "sighting_of_ref": "indicator--b6217697-6e50-45b7-83f3-8fa03693a13e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed65778-9684-45cf-be7f-789f173b8e4a", "sighting_of_ref": "indicator--1c614e66-adc2-4454-9f22-b0a12fe59e8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22c41af-35e0-4037-a723-1ffc7fef6e14", "sighting_of_ref": "indicator--d41adb1f-ae47-4877-9ed7-095623bca7d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317aaa21-0d82-4ff5-8c5f-aef81e8167f2", "sighting_of_ref": "indicator--ce373da2-2b93-4d5f-9037-58c23f13ee8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993c89a5-7760-4540-b539-65e2a0553923", "sighting_of_ref": "indicator--7889e737-d304-4593-a864-651594ee18f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc64e3c9-c145-40d1-b179-0c3689828b91", "sighting_of_ref": "indicator--c8289c07-82ec-47df-b26b-71d6b250f4cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80631937-d2c0-49ce-841e-5e22c7ab1e56", "sighting_of_ref": "indicator--c8289c07-82ec-47df-b26b-71d6b250f4cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f9b833-72e5-423e-b0cc-9b918b0cd7cc", "sighting_of_ref": "indicator--c8289c07-82ec-47df-b26b-71d6b250f4cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7527a460-4a92-4bd7-9996-776b62eabcff", "sighting_of_ref": "indicator--3d1bf9e8-a01e-490c-9637-af8ee6e08c31", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b139f113-4a50-4d73-ae6b-8859d5e0f30b", "sighting_of_ref": "indicator--3d1bf9e8-a01e-490c-9637-af8ee6e08c31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea9a9d1-043f-46cc-96c1-01cf5049b3db", "sighting_of_ref": "indicator--5ddfab51-787f-4d1f-9bd2-0f84da71c977", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f77a848-c8a5-43a0-8a3c-670edc944a0d", "sighting_of_ref": "indicator--5ddfab51-787f-4d1f-9bd2-0f84da71c977", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df361d-56fe-4fa0-99db-a3eecfc7b262", "sighting_of_ref": "indicator--3f804228-594e-4248-8acf-f99dad02c7e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990191b1-b289-4101-bf18-48fea593d7ca", "sighting_of_ref": "indicator--3b342e77-8ef4-4498-897f-01c2893135ac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affb0e46-076c-4ba4-aefe-cb9941ac33bd", "sighting_of_ref": "indicator--31bab0a2-d4b8-4f0d-9667-afe2ab7a02ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d1636d-1a7b-4096-9108-a4bcec3018b7", "sighting_of_ref": "indicator--31bab0a2-d4b8-4f0d-9667-afe2ab7a02ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8775beb-b55c-4a71-9ece-d869f47daf03", "sighting_of_ref": "indicator--c3cdd173-4fcd-4745-ab55-1529cf49be67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a7eb7d-ff57-41ae-a28e-8f6fe9bc8431", "sighting_of_ref": "indicator--c3cdd173-4fcd-4745-ab55-1529cf49be67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0092ade-90e4-4092-aedb-23e89d59c490", "sighting_of_ref": "indicator--c3cdd173-4fcd-4745-ab55-1529cf49be67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb636cf-e0e0-41cb-91a0-f5e3ed7d572e", "sighting_of_ref": "indicator--b6761435-185c-47b4-aa35-03549b87b02a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0059b7c1-2bb5-4a83-84de-2aaebfd6aca1", "sighting_of_ref": "indicator--b6761435-185c-47b4-aa35-03549b87b02a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d6e4cc-b881-42d2-83f6-127c19b8670e", "sighting_of_ref": "indicator--b6761435-185c-47b4-aa35-03549b87b02a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b601e1-e9f1-49bd-b134-c01775bec254", "sighting_of_ref": "indicator--26ab12ac-8dbb-4071-983e-d7e46794002d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c59f38-7f72-48db-a961-0eb4ad4cd85d", "sighting_of_ref": "indicator--26ab12ac-8dbb-4071-983e-d7e46794002d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0579da87-a04b-4f22-b149-6c8890c0afe1", "sighting_of_ref": "indicator--0d5fc89c-54d0-4c32-aa89-3220a5cde099", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f0dfea-4274-45aa-b261-edf1f6100732", "sighting_of_ref": "indicator--c064b54d-234c-4496-8e11-0a8f6ce77ba0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bde821-386d-4969-accd-fc770104c9ca", "sighting_of_ref": "indicator--c064b54d-234c-4496-8e11-0a8f6ce77ba0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26af09-c36b-4eb9-a64b-508bbdb180d9", "sighting_of_ref": "indicator--c6d5c290-1063-4c78-91a5-296a0e5efe3f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0bc21c-8767-4f6e-94eb-44bf41e50544", "sighting_of_ref": "indicator--c6d5c290-1063-4c78-91a5-296a0e5efe3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec05a13-9001-4eab-8225-765a82a2b713", "sighting_of_ref": "indicator--3c006211-fdb0-4bec-95ed-b2f26b16b639", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f15c65-955f-4d9d-aae8-fd1906c84ad8", "sighting_of_ref": "indicator--3c006211-fdb0-4bec-95ed-b2f26b16b639", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4557e184-0b64-4bac-bbc0-7b1b8d1ccff7", "sighting_of_ref": "indicator--3c006211-fdb0-4bec-95ed-b2f26b16b639", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c2817-2eeb-4050-86d5-61a0a294de27", "sighting_of_ref": "indicator--6e65e54f-8cb8-4fd1-adfe-9fa100b073e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae6691a-4637-49e0-bbb9-8dbef0d75806", "sighting_of_ref": "indicator--6e65e54f-8cb8-4fd1-adfe-9fa100b073e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0029d49b-a4b5-4501-80df-5bd325aa0e2f", "sighting_of_ref": "indicator--3157bec9-d70c-4299-a663-c18f714e64df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f11a2a4-493d-483e-8637-193605cbbe1c", "sighting_of_ref": "indicator--6dfff3ff-03dc-468f-9c66-fee0f6553c5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22871ec5-f4d1-4ff0-852a-ab4140d899b2", "sighting_of_ref": "indicator--6dfff3ff-03dc-468f-9c66-fee0f6553c5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94fcb97-f652-48e1-8ff5-014d8063f520", "sighting_of_ref": "indicator--6dfff3ff-03dc-468f-9c66-fee0f6553c5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c701aa-b120-40b8-b01f-b051b8e01da2", "sighting_of_ref": "indicator--6a35da2e-f6e9-4859-93b9-be4c028719e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08705a52-205c-458f-98b1-a16b15fd0cd3", "sighting_of_ref": "indicator--6a35da2e-f6e9-4859-93b9-be4c028719e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642fcbe5-1037-49e6-8c06-97da904ffdcf", "sighting_of_ref": "indicator--c97a8b48-4248-4238-822b-8223befb43a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7e67ce-eb52-4352-a8b6-d3cf3a14faf0", "sighting_of_ref": "indicator--c97a8b48-4248-4238-822b-8223befb43a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0351101-6318-437d-ad0d-8829fe2dfa6e", "sighting_of_ref": "indicator--c97a8b48-4248-4238-822b-8223befb43a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b670f4-de9c-4a9e-a915-4a309de97ee5", "sighting_of_ref": "indicator--d49780ae-6a20-4252-88ee-244eb677e722", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bb1716-d76b-4bc4-b553-309987ae8d0e", "sighting_of_ref": "indicator--d49780ae-6a20-4252-88ee-244eb677e722", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50569034-a455-42b2-a638-cca19e8aad77", "sighting_of_ref": "indicator--d49780ae-6a20-4252-88ee-244eb677e722", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef819aa-9033-480e-813a-6da8d9194db7", "sighting_of_ref": "indicator--69239cce-cee9-4332-bd5a-73f352700789", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e30dbdc-c8b5-484a-afe2-9a686e68a824", "sighting_of_ref": "indicator--69239cce-cee9-4332-bd5a-73f352700789", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0106832-31ba-4593-a151-efd738bb09af", "sighting_of_ref": "indicator--7b24fe9a-0a79-4002-bdf3-003d8a740fb0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493bf04-e3e5-4a2a-81cb-f7a75af96da9", "sighting_of_ref": "indicator--7b24fe9a-0a79-4002-bdf3-003d8a740fb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c6c457-458f-41bd-b8ed-a8fc01d0b1a3", "sighting_of_ref": "indicator--b86da4d4-a7b8-417a-9d1c-f99209e775d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e6d04f-733b-4d34-8782-4133ccc2347b", "sighting_of_ref": "indicator--409b697c-a627-42f9-8848-3db5172a2863", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014c1aca-47f8-459d-82d0-09bfe7d34c1e", "sighting_of_ref": "indicator--7dee52df-a366-45ca-90b0-25d930e704e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc31134-0b8b-4ee8-be36-dc1e13721cfd", "sighting_of_ref": "indicator--6f9a98be-d6a9-41b3-bc41-bde736a6523b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da16ced-1b97-4e66-aaf2-03e023d9a9ba", "sighting_of_ref": "indicator--55cef411-7b06-4987-8fa4-3d5143189e82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d406ba68-4ea3-42cd-9671-05e2982c898e", "sighting_of_ref": "indicator--55cef411-7b06-4987-8fa4-3d5143189e82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c41785-de1d-4d39-8d24-ed9badf84b92", "sighting_of_ref": "indicator--16e65197-8ed3-45d1-9675-b710e5b3cc35", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4b00b1-48d0-4909-925e-ae77fd583dcb", "sighting_of_ref": "indicator--16e65197-8ed3-45d1-9675-b710e5b3cc35", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06e755c-33c2-44d3-a3d2-4466be793016", "sighting_of_ref": "indicator--16e65197-8ed3-45d1-9675-b710e5b3cc35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a6cb7d-ce2b-4f29-bab6-2c3873843d2c", "sighting_of_ref": "indicator--c04d878f-2bc4-40e7-b901-a9c46eb2f8da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19adb6be-d787-4eb6-be6a-5aeedec01ce9", "sighting_of_ref": "indicator--e7c1747a-9cce-4982-9950-2f5823aaad56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceda4be-64dd-4c26-9889-c52d9bef50d1", "sighting_of_ref": "indicator--1e009de1-a347-4c04-96eb-06395296e72b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e389039f-c016-4503-ab01-64575bc58902", "sighting_of_ref": "indicator--1e009de1-a347-4c04-96eb-06395296e72b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f1dda6-09a9-40ef-ad1f-9c891ea6d617", "sighting_of_ref": "indicator--16c1b06e-eaf3-4d2c-9675-6cdc1a0123d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4170f2a-8b45-4912-abaa-794fa37c3db2", "sighting_of_ref": "indicator--0f2ab816-e5fb-4ec5-b502-586297a9eb27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272db7a6-14bd-41b0-92f3-c764ce717c63", "sighting_of_ref": "indicator--51482e43-19e3-4704-ad5c-55581d43dcce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d01699-4e1c-4989-a2d4-21ba9e08f026", "sighting_of_ref": "indicator--135552fb-e2fe-4aa0-8e35-96e26bc6ceaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4f493f-41c3-42f7-8593-add7acdd56bd", "sighting_of_ref": "indicator--c35c38dc-b1c0-4e09-a194-6fbd3abc7110", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a313ea2-8b5f-422b-a51b-e30dd682bc24", "sighting_of_ref": "indicator--e40ef185-cb05-4330-b3bd-d484cdafa9aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebf77fe-534b-473a-aded-e96a034a5856", "sighting_of_ref": "indicator--4ef3eb7e-7f3e-4f4c-9d50-2b81f54213ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a0ab2b-d5cd-4a00-bb63-3dc35d21b6f7", "sighting_of_ref": "indicator--7c7627c5-0467-4c07-958a-2d8aa36b6d95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122cc513-b12d-4a89-8506-29e2476303b9", "sighting_of_ref": "indicator--7c7627c5-0467-4c07-958a-2d8aa36b6d95", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0722443d-908f-4fb7-8ff7-ca73b3a87556", "sighting_of_ref": "indicator--7c7627c5-0467-4c07-958a-2d8aa36b6d95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e2f873-308f-4c6a-b23e-1a99fb6b4fe6", "sighting_of_ref": "indicator--7a3a60fa-5cf7-4d94-bf49-60b5390ebdd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fd119f-b430-4e4d-b8af-7c7638db3926", "sighting_of_ref": "indicator--ffe2e421-8cd7-4647-9570-467cf2824069", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0adfe5-06d5-4922-b500-ae232469a5b7", "sighting_of_ref": "indicator--4b019bc6-f7f7-4b6b-905d-d08d1d4b45ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b333b2b-f4cd-4dbb-9d91-c19fca9310a3", "sighting_of_ref": "indicator--8f6d416c-2d81-4302-aeb3-457eebec8eac", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b67437f-965a-4c21-a5e6-68e22ff6513c", "sighting_of_ref": "indicator--b8b2f77b-5038-4790-b69e-ce79134dc82e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649e7605-4a1f-42a8-ab5c-5a886f7268bd", "sighting_of_ref": "indicator--01523014-30ce-48e4-b7d9-28057af3e75b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb13b29-a81b-4e81-b646-6d8a46ab1b67", "sighting_of_ref": "indicator--1712bb10-f52b-41a7-82d1-59c32ea14415", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f71a8ea-88bb-4e0e-ad19-785671329538", "sighting_of_ref": "indicator--8b63d4a1-bcee-4cb0-9f3e-7b741cf62e7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e312f9bf-1105-4386-88f9-e939ae75fe60", "sighting_of_ref": "indicator--c3b7855d-1040-490b-92fb-e7b81975dff5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc5b8b-bc64-4fd0-aec8-1472f62534fa", "sighting_of_ref": "indicator--53fa97d9-0de8-483e-8028-70c6896d4f83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa11a50-0a71-4d82-8a5b-ded1315deaa8", "sighting_of_ref": "indicator--9e4ccd60-bbc0-47fb-8552-b7bd8db7d31b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f596976a-2802-4d03-913c-47ff248e79c8", "sighting_of_ref": "indicator--0e90a181-964b-4cf4-b686-7d6bc15058d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167b98f-93b5-484f-86d7-5a65547e189a", "sighting_of_ref": "indicator--b4261529-631e-4ceb-97a7-2e9e94e4b7e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e063ebb6-c29d-43d8-a037-5c4c9f85adf7", "sighting_of_ref": "indicator--55e512f7-e785-4253-9ade-24ed9023a828", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2abdf7-7ec1-4f19-9a66-d9e823fa4085", "sighting_of_ref": "indicator--55e512f7-e785-4253-9ade-24ed9023a828", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02740af-427a-4ec9-b0a3-39f800b6cc1a", "sighting_of_ref": "indicator--55e512f7-e785-4253-9ade-24ed9023a828", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66c947-9450-471f-9f3d-2958eadb7f7a", "sighting_of_ref": "indicator--cb8cffee-2900-4277-8b39-0fea8e2fdd18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6849ab9b-0304-4479-8529-14af20de4304", "sighting_of_ref": "indicator--70a71532-cc87-47b1-bfed-f123660bfaf7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c267633c-648a-4232-9191-2d3a78fdf7fe", "sighting_of_ref": "indicator--93a4ca7a-e600-4c95-a730-fae292125d27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60b2896-dcc3-4f4c-9e94-39b8d2af28d6", "sighting_of_ref": "indicator--93a4ca7a-e600-4c95-a730-fae292125d27", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6463f8-183c-4573-8825-6c59ba677d95", "sighting_of_ref": "indicator--93a4ca7a-e600-4c95-a730-fae292125d27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc56868c-2fe1-47e6-bc7c-aed0c5f0f77f", "sighting_of_ref": "indicator--cbc62c76-0d07-4ad2-9dad-aa265a926a28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ab2172-3d8c-4a85-9393-fdbc3988def7", "sighting_of_ref": "indicator--4084f8e7-1378-4b47-a4cb-a3872bc2a374", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab06da98-7435-45d0-a11f-5eee402ea171", "sighting_of_ref": "indicator--a20e1268-f42d-4cb6-9ade-ea65504c5ba8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdbcfcc-e3da-41e4-a20e-8af118f9e7df", "sighting_of_ref": "indicator--c0908f24-a296-49f2-a9a2-d8752ac3a3cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46141473-f03a-4ece-aa0d-973c8c30033d", "sighting_of_ref": "indicator--b0d093f3-edaa-4727-96bc-5654f0de4cc5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4744cc47-5927-4c02-8733-6dc6d012d56e", "sighting_of_ref": "indicator--6eb26ab2-a9d6-4b56-9779-0ed488365cf9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387bc8dc-edf9-4502-b86f-203c5f662935", "sighting_of_ref": "indicator--d006594e-afda-4cc1-a22c-d6417349a7cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af9ea7b-faa8-43eb-badb-0fbba6495b53", "sighting_of_ref": "indicator--33aaba5e-584e-43c1-8aae-02dceaa3c5e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f1f3c4-fc1b-449a-8d41-e995cd1bc0e0", "sighting_of_ref": "indicator--bf550005-e9dd-4fa4-8e07-afca180f7056", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b78c72a-e3eb-45c0-98b3-0a6ccfea9a9c", "sighting_of_ref": "indicator--d4e47600-7181-4d2d-810c-bf8d0d99e9ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb45f9f-b839-4558-b5d4-ce46a2096dae", "sighting_of_ref": "indicator--1031358d-c6af-4710-8db3-1eb3ccb46ef3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123c7d4e-f192-4e27-850b-f4e51e591217", "sighting_of_ref": "indicator--3b4feb26-471d-47c4-bee3-7558c114ca7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c20ecf8-9d95-406d-8486-413cb5d258ea", "sighting_of_ref": "indicator--5d97cae6-19fd-4fad-9e37-cfd44f07c146", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dca0fdb-1166-45a2-b53b-2687fe1bed7a", "sighting_of_ref": "indicator--eb5ecff9-d73c-4d01-a4b3-a4f8522ae3ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593837d2-5c9b-4779-9ba4-0e93d0fa1d95", "sighting_of_ref": "indicator--3e4e1e9f-93d0-4b27-b8d1-21a5ffbb3ee9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dec263-3f8b-4eab-8758-f95ce2e91346", "sighting_of_ref": "indicator--5583f67b-d91d-471f-804a-600ee82dbc4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ab4718-a03f-404c-ab8b-6cccda99286a", "sighting_of_ref": "indicator--6a52b7a3-fc96-434f-8f49-87a79f44d779", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c43b50-494b-4719-a8df-bf767dd72802", "sighting_of_ref": "indicator--0241b2b8-5185-4c57-9100-44afead24126", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d743f9ed-dfd1-4308-ab46-84861b216d97", "sighting_of_ref": "indicator--50bbc7fc-4bd8-47f0-9e9d-fad82c5599ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e19736d-5334-4613-b38d-7b38d7c968d3", "sighting_of_ref": "indicator--347978a6-91a8-4e3b-992a-55d24e138ebe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cca2fa2-94a6-4e98-817a-d2c2286a88dc", "sighting_of_ref": "indicator--347978a6-91a8-4e3b-992a-55d24e138ebe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c0bedd-2ec1-4795-87a8-d461867952ae", "sighting_of_ref": "indicator--069a7944-bf52-4f11-9998-a7de80d22f57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf07db-034f-4d6e-bbac-300cdc25d0df", "sighting_of_ref": "indicator--6411ad75-aa19-4352-a77b-967bad3d103e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5f279-5094-4f86-b5da-578dc3fc9196", "sighting_of_ref": "indicator--6411ad75-aa19-4352-a77b-967bad3d103e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b93ffd-ddc4-456d-b2c2-1175770838e5", "sighting_of_ref": "indicator--d9a46b8d-50a1-4579-bf6e-23c4dd62b4f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4ee307-1993-4b82-b9d4-46703a3b8182", "sighting_of_ref": "indicator--d5dfb0fe-e881-40cf-b097-bbc1d1454848", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412a3653-adb3-423c-8949-2f10e4ab50cc", "sighting_of_ref": "indicator--d5dfb0fe-e881-40cf-b097-bbc1d1454848", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ce4168-ddc0-434b-a489-38732cf909e5", "sighting_of_ref": "indicator--8e395f60-e3e4-45ac-b19e-117fd1d84401", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522bfa0c-3b2f-456c-938e-6e4e569298d4", "sighting_of_ref": "indicator--9cf7cb47-0a85-4a10-887b-5919b8769036", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d731804f-8549-427e-92e5-18449c04e19d", "sighting_of_ref": "indicator--f729419d-9923-4a24-9a53-f9c70f773085", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60d9097-48d8-442a-88af-e33fb734c86e", "sighting_of_ref": "indicator--e949d3b5-4f11-4f7c-9851-89e3fef007ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740b8e6f-6dc1-46ce-bca6-fc49d90c2d7e", "sighting_of_ref": "indicator--158c2e95-2588-4da9-be2c-413b543d20f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6133e1f-6a2f-40bb-a0c3-0e461e2900e9", "sighting_of_ref": "indicator--1a5a15f7-a1c9-4ae9-a166-8c77ffd02ae6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52d895c-35fa-4325-8a42-9d10e3013c02", "sighting_of_ref": "indicator--b125a960-792b-472a-9ce1-8eb7d1a81234", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46287cd1-5adc-4359-9fe6-d2b8625ff8c2", "sighting_of_ref": "indicator--3c0e5303-77e4-4e73-8677-a730844ee683", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc3fdde-068e-477d-a6a6-6bbe07b22417", "sighting_of_ref": "indicator--b3475afb-39ea-4c3d-900a-6a0b26f90207", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96f95d5-ad77-4bdf-9335-c3279ac6f254", "sighting_of_ref": "indicator--3362b123-a54d-48a2-aeea-9f6b023c004f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afd2038-a210-4e4e-8560-e619ce910a02", "sighting_of_ref": "indicator--3362b123-a54d-48a2-aeea-9f6b023c004f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5458fd-b30e-44b1-9158-3896161994f6", "sighting_of_ref": "indicator--dd829c2d-e1f5-437d-b054-83bd13f7b21a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3e7b07-ec53-47ce-9490-e0ba8677d295", "sighting_of_ref": "indicator--71579783-92c3-4bc0-9ee0-86a050d5be41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5dbc4d-ee1d-4244-abf0-25817d3542da", "sighting_of_ref": "indicator--71579783-92c3-4bc0-9ee0-86a050d5be41", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ea28d4-dac5-45f8-a24d-707dcd90cc45", "sighting_of_ref": "indicator--779ac3f1-1c4c-43e4-b72f-fa3f75a349c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca694d55-e4c3-4f01-b05e-f1b52b9ba1b8", "sighting_of_ref": "indicator--839bda1d-67b0-42c1-837b-6af9f30032e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de2c97a-9b53-453a-af59-66b65e90ad89", "sighting_of_ref": "indicator--955ae1b1-6316-4b40-8d72-021d2503b23f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264899ca-d17a-4a30-9ad3-8a0fe11da5a1", "sighting_of_ref": "indicator--f5a645dd-da3b-4898-a081-ee195debe3de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5216c0cf-228f-4065-ab7f-381aca5ea42e", "sighting_of_ref": "indicator--c32911b4-1665-4ce1-8d09-9551896a4024", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ad63e6-e2ef-4505-8f17-11672acf38ff", "sighting_of_ref": "indicator--db6080b9-cb47-4132-b618-89fe3ac2ce03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a9d06d-778b-4d4b-8c4b-5589a1babf3c", "sighting_of_ref": "indicator--744ac32a-8790-4cd9-a1b9-9658dced6e87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750a274d-bd09-4463-aaaf-c317e6261190", "sighting_of_ref": "indicator--19e37b0f-bbbb-4e75-960d-f4ff4257876c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a987331-1fa9-44d4-ad8a-cd7f8a53e4cf", "sighting_of_ref": "indicator--19e37b0f-bbbb-4e75-960d-f4ff4257876c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d87cc0a-f14e-4709-9c48-c349ff37d4cf", "sighting_of_ref": "indicator--c8492421-7756-41c1-8bc2-5016dc10aeef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1025c84-566e-4ea5-8177-415c5e6a9a8f", "sighting_of_ref": "indicator--c8492421-7756-41c1-8bc2-5016dc10aeef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20315806-ee2a-4d54-ab69-45a8fa20bb2d", "sighting_of_ref": "indicator--263bf135-4f21-4d70-bb50-a7d2c5737bcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a676cd31-5cae-46e8-bcd3-3cd062da1ff4", "sighting_of_ref": "indicator--2bbf9bde-b3eb-47f5-9ae9-767377e836bc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8eab34-bfd9-438c-89f9-8b91c091cb9d", "sighting_of_ref": "indicator--9f06a5be-e894-45dc-b35c-45e1eb81ed85", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5331d4-c25c-486f-80cc-837c9d9afa18", "sighting_of_ref": "indicator--b3a3a139-a31f-447f-ab4f-274545be9e73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb49f0a-68ed-43a6-9439-83cb2f4abba0", "sighting_of_ref": "indicator--4aba3ed0-e318-41fd-8525-54bad743f856", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9650fe-169e-41ce-9eb0-9285679a101f", "sighting_of_ref": "indicator--c96d11dc-8cff-448c-bd60-c4646fd68aed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d221ef0-dca0-43e0-b615-33711262b154", "sighting_of_ref": "indicator--6465b081-ad4e-4f0b-b87f-4dca30263653", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a74317-8a21-4e77-a148-95cecd6460ef", "sighting_of_ref": "indicator--653238e7-d7ce-4466-bdcd-df302501a873", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6177d63e-dea5-49e4-b13b-1607af89fff5", "sighting_of_ref": "indicator--a2879783-09eb-4671-9aff-252bed16b3e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80ecfc7-bf89-49b2-acea-19a3b06a70e3", "sighting_of_ref": "indicator--3b132137-d4dd-4789-81aa-939a1476e8b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f33665f-4d5f-44b5-89c2-53ef05244326", "sighting_of_ref": "indicator--2d6955f0-449c-4b80-8c3d-37e7557e3fb6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a449f236-36f0-4617-9bf4-70906f9c490c", "sighting_of_ref": "indicator--b836ffed-09fd-4393-b6e4-fc96dc407fb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6828a6a0-bddb-43dd-94a3-f7b83340746a", "sighting_of_ref": "indicator--b836ffed-09fd-4393-b6e4-fc96dc407fb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3e47e-9737-49d1-8e4d-be40b892d277", "sighting_of_ref": "indicator--698cf039-d33b-43ec-b5b7-61af9f645454", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fa1108-4699-4164-a970-cc9b6de30f6b", "sighting_of_ref": "indicator--698cf039-d33b-43ec-b5b7-61af9f645454", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e73444-a93b-4e07-b415-083f30a5d492", "sighting_of_ref": "indicator--c8cbf03f-63eb-4f2e-85aa-bd53693b7468", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80017d2-588f-4b5f-acac-ecd877a046fe", "sighting_of_ref": "indicator--9a286559-aad4-416b-abb8-30a394f0566d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4a837c-709d-4a7f-ad2d-a2b9ec7aeff1", "sighting_of_ref": "indicator--f60631f4-91c4-4c17-8a64-235ebcd99b5c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69c07ea-016d-4b85-8727-9516a7bde148", "sighting_of_ref": "indicator--9c3652e2-ab51-4218-a802-e1cb6a25ac88", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd1c64a-13be-425d-a58b-cb7b878feece", "sighting_of_ref": "indicator--d655c98d-ecf5-463d-bbc4-6335c88806ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bb16dc-8958-4f7e-a671-b29884f6327e", "sighting_of_ref": "indicator--e6a96fbb-b754-4d29-a222-8b5a9dc30694", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab4589d-a7f1-4af8-94ea-f135cf66332b", "sighting_of_ref": "indicator--b691cd8e-a2f1-4d15-9ad2-82c1842df2aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cf0230-47a9-4679-b4d4-ccb910ef438a", "sighting_of_ref": "indicator--17866ebb-6581-4eb5-9501-0aa593638315", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76436ac8-c38d-4726-bfc4-b4cb9491c8fc", "sighting_of_ref": "indicator--2244486b-49ba-40a7-9682-6919ab33a4ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8534b77f-88d9-41b9-b8ce-d4806d70b413", "sighting_of_ref": "indicator--40510b9d-cca4-468a-8a09-00afd2c19717", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895aa2bd-e5f0-484f-8ab3-6bd7553f57d0", "sighting_of_ref": "indicator--87eb05e5-4f46-416e-a433-a0bf008e7514", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad2550f-01f9-4528-ba44-e0fe7b73cbd8", "sighting_of_ref": "indicator--57bcb091-1861-4a0b-b7ac-2ee9f2b5f98e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af333423-33db-47d5-bd1a-cad457457797", "sighting_of_ref": "indicator--7112af33-f630-4333-b6c1-9889696b6264", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16321441-56fb-4592-a8d5-72f41cdaabb2", "sighting_of_ref": "indicator--8e016eb3-0375-498d-9979-c2d9f1a1bb7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9805f4e3-3bf2-4fed-a1a0-4833c2f7843d", "sighting_of_ref": "indicator--a1f283ca-0b1f-4acb-9388-c6f30e328a46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f5296a-654d-455d-8e5b-214f8629a1ce", "sighting_of_ref": "indicator--466b67e6-f9f4-492a-ab60-3455769f80c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce87604a-e27b-4e4f-a2fc-8c4cb58a2109", "sighting_of_ref": "indicator--6c1c87af-6040-4730-9951-5487fdd56e53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc5195e-d4c9-49c4-b8f8-d1f1373bcda1", "sighting_of_ref": "indicator--6c1c87af-6040-4730-9951-5487fdd56e53", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7219c14-9779-400a-9a85-eb90d0031ea3", "sighting_of_ref": "indicator--6c1c87af-6040-4730-9951-5487fdd56e53", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4acc521-501d-4682-9c7e-68177c5aca84", "sighting_of_ref": "indicator--a7b44e49-de4e-44a2-a9b1-6221df1d003b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe1c0ce-ff84-4a5c-9454-690907aa1e69", "sighting_of_ref": "indicator--6bd98755-4dc0-44f2-a103-a6de8cedaa47", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1777beb-cf19-4682-8772-ee0599617804", "sighting_of_ref": "indicator--e6ee0063-64b5-4830-9fb4-111ac7a24552", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a798213-84ba-4542-80b3-eaf5f146b1f4", "sighting_of_ref": "indicator--fe0f3001-45e9-43e6-915b-68663f9dcb29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93766c40-cafa-4e57-b432-97446f3bc3a3", "sighting_of_ref": "indicator--fe0f3001-45e9-43e6-915b-68663f9dcb29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6632b3-3d44-4e32-bc54-dec0e1b1a9f6", "sighting_of_ref": "indicator--7eda2d22-817c-4661-af14-911afc5e6f70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62231408-bf16-4a2d-9b46-454e7740a7a5", "sighting_of_ref": "indicator--28a3e23e-ace3-47d2-b679-d8e3bcfc4b73", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22163ef6-3b37-42ab-9892-f54d2903f214", "sighting_of_ref": "indicator--28a3e23e-ace3-47d2-b679-d8e3bcfc4b73", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbee996-b6b8-4dd8-a40e-b8392ba5156f", "sighting_of_ref": "indicator--28a3e23e-ace3-47d2-b679-d8e3bcfc4b73", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463472c5-0eb0-47c1-864c-402c1bd721d8", "sighting_of_ref": "indicator--037fd375-fb48-4875-935d-3187ae45c07e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5673f72-8f2a-44ee-877b-464ff2cf265b", "sighting_of_ref": "indicator--17364097-b894-45b2-8984-f62df7e5c733", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af1fc90-8590-421d-bfae-d4a4f02f98d3", "sighting_of_ref": "indicator--fb4d26f6-f6af-46f4-b5e5-a21926088266", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486752dc-eefd-4154-8204-c6affa66460c", "sighting_of_ref": "indicator--fb4d26f6-f6af-46f4-b5e5-a21926088266", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d1555-8fd2-4edb-87c9-1a5f521f2929", "sighting_of_ref": "indicator--fb4d26f6-f6af-46f4-b5e5-a21926088266", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66680d68-ce8f-4635-aefe-dbdb3fa39422", "sighting_of_ref": "indicator--8d69cc57-84b6-4f82-a3cf-b2a6bc0573bf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e6edd6-8475-484d-aea4-207e4c8028eb", "sighting_of_ref": "indicator--8d69cc57-84b6-4f82-a3cf-b2a6bc0573bf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311ba8ff-6480-44d0-a800-c3bf53bc775d", "sighting_of_ref": "indicator--8d69cc57-84b6-4f82-a3cf-b2a6bc0573bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a2ffa5-200a-4b9e-b728-9b79c26369a9", "sighting_of_ref": "indicator--83bad99e-1280-4fd8-9cb5-1c50d53f0130", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec23f15-8514-464c-b5d6-d366174bed3d", "sighting_of_ref": "indicator--83bad99e-1280-4fd8-9cb5-1c50d53f0130", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13005e1a-9ce0-4319-b581-a827f86945b1", "sighting_of_ref": "indicator--83bad99e-1280-4fd8-9cb5-1c50d53f0130", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204fb5ed-aba0-4513-8304-5855f42a46d1", "sighting_of_ref": "indicator--d7e2d33b-25b5-4c78-bcd1-ffb92c5c18cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6da0d1e-55cb-49b0-9496-327c43a49bbc", "sighting_of_ref": "indicator--d7e2d33b-25b5-4c78-bcd1-ffb92c5c18cf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e874386-e104-4078-a5f5-6cee3e42891b", "sighting_of_ref": "indicator--d7e2d33b-25b5-4c78-bcd1-ffb92c5c18cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb74992-203c-4b95-b7dd-24100d8c69e5", "sighting_of_ref": "indicator--568a6a15-dd55-4550-814a-d9b46f9f4f4f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d5d1e8-01b2-4c8f-b534-068a9c8fc19b", "sighting_of_ref": "indicator--568a6a15-dd55-4550-814a-d9b46f9f4f4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4fb62-8756-42be-ab2d-7a7018b91961", "sighting_of_ref": "indicator--568a6a15-dd55-4550-814a-d9b46f9f4f4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583a6b1b-9924-43f4-a303-6dd28e2ea6e3", "sighting_of_ref": "indicator--cbd1da9c-9af2-4776-b445-6b8e55df0028", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942fb3dd-8ff3-41d1-9f06-a2cac66e6d67", "sighting_of_ref": "indicator--cbd1da9c-9af2-4776-b445-6b8e55df0028", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffec79b1-b57f-4e6f-8f15-70a6a5e1b9b0", "sighting_of_ref": "indicator--cbd1da9c-9af2-4776-b445-6b8e55df0028", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e703d1-a610-4905-a57c-e558b5286507", "sighting_of_ref": "indicator--89c6ce3d-99d7-4050-8777-0621601b403d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0f4a38-b73a-43df-b6b5-4d88ef18ceef", "sighting_of_ref": "indicator--64909207-ed81-484f-92c6-fda4eee8a592", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b411cd-9271-40f2-84cd-2b136d2d9ad1", "sighting_of_ref": "indicator--ad5822ac-c21d-4397-a2a1-478e3dd736e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525ddd82-9e0f-4f27-aad3-f917387740a3", "sighting_of_ref": "indicator--2d4940ee-33eb-4672-a48e-cc226dd90c67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596b19c4-d0bc-41ec-ae0d-b84f0b674b14", "sighting_of_ref": "indicator--2d4940ee-33eb-4672-a48e-cc226dd90c67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001c6654-c343-47d7-a74e-c8db754c8f62", "sighting_of_ref": "indicator--e0801d20-01b4-4e44-83a3-944426511951", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe136270-bcdc-44ed-8b19-6b3c27bdbc7d", "sighting_of_ref": "indicator--e0801d20-01b4-4e44-83a3-944426511951", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb26c7-bdf2-47ed-a16a-d931f7055ccd", "sighting_of_ref": "indicator--4e304c3b-3073-4375-a83a-c4fd6c3226c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7770c0-a3a6-4bf6-aa56-2d0ac461951d", "sighting_of_ref": "indicator--4e304c3b-3073-4375-a83a-c4fd6c3226c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44310fc5-a00b-4a6e-9244-febaae659b70", "sighting_of_ref": "indicator--00d6e718-999e-4531-b9f3-2edf4925c533", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2401ed7c-b791-4dc0-9ab1-5d1953fc0d79", "sighting_of_ref": "indicator--00d6e718-999e-4531-b9f3-2edf4925c533", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fa3735-dcff-4fe7-bd13-a91a24f6c4d1", "sighting_of_ref": "indicator--d824392b-3e5c-498a-b3ba-3059e1a14779", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b587320f-455e-4351-b995-0b6587967cbc", "sighting_of_ref": "indicator--d824392b-3e5c-498a-b3ba-3059e1a14779", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e9f6e2-5f1b-4181-b67f-04d49c5e81cf", "sighting_of_ref": "indicator--5cc9ab2b-6a8c-47d6-a906-64d00c9c9e0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91da06f-bf6c-4f2b-a059-39854d1424b8", "sighting_of_ref": "indicator--5cc9ab2b-6a8c-47d6-a906-64d00c9c9e0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a7a1a8-8fc8-4c98-8afa-9ff70283f90b", "sighting_of_ref": "indicator--5cc9ab2b-6a8c-47d6-a906-64d00c9c9e0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23147e91-9d39-49d8-8f39-bd872b72ef39", "sighting_of_ref": "indicator--09482ad7-ade3-44c0-9709-7523ce24575f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23fb764-3183-44af-83c6-78cdf3153efe", "sighting_of_ref": "indicator--09482ad7-ade3-44c0-9709-7523ce24575f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711a0532-8e20-4df2-9a57-3d0928a16ac8", "sighting_of_ref": "indicator--96dab479-22cd-422b-ade5-0368c4499ce0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a0c53-68b3-4c89-91fe-c818f6c0f6d6", "sighting_of_ref": "indicator--96dab479-22cd-422b-ade5-0368c4499ce0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012df871-aabd-4d30-820c-108bde7263b0", "sighting_of_ref": "indicator--b1c10893-59c9-4191-83c7-94618c6216e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd61217c-5ff3-4804-b4a2-bdb943466355", "sighting_of_ref": "indicator--b1c10893-59c9-4191-83c7-94618c6216e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d01a6c-89c8-4bb2-b720-6865877ee7d9", "sighting_of_ref": "indicator--b1c10893-59c9-4191-83c7-94618c6216e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7458c8c8-4f20-46b1-8151-19a8985f55ce", "sighting_of_ref": "indicator--e98293c9-371c-4d3a-804d-512f9849e772", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6442457-829c-42ee-ad2e-49148b5f6c8f", "sighting_of_ref": "indicator--2eb103ad-76fb-413d-8202-e2007c575687", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdc7fbd-a865-43d6-bbbe-08e7603fd423", "sighting_of_ref": "indicator--e8662d2b-2046-4092-a896-8193de41ca84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f7916c-ef3a-4179-beb6-a50fb0cb98c1", "sighting_of_ref": "indicator--a6d70a94-f159-48e7-b837-660619d21e54", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e50cfc7-f264-432e-8eda-32dfc0aa653c", "sighting_of_ref": "indicator--fb3d3835-8e38-402a-92b9-c4e277270717", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b85baaf-756b-4a4f-982c-6600a6a93821", "sighting_of_ref": "indicator--8ba8fe39-73db-4461-b519-2acd7ebecf20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9981871-7844-4cb0-843a-ed6005ecd863", "sighting_of_ref": "indicator--0f73dba4-c3b2-48bd-87f9-521aa6877d48", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b43d7-43a8-4e3e-8c3d-2380cdde30a3", "sighting_of_ref": "indicator--47d99f28-dd7c-4186-87de-cb7061d91fd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157352fc-2bb9-4144-b726-f71e32306501", "sighting_of_ref": "indicator--8051733a-ebb7-435a-b7be-3bf33a9b557d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65d41ea-d2eb-47b4-bff3-7a62fa873573", "sighting_of_ref": "indicator--8051733a-ebb7-435a-b7be-3bf33a9b557d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8a50ba-4f84-426e-b3b6-c17df0541c69", "sighting_of_ref": "indicator--5f348785-2b05-436b-8ce8-97730ac08c78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d3f89b-6a25-47f7-85a1-2411b5faa1e8", "sighting_of_ref": "indicator--eb531cfd-c943-4498-b97e-7c2d5d5959ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e783db59-9b6a-41d9-b36d-7df0b7034307", "sighting_of_ref": "indicator--327bb93a-c13e-4fb1-b49b-06253615840b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef06f57-7393-40cf-af13-cf4c0d2c9043", "sighting_of_ref": "indicator--327bb93a-c13e-4fb1-b49b-06253615840b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af335a45-e257-445f-967b-2e3b52578cb7", "sighting_of_ref": "indicator--885c79f7-1f0a-4b77-b073-2779c844a2dc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b78194-decc-4d46-a455-7579d4250701", "sighting_of_ref": "indicator--885c79f7-1f0a-4b77-b073-2779c844a2dc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31728fc4-b2cc-47aa-b7c8-4db44e4891a7", "sighting_of_ref": "indicator--a395b2ad-b6b2-418b-b4eb-e3d0abd71702", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d4e7e-7659-4f46-b11e-3cf2068190e3", "sighting_of_ref": "indicator--a395b2ad-b6b2-418b-b4eb-e3d0abd71702", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ff86d6-1b54-45a6-aae6-2bd94bd0a7e3", "sighting_of_ref": "indicator--a395b2ad-b6b2-418b-b4eb-e3d0abd71702", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284a6e47-24d9-441c-a34d-b691ba106735", "sighting_of_ref": "indicator--9bb1a3ca-c91b-4c34-8a9c-772831c2679f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ce0b0a-5136-4d21-8675-0e421095927a", "sighting_of_ref": "indicator--9bb1a3ca-c91b-4c34-8a9c-772831c2679f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbe09d0-19ee-4573-b5c9-336a8fa22fe4", "sighting_of_ref": "indicator--0b7cce8e-d406-4058-b01e-4080abb391aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fdc1ff-51b8-4604-92fd-e56e35aacd11", "sighting_of_ref": "indicator--0b7cce8e-d406-4058-b01e-4080abb391aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22136342-fc4b-42fe-9ddc-658c93666a29", "sighting_of_ref": "indicator--85cf59b1-bb70-4222-b30a-0a1efbdd0205", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0077fe5c-f54e-461b-9a00-b644dfd7d5b6", "sighting_of_ref": "indicator--85cf59b1-bb70-4222-b30a-0a1efbdd0205", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62779fa8-2d2e-4ad5-945c-5056e4825460", "sighting_of_ref": "indicator--de455672-7ac3-417b-9338-0f02dc6d7ab4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee704bd-4ec9-42cc-9163-e828e70e8118", "sighting_of_ref": "indicator--de455672-7ac3-417b-9338-0f02dc6d7ab4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00416108-e524-4105-9b7f-0c6ff7453e65", "sighting_of_ref": "indicator--c9fabd41-2a61-47fc-b6f4-7dcda8631aea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ce6a42-9ae4-47a2-a146-b9ff8c36c80a", "sighting_of_ref": "indicator--c9fabd41-2a61-47fc-b6f4-7dcda8631aea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1173be5b-4813-4895-b9d4-2a7799e085a8", "sighting_of_ref": "indicator--1b66d8ee-e075-40c2-9cb5-100083ab0bda", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8de0e1-2d36-4c14-a7b7-ef8e04c55f00", "sighting_of_ref": "indicator--1b66d8ee-e075-40c2-9cb5-100083ab0bda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a9c657-89dd-47a4-9ab0-9df5e056c05a", "sighting_of_ref": "indicator--f782f697-4659-4053-a97f-117dbf810fe1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9620608-2d19-42f1-a857-f64906d9f7b2", "sighting_of_ref": "indicator--f782f697-4659-4053-a97f-117dbf810fe1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d383bb37-2071-48cd-87a5-d8da060b886b", "sighting_of_ref": "indicator--8d390caa-3ccd-4c36-a2e2-cfb51c0ab71d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381c7d6b-ba94-4482-a3d0-8aadfb5bafd5", "sighting_of_ref": "indicator--a5c6feb1-3601-41a2-8151-1a47b8f4c242", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1c840b-d185-4365-b352-75caca5777a5", "sighting_of_ref": "indicator--59301499-af80-4f28-bf0e-1ddeba284cae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf85a40-4e8c-4355-9eb8-4e85c972f4a9", "sighting_of_ref": "indicator--d80d7d74-6a2b-4a04-b784-0c5b5b3aaf46", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f05073d-e3e1-4e97-90a4-0ed3641ffa4c", "sighting_of_ref": "indicator--273d53b4-6215-4e76-8321-d20b2fb8913a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6873582c-91e0-4dea-ab65-9e5ee572cdbd", "sighting_of_ref": "indicator--633f0c47-e76c-4c8c-baf8-3f8e6408a213", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b396f6c-ec10-4e62-ad9d-c0653e92a93b", "sighting_of_ref": "indicator--c023f800-c7a0-4034-8d90-25f396cc04f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb80e0e1-3486-4461-9272-19c1a7c3bbf1", "sighting_of_ref": "indicator--c023f800-c7a0-4034-8d90-25f396cc04f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403341ac-3874-4e2b-ad90-0fb8c4c8b549", "sighting_of_ref": "indicator--9da90da6-8658-4e25-9366-b68a30e83eb5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30faa4f-93eb-4e1d-a229-88c11b981375", "sighting_of_ref": "indicator--9da90da6-8658-4e25-9366-b68a30e83eb5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9678814e-0db0-47d5-861e-80ac5ea5df0b", "sighting_of_ref": "indicator--fd77d7da-a88b-4ea8-9166-587baf2e2637", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624074a2-d5cf-47ce-af9b-c14d205776e7", "sighting_of_ref": "indicator--fd77d7da-a88b-4ea8-9166-587baf2e2637", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d751af39-e096-49c4-ba8b-a83b327bdd0f", "sighting_of_ref": "indicator--bba49ef7-140e-4352-acc3-917e0653f64b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55ef713-f2af-409e-a4bf-2266b7f052a3", "sighting_of_ref": "indicator--590b09c5-3121-441c-9c15-7aadabe7671b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621cbdc4-1a61-4bef-9122-6012fb49e7ea", "sighting_of_ref": "indicator--a4644137-c84e-4ff2-a099-2ad36968cfcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cf8b27-4279-4757-9137-f9ee802c4572", "sighting_of_ref": "indicator--a4644137-c84e-4ff2-a099-2ad36968cfcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b0af1b-5608-4436-b111-7b0641734f64", "sighting_of_ref": "indicator--f01227bb-595b-409c-bb8c-bf2ceeae6c53", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b165e6e8-b567-4b57-b28c-6a08c5d78955", "sighting_of_ref": "indicator--d53ef20e-8025-46ae-ae12-1b9e3e4269ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f340e-30e8-4cae-b44a-fb3a2ae0481c", "sighting_of_ref": "indicator--a974d532-2e36-4e3c-b4b5-a63b600920f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbadff3-5b77-4b77-823d-833082dcf87f", "sighting_of_ref": "indicator--a974d532-2e36-4e3c-b4b5-a63b600920f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6974d7-edc6-4c56-ac13-7bf591556c1a", "sighting_of_ref": "indicator--24de2f18-003e-4a53-bcb1-19891a50c5d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32646c95-cb83-4441-afea-4196bbc006d1", "sighting_of_ref": "indicator--81717295-21f4-443c-aba8-a36338fb77b9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920cabab-9415-465f-9abf-461def0b3040", "sighting_of_ref": "indicator--566ffa95-5b03-4268-b334-a82f32c92d3f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e215748c-6011-48d1-a5e7-715b7e63e2b1", "sighting_of_ref": "indicator--246d5f7e-32b7-40e0-8b50-fbd022751b72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb83d8e3-b837-42be-87c9-314c3071afa1", "sighting_of_ref": "indicator--aa6dc546-c4b7-4874-bcb0-912ff1a5f845", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf23737e-3d4c-4cd4-b7aa-cef7b2c353d0", "sighting_of_ref": "indicator--8ce81cec-fa52-4766-b7c8-d816b10a6d74", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1a9203-e16b-4013-8b4f-12ce031a55f7", "sighting_of_ref": "indicator--cd365437-d47d-49a4-bc0d-0435521c12ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ecc31a-69ac-4248-a500-928f185a778c", "sighting_of_ref": "indicator--af949944-7a34-4949-8edf-1f092ab35dc1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604a37c9-d87c-4450-9e5e-29ea3869bc3e", "sighting_of_ref": "indicator--13d87770-64b6-4691-a21c-bc5ce71a6ff9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d132aeda-5483-4aef-90ef-2f5aadbda1c9", "sighting_of_ref": "indicator--13d87770-64b6-4691-a21c-bc5ce71a6ff9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9b70ca-7b0a-47e6-93d6-591ae06059ba", "sighting_of_ref": "indicator--d647d56a-698e-4ab5-98aa-b6e155108ae6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e345bc-bff6-49fa-ad75-c3151dffa04c", "sighting_of_ref": "indicator--30fb2948-283e-442e-8dfb-d6a2b9d7ef5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e836c47-6779-4fe8-bd44-f3c27e52b52f", "sighting_of_ref": "indicator--2a122e58-1c0f-4ce7-85da-0af1fb437723", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4bb76b-c4f9-46a8-acf5-4f77a24c8804", "sighting_of_ref": "indicator--ebd29ece-3101-4982-a0b1-f4fbd96307ff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fae6470-d695-480c-baa3-30df6f7c9b54", "sighting_of_ref": "indicator--b87f74d6-7c63-4eef-9c4d-3ae156ca7fa7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278e28d9-a0d3-4728-a256-c02049843340", "sighting_of_ref": "indicator--8fe56f59-6452-4edd-a999-8e24b9805e28", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b071ac-fb33-4c1a-8ca9-08cdef38f409", "sighting_of_ref": "indicator--bfd7ac74-29a4-4edc-af9b-f30dcf4b268d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127c687d-8a9d-4343-8c88-8f311ddba752", "sighting_of_ref": "indicator--1cb64776-32d1-4087-8fe6-109fef057e8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bbc1df-cff6-402e-b669-05646285b3c8", "sighting_of_ref": "indicator--df54f5a1-73a6-495e-9737-82800915c2b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee738017-ca65-4967-8df6-bccd9dfe1bb0", "sighting_of_ref": "indicator--ae13b080-cb83-4c71-80b4-afceb891254c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4382ac9-3617-4bc6-bba3-6f06b174931c", "sighting_of_ref": "indicator--c4bafde3-f2ff-456d-be4b-2cc52698927e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f41229b-97c3-4d1f-a322-e9d1bb3d1418", "sighting_of_ref": "indicator--2c722b31-f106-445f-a564-3db354f76f8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f1854-2c72-455f-a990-1219e68961e1", "sighting_of_ref": "indicator--37f027b4-51f4-42b1-a94e-bd5b12cf8f26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1605c66e-519d-4c86-8752-06f071bfdd02", "sighting_of_ref": "indicator--6588e611-cbf5-41a3-ab00-16a1bcf74e93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe2d866-1d93-46bf-934b-9fac82500357", "sighting_of_ref": "indicator--b1425e97-3dc5-44ea-a7ea-6c7ecf198b00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5e3e98-d09b-4204-a36b-810a979c8617", "sighting_of_ref": "indicator--3ae93306-71e0-493e-9e68-1fb03d600fbe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9a3544-b492-4c32-bc87-4d8b11cfc1da", "sighting_of_ref": "indicator--ebd6ff13-e5d1-4054-86f1-c3515b9d8232", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90913b22-57c3-4012-a1f5-bf08db26c2b2", "sighting_of_ref": "indicator--ccdf6882-2b40-4771-9559-72ce04ecf111", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4bdfda-5509-420b-805d-e91f8f1a6953", "sighting_of_ref": "indicator--108ebd65-319a-401a-9050-5311ed3bdb5b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19044f44-3f64-4b67-8670-be46c65405d5", "sighting_of_ref": "indicator--f04281f3-deaa-4b92-9a6e-3d81e8297e20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549e417c-ec0c-409b-aa4f-9681f9f71c8a", "sighting_of_ref": "indicator--50120a3b-80da-4ccf-a1bf-b7c83ca06211", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290c4658-d6bb-452a-b665-346d3c08f44a", "sighting_of_ref": "indicator--2423feb8-7304-41f9-b5bd-4723750f4bfa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0449aa-077c-4341-b33c-01bd2e103f75", "sighting_of_ref": "indicator--2423feb8-7304-41f9-b5bd-4723750f4bfa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983ffe38-5d06-492d-ba82-2568afb91db2", "sighting_of_ref": "indicator--e7c229a6-e233-4232-8c6c-ccb1ce02760a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eca8cd-5530-45e8-bd3a-8e5af2a1bdd5", "sighting_of_ref": "indicator--67f6d34b-bf03-4c52-a6eb-cfd388806907", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf9a60-6c33-44bb-bbc2-257311df4889", "sighting_of_ref": "indicator--610559ec-42af-4be8-b35a-5d01b2464cb3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34ab85b-ba69-41a3-bb73-85c21d0dd829", "sighting_of_ref": "indicator--0c4f7d0a-eb5a-430a-a9d2-5f94c76cc2b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbde439c-db21-4d20-9d4b-7a32dfcc6e58", "sighting_of_ref": "indicator--5ab01e96-8196-450f-9d6d-a337ccda5651", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49723f7d-cd83-4392-b63c-5cc0e3bf38c4", "sighting_of_ref": "indicator--df4817d7-36f2-4ec0-9732-f08fa3abfd1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed01e88-82ff-40fd-8a15-cfb46b84f471", "sighting_of_ref": "indicator--b355a5b0-84eb-48a4-864b-7870205815ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fc90f7-6c13-4726-a7cd-9d7a96f0d923", "sighting_of_ref": "indicator--93cb8a19-6c73-4905-b1c1-04c75ac11e2c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47951e1-885f-48ea-af36-6bf502ef959c", "sighting_of_ref": "indicator--373eb880-7d01-4921-a00c-7d4b12cc095e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b192652b-6cb1-412b-aa6f-ebc965ca2730", "sighting_of_ref": "indicator--32eb7b14-0de7-4c7b-af39-048d918477a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f9a21-8d5c-44f5-a402-e3f3e24aad1f", "sighting_of_ref": "indicator--e92e231a-8e19-433f-9140-bf8ea05142aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad52483-c0a1-4396-9fbb-42854a27b39f", "sighting_of_ref": "indicator--14de93db-04be-4da6-a7f7-2bcce69328a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22981e71-9031-4154-91f0-3ab9a1afd358", "sighting_of_ref": "indicator--22fe2245-8141-4e48-bcc6-78cbb0a6e5c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4770d45b-769b-45e4-a2b4-9102b151c021", "sighting_of_ref": "indicator--dd558def-16b4-4dd6-9ce0-99b013b5715b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b0484e-2649-4966-afbb-35b41144dbf3", "sighting_of_ref": "indicator--eddbdace-b0e0-4c90-9488-299d724ccc65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c53d11-f7b9-4dbf-8ea0-73252288545d", "sighting_of_ref": "indicator--a017de78-ef8e-499d-ab5c-5600b2e65a08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d9019a-7a80-43ca-874c-dbc4542146e9", "sighting_of_ref": "indicator--5be2ba69-aede-49fd-bf8a-aa5b5c085af5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a85475f-d8d0-4b24-ba86-5e4386bd38a6", "sighting_of_ref": "indicator--3c86d55a-fa70-471d-9203-a450a0f9c962", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b316884f-7174-4693-8990-6b0637101e23", "sighting_of_ref": "indicator--2d6122b6-c382-4a24-837e-39024807ad52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf9a8f2-cb0f-42e7-b5e8-1e58f97a8687", "sighting_of_ref": "indicator--ea2c544e-7833-4a02-a200-8a604c4d65cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10bf9d6-3792-456b-abbd-143b2e6b5c14", "sighting_of_ref": "indicator--8a5a6dea-33ad-4f8a-9d46-931a45504f7a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd9ef2f-79e6-46ff-81b5-bff45e0b6e0c", "sighting_of_ref": "indicator--ad219e87-0a67-4f76-a7e0-f5cf0b5201f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9809be0-a775-44c7-976b-a553b691e28c", "sighting_of_ref": "indicator--4b66146e-8594-41a1-902c-aeb178858cba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42babc44-f62c-4e1d-a396-b42361a17a04", "sighting_of_ref": "indicator--ce2f6d10-7c1f-4dd2-aef9-03d5d4d54df6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4951e3d-9880-4802-b3cf-aa7d465555d0", "sighting_of_ref": "indicator--42329c2c-1c51-4115-997f-3b1181e5a704", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409393a8-7ad2-40d2-bc0a-87db832de5f6", "sighting_of_ref": "indicator--7df09bca-87ea-4726-a6d1-bf8282217593", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692f63a5-e172-492c-a422-b427cea37156", "sighting_of_ref": "indicator--6bc989bd-b6b8-4554-b396-33986d7c5f77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3251859e-e87d-4ef4-ac00-d01b58dfe009", "sighting_of_ref": "indicator--b213defc-dc7d-42ee-946f-8bdd7dee17e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ce873f-9e55-43e9-8104-f03666ea26d8", "sighting_of_ref": "indicator--f8485383-5200-45bc-9dbc-fb81715c4576", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19008829-857a-4976-97a3-6695e6fe737a", "sighting_of_ref": "indicator--5420fe82-051a-469c-aed3-d9f88d80dd2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b79779c-95ee-4d08-b36f-ae67846ba5e9", "sighting_of_ref": "indicator--ab4037e3-6b8b-46ed-ad7b-09122dbabdb8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4b82fd-4c69-43ba-8cc9-4e863d6d0d7b", "sighting_of_ref": "indicator--8593439f-9026-4d1c-bc00-d1472977fbc2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d391b-50ee-440d-a92e-9048ddf8b18f", "sighting_of_ref": "indicator--b46eba39-5244-4553-9fbd-657781dafe7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b9e2e-9d40-479d-b118-d68eb61edafa", "sighting_of_ref": "indicator--b46eba39-5244-4553-9fbd-657781dafe7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95cce11-a872-48ea-92ce-ee1b8b861c0b", "sighting_of_ref": "indicator--6c1a1396-aafc-4240-8b93-42c4a1b5888f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab97b5-f9a6-495e-917b-19d2d50660f6", "sighting_of_ref": "indicator--e52ba87d-8306-47ff-9b40-6b5ec05fbb5f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfabd18-ba82-4c09-8bd7-a7d7f2f69875", "sighting_of_ref": "indicator--e519c3db-ca3a-4378-b3e1-9be1ee18d9d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c208e25-5cf7-448b-9cc1-b7ba7bf5689a", "sighting_of_ref": "indicator--e958009a-83ed-4e04-9c72-d2f4c9d3cabb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc203cc1-be1d-4f29-9756-296f221ce718", "sighting_of_ref": "indicator--b6301457-0bfe-4450-b0e4-1c561e40546b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34a27c9-5baa-4cf7-9a65-09ba99348247", "sighting_of_ref": "indicator--432c7d12-d0fa-426d-9dcd-81ec0cd25174", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6fb06d-fb83-446e-a66e-346f1c577123", "sighting_of_ref": "indicator--0c7df763-eeb9-4e13-8920-740687c9f056", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab34dcf7-d2a9-49fa-b4b2-10f85c58382a", "sighting_of_ref": "indicator--230c0088-5825-4073-9eda-415acc997c6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf7498-51bc-4e2d-9116-0a12381070bb", "sighting_of_ref": "indicator--43740349-8a7c-4855-b1d3-892e383ce980", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee6e41a-5caf-46e7-b537-856ecf07f6c2", "sighting_of_ref": "indicator--461802d5-d3fe-4aca-87c8-08b9ed2298ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7431c4-030c-46d1-a875-300de8a2cc81", "sighting_of_ref": "indicator--c9308a87-974c-4f41-b133-1e0fe0daf31c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f921483-45f0-4c93-a84c-52544c73916b", "sighting_of_ref": "indicator--9df7e54a-b4d9-4b52-a620-1c0e75457d84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6190df-e275-4e49-b5d7-6a607db5b637", "sighting_of_ref": "indicator--78277e72-c789-40d6-b0f0-9e7157123059", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190bd31f-605d-40db-8b5b-5b03eaad7d1d", "sighting_of_ref": "indicator--745f8f0c-565a-40cd-a0e6-1946e7e75495", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e3c21b-54f8-4818-93d4-be4a83f16b16", "sighting_of_ref": "indicator--9a5124d0-0015-4c67-bd0d-0f29d82d4992", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f68d18-aaa5-4b75-9e1b-6e26ca4b96a1", "sighting_of_ref": "indicator--384126c7-87d3-4677-b8e3-810060bae1cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0af7f9-9910-49c5-9d51-d50dbd79ad41", "sighting_of_ref": "indicator--384126c7-87d3-4677-b8e3-810060bae1cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5d1ab5-5b37-4ab1-8283-7f3e8ec912e5", "sighting_of_ref": "indicator--0e297c4a-71b3-495a-aa41-24199a13312a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a03521-5515-4970-91ee-22857048abb9", "sighting_of_ref": "indicator--9fd3f9dc-3038-40ff-bdef-3d31739dbceb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6a70f8-ccbe-4859-8ff8-369f555fe725", "sighting_of_ref": "indicator--6f315025-7d30-4405-bf98-1ab1197f1e69", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90caa1ea-99b8-4dcd-af6d-03a512315b01", "sighting_of_ref": "indicator--894e084d-16fb-4b71-bb07-47cbc639d204", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed566ea1-9949-40a0-a5c5-8074722d4fc6", "sighting_of_ref": "indicator--84d35746-30c6-419c-aa86-06686d649880", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b610490-e992-4a7e-938e-a21f71ca648b", "sighting_of_ref": "indicator--7e8d1449-735f-4f53-b184-aaff57397537", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef3951b-9b79-4b49-95fe-0b80c431c90b", "sighting_of_ref": "indicator--d953d25f-02d4-4668-aec9-972517a6d4a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab32ef9-815d-4b98-9224-10468e98d6d0", "sighting_of_ref": "indicator--9859ff85-327d-417e-bd8e-0c4db626c82b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98696335-4155-422a-aa35-7a695c654d76", "sighting_of_ref": "indicator--fd3c92ca-df31-4cab-8857-bd8c6485ab4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01ddef7-cc27-4b7a-8998-413f209b6d56", "sighting_of_ref": "indicator--0297a6fd-6e2b-411e-b558-25f2019b9324", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed018ffc-e70a-4ec6-9e7e-ac2718da29c2", "sighting_of_ref": "indicator--61a55280-ac50-4203-b40e-531930278abe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fe1141-4b09-406c-a0da-4e8a523bdba3", "sighting_of_ref": "indicator--6051b0a8-cbab-450c-8a79-fac85266f4bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b0a2c9-3901-4986-a26a-465cc2eb182d", "sighting_of_ref": "indicator--6aadf3ad-14d0-4d75-a0e3-69aa0b1286a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f86a623-03b7-4aa9-a9f9-bee1c86961b1", "sighting_of_ref": "indicator--6c68c3a3-f472-454d-a3d4-fdc5eef38823", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94d4e93-66c1-4232-9f74-1a7c129826c1", "sighting_of_ref": "indicator--8c845219-b491-4c76-8733-f51e678aaeb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596f31aa-c26f-4e0c-a7c3-bb91a24db56a", "sighting_of_ref": "indicator--c2dcb4c8-32fb-473d-8648-16b5a2a69323", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e154d9-bc41-4ef5-8ef9-9d4fa32e2820", "sighting_of_ref": "indicator--e2c50b63-5120-4d6f-b1c5-21cc8b72fb38", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2f7cb0-5cf1-489f-939b-5cf5aa0ee83d", "sighting_of_ref": "indicator--1e1afa8e-b8e4-4751-9102-57d9febabcf9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1232f9c7-f54f-4eab-b479-09498694db14", "sighting_of_ref": "indicator--bc237b5c-5650-47f8-972e-f710ad1d08be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242927e-d047-4a5a-aeeb-9ff05bf03906", "sighting_of_ref": "indicator--32cfdbed-ab10-4c67-93b6-927f3eecab95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6495831a-09b8-4c2b-b2ca-e823f3cae1e6", "sighting_of_ref": "indicator--a2207bb6-091c-4cde-8d41-422ffdb7252e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d97d91-2e25-410d-a69e-44b1b69e4b66", "sighting_of_ref": "indicator--be782e0f-f11f-4340-82c1-194f9afe7f90", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d262239e-c483-421e-a99d-4c20fb952486", "sighting_of_ref": "indicator--91c61adb-3a0f-4dce-9486-4319d5c306f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1173b9cc-e304-41f8-b19f-35a27938436a", "sighting_of_ref": "indicator--d3574dbc-5139-45e6-b90f-abac63f4f5ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c63d31-8830-470a-a77a-3abd415a4730", "sighting_of_ref": "indicator--d3574dbc-5139-45e6-b90f-abac63f4f5ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3990f5ae-6771-4171-aa0d-407fcae7b1d4", "sighting_of_ref": "indicator--da76ffb7-a68e-4244-b34e-0a530e9f0835", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80f1102-e25f-4d33-974c-54ff13dad7f4", "sighting_of_ref": "indicator--7cac95af-2b89-41da-b25b-e5dca7430a29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b19d87-41f2-406c-bd84-7621be704579", "sighting_of_ref": "indicator--06fcf7b5-ba13-43bb-aabd-b755ee82be13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fda0f9-5f40-4af1-8cdd-818d92f5f5d0", "sighting_of_ref": "indicator--ca151ae6-c38b-432d-bbf6-4c39399c6886", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b5e11f-9eca-4517-9dcf-e69b8d05d247", "sighting_of_ref": "indicator--0cfe5442-7e05-456e-ac5d-ee87adf1b6bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a72752-95d7-450e-b8ab-be0539a66f98", "sighting_of_ref": "indicator--21aea6ae-bfff-486a-a926-fb1c4d64508a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994b44c2-6226-4c4e-b867-301e8b7ed6fa", "sighting_of_ref": "indicator--ace4ca94-0e22-46f2-bd5a-9910f8ed1563", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcbc98a-4461-46f1-8e61-8222f5c300ca", "sighting_of_ref": "indicator--775492aa-2bb3-477a-9888-9005c6948945", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5825f514-8d8f-42f7-a2c3-e1b9d41d33bd", "sighting_of_ref": "indicator--1a3bceae-8b60-4aa3-a494-aae6c84346d9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa30e066-c5d7-4869-8024-b45b9a2f950d", "sighting_of_ref": "indicator--9cd0fc5b-08b0-4cf8-9102-687ab64d5913", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c84e2ec-1302-4e1d-bb36-0cac36226150", "sighting_of_ref": "indicator--2a08d4b6-f5fd-46ac-a2e3-c14718f5a613", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf98e874-5b21-4a14-8f64-5264a7ece445", "sighting_of_ref": "indicator--a4546e62-c43e-464d-966a-47e7facb1353", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8db302-bc98-434b-961a-a76d46c60c86", "sighting_of_ref": "indicator--a4546e62-c43e-464d-966a-47e7facb1353", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc731bd-62f7-4c9b-8d0b-d6d0c0b64c77", "sighting_of_ref": "indicator--4d62c4aa-767e-411f-b135-b60d7d94c304", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a48c703-dabc-4348-9f41-70361c47b51d", "sighting_of_ref": "indicator--4d62c4aa-767e-411f-b135-b60d7d94c304", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2264d78-3062-48d6-8849-49c325269857", "sighting_of_ref": "indicator--01b425a0-9d08-4824-86f0-c7c30aa9011c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3501dfc4-c63b-43e6-8237-9de5d39393b4", "sighting_of_ref": "indicator--01b425a0-9d08-4824-86f0-c7c30aa9011c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6f36b9-86d9-44f6-92f2-6d0391f4f103", "sighting_of_ref": "indicator--01be1159-b75f-4c03-a448-b55bc8a206d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd677ed-4948-4dca-9ea3-0f63490ad018", "sighting_of_ref": "indicator--f58dacab-8c83-4660-bcad-a2b1c08966ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ce4e76-2a67-4d19-84bc-7de7b9eebfd7", "sighting_of_ref": "indicator--50eaa25e-8888-4a00-aab9-2dc502696f3b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1249c-02ca-443d-9c1b-45ebac06bf90", "sighting_of_ref": "indicator--f4433f82-85c6-45c3-90b5-7786c5ad9085", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f9d05-44c8-43b6-9a0d-e09ee9314246", "sighting_of_ref": "indicator--369b0fcc-a4a0-4352-874a-c4f1ab8d5565", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6713c6-3830-4ad7-ad76-ad3f84a3d30b", "sighting_of_ref": "indicator--a500f0fb-d64c-4f66-90db-18afd0b22521", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6d1d3-72e5-4926-9d2a-0538d3f838a0", "sighting_of_ref": "indicator--9919177c-ac64-49d4-a8bd-9750b6d7e2f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62da6b7f-95e1-4bb3-83f0-9b4872618a2c", "sighting_of_ref": "indicator--b6b16e60-dab1-49ca-b819-f03310ba099d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e1022a-99b5-4e4e-9271-fef218a665f7", "sighting_of_ref": "indicator--5925e31a-e55f-4a4e-9501-43123be193ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149cfa64-7f66-4287-bdf3-017d3cc5a502", "sighting_of_ref": "indicator--5925e31a-e55f-4a4e-9501-43123be193ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5930484-96c9-43b7-92b0-a243e4fcff66", "sighting_of_ref": "indicator--30e43fb3-9afe-4fb5-b860-29cd243e04a4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b9bf61-1511-43f3-af96-f5f974fb1e8e", "sighting_of_ref": "indicator--4ec60b21-3293-4fe0-bfd3-5aff93059983", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6201a70-f167-4b3c-b1a3-93464065a48c", "sighting_of_ref": "indicator--d3054b4f-57ec-481d-9a6f-0e62024d21cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0fc93b-b8f6-4caf-841d-37532740eedf", "sighting_of_ref": "indicator--098dacca-ff22-4b91-9960-b3d40ac34e8e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e8d3e0-ed53-4392-9802-5f448513e368", "sighting_of_ref": "indicator--d0f6802a-0249-4265-9b6f-c9902466c9b8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c99476-fab9-4bb1-957e-51bd2896e88b", "sighting_of_ref": "indicator--5e6e969d-9576-450d-88ce-51d8f92a2961", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983a8e20-d14c-45eb-b6d3-45efb557a03c", "sighting_of_ref": "indicator--0a332448-1c17-4c15-a3f3-3e9fe80744e5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ab6c28-ed24-4c6a-83c5-58ab37f38867", "sighting_of_ref": "indicator--0a332448-1c17-4c15-a3f3-3e9fe80744e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28146955-e8f5-46ff-b6ba-509814d71d92", "sighting_of_ref": "indicator--19aa08c0-a4ae-4ad7-9ca3-d9c90f3f03d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf63731-66ec-40a4-91be-a66f0d397e4f", "sighting_of_ref": "indicator--19aa08c0-a4ae-4ad7-9ca3-d9c90f3f03d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01818d85-43d7-4cf4-87f9-f09ef437930b", "sighting_of_ref": "indicator--19aa08c0-a4ae-4ad7-9ca3-d9c90f3f03d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf56a47-dabd-4dc6-a24b-2aff8d9266b5", "sighting_of_ref": "indicator--0828b93a-04a2-456f-9d8c-52a3a134e452", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480011f0-072c-4175-91d7-137595344350", "sighting_of_ref": "indicator--0828b93a-04a2-456f-9d8c-52a3a134e452", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db1aef3-14aa-4df2-aaf3-b9e7affd0e8f", "sighting_of_ref": "indicator--635de8ce-c054-49bb-b32d-9d7e2408a058", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd18d169-c9bb-419d-accb-75a234d63f61", "sighting_of_ref": "indicator--635de8ce-c054-49bb-b32d-9d7e2408a058", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9184f34-1cbd-4acc-bfe9-f2153c0869ca", "sighting_of_ref": "indicator--2e810314-7724-427f-aed3-439d156e1c2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef38f4e4-6a10-42b5-b6a8-c1c975b8d585", "sighting_of_ref": "indicator--2e810314-7724-427f-aed3-439d156e1c2f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a0f70b-f43c-4846-acd4-07ceb3aee257", "sighting_of_ref": "indicator--11d446a8-6afc-45b9-9e3b-ad9e58500ad9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4375960-9568-4c4d-a3db-e81f797b6283", "sighting_of_ref": "indicator--11d446a8-6afc-45b9-9e3b-ad9e58500ad9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44ceae7-adf4-4a2d-a6ed-4a63592fbba6", "sighting_of_ref": "indicator--7f837961-c49f-4fbe-9772-cb55a6eebb5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e20e226-336b-4252-8b50-c3b8faf1b2b1", "sighting_of_ref": "indicator--7f837961-c49f-4fbe-9772-cb55a6eebb5a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc53a89-a144-48b0-ba76-4a5d72703870", "sighting_of_ref": "indicator--d4171685-81db-4947-baf0-89500708fd98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0ec634-8216-46f1-abd0-910974fa31e6", "sighting_of_ref": "indicator--d4171685-81db-4947-baf0-89500708fd98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31316a2d-b374-430d-b028-7d382124d0db", "sighting_of_ref": "indicator--64795ac5-5e1d-4d71-8b7b-fcfd6cac7b78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce648989-73a2-4d15-9864-d9b08f5e8b02", "sighting_of_ref": "indicator--64795ac5-5e1d-4d71-8b7b-fcfd6cac7b78", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10c0034-99c0-46d7-8c29-55899c14bb4c", "sighting_of_ref": "indicator--e0c993d0-9c69-493e-bbce-0ea9dd5365f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d68ad4a-34a0-45e6-a80f-3452fb031ad8", "sighting_of_ref": "indicator--e0c993d0-9c69-493e-bbce-0ea9dd5365f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3442097c-8412-4e86-8617-075d252c60d2", "sighting_of_ref": "indicator--5d5e098c-afb8-428b-895d-7192ac4e1d0d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e70bb5-7741-45dc-8f62-6a6a8fa8e43f", "sighting_of_ref": "indicator--f750765d-08d4-47ff-a66a-b67bf3e30457", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2951b90c-83c4-41af-b5b8-e49e19daf5b5", "sighting_of_ref": "indicator--f750765d-08d4-47ff-a66a-b67bf3e30457", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673333fa-bf27-48ed-9ed6-ffd0b63831ff", "sighting_of_ref": "indicator--d2415824-29db-4a1f-9f73-7bf25c45b148", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fb704a-0e0f-4eed-a0ff-82c17ebbfe95", "sighting_of_ref": "indicator--d2415824-29db-4a1f-9f73-7bf25c45b148", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8007d291-1184-4536-81cf-d8add2a0fa8e", "sighting_of_ref": "indicator--da0a5187-f5e7-4cb6-bdfc-a43fffae7a09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe4878d-8d45-4a68-8919-529003660302", "sighting_of_ref": "indicator--da0a5187-f5e7-4cb6-bdfc-a43fffae7a09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacb2b08-47ab-4bc7-9519-f967e38881a8", "sighting_of_ref": "indicator--436846ca-a380-4a30-9eae-6d86d3a214f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5e6365-38f4-49c0-baf2-19dbb5463d06", "sighting_of_ref": "indicator--6600c14d-68e4-4b4a-aa02-123b0b4cbfb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f459d6ba-4c1c-4e72-ad38-838d184a9659", "sighting_of_ref": "indicator--6600c14d-68e4-4b4a-aa02-123b0b4cbfb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d05dbac-c754-43c2-a5fd-8327ca36a440", "sighting_of_ref": "indicator--6600c14d-68e4-4b4a-aa02-123b0b4cbfb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320eb48d-5cf2-43b5-a4b4-8f2580c688ad", "sighting_of_ref": "indicator--d4159823-8ace-4f1a-aa1a-cc1c3fbf2519", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92b782-1062-42e4-86de-994e3b6a6f0e", "sighting_of_ref": "indicator--d4159823-8ace-4f1a-aa1a-cc1c3fbf2519", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc63b86-0ba1-4070-b2ec-b4f865a80121", "sighting_of_ref": "indicator--d4159823-8ace-4f1a-aa1a-cc1c3fbf2519", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f5a57-2376-4171-b908-4c3f745ed922", "sighting_of_ref": "indicator--27df2ed6-09e5-46ee-8009-a9e629e033d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1b1f99-2e5c-4c44-92d3-fa90783421bd", "sighting_of_ref": "indicator--b3d636a5-d095-44f1-8dd1-d27297bb922f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a5bbdf-70cf-4969-ad1f-6e662a3671d5", "sighting_of_ref": "indicator--e4efa77c-81d0-4b21-aee6-6c9e2414a341", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19365d09-6faa-496e-9e68-f1b47ce7c5b8", "sighting_of_ref": "indicator--e4efa77c-81d0-4b21-aee6-6c9e2414a341", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ba2497-4a47-4d62-813b-a24862807780", "sighting_of_ref": "indicator--0ae52441-1c68-4caa-9920-e7cdfbd3cf24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7b0703-98c7-4ea5-a8ac-2e5c915ba5ee", "sighting_of_ref": "indicator--0ae52441-1c68-4caa-9920-e7cdfbd3cf24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e051699-c30e-4f35-b243-0ebeea54eb3e", "sighting_of_ref": "indicator--d7e95de5-64d0-484f-b1ee-37230225aa4b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68954f1-4e4b-4c81-9ae2-a68f3f6e4b5d", "sighting_of_ref": "indicator--4e7b7619-2086-43be-b635-17bf3098c0b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa099e4b-3233-4028-b59e-c4cb910a0697", "sighting_of_ref": "indicator--c1510d89-d43f-480a-a968-ee88e4238cdf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6603fdac-4055-4e02-81be-376fc4e8acad", "sighting_of_ref": "indicator--c1510d89-d43f-480a-a968-ee88e4238cdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab019a3-3b95-4db6-a2d5-ddfb3e429244", "sighting_of_ref": "indicator--dcf5f346-5579-4b22-8578-62f9b333ca9a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0fb48d-0d54-40c0-aae2-7627f0f972d4", "sighting_of_ref": "indicator--aa6ba7fa-d17f-4aaa-8568-1f9cbea84621", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2ca11e-6548-4f78-baac-cf5aec2705d2", "sighting_of_ref": "indicator--298257c0-2388-4980-8568-0e0d3c28204b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4028d2b1-adb3-4d58-b27f-88e93e65a822", "sighting_of_ref": "indicator--71d80237-9dc2-4c5d-9a08-0b022f7528ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0763052-e675-4cdb-a95f-3bbd2d47375f", "sighting_of_ref": "indicator--05ff8b12-51eb-468d-b1f0-b2f005e18906", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927da9f8-fcb4-472a-a96e-a230ffe52071", "sighting_of_ref": "indicator--0a9db0ae-9e10-49ca-8f09-bfd61f52fe63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081bd75e-902d-42cf-9361-2f78ca32eec6", "sighting_of_ref": "indicator--214a633c-1163-4f08-8745-4e1fe9b45fa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f88a085-71d6-435d-a0d6-2b3454bc4a1d", "sighting_of_ref": "indicator--214a633c-1163-4f08-8745-4e1fe9b45fa5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397a908e-3797-4dd8-b118-f5c10f808b9f", "sighting_of_ref": "indicator--514f305c-47a8-49fa-b290-b3c4d7a2d731", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a87d6d-86aa-46f8-9c56-75860bf3fe16", "sighting_of_ref": "indicator--34605c2a-bf6c-48d4-913f-b2e84ec3d978", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9cf6e-6fd6-41ea-b74f-6d18003250c5", "sighting_of_ref": "indicator--27fffc68-cad3-45c2-ae45-4e4b78ba7bb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bcf24c-eaa8-470d-afb8-02d97bc13c1d", "sighting_of_ref": "indicator--b993cef9-4495-4e56-9c0d-2f2704b6bce1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9590811-5915-4500-8ae5-0c4690e9dc75", "sighting_of_ref": "indicator--c0591fa0-4034-4bba-958c-6d8b1bd486e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5c53bf-c519-4884-bce7-4b58b66ecc5d", "sighting_of_ref": "indicator--aca6ba99-6a6e-455a-bfa4-5e09971750ac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45566e63-fca3-45b2-9d34-516f0185ef71", "sighting_of_ref": "indicator--943ec47e-f851-4a4c-8c47-900466e6180a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a31a540-b74d-4113-ae39-a423820affef", "sighting_of_ref": "indicator--bf93daba-8b42-4761-82a0-f6bc13317393", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9751ae6-6613-4a0c-bfe5-13d05afe68fd", "sighting_of_ref": "indicator--0ece1ab1-b62b-4acb-8438-0f2484ab3da7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ee5b11-9d14-41ff-a150-211be880409e", "sighting_of_ref": "indicator--0ece1ab1-b62b-4acb-8438-0f2484ab3da7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6174762-df62-4e76-9cc9-7c2edcc07ad7", "sighting_of_ref": "indicator--0ece1ab1-b62b-4acb-8438-0f2484ab3da7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9493d11-73e8-45bd-a9f2-6f0a41581876", "sighting_of_ref": "indicator--fa6a4e4f-fd70-4785-b98a-4a8bad98a3ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49bd0a8-3cd1-43e4-8b4a-60b0d40575c1", "sighting_of_ref": "indicator--9027e41a-c287-4ece-bc8f-7868fd2d8052", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eadfd9-2c18-4510-a603-de56f73617dc", "sighting_of_ref": "indicator--2302a2de-8cd7-4b8a-b7b8-ca593c47f723", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7530363d-b5b4-4633-96a2-e8cf9f7f04ff", "sighting_of_ref": "indicator--2302a2de-8cd7-4b8a-b7b8-ca593c47f723", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594fd183-cae2-4efe-8cf8-11e63b9a56ee", "sighting_of_ref": "indicator--2c3ab832-2fad-4a9b-bc2c-4a5e459493e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc6565c-35d0-4b28-99b4-d2ca83de590b", "sighting_of_ref": "indicator--ad5d18c8-dc4b-48fd-932a-5128adf951b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a76336c-7a25-482f-b241-8350e0bd05d5", "sighting_of_ref": "indicator--b5c60178-c673-41cb-8cb5-6280ff031d6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f079bceb-908b-4aaf-a0e2-105ab9dd6f74", "sighting_of_ref": "indicator--b5c60178-c673-41cb-8cb5-6280ff031d6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8267de06-4ca7-4e3b-9462-24fabca64316", "sighting_of_ref": "indicator--90cc6b5e-ab17-4827-8c0c-47b247119159", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a4dd21-022c-4dec-804e-eea7f9728958", "sighting_of_ref": "indicator--90cc6b5e-ab17-4827-8c0c-47b247119159", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1656fdef-81c8-4fe1-b93e-7fa6d2827144", "sighting_of_ref": "indicator--c9e93a6f-cfd3-4d1c-9fbe-48493747ab7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04af4d3a-33f3-402f-8eae-694735a18054", "sighting_of_ref": "indicator--b441eb26-1427-4b91-8ca9-aa2f53005aea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e054e4dd-1d0d-401b-b230-8e82cd6e3f68", "sighting_of_ref": "indicator--b441eb26-1427-4b91-8ca9-aa2f53005aea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4029bd39-0a76-4f30-89ad-b086a45e334f", "sighting_of_ref": "indicator--e133355a-c3de-4898-b76e-5334ee58eb46", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b12d4-2ab5-4986-8e85-bf36d90c2eaf", "sighting_of_ref": "indicator--94e13d98-fd66-4f90-b120-ab6cce7309c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb0b767-c6d1-4421-a257-0119a5845be0", "sighting_of_ref": "indicator--94e13d98-fd66-4f90-b120-ab6cce7309c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d0386e-7b47-4805-a510-03a2b5edc66e", "sighting_of_ref": "indicator--4e013b26-97c2-4fe5-bfe2-0e6bfe05fa03", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95455ec-16eb-48f1-b241-d40318cae32e", "sighting_of_ref": "indicator--f1251dec-7430-471c-879a-e3f40ef316df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4490470-f74d-4d68-8e3e-1bcf64ef9dc4", "sighting_of_ref": "indicator--f1251dec-7430-471c-879a-e3f40ef316df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e9550b-43a2-43e8-a2b8-03352cae3e8d", "sighting_of_ref": "indicator--9b8b5018-8e4a-4f00-9ce2-3d34e062bcff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be02c33a-8b3f-4714-9fdf-1fb7d17854b9", "sighting_of_ref": "indicator--9b8b5018-8e4a-4f00-9ce2-3d34e062bcff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fec28d5-1032-4065-9830-2c7e8ee8693a", "sighting_of_ref": "indicator--9d7eddf8-841e-49ad-8090-a3358050b877", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac74f0d-69b9-44f1-8859-d5911d827ded", "sighting_of_ref": "indicator--9d7eddf8-841e-49ad-8090-a3358050b877", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3b51ea-83fe-417d-a607-f5ab520b6e58", "sighting_of_ref": "indicator--f48feb93-41b9-4f6f-8f06-df192fac200a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7b5b89-e5eb-4617-a68c-437926ae15ba", "sighting_of_ref": "indicator--da2dd30e-f592-4453-8f66-bdefb3cf456d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631aa0b9-51af-41b5-bbb9-b42c8e5e9c8a", "sighting_of_ref": "indicator--5155418b-80df-45dc-aaec-9eb11afc646b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bddaa3-e3d4-43c8-ba98-0a352c58d0b6", "sighting_of_ref": "indicator--5155418b-80df-45dc-aaec-9eb11afc646b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b991c201-adfe-431f-b150-3a6283a5bc72", "sighting_of_ref": "indicator--9f1e29c1-a805-4a5c-a7fb-ed04aca8c09b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b6be81-1b8f-4763-b2ae-a02bf71af50b", "sighting_of_ref": "indicator--9f1e29c1-a805-4a5c-a7fb-ed04aca8c09b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442581e7-2231-49df-9cc0-dd2659f9b58f", "sighting_of_ref": "indicator--325aba75-9c47-4211-ba67-82f5562d4e79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6251e724-363c-4e68-8028-1b43c0b17b7f", "sighting_of_ref": "indicator--325aba75-9c47-4211-ba67-82f5562d4e79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2aeec6-c768-4aa1-8559-d2d01d1423a1", "sighting_of_ref": "indicator--b0b70d01-01bf-47a7-a3c4-5b363e49592a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d1e5ba-a198-4ab0-bfcb-4a72265e0c56", "sighting_of_ref": "indicator--b0b70d01-01bf-47a7-a3c4-5b363e49592a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac847cf-d5fd-41ac-b854-5ffc3421c280", "sighting_of_ref": "indicator--02a211fa-cc03-4e72-a506-4e51b8926af2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12303885-05a3-479f-9d4b-8f7c15ccb648", "sighting_of_ref": "indicator--4e8de071-298a-46f4-9754-a251dc4c1922", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79eebb38-5807-4de8-b210-05d9b6f0c927", "sighting_of_ref": "indicator--4e8de071-298a-46f4-9754-a251dc4c1922", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d105c328-e3a0-4d99-bb1f-270ecca4832b", "sighting_of_ref": "indicator--5d873cdb-191b-48b9-a90a-27fa5125d6e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3bad86-d9fe-45d1-a306-faae163a6cdc", "sighting_of_ref": "indicator--5d873cdb-191b-48b9-a90a-27fa5125d6e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ab72e9-3e15-489d-a419-20e34bc276c3", "sighting_of_ref": "indicator--aabe047c-a226-4740-b83a-ca311ed3c5be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f056ddc4-156a-402e-9186-b5fd4f3e2ee3", "sighting_of_ref": "indicator--aabe047c-a226-4740-b83a-ca311ed3c5be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cf88d3-89d6-48de-a69f-9bfe428b7491", "sighting_of_ref": "indicator--2c5f69d2-025b-4e90-978e-ce2f9e653905", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f834aa-8d96-4930-a5bc-e1701b060dbb", "sighting_of_ref": "indicator--b75269a4-49e6-4dc7-bdac-17ce1c7f810f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08938c0f-a703-442a-9163-7d8fc27f1655", "sighting_of_ref": "indicator--b75269a4-49e6-4dc7-bdac-17ce1c7f810f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7848fc1b-daa8-4f12-8a52-b377c04b118f", "sighting_of_ref": "indicator--47bd1400-e024-4c0c-bae4-732c4829741c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d5dab3-4d17-4d8f-bd84-d25b02bcf5b5", "sighting_of_ref": "indicator--47bd1400-e024-4c0c-bae4-732c4829741c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486c1823-e65b-498d-9566-9421c49590e3", "sighting_of_ref": "indicator--e94b0402-77d4-4b6a-8c71-410214e65590", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb069b02-a3a6-42f9-857a-3b7e5008a5b9", "sighting_of_ref": "indicator--e94b0402-77d4-4b6a-8c71-410214e65590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79e1752-ca95-4317-a5f3-9711b0d1c7ac", "sighting_of_ref": "indicator--783af8e6-66a6-496f-bc10-71cc935bc560", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5c8a31-86c8-49d8-9d09-462ed7b63886", "sighting_of_ref": "indicator--783af8e6-66a6-496f-bc10-71cc935bc560", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedf9080-632f-4537-a35f-c83523347588", "sighting_of_ref": "indicator--d2533a1f-8de5-4f09-8ec8-39de787e283f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dd797d-b902-4fd1-9f6e-cb6969d4614e", "sighting_of_ref": "indicator--89bb4b01-ca40-4ddc-ae8a-be73095afecd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d925d5d-e44f-45d7-8e1d-af08c8e96442", "sighting_of_ref": "indicator--89bb4b01-ca40-4ddc-ae8a-be73095afecd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc7209e-f2fc-4e80-b163-9885f7138ec0", "sighting_of_ref": "indicator--b0bfab7d-f618-4191-ba65-d06bbbd43acf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01988a01-c6c3-4355-95e4-986b7ab19e01", "sighting_of_ref": "indicator--b0bfab7d-f618-4191-ba65-d06bbbd43acf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9281b840-ff4e-4662-a9c2-6e51efffaf71", "sighting_of_ref": "indicator--05e3e994-46f9-4c65-b3c6-d7a5873bc648", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5571de-8b43-437e-9e42-fd3c383795bd", "sighting_of_ref": "indicator--05e3e994-46f9-4c65-b3c6-d7a5873bc648", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c37ab7f-7f86-48c8-8552-3330887fdedf", "sighting_of_ref": "indicator--58936542-9aca-47f2-baaa-864cc0e5cd56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f359d3-4bd2-4d71-819d-aafffef72624", "sighting_of_ref": "indicator--58936542-9aca-47f2-baaa-864cc0e5cd56", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f09a52e-75c5-488b-8f44-3cc6930868ef", "sighting_of_ref": "indicator--da363e50-4b5f-4b51-b97a-04a82332be93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b758e28-52ef-442a-9f72-b2bfda1682ae", "sighting_of_ref": "indicator--da363e50-4b5f-4b51-b97a-04a82332be93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871f812b-0dba-4308-b2be-b47f818e3503", "sighting_of_ref": "indicator--0c6dedc0-364f-4a79-ae60-f416b9a592cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8658e579-86a5-4963-92b3-61a119fc8d00", "sighting_of_ref": "indicator--0c6dedc0-364f-4a79-ae60-f416b9a592cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae6545e-6f71-4539-b061-157767cd5779", "sighting_of_ref": "indicator--32b2b5c1-ba47-4324-a11c-949d48aa5c9a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccc78e0-da01-497a-863f-6066f1496e26", "sighting_of_ref": "indicator--f5579276-1c1e-4c6c-9b6b-8325b598a4a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e24892-59f5-4e6d-8b33-3d726b48de3a", "sighting_of_ref": "indicator--f5579276-1c1e-4c6c-9b6b-8325b598a4a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbe5fac-024d-427d-8028-83292cc36dba", "sighting_of_ref": "indicator--6f250385-96bd-48c5-9f9d-6fa7e1c6ba98", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650f091a-a4a7-4572-b208-d2b937f4c0a9", "sighting_of_ref": "indicator--1ea5c68b-8f02-40b1-8a71-c8e227753ecb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e1b91-de88-4bba-ba6a-cd2d2ecedd9e", "sighting_of_ref": "indicator--1ea5c68b-8f02-40b1-8a71-c8e227753ecb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32e46f7-7cae-40c8-a88b-27195be879c4", "sighting_of_ref": "indicator--047f7a6d-c9c7-4938-ab33-afbc3913213f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e3197-15c0-451a-bc7c-dc05afa0143e", "sighting_of_ref": "indicator--047f7a6d-c9c7-4938-ab33-afbc3913213f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a1b9a3-350d-4be9-95dc-66740e9643d2", "sighting_of_ref": "indicator--bde6e54f-82ff-4494-8ad4-08e55791d6e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706fd5f3-298f-434d-a560-ce23f8e050f0", "sighting_of_ref": "indicator--bde6e54f-82ff-4494-8ad4-08e55791d6e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a553da9d-dbb8-49d0-91b9-e93e9308dbdf", "sighting_of_ref": "indicator--68eac1d6-f35b-4619-b92a-e3b9d2410bc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7471b4-7247-46ac-9727-15c1cbcaed94", "sighting_of_ref": "indicator--68eac1d6-f35b-4619-b92a-e3b9d2410bc1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10567779-842b-47a4-bcc4-db5bf2ee44fc", "sighting_of_ref": "indicator--47c4d5f0-5a5c-46da-8c96-e36b910975c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed25beee-7e04-4bce-9436-539544c13814", "sighting_of_ref": "indicator--ce47fc04-771c-41fb-8a96-abd66e94a578", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613d381a-3bfb-4a93-86e0-d3bf37fca99b", "sighting_of_ref": "indicator--8f6bfbed-a411-4258-892d-80077d905be4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5cf404-4974-4b6e-944c-de608fc88a1e", "sighting_of_ref": "indicator--8f6bfbed-a411-4258-892d-80077d905be4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1026e09-bf05-48ef-842b-716ceb6f8dda", "sighting_of_ref": "indicator--5ba62c6a-2fbc-4498-9a96-834d4b03b52d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5853ead8-cda9-4539-a6ff-134d8d4f3cf0", "sighting_of_ref": "indicator--073f7e89-d340-459e-b834-29a1d37ca785", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bd2c56-c53e-448a-962f-7c5bb1470026", "sighting_of_ref": "indicator--073f7e89-d340-459e-b834-29a1d37ca785", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53396855-d4f3-4986-b4e5-00be1c6f20ee", "sighting_of_ref": "indicator--155b3e2c-efdf-4e5b-86a4-d25b77b240c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a01280-1e48-4ef7-91f2-161ae295d0b2", "sighting_of_ref": "indicator--155b3e2c-efdf-4e5b-86a4-d25b77b240c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902b07c8-291d-424b-b3d9-a3efbdba3dd1", "sighting_of_ref": "indicator--18a8a850-442b-4918-8268-ffa880ef9e3f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f136a933-55f9-486e-8d92-8cafbd2064a9", "sighting_of_ref": "indicator--099d8fbf-b247-4089-baad-fe43a790094f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ee018-38e2-4457-b2ff-df812d2cdf79", "sighting_of_ref": "indicator--905fcfa4-f603-41ad-9fbb-b0820f03b353", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52daff2-7591-4b70-aa84-1174fee78681", "sighting_of_ref": "indicator--76eaefcf-30ea-443d-81e1-29126d4a57d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff974ea-a759-492e-9750-768721ab8079", "sighting_of_ref": "indicator--76eaefcf-30ea-443d-81e1-29126d4a57d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc89fe2e-5840-48ed-b214-76f84e61ae9f", "sighting_of_ref": "indicator--5b0e03f4-fa87-4b5b-a0f8-544bb5fb190e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48d9fe1-5736-432b-9713-291f263a2636", "sighting_of_ref": "indicator--5b0e03f4-fa87-4b5b-a0f8-544bb5fb190e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9018af-efaf-4d89-baff-fedbdf2a14c9", "sighting_of_ref": "indicator--3270b6fa-b3f4-438c-8086-44867c436347", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f46ce2-c040-4033-b543-021e6f5df82f", "sighting_of_ref": "indicator--3270b6fa-b3f4-438c-8086-44867c436347", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea42f89-1574-45a0-b287-731764bb9528", "sighting_of_ref": "indicator--23f72573-b9d7-4c6e-ace2-9ed0f046bad1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419171b5-c629-4685-9d04-ef1058fe5a54", "sighting_of_ref": "indicator--23f72573-b9d7-4c6e-ace2-9ed0f046bad1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8c4453-4d77-4c01-946c-6fcbfbe9e334", "sighting_of_ref": "indicator--6fa3bb0d-c51b-4138-90e9-06ed5c06635c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e572845-cb71-4531-8be9-68997d060a45", "sighting_of_ref": "indicator--6fa3bb0d-c51b-4138-90e9-06ed5c06635c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008a466c-b90d-4067-bb37-5259a2d23c9c", "sighting_of_ref": "indicator--51ebbc38-6cd5-4018-8ade-0b957f11eea1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5441a7-dcd5-47b2-8d7b-a773293632de", "sighting_of_ref": "indicator--51ebbc38-6cd5-4018-8ade-0b957f11eea1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0371ff6-314e-4543-b8ce-10b8d1fee1db", "sighting_of_ref": "indicator--95a3ce84-d7fa-46d1-9734-7af89d08e392", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbddb2a-8ec8-4961-842e-794360051dfa", "sighting_of_ref": "indicator--95a3ce84-d7fa-46d1-9734-7af89d08e392", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a481000-e949-4e68-a47e-b6db1234aa88", "sighting_of_ref": "indicator--8f3e66fa-5039-4e61-a0e5-8194fd4c3107", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a609ace-91f7-4dce-bf39-59ab9c428bde", "sighting_of_ref": "indicator--8f3e66fa-5039-4e61-a0e5-8194fd4c3107", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3839c56-7724-4f6e-8dc3-a7c7f648c1cb", "sighting_of_ref": "indicator--9a36f0bf-2335-411e-8d5d-f6fb7dbf4fb7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131fec38-9de7-4236-93d5-4b770c525d36", "sighting_of_ref": "indicator--9a36f0bf-2335-411e-8d5d-f6fb7dbf4fb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5374ea10-63d1-44b9-87cd-3ce53dd0cea0", "sighting_of_ref": "indicator--d9de77a9-16fa-49ba-b9db-b140d0512264", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b05d39-0e9e-48e3-bd66-aed3ff6cdc73", "sighting_of_ref": "indicator--d9de77a9-16fa-49ba-b9db-b140d0512264", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9501d163-8685-4682-848c-b609c78920fe", "sighting_of_ref": "indicator--7b264074-cb08-4bb0-9584-74cecd9c9731", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2a8cc6-a572-4732-84c9-d75591c8fc9b", "sighting_of_ref": "indicator--7b264074-cb08-4bb0-9584-74cecd9c9731", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58b363e-192f-48e2-815f-49477b3c3a86", "sighting_of_ref": "indicator--62d9d61d-3d20-4efb-a995-5a1b892a0381", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0aca67-a8f6-4142-a39e-916daa46419a", "sighting_of_ref": "indicator--2abfa34e-2477-4973-a685-5431281013bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe798329-9513-458f-a006-470750b4687d", "sighting_of_ref": "indicator--27a34dc3-85af-4586-8673-fc80fda8a8f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a2458c-5cd6-409a-aa2c-170a3e1de3eb", "sighting_of_ref": "indicator--35b5a134-f710-47b5-8441-de6bcff59d93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a5294f-1394-43fc-9a93-07294cfb3d5f", "sighting_of_ref": "indicator--35b5a134-f710-47b5-8441-de6bcff59d93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a568dc13-9653-4a2e-8179-bd557eea0307", "sighting_of_ref": "indicator--08f30c59-8c2b-4b10-979c-3591096f726e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c10b600-2447-40a0-bf74-fea00d7b5077", "sighting_of_ref": "indicator--5cc1ba0b-a3e7-4a92-a334-8b75cc8a3ab0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9db82c8-49cb-47e6-83b8-f387905ba575", "sighting_of_ref": "indicator--ade1c871-5240-46e6-802f-15c080191e69", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42969633-c6cc-40df-b133-bcf963c335a0", "sighting_of_ref": "indicator--7ccb7b98-2e02-435a-ba48-ff14e38468d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150c6cb3-49ea-4e1d-ad88-4acb961ab506", "sighting_of_ref": "indicator--7ccb7b98-2e02-435a-ba48-ff14e38468d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12cd0aa-40c7-4492-b16f-1cde47c26bb8", "sighting_of_ref": "indicator--017bad5f-e0ad-4c27-bac1-f6cb7faf461f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b6323-2848-474b-a033-4b53d57ef55a", "sighting_of_ref": "indicator--017bad5f-e0ad-4c27-bac1-f6cb7faf461f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad1ae37-a174-475f-8e58-b0f8b575f577", "sighting_of_ref": "indicator--2dd7a06c-50d0-4818-b03e-6a2c7ef7afc3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d631cf-68de-4811-aba2-4d77b03549be", "sighting_of_ref": "indicator--2dd7a06c-50d0-4818-b03e-6a2c7ef7afc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58efdd4-966e-4ddf-a77f-2c2ce6084cef", "sighting_of_ref": "indicator--a6563fde-44d5-4994-926a-fe8cdf8e81f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cb35f9-660a-469c-a259-daea7b2c0a99", "sighting_of_ref": "indicator--a6563fde-44d5-4994-926a-fe8cdf8e81f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a1ce64-a5f6-4641-b9bc-eb7df1d948f6", "sighting_of_ref": "indicator--f6275234-f9c2-42b7-a360-da83155dd222", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8aff4d-43dc-41ca-9875-8d91ede2b8a8", "sighting_of_ref": "indicator--c6c5cba5-f2f9-4834-afcb-fc365bca5608", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d344c4-d8d7-47d8-9da0-851f265c216d", "sighting_of_ref": "indicator--b8bc13cf-ce41-46a5-8413-e1e75d1844d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d2b858-9a89-4134-8ae8-e9db46ba9895", "sighting_of_ref": "indicator--b8bc13cf-ce41-46a5-8413-e1e75d1844d1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b43f53-2247-48b2-b4a3-8909c292014d", "sighting_of_ref": "indicator--f0c1dc74-72e7-452c-8927-73920980d73c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000e05cd-2f3b-41cf-87fa-113c6f833c7d", "sighting_of_ref": "indicator--42de61b2-29ef-49b0-bdeb-0f70314d12d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628a7ae8-72ca-4050-b2a3-c8b144880625", "sighting_of_ref": "indicator--42de61b2-29ef-49b0-bdeb-0f70314d12d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8c460a-59db-4217-b4cf-31a540242403", "sighting_of_ref": "indicator--d8c6508d-8ea9-46e8-bf2e-16cf66b0e0d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8ce4db-91d0-4a9e-8bf2-27b121a0b8c2", "sighting_of_ref": "indicator--d8c6508d-8ea9-46e8-bf2e-16cf66b0e0d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70f8808-4176-40a3-a8d5-13850cc57b07", "sighting_of_ref": "indicator--2d801596-1fcd-4f25-b54a-26a6dbf3f52e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464ca6b6-e5f7-404a-aee6-5efa5b5ee242", "sighting_of_ref": "indicator--2d801596-1fcd-4f25-b54a-26a6dbf3f52e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf76b3e-77ff-46f9-9334-c295e5359e02", "sighting_of_ref": "indicator--c7614bc6-1f59-47ef-bc54-e34492a23e56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65e6042-0871-4730-8767-effe04496a8f", "sighting_of_ref": "indicator--1baed89a-3862-479e-860f-d384299b22e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37335775-c292-4b53-9165-13b406d18bf4", "sighting_of_ref": "indicator--1baed89a-3862-479e-860f-d384299b22e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d5430d-e1d0-494e-9658-af2401355a4a", "sighting_of_ref": "indicator--582cfee6-cd20-4bdb-a6e7-a6637959cd20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87404072-0504-4f44-928f-e99b48adcff6", "sighting_of_ref": "indicator--582cfee6-cd20-4bdb-a6e7-a6637959cd20", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d8a275-6c32-4823-80ad-11941a43aa77", "sighting_of_ref": "indicator--bd76e4bd-703b-4734-b4af-e9da77088e2d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdfbdff-45a0-4621-9765-3a9b5ec8511d", "sighting_of_ref": "indicator--04438ce9-9df0-4685-8ab6-4bcd6521af91", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5610e28-7c64-40b6-87d9-97e4b9d028e6", "sighting_of_ref": "indicator--04438ce9-9df0-4685-8ab6-4bcd6521af91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7213c2-09fc-461a-a53d-97befdf11144", "sighting_of_ref": "indicator--138cd88e-a093-4ddf-94dd-3f92599356ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddd78a6-98f9-4362-a62b-7ac88ce22aa9", "sighting_of_ref": "indicator--138cd88e-a093-4ddf-94dd-3f92599356ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f91063e-2da8-4da8-b9f2-0fc6e34282a5", "sighting_of_ref": "indicator--c1925b01-4ebf-4992-9acc-de58c988abfc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b629e46-465f-4e41-bec9-5c2190dd3751", "sighting_of_ref": "indicator--c1925b01-4ebf-4992-9acc-de58c988abfc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afd8923-981e-41a1-b7cc-02d9a1789333", "sighting_of_ref": "indicator--c618b429-89a5-4b14-a60d-64cc6d04b1dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8192796-529f-4921-b9f8-ad6e0d2b2eb1", "sighting_of_ref": "indicator--c618b429-89a5-4b14-a60d-64cc6d04b1dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85423c99-6f3c-4a30-bd1a-f3c8f7e87b69", "sighting_of_ref": "indicator--978751cd-39d5-464f-bdbb-ad9e5c9134d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fe88e2-a328-4c40-95dc-4944eaed8840", "sighting_of_ref": "indicator--a2bf553d-da14-4f61-99ba-2eb52b7ab86c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e6998-ce1e-4225-8f39-f0548e636106", "sighting_of_ref": "indicator--a2bf553d-da14-4f61-99ba-2eb52b7ab86c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b714d0-2bd1-4bf0-99ca-285156a42d39", "sighting_of_ref": "indicator--bc8f12d9-7490-4e04-ac19-564a58ac78e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c9e113-cea6-4e22-a72a-0de534d055fc", "sighting_of_ref": "indicator--bc8f12d9-7490-4e04-ac19-564a58ac78e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331ecc21-3889-45ab-82cd-ded79858e0a5", "sighting_of_ref": "indicator--c1638e25-d611-42ca-acb6-569af09e3673", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d590fd1-b881-489a-8332-ba62e42d55bf", "sighting_of_ref": "indicator--c1638e25-d611-42ca-acb6-569af09e3673", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d2016e-77d2-4a38-818f-5e5c7ae2d9a1", "sighting_of_ref": "indicator--3969b40a-aef9-49a5-a484-a04081c128b1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb740f74-2762-4e38-b587-af091f71fdd4", "sighting_of_ref": "indicator--9eb286a0-a01d-4ac2-b2d5-498993ec1090", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e226acf-ff51-475f-aeee-92d745c76281", "sighting_of_ref": "indicator--9eb286a0-a01d-4ac2-b2d5-498993ec1090", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc2b540-c216-42d1-adda-3feceb4f44d1", "sighting_of_ref": "indicator--41c7058a-0460-4a73-badd-da8f8d228bee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb01564-2eb5-463e-bb6d-a6fc709f3c19", "sighting_of_ref": "indicator--41c7058a-0460-4a73-badd-da8f8d228bee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b3edf9-fd77-48ee-b2c1-5d2e850630e9", "sighting_of_ref": "indicator--890f5755-1ba8-42a7-b857-79fcf2024862", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3820c37c-99f8-4870-878b-4343acefee64", "sighting_of_ref": "indicator--890f5755-1ba8-42a7-b857-79fcf2024862", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f9d56b-22ac-4952-8a05-392946331b36", "sighting_of_ref": "indicator--6c120c1a-d5ca-4558-868b-9f5b87509671", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd8d66b-68e2-4f86-8d3c-5b4514ee4734", "sighting_of_ref": "indicator--6c120c1a-d5ca-4558-868b-9f5b87509671", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb2f468-4e72-4b87-825d-1a4cc986ebc7", "sighting_of_ref": "indicator--42474574-2f97-431a-bb2e-7006e271b1e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fb376d-2945-4a1e-a271-45c5ac370e9e", "sighting_of_ref": "indicator--42474574-2f97-431a-bb2e-7006e271b1e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c28d84-2bc8-4bf1-ad0b-9e018ab4b39f", "sighting_of_ref": "indicator--90298893-1262-4061-92d7-9c16cbc47fe6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a5411a-3934-4e8b-923e-a62f85c2c04f", "sighting_of_ref": "indicator--90298893-1262-4061-92d7-9c16cbc47fe6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1a3f20-736a-4218-ad3a-2ac5e17d8619", "sighting_of_ref": "indicator--aead88ac-74da-49f4-82a7-5f0ee65c6870", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df460887-fa5f-48cd-8cf4-40be3c20257a", "sighting_of_ref": "indicator--aead88ac-74da-49f4-82a7-5f0ee65c6870", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1997e68-77c6-4c4c-bbd8-97323884d58b", "sighting_of_ref": "indicator--ab206948-834e-47e2-95b0-709796d9e577", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beebaa02-b8ed-47bc-9632-e54c654cbd35", "sighting_of_ref": "indicator--aec0146f-e4f0-4918-ba26-7c934c3c45b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a291197-0959-40e0-951d-804710fb4ced", "sighting_of_ref": "indicator--826d58d4-9570-4c3a-b34f-0806cdd9b433", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89acb68-589e-475a-a9e4-90ab082f5fab", "sighting_of_ref": "indicator--826d58d4-9570-4c3a-b34f-0806cdd9b433", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5fc8a3-704b-402d-9cde-29bdba146947", "sighting_of_ref": "indicator--7437fefe-d379-449d-a51d-d33ffcc33246", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a7cb46-508f-4e2e-a681-ec7efb89ff8e", "sighting_of_ref": "indicator--7437fefe-d379-449d-a51d-d33ffcc33246", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1072f56-bc1e-4c23-b6f2-4a0b7c5f1ffd", "sighting_of_ref": "indicator--bd375e5f-2c64-47e2-8c9b-27fe093b8680", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f7748-ccad-4f19-b33e-2781e437bf34", "sighting_of_ref": "indicator--bd375e5f-2c64-47e2-8c9b-27fe093b8680", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e92585-d96c-46b2-b49b-3fcc6e820afd", "sighting_of_ref": "indicator--6728199d-b415-46f8-a81c-33a68e8684d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d195e41a-3f12-4dc7-950c-ef8e960cb430", "sighting_of_ref": "indicator--6728199d-b415-46f8-a81c-33a68e8684d6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5d1ef1-d6b5-40c8-aea3-b0a456fac314", "sighting_of_ref": "indicator--7f1a65fe-2b42-4585-928d-0b438a55ad26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee685f-3936-4f36-a73e-11477d8bc481", "sighting_of_ref": "indicator--7f1a65fe-2b42-4585-928d-0b438a55ad26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0fb663-2099-4448-b4ad-ddbf7fb4904c", "sighting_of_ref": "indicator--cca1e2db-61ce-4388-b27c-7e1b9bec5106", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdf6a27-9f72-4848-9935-ead50f1b5c3b", "sighting_of_ref": "indicator--cca1e2db-61ce-4388-b27c-7e1b9bec5106", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c90c003-2131-4d94-834a-2962f08c52cc", "sighting_of_ref": "indicator--0ff46ebe-0315-4cdc-8784-887ac6d25114", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb8c218-fa2e-419f-a722-00a06573a810", "sighting_of_ref": "indicator--205ec8c6-fc86-4fcd-84ab-61abb63afd67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd07e18-12dc-407e-b25f-544b32356db9", "sighting_of_ref": "indicator--205ec8c6-fc86-4fcd-84ab-61abb63afd67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cb3e51-fc04-4eea-bd9c-a21c9bd9543a", "sighting_of_ref": "indicator--389e9fd8-4b60-4ac7-9613-0167887bd3aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a6ffa-cf16-4db8-a28d-500f15f31cad", "sighting_of_ref": "indicator--389e9fd8-4b60-4ac7-9613-0167887bd3aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79354fc8-1938-45ed-9f75-ba1da8db129a", "sighting_of_ref": "indicator--11cd51ab-50e8-4771-9523-d5c844f0800d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2ea16c-879d-448b-8ed4-7d024a7ab3f2", "sighting_of_ref": "indicator--11cd51ab-50e8-4771-9523-d5c844f0800d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0834658-9413-4be6-95ba-a70b262940f9", "sighting_of_ref": "indicator--f826f622-e8ee-4604-abee-1221e6c9f144", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53f78da-540d-4208-a292-50616949a5e5", "sighting_of_ref": "indicator--f826f622-e8ee-4604-abee-1221e6c9f144", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8ab7a1-c388-4d0c-b904-3869fa5d8a4e", "sighting_of_ref": "indicator--294e997a-6837-43b6-8791-9d180674e91b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07c5113-2eeb-49cd-a30d-1fd3abc3efd6", "sighting_of_ref": "indicator--294e997a-6837-43b6-8791-9d180674e91b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991d0536-2807-4068-a7fc-276da57b8c6b", "sighting_of_ref": "indicator--e711c88c-d7d2-4dc3-8299-7d9b1961ebbf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3db04a-6731-4cfc-903d-e506ac7b51a1", "sighting_of_ref": "indicator--65a99bbe-485a-425b-9089-35a964e4d349", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8f3d85-389c-410d-b263-01448fdd43db", "sighting_of_ref": "indicator--65a99bbe-485a-425b-9089-35a964e4d349", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dc96e5-f161-423e-934a-e5b0f8112093", "sighting_of_ref": "indicator--8ad31b28-345c-4bec-ad03-178a947a901e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bd20b1-316a-4abe-bdde-caf62d63a3f7", "sighting_of_ref": "indicator--2721f986-4c98-4029-9c5a-4b80f9b62d7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e74173-9bdb-4772-9f63-95f1d8ae0317", "sighting_of_ref": "indicator--2721f986-4c98-4029-9c5a-4b80f9b62d7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb8f79-5dcc-40d4-b301-feebe23b6d12", "sighting_of_ref": "indicator--60212526-5d71-4adc-8ef0-5397a23bd3fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee12603-9d04-4ceb-ba31-62c8fe282356", "sighting_of_ref": "indicator--60212526-5d71-4adc-8ef0-5397a23bd3fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665eb0f4-ff3d-4347-840e-65edcbf41c44", "sighting_of_ref": "indicator--47185a14-9766-4929-ac1e-4eea45258818", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15dbd34-116c-4cb3-b894-a28e13e5811d", "sighting_of_ref": "indicator--47185a14-9766-4929-ac1e-4eea45258818", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8a599c-e418-4306-bd68-ba82810b751e", "sighting_of_ref": "indicator--13437e5e-82ee-4502-96a5-ad4ea461497c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448d3659-d767-4917-8826-75e335200241", "sighting_of_ref": "indicator--13437e5e-82ee-4502-96a5-ad4ea461497c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a1ecb5-f812-42f1-aad2-5d749cfa0768", "sighting_of_ref": "indicator--649f4da1-d570-42cd-bea6-3fae96263baf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8deaad-99d6-401a-b3e3-a89e0b37ffd9", "sighting_of_ref": "indicator--649f4da1-d570-42cd-bea6-3fae96263baf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f57c46-08bf-4af7-9911-42c304d28efa", "sighting_of_ref": "indicator--c4ae3346-0f20-4b58-93ed-fffc1f5bf34a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1e2c91-837c-4b85-8f38-c59bbb44d83e", "sighting_of_ref": "indicator--c4ae3346-0f20-4b58-93ed-fffc1f5bf34a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f5859c-912b-412c-8a4d-101455dac28f", "sighting_of_ref": "indicator--cd1261d2-774c-42cf-a1fc-5bf782aafef2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66d94bd-f0f8-4611-98fd-23b651b1751b", "sighting_of_ref": "indicator--cd1261d2-774c-42cf-a1fc-5bf782aafef2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821383de-2362-482a-bbb9-3aab574849ea", "sighting_of_ref": "indicator--78c4bcc5-f132-4347-a4fa-1cf8bcc8899a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7038c8c2-ed64-46fc-a0b5-e8a93a9b2e25", "sighting_of_ref": "indicator--78c4bcc5-f132-4347-a4fa-1cf8bcc8899a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c124fe-ffd0-4a5a-af38-bcc0eb692edc", "sighting_of_ref": "indicator--cd5363bd-1736-4ced-9d99-32be7dbbc19b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253788cb-e44a-43e4-84bb-27b962101780", "sighting_of_ref": "indicator--cd5363bd-1736-4ced-9d99-32be7dbbc19b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1aed37-c371-4ec1-8132-dd3141faea74", "sighting_of_ref": "indicator--5836621a-ffe9-4e06-bd1e-e3bde5d78425", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7ac5a2-e160-41af-a632-a137f09c288f", "sighting_of_ref": "indicator--5836621a-ffe9-4e06-bd1e-e3bde5d78425", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cec422-3e94-480a-b938-13c7852b748f", "sighting_of_ref": "indicator--aae293b6-943c-4246-98d4-19f177d4560d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abec5a6-3aec-4193-875f-9e6a105f0956", "sighting_of_ref": "indicator--aae293b6-943c-4246-98d4-19f177d4560d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f87941-7d0e-418a-8988-643a6a831edc", "sighting_of_ref": "indicator--0b70da78-3667-413b-a8b8-54a536f78e41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630fb5ec-f687-49f6-ba9d-b46dc52a864a", "sighting_of_ref": "indicator--7f9f3211-6d87-4c8a-93e9-05d2d3a5e215", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c80a2e-8ffc-40f9-9216-0bb28da094e7", "sighting_of_ref": "indicator--509fee02-a64e-45e4-a0a1-dd8b5f578ce4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae202428-17c4-43db-b907-037e86836f47", "sighting_of_ref": "indicator--6decd1a4-651c-4d46-a787-0088b083808e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042214e-8cbb-42ce-8007-6190d9fb692d", "sighting_of_ref": "indicator--6decd1a4-651c-4d46-a787-0088b083808e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15fc8e6-e103-40c6-9aeb-71af6193d4fe", "sighting_of_ref": "indicator--117b2c71-50e4-4866-9200-a074686b2238", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b836b31-48ea-499c-a312-48fa13878945", "sighting_of_ref": "indicator--117b2c71-50e4-4866-9200-a074686b2238", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de5c099-c431-4c67-ac0a-249cbacd177d", "sighting_of_ref": "indicator--f10d0a8b-7d84-44f0-852d-7b1e68552604", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2dd4f4-713d-4446-aa59-b3d81661e44e", "sighting_of_ref": "indicator--f10d0a8b-7d84-44f0-852d-7b1e68552604", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb54454b-650e-412a-8615-74ecfce58b7f", "sighting_of_ref": "indicator--4d185a63-b94a-42d8-8211-f1e9646be7be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a32f3e-c033-4870-a058-6e19d6e4c862", "sighting_of_ref": "indicator--32eadfae-9416-47a0-954c-ce786c055d85", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40df716d-be78-4638-b706-b9c4c6a66ccf", "sighting_of_ref": "indicator--32eadfae-9416-47a0-954c-ce786c055d85", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5891b3fb-2f33-4574-9e70-93fc0fa49e0b", "sighting_of_ref": "indicator--603f206a-c619-4ce9-8047-566846e1e53f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765385ab-61a8-4c23-9bdb-e6cb75393533", "sighting_of_ref": "indicator--603f206a-c619-4ce9-8047-566846e1e53f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7033812b-d601-4cf2-9f0c-c2fba3f17b70", "sighting_of_ref": "indicator--ce0ada24-fdf5-43e8-948e-ce56dd396b27", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82319406-f8d7-4a9b-bff1-22ebfb14ec0f", "sighting_of_ref": "indicator--ce0ada24-fdf5-43e8-948e-ce56dd396b27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2377edab-3051-41f6-94a6-772f2589ea1a", "sighting_of_ref": "indicator--e2228a04-3ab8-4145-b711-e7d15527497f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1494ac52-bac6-4912-9f4d-a9e5d5303b47", "sighting_of_ref": "indicator--5c908730-804b-49a2-a1c7-f12d6b1026f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66498579-0915-4419-833d-aeda256318fa", "sighting_of_ref": "indicator--5c908730-804b-49a2-a1c7-f12d6b1026f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9036e1a6-e92e-4fb1-8a3f-6269bc7985a3", "sighting_of_ref": "indicator--b77ae665-155f-48e9-8a27-0519d552bc15", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f585ee47-fec6-41ee-9bcd-af1ce562288d", "sighting_of_ref": "indicator--b77ae665-155f-48e9-8a27-0519d552bc15", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c85b29-4a00-4f68-a87a-33196e2c4a4f", "sighting_of_ref": "indicator--6f1afd65-dadd-47c6-841e-0ac252357032", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb1ec67-4978-41f4-9fce-b3ca78d13d2e", "sighting_of_ref": "indicator--6f1afd65-dadd-47c6-841e-0ac252357032", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5965d498-aec2-4309-ba04-42ffe609c155", "sighting_of_ref": "indicator--f9a5a17f-8df4-4ba4-9111-a230edfe688c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a36683-f21f-4e78-9484-34ad933412db", "sighting_of_ref": "indicator--f9a5a17f-8df4-4ba4-9111-a230edfe688c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d623cca1-843f-4ad6-b609-41f39b039eff", "sighting_of_ref": "indicator--818a30fd-4e5f-4706-9608-166700072443", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6822c71-6213-406b-8219-71350e9acf8a", "sighting_of_ref": "indicator--ba85d6fc-3a38-4515-99a9-67f557095228", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257eb637-3f95-4e32-8245-2152eb064983", "sighting_of_ref": "indicator--ba85d6fc-3a38-4515-99a9-67f557095228", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2c4c4a-b97c-43fb-a7cb-e94fafed9d5a", "sighting_of_ref": "indicator--30a368f7-502b-43cd-b214-8c604969294b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722447b4-80f3-49b6-a776-a4f2dc57e89e", "sighting_of_ref": "indicator--30a368f7-502b-43cd-b214-8c604969294b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324586eb-744f-4324-8702-7dd3e385dd40", "sighting_of_ref": "indicator--9cd515ac-05fd-4c38-8b6d-6a75a5226420", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74661cb-c8ec-40ca-a293-52401f508c1e", "sighting_of_ref": "indicator--f6601ef5-0402-4c5f-a4b3-17608d0ac38c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb388d3-cbf3-42fd-94d9-45dec9aff196", "sighting_of_ref": "indicator--f6601ef5-0402-4c5f-a4b3-17608d0ac38c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289a25f8-e314-41dc-b1e9-70d4a48f9091", "sighting_of_ref": "indicator--bd8b276c-c749-473c-b355-03d1b7c838c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5b0e17-2193-49da-b7d4-3f8c874bab9b", "sighting_of_ref": "indicator--8417ccf5-db0f-42b1-99a0-fa9dfe3f994d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cd7790-af21-4b62-858d-3089045f4478", "sighting_of_ref": "indicator--e31b183b-3380-40b8-99f9-2695c9155f0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f342b518-c64b-4099-9fc3-0fd3b3c91bcf", "sighting_of_ref": "indicator--e31b183b-3380-40b8-99f9-2695c9155f0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893f7a03-6065-4176-b685-e7df53c39907", "sighting_of_ref": "indicator--2d325abc-ffef-4ad1-a7dc-15d6b9496b4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267096f9-f64a-40cf-85ea-badccfda3944", "sighting_of_ref": "indicator--2d325abc-ffef-4ad1-a7dc-15d6b9496b4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85c8b3a-a961-4212-91bf-2c50420cc8cc", "sighting_of_ref": "indicator--ddcd651e-ca2a-418d-994b-32e2260c8277", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5afdb9-41e3-4a24-b6f8-1623a5e14758", "sighting_of_ref": "indicator--ddcd651e-ca2a-418d-994b-32e2260c8277", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c1aa4c-82ac-4ffe-8c12-08af1dfd76a0", "sighting_of_ref": "indicator--bbc51d89-e3d6-4a03-8e3a-aab4f8a5c6c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97856e8a-d510-4b92-bc6e-b615b340b2ef", "sighting_of_ref": "indicator--42e0fba4-0b44-446a-a95a-6f15b250813a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af09eaaa-4bbf-42f3-a086-0221bd3310a1", "sighting_of_ref": "indicator--2c07bd5c-97b3-4f20-a569-c58db8717f6a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5431eafc-bc92-4f24-80a0-511cd34e14d0", "sighting_of_ref": "indicator--2c07bd5c-97b3-4f20-a569-c58db8717f6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e25616-0e87-495f-8a38-c46085dee6fb", "sighting_of_ref": "indicator--f700aae3-fef9-4d36-b1d3-bcfc27c3937e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f09067-1372-46d4-b9ba-39e89684a9d0", "sighting_of_ref": "indicator--f700aae3-fef9-4d36-b1d3-bcfc27c3937e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612e9937-6dc0-4ec3-a343-a63ff0212972", "sighting_of_ref": "indicator--212d79b7-d858-4dc4-9fd0-18c34008f988", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c266295c-b91c-4575-af53-505eab4ce56d", "sighting_of_ref": "indicator--3d9cb014-23f5-4dd6-8756-c044595b4b29", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cebe5cf-8fa5-4501-bb26-7cfc9e22ae70", "sighting_of_ref": "indicator--3d9cb014-23f5-4dd6-8756-c044595b4b29", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c1db2e-de5e-43b1-a5b3-e5bf1e0b29ab", "sighting_of_ref": "indicator--e61f69a3-e86e-4205-8994-6eb5c88aff4f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89222bc3-6a1e-40f2-b162-11278aca1627", "sighting_of_ref": "indicator--4a636cc0-2429-48a6-80dc-a359befe7ae4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee90fbd-4600-413a-ad8c-7066c4779e5e", "sighting_of_ref": "indicator--4a636cc0-2429-48a6-80dc-a359befe7ae4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19756b3e-b055-43b0-98cf-e8b0b1ec1a18", "sighting_of_ref": "indicator--919cb263-940f-48c8-96f0-d1138e093fe4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810cffaf-bc71-4ee8-9940-1bd27f3e3873", "sighting_of_ref": "indicator--919cb263-940f-48c8-96f0-d1138e093fe4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57522381-e714-49bb-9766-3773eccb4778", "sighting_of_ref": "indicator--7d99dd97-15d2-4108-8739-325451585915", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf79616-3f4c-4a02-9868-141dfe2820ca", "sighting_of_ref": "indicator--7d99dd97-15d2-4108-8739-325451585915", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05aa83c0-d92d-45ba-b57d-be0026a0a010", "sighting_of_ref": "indicator--2e721f8a-fa8e-45e5-a408-ff9631563fef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c3233-8db0-4d45-a38f-134c83c30e29", "sighting_of_ref": "indicator--134eb7bb-306c-4c0b-9290-19a046aed23e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4287d3-f809-4d51-a613-b92de9f9fa44", "sighting_of_ref": "indicator--9f82021a-bb83-4585-8cc2-20acd9525768", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5d797e-ddba-4d60-8d24-a158201ba143", "sighting_of_ref": "indicator--9f82021a-bb83-4585-8cc2-20acd9525768", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04252154-d196-4bd5-afd0-bbfb1396bc3e", "sighting_of_ref": "indicator--301928e6-57c7-4253-89cd-a489308168d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be493aa0-db0f-4cb0-8e78-5175d69cf711", "sighting_of_ref": "indicator--301928e6-57c7-4253-89cd-a489308168d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc29479-6064-44ac-b1f4-56840cf586be", "sighting_of_ref": "indicator--0ecc3d69-34cf-4e81-9beb-764b5735b485", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c04f980-a508-46ae-b316-091360ad2eba", "sighting_of_ref": "indicator--0ecc3d69-34cf-4e81-9beb-764b5735b485", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a89f97a-cfb5-4f55-899b-55bf4e710aad", "sighting_of_ref": "indicator--7d252edb-1a4b-47db-87e0-1638ff3d2c99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da83f3b-f5bb-4826-9001-0f370cb2348d", "sighting_of_ref": "indicator--7d252edb-1a4b-47db-87e0-1638ff3d2c99", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487d74f4-c5de-4475-bccc-60180c00d777", "sighting_of_ref": "indicator--8f2b7758-49c6-4f06-bbf0-60c2d497c7a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60df2e3-3e1a-4d99-9802-519287614284", "sighting_of_ref": "indicator--8f2b7758-49c6-4f06-bbf0-60c2d497c7a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d57204d-283d-47cb-960a-3ed0c5f7755d", "sighting_of_ref": "indicator--34324c58-ccfe-44ca-a8f0-d205e44ee475", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc46e7f-7d9f-412d-a392-ccd4c1c96376", "sighting_of_ref": "indicator--34324c58-ccfe-44ca-a8f0-d205e44ee475", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e44dac2-7220-4336-8daa-d656a2d3f86d", "sighting_of_ref": "indicator--e8ba675f-87d3-4a33-80a3-060096985286", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150a3da8-c51b-46b0-a6b7-103f2f099b31", "sighting_of_ref": "indicator--6ad16089-8277-41ac-b898-e89dd68b8c79", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e2d35d-d63c-4c1b-a6da-1b5eae60f857", "sighting_of_ref": "indicator--6ad16089-8277-41ac-b898-e89dd68b8c79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf0269-dafb-406d-b365-bf51bff6df85", "sighting_of_ref": "indicator--c3999dce-89b0-468d-a165-a9370f1b92f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290874c2-f682-4597-bb41-bb8cd0154d0a", "sighting_of_ref": "indicator--c3999dce-89b0-468d-a165-a9370f1b92f6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486ab0bd-7b3d-4716-8fea-4f0fb43b00be", "sighting_of_ref": "indicator--fde45186-a3ca-4ab5-b4f8-604fe6a424a4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf16b9d3-2915-4b76-9407-5d3f80eb1fab", "sighting_of_ref": "indicator--ea9472db-9549-4ec1-91e6-633ff4ad6342", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c25c51-132b-42ff-a380-8b5c3c1f3adf", "sighting_of_ref": "indicator--ea9472db-9549-4ec1-91e6-633ff4ad6342", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3ac1e0-ce4d-4fd7-9fa1-1fdea3a2d943", "sighting_of_ref": "indicator--2012a705-7235-47fc-80e9-8316e463a4d6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d5cbbe-a591-491e-9f98-db47223b3270", "sighting_of_ref": "indicator--c4a593f1-5711-4030-a7f7-4ca9b6c6d406", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4af645-274e-41f4-9b26-3f46c71c9664", "sighting_of_ref": "indicator--c4a593f1-5711-4030-a7f7-4ca9b6c6d406", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e956a236-6100-43fe-b219-1e2406146365", "sighting_of_ref": "indicator--05893611-af33-4a8d-9413-334f7f8dc0a3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c27f9-aa95-4192-9bd4-38ac08db3d5e", "sighting_of_ref": "indicator--c69ce3cd-47f9-406d-b5f1-e0642ca5598e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ca782e-bdd5-4e8d-90b0-f5796efa681f", "sighting_of_ref": "indicator--691183cf-592e-4c81-9f95-fd220528d023", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c16df35-39fe-4ed5-b5dd-48fe61da6098", "sighting_of_ref": "indicator--691183cf-592e-4c81-9f95-fd220528d023", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc36c73-08cb-4957-b32b-5a5e93f4d9e6", "sighting_of_ref": "indicator--8cfb115d-526c-4a03-babf-4e8feffb80ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c69c4e-aba7-46dc-a9bb-46785f7b04ab", "sighting_of_ref": "indicator--8cfb115d-526c-4a03-babf-4e8feffb80ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3131cb6-63ab-4208-8877-fff755024bb3", "sighting_of_ref": "indicator--16b0ab0d-1777-4524-980f-1c3ba9da6b52", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dd7583-d95c-4f13-898b-52a5b5966310", "sighting_of_ref": "indicator--16b0ab0d-1777-4524-980f-1c3ba9da6b52", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12014708-b14e-41ce-9023-d5f1376fc56c", "sighting_of_ref": "indicator--e5ffbdc5-9ecb-4913-a342-2af264db1e7f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd2558c-fbff-4c14-b89d-25eda26751d9", "sighting_of_ref": "indicator--e5ffbdc5-9ecb-4913-a342-2af264db1e7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad60925-697a-4e39-a49d-8da1d0c30c64", "sighting_of_ref": "indicator--ecee94bd-1e8a-4f66-9af6-d5c5bf58f8f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda007ce-f418-4301-b741-55cb8d535d9f", "sighting_of_ref": "indicator--ecee94bd-1e8a-4f66-9af6-d5c5bf58f8f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345aeb6a-abfe-4ee3-b3bd-0af12900ed23", "sighting_of_ref": "indicator--c476389e-ebd1-4011-91fc-fc6acf83ef96", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd73cd2-69f4-44f3-aaba-178dc7aa921d", "sighting_of_ref": "indicator--c476389e-ebd1-4011-91fc-fc6acf83ef96", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace370aa-56f1-4ea5-9cdb-556923c33579", "sighting_of_ref": "indicator--a2ab6689-7a36-4fb4-8c07-64dc185037ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d190ed46-daa8-45bb-9d88-10baa7dcadeb", "sighting_of_ref": "indicator--0197d610-6d77-478c-ad9d-9fc85ef02005", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829d2436-8ff4-434a-a6f8-7af499072e34", "sighting_of_ref": "indicator--0197d610-6d77-478c-ad9d-9fc85ef02005", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331bfd9c-ad10-4f6d-aba0-7d8e66c1b258", "sighting_of_ref": "indicator--1dabc02c-8de5-4d4b-bb8c-1fa4899509a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8acb00-31cd-4029-bbe9-200090630a74", "sighting_of_ref": "indicator--1dabc02c-8de5-4d4b-bb8c-1fa4899509a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defc5dfb-6c94-48e6-8ad8-90c0d9053b5a", "sighting_of_ref": "indicator--8fc4de54-d438-432a-9c80-7fb79d8bfbe9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12442ba2-fe2d-462e-9f7d-4dd9623829cb", "sighting_of_ref": "indicator--8fc4de54-d438-432a-9c80-7fb79d8bfbe9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba67fe9-4272-4856-8cd5-6b02dbcd9608", "sighting_of_ref": "indicator--24283898-89b1-45c4-a507-e067f1a79536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c4dc2-062c-4b4d-852d-e2bee6aae9fe", "sighting_of_ref": "indicator--24283898-89b1-45c4-a507-e067f1a79536", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53ffe37-1b17-4412-8dd9-0d69d647cae0", "sighting_of_ref": "indicator--643163ab-498f-41ef-8a5f-18a3341498a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631f97ea-e60d-49af-9822-885f239e0e1b", "sighting_of_ref": "indicator--643163ab-498f-41ef-8a5f-18a3341498a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f620f8e5-0c5f-487e-89a7-c2e75c3f51e5", "sighting_of_ref": "indicator--207f8a62-23b4-4f72-adc5-e65b862b75ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6069457-d130-492d-96c0-8620c211ee9e", "sighting_of_ref": "indicator--207f8a62-23b4-4f72-adc5-e65b862b75ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06693e5c-4b33-4923-a653-a74ea89111c8", "sighting_of_ref": "indicator--e88d7c29-fcf0-48d7-b611-c8d3c1950f31", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ba52f-188f-497d-8b97-dc66c60a5f11", "sighting_of_ref": "indicator--e88d7c29-fcf0-48d7-b611-c8d3c1950f31", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983ad56e-c167-4d2a-aed4-9920cdd71bdb", "sighting_of_ref": "indicator--af829389-3174-413b-83f6-4409dfc8c435", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819ef028-fcf1-4691-ac26-bae21d77d4db", "sighting_of_ref": "indicator--af829389-3174-413b-83f6-4409dfc8c435", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9739ce-0a47-48cb-b0d8-fdce1360348d", "sighting_of_ref": "indicator--1acfa5be-03ab-44f7-a483-4c6e42a2352b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31592356-0dc8-4013-b4e7-5fe39488cbaf", "sighting_of_ref": "indicator--1acfa5be-03ab-44f7-a483-4c6e42a2352b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776716a2-4c3a-46f8-830c-7f5c0a07c555", "sighting_of_ref": "indicator--1db60dcb-9c41-4673-b886-f81b8fd6a0ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1be6806-9d0b-42a6-8c7c-b8c2c11ea312", "sighting_of_ref": "indicator--1db60dcb-9c41-4673-b886-f81b8fd6a0ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a160b7-1c14-4e4f-ae5d-192d89da56a9", "sighting_of_ref": "indicator--6095413f-e2f3-4ad6-aa2b-34bc6bd366c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c67f15-8dd9-4961-8647-a7643641ddb1", "sighting_of_ref": "indicator--6095413f-e2f3-4ad6-aa2b-34bc6bd366c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06652f93-6c91-4e2b-9d0c-425b41b84b82", "sighting_of_ref": "indicator--e00db9a6-0d3d-4e23-8c54-e514746927c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c65ae2-8278-4f92-98d2-f934c218e5b7", "sighting_of_ref": "indicator--e00db9a6-0d3d-4e23-8c54-e514746927c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a65acf4-db90-405b-ab95-761e0f2c8f0b", "sighting_of_ref": "indicator--dbd0923a-c6f5-4d65-967b-2e122cc8df0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2961b7-60ec-4aff-b019-c5cfa6309225", "sighting_of_ref": "indicator--dbd0923a-c6f5-4d65-967b-2e122cc8df0b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f789b158-2117-4a8e-9922-e2195a3b509e", "sighting_of_ref": "indicator--4db1d1c8-0000-4700-acb9-4d614bc3379f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317582d8-1930-4e28-842d-94019db07681", "sighting_of_ref": "indicator--4db1d1c8-0000-4700-acb9-4d614bc3379f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b922f8-0290-470e-ade7-647318dd9326", "sighting_of_ref": "indicator--7c930959-9236-4826-8a2f-77b414e4e356", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be5ac74-1d44-4340-b7e5-199d2ae451a8", "sighting_of_ref": "indicator--7c930959-9236-4826-8a2f-77b414e4e356", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38100d15-aae8-4d57-93ae-b9a3e2b5f79a", "sighting_of_ref": "indicator--df740303-7b28-468a-9320-7a9de145bf39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0585daa8-7a29-4cf2-ae73-7f03f8c0bcd7", "sighting_of_ref": "indicator--4f057fdc-c74f-420f-a71e-422375993594", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daec011b-35f7-4d87-bd15-37a43505ce6b", "sighting_of_ref": "indicator--4f057fdc-c74f-420f-a71e-422375993594", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6a36b8-79c8-4976-abc9-ce56dc6ff5dd", "sighting_of_ref": "indicator--7b4a745b-d28d-42f6-a813-5ea47e0041be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c873acb3-9d55-4a03-9bcc-f46cf296efc3", "sighting_of_ref": "indicator--7b4a745b-d28d-42f6-a813-5ea47e0041be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89bb452-55d4-4dc6-8fbc-8cf283ed2e8e", "sighting_of_ref": "indicator--62e6533a-b30a-4633-9237-428f1cd2539b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d465b2ef-2ca5-4536-8469-791286224172", "sighting_of_ref": "indicator--62e6533a-b30a-4633-9237-428f1cd2539b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e4b495-5be0-468c-82f2-2978c7ff8421", "sighting_of_ref": "indicator--2f255db7-5e68-484c-934d-8d6ed7457df3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdac6cba-459b-4906-b8be-14af59bd00d0", "sighting_of_ref": "indicator--2f255db7-5e68-484c-934d-8d6ed7457df3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eceabc-6009-46be-918f-14f5a1395938", "sighting_of_ref": "indicator--b9901445-897c-4f6d-b3f3-b8d09136b260", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cc80c6-efa8-4cbe-820d-6a259b7f68f6", "sighting_of_ref": "indicator--b9901445-897c-4f6d-b3f3-b8d09136b260", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5136511b-5ffb-4a05-8e99-963a0b7ee3dd", "sighting_of_ref": "indicator--895d16df-ebe2-4a28-a8ab-614455818481", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3417dd4-eaa8-430f-953b-483ca341deb9", "sighting_of_ref": "indicator--895d16df-ebe2-4a28-a8ab-614455818481", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c91cb63-9d83-421a-ad3a-451ecb2695cf", "sighting_of_ref": "indicator--f372b0e7-9bb0-452e-8b0e-7c8b140b7dbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313bb026-5047-49c7-9219-dedc033e28c1", "sighting_of_ref": "indicator--f372b0e7-9bb0-452e-8b0e-7c8b140b7dbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b4536c-8122-4428-b986-80059934418f", "sighting_of_ref": "indicator--a7f3af06-2241-4fd2-8e7f-2cefa7d25f00", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f1e761-4172-4624-9857-f903ac30435b", "sighting_of_ref": "indicator--a7f3af06-2241-4fd2-8e7f-2cefa7d25f00", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb7d2d7-870e-4d7c-b9e5-1dfda7842b07", "sighting_of_ref": "indicator--82f3ac6c-d867-4687-8634-cbd01e3e8326", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcc77c9-f16c-4ecf-ab18-6367ed110d18", "sighting_of_ref": "indicator--82f3ac6c-d867-4687-8634-cbd01e3e8326", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de776c14-acbb-4afc-a2eb-76b54ed9da6d", "sighting_of_ref": "indicator--75a52b50-2fb8-4e9a-b3f9-6cc1c301cc34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3e036-f72a-45a9-95fe-332c56e791a0", "sighting_of_ref": "indicator--75a52b50-2fb8-4e9a-b3f9-6cc1c301cc34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96034bae-4743-4cb6-b818-7297de649a80", "sighting_of_ref": "indicator--a49fedb8-6d89-4f75-baa3-7f810b1408c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bb51b1-9841-4adb-a9d2-8f152f2351c0", "sighting_of_ref": "indicator--8a85e198-2835-4dc9-b004-c452c8882692", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb2a7a1-8938-4445-a035-4de7c6e626bb", "sighting_of_ref": "indicator--8a85e198-2835-4dc9-b004-c452c8882692", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca657e96-3ceb-498d-855c-b3675f11b0cb", "sighting_of_ref": "indicator--95d498b3-7fd0-45ff-a9c2-a29332b88e16", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7760a8d6-2f80-4975-bb90-79638d88896a", "sighting_of_ref": "indicator--95d498b3-7fd0-45ff-a9c2-a29332b88e16", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db71e4fa-a442-4da7-ab7d-7c4f634e72c2", "sighting_of_ref": "indicator--f34460b1-d04c-409e-976e-021a35907937", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c55f354-db80-45ae-bba3-87a4e26749b1", "sighting_of_ref": "indicator--f34460b1-d04c-409e-976e-021a35907937", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950cff02-3c2e-4de9-8578-4ba29674eeb8", "sighting_of_ref": "indicator--712f9ad8-b63b-43c6-a8ce-24e84454ebda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960fb944-4790-4b1a-ac9f-669516db5eba", "sighting_of_ref": "indicator--7570a5bb-fb02-4748-ae67-a2ef277a6fb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d974a37-25b5-4d27-81fc-5e69f7ed0d2f", "sighting_of_ref": "indicator--ddddc218-586f-4381-a52f-3e7b52a82312", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07d190a-7ba1-46b4-a7a0-18be3b802108", "sighting_of_ref": "indicator--93d347fe-d142-4f19-8b84-bf2aa6185527", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e316faa-7966-4150-ad92-dfd8ab718f08", "sighting_of_ref": "indicator--93d347fe-d142-4f19-8b84-bf2aa6185527", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf2c2c3-7a2e-405a-a0e7-eef988a18ff1", "sighting_of_ref": "indicator--24e49e2b-19b3-4a55-bef7-0dae284fddc5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9be51b4-9f18-4c6e-9f98-ea8579fec5f7", "sighting_of_ref": "indicator--24e49e2b-19b3-4a55-bef7-0dae284fddc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bea257-635c-4074-ae0b-f17eeebee14b", "sighting_of_ref": "indicator--17998862-9dc8-469f-b783-06257744cc39", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533f3206-51fa-4d90-b0d3-75efd40c0e85", "sighting_of_ref": "indicator--17998862-9dc8-469f-b783-06257744cc39", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4853e187-a0ec-46b2-a27a-704aa0ad63b9", "sighting_of_ref": "indicator--ee0e8950-1585-44a3-8591-ded7b9f335f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4967e14-9f7f-4fd9-9c7d-e61c7eacf440", "sighting_of_ref": "indicator--12d954cb-e922-4364-9a8a-3383054a6495", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb98719c-198b-4e70-98b3-bc942eac4382", "sighting_of_ref": "indicator--0e764b12-eb8f-4d2d-a994-915623f95cc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc51c772-e2c6-46d5-8e20-9b98bad99a9d", "sighting_of_ref": "indicator--0e764b12-eb8f-4d2d-a994-915623f95cc1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03018f8-8ca6-4674-8fc8-58b99f397629", "sighting_of_ref": "indicator--e93a64b5-45b3-4a9c-aad3-06acc788c90f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d981f9-fce3-4015-807a-02e48d7dbe3f", "sighting_of_ref": "indicator--e93a64b5-45b3-4a9c-aad3-06acc788c90f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87810fb4-74e7-4336-8a97-b82550103bb6", "sighting_of_ref": "indicator--184a1f82-5d7a-4180-8e47-db8de29bae7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228d9cf3-3053-433b-bf45-b6e6568e4325", "sighting_of_ref": "indicator--70f47618-e48e-4f61-a4ce-21ef5cfe3acd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e279191c-7e75-4e2d-8635-fc1d70b3b347", "sighting_of_ref": "indicator--c0b465bb-fcb8-4d6f-82e4-5a16161689b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec0021e-0a21-4051-88b5-0a75b2fef1d8", "sighting_of_ref": "indicator--c0b465bb-fcb8-4d6f-82e4-5a16161689b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a64803-2b94-4ffc-b55c-d8b41e49cd8e", "sighting_of_ref": "indicator--5e93948c-c661-4a2b-810d-8f8cc2730714", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fca1d2a-3f7c-4c7f-8fd7-ae18d0678686", "sighting_of_ref": "indicator--5e93948c-c661-4a2b-810d-8f8cc2730714", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0394ae-65ff-44af-9de7-336e2b7b5b7d", "sighting_of_ref": "indicator--01abbd21-8c57-444e-bc18-25e2a1ac3192", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e1b044-e2b2-443c-9074-2eb846b0f36b", "sighting_of_ref": "indicator--01abbd21-8c57-444e-bc18-25e2a1ac3192", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d604b43e-cf49-4d02-b680-a57cd62be1e2", "sighting_of_ref": "indicator--2265ef2c-c471-409e-a170-a963ff9883ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0596f8-9ed0-44bf-9461-2284618c5afa", "sighting_of_ref": "indicator--2265ef2c-c471-409e-a170-a963ff9883ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4470919d-4188-43ea-8da6-89a2b4b92707", "sighting_of_ref": "indicator--02d76c09-7bb1-474b-ba03-dd6573d7417b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6174b145-9829-46bf-b6e6-b1f62db5ae40", "sighting_of_ref": "indicator--02d76c09-7bb1-474b-ba03-dd6573d7417b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff007ab-23e0-4354-9089-a47f7e420183", "sighting_of_ref": "indicator--85deb58d-cbf5-48c1-ba90-47c609078afa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a8f79-7d51-4d42-8859-c1288d76582a", "sighting_of_ref": "indicator--85deb58d-cbf5-48c1-ba90-47c609078afa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ef9042-10f4-4a94-86a7-7b559b9386af", "sighting_of_ref": "indicator--375bfb38-126b-4836-91f7-57ed9380423a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76c1814-aa1a-479b-8338-00bfdff25562", "sighting_of_ref": "indicator--ceb5df44-105c-495c-ab77-9a61b938c31f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e833e50a-16d0-4773-a49c-15a4baab97e3", "sighting_of_ref": "indicator--76c488ed-e48d-4b8b-9ec8-b29593d97ada", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b17520e-321a-4494-8207-d97b870356d3", "sighting_of_ref": "indicator--fe3af96f-9370-4131-98b4-f68cecdee2b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a2a285-a2f4-46f8-916a-697599cfba91", "sighting_of_ref": "indicator--fe3af96f-9370-4131-98b4-f68cecdee2b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb096a2-0e74-4415-8377-d4db55fa1c3c", "sighting_of_ref": "indicator--43cbbf84-38b3-420e-803f-5087bc6f77de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e648054-31f1-4a76-8d8e-e198cd345642", "sighting_of_ref": "indicator--43cbbf84-38b3-420e-803f-5087bc6f77de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e231f6-ed73-4f80-8c61-a72a4934f7ec", "sighting_of_ref": "indicator--00eaa00f-d200-4603-af3e-8a04f19ae1a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0481d6d-1576-418a-8cb8-35a49a2a939e", "sighting_of_ref": "indicator--da5ffe2d-1a08-462c-b9d4-d05661ed04c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5db801d-7d30-4c34-b51f-ac1ec4107259", "sighting_of_ref": "indicator--da5ffe2d-1a08-462c-b9d4-d05661ed04c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7613ac-fe46-43b0-819c-5202dd6a5aa1", "sighting_of_ref": "indicator--0fe2c827-aa2e-4149-8bf5-c8c1115f5a44", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273f0c7b-bc5c-45bd-b052-5720d2678b43", "sighting_of_ref": "indicator--33ad9061-6b88-4d60-9a0e-8b98ad7ca8ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d223977-8a3d-4602-b024-46fbab3c6cab", "sighting_of_ref": "indicator--33ad9061-6b88-4d60-9a0e-8b98ad7ca8ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5838869e-c483-422f-9b79-50961497f0b4", "sighting_of_ref": "indicator--8044b6c6-c766-4ef0-bbd3-3d79f96d1179", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03826fcb-729d-4d35-b4db-c10a447c775f", "sighting_of_ref": "indicator--ec030f39-5793-4bf8-8e07-a6c4399cdd3f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d04b65c-deee-4e07-9ddc-09926105b424", "sighting_of_ref": "indicator--ec030f39-5793-4bf8-8e07-a6c4399cdd3f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429965a3-9dea-4cda-a2db-9909773486e0", "sighting_of_ref": "indicator--d637514f-7cd7-4ee5-ac1f-edecf47c878f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adad251e-bbe1-44e7-baeb-253c9797e6af", "sighting_of_ref": "indicator--b4a99f68-badb-42e2-b461-cc6bc52d2921", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7bb671-b0a4-4599-8fac-90a58928c093", "sighting_of_ref": "indicator--b4a99f68-badb-42e2-b461-cc6bc52d2921", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bca4194-7077-48a9-b1c5-b16db2bc3a12", "sighting_of_ref": "indicator--de68411a-9ff2-40ea-8c72-47c9d916aab2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b7f8d9-4811-4149-ae06-44e426d5e848", "sighting_of_ref": "indicator--de68411a-9ff2-40ea-8c72-47c9d916aab2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408634ef-e274-457e-b866-c0f468f0e177", "sighting_of_ref": "indicator--74a9e235-5dc1-47bc-8749-7c374e13e689", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ce82ea-2bbc-44e3-9145-4e613de7378a", "sighting_of_ref": "indicator--74a9e235-5dc1-47bc-8749-7c374e13e689", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c0cdd-2675-4c04-b839-541a6194bf67", "sighting_of_ref": "indicator--f6d17047-e8a1-46f7-9c21-24ff8b594cfb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed0dcb1-f065-44cd-8f94-788cff1842c8", "sighting_of_ref": "indicator--f6d17047-e8a1-46f7-9c21-24ff8b594cfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e42f8f7-b956-40c4-9965-4890f62bae3c", "sighting_of_ref": "indicator--805e7f98-6de7-4e25-973c-361512606efd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daa91e6-c41a-4e55-ada3-71ec8608b487", "sighting_of_ref": "indicator--805e7f98-6de7-4e25-973c-361512606efd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4690194a-1cfb-4954-84f5-66bbd4de4d69", "sighting_of_ref": "indicator--4689aaed-2be5-4b8e-85a0-f13b2c4e531f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3577cd48-ee00-4c75-bea1-f92421953994", "sighting_of_ref": "indicator--4689aaed-2be5-4b8e-85a0-f13b2c4e531f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2f6d20-270b-4c2b-8f91-11825622956b", "sighting_of_ref": "indicator--24506d77-e88e-43e2-be86-cdd71287f338", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07d1143-2e82-4feb-b69c-485a4d41551f", "sighting_of_ref": "indicator--67fd7961-c330-41eb-9e8c-8e5fb4c57095", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed29ad34-fa15-4c56-9a10-e10620e34774", "sighting_of_ref": "indicator--9e1560ac-0f7a-416b-b9e0-d2285a1cf0d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d3f508-6327-4266-80dc-10a406be9550", "sighting_of_ref": "indicator--9e1560ac-0f7a-416b-b9e0-d2285a1cf0d8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732406b0-3f28-44fd-8144-c0dcf3b85b6e", "sighting_of_ref": "indicator--434f8891-6962-41e5-a9f9-7036d62dd6c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173330c3-4c18-40b9-8af9-acb572a6a17e", "sighting_of_ref": "indicator--b45a7045-045e-4440-a5e2-7b33309cbe1f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096ec13-02c5-4e09-8e81-ce7d7c8771e7", "sighting_of_ref": "indicator--b45a7045-045e-4440-a5e2-7b33309cbe1f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5e2f77-8431-4c01-a375-110b1e96ad4d", "sighting_of_ref": "indicator--784ca2f4-46f7-4f5f-bfd5-1d1917630fb2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c763410-bff3-44f7-9bf7-53c98586cb9f", "sighting_of_ref": "indicator--784ca2f4-46f7-4f5f-bfd5-1d1917630fb2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd5c34c-3909-4475-b3ea-62b654626c2f", "sighting_of_ref": "indicator--439667fa-6b99-48f5-9415-1e9d9ec66b67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5b03df-8abf-45cf-b020-eea3bbb77cd8", "sighting_of_ref": "indicator--439667fa-6b99-48f5-9415-1e9d9ec66b67", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361e77c7-d034-4a32-93e4-b2dc101a2b59", "sighting_of_ref": "indicator--38a5d8e5-9f32-43a0-abae-69c9f40a1e84", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65512ee2-8d88-4569-863f-ed423b5133b3", "sighting_of_ref": "indicator--38a5d8e5-9f32-43a0-abae-69c9f40a1e84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9041e36d-cebb-41ec-99cd-a82b7bada9b2", "sighting_of_ref": "indicator--ffa23426-41ed-43f7-bc23-3d3f18312573", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee2744-0992-47b4-b995-9d324ecf2765", "sighting_of_ref": "indicator--ffa23426-41ed-43f7-bc23-3d3f18312573", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ec4d09-2eab-4e5f-b25f-dcc56c46d5c6", "sighting_of_ref": "indicator--22991f6c-9e47-448d-bd43-b4f7494801e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265d85ae-dfd3-4295-9253-54dee7a05434", "sighting_of_ref": "indicator--22991f6c-9e47-448d-bd43-b4f7494801e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c2898b-db59-40f0-999a-539c8807b688", "sighting_of_ref": "indicator--3dc86807-c7c5-4c2a-9c2a-64fb75014870", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8d90fd-02d5-4cd6-8a0f-849152327647", "sighting_of_ref": "indicator--fbe69f5d-69ee-44b9-9fb2-a3a5a526c9f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d40993-bb88-4c67-a969-9459d7e430e8", "sighting_of_ref": "indicator--86a5b49b-19f3-40c1-b1ad-b82088090bed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c26caf2-f7f8-4d2f-8601-38350fcd427a", "sighting_of_ref": "indicator--fc02013d-2bf9-4b0f-bd0d-90c4db0fb6f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f675d1be-df95-40e5-8582-98bb6c6b3ccd", "sighting_of_ref": "indicator--c6d5760e-c50b-46eb-9080-6e86c4682408", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96e0079-fd22-4d05-bb9b-eda2749a493a", "sighting_of_ref": "indicator--b1569d30-0f6b-43d1-bc3a-3a75d407255b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc630f-687e-48db-9c21-ec07d0969a01", "sighting_of_ref": "indicator--b1569d30-0f6b-43d1-bc3a-3a75d407255b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f84fe08-f9ae-4ec2-a6e1-42eb7a580e59", "sighting_of_ref": "indicator--136338ec-23ce-4a43-ab6a-a01bcf8a56b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8429998-ddc6-481f-8e25-2aca42b6d1ce", "sighting_of_ref": "indicator--136338ec-23ce-4a43-ab6a-a01bcf8a56b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf156a05-5957-4926-9366-18fa9b423bea", "sighting_of_ref": "indicator--9283a864-d5e8-4c6a-94ab-84604700469b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f897db9-31b0-4d35-92bf-7b28288a1ef7", "sighting_of_ref": "indicator--9283a864-d5e8-4c6a-94ab-84604700469b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c65e85-36ed-49cb-b117-c811e56ecd6d", "sighting_of_ref": "indicator--c3e98aa4-b661-423c-80a6-dfdd6edd1c57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ca96c-dd76-4db5-937f-10c5b9a33287", "sighting_of_ref": "indicator--c3e98aa4-b661-423c-80a6-dfdd6edd1c57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d568166e-8e0d-4d10-8cdb-0156a397817e", "sighting_of_ref": "indicator--17e90c30-5a21-4a1f-9191-c8b4ae4bc82a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73a9f0b-46de-4527-b60e-ad0cac5ba2f6", "sighting_of_ref": "indicator--17e90c30-5a21-4a1f-9191-c8b4ae4bc82a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc849fc-28a4-462e-91f2-17f0948735c7", "sighting_of_ref": "indicator--30b64a30-51a0-476b-92b4-1d8d43cada8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68838d91-358d-411d-831d-42a5b8772fe1", "sighting_of_ref": "indicator--30b64a30-51a0-476b-92b4-1d8d43cada8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ee1b01-3eff-4756-b05a-18540b6629c2", "sighting_of_ref": "indicator--3271431f-cec7-4193-b6fe-ca4e54d58ef3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116d5721-0d06-410c-990c-e2747f32f15e", "sighting_of_ref": "indicator--3271431f-cec7-4193-b6fe-ca4e54d58ef3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d7662d-70b8-426b-8835-bc48239d82d5", "sighting_of_ref": "indicator--209b502b-6f86-41d3-a989-be7a9191dd7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb9ab42-b79b-4084-af02-4aaef2d94379", "sighting_of_ref": "indicator--209b502b-6f86-41d3-a989-be7a9191dd7b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28292887-32b4-4923-86c0-7ff2324e68a2", "sighting_of_ref": "indicator--da52955b-038b-418f-991e-da50b3059662", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcef5b1-fe63-4219-a524-0efd80e43c57", "sighting_of_ref": "indicator--da52955b-038b-418f-991e-da50b3059662", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9475fb97-404c-451e-85e0-c7d2ce1e3067", "sighting_of_ref": "indicator--91a45b08-9a4b-46a6-8d15-187e9433f40b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37811644-4d8c-428f-b107-dfbb41c39f90", "sighting_of_ref": "indicator--91a45b08-9a4b-46a6-8d15-187e9433f40b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d9d6ce-3240-4838-bdf0-74cd0a8ecefa", "sighting_of_ref": "indicator--11e1f676-55d5-402c-a592-3f1a24855994", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e5f70-5262-4796-b91f-1104bdf532f4", "sighting_of_ref": "indicator--11e1f676-55d5-402c-a592-3f1a24855994", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcd170e-e194-4f18-a9c7-566d05981562", "sighting_of_ref": "indicator--9785f12b-b2c7-49df-9063-972920310f3a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b8c1e6-fa08-4db1-bdef-426405005958", "sighting_of_ref": "indicator--9785f12b-b2c7-49df-9063-972920310f3a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec6e27-efa5-4bc9-bdb2-264db11f493b", "sighting_of_ref": "indicator--e04d70b8-d8d0-4b9d-8657-249419c53557", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4466b3f-a41f-4418-9b30-c11b5cc2adc2", "sighting_of_ref": "indicator--e04d70b8-d8d0-4b9d-8657-249419c53557", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8ee7ee-5641-4cfd-99cd-a7e24ebfb992", "sighting_of_ref": "indicator--bc696bc0-c277-476f-bea0-2ab3cbd02cdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bd9ec5-8542-4c5b-8c2b-24a179f6c004", "sighting_of_ref": "indicator--bc696bc0-c277-476f-bea0-2ab3cbd02cdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee07d19-965a-48f7-b5f2-62ced1e363f4", "sighting_of_ref": "indicator--0023fc7a-3b01-4ca5-8b84-d996a740f462", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250796e6-8a42-4986-8edf-aab56feb3017", "sighting_of_ref": "indicator--0023fc7a-3b01-4ca5-8b84-d996a740f462", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e9c9b3-8316-4b5b-8b9a-71cd500a7dba", "sighting_of_ref": "indicator--633812e7-b9a6-45df-a2d3-1360a4e48f84", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1477b371-0f6b-496c-a851-5166f7135097", "sighting_of_ref": "indicator--633812e7-b9a6-45df-a2d3-1360a4e48f84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb110d3-b704-4405-bf6d-660a4728579b", "sighting_of_ref": "indicator--23b26048-86c8-4dc0-8da7-6c7e64bc9c14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a26f29-7530-42ec-80f2-a1b776c6e705", "sighting_of_ref": "indicator--23b26048-86c8-4dc0-8da7-6c7e64bc9c14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05206fa5-01ed-4fa0-87e6-7967869af5a0", "sighting_of_ref": "indicator--54a52348-e599-49ff-a1f9-08f859a53c4a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd17d67-b157-460f-8f99-a5bcfe5a27d3", "sighting_of_ref": "indicator--54a52348-e599-49ff-a1f9-08f859a53c4a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f228732d-68a7-4a04-ba79-f7a74b93c818", "sighting_of_ref": "indicator--ce079984-1fe5-4010-8250-162f5bf394d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999745f7-bdc1-4834-8f56-9703193f988e", "sighting_of_ref": "indicator--ce079984-1fe5-4010-8250-162f5bf394d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd22a65-d4b6-4b75-8d6f-5c26cdf4c426", "sighting_of_ref": "indicator--b03fcf43-10f5-4aa1-b3b4-a28b5e01b164", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83964fd-642d-43b7-af50-9b5e4c3495f2", "sighting_of_ref": "indicator--b03fcf43-10f5-4aa1-b3b4-a28b5e01b164", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0922180-4621-4f57-86bf-31686ef5f1b7", "sighting_of_ref": "indicator--9b116106-a40d-4649-8d8e-6a1cc0f374d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1c58e-25e6-459a-9bce-cf2aa0e6e482", "sighting_of_ref": "indicator--9b116106-a40d-4649-8d8e-6a1cc0f374d5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d3aae-df06-4853-a19a-a8048a6a9b3b", "sighting_of_ref": "indicator--5e38348c-7fd4-4dcb-90e8-216e5381961b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee079eb1-2292-4e73-9921-e1eecf892f18", "sighting_of_ref": "indicator--2136868f-4c76-43e5-ad3f-fbd621e995d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18c0749-d0d3-439a-b7ca-4e9dba577018", "sighting_of_ref": "indicator--2136868f-4c76-43e5-ad3f-fbd621e995d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dbb375-e715-443f-84ce-79be92c1ff66", "sighting_of_ref": "indicator--d76a88bc-9858-40c6-9589-c32a02f5a950", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997010ee-b08e-423a-a98e-bc3bc0a31b12", "sighting_of_ref": "indicator--d76a88bc-9858-40c6-9589-c32a02f5a950", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b9896c-f008-4bd7-a415-ee58070c1ae0", "sighting_of_ref": "indicator--484ca886-176c-4ada-b894-6d53d646827f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4850fc24-b332-4e12-9641-1c97dd0d465b", "sighting_of_ref": "indicator--70a17e51-d373-49d8-96c8-48f24e4e5451", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b300dbda-fe6a-499d-af3f-5438c76baf98", "sighting_of_ref": "indicator--70a17e51-d373-49d8-96c8-48f24e4e5451", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f219204c-007b-4bb6-a28e-b6dbef14957e", "sighting_of_ref": "indicator--3a066bef-73d3-4c85-a5d4-69afbefa99af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb85feb-cc4d-4cf2-a13b-8b0bb8d25708", "sighting_of_ref": "indicator--a7739022-d895-4a20-a8e1-79c9904fd919", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82955fd1-37ef-4f5f-9f97-52f14615bce4", "sighting_of_ref": "indicator--c77e9e49-48f8-4bf0-912c-3579a484dbd9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5086653a-b880-4412-aa87-dd67040bf820", "sighting_of_ref": "indicator--c77e9e49-48f8-4bf0-912c-3579a484dbd9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbc89d3-7436-4cdc-bb24-9a02efa10cb6", "sighting_of_ref": "indicator--9c8555a2-afd7-409b-bda0-b169699debe7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a146405-6bee-426c-b8f6-1a112e94a6e9", "sighting_of_ref": "indicator--9c8555a2-afd7-409b-bda0-b169699debe7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cc595e-b4c5-4b89-95aa-4cbdc25d6c5c", "sighting_of_ref": "indicator--2ffcfec5-40d6-4b43-9424-5b972945fad1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b8989c-76eb-449b-93a6-66b581706679", "sighting_of_ref": "indicator--2ffcfec5-40d6-4b43-9424-5b972945fad1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f721779e-6c5b-49b6-9756-b93104c0156a", "sighting_of_ref": "indicator--367ec0e0-22c7-4d02-ab5a-59339e6904b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb10713-b509-4434-9d33-7721e881376b", "sighting_of_ref": "indicator--367ec0e0-22c7-4d02-ab5a-59339e6904b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1534bfed-e0f1-4fc6-9953-380fb686e885", "sighting_of_ref": "indicator--aef71059-8e74-416a-bc97-b583427dd959", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f825b80f-ec57-4687-8917-1c41de0f73f2", "sighting_of_ref": "indicator--aef71059-8e74-416a-bc97-b583427dd959", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44cdfc8-1a20-4f79-9d05-4a4d0a0d2904", "sighting_of_ref": "indicator--7437c25b-03de-47df-a801-e697e0500dde", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381e552c-b0c8-4589-9352-a1b5aca9066b", "sighting_of_ref": "indicator--7437c25b-03de-47df-a801-e697e0500dde", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddc38fb-26c9-4681-90f2-b832e7ce9382", "sighting_of_ref": "indicator--418fd926-db21-4d3d-8056-0b7ebd510389", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d78e94-e50f-4acb-a5b0-48bd5483dbe7", "sighting_of_ref": "indicator--0d96c122-093f-4194-9450-2a3d019444f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760a444d-045c-4e7c-8b88-185db2da2783", "sighting_of_ref": "indicator--0d96c122-093f-4194-9450-2a3d019444f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41497659-d301-4e13-9db8-2af2edf7442e", "sighting_of_ref": "indicator--f92bd93d-5b0b-4c3d-abd8-8c198889f301", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87532abd-d713-4484-b4b9-c85ada50993b", "sighting_of_ref": "indicator--f92bd93d-5b0b-4c3d-abd8-8c198889f301", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d822fdaf-8aa2-4345-b446-ed6796a73999", "sighting_of_ref": "indicator--7dd8cf07-9dca-4774-93a9-12a09c49902b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c06ed6b-c16e-4106-81e9-170acd959b52", "sighting_of_ref": "indicator--7dd8cf07-9dca-4774-93a9-12a09c49902b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bb22b3-b309-4556-a572-5b2248d522d0", "sighting_of_ref": "indicator--ab338bbb-bd93-4c60-a376-a33195cd5709", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceea0fa3-001f-4f27-a0ee-4f1881e7cc4f", "sighting_of_ref": "indicator--ab338bbb-bd93-4c60-a376-a33195cd5709", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248b894d-c066-4332-a7fe-c6a349169970", "sighting_of_ref": "indicator--72f6c582-c3a0-4462-ac83-20968ad74168", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6ef29a-c01b-449d-b5ba-9f9072be6d11", "sighting_of_ref": "indicator--72f6c582-c3a0-4462-ac83-20968ad74168", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54caabec-9f75-4252-97dc-63b03fd23678", "sighting_of_ref": "indicator--2510fbc3-8ff4-4b8e-ac9e-1722ef44b5f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2e4063-c164-4a13-b398-26d720f8700d", "sighting_of_ref": "indicator--2510fbc3-8ff4-4b8e-ac9e-1722ef44b5f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b2d55e-b168-41de-a862-884578a657cd", "sighting_of_ref": "indicator--54ecf324-ab46-43fc-909d-c2129fb3c8f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d77d6-88f4-42fd-b51b-8af233cc6eea", "sighting_of_ref": "indicator--54ecf324-ab46-43fc-909d-c2129fb3c8f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ada75e-e8d9-4cc3-97ee-de816214f592", "sighting_of_ref": "indicator--d8af72ba-d8a7-4eae-b593-9b675564f351", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9580021c-ef57-4b77-a4fb-6d827c530ddf", "sighting_of_ref": "indicator--d8af72ba-d8a7-4eae-b593-9b675564f351", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9732853f-925b-4855-8c49-dcc43fedb3d9", "sighting_of_ref": "indicator--236bb2b8-e2a1-418d-973d-bee5707b1105", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2723e8-21f7-46ff-9717-85cc1d33f0f5", "sighting_of_ref": "indicator--de6df0c3-86d3-4fed-bcc1-de02dba17603", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cef75e4-f587-4977-98b1-e9db7e04b641", "sighting_of_ref": "indicator--a7526f3b-2e19-4277-9f11-396b299bab14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3358b6-1ec9-4e0d-a9ce-666165d80358", "sighting_of_ref": "indicator--3c80ba56-7069-4681-bf5c-1d2b448b2efc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4589d043-bc94-400e-8b06-c10244e6d081", "sighting_of_ref": "indicator--3c80ba56-7069-4681-bf5c-1d2b448b2efc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f163e3fc-c644-4eed-be9c-685684dfdf30", "sighting_of_ref": "indicator--ca2ae42d-c2a1-4c05-9cb0-e5dba41b9f24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44f1e55-c680-49b6-a3d2-5f5972295220", "sighting_of_ref": "indicator--45d46df6-5eea-432a-af20-4c002ecd16ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaed67fc-f72a-4cae-8ebc-afd4c8083298", "sighting_of_ref": "indicator--4c510763-1fd4-4921-a5eb-ef373676649c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66fe215-f2d8-4043-9320-352d49edffd2", "sighting_of_ref": "indicator--fa32ded4-44fb-495e-8c46-29b09b8c7194", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020d83b7-6ab2-4888-8853-1c96d74fb2a7", "sighting_of_ref": "indicator--fa32ded4-44fb-495e-8c46-29b09b8c7194", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e37add-bd7c-41f4-9eb1-6cd4afd913dc", "sighting_of_ref": "indicator--629380af-afd8-4142-be01-09fdf761ce9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36959c1-0d4e-42f9-a1b2-eca5466c3817", "sighting_of_ref": "indicator--629380af-afd8-4142-be01-09fdf761ce9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285d49fb-a58c-4ba3-9ed5-29cba0b6d925", "sighting_of_ref": "indicator--e99ba21f-883c-4211-94ba-ed8fef74cb0a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd9cb26-1caf-450b-9dc7-3cb6dc5af94c", "sighting_of_ref": "indicator--e99ba21f-883c-4211-94ba-ed8fef74cb0a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fe84b4-ebb2-4047-97dd-233c88ef3f94", "sighting_of_ref": "indicator--b2b35d0b-15af-4c4c-8420-7be3bd109ef1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba07319-c671-41cb-8e9d-eece4662b3cc", "sighting_of_ref": "indicator--b2b35d0b-15af-4c4c-8420-7be3bd109ef1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2161d86-00ee-4f13-affd-b30cffc0e3e6", "sighting_of_ref": "indicator--b9db1283-ea58-4242-853c-3005e8c5eb3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7704318-0b2f-40a4-aa93-f7e1b8c98a58", "sighting_of_ref": "indicator--b9db1283-ea58-4242-853c-3005e8c5eb3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71c27e4-5590-4c98-87ce-1865959e1695", "sighting_of_ref": "indicator--338e353e-8081-4cc0-8621-5a7e8bdb2d17", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a833e36d-3385-444c-8822-314a7c1d1b1e", "sighting_of_ref": "indicator--338e353e-8081-4cc0-8621-5a7e8bdb2d17", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6832c655-37fc-41da-97d2-6a4e284451e5", "sighting_of_ref": "indicator--c9f1893e-5e30-481d-bd7b-270b39430def", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593e62b9-10e8-48d0-be40-3207bd57e6db", "sighting_of_ref": "indicator--c9f1893e-5e30-481d-bd7b-270b39430def", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed5db9-75a2-4cc6-b624-bccd834e4a79", "sighting_of_ref": "indicator--f446cc46-eab2-4dcf-9b94-2049e78efc23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea91894-1ea3-4fc3-bd5b-c72f8792fd07", "sighting_of_ref": "indicator--b6bdcd43-4eda-4a71-89d7-1d1945cf8caf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ac0947-1cdc-4b29-aac4-d571158e08cf", "sighting_of_ref": "indicator--78f0270e-26d3-4732-8edb-e9c6f89c50c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6a4464-8bbc-4f68-adc9-cf8e277380ba", "sighting_of_ref": "indicator--78f0270e-26d3-4732-8edb-e9c6f89c50c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e87c89-2ec7-444c-9a2b-24b9e8cb9ef6", "sighting_of_ref": "indicator--d7df422f-3bdb-4d59-93bc-c406da702abc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7224cb5-1433-490d-ba38-e523779a9d87", "sighting_of_ref": "indicator--d7df422f-3bdb-4d59-93bc-c406da702abc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3032de7-4b82-4320-93dc-f597a156cd7a", "sighting_of_ref": "indicator--e1173dfb-6950-4634-ab35-3a6a3ff6a12d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc12ede-c3f1-46ad-8d0a-91e2adf103a3", "sighting_of_ref": "indicator--e1173dfb-6950-4634-ab35-3a6a3ff6a12d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a945915-8827-495c-b56e-71c34af1dab0", "sighting_of_ref": "indicator--071808ca-51dd-4a3f-b1ee-ca8fed246999", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05848404-0be2-4313-a2fb-ceccf30f087c", "sighting_of_ref": "indicator--071808ca-51dd-4a3f-b1ee-ca8fed246999", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89f9607-d2fb-4898-9b5d-2cd56a111736", "sighting_of_ref": "indicator--c5fc4f60-5884-45a0-9bf7-017bfefe1379", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1da5ad-63a6-4ad2-9c76-8965e8a6ac5f", "sighting_of_ref": "indicator--cd5e04ce-5aeb-4beb-acaa-538e6cf7c11b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c165ac-a12d-4230-bcbd-895a2d7f6fc7", "sighting_of_ref": "indicator--be4b8056-8960-4f80-8939-f1871e8157bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0770db2-5164-4a66-b734-0049a5d635b4", "sighting_of_ref": "indicator--be4b8056-8960-4f80-8939-f1871e8157bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aee843c-1bc0-43e6-b7d8-7c6f69ef8d29", "sighting_of_ref": "indicator--2731e8b8-e548-4788-9072-93818567e300", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb8a2dd-ed11-468d-b897-c251df8ad927", "sighting_of_ref": "indicator--2731e8b8-e548-4788-9072-93818567e300", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6e5e2b-875a-4562-981f-7fc10b536a37", "sighting_of_ref": "indicator--326f1fa2-f1fc-474d-aa62-e658040fe715", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9def2261-101f-4ef8-9f13-6c3899161dbb", "sighting_of_ref": "indicator--5d8e0803-e8fa-4210-a61e-cb3be99229a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adee709-18dc-415c-834c-8ed1263b5f09", "sighting_of_ref": "indicator--5d8e0803-e8fa-4210-a61e-cb3be99229a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204dfce3-a22d-4f7f-96ac-c316962ba31a", "sighting_of_ref": "indicator--fbfe0d96-58bd-4750-94aa-e7b007c080ef", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d9b06-596f-43e2-982a-f7b60c219adb", "sighting_of_ref": "indicator--fbfe0d96-58bd-4750-94aa-e7b007c080ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456b1a8d-aa03-4999-8d58-97c4cdd600e4", "sighting_of_ref": "indicator--b9c7d7ec-237c-40e0-b29a-98e6cd230693", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1125ac07-fc7a-4805-aac3-723770ac0c62", "sighting_of_ref": "indicator--b9c7d7ec-237c-40e0-b29a-98e6cd230693", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bbd7d5-6e88-427e-a8a3-c4f87b94e3b8", "sighting_of_ref": "indicator--4891cec0-3719-4ee9-be7b-2c1b7430c64e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30c8d6a-ff48-4f76-ad75-ae2a70a6555f", "sighting_of_ref": "indicator--4891cec0-3719-4ee9-be7b-2c1b7430c64e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275613a4-d7a0-46ee-9c03-d656c3af06d6", "sighting_of_ref": "indicator--84f04d3e-af1e-4ade-a6ad-d868fec2d1b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988f3a0e-199d-4552-bd3e-7012ae9eb1f2", "sighting_of_ref": "indicator--84f04d3e-af1e-4ade-a6ad-d868fec2d1b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95161c99-7191-4c4f-acae-f3e502563305", "sighting_of_ref": "indicator--7ccebb35-c7e9-4393-8cfa-a10291b2f3b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca36ef06-bb77-4ef3-9842-a5d906fba40b", "sighting_of_ref": "indicator--57907b6e-90b5-44b2-8a7d-b12352bcc1e0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8b8a17-87a3-4bdd-8ecc-c4570aaad1b8", "sighting_of_ref": "indicator--57907b6e-90b5-44b2-8a7d-b12352bcc1e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203585b6-fe4c-4a11-9844-c953e9d5d265", "sighting_of_ref": "indicator--e8cea602-db4f-436f-b1ec-95c56958252f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50585482-c4e6-439e-bbc2-f7cba86cd91c", "sighting_of_ref": "indicator--319e31b4-e4e9-493e-aa44-901ae953c270", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753b08e1-0107-4e0d-abe6-66612aead782", "sighting_of_ref": "indicator--319e31b4-e4e9-493e-aa44-901ae953c270", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f9a198-63fd-495d-acb4-312addbbb6be", "sighting_of_ref": "indicator--e956a235-638b-4aba-8ac4-8bffe98eb6a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7069a29d-226f-4861-bab1-489c32affcc2", "sighting_of_ref": "indicator--e956a235-638b-4aba-8ac4-8bffe98eb6a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c101a78-5c71-4b48-857a-d6b882d88294", "sighting_of_ref": "indicator--3dd12719-38ef-4432-b401-28a749ed4a95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f07b8b-bba6-4f81-bd43-54a137af9c26", "sighting_of_ref": "indicator--3842ce87-3fb0-4fa1-af50-e75c05322084", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e307d59-43cc-478a-ae8c-4e08e26ea681", "sighting_of_ref": "indicator--cf9827f8-eec8-4f35-9a0a-ad7b11721fa0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c49351-316a-42e3-ba03-4f583dba9222", "sighting_of_ref": "indicator--cf9827f8-eec8-4f35-9a0a-ad7b11721fa0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ea2967-381a-4fa5-9ab2-d70ef73cff0f", "sighting_of_ref": "indicator--791253d7-d6fe-4511-ace2-4dcc28138804", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd289c3-a6a0-4284-addc-447833f80d70", "sighting_of_ref": "indicator--791253d7-d6fe-4511-ace2-4dcc28138804", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9709f5f6-7202-4920-838b-c5364481b12e", "sighting_of_ref": "indicator--1f0c73d6-b9b3-4fc1-b9bb-ac045337401e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab26e6d9-e77e-482d-b55a-9f5beccf5f3d", "sighting_of_ref": "indicator--1a30dd0f-3296-44fc-ba43-f9642131a885", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40887424-ecb3-407f-ad94-ac8c476bf66d", "sighting_of_ref": "indicator--1a30dd0f-3296-44fc-ba43-f9642131a885", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebcfcc7-3c88-4f40-9d27-0ee782b38fc9", "sighting_of_ref": "indicator--5c903bfd-93a6-44d6-8491-80d1d4ab08f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79fb8b0-fdff-4e17-840c-68e91d52f43b", "sighting_of_ref": "indicator--5c903bfd-93a6-44d6-8491-80d1d4ab08f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe67d54-888a-4da5-9ed7-a26f57b49443", "sighting_of_ref": "indicator--786f0970-513d-4dbf-9d8e-94e232b6bb1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f245a02d-b8ef-4fdd-843a-f326ba9168cf", "sighting_of_ref": "indicator--786f0970-513d-4dbf-9d8e-94e232b6bb1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dd8b34-b873-4835-9e4c-b22734825105", "sighting_of_ref": "indicator--e0301ac8-af43-4b9c-8f6f-125e77344fd2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55987c3-f3d7-494a-b9c9-9604b9a4ff7e", "sighting_of_ref": "indicator--e0301ac8-af43-4b9c-8f6f-125e77344fd2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c48888-8d05-41e1-9484-096a077143e7", "sighting_of_ref": "indicator--09e08ed8-d9fb-41b8-ac46-2682f064dbdd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d294401-c8dd-43ad-a14e-6d4ba24adc06", "sighting_of_ref": "indicator--09e08ed8-d9fb-41b8-ac46-2682f064dbdd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3a3c54-0a83-48ea-9f3a-b125d1e71fc1", "sighting_of_ref": "indicator--ccb29efb-fbe2-444b-97d4-01d728d035c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a53a878-d2c1-4c96-87e1-e7b3d1cc50a3", "sighting_of_ref": "indicator--ccb29efb-fbe2-444b-97d4-01d728d035c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30148af4-720d-41c7-a155-44849bd87ec6", "sighting_of_ref": "indicator--9a5ae2e9-143c-4e5d-a9cb-b6a4ddb3771e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f93ad-2f72-4a41-bdba-064088fc8add", "sighting_of_ref": "indicator--67c69977-5f78-41a7-9151-8b7ad7a0c9b5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166a375b-7fe3-4077-a087-23fb9f72ca82", "sighting_of_ref": "indicator--67c69977-5f78-41a7-9151-8b7ad7a0c9b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca24c17a-a90c-4218-9f1e-3a62c1f4f947", "sighting_of_ref": "indicator--e418ffa2-fd55-4198-a53d-b0aac1b43c69", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34012ccc-6acd-414b-a6ea-2917ee3cf896", "sighting_of_ref": "indicator--e418ffa2-fd55-4198-a53d-b0aac1b43c69", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70503b9-2ffd-439f-b15e-19408551e5aa", "sighting_of_ref": "indicator--3c2fe74f-c75a-46fc-822e-fae3325085a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6888d-e320-406b-bec6-21114e99fffa", "sighting_of_ref": "indicator--928254c3-440a-4ea4-bb2e-65b7103a6895", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31690c6-4505-441b-8a42-dc2b28e3fd93", "sighting_of_ref": "indicator--928254c3-440a-4ea4-bb2e-65b7103a6895", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48468958-8a2f-4618-88a5-472ac554f50b", "sighting_of_ref": "indicator--101330f4-a4ec-4e4b-a82d-bbc78eda899e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e581aaf-736e-43b9-b67a-6cad679eee9a", "sighting_of_ref": "indicator--101330f4-a4ec-4e4b-a82d-bbc78eda899e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbb9bba-9a7f-40f4-b4c4-7b4b8acf23a4", "sighting_of_ref": "indicator--39a6546a-f80b-48ac-8ba6-c4ed9806b27c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4485669d-72e5-4ae0-a2d5-4b2e42f61129", "sighting_of_ref": "indicator--39a6546a-f80b-48ac-8ba6-c4ed9806b27c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5471cd82-dfdb-4ffc-9c4b-0ed1a8fc8729", "sighting_of_ref": "indicator--fbef44a3-ea34-4797-a860-8a31a1d3d251", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49401f6c-fca6-498f-b6f3-4940ec3f4dfd", "sighting_of_ref": "indicator--fbef44a3-ea34-4797-a860-8a31a1d3d251", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cb9aac-23b6-47db-8c5d-731f6d1f582b", "sighting_of_ref": "indicator--d02a2334-6b0d-422a-b16c-7d87ab081328", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a9c9ee-6e1b-4fa6-80cd-bd2be709dce5", "sighting_of_ref": "indicator--2b94fec5-2b0e-4af7-a394-34bc24103683", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382ebe93-3a98-4fec-b000-7eaadf906a65", "sighting_of_ref": "indicator--2b94fec5-2b0e-4af7-a394-34bc24103683", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e19624-3531-4a51-a389-b542d1591cfc", "sighting_of_ref": "indicator--78ad6d0a-84a7-4997-bd3d-d307a37ee9f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e43502d-cc41-4a58-8383-5fbd8105cfe2", "sighting_of_ref": "indicator--78ad6d0a-84a7-4997-bd3d-d307a37ee9f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2105fb38-bbc2-4765-bf12-5d9f1f1fdab0", "sighting_of_ref": "indicator--734939bd-92d6-441e-8dd2-06a7e89fbae8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14160e1-201b-4efa-a802-6bd4d1ce5042", "sighting_of_ref": "indicator--c14204d4-3f47-4869-a18d-21234451a6b9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd24f56-d06f-4069-8d5f-cca44971622c", "sighting_of_ref": "indicator--a2da2a85-7acc-42a4-b77f-f5de4d9e3a9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f816a32c-f2a8-4cbb-bac2-0a58cf494788", "sighting_of_ref": "indicator--a2da2a85-7acc-42a4-b77f-f5de4d9e3a9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c01ea63-f120-46c4-8aa7-a2c9e75f5bbb", "sighting_of_ref": "indicator--53469e53-aea1-4f30-bbee-752d97b59ebe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2d19e9-a5ec-4a6d-8090-3ec401bb0b68", "sighting_of_ref": "indicator--2c950951-dab5-4dab-8185-9c73db69bb27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e6ef91-6449-496b-8245-54bb156e4569", "sighting_of_ref": "indicator--34070f94-f98f-47ad-a7b9-e3d0b635b96a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc0c01-b692-4b4c-9f94-d8bb626c68b4", "sighting_of_ref": "indicator--43ffece7-6a90-4626-83b7-c8791cc1ff7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deff4be2-28fd-4a6d-9a68-096d0ad53eeb", "sighting_of_ref": "indicator--9e2e206d-ca93-4b4d-a6d8-dd9ca9bf0f78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86c7bb6-7012-421a-b0bf-45da1aea4d24", "sighting_of_ref": "indicator--6030fb50-476c-445a-a98b-e855ca21e03e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ee1eed-8598-4962-8f68-74d6b274df01", "sighting_of_ref": "indicator--88ccb99c-e509-45bc-b746-6929568ca4f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0696d975-d8da-4442-ba4d-d4fbcbe3e949", "sighting_of_ref": "indicator--88ccb99c-e509-45bc-b746-6929568ca4f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46226bc-37b7-40b7-a173-229a8d77819f", "sighting_of_ref": "indicator--947ffcd8-2494-43fb-8d5f-7c1dc79f9db2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae4d612-964e-455b-adb4-5bdae6ddcbc2", "sighting_of_ref": "indicator--947ffcd8-2494-43fb-8d5f-7c1dc79f9db2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ccfde-9d81-4573-b39a-ca9785b4a4dd", "sighting_of_ref": "indicator--42030595-6451-444f-92bc-b2d1b8a39d40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90833017-cd00-4e61-93f7-ff23ecd3f151", "sighting_of_ref": "indicator--42030595-6451-444f-92bc-b2d1b8a39d40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92326c36-f9ed-4fd8-baea-f73d2994f54d", "sighting_of_ref": "indicator--e17871fd-e34a-4e8b-9ffe-aed537080b41", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c729ff67-fee7-4542-b657-af6a46dfc92a", "sighting_of_ref": "indicator--e17871fd-e34a-4e8b-9ffe-aed537080b41", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a076f-8b18-4bda-8779-e8ab52915662", "sighting_of_ref": "indicator--cb5c3035-79c1-44ae-af5f-c25fdee7cd24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817db331-6bb9-4636-85fb-282d91335305", "sighting_of_ref": "indicator--6b11600a-0b46-43fd-97fe-dc4568651611", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80263a8-c916-4c7e-8bfc-dfb12c4c2cc0", "sighting_of_ref": "indicator--6b11600a-0b46-43fd-97fe-dc4568651611", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fb40e0-0586-4516-a799-a7c33b68e856", "sighting_of_ref": "indicator--7dc02b39-2a04-4876-9d3b-37a4ac735fe9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677a3157-7fb9-44bb-9b06-83bce115b2fd", "sighting_of_ref": "indicator--25aea163-d565-455f-af3f-7e97d70c48f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9016f62-a916-4d96-aaf1-315f6c7cecea", "sighting_of_ref": "indicator--25aea163-d565-455f-af3f-7e97d70c48f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39b76ea-4029-4a07-814c-e38798c7af1f", "sighting_of_ref": "indicator--43933f46-c3cb-4b4c-a12a-6b7c5af579ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f208ab18-eace-45c2-80c4-55c07431cc73", "sighting_of_ref": "indicator--43933f46-c3cb-4b4c-a12a-6b7c5af579ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eebc2d-b110-487a-864b-84d4e9c75221", "sighting_of_ref": "indicator--dfcc103c-17d8-46a0-8992-f6b4d7d2a7e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a397db60-3f13-41b4-9ef9-6c403b9de19d", "sighting_of_ref": "indicator--e61dc89c-18ea-4f46-9f5b-07c47fe183a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf862a4-4ad2-41b2-a5ce-0cc4e5203143", "sighting_of_ref": "indicator--e59aac1c-87c3-473d-8d94-eeb3e01fbbd0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466c61c6-f32d-4414-aa5a-4f9b25cda660", "sighting_of_ref": "indicator--e59aac1c-87c3-473d-8d94-eeb3e01fbbd0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f48b107-424f-4edf-9ed4-e45a6eea93e0", "sighting_of_ref": "indicator--c2efe4c0-5a2e-4ea2-9fc1-639af08cd9c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a7e4a2-8159-4dfd-bc3c-fe804d1f2397", "sighting_of_ref": "indicator--c2efe4c0-5a2e-4ea2-9fc1-639af08cd9c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7c32e0-488d-48ac-9c06-a7e92f7925de", "sighting_of_ref": "indicator--533676dc-bc0c-48d6-b5f2-5384934cb9e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f6e80a-63c7-494f-b4f8-53d336ffe41e", "sighting_of_ref": "indicator--168a6acd-b244-4451-80f8-68555326e85f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f470a56-2dc8-4dd2-a6c1-4f718bcab0ab", "sighting_of_ref": "indicator--168a6acd-b244-4451-80f8-68555326e85f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158d4ff3-13ce-4fa4-be25-61e50c344b56", "sighting_of_ref": "indicator--4881c6c4-f6e4-4b55-a838-3513f8f0fa01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38da251b-585a-4dff-b82c-32d14654e351", "sighting_of_ref": "indicator--b50b13d8-234f-4f11-9712-13a82244d2d3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b123e6-2b41-46d0-bde4-d20819ac0524", "sighting_of_ref": "indicator--b50b13d8-234f-4f11-9712-13a82244d2d3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a95b0c0-2f64-4a7f-9899-f86ceb63d60b", "sighting_of_ref": "indicator--6823691a-bf6a-4ec1-8b7d-1fb5ec71b02a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290312cf-078c-42cd-8737-747dc2fa5ae3", "sighting_of_ref": "indicator--6823691a-bf6a-4ec1-8b7d-1fb5ec71b02a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7e06b2-feaa-4856-bc03-ed7bd992455b", "sighting_of_ref": "indicator--cc205d2d-5899-4529-8a8b-2ee3a55ce350", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998253f2-ee1b-4f44-975a-36e31ee6a88d", "sighting_of_ref": "indicator--cc205d2d-5899-4529-8a8b-2ee3a55ce350", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190dc5a5-f5fd-43ac-8655-7d5f0e0738a5", "sighting_of_ref": "indicator--7bb0f1ca-d251-4591-a9dc-2a72310c3498", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5975c1a7-7070-46a0-b8a1-1816e5bcf6af", "sighting_of_ref": "indicator--7bb0f1ca-d251-4591-a9dc-2a72310c3498", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8a8d0f-1727-4f49-bf68-eae95256031e", "sighting_of_ref": "indicator--e42cda3a-28b7-432e-9d9d-3844e9c7e300", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c62503d-229d-4388-886b-08431a8d79af", "sighting_of_ref": "indicator--68d5fbf3-a8f1-42e4-8fab-1b2875136e0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018d9cf1-eca9-4360-92e0-d35f38a5a1ac", "sighting_of_ref": "indicator--86cd96d2-aca3-4fe1-acf5-b3c41eeaaa14", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b6a03c-d5c5-4604-80e5-61a75952bb6a", "sighting_of_ref": "indicator--86cd96d2-aca3-4fe1-acf5-b3c41eeaaa14", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5255d7f1-ee5c-48e4-80b3-24450a896293", "sighting_of_ref": "indicator--7967e4e8-2ec4-4b72-952e-27b80adabab3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16c41b1-6e27-423f-b615-1c9a8461b49d", "sighting_of_ref": "indicator--7967e4e8-2ec4-4b72-952e-27b80adabab3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a9c634-2c5a-4802-a399-763a1b1f6c99", "sighting_of_ref": "indicator--12c0e060-13ac-4409-b8c2-a8bfe2c1a049", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67169690-8808-4fa4-ac66-f3ca1bb4b6ee", "sighting_of_ref": "indicator--12c0e060-13ac-4409-b8c2-a8bfe2c1a049", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30914ad5-920e-42c7-a141-843e4d112dfb", "sighting_of_ref": "indicator--0ad455d3-7907-43c1-8230-e4fef407f058", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fe5694-2d60-4e37-b00b-cd0ece495080", "sighting_of_ref": "indicator--0ad455d3-7907-43c1-8230-e4fef407f058", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd6cb18-b56a-4193-8aef-604f5fc47296", "sighting_of_ref": "indicator--14726f76-3b0e-4214-81cb-21b686883724", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16e7595-09f9-47c7-b4a4-e60c050520d3", "sighting_of_ref": "indicator--14726f76-3b0e-4214-81cb-21b686883724", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ceb0ec-135e-4473-b4d5-69106d73c4ff", "sighting_of_ref": "indicator--59c35ac9-c0bf-4845-b425-db292fbe0013", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0fc947-7628-457b-8ab2-f20118a0dc9c", "sighting_of_ref": "indicator--aaaf57b4-1114-4124-a48c-2f3f74128046", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f06a220-cb13-47a2-980d-de647e82cd2e", "sighting_of_ref": "indicator--aaaf57b4-1114-4124-a48c-2f3f74128046", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753234db-e56b-4571-8b59-8ed824fabd19", "sighting_of_ref": "indicator--a05e5663-9c00-44ea-a2fc-b1aaff2cd7f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a0255a-f18d-4895-bc59-e3c552dfee15", "sighting_of_ref": "indicator--decd6006-7ac0-4bfa-bf3f-3a4e06880099", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c146c75-40b4-4cbe-bdd1-d3505401e483", "sighting_of_ref": "indicator--decd6006-7ac0-4bfa-bf3f-3a4e06880099", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459d135d-9e46-472b-9b59-39b2f1e30101", "sighting_of_ref": "indicator--bbfa9457-9e72-402c-9e2f-8c59777da81c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220d79d9-0cfc-4832-8a7a-9efc22d956fe", "sighting_of_ref": "indicator--bbfa9457-9e72-402c-9e2f-8c59777da81c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad17c4-285b-407b-b66d-337a44fe16af", "sighting_of_ref": "indicator--5538978c-b409-40e9-ba8a-5533ec89fb6a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68de0bf2-d541-4654-9cb1-4e595bd1b80d", "sighting_of_ref": "indicator--919949b3-bd08-40ff-b838-104486d9c13a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb56a2a2-11f2-4c32-81d3-5c4665af1c0d", "sighting_of_ref": "indicator--919949b3-bd08-40ff-b838-104486d9c13a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3422df9a-52ab-4b29-82e4-62bc8e7bd9fd", "sighting_of_ref": "indicator--21e41fc7-41cf-4aa0-b8ad-98cdea2478c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1a24c2-a4c1-4ef5-948b-ac7bb6e7f581", "sighting_of_ref": "indicator--7280d070-95af-483c-bdfd-01b403a26742", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f745044-79f9-438c-a5b5-14398eb376f0", "sighting_of_ref": "indicator--e1e0267c-56de-487f-b002-16efbb2136a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1096be0-fa7f-421a-b66d-1077e671c255", "sighting_of_ref": "indicator--e1e0267c-56de-487f-b002-16efbb2136a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe2b485-d4a3-443c-8372-625654c56a59", "sighting_of_ref": "indicator--9f2b3a3d-8a22-413b-b22a-b7fe7f648c8e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06f1c04-81f5-4286-b46a-1c549a03d20a", "sighting_of_ref": "indicator--9f2b3a3d-8a22-413b-b22a-b7fe7f648c8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed394a59-8a3a-44fc-941d-cf587b2c2039", "sighting_of_ref": "indicator--015b217b-e5af-4ac4-84fa-c9c8b28bb56c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b2d8b7-8038-4246-abea-f0b1f2cbf5cb", "sighting_of_ref": "indicator--015b217b-e5af-4ac4-84fa-c9c8b28bb56c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df425d5c-07de-4ea0-ae73-234756a9eb4a", "sighting_of_ref": "indicator--7d060e08-a0a8-4f17-b012-fa4f2492161f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e047b91-350c-4f2c-bc28-cd74761080db", "sighting_of_ref": "indicator--0c68d048-4534-42c4-bf0b-3a2714b5fbe0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86806a19-a149-4f31-9f69-0382f3d959c4", "sighting_of_ref": "indicator--0c68d048-4534-42c4-bf0b-3a2714b5fbe0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dbb62e-4ae8-4c9f-99d7-811f7a2dfab4", "sighting_of_ref": "indicator--7bbfbf85-1c9a-44ce-ba3d-8b6960f2fda5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7588df9-9b1e-425a-91dc-ebb5e6bc559f", "sighting_of_ref": "indicator--7bbfbf85-1c9a-44ce-ba3d-8b6960f2fda5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9b0f47-ad08-43de-89f4-5668dcec221b", "sighting_of_ref": "indicator--4d15637d-f71d-4c15-81e7-7839e6b2a1df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb47498-8c8e-40be-8de8-e26f730f6495", "sighting_of_ref": "indicator--4d15637d-f71d-4c15-81e7-7839e6b2a1df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee2d130-a2d6-40ec-a1a2-9d97c8056a74", "sighting_of_ref": "indicator--942b9b4e-061e-445c-97c6-887087afc8b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1545c4-1730-4d95-a1a0-00bfff6345cf", "sighting_of_ref": "indicator--5b15554e-4d34-4fd4-983a-0aaab0e94e66", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98022ac0-4a65-43d7-ae25-015d8878d7db", "sighting_of_ref": "indicator--2fe3b4c1-69b5-41e1-93ee-58058722f1da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da24dd0c-30f6-499e-b152-e5be7678edc9", "sighting_of_ref": "indicator--2fe3b4c1-69b5-41e1-93ee-58058722f1da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae24837f-500d-4c91-aed2-c6e0aff7e0bc", "sighting_of_ref": "indicator--b552e8ab-4c6d-4442-af97-00039d661c30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9435fc94-1ddd-4ca1-82bb-4165aca85fe4", "sighting_of_ref": "indicator--b552e8ab-4c6d-4442-af97-00039d661c30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41333aee-596b-4ff7-85e5-55b1de73a73d", "sighting_of_ref": "indicator--272e3bde-2842-4e7d-b418-438b4128f959", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed69e0a8-cbcd-4a14-859c-2c64446d1a8f", "sighting_of_ref": "indicator--a02f20c5-4b16-4f3d-aa01-ede888fdf131", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60454e6-ebea-471e-ac82-6190a2a8c87c", "sighting_of_ref": "indicator--a02f20c5-4b16-4f3d-aa01-ede888fdf131", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da14087-3f27-456e-86b7-8962ee27f945", "sighting_of_ref": "indicator--412eedf1-4cd5-44d9-8dbc-08b36b268123", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab16dfc-1f17-4472-854e-46a130cbd55e", "sighting_of_ref": "indicator--412eedf1-4cd5-44d9-8dbc-08b36b268123", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a22aac-5ba0-4820-a0f5-1a9a1e84d5c6", "sighting_of_ref": "indicator--658f029d-d040-452d-97c0-81f1f786bb78", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f123d44f-715e-4998-b842-593439d071e1", "sighting_of_ref": "indicator--776b1908-5436-4c0f-971f-1ef307f36ec5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb782fc-5cbb-4fc7-b773-d9ac5a7a8cae", "sighting_of_ref": "indicator--776b1908-5436-4c0f-971f-1ef307f36ec5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93cd65d-0bbd-42ab-ab4f-d977c5e68e97", "sighting_of_ref": "indicator--385b466b-41eb-4237-9410-df8da9b35566", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c57b2d-9a30-48c8-8d3e-d8fed207aeef", "sighting_of_ref": "indicator--385b466b-41eb-4237-9410-df8da9b35566", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9be2c0c-ab1c-42ee-b365-0bbd1756b0ff", "sighting_of_ref": "indicator--ad0e3f1e-7e52-443d-9a82-65a9a7445114", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc282fd-6fd5-47ed-b08c-31cdba2c883f", "sighting_of_ref": "indicator--ad0e3f1e-7e52-443d-9a82-65a9a7445114", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efc951c-67b3-4f37-b540-80a84dce3fd7", "sighting_of_ref": "indicator--b3ed0686-33a0-409d-9c23-8cd916c6e367", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1506d5-e47b-4d1c-9693-c4c410771ade", "sighting_of_ref": "indicator--b3ed0686-33a0-409d-9c23-8cd916c6e367", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca516d3f-1f68-43a8-a39c-82abba5866a6", "sighting_of_ref": "indicator--8ad16f9c-7f42-44ba-bdd0-2d233cd19336", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b830dbaa-cd4d-48c8-91fa-0ac0fc3a78ba", "sighting_of_ref": "indicator--8ad16f9c-7f42-44ba-bdd0-2d233cd19336", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ef3d80-7642-4813-9f6a-ba1d65849a2d", "sighting_of_ref": "indicator--6dc546ca-8c0a-4ed7-a86d-c751d4abb34b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e0265e-cee8-4db2-91cb-67c940f71efe", "sighting_of_ref": "indicator--2ba4d548-16fe-452a-a790-05f89f34d9cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56206813-b4e1-4b83-82bc-511c107eb764", "sighting_of_ref": "indicator--2ba4d548-16fe-452a-a790-05f89f34d9cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0378346-d955-4967-8340-9592fdd19416", "sighting_of_ref": "indicator--ac46d7e5-0bb2-4f10-bff9-ac1f0af383b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfef360-8f81-41f3-b1a0-8f0b9d10fa0f", "sighting_of_ref": "indicator--ac46d7e5-0bb2-4f10-bff9-ac1f0af383b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e0e6a4-8b8e-4814-8881-64ae07c3004e", "sighting_of_ref": "indicator--cb3c1c7b-b272-4994-8c48-d99c24219566", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ae5b90-b291-46c1-bd2a-515bda4b4709", "sighting_of_ref": "indicator--20feff79-f30b-4007-a93d-1b2f57e94297", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a263e8e4-54a8-4c3c-927d-21dd3e977750", "sighting_of_ref": "indicator--17dccdd3-a352-4f0a-865e-1389c03c35fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dc2502-078f-4edf-a47e-c6f89467404f", "sighting_of_ref": "indicator--17dccdd3-a352-4f0a-865e-1389c03c35fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2f7891-5b10-49d5-9b5c-cb8fb1b26eb2", "sighting_of_ref": "indicator--1a3ad9d6-33f0-44fd-930a-97479c48a18e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ceaf3d-e89b-4c26-8bf6-fa06919a7fdd", "sighting_of_ref": "indicator--7153cdf1-2788-457a-b3fb-5aa8671b16e3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7145c10f-7bdc-43e9-9b4b-56940a718ed9", "sighting_of_ref": "indicator--9f2c5cce-f306-4146-80ef-356ce22254dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4568100b-f95c-47dc-b27d-4de53cd16dd3", "sighting_of_ref": "indicator--9f2c5cce-f306-4146-80ef-356ce22254dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e230e54-d484-47e3-9a65-af167a8bf130", "sighting_of_ref": "indicator--3b1cf860-1f16-4d36-b839-23f57b990098", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7f1eb0-ad55-4b95-a42a-c6be303814a9", "sighting_of_ref": "indicator--3b1cf860-1f16-4d36-b839-23f57b990098", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc44b952-2758-416f-9169-cdf729261886", "sighting_of_ref": "indicator--09179c51-1e5e-464e-9531-754faaa50081", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a1c91-5251-43d2-a826-cac348daf404", "sighting_of_ref": "indicator--09179c51-1e5e-464e-9531-754faaa50081", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcf086c-614b-4326-85ca-1db1ba5dc402", "sighting_of_ref": "indicator--dddb7c26-b472-4bf5-979f-423e2fc066f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4859a1b3-966b-4630-b6d8-833edc51a30b", "sighting_of_ref": "indicator--dddb7c26-b472-4bf5-979f-423e2fc066f1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553a1e3b-85ca-4064-b38d-4c6bd4eedd1c", "sighting_of_ref": "indicator--30c6390d-6c97-44eb-a93a-a0a44eb041f5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bde2def-a1d9-4912-bcf2-d376927a9bbc", "sighting_of_ref": "indicator--30c6390d-6c97-44eb-a93a-a0a44eb041f5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5456ef-c05d-4489-8f38-bbaaeee2f6a7", "sighting_of_ref": "indicator--45465020-6c2c-4eb7-be74-1e2ff1127f6f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e6dcff-e112-4f88-a5e2-538a72d70e81", "sighting_of_ref": "indicator--45465020-6c2c-4eb7-be74-1e2ff1127f6f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad031430-ed61-4d65-a2bf-fbb9529ba61e", "sighting_of_ref": "indicator--9faeea9f-f6a1-4d39-9055-2fd11f7c1128", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2306c0f1-0661-461e-b5a9-419d63fce233", "sighting_of_ref": "indicator--9faeea9f-f6a1-4d39-9055-2fd11f7c1128", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dfe5a7-ee3f-4fb1-92d0-2611cafb0a84", "sighting_of_ref": "indicator--9e28d5a1-c126-489e-b685-23abd337d79b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78355b71-4929-4fb3-83c6-6409778b17f6", "sighting_of_ref": "indicator--9e28d5a1-c126-489e-b685-23abd337d79b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa78e28a-90ca-401a-a3d7-6828a588c1b5", "sighting_of_ref": "indicator--0f0184ed-f935-4279-88c2-fd88e9a3cbb4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772dbcd8-513a-40f0-96aa-e75c567c6c66", "sighting_of_ref": "indicator--0f0184ed-f935-4279-88c2-fd88e9a3cbb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce235e7b-c154-467d-b1de-78c71242bc39", "sighting_of_ref": "indicator--b4a5765f-1cbc-400e-b092-5d05c51a1682", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0df7c72-8d40-4ccc-99ed-9749a62a9a90", "sighting_of_ref": "indicator--b4a5765f-1cbc-400e-b092-5d05c51a1682", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5d98f3-77a7-48ff-9c3d-8f24b7a16e0d", "sighting_of_ref": "indicator--ee1ecb0d-b345-4887-9f29-67a06b3d44a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b84ef18-6131-4e1a-8f4e-42492c3563d3", "sighting_of_ref": "indicator--ee1ecb0d-b345-4887-9f29-67a06b3d44a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318a84e7-b74b-4413-bd1e-b0ad94912956", "sighting_of_ref": "indicator--d16db567-f925-4f20-9568-2067a87ba867", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706763b9-88e8-4cd5-99bd-e62f7f7967ea", "sighting_of_ref": "indicator--d16db567-f925-4f20-9568-2067a87ba867", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b503f1f2-5b02-4939-af9d-43e607c08c93", "sighting_of_ref": "indicator--255b0c9e-bd92-4e06-9a07-3fb0f2af8f62", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa18a3-14fa-459f-8dc9-ce3a06fb90a9", "sighting_of_ref": "indicator--255b0c9e-bd92-4e06-9a07-3fb0f2af8f62", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a63a23-813f-40a7-875d-3cf26710d391", "sighting_of_ref": "indicator--fb5db02b-c936-4440-9f1b-614d7030127e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f3a2b-2503-4ed6-ad43-921dc5b70ab3", "sighting_of_ref": "indicator--1aab1832-9900-4e2f-b94b-139fe95cdd20", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544c5f3a-d1b6-4757-8750-ae54cc59e98a", "sighting_of_ref": "indicator--8148b2f9-9e12-4ef7-90d7-bf21c4eb9b3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9183e61-5937-4f68-8d57-4bb2b7026de5", "sighting_of_ref": "indicator--8148b2f9-9e12-4ef7-90d7-bf21c4eb9b3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d4cb5e-a600-4b4b-887a-6a6836f421bd", "sighting_of_ref": "indicator--c1b7b075-c90f-4dfc-9bb8-3f9e8e09e649", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618bbcf4-f9d7-4d2f-8004-da3257dc8546", "sighting_of_ref": "indicator--d2f46f4d-94e0-4617-9559-72a4ce6ec898", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6c03f8-db36-453f-be70-79c737352204", "sighting_of_ref": "indicator--d2f46f4d-94e0-4617-9559-72a4ce6ec898", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96480df9-ff7c-46e7-b99a-dbb11d4d3456", "sighting_of_ref": "indicator--c2ef82c9-0d28-4f3e-8fe4-34ca9c41101a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52b88b5-7dda-43b1-99e5-2f20f541d935", "sighting_of_ref": "indicator--c2ef82c9-0d28-4f3e-8fe4-34ca9c41101a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cde2d84-bdf6-4314-a3ae-32aec0f52a67", "sighting_of_ref": "indicator--f918deec-717d-4510-8347-fd77aefbee93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e828a7-c94f-4767-a1ac-7e74273c0a0f", "sighting_of_ref": "indicator--f918deec-717d-4510-8347-fd77aefbee93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70097602-5ef9-40bd-baa3-6487a4dd8edb", "sighting_of_ref": "indicator--12289303-8a58-4a83-825e-6ab7a02b7450", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902cf859-544e-472c-97a0-10b49f65f073", "sighting_of_ref": "indicator--12289303-8a58-4a83-825e-6ab7a02b7450", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadc67a7-2746-4bfd-9ac0-73ae9126f5ac", "sighting_of_ref": "indicator--a0b570c5-1fac-45d7-b038-59a94e5c7daf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b0888d-1360-4884-895b-70fc321277ba", "sighting_of_ref": "indicator--a0b570c5-1fac-45d7-b038-59a94e5c7daf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a279fe0-137d-4026-b620-cccdb95f4968", "sighting_of_ref": "indicator--4bfb77da-c9c6-4619-b0f7-9824e6a2ab95", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3fc921-bbe1-4742-8549-048781ec39fb", "sighting_of_ref": "indicator--4bfb77da-c9c6-4619-b0f7-9824e6a2ab95", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e93d9ce-a82d-454b-9cca-fa7877101981", "sighting_of_ref": "indicator--51ec2c87-829e-4f5a-99fe-11754a041b86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee492a14-eea3-464e-a491-a84427c81d0f", "sighting_of_ref": "indicator--51ec2c87-829e-4f5a-99fe-11754a041b86", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02df9525-5f93-4f80-a416-7a9ee5dfdf43", "sighting_of_ref": "indicator--803e9cc1-30ea-4898-a649-b355b84e3c4b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a1ae37-45f4-4c19-8e6f-04ad89791f2f", "sighting_of_ref": "indicator--803e9cc1-30ea-4898-a649-b355b84e3c4b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4d1625-ccc6-4e2a-88b1-0ab48095cf95", "sighting_of_ref": "indicator--539d85cc-8a6a-4301-856a-265f335511c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6ff9a-4fdb-4fba-8179-7b3df8de2209", "sighting_of_ref": "indicator--539d85cc-8a6a-4301-856a-265f335511c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9339cca-e940-4d46-9463-8058fa0e0428", "sighting_of_ref": "indicator--9531892b-deb5-4d1d-ab5b-b839b80994a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053e8689-2d02-458b-a2a0-4faa30399342", "sighting_of_ref": "indicator--9531892b-deb5-4d1d-ab5b-b839b80994a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1554c1f-9d1d-4fcf-b6f4-30062f765a7e", "sighting_of_ref": "indicator--896b54ee-f400-46c3-aedc-7d4d38e32d0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcfca03-9f44-4a5d-badd-dc4358ac424d", "sighting_of_ref": "indicator--896b54ee-f400-46c3-aedc-7d4d38e32d0c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17851291-d6a2-42c6-b97b-1a54ae199b76", "sighting_of_ref": "indicator--cda27908-a421-4170-8f1c-5cac46759143", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f229af80-4629-45d4-86a7-8f182a36db0e", "sighting_of_ref": "indicator--cda27908-a421-4170-8f1c-5cac46759143", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8875ffb-dfe5-4d4e-8f72-db6e619cea54", "sighting_of_ref": "indicator--159a7bef-00f6-4e2d-9a12-593319ec2640", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5abd17-cc06-48bb-8410-0b5744312ada", "sighting_of_ref": "indicator--159a7bef-00f6-4e2d-9a12-593319ec2640", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ba126e-5242-4f00-ac60-9bda4f8a267f", "sighting_of_ref": "indicator--7e4d14c7-29c1-43e2-a935-2a156073cc70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207aa05a-2d85-429e-b0fa-c132e1e17a16", "sighting_of_ref": "indicator--7e4d14c7-29c1-43e2-a935-2a156073cc70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dae43c9-996b-4753-b4a2-be4f49e22cc3", "sighting_of_ref": "indicator--99cf8633-3cf9-427d-8ac4-2a44bd248e98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bed54e-9327-4751-8cac-467faed7f0e0", "sighting_of_ref": "indicator--71cabfa6-875d-4801-8f36-fa113b8e833b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735fd485-7918-4e6b-8172-5d7eaee0db40", "sighting_of_ref": "indicator--b075bc8e-6736-4531-9f65-68b708fb9a09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0abb69-cbb6-4caf-9f82-9f918f3c042f", "sighting_of_ref": "indicator--b075bc8e-6736-4531-9f65-68b708fb9a09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6616ee05-88ac-44d1-acd5-acfc076afaa3", "sighting_of_ref": "indicator--60fb794c-c194-4de9-bf55-9c4451ce2659", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b97179f-c4be-4487-87c4-70a577ab3a03", "sighting_of_ref": "indicator--60fb794c-c194-4de9-bf55-9c4451ce2659", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af822af8-8f3d-421e-89b4-15e2ab2bc1ed", "sighting_of_ref": "indicator--34f15113-9543-4ff8-87db-f40775daaa79", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb16e49-795b-4f8b-8e33-a2381e397dd6", "sighting_of_ref": "indicator--41006c28-c829-4ac8-bc3d-f8c7709e71cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674e07fe-66f0-4530-9fd4-ad101ea97502", "sighting_of_ref": "indicator--41006c28-c829-4ac8-bc3d-f8c7709e71cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba0b595-1c5a-4988-8110-5a093755a1d5", "sighting_of_ref": "indicator--8c6aade0-a181-4ce9-b789-b0fbd9b93589", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d03913c-09c8-4f05-b32f-2aead774b40a", "sighting_of_ref": "indicator--8c6aade0-a181-4ce9-b789-b0fbd9b93589", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71faf84-8e15-44f3-9389-ad250a401167", "sighting_of_ref": "indicator--04724313-ae49-45c4-ae22-00ac059aae02", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f89eed-c626-4092-8a48-31cefb9cdbba", "sighting_of_ref": "indicator--04724313-ae49-45c4-ae22-00ac059aae02", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a9c755-3145-4f44-9e1f-6ecdb51692d0", "sighting_of_ref": "indicator--6d3a9519-f6f2-4541-9348-7ee3a3930b97", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e46a5b2-9c9a-4707-8fb8-844b3fa23224", "sighting_of_ref": "indicator--6d3a9519-f6f2-4541-9348-7ee3a3930b97", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81024a29-07b3-435c-987f-21c984ad3c00", "sighting_of_ref": "indicator--547a9447-cae3-40b1-8a4b-f005fcebd80f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4177f54-8669-4717-adb7-0a3620cc5353", "sighting_of_ref": "indicator--547a9447-cae3-40b1-8a4b-f005fcebd80f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f310b8f4-e82b-4b0a-9b4b-bdd7f2d92537", "sighting_of_ref": "indicator--82346f37-f710-48ba-b411-709f8fe57f48", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0c357d-635d-40d4-b283-90a04be0340a", "sighting_of_ref": "indicator--82346f37-f710-48ba-b411-709f8fe57f48", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d729ac61-9355-419b-bef2-4907edd026b1", "sighting_of_ref": "indicator--b3767436-e05a-4cc8-912d-6223998ac904", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b93959-86e4-4f43-9667-a1009add732a", "sighting_of_ref": "indicator--b048d071-1e31-4a88-a4b3-24bc0632cb92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b326a1-8129-4e91-87d5-861bbf283afb", "sighting_of_ref": "indicator--9721d245-c271-477b-9ca7-1c53b08320ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3c29ae-7fef-44d9-a230-ea4f90e63feb", "sighting_of_ref": "indicator--9721d245-c271-477b-9ca7-1c53b08320ab", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f02af-c02b-457e-816e-b7bb6f197dc4", "sighting_of_ref": "indicator--70d31540-39b7-4ad0-aed8-a90304af55ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa48f23f-23a5-484c-b0b1-e2c57141e49d", "sighting_of_ref": "indicator--70d31540-39b7-4ad0-aed8-a90304af55ec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db70d1a-066c-4a3f-a600-77dff69927e8", "sighting_of_ref": "indicator--fca94f65-88a8-4dcf-b09d-b8d4f4440eea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05487750-f085-4a23-ae9e-26f3c8ef1a55", "sighting_of_ref": "indicator--fca94f65-88a8-4dcf-b09d-b8d4f4440eea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac57863e-fc5c-4b00-baa3-fea6cfd5c1ea", "sighting_of_ref": "indicator--ace8ca17-3f4b-4f77-b060-b7a403946419", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f0475f-9087-4c67-8890-7e9443a3944b", "sighting_of_ref": "indicator--ace8ca17-3f4b-4f77-b060-b7a403946419", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda8970-75fa-4d3b-9cae-d8e4619b32a8", "sighting_of_ref": "indicator--4909e7c4-aae1-47b1-863f-a6e93afbf403", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2356f5-22ea-4ae0-9273-4716237e876f", "sighting_of_ref": "indicator--9656fd5a-a31c-4f2e-b8b5-fcb3d2b9c697", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412ad072-7a4f-4980-bfa8-116ea64a8b28", "sighting_of_ref": "indicator--9656fd5a-a31c-4f2e-b8b5-fcb3d2b9c697", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac899a9a-4aff-476f-9ff6-3b063060c499", "sighting_of_ref": "indicator--8aa8e1b8-4ad9-4a0d-9ff1-50c62d6da1cf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e114576c-b965-45a8-b7df-6a88d0c5ce92", "sighting_of_ref": "indicator--8aa8e1b8-4ad9-4a0d-9ff1-50c62d6da1cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db795ba-182a-483c-be65-cd53108b0262", "sighting_of_ref": "indicator--7122c134-71c4-487d-84cb-85651e7d232c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33318558-8092-4679-9c2d-0e86c50e04a4", "sighting_of_ref": "indicator--7122c134-71c4-487d-84cb-85651e7d232c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228dde7e-ec46-4bcc-b912-1f3fd1769035", "sighting_of_ref": "indicator--e8686a7e-7d0a-487a-b0f6-9061c84b78b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9860d676-c5d1-45db-b0c4-55b71dadb3f2", "sighting_of_ref": "indicator--e8686a7e-7d0a-487a-b0f6-9061c84b78b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be3b7f9-7a6d-4ffc-89d6-0b31d4a403a8", "sighting_of_ref": "indicator--b72f79ed-d943-46fd-be0e-358f84a024ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e04c773-f025-4d1b-9555-bead675d20ce", "sighting_of_ref": "indicator--b72f79ed-d943-46fd-be0e-358f84a024ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c5eda-0187-479a-9588-be902649444e", "sighting_of_ref": "indicator--18a74fa8-672b-4504-9518-72da12d6c233", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9255c4c2-2dee-43b8-87b1-1df42ee4a5a2", "sighting_of_ref": "indicator--2cfa2f11-530d-45fb-8cb7-832eacaba81c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0de1a5-44d3-4c58-bacb-fc18e70e96a0", "sighting_of_ref": "indicator--2cfa2f11-530d-45fb-8cb7-832eacaba81c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cf85fa-0ed9-42b2-8c89-64db45732dd2", "sighting_of_ref": "indicator--5a4baeaa-30b6-430e-a032-c3bfb93306e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e56cb37-180d-4839-9518-04da583c26e2", "sighting_of_ref": "indicator--fe2d0d55-3de6-465c-aec1-15250b7bde7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546ce9af-b3f7-40af-96d4-84c2fce0d208", "sighting_of_ref": "indicator--fe2d0d55-3de6-465c-aec1-15250b7bde7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e27ec4-7da2-458c-8a9a-31bdf9e22591", "sighting_of_ref": "indicator--d22bd92d-dec5-4894-8d38-1e296e5dc100", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b9b234-d11b-4817-b772-37a6346a6019", "sighting_of_ref": "indicator--d22bd92d-dec5-4894-8d38-1e296e5dc100", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37446f3d-e0fa-4dfa-bcac-0f30dac40c58", "sighting_of_ref": "indicator--e80e9879-2dcb-4d21-9e3c-d9a500d403ea", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b087e5ac-0d64-44f0-be37-55bb1e7b215a", "sighting_of_ref": "indicator--e80e9879-2dcb-4d21-9e3c-d9a500d403ea", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495cf923-c572-4670-a40f-d93c407d1765", "sighting_of_ref": "indicator--98b5d2b7-9e3c-4700-94a0-721521ecd465", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56be7ce5-baf9-4017-8620-d8628f9c04d8", "sighting_of_ref": "indicator--98b5d2b7-9e3c-4700-94a0-721521ecd465", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f660d4-4796-4cbc-a1e9-3311b78e6f69", "sighting_of_ref": "indicator--bf5a1cae-7f4a-46d1-b429-2e2a5165251e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03afb5bc-3b9d-4841-8616-b767bad931d9", "sighting_of_ref": "indicator--bf5a1cae-7f4a-46d1-b429-2e2a5165251e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d77171-0bcd-4e57-9c11-47b10f8aa368", "sighting_of_ref": "indicator--690981b4-5a34-484b-a9d7-51f3f2a189d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d727c46-9a06-4d4b-95be-58674794ed7e", "sighting_of_ref": "indicator--690981b4-5a34-484b-a9d7-51f3f2a189d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63848c91-5427-4566-946f-8048e0dbd600", "sighting_of_ref": "indicator--aa3a7a88-1c4b-4205-9565-0eb4ef1a46ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed91cb0c-ee2d-4fb3-a667-c8a8095d6853", "sighting_of_ref": "indicator--aa3a7a88-1c4b-4205-9565-0eb4ef1a46ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938483a3-a666-42af-ad11-34727a32ee4f", "sighting_of_ref": "indicator--97e6bbe0-c86b-453e-814f-b3ecffc28d82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add8842d-a616-4ee3-9d78-0f7769a82ae6", "sighting_of_ref": "indicator--97e6bbe0-c86b-453e-814f-b3ecffc28d82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09790c6e-34c9-4c0e-b191-37c82a3b82e6", "sighting_of_ref": "indicator--5c3ffc09-3e82-4765-b98f-df39609cc02c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d3b972-d629-4f4b-9f9a-092be8acb54a", "sighting_of_ref": "indicator--5c3ffc09-3e82-4765-b98f-df39609cc02c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd6fc32-1600-4603-8922-971a0c9b1ac9", "sighting_of_ref": "indicator--754d0431-cf45-4520-a35f-9a3ce74b9920", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cab45b9-daf4-4dc1-a953-106e8b43ef9b", "sighting_of_ref": "indicator--9620aaf4-75dc-4c37-ad65-f7d6d0285603", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3b886d-3772-41df-a3a0-0afe3e283a90", "sighting_of_ref": "indicator--9620aaf4-75dc-4c37-ad65-f7d6d0285603", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb0bb92-6901-43e7-b5bd-ed0beaada375", "sighting_of_ref": "indicator--62bc1c11-ecb2-4649-9c22-118ca869277b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfa6eb6-8d7d-440f-a3be-89a2fcb546b7", "sighting_of_ref": "indicator--62bc1c11-ecb2-4649-9c22-118ca869277b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facef057-3ddb-4914-9838-13ead11d98d6", "sighting_of_ref": "indicator--94322b18-68b1-4128-9d97-3ede55989eb6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb23c8-ea54-4027-a1a3-44f524faaa2e", "sighting_of_ref": "indicator--94322b18-68b1-4128-9d97-3ede55989eb6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f72524a-83ef-4d59-84fa-1c8d76358df5", "sighting_of_ref": "indicator--013b5e03-4a29-40a8-9732-412cb62340c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8f7bf-4ab5-4768-b229-d8c65335b82e", "sighting_of_ref": "indicator--47700027-8f44-4d3a-8b6f-2898274ff794", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191ee015-2e6a-4e23-b018-1c1468616385", "sighting_of_ref": "indicator--9e36be44-b0bd-4354-a35d-575be4bc86c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378742dd-3e4e-49a6-9257-05467c7b6202", "sighting_of_ref": "indicator--9e36be44-b0bd-4354-a35d-575be4bc86c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cf9e88-51df-4e0e-b7ac-a2e1ec477dc3", "sighting_of_ref": "indicator--347665f0-9257-48d2-9d7d-67cd89f32c4d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfd4cbf-be1a-4c40-a66f-e805b788ffc4", "sighting_of_ref": "indicator--347665f0-9257-48d2-9d7d-67cd89f32c4d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1836e2f3-e329-420e-a872-616b14646147", "sighting_of_ref": "indicator--3c1a12ed-7f0f-4868-b931-dcfb0a4c323b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf099497-5d94-4d4b-b1f1-631b2e29d778", "sighting_of_ref": "indicator--8b1d7e6d-18a5-4c9e-907f-05c46e4ba7a1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad05a49-a375-460a-bac1-a04fb3cbe23a", "sighting_of_ref": "indicator--8b1d7e6d-18a5-4c9e-907f-05c46e4ba7a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6319f1c-435f-4177-a26a-9b6ed33f9007", "sighting_of_ref": "indicator--e6497cf7-7462-4adf-bf10-316ae37bf48c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd05e5d-7cb4-4dfb-9614-a2daf586e6ac", "sighting_of_ref": "indicator--e6497cf7-7462-4adf-bf10-316ae37bf48c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28531376-ced8-49ff-8092-c964ad35c130", "sighting_of_ref": "indicator--b7b117c8-c9d4-4799-ae7c-b20bbe3d324d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2c186d-7202-46db-b4f7-cd0631374bce", "sighting_of_ref": "indicator--f8b9c1ae-7441-47c7-8f00-8a37d445f1d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d24e282-ebd0-475e-8708-098372c16020", "sighting_of_ref": "indicator--f8b9c1ae-7441-47c7-8f00-8a37d445f1d2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47e67a8-342f-4e46-b3df-9056f9ffda53", "sighting_of_ref": "indicator--b0f2479d-0e65-4622-9f4d-570f8e2084ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbaee7f-b33e-469e-a9d6-926a9b6f2347", "sighting_of_ref": "indicator--b0f2479d-0e65-4622-9f4d-570f8e2084ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8f358c-bfe8-433d-9491-07d7debf841c", "sighting_of_ref": "indicator--5985f30d-356e-4cb3-aa6f-020ff1bc06e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5fe88f-aa77-46cb-92fc-e2a1852a44fa", "sighting_of_ref": "indicator--e9a9605f-2991-466a-b6a9-546309906536", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6f66fc-e934-4868-9975-8a74882a6629", "sighting_of_ref": "indicator--e8b977e1-b198-4284-96e9-16e1834e8083", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0656dfc9-3738-4b83-9171-4dc7eefccd7c", "sighting_of_ref": "indicator--e8b977e1-b198-4284-96e9-16e1834e8083", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d81873-4d15-4474-a9b7-0e97809041e9", "sighting_of_ref": "indicator--4640cc7a-6135-4050-84df-a20d10cfeeac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f020c322-0f22-44a5-88fc-f7eb3bd80246", "sighting_of_ref": "indicator--fd2be1fe-4186-4fe5-9102-c09f266817fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2bb0dc-c3f4-4224-8993-32c6567b6ff3", "sighting_of_ref": "indicator--4b282d5a-5e44-4d3a-b0ff-1ab5d20ca7ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13458f0a-73eb-441e-b533-63788e8ef29a", "sighting_of_ref": "indicator--4b282d5a-5e44-4d3a-b0ff-1ab5d20ca7ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9029b356-2725-44e9-bc96-7af6d21f4ac5", "sighting_of_ref": "indicator--d231eae2-95d8-48e3-860f-47779c6662ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e345e4e-1053-4657-ae67-6627c1a0dc11", "sighting_of_ref": "indicator--18c53813-366a-4d24-90ca-1ff67bc6c177", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044caa6e-1aa2-442d-ad51-87adc8e82ba9", "sighting_of_ref": "indicator--ff9f3803-6030-4750-b1a1-3ef08220b8df", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251fd693-6cc6-4143-b032-dcbaa946bfa5", "sighting_of_ref": "indicator--ff9f3803-6030-4750-b1a1-3ef08220b8df", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e29e30-7f61-4928-a21f-53fc5de31482", "sighting_of_ref": "indicator--503a493a-864e-4ab4-9898-85e6e30c13e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d8a40f-5ba8-4e83-8767-990c3c2fdc5a", "sighting_of_ref": "indicator--ea92307a-0fa5-4a42-ac9d-107feb976be2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec1b7a9-c869-4402-b337-2c1ef7eb3f99", "sighting_of_ref": "indicator--3927fc93-619d-454b-b0bd-49d11b83ef32", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe684d-d86a-46f4-a509-6851d4830244", "sighting_of_ref": "indicator--9a71d754-fd6d-4997-afdc-4d7fec19e22b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2492a30-bbb1-4ffe-a0fc-9dbbf3e7504d", "sighting_of_ref": "indicator--b9efeca7-cc25-4189-b077-160a766def27", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920bd50d-89aa-47c4-a9fe-abee40cbc638", "sighting_of_ref": "indicator--aa171dac-ad3c-41f3-a485-898d9ff9b8ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd5ee88-e849-45cd-b797-5c20d60c1e33", "sighting_of_ref": "indicator--aa171dac-ad3c-41f3-a485-898d9ff9b8ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a729ee38-7f79-43da-9f1f-d0cdb04cc89e", "sighting_of_ref": "indicator--d76d1545-6f46-4e2c-9174-0bcedbfb228a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfa01d5-3841-424d-bf60-27c9fcfafaf4", "sighting_of_ref": "indicator--d76d1545-6f46-4e2c-9174-0bcedbfb228a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec9f196-4e83-45ee-8d45-3e2ad36ae0ac", "sighting_of_ref": "indicator--5a385a17-3be1-48e9-ac97-8fdcdaa60049", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627d9458-7303-4fb4-83be-cd750b4f8154", "sighting_of_ref": "indicator--ad38c49d-277b-4e86-bd58-2809771f3897", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1052524-73bc-4de7-8b88-dad497f0bb62", "sighting_of_ref": "indicator--9eb833bc-faaa-4c15-838b-25ba0adccace", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417d65de-1bfc-48f2-8d73-3f579c5b7149", "sighting_of_ref": "indicator--9eb833bc-faaa-4c15-838b-25ba0adccace", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09217f00-5e39-4e4c-983a-431f3339eeec", "sighting_of_ref": "indicator--dd9c7894-8324-400c-b43d-44b64ebf2256", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5820f6c6-42a8-4c11-a35d-0b4484347c01", "sighting_of_ref": "indicator--72e2ba02-50c2-42ec-ab9f-3a6abe39a1b4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e2cf4-9f2f-49f6-bb99-6ef58fae14c5", "sighting_of_ref": "indicator--72e2ba02-50c2-42ec-ab9f-3a6abe39a1b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41acfa0-9c07-4ec3-8fe3-9c3fd9158312", "sighting_of_ref": "indicator--2dbb7666-602a-4bae-a863-280db6eab10c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaacad91-8afc-426f-b412-d688ce5f1fc6", "sighting_of_ref": "indicator--c08a9595-ab29-48f7-b395-fe0d3a1eb126", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eaebe3-f171-4845-9e00-75ea719dca99", "sighting_of_ref": "indicator--fe671ad6-942a-4053-8cf5-8b80b5a995c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00893a34-287b-4e94-98c3-ee6152fd3012", "sighting_of_ref": "indicator--fe671ad6-942a-4053-8cf5-8b80b5a995c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73028e0-12e6-416b-92f4-578b4e9b69d8", "sighting_of_ref": "indicator--6c06f5b1-3fce-4392-a1cc-8ca29ad7aaa5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c399da-8c25-4cc4-a315-ef6733c60d48", "sighting_of_ref": "indicator--fe1de2df-5b6c-43fa-8e62-3509deee8999", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4748f816-ceb8-4776-901f-344b97dc2111", "sighting_of_ref": "indicator--71299366-3f95-42c3-99d2-8d527fcd2f88", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ee9a3a-60c3-410f-80ee-39e4effd2e1f", "sighting_of_ref": "indicator--b241b55c-e929-4962-b463-085b2131eb08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6e906b-85e3-4271-9f1e-f5d3c5a80de1", "sighting_of_ref": "indicator--b241b55c-e929-4962-b463-085b2131eb08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a8976c-6cfa-410b-b78e-e99f228061bb", "sighting_of_ref": "indicator--c53ff3c5-2b1c-478b-b867-976d57bf9f9c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201fe693-6d45-4e50-8c4f-cfa1b20f547d", "sighting_of_ref": "indicator--c53ff3c5-2b1c-478b-b867-976d57bf9f9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fcc953-3254-44a1-b57d-46f579a468c9", "sighting_of_ref": "indicator--b934aa50-382b-4019-b8ae-96f2a0713bb1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d98137-7041-42db-b971-40ef81adea4c", "sighting_of_ref": "indicator--b934aa50-382b-4019-b8ae-96f2a0713bb1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95215b3a-9ab3-40a4-bd01-615ade13ee7d", "sighting_of_ref": "indicator--12693d44-247a-4d88-9a6d-f936b9924953", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408bcd0a-671b-4348-8f35-4acdc4d2d26f", "sighting_of_ref": "indicator--12693d44-247a-4d88-9a6d-f936b9924953", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5e2321-df1b-4a6b-a4a9-f726be4f023d", "sighting_of_ref": "indicator--d4c5b325-a05d-4066-bb8e-3105635bcf90", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395ef600-8e34-443e-ab33-c1a9fdbc1940", "sighting_of_ref": "indicator--d4c5b325-a05d-4066-bb8e-3105635bcf90", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94674b1-dcba-4722-b547-eddaf70caa76", "sighting_of_ref": "indicator--70c32e72-e91e-4725-b336-23faf5fe2970", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e509500-6edf-4339-b076-0dd786ca3de4", "sighting_of_ref": "indicator--70c32e72-e91e-4725-b336-23faf5fe2970", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099c3674-1592-4c8c-9ee7-0ebcec62face", "sighting_of_ref": "indicator--afbd333b-7aea-41d2-a5b1-489ec6b8194b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f9b1c4-7cce-49bf-8440-557992141107", "sighting_of_ref": "indicator--61f54ba3-66b3-414a-a09f-e879aeaf29b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecd91a3-d5a5-4856-9648-7f63c6ed5161", "sighting_of_ref": "indicator--61f54ba3-66b3-414a-a09f-e879aeaf29b7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0a5d50-2d9c-4f34-a2c7-5a58f5d4b300", "sighting_of_ref": "indicator--42bd3c78-d538-4408-925a-fd907419f800", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55248ad3-2e2e-4884-b669-6234a43aacbe", "sighting_of_ref": "indicator--42bd3c78-d538-4408-925a-fd907419f800", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dd9dc9-e267-414b-bf32-cf12d7d87ff3", "sighting_of_ref": "indicator--7eff3e9a-6ee9-4eb3-8042-48b3770eb3f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be81e7c-6a80-446f-a5fa-573f62d37a1c", "sighting_of_ref": "indicator--7eff3e9a-6ee9-4eb3-8042-48b3770eb3f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed10197f-5b0f-4cfc-b72e-5afb37f1341b", "sighting_of_ref": "indicator--91e1bd2e-b5b5-4b06-91d0-ebdaf8f1f3a0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03000516-aac7-4a84-b4ce-43e78b101192", "sighting_of_ref": "indicator--41ce3ec2-3a3d-4c19-8f87-5f394ea06926", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a860271-c687-41e6-9f23-08afd3468869", "sighting_of_ref": "indicator--636781d8-e53f-4795-9b16-e50cebb49053", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5019c62e-5e3c-4081-b8c2-b95ace807eba", "sighting_of_ref": "indicator--636781d8-e53f-4795-9b16-e50cebb49053", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4be7582-e0e8-4e43-8b59-567743250eb3", "sighting_of_ref": "indicator--5ce73c16-fd79-4142-992a-598f3b4e69f7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a32ac7c-5322-4db7-8e51-a1084650a6a8", "sighting_of_ref": "indicator--f3fa87cc-9965-48f7-8c0d-e8a1a27ec46b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c534a947-406c-4294-b773-28111f7109ac", "sighting_of_ref": "indicator--f3fa87cc-9965-48f7-8c0d-e8a1a27ec46b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b1718a-d3df-4dea-913f-6c7db1810729", "sighting_of_ref": "indicator--cbe315e1-a53d-433d-a184-e46ce164bad2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a15e86-e496-412d-8064-2819956194f1", "sighting_of_ref": "indicator--cbe315e1-a53d-433d-a184-e46ce164bad2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46ca6b9-dc3a-46a9-bf92-7c44a0fb5cb5", "sighting_of_ref": "indicator--de838e2e-bce0-4bd6-9da8-982c5465f132", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99152c4e-9d81-4242-834c-7010a47f67ba", "sighting_of_ref": "indicator--b7f711f2-8226-4b8c-830b-380f36583e5e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3742ae-7aa2-4a9a-8e30-52c26ec65487", "sighting_of_ref": "indicator--b7f711f2-8226-4b8c-830b-380f36583e5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaecbc2-4848-46cc-b12d-c904c03c9c6d", "sighting_of_ref": "indicator--c2e6d8ec-a9b5-4a3f-9d68-300dd02a8ef2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d4f3f2-2dcd-4a93-9a1d-9cf157b7dfa2", "sighting_of_ref": "indicator--c2e6d8ec-a9b5-4a3f-9d68-300dd02a8ef2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb75281-f20b-45ef-aaca-4edfef67adf6", "sighting_of_ref": "indicator--f1b6f2f2-bacb-470d-b685-13f4343b180c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1d3429-a65f-4f76-a0f7-550a9dc1ff65", "sighting_of_ref": "indicator--f6c69134-7265-4bdb-85cc-630cc6771786", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690cd683-5748-4294-8121-ed380ab6df7e", "sighting_of_ref": "indicator--f6c69134-7265-4bdb-85cc-630cc6771786", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fbbc01-47fa-4d1b-99b0-4534d61a0fc5", "sighting_of_ref": "indicator--18b13041-dc4f-4779-b81e-978fbeeedaec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf182d2-99c1-42f8-827b-93ac144cf558", "sighting_of_ref": "indicator--18b13041-dc4f-4779-b81e-978fbeeedaec", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7295b2-0c80-4d60-a2b7-39704af5d0b0", "sighting_of_ref": "indicator--4eb61d2b-d7f3-40f9-915f-0a719e89cee3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257ce176-397c-4056-b79b-30d1f4b7d433", "sighting_of_ref": "indicator--6f8084a8-3f99-4642-91fb-37cd4faac0af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3fd9ce-b60b-4e3a-9233-ce17989e1ced", "sighting_of_ref": "indicator--6f8084a8-3f99-4642-91fb-37cd4faac0af", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06bb52c-5e73-4590-8702-53af84b26c04", "sighting_of_ref": "indicator--a770248f-5a61-49d4-b292-115926220560", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695612a5-faaa-436d-81f3-d87f60a16a1a", "sighting_of_ref": "indicator--ba56ca14-b5db-436c-b94f-94f38cd69357", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a26cf35-de90-4260-89b3-75d807a96623", "sighting_of_ref": "indicator--ba56ca14-b5db-436c-b94f-94f38cd69357", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e6503a-701c-4172-ad6e-a491df85d7bf", "sighting_of_ref": "indicator--c5384d95-521c-472b-bcaf-c135a9ee1b71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777361c1-7aea-4fc1-bc82-a7df9707c87a", "sighting_of_ref": "indicator--41e06001-1f68-4014-b167-cbd6bd59e82b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dff4be1-357a-4ebc-910b-f2533492f694", "sighting_of_ref": "indicator--41e06001-1f68-4014-b167-cbd6bd59e82b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dfacbe-4535-43f1-8307-23cb74ff65a6", "sighting_of_ref": "indicator--9ca39dab-5f1e-42c0-a2ed-101098aa2b6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae06897f-779e-4385-ab75-f8c66baa3e3d", "sighting_of_ref": "indicator--9ca39dab-5f1e-42c0-a2ed-101098aa2b6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf688d5-18d5-4ec9-b60e-71161e5f9d5e", "sighting_of_ref": "indicator--a1688ea7-419a-477b-903a-36d537d08823", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a646920-1089-452b-af32-24d9301fac90", "sighting_of_ref": "indicator--5d52077b-f9bc-4ae7-9fba-d63d8c8ab7c4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db023425-885c-40db-927a-9d29be6f18e8", "sighting_of_ref": "indicator--5d52077b-f9bc-4ae7-9fba-d63d8c8ab7c4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a7df31-620b-4b4b-b8a5-d4f1b07c3c26", "sighting_of_ref": "indicator--31b4ada7-7a00-40bb-b123-897aeb77888b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7fc423-65fe-4b52-8b00-66afcc7735fe", "sighting_of_ref": "indicator--31b4ada7-7a00-40bb-b123-897aeb77888b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968519bb-b66e-4b42-bd07-e9a8a428f885", "sighting_of_ref": "indicator--ef18451e-da0f-4ce8-acf0-0aae12bcb428", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa1929f-22ae-4d81-9889-565807c26cc8", "sighting_of_ref": "indicator--ff90965a-0c07-459a-8b95-d5278cf117da", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed32b17-1c82-4a16-83e6-0afecf50736c", "sighting_of_ref": "indicator--ff90965a-0c07-459a-8b95-d5278cf117da", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e44b9ba-7654-4981-9e2c-ab147f3b1aa6", "sighting_of_ref": "indicator--93af161b-5629-475b-9519-a38814dbd248", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fc192e-01e5-4546-a017-96587ec07fd9", "sighting_of_ref": "indicator--ea2b2146-67f4-4903-85f2-3d7b49be8ce0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a18d2c9-6850-492e-9aa6-92f8b842719e", "sighting_of_ref": "indicator--76b599b8-3694-4402-88e2-63ec8de075ee", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b396da24-96e2-42e0-a8f9-9c314880fe55", "sighting_of_ref": "indicator--f568fc0d-5754-4b4f-8c54-c10da87c8d65", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcee0a7-eb9a-4526-a84b-ede39a291cb7", "sighting_of_ref": "indicator--f568fc0d-5754-4b4f-8c54-c10da87c8d65", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbe9523-8ee5-4d71-8a1f-bdf9fda1e0b0", "sighting_of_ref": "indicator--2359f2d0-3c3c-44ee-bf2d-163e3adb39c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaf8b04-d5c5-4f9f-b4e8-a64c8524c1d5", "sighting_of_ref": "indicator--2359f2d0-3c3c-44ee-bf2d-163e3adb39c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab13e34-f9c0-439d-a805-31998a42a71a", "sighting_of_ref": "indicator--c9d76df3-99bf-40f8-aae8-1236045e32e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c28ae8-0557-4832-a0c0-a163c99da390", "sighting_of_ref": "indicator--c9d76df3-99bf-40f8-aae8-1236045e32e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287ee56e-a739-4eeb-94fc-5f1c74d33f72", "sighting_of_ref": "indicator--37e5b11d-001e-4761-9d4a-016b5e749a2a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94dc61b-5667-4823-a160-0651b6d10589", "sighting_of_ref": "indicator--37e5b11d-001e-4761-9d4a-016b5e749a2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e6358-4281-44da-a012-e1d6c567e67c", "sighting_of_ref": "indicator--2551026a-c018-4c8d-b698-90f706ff6a2f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c074e-5dd5-45a3-b571-7a1ec48ea99d", "sighting_of_ref": "indicator--2551026a-c018-4c8d-b698-90f706ff6a2f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a585f30-a984-4bdf-bdc8-71e5f0064770", "sighting_of_ref": "indicator--31ab3330-61e9-4b46-83d3-13bd86d4cca6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdd4a31-2c64-46df-a7d2-15842149d579", "sighting_of_ref": "indicator--31ab3330-61e9-4b46-83d3-13bd86d4cca6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33cea58-1bea-4d2d-b5f2-35af30aca947", "sighting_of_ref": "indicator--20cab554-141f-4226-8cf4-14a39213d0ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fe5cbe-3a9b-4c8f-af56-367f07ea2fa4", "sighting_of_ref": "indicator--86a99813-9c2c-4dbd-9462-d4511e4b4e83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e794efcd-41ff-4e23-adab-ddb5e46b3186", "sighting_of_ref": "indicator--86a99813-9c2c-4dbd-9462-d4511e4b4e83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d8b9e8-7320-494f-a1a0-52bddc360b7e", "sighting_of_ref": "indicator--ec69d157-0704-4e7f-90ae-e1846b7b63b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeff341-aa94-45c3-889b-6d2b6eb7736b", "sighting_of_ref": "indicator--ec69d157-0704-4e7f-90ae-e1846b7b63b3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75df17b4-18da-4b5b-862f-c7b51ef27f0c", "sighting_of_ref": "indicator--a31875b2-a6c6-49d4-a1e3-ad957281d95f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d188998-a9ad-4da8-9395-3ea2948e5b00", "sighting_of_ref": "indicator--a31875b2-a6c6-49d4-a1e3-ad957281d95f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6032413d-71e0-4f9c-93d6-1e98d1ed279a", "sighting_of_ref": "indicator--4f3c94de-b353-4bca-bcbf-8c1d447eab3c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be69c7a-9533-459d-be15-d3c643132910", "sighting_of_ref": "indicator--4f3c94de-b353-4bca-bcbf-8c1d447eab3c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b3c024-ab30-42e6-ab04-bf4646b374bd", "sighting_of_ref": "indicator--69c9f73f-8213-4e8d-a5cd-72ab1d35573f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f2f4ef-f140-426a-94b5-97b54bfba3bb", "sighting_of_ref": "indicator--69c9f73f-8213-4e8d-a5cd-72ab1d35573f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4654dc8b-27a4-43a3-b57d-52c5148135b7", "sighting_of_ref": "indicator--846e7fb5-c1a9-4fa6-beef-5b319eae4b35", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc351116-8b70-4ddb-bbd1-68e17ccd6abb", "sighting_of_ref": "indicator--1545434e-5751-4f39-8de1-b8a57013cc3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e2bbd3-0cf9-4c16-93cd-266dd80a9eab", "sighting_of_ref": "indicator--0159d706-9c7b-47e8-b7a1-70ea77d7c836", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed2dea3-b837-40d0-964b-57e7ca1e76af", "sighting_of_ref": "indicator--0159d706-9c7b-47e8-b7a1-70ea77d7c836", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786380e5-de1a-4c98-a718-e51308e7e3e7", "sighting_of_ref": "indicator--e401ae82-e563-4c1e-b3aa-c81784bdb73f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076ba2b9-65a7-4f77-89e3-867a678eaeda", "sighting_of_ref": "indicator--68a75529-294c-4c5a-b758-dea5c6a65319", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c555ad4-8c39-42f4-97ef-c8d660693d00", "sighting_of_ref": "indicator--e76eb0d8-5541-4667-bb6f-b35d737be065", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d0e1b9-4d66-4601-a888-d668767a11fb", "sighting_of_ref": "indicator--e76eb0d8-5541-4667-bb6f-b35d737be065", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423131b3-b6ec-42fd-b99d-440e5abb082e", "sighting_of_ref": "indicator--4214148d-989d-4d14-af14-e1fb5a5b547f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0a002e-f8da-4885-8d58-1239cad6035c", "sighting_of_ref": "indicator--4214148d-989d-4d14-af14-e1fb5a5b547f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c1d939-86bc-47d5-9697-e60f5139be89", "sighting_of_ref": "indicator--72278087-bff3-4012-abae-83b525276720", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa804267-98d8-435d-bdf6-e9d83041e921", "sighting_of_ref": "indicator--72278087-bff3-4012-abae-83b525276720", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bfbecc-fdf7-4743-92c5-a5b5859c370f", "sighting_of_ref": "indicator--838ede16-be41-401d-ba9c-33d703055e71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3357f521-8072-49ca-915e-5deddaad5f88", "sighting_of_ref": "indicator--838ede16-be41-401d-ba9c-33d703055e71", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea506324-622c-47d0-a2ec-c85f6d3a25f9", "sighting_of_ref": "indicator--0b14d406-f060-421c-b7a0-72f2994487a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b47c9e-fe76-4b9f-b410-92b701e32ff1", "sighting_of_ref": "indicator--0b14d406-f060-421c-b7a0-72f2994487a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adec37c8-43d0-4fcd-8481-2132d1ca10a9", "sighting_of_ref": "indicator--0a1f172f-5e8a-4875-8b2a-3ff94236b11c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769aa057-d615-45a0-9494-ee8353678da9", "sighting_of_ref": "indicator--0a1f172f-5e8a-4875-8b2a-3ff94236b11c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4c8785-6154-4f47-8d76-a9f86bb66353", "sighting_of_ref": "indicator--2a4a31fb-4bcc-44dc-a967-5229aafd8192", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25feadee-6ed6-4f2d-ac44-927c3f138218", "sighting_of_ref": "indicator--18d56474-06ac-43b3-8664-9620b3dfa468", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bd2cdd-18e1-4b6e-8917-2fe7bd2a569f", "sighting_of_ref": "indicator--e0c4ac25-1368-44bc-b51d-b57cc313457b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882c5bd9-0830-464c-80a5-caf795088c6d", "sighting_of_ref": "indicator--e0c4ac25-1368-44bc-b51d-b57cc313457b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62916fa-31f8-4a1d-ad7b-155c87fbc267", "sighting_of_ref": "indicator--34af69ed-26d0-4979-96ce-61871435a6a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57238046-c7bf-4a14-8e75-8e0a7b38083b", "sighting_of_ref": "indicator--b1011f8d-1435-4c19-8a7c-4fd7cafb1507", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a73e589-9474-4974-b099-0df3ebb76c93", "sighting_of_ref": "indicator--61a85a24-c041-48e5-b46e-72c01d53b82d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eed3c25-5734-4a12-ba34-8f24cc8c5df9", "sighting_of_ref": "indicator--4246c61b-470f-482f-b50f-25eb23a36ba2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23049237-5105-494f-9a4d-85c24db487a2", "sighting_of_ref": "indicator--4ce6f991-5a7d-4e8f-9390-12f099b951ff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca75ae-6bb7-4c1f-b08c-a67ac9f6009c", "sighting_of_ref": "indicator--4ce6f991-5a7d-4e8f-9390-12f099b951ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dab8a0-8639-421f-ab5c-eea25fa2978b", "sighting_of_ref": "indicator--b29f276b-f4f3-4760-97a4-f67de2cb1394", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb60541-4a52-4d70-97a6-c4481abfb0b8", "sighting_of_ref": "indicator--8f14f55f-1154-4476-8e4f-c3af6ef4b7c0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84055b8-4560-434e-987d-d67929c52eb2", "sighting_of_ref": "indicator--8f14f55f-1154-4476-8e4f-c3af6ef4b7c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019a4f80-b999-4643-8f89-89d684260364", "sighting_of_ref": "indicator--ed4c75f0-bce8-462c-9a8f-d670469992e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cfaaba-a6f7-4d3c-b97f-13fb6d02dd02", "sighting_of_ref": "indicator--578103b4-e490-4924-8c92-444548d1951b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfce488b-35bb-4c39-b72f-7f8c87b9c606", "sighting_of_ref": "indicator--578103b4-e490-4924-8c92-444548d1951b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ab0ffb-4d71-4e9d-957c-0189ccc3dae3", "sighting_of_ref": "indicator--4cfb913d-ba24-4ddf-ad7c-acf30b3c5751", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5613afb-1511-4632-ba35-91a33896e8e4", "sighting_of_ref": "indicator--476f9e27-7345-4f83-8a17-388e1fc94167", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5180c35-0831-4d34-966f-13ccfd53dbfc", "sighting_of_ref": "indicator--476f9e27-7345-4f83-8a17-388e1fc94167", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8467b909-ab2f-4638-b507-20e54dd6dd43", "sighting_of_ref": "indicator--0a9efbb6-9af9-4a62-aad8-4b43be92b1bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb0828c-40c4-4cd4-aaad-c1bbe94cc197", "sighting_of_ref": "indicator--e73e97c8-852d-45e2-a292-ecacbd910e5d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e23b39b-380f-4225-9b10-0f4f3e53f06d", "sighting_of_ref": "indicator--9d7d137f-3b27-4dd7-994e-76014bf80b0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92901de0-13e0-4227-8fd8-52166d6c5d60", "sighting_of_ref": "indicator--9d7d137f-3b27-4dd7-994e-76014bf80b0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e10837-7cd5-4374-b8ee-9042d7b7e346", "sighting_of_ref": "indicator--bae447fe-b4cc-4e2a-a152-bf3ed3e5443c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcf4436-8192-45b1-b701-39c5ebfbf80b", "sighting_of_ref": "indicator--b4fe5268-a4fc-442f-b9be-bb7ca5b8d1f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d796ba13-0e79-4212-8ae2-47456b66de58", "sighting_of_ref": "indicator--7d2b462e-1a2b-45f1-8eef-fd0ce04bd2b8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853d0c61-04cf-4de2-a5f8-fd2bc6f3a46d", "sighting_of_ref": "indicator--9eddf63c-e5d1-4425-9a59-9da6675788f2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ce6382-9cfe-4736-9d82-f9b309ca3488", "sighting_of_ref": "indicator--9eddf63c-e5d1-4425-9a59-9da6675788f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7646d662-0387-4ce5-ac79-985c151a1e4c", "sighting_of_ref": "indicator--d8afb686-e390-444f-b261-8aefb1648727", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc37115b-802d-40c4-ae6c-f2534a90b835", "sighting_of_ref": "indicator--03fefa71-918c-46ea-8eaf-5f8197f7b62a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb55ffb-7ecc-47ec-af1a-12a21b7a1d3b", "sighting_of_ref": "indicator--7a380f9c-e3f5-4758-933c-c74319fd41d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c3521c-ad27-4fc6-a068-ce4e74bed87d", "sighting_of_ref": "indicator--7191c593-eb0b-4b97-96d9-6cdbcb267a83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7cf57f-4c78-4479-a8a2-daa1eb9e35c8", "sighting_of_ref": "indicator--7191c593-eb0b-4b97-96d9-6cdbcb267a83", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12bae67-7c12-47be-ad8d-1cacb950ebfa", "sighting_of_ref": "indicator--3bd4658e-6451-44f8-897c-85d014e489dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83905ee6-4962-4a5e-bb7e-1cf790298865", "sighting_of_ref": "indicator--3bd4658e-6451-44f8-897c-85d014e489dd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c42e3ab-cb61-44aa-becf-7f9e97352070", "sighting_of_ref": "indicator--c2445908-0c44-4910-afa7-40ebf7a07365", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc68409-c33e-4a49-93e4-d3648d730ac5", "sighting_of_ref": "indicator--c2445908-0c44-4910-afa7-40ebf7a07365", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320fa32d-966b-4423-b447-76baf17ad3b2", "sighting_of_ref": "indicator--14229328-ac6a-4530-bd8f-371ac6069c36", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36d3b5-27d6-47cc-b4da-b455492b1f29", "sighting_of_ref": "indicator--14229328-ac6a-4530-bd8f-371ac6069c36", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa29eb57-68f3-49f8-ad7c-624a54f017dc", "sighting_of_ref": "indicator--6e9c628c-6af4-4624-8ca4-062ba4d31242", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a9d82e-69cd-42c6-a6e7-e42648f1d824", "sighting_of_ref": "indicator--6e9c628c-6af4-4624-8ca4-062ba4d31242", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f2b480-98fd-4ca8-817d-4731cc43c8f6", "sighting_of_ref": "indicator--23538205-dd8f-4e2f-a380-d625672668d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e014281c-a955-42cd-9fe5-88498decee10", "sighting_of_ref": "indicator--c529b13e-79ee-40ec-b8e9-1df732d94c77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461413f9-911b-45b1-b49e-4e767638687a", "sighting_of_ref": "indicator--c529b13e-79ee-40ec-b8e9-1df732d94c77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e612a6-f007-4125-b7e0-edf28a3151c9", "sighting_of_ref": "indicator--1fff29cc-31bb-43e7-88ee-c9534f7e1b5a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66883905-8f7d-4914-a8c9-033984d56ebe", "sighting_of_ref": "indicator--1fff29cc-31bb-43e7-88ee-c9534f7e1b5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9d07ab-0b1a-444e-8da8-e3df57596565", "sighting_of_ref": "indicator--acd8bbda-5d93-46e6-a7c5-7b847359af6b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c663af09-3ea6-4a2c-ab2c-db5bb73d901f", "sighting_of_ref": "indicator--acd8bbda-5d93-46e6-a7c5-7b847359af6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5e5c32-812c-4ebe-a340-b2c50591d5a6", "sighting_of_ref": "indicator--2f553213-14cf-4e66-9dca-71bf7b99d6d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440d1aa4-d673-4fac-9082-bc7c6405d1b1", "sighting_of_ref": "indicator--76a06ac1-6bea-428b-a679-df1ff8521300", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac75033-26db-4338-92ac-91539c4af1e7", "sighting_of_ref": "indicator--76a06ac1-6bea-428b-a679-df1ff8521300", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50db5fa7-ebca-44a4-9e48-a6d765bc16d0", "sighting_of_ref": "indicator--3e6881b0-790a-42bb-9be2-a6fe76fb8687", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ee8cce-ada6-45bc-8adc-7a563241f28c", "sighting_of_ref": "indicator--3c15d846-2579-44e9-b51b-7671a861ffc3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31a52ce-a7a1-46fa-90f3-cb2f40560de9", "sighting_of_ref": "indicator--3c15d846-2579-44e9-b51b-7671a861ffc3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90749382-adcd-417f-acc6-6bc39e17938c", "sighting_of_ref": "indicator--68de937e-93c1-41f1-a112-1e2d70142e63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2bf8ca-56bb-4fd6-83d0-902c849d4330", "sighting_of_ref": "indicator--68de937e-93c1-41f1-a112-1e2d70142e63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f4f335-43d2-4903-94f1-4a5a55265ccb", "sighting_of_ref": "indicator--68173b40-e307-46a3-930e-1de1609f2ef9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce268bc5-a38d-43e2-87e7-be27bded7756", "sighting_of_ref": "indicator--c76688f7-fc81-44d5-a0a3-d17e67e8780b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef4c127-4f14-4a70-a05e-4b8e213bb040", "sighting_of_ref": "indicator--2825e8b2-1b15-42ac-a819-440f9210a73e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b69de4-3310-44c3-bc5f-bc1b9adba4a8", "sighting_of_ref": "indicator--518a5460-1cb7-4436-9671-4264d9123b6e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c482ccee-d1c7-4fb9-a2d5-ef40619c775b", "sighting_of_ref": "indicator--b4c95fae-cf18-4f3f-87c5-cf8012893f5f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ad89fe-4de8-4565-9398-07b54a0f76b2", "sighting_of_ref": "indicator--82e833f9-126b-4884-afe6-285bf04e6897", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137e8ca2-b369-4a51-9b7c-4094b79ee722", "sighting_of_ref": "indicator--c57012cb-adfb-4528-9daf-e2b921a4c57b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8158107-7fdb-4afa-bbe2-6acf55108ef8", "sighting_of_ref": "indicator--04d026a5-7596-4bd3-963c-8b6ca53f9251", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea4eb64-c06f-4623-84d5-5302a721a615", "sighting_of_ref": "indicator--04d026a5-7596-4bd3-963c-8b6ca53f9251", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1264925-f40f-4332-aced-fabab14241e9", "sighting_of_ref": "indicator--b6b54898-0f74-4d00-87d6-1f38742abfb0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd277f73-a83b-4d7b-b0a8-ecc86f884942", "sighting_of_ref": "indicator--b6b54898-0f74-4d00-87d6-1f38742abfb0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc1f987-a838-425b-adbc-f14b3a6c13bd", "sighting_of_ref": "indicator--5e370cd9-bfdf-419a-b5c6-f1f70c4f3a63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f772ccf-1368-483f-bddf-c5ef68a2a47a", "sighting_of_ref": "indicator--5e370cd9-bfdf-419a-b5c6-f1f70c4f3a63", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f247f815-1ef0-4919-b1cf-cb3fb24887b0", "sighting_of_ref": "indicator--4e3ac632-ba14-4859-acf2-8fe12ae8875e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6d101b-a70c-4288-8384-e9a04992931a", "sighting_of_ref": "indicator--4e3ac632-ba14-4859-acf2-8fe12ae8875e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13884eb6-e266-4634-89ef-a42e634d92d2", "sighting_of_ref": "indicator--7feccec2-aa32-4653-8d49-499c1ea4f495", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c810ecf-ebb6-41fe-b35d-730b82c3bb60", "sighting_of_ref": "indicator--5ff4cacc-af80-4f8c-b602-476a41906d10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef901e9-a87d-4b83-8065-7fcf869d8eb3", "sighting_of_ref": "indicator--5ff4cacc-af80-4f8c-b602-476a41906d10", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab934e33-381c-4ad2-80f3-7843b18cac5d", "sighting_of_ref": "indicator--f7fc74e8-a419-4bea-8713-4c9355825db2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0913e345-3b09-4c2e-90b1-ad3acd761163", "sighting_of_ref": "indicator--f7fc74e8-a419-4bea-8713-4c9355825db2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a1d335-c54f-446d-a6a1-2b968797b78e", "sighting_of_ref": "indicator--bb20d865-5221-465c-966d-e425afd25c01", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b88bd2-1a09-4f2d-958e-93e98da5903d", "sighting_of_ref": "indicator--bb20d865-5221-465c-966d-e425afd25c01", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e504b57-fef5-4468-8763-00f6f6c0e3fe", "sighting_of_ref": "indicator--3a08edb2-0ac8-4b50-a42a-c71cbadc2dcf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbf6eca-ef69-451f-900a-18dd7ae658b6", "sighting_of_ref": "indicator--3a08edb2-0ac8-4b50-a42a-c71cbadc2dcf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fd17d5-a299-4b43-89e7-91ec2785fbf9", "sighting_of_ref": "indicator--b203431a-4dee-479b-af64-a99ab4668281", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c053b33a-483b-413a-9043-783f02f611bc", "sighting_of_ref": "indicator--b203431a-4dee-479b-af64-a99ab4668281", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492a8188-607b-4fc2-8b14-30846aee35a7", "sighting_of_ref": "indicator--a98e07c4-9d47-45b2-aef4-6b5a04e1a537", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6a464f-b4e9-450b-bdc6-23df58651d4e", "sighting_of_ref": "indicator--a98e07c4-9d47-45b2-aef4-6b5a04e1a537", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1561e2-57b1-4330-9634-de093c157bac", "sighting_of_ref": "indicator--231fa077-044c-42da-a712-1a62f6802679", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc326a2-37ce-4c5c-aece-6a12d650b236", "sighting_of_ref": "indicator--5b100d1f-e939-4037-b6ff-3e37cd11160e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d65fd3-ddce-4cf2-9689-37beb8279fc4", "sighting_of_ref": "indicator--5b100d1f-e939-4037-b6ff-3e37cd11160e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfe99f1-b662-48ed-85e1-fbfb696cf082", "sighting_of_ref": "indicator--7ab5ba1b-c854-4c5b-9b49-87deefb8a580", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367ca446-47c8-4a90-a4e3-442748cf4da4", "sighting_of_ref": "indicator--ed356de9-3e63-454b-b7f8-930f31354d45", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f495d7-56fa-4a40-8691-397620503e77", "sighting_of_ref": "indicator--0d3ec35d-e67b-4356-b457-17e2f777f3d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f2e65b-1cd0-4339-8577-80773a21a903", "sighting_of_ref": "indicator--af0be6f0-46bd-4ee8-89be-69955e2f7482", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375187ee-d817-400d-901d-5b2d07477417", "sighting_of_ref": "indicator--af0be6f0-46bd-4ee8-89be-69955e2f7482", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8f91eb-a367-41eb-b298-9c96297cee3b", "sighting_of_ref": "indicator--f4bb8dfc-3a09-4ca3-828b-1721e884477c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4a5af4-8ef0-4239-b6e4-72bcf295410a", "sighting_of_ref": "indicator--8d3e5180-6e9c-49dc-a777-809110f093ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1b9e7-6f0a-4cb8-ab9b-0491edd3e3be", "sighting_of_ref": "indicator--b6aa5e66-5b75-4218-9c18-a5c4a097a5d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758735f7-7dea-4063-9fae-32cc383c49fb", "sighting_of_ref": "indicator--2c643574-0a75-450d-ac43-bab7a32b6811", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc665a5c-2983-4d85-920e-f287ebcaf708", "sighting_of_ref": "indicator--ae729872-56e5-41fa-bf87-ff92cdcf0543", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e27041b-0946-4460-b503-03be9babc8e4", "sighting_of_ref": "indicator--ae729872-56e5-41fa-bf87-ff92cdcf0543", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc86105c-07a9-4025-a57d-361b31268519", "sighting_of_ref": "indicator--37d63ad1-3a87-49de-b985-f7dac8b027cd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69b3df9-2f69-4d86-bfb7-256b22318855", "sighting_of_ref": "indicator--37d63ad1-3a87-49de-b985-f7dac8b027cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b59a68-06db-4674-bf24-9d5f06f4817f", "sighting_of_ref": "indicator--e0df7cbd-9f4b-417a-9a33-472d4c6a7f7c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7939babb-771c-4b70-8f2c-b006727beffa", "sighting_of_ref": "indicator--78b019a8-b864-41f3-869a-47bd1d53e9f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f596cb0e-924c-4fca-b94c-f55718e582ef", "sighting_of_ref": "indicator--e0e2e7e0-8889-4ed5-81e7-499a0c365065", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa91109-69b8-40fa-b67c-3c2c70740bbd", "sighting_of_ref": "indicator--e0e2e7e0-8889-4ed5-81e7-499a0c365065", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f1fe04-948a-4830-80cc-78a741cb5a23", "sighting_of_ref": "indicator--eb24864f-bd37-4bf7-af9a-36487e617e18", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52df699b-9ab1-45cb-9d87-a6e9757a4de7", "sighting_of_ref": "indicator--46f18a3b-a9cc-4d9b-b7de-1af11b9ce3a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb1b1ee-7851-414b-8530-e3feb9987dea", "sighting_of_ref": "indicator--46f18a3b-a9cc-4d9b-b7de-1af11b9ce3a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc2376d-9fa0-4592-8a6a-2727dcd55230", "sighting_of_ref": "indicator--e5c6f000-4466-47d4-9f1f-c13ca1e87e09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e473b8-4e46-4e24-9ffa-e4082771d400", "sighting_of_ref": "indicator--a06a69e4-aaac-4767-aee7-99d0e8eb2943", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d633a547-c71a-4bca-92be-6903eb3af6b2", "sighting_of_ref": "indicator--a06a69e4-aaac-4767-aee7-99d0e8eb2943", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3883698-f5a9-4042-983d-e749cabd05da", "sighting_of_ref": "indicator--46550da6-ee6e-4b5c-9348-a09a2fd38a1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd97d24-1121-4fdf-8083-6b541eb98f59", "sighting_of_ref": "indicator--46550da6-ee6e-4b5c-9348-a09a2fd38a1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6bb2d1-da67-4821-a998-52452da380ae", "sighting_of_ref": "indicator--b8dd7c90-531f-4d3f-9927-dc2263e76240", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6beef05-f785-4b68-ab47-a449aa3b7ed9", "sighting_of_ref": "indicator--b8dd7c90-531f-4d3f-9927-dc2263e76240", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde0a0c7-34ca-42e0-84e0-51f409cfbb53", "sighting_of_ref": "indicator--d928ebb5-3d47-40ad-9871-f2032a8e2e33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0060a152-0572-4af0-bf1c-fd77a53e4ee7", "sighting_of_ref": "indicator--d928ebb5-3d47-40ad-9871-f2032a8e2e33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7669482-1733-425f-b997-a8f35ad47fa4", "sighting_of_ref": "indicator--b6a2752d-afed-4320-88de-5250607f537f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab3fa1-07b4-4bba-9899-c286b90cfa78", "sighting_of_ref": "indicator--b6a2752d-afed-4320-88de-5250607f537f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2356f5ee-cd27-4c1e-94f8-31e98bc660e5", "sighting_of_ref": "indicator--928c6c23-a370-4a42-8e3d-5edfb07a4914", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87269e2a-784e-4b99-acf2-ed172ddf1176", "sighting_of_ref": "indicator--928c6c23-a370-4a42-8e3d-5edfb07a4914", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088202e9-79cc-4c64-91ce-6b3cfe31713d", "sighting_of_ref": "indicator--1b83dbc7-655d-4bec-9ddf-81e3e46ac33b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f14ce5-9aad-4473-914c-9092ac28f531", "sighting_of_ref": "indicator--1b83dbc7-655d-4bec-9ddf-81e3e46ac33b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159a9b4c-68d2-48bd-a1ce-c26c2e85e6ba", "sighting_of_ref": "indicator--674b3ef4-ef82-453c-8e09-c6595ef986be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ea6f6-119c-4526-9ffc-a435e7c95874", "sighting_of_ref": "indicator--674b3ef4-ef82-453c-8e09-c6595ef986be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d29714-eb9d-4640-9ada-853ac8ce09d4", "sighting_of_ref": "indicator--41c9c23f-9c14-4645-b5f0-c15d6f75d33c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c88c51b-647c-47b0-8e76-7bd46cd1dc3a", "sighting_of_ref": "indicator--f9215ece-08bd-41a5-b943-a6669b45c268", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ec1d70-839f-4230-ae37-4c3031212254", "sighting_of_ref": "indicator--f9215ece-08bd-41a5-b943-a6669b45c268", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4cfa19-e1e5-4da8-8158-994ea1ea6c5f", "sighting_of_ref": "indicator--208a0552-ffed-440f-8b6b-ef8d5be5f90a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7d7586-1949-4bb0-ad6d-2cf24a04e283", "sighting_of_ref": "indicator--208a0552-ffed-440f-8b6b-ef8d5be5f90a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e96da26-242f-4460-9966-296866ebe053", "sighting_of_ref": "indicator--9be54477-48b8-43ab-b449-2b6850c9a53e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efff76a4-dc09-4995-9ac8-edcc25a195ea", "sighting_of_ref": "indicator--331373a9-e07b-442a-98cb-632744a023d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bd9151-b4ff-4293-8625-60b153ebc433", "sighting_of_ref": "indicator--ca85d197-0456-407f-a690-6c5bdfc769ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0360a6-c0b6-4b8f-af0b-3f83f71aa801", "sighting_of_ref": "indicator--ca85d197-0456-407f-a690-6c5bdfc769ae", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e337d16-0c48-4295-ab05-5f3bcae8b4e5", "sighting_of_ref": "indicator--7f2dc40c-90e8-4cfd-883d-900826c88cf8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3081fc01-25e3-4c5a-8035-ab036149eb79", "sighting_of_ref": "indicator--b5f5d7c9-fea4-46a6-a676-d3b4ce8ef3fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6323fbd2-2f36-4bdd-9630-bb582dbd6f80", "sighting_of_ref": "indicator--d1ff63a0-b211-4ee4-95ee-05726011162d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f066a6-34dc-4b23-a4ed-55fe3dc91f1d", "sighting_of_ref": "indicator--fc9f0132-a3e8-4b58-8d02-a08357ac8460", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7dacb5-6661-46f4-acfc-17959b5ba531", "sighting_of_ref": "indicator--fc9f0132-a3e8-4b58-8d02-a08357ac8460", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0672b6-c243-45ac-90fe-32b1cf3fd705", "sighting_of_ref": "indicator--4a8abf8f-3ca8-47bf-8b8a-5640ddf4c084", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306aafa4-e617-4550-9c83-c4978bd9e0fe", "sighting_of_ref": "indicator--4a8abf8f-3ca8-47bf-8b8a-5640ddf4c084", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b30e5-47e5-445f-85f0-735a91b7f7c4", "sighting_of_ref": "indicator--7180e4c4-46ce-48f7-ba88-2f0f070d15e2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71895b2-9c53-474b-ac11-5872d5f043ec", "sighting_of_ref": "indicator--7180e4c4-46ce-48f7-ba88-2f0f070d15e2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b927ad8-0555-442d-acb2-ed8f88eed531", "sighting_of_ref": "indicator--fb6f8d54-319b-4e20-bf1e-a668906a40ff", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e84b7d1-4b3e-49d9-a851-7e5c75178914", "sighting_of_ref": "indicator--b9e9bb25-715e-471f-9061-906d8a4cdff8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298f7073-56eb-45ce-b906-22e5811fe7f5", "sighting_of_ref": "indicator--05a68ad1-875a-480a-ad06-b87e927c07fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073bdbb0-7326-43bd-9deb-d23109c6ee6d", "sighting_of_ref": "indicator--05a68ad1-875a-480a-ad06-b87e927c07fe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31af371d-c4c2-489b-b545-a42ce4489034", "sighting_of_ref": "indicator--ef8613ab-3138-4ef1-99ae-3d897a11159b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78f8dbd-cfba-4a61-bba0-2c8fe2ddcd03", "sighting_of_ref": "indicator--ef8613ab-3138-4ef1-99ae-3d897a11159b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b724a2f-ea86-4631-ba6f-cdc834cbb03a", "sighting_of_ref": "indicator--3777f0f4-3544-4a37-92ce-fea2bf7808bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4806a9e2-4bf3-4a3e-a9bc-f0ca9002514c", "sighting_of_ref": "indicator--3777f0f4-3544-4a37-92ce-fea2bf7808bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d483b031-b79c-42d7-a9d7-698a78ec331b", "sighting_of_ref": "indicator--a2b20acd-b9b7-40a6-94a1-7cd055f96b81", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc9f951-e6b5-4c73-abd0-113102d40f1e", "sighting_of_ref": "indicator--a2b20acd-b9b7-40a6-94a1-7cd055f96b81", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e312d0e-ba61-47a9-9403-64fc6f5e6dfd", "sighting_of_ref": "indicator--d81754f5-0c4d-496e-82e3-5c7e32807f30", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40212365-9440-40a2-8d5c-07524ff57d75", "sighting_of_ref": "indicator--d81754f5-0c4d-496e-82e3-5c7e32807f30", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf5b795-9df9-4446-96fc-8e3de184c75f", "sighting_of_ref": "indicator--e2f89808-c57b-4eeb-b163-8dd4d410c70c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4952d1f4-f8e8-4211-acde-d6be6e1249ca", "sighting_of_ref": "indicator--e2f89808-c57b-4eeb-b163-8dd4d410c70c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81892327-8137-422e-b4f4-84a2ecb05e64", "sighting_of_ref": "indicator--537df06c-3a92-4fe6-9d2e-3c53416fe249", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9572c8-026b-4ce0-9fd7-b06c73adf15a", "sighting_of_ref": "indicator--537df06c-3a92-4fe6-9d2e-3c53416fe249", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2cb6b9-56c1-4f51-87bc-415aa821349d", "sighting_of_ref": "indicator--4be957ef-fae6-4c88-b01d-49109f37a30d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31e8029-a822-4ada-9700-0c51da234e7b", "sighting_of_ref": "indicator--6ec9f1ce-dfec-4a8a-9940-5ed240b09b92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433ec33f-7e02-410c-902f-a30932f738e5", "sighting_of_ref": "indicator--6ec9f1ce-dfec-4a8a-9940-5ed240b09b92", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732ecd94-4ffc-45b0-b1d3-c30feb722fd0", "sighting_of_ref": "indicator--28b8cbbd-7f45-4c34-aa8d-746ccbf9ebd3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3ac519-3684-44f7-9963-14a44bdda4c7", "sighting_of_ref": "indicator--28b8cbbd-7f45-4c34-aa8d-746ccbf9ebd3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a9a340-cdf6-49b4-9748-d46e27732f9b", "sighting_of_ref": "indicator--53bf2342-e585-4fcb-ab5a-1418747bf761", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e28944-de6a-4d6d-b2dc-52a7b18a43b3", "sighting_of_ref": "indicator--53bf2342-e585-4fcb-ab5a-1418747bf761", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b972356-b157-4f40-90b7-85303e89aa49", "sighting_of_ref": "indicator--87838447-dd0d-44e8-9c4c-c477a36ac8c5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e138678-dba9-4ffb-b1a6-8a1198382990", "sighting_of_ref": "indicator--c9129d2a-9f0f-40f8-aa18-fdf0c1fb55ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88507362-a07e-41ee-a895-47259e720bd8", "sighting_of_ref": "indicator--f71e5dd7-66ee-4805-bb35-9e1b30407d8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903e323f-26f9-4102-a331-e590ae65461b", "sighting_of_ref": "indicator--f71e5dd7-66ee-4805-bb35-9e1b30407d8a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e95abc-d2b0-456e-aa83-88816e865f6b", "sighting_of_ref": "indicator--97882b07-2a48-45fa-acd7-b13520b1caf5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec196f1-1898-4ebb-8ae8-d7481c7182f4", "sighting_of_ref": "indicator--97882b07-2a48-45fa-acd7-b13520b1caf5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05fbf39-ce80-4063-b083-ec2606893725", "sighting_of_ref": "indicator--07952723-5c53-45b5-b188-63cdeb94962a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c44350-fe7e-445d-9328-feb677df0de9", "sighting_of_ref": "indicator--4891bb9a-90f3-4e99-a609-ffe7413a1680", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c80f9c-8085-4cf1-86f1-880e1e04f098", "sighting_of_ref": "indicator--4891bb9a-90f3-4e99-a609-ffe7413a1680", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96219cf4-84a1-4322-92b1-0b3c0ecf022d", "sighting_of_ref": "indicator--fd175baf-9ef9-430e-bee6-ca9865fcb0e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86ba3a1-3a66-4148-98cb-11216a2957bf", "sighting_of_ref": "indicator--515f4e13-1205-4113-a9f0-b6b228e972ad", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18f91de-1866-4d90-82a6-7284dcb81d20", "sighting_of_ref": "indicator--d5de1ab3-bbb3-4537-a9d0-8c2c0868ac09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d8530b-35b3-4acc-aabe-c988d97f05fc", "sighting_of_ref": "indicator--d5de1ab3-bbb3-4537-a9d0-8c2c0868ac09", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a83ec0-4386-4588-9c37-7a22c9cc1441", "sighting_of_ref": "indicator--2ed10870-f17d-43fa-aade-950dd0587719", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9202de-7e82-46a5-a5c5-58bd28e477d5", "sighting_of_ref": "indicator--2ed10870-f17d-43fa-aade-950dd0587719", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36905094-bead-4533-a0f7-1c05df82b16e", "sighting_of_ref": "indicator--bb7a514f-c55b-452f-9a45-15989a26ac33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5533056-3765-4fe5-97b4-68f514844b73", "sighting_of_ref": "indicator--bb7a514f-c55b-452f-9a45-15989a26ac33", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f75e73-3ae9-4e63-86f4-9cde9a6dfb35", "sighting_of_ref": "indicator--a910ab30-ec5f-4176-b3ae-add18000f84b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d80f3f-7a6b-4d2b-ba6c-994d62d71688", "sighting_of_ref": "indicator--a910ab30-ec5f-4176-b3ae-add18000f84b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d904f49a-ca4c-41dd-8a96-02784dda5a6d", "sighting_of_ref": "indicator--9f05b16d-3865-4cf8-beed-1d16b1fdbb7d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5224b35d-4eec-4052-8fd9-18447395a04d", "sighting_of_ref": "indicator--9f05b16d-3865-4cf8-beed-1d16b1fdbb7d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03605bd9-fd6e-45a6-b7cf-5262e98793f1", "sighting_of_ref": "indicator--6f254c18-f6ea-4d64-99a8-9f6c355f221f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1707598-d1f7-4404-8c0f-8e59b73d35f0", "sighting_of_ref": "indicator--6f254c18-f6ea-4d64-99a8-9f6c355f221f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d129afd2-317c-4169-bff2-a3968f5bffa1", "sighting_of_ref": "indicator--ac427931-48d4-45f8-8400-f4bf90269478", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec89b8fb-d636-42e8-880e-412cdd64c170", "sighting_of_ref": "indicator--ac427931-48d4-45f8-8400-f4bf90269478", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31d7c67-54cd-4660-9ec3-0481d00a0639", "sighting_of_ref": "indicator--8182b8c5-9ad6-4f30-85ac-a5be924e7667", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6672de4-318a-4c7b-a4fd-f50ebcdc8b52", "sighting_of_ref": "indicator--8182b8c5-9ad6-4f30-85ac-a5be924e7667", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc3c627-8bf8-47ce-a5b3-61bf371323af", "sighting_of_ref": "indicator--4a613ae3-f310-4974-a852-ba1222b282a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545963ba-2e78-4061-992c-3bf130485e30", "sighting_of_ref": "indicator--4a613ae3-f310-4974-a852-ba1222b282a6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce770539-3d22-46e9-b630-0b1a21ccf864", "sighting_of_ref": "indicator--d196eaa6-c6d3-4a81-bedd-5673db01cd4f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41f2b2f-ab57-48f5-aca4-d4a458d46f63", "sighting_of_ref": "indicator--4c77f489-0235-4dfc-902d-2f641d67d94f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9508d8-100d-4026-84e3-0f997dc199f5", "sighting_of_ref": "indicator--3243d258-5a6c-4b0f-9457-0fe3dff08302", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06779d25-77b9-4b1b-a632-a9de02196bd3", "sighting_of_ref": "indicator--c1da931d-0386-4472-8c6a-c8819f3082a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941b094b-02f6-4a4c-9d73-7db0bb7582b7", "sighting_of_ref": "indicator--b39406c9-3387-4c26-84d5-cd1af872785a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17287fc-8bc1-402e-a8ab-69c5153a2d77", "sighting_of_ref": "indicator--ab00f442-b9ba-45be-81eb-baf8713ef613", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04621cfb-5803-4b1e-b35e-3b5777f7f104", "sighting_of_ref": "indicator--934cb7fd-e5f2-429e-845c-51258d02aa8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58292f8-e4c4-4dce-8f7f-b3b9555b8380", "sighting_of_ref": "indicator--273ad2d6-9b6c-444e-b8e5-f2bd161dc168", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e222f5-adee-4298-90c5-dbd972f7c1db", "sighting_of_ref": "indicator--47ba5e6f-7901-419c-9a1f-b3d94968a0d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97efc073-064b-4a5d-9a6c-e32d31c0f68c", "sighting_of_ref": "indicator--3984def6-bc7d-4dbc-ac2a-486c7424eae9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1143a-284f-4a2e-9785-17be55bf4b11", "sighting_of_ref": "indicator--16918353-4f3c-4ab6-8e41-ca208ea12bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c54a603-552e-4eb2-b3fe-1f330491362b", "sighting_of_ref": "indicator--d57f16bb-1fe0-4b11-a86e-cc59376a645c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d765ec3c-865d-4a65-a14f-f1a795dff8d8", "sighting_of_ref": "indicator--4e7924be-f9aa-415c-a181-a1e1c73d94f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b466283-6bcc-49a0-9a15-6f7ba51fc066", "sighting_of_ref": "indicator--4e7924be-f9aa-415c-a181-a1e1c73d94f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5589a0ff-763e-4e82-bc3e-3fece19f48fe", "sighting_of_ref": "indicator--1487b5d4-c5df-4db8-a107-5986cb2e7819", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18de099-025b-4f82-91e1-2b2c0feffb42", "sighting_of_ref": "indicator--bc139c1b-e800-4c6b-b064-37936034a522", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4186baa-b56d-4be3-a968-58a8e021f639", "sighting_of_ref": "indicator--0c2385d8-67e2-447f-b3fd-26f2ce909f08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15502819-18da-4a7a-8be7-8348de434316", "sighting_of_ref": "indicator--955efa4e-3fee-464c-bfe3-3066672ff6af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf816193-50b7-4496-9d96-d33fc46384b8", "sighting_of_ref": "indicator--1160b80d-248e-4b41-8b53-762cfaae2e25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdad155-45da-485c-969e-762ec2551c5c", "sighting_of_ref": "indicator--740404e2-ac41-4f81-93ca-5485400c65b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3930a69-d076-4433-a073-d931f0d23814", "sighting_of_ref": "indicator--740404e2-ac41-4f81-93ca-5485400c65b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2b02fb-3c88-4a22-8ace-7f46867550df", "sighting_of_ref": "indicator--740404e2-ac41-4f81-93ca-5485400c65b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87449e93-a310-4ea0-9fbe-0a9979c23ee1", "sighting_of_ref": "indicator--cb18746b-6d08-40d8-b23d-1045c8b4b6ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cca2eed-3056-44fe-8171-dbd7bce87885", "sighting_of_ref": "indicator--cb18746b-6d08-40d8-b23d-1045c8b4b6ef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c598d60-a0cc-4fb5-ad6b-82af3d89c80d", "sighting_of_ref": "indicator--552ae1b2-1de1-4ef6-8623-4e5d0ae92596", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3067b9cd-caaf-4b67-a6fc-539bb62466ee", "sighting_of_ref": "indicator--552ae1b2-1de1-4ef6-8623-4e5d0ae92596", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f827cad2-6a65-4718-b6c1-29c9a84ab757", "sighting_of_ref": "indicator--552ae1b2-1de1-4ef6-8623-4e5d0ae92596", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b58ceed-0552-4215-87b8-1bdfa47d89a5", "sighting_of_ref": "indicator--f2c57b57-5e3a-4dea-8365-ad9c70b06aa4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d70529-c6f0-416d-a67d-a8ff45589932", "sighting_of_ref": "indicator--f2c57b57-5e3a-4dea-8365-ad9c70b06aa4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1669fa6d-be4b-43b0-ae2b-93fb1ac21f83", "sighting_of_ref": "indicator--f2c57b57-5e3a-4dea-8365-ad9c70b06aa4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03994805-bb72-4d6c-a17f-3b52abb88364", "sighting_of_ref": "indicator--c9070786-a060-4af0-b72e-6010ac7021ce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c3aae-d7b5-4d96-9b59-23aa84d5e7bb", "sighting_of_ref": "indicator--c9070786-a060-4af0-b72e-6010ac7021ce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6898b595-d687-4390-907a-667935253611", "sighting_of_ref": "indicator--c9070786-a060-4af0-b72e-6010ac7021ce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ea1bde-aacc-49a2-b744-92e41a1b4991", "sighting_of_ref": "indicator--b30ca4ae-6fb5-430c-8280-9262eaf6f89d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1f371a-3b27-459e-8e7d-a69a2686bcbb", "sighting_of_ref": "indicator--b30ca4ae-6fb5-430c-8280-9262eaf6f89d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc8faa0-eadc-4488-9c72-407956f6bdde", "sighting_of_ref": "indicator--b30ca4ae-6fb5-430c-8280-9262eaf6f89d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d4e54d-0cab-4f44-a4e9-9787b39a3a9b", "sighting_of_ref": "indicator--740a7ef2-cc6f-41dd-b107-a72f8b541e7c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fb436a-1feb-4d9d-8944-9f92df5a2b07", "sighting_of_ref": "indicator--1a6b8bc7-4d48-406d-aaa0-87a34201c73a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b105bc87-e5d6-4c96-a5eb-eafca7684e82", "sighting_of_ref": "indicator--ce74006e-820c-4206-9aae-218e4efb18bd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2ee6d9-022c-43d3-9f4e-b4349f0cfc17", "sighting_of_ref": "indicator--0a6986f4-d6b5-422c-8860-9634a9ffb48a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ef9304-53c4-49ef-9c69-3be5eb596522", "sighting_of_ref": "indicator--6621f333-41e9-41c1-8093-4bbcf3d9240c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae6c9ed-9dd6-47c4-938a-92ae64433901", "sighting_of_ref": "indicator--669b225e-2a54-4b1a-8cf6-03e9ab382205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe57bef9-8e25-43bd-9466-ded4a9c0e639", "sighting_of_ref": "indicator--31e5bfd9-5d36-4a61-9966-8ae3b8b08132", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900f9654-4727-4083-bbba-d99c92fac964", "sighting_of_ref": "indicator--11b06374-714b-4e83-b55c-a66055ced9a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b329bb9d-c4f7-4897-8e90-7bea65755a65", "sighting_of_ref": "indicator--b4693053-6a31-49c0-848d-187d86d607c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e84e9d-80f9-497a-a872-efb2c93e8c43", "sighting_of_ref": "indicator--1071c68f-8c86-41f9-a498-621753f0d8b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0679bf-6bb5-4002-8572-df99cb8f37f1", "sighting_of_ref": "indicator--242a1b0b-bf9c-4ee5-9f04-d3fac05491ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f64320a-47fc-40cf-9422-f5913e95b77e", "sighting_of_ref": "indicator--f31f4993-7a21-4f7c-825b-9b8b8659b0e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc8ccc2-4204-4f6c-9471-055d9d65075d", "sighting_of_ref": "indicator--01d65db6-2ff9-47fc-a355-be609d2b9838", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2bd005-5be0-4f82-b859-16ea46328e51", "sighting_of_ref": "indicator--547f44de-378d-4acd-9872-59d98a3ae1f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d26d4f7-d0d7-41ef-88f9-5f280f57a504", "sighting_of_ref": "indicator--29d949a1-e028-461d-b83f-df3ce0279be5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f768ac-d751-4ec4-bb54-b058c8d33d2d", "sighting_of_ref": "indicator--86bdedb9-3887-4b78-901c-7fa6a4b23afb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8251d5b5-fb4d-4c9c-90bf-29eb5f8a03bc", "sighting_of_ref": "indicator--53ff8062-a3bb-424e-bd1e-ed4b10ebf1ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7159562-d4cd-4581-91da-9944ab07e688", "sighting_of_ref": "indicator--32df9cd4-5393-488c-824b-9e9a61fbc5da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b70e70-0e22-4038-96ad-75ef29dcadb8", "sighting_of_ref": "indicator--d911ccc8-4756-400a-9e02-0505a486e905", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92f586a-5208-4a80-a6c6-c2c9f0274843", "sighting_of_ref": "indicator--bc079b2f-dbb8-4d37-8826-ee89741ebc66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274cd945-5303-49a0-a616-9dd6acf565fa", "sighting_of_ref": "indicator--724c777a-b002-48e3-96e5-d86c913e81b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b05b2f-965b-4bf4-b1e7-c32369a71bdb", "sighting_of_ref": "indicator--ba60ddd1-e8cb-4964-9d6d-c7a84ea7818c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a16365-4e01-4250-8824-999b9e472cd3", "sighting_of_ref": "indicator--b917b758-4c9f-4272-bbda-87e741ba6a47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59659f7b-b0ec-455e-a156-2fce9fc92e42", "sighting_of_ref": "indicator--a8f93a2d-92bf-4208-b987-42ffc99b1755", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b065abc-902b-4cf9-950b-e9d34ed4c3dd", "sighting_of_ref": "indicator--97b38d63-eb36-42b3-a669-65326f9aed98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe855bf-5786-445c-a2e8-bbaa560ab964", "sighting_of_ref": "indicator--568bf1c0-b1a7-4cdc-ba74-3857e7e9e073", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e0b5ff-a968-4983-8de9-620535186bc2", "sighting_of_ref": "indicator--45c6c72d-9b69-463d-99df-5b86c10c7eed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa7d5f0-a773-480b-9ff9-ef2fe11214c1", "sighting_of_ref": "indicator--00cb689f-c0ef-487b-8aeb-52299ce38c13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dcb0e5-ce5c-4e46-ab26-29ae4435b152", "sighting_of_ref": "indicator--1c83748d-f3a0-46e1-b22f-d51311bd7e8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5effb5-ac82-4f33-8020-76702104963d", "sighting_of_ref": "indicator--b722d813-51b2-4c00-8c8d-5df56ab49bf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01756d85-f217-41f6-88dd-5a072451dea0", "sighting_of_ref": "indicator--28e94cbe-243e-4643-9161-883c619c1217", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f783a7f-86e2-4322-ac52-1a5928a4e366", "sighting_of_ref": "indicator--0cdd5763-3d81-4196-8211-1b077d7dc084", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab43839-54fa-4cdf-8cef-db22e111fd76", "sighting_of_ref": "indicator--4286699a-dfe4-4299-bd6e-3faf33c5f8e4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3dea20-75ef-411e-992b-9e5effa5e515", "sighting_of_ref": "indicator--4286699a-dfe4-4299-bd6e-3faf33c5f8e4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd38f3d0-2686-4f3b-b35c-129dc1f63998", "sighting_of_ref": "indicator--4286699a-dfe4-4299-bd6e-3faf33c5f8e4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a35a4f-b89b-4814-9252-28f33ad46b47", "sighting_of_ref": "indicator--5f2a31aa-f8d5-42db-9473-4619282c46d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d520ef4-b3bb-4c47-8a51-86bfd12423d2", "sighting_of_ref": "indicator--08149d0d-09cb-4893-bc99-5294b4dd1006", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96585ec6-308f-40ff-8e2d-711b56c6b6b2", "sighting_of_ref": "indicator--08149d0d-09cb-4893-bc99-5294b4dd1006", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6f33e8-a4fa-42e3-82e6-2e67e6561c9a", "sighting_of_ref": "indicator--604e1520-b725-4d82-a394-a60698989959", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70302020-0675-471f-bf5d-5f342f4af590", "sighting_of_ref": "indicator--604e1520-b725-4d82-a394-a60698989959", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167d4ada-148d-4de1-a45d-121c54497826", "sighting_of_ref": "indicator--4c195fb5-b2a4-43b9-856f-4e2406ad36b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa29a4c-f7e4-4680-9dc3-53adcc576108", "sighting_of_ref": "indicator--4c195fb5-b2a4-43b9-856f-4e2406ad36b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaa7bcc-f59d-41e1-ab56-aede0fe42731", "sighting_of_ref": "indicator--6606b6c7-5078-4515-ba24-4312557362f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a0a4c5-34bd-4558-92b3-287ed2e6e99c", "sighting_of_ref": "indicator--6606b6c7-5078-4515-ba24-4312557362f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f429a8-e021-41e0-ab5f-739260bf45fa", "sighting_of_ref": "indicator--6b4588c3-3215-410b-ae5a-a02de98c6229", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b905f006-25b1-41c0-8d11-cad4324b3c8f", "sighting_of_ref": "indicator--6b4588c3-3215-410b-ae5a-a02de98c6229", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1fbed9-231a-4d22-94cd-7bb85543f849", "sighting_of_ref": "indicator--ecc43297-e662-4ff6-ab03-4e3dbc21f785", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107cadff-adb2-4c71-86ba-628d7afc630f", "sighting_of_ref": "indicator--ecc43297-e662-4ff6-ab03-4e3dbc21f785", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db58525-6d67-4100-9b58-53e85d93f207", "sighting_of_ref": "indicator--72e63ca9-3cd3-43d3-8eed-bca7bdb0aa37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5024b9-9dcc-4048-9fcf-5db04362a5f3", "sighting_of_ref": "indicator--72e63ca9-3cd3-43d3-8eed-bca7bdb0aa37", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b7c9c2-e92d-4e14-a0f0-17a3a9cf1872", "sighting_of_ref": "indicator--6027ff06-3b98-4fb0-87ae-103f8704c736", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37325992-f3d8-43d2-834f-938190aacaa8", "sighting_of_ref": "indicator--6027ff06-3b98-4fb0-87ae-103f8704c736", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5d5656-69a8-40a2-9907-06bbcf9fc034", "sighting_of_ref": "indicator--67749d3a-7476-4453-83ab-e539bdafbbae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb719bb-1543-4f53-9524-d08d60e7b87c", "sighting_of_ref": "indicator--67749d3a-7476-4453-83ab-e539bdafbbae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7441f70-5ca8-4817-883f-30762693b501", "sighting_of_ref": "indicator--f60a81b2-36e0-4818-aecc-d026b054c974", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe842a5-2207-447c-8cea-ce6cefc46eb5", "sighting_of_ref": "indicator--f60a81b2-36e0-4818-aecc-d026b054c974", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a2a91-a157-46f6-a25d-3d3a131449ee", "sighting_of_ref": "indicator--63ec0b60-0432-4c78-b893-8d2f8cd5507b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ac0276-61bb-4e95-b5d1-df6c91defb67", "sighting_of_ref": "indicator--63ec0b60-0432-4c78-b893-8d2f8cd5507b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a53da3-9626-4a16-ab92-884927480fe0", "sighting_of_ref": "indicator--7b6c34fc-1a18-40bb-9e77-628ca43e3757", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43e956d-9ba6-4f39-9132-98f3603317c0", "sighting_of_ref": "indicator--7b6c34fc-1a18-40bb-9e77-628ca43e3757", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d5719a-1c9e-419d-a372-c3b70bb06902", "sighting_of_ref": "indicator--b0fd5ba1-4d31-4bb6-b80a-b0257794066b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2be8a2-a73b-4934-abef-7448dc402c9e", "sighting_of_ref": "indicator--b0fd5ba1-4d31-4bb6-b80a-b0257794066b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aad3bfe-7472-41a3-9e5b-fb917d5fc7f6", "sighting_of_ref": "indicator--efb6a1db-a234-4b9f-b2b3-bcb0f5f7326a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929fba46-619b-432d-a061-baf1427fca85", "sighting_of_ref": "indicator--efb6a1db-a234-4b9f-b2b3-bcb0f5f7326a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bb09ab-7c5b-4c48-8c30-5540948c9b06", "sighting_of_ref": "indicator--53d88496-8eb0-4f50-a984-e921ea47ff99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3468374-7734-4a71-80e8-80073e84eed1", "sighting_of_ref": "indicator--53d88496-8eb0-4f50-a984-e921ea47ff99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45db135c-c2e5-40c0-a660-24d243547fff", "sighting_of_ref": "indicator--b87ae093-f3e2-4b22-87a0-e166dbca5d71", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f58c4-eb71-431c-85a2-b1e6f35bc6be", "sighting_of_ref": "indicator--b87ae093-f3e2-4b22-87a0-e166dbca5d71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df3607-1115-43da-b35a-f9b4e35ab370", "sighting_of_ref": "indicator--e20ea75d-7cc4-4c11-95aa-26e5593a37d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c63bde-69cb-4288-81a0-a270c117db62", "sighting_of_ref": "indicator--e20ea75d-7cc4-4c11-95aa-26e5593a37d2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e275bfa6-d7c6-465a-9883-37abdc8cb71c", "sighting_of_ref": "indicator--55f0f143-19fd-4747-9b29-6fec03d02cde", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bf12cd-2376-418b-af18-55209dc41216", "sighting_of_ref": "indicator--55f0f143-19fd-4747-9b29-6fec03d02cde", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99097b9d-7a80-4dd3-a649-d98c3ebc5add", "sighting_of_ref": "indicator--d7a6f658-fcf9-41b5-becf-7f08868a1a18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e5f7f8-5359-4f4c-babe-57f57002dc4e", "sighting_of_ref": "indicator--d7a6f658-fcf9-41b5-becf-7f08868a1a18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e61d83a-ceb4-486d-aeea-96499038af6e", "sighting_of_ref": "indicator--fd058cc0-226c-4df8-9b6d-b883c44b365a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e61c18-ed9b-49be-b111-dad08c963a4f", "sighting_of_ref": "indicator--fd058cc0-226c-4df8-9b6d-b883c44b365a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b19b6b-5cdc-42fe-9399-f7b0b62a8c55", "sighting_of_ref": "indicator--3db2ab50-03d7-449b-b746-0a190a164a40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa335710-f35d-434b-a5a7-a40f8d3fb056", "sighting_of_ref": "indicator--3db2ab50-03d7-449b-b746-0a190a164a40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93925c0a-26bf-4470-a4b8-c9ddb5f47db4", "sighting_of_ref": "indicator--7917bc96-dac7-4a59-8fcb-f3d6259595fc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc925b7a-51f7-4502-a06e-b03a3a010954", "sighting_of_ref": "indicator--7917bc96-dac7-4a59-8fcb-f3d6259595fc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71e8b18-501a-480a-9e86-2387140a858c", "sighting_of_ref": "indicator--1bf68c90-aa0e-4c4b-8787-a637360e88a6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44597560-f781-4f52-84a1-6173fc9715e7", "sighting_of_ref": "indicator--1bf68c90-aa0e-4c4b-8787-a637360e88a6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da141c6a-02f7-4314-b3ae-df76c12313bd", "sighting_of_ref": "indicator--c8a1d4a3-49f8-4d06-bd6f-5e3c85e1fe18", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504e78dc-4d25-4739-bcf5-2aff11369b9b", "sighting_of_ref": "indicator--c8a1d4a3-49f8-4d06-bd6f-5e3c85e1fe18", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f93b806-1f76-4083-89cc-2b95d4adc920", "sighting_of_ref": "indicator--169f056a-2947-46f2-9bc0-78a665bb09fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0f30fe-db18-425a-92f9-826c5e9fc82d", "sighting_of_ref": "indicator--169f056a-2947-46f2-9bc0-78a665bb09fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c153de-617e-45b3-b4b5-981001f8fcd6", "sighting_of_ref": "indicator--cf8f2dda-9665-4c0f-b84d-18503e034400", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62507010-734c-4a4b-935d-01cddfd0ac32", "sighting_of_ref": "indicator--cf8f2dda-9665-4c0f-b84d-18503e034400", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8058e7c8-349c-4fee-8788-fc3d6b9945c7", "sighting_of_ref": "indicator--8602fbd1-91ff-493a-9937-1c29bd86c511", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53b771c-c898-4655-8b2c-7ddf986ab2e1", "sighting_of_ref": "indicator--8602fbd1-91ff-493a-9937-1c29bd86c511", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebfa2f7-2af5-4679-abcf-331f6f4c6779", "sighting_of_ref": "indicator--f620f7b1-479f-4910-aefb-5d4ae38d5545", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b61a1c-59b7-41ae-a091-bac2143f5561", "sighting_of_ref": "indicator--f620f7b1-479f-4910-aefb-5d4ae38d5545", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba80edea-8243-4182-b8ff-d905d65198e0", "sighting_of_ref": "indicator--a7072126-14c4-4c49-b007-741b1c9f60d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803c38f9-c7cd-4664-b915-aa54cc53de1e", "sighting_of_ref": "indicator--a7072126-14c4-4c49-b007-741b1c9f60d5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33db673a-57e5-416d-977c-f2e9bc6e8eb7", "sighting_of_ref": "indicator--96aca862-da34-446f-9654-a652d48f5f37", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a022ef-69b3-4223-b632-1afd78b680a8", "sighting_of_ref": "indicator--96aca862-da34-446f-9654-a652d48f5f37", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd51912-2018-4b59-92b8-519a5fd9bf0e", "sighting_of_ref": "indicator--28893220-7eed-41dc-b6c5-557f4e5ced0f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87afac6e-b8c1-4255-92a0-d7c728594d08", "sighting_of_ref": "indicator--28893220-7eed-41dc-b6c5-557f4e5ced0f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b806b2-7440-4acb-a98f-2c556531e6c6", "sighting_of_ref": "indicator--098843f1-5256-41d6-babd-6f8edb3368a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b37cb0-6e86-45b5-b15e-a83b6dd32bfc", "sighting_of_ref": "indicator--098843f1-5256-41d6-babd-6f8edb3368a5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218d99cf-6f51-4836-b616-ead08b17f717", "sighting_of_ref": "indicator--d897083a-61e3-444d-9782-f95a7107c138", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1914ab-affe-4499-99b9-2cc9520038df", "sighting_of_ref": "indicator--d897083a-61e3-444d-9782-f95a7107c138", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f39c8b5-8baa-4059-b487-498dc0d73eb3", "sighting_of_ref": "indicator--6987f778-9033-41fb-befd-2e4e8d91b9c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a859d2-e588-4ecc-a63f-c0232a1413d7", "sighting_of_ref": "indicator--6987f778-9033-41fb-befd-2e4e8d91b9c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa6aebf-a824-48b0-a3af-2bd66410c569", "sighting_of_ref": "indicator--acf9c48c-1ea9-4430-88f6-3a24d4ed94f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eb869c-e933-445d-b442-f71a5399e800", "sighting_of_ref": "indicator--acf9c48c-1ea9-4430-88f6-3a24d4ed94f9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e8b2d0-ea53-40fc-9ee8-ad1996847bfc", "sighting_of_ref": "indicator--95aa812f-4c7d-462c-8930-232b9168e287", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba487a3e-70e9-4a54-8c7f-e7198165416b", "sighting_of_ref": "indicator--95aa812f-4c7d-462c-8930-232b9168e287", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5193661f-1611-428c-b0e4-45f25a7268cc", "sighting_of_ref": "indicator--f373b7fa-95f9-4d95-ac61-548f90d33078", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c4bb37-0906-4fbc-b4fc-bc0a3797ffc2", "sighting_of_ref": "indicator--f373b7fa-95f9-4d95-ac61-548f90d33078", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4b0c88-6490-4bbb-8af8-da7a0b2585fa", "sighting_of_ref": "indicator--46544851-0cc5-4d6c-b9a8-38f95383c590", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4187c8b0-03c3-4f79-ac62-27a3fa469d94", "sighting_of_ref": "indicator--0c099c53-2c46-44d7-b080-472703ecf0a5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f42a5-ce1f-40f2-b629-becd1a89915f", "sighting_of_ref": "indicator--ba41fa96-7a85-4fda-a290-da31821c01d6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bee5cbe-5bf3-4d8c-8660-e11ee87687c3", "sighting_of_ref": "indicator--519a9c86-38a3-4945-80b1-8c9df317ecba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a898cfc-aaa2-42aa-a86a-56774896eea8", "sighting_of_ref": "indicator--519a9c86-38a3-4945-80b1-8c9df317ecba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890231f1-5922-41bb-8268-ab680be06ffa", "sighting_of_ref": "indicator--5ecc022f-4573-4d05-b11c-979f395c4fa4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3738b91-c82b-4268-b950-d285c5dad214", "sighting_of_ref": "indicator--7d5f48e8-7d7d-4f11-89e7-2944654ee647", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1217c063-e170-447a-9c21-f96fea466d0d", "sighting_of_ref": "indicator--c9359b16-9e3d-4d72-a8c6-59125cd351a5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b18981-8551-4db1-994f-266a08cde7b9", "sighting_of_ref": "indicator--19ea0c9d-cd7a-47d2-a787-54af29f50287", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99027e5a-c594-4490-8dc7-c90c3c8b0b32", "sighting_of_ref": "indicator--d480bee7-3841-4409-923f-96efb513c15b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a05a8b-ef5e-40f6-9146-8f2a13037433", "sighting_of_ref": "indicator--de5b91d9-ccee-4cb6-82da-608e0cf071dc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fbffe6-cf46-4aee-beb1-af778844b30a", "sighting_of_ref": "indicator--d14efc13-1ce9-4230-8342-c3ef9258a4e9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5b3217-aceb-4d6a-a1a9-3e2504b79f22", "sighting_of_ref": "indicator--b04eb67f-394a-4b7f-82ce-081a83556313", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804d6fce-a963-46d8-89f2-da72b4b3e536", "sighting_of_ref": "indicator--b04eb67f-394a-4b7f-82ce-081a83556313", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb814b81-fa80-45ab-9462-c3a6a5a616ad", "sighting_of_ref": "indicator--b04eb67f-394a-4b7f-82ce-081a83556313", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeca919-e3a6-4b03-8ff1-9dc2472b8fdb", "sighting_of_ref": "indicator--8dd28b91-842a-4568-a2c1-1150193a438c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d76a7c-f978-46d5-bbbe-43e81f667f37", "sighting_of_ref": "indicator--8dd28b91-842a-4568-a2c1-1150193a438c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956f1d34-bab5-483a-bf68-0a7b7b80af88", "sighting_of_ref": "indicator--34c069f5-160a-498a-8432-7bdb4b36b83a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acbabcf-929d-4306-a925-d2989dfeeb0a", "sighting_of_ref": "indicator--1be6f6c0-35e6-4226-9828-c04a0015a5fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aba93c6-8a4d-4316-866f-891d21aafd06", "sighting_of_ref": "indicator--c543fb38-4d8e-4ba6-8e93-52663c20e953", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4634aae1-901d-4aa4-ace8-3c63ab44b4fb", "sighting_of_ref": "indicator--66eb4d6d-515a-4f7e-bfbf-a7d37907d977", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31d54d5-e46d-48de-80a0-d59ec9320e3b", "sighting_of_ref": "indicator--5639af4d-fefc-4fb0-a78f-ef52da6f4b55", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaeb5a9-ea9e-4f5b-ac99-4b018f6a38f3", "sighting_of_ref": "indicator--3b1dbe32-7475-498f-beb4-5399969e76f9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6dbe7f-76db-497d-960a-2678bc60f552", "sighting_of_ref": "indicator--3b1dbe32-7475-498f-beb4-5399969e76f9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97546f44-a197-4efa-81ff-cbc497644080", "sighting_of_ref": "indicator--31d9ddf7-fc91-4ab6-9986-794e6852d99c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266a8c7-3a8a-4b09-93b2-16c35aa2f8a5", "sighting_of_ref": "indicator--31d9ddf7-fc91-4ab6-9986-794e6852d99c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c0c4ec-3a78-489b-b2f9-db51ed8a6f15", "sighting_of_ref": "indicator--31d9ddf7-fc91-4ab6-9986-794e6852d99c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de2126-f2f3-4944-89df-ad42f419df23", "sighting_of_ref": "indicator--588071bd-ce8d-4ad8-ac53-a450396172c7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d72ae1-f1f6-45ca-8459-c8b18e608830", "sighting_of_ref": "indicator--588071bd-ce8d-4ad8-ac53-a450396172c7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438dbcdf-6f6e-4707-be62-852a83aae39a", "sighting_of_ref": "indicator--588071bd-ce8d-4ad8-ac53-a450396172c7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f53510-d175-4e66-841d-67603003fabb", "sighting_of_ref": "indicator--5c0192e7-7a67-40ff-aeac-7936c7e8e62e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6a7614-0087-47c9-9708-7a00abfd9f7a", "sighting_of_ref": "indicator--5c0192e7-7a67-40ff-aeac-7936c7e8e62e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30da2669-f373-44fa-8b36-41c72613371c", "sighting_of_ref": "indicator--6a36bd4c-5a74-4823-bae1-6b59a3b50135", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d3ddd5-526d-41f9-a072-18bd17774c80", "sighting_of_ref": "indicator--6a36bd4c-5a74-4823-bae1-6b59a3b50135", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c58337-0d48-44b5-9178-1d7cd2c1097e", "sighting_of_ref": "indicator--6a36bd4c-5a74-4823-bae1-6b59a3b50135", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b213a1-6ac8-4ea6-b7fe-310f5ec63da8", "sighting_of_ref": "indicator--ede29741-b400-4d86-8e2b-7a0b2edb4676", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c4c33c-961c-4932-80e1-baf65345f924", "sighting_of_ref": "indicator--ede29741-b400-4d86-8e2b-7a0b2edb4676", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b68336-3d85-4103-9589-240b61a16a3b", "sighting_of_ref": "indicator--67f72124-6270-424b-bdbb-c1ae687f0878", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd8c345-6358-4afa-bbd0-557f0f17cadc", "sighting_of_ref": "indicator--67f72124-6270-424b-bdbb-c1ae687f0878", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b4ebdd-1931-4309-9c3c-b315e461b672", "sighting_of_ref": "indicator--139b190f-861f-4616-bdfa-d3f3787cb4fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfd90f5-c407-4a12-8b71-e70dd23574c1", "sighting_of_ref": "indicator--b4ea7cd0-1bdf-458a-b4a9-dc500fb4b7e7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e610f-50d7-49e5-8519-4db2205757cb", "sighting_of_ref": "indicator--b4ea7cd0-1bdf-458a-b4a9-dc500fb4b7e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a080998e-277d-4f7d-8878-01f1b2efc075", "sighting_of_ref": "indicator--b4ea7cd0-1bdf-458a-b4a9-dc500fb4b7e7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dabd1f-e8ce-4e43-b3fa-ef76254441a7", "sighting_of_ref": "indicator--905dd264-5761-46f0-a823-dc4ceaa5cf23", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2464c2-31f4-469c-b0b4-e81dce3784ca", "sighting_of_ref": "indicator--443296dc-7183-4ff5-9477-04d9cfb16f82", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec930416-d339-483d-816b-8145cc1ca825", "sighting_of_ref": "indicator--faa5247f-ae1e-4f76-a235-b061b76b59a0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd6863c-9776-48c6-a44d-0b7f0dac7951", "sighting_of_ref": "indicator--153f6cd9-954a-45f9-9704-c1e34f63ce6f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920de7e9-ec90-45f0-9959-15aec8ba6ddf", "sighting_of_ref": "indicator--689aff1f-144a-4235-a425-7d851fc9ed05", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b21b7-b430-4c5d-b943-a5054e329f09", "sighting_of_ref": "indicator--bc43cb8e-2c22-4869-bd42-3465a9f4b3d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec5c699-41cc-43b9-9d39-1384f62cde21", "sighting_of_ref": "indicator--db8aa139-572a-4afb-a835-993e05c3a969", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abde964-b5ab-42f1-ac9b-28c2ba9d1f58", "sighting_of_ref": "indicator--44815220-371e-4013-8d2c-980bc3bd5ac0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021cb50d-e0db-454f-98b7-685db1831918", "sighting_of_ref": "indicator--14729f34-3b53-4104-b6bd-640d465b5373", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7500c6-4ac4-4d2c-83ff-eab85656adb6", "sighting_of_ref": "indicator--839de1ae-d290-47e5-9124-99e97d419304", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfbe1e0-ba9e-4237-939a-e9a5f1f6aaa3", "sighting_of_ref": "indicator--f9ae1796-6a80-4acb-a628-e3ddf9c3740a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7eff12-bd28-4f6f-8209-7322bf4b0f4a", "sighting_of_ref": "indicator--b8082216-649b-4e14-ab02-ac013d65540e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cf2229-fbbe-414e-ae11-5f7a356a9df3", "sighting_of_ref": "indicator--04d637d1-f4c0-4d87-ac45-3271011440f3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50e4a60-a80c-4f3b-9ff5-fe1737892e98", "sighting_of_ref": "indicator--04d637d1-f4c0-4d87-ac45-3271011440f3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2818768-fd51-4ef8-a5f9-86a5b7e96ff3", "sighting_of_ref": "indicator--04d637d1-f4c0-4d87-ac45-3271011440f3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cec66df-ea28-4e00-a986-c89d2fcd0189", "sighting_of_ref": "indicator--32d7458b-e3e1-45af-82f1-db87123095a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a0c779-4a83-4cdd-9792-c77df869662c", "sighting_of_ref": "indicator--96d0c4dc-a8b5-4370-a747-ba420da3ff0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b628f6-dcd3-43fe-ba24-5ca3a28bd3be", "sighting_of_ref": "indicator--12b0d3e0-fb00-43de-a72e-2e7a73303949", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0b7ea7-5f62-48ef-9676-cd3958c678f8", "sighting_of_ref": "indicator--524c4cd3-e3ba-4f92-8003-85792994bfff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea55c3-7256-4939-a46a-f296cb6da668", "sighting_of_ref": "indicator--524c4cd3-e3ba-4f92-8003-85792994bfff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca1a1a8-904b-4211-a0cf-0d4ce657838c", "sighting_of_ref": "indicator--8241461c-2890-4f80-a40d-5e2d228d00b4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdd96da-e316-4b08-aa77-b5759b28a264", "sighting_of_ref": "indicator--576a466c-b7f7-4f99-a1da-0c335bf92e07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb6b072-4446-42ee-ae27-c6fbca3aca4d", "sighting_of_ref": "indicator--02cbeb61-36fe-4acb-a480-29bcc8d8c4d7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba5390b-d39d-479f-997b-85537116b94b", "sighting_of_ref": "indicator--c77b48ef-7c40-43bd-805d-e805472e6699", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941c12e6-8c14-4a38-a895-5869a9e3ca2a", "sighting_of_ref": "indicator--06e86408-ac8f-43c1-81df-0725f7add99b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99a39f4-c5f0-4183-9fa1-371d20f3f66e", "sighting_of_ref": "indicator--10089497-c58d-40b9-841b-247e68cd52d2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68b475a-97a3-4dc6-9140-c686b0434ee8", "sighting_of_ref": "indicator--a035f481-f91d-400f-b33d-2ea88103edba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df17056-7ac5-475c-b898-e4b4fef59029", "sighting_of_ref": "indicator--9a8f0917-5295-47ba-bb44-adc6d6aa26e3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861977c2-403b-40b6-819d-bf326a75ce06", "sighting_of_ref": "indicator--198f53a7-d4fb-42c5-9bc7-5bae5a76dda9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7965593-5c55-4f6a-9373-31f94e4d72d1", "sighting_of_ref": "indicator--d1d657a9-96d1-416c-a734-5b7b507463ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5331051e-868c-4538-9e5b-e702084f3a1b", "sighting_of_ref": "indicator--c1dbf541-96ce-423a-97ee-79814400afd8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8c593-3479-465e-985a-ab7e0e27e8d8", "sighting_of_ref": "indicator--5a25a509-7399-4e9c-8dd6-ff274ef675de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab514087-d504-42f8-a1da-e44c85ea6e38", "sighting_of_ref": "indicator--5a25a509-7399-4e9c-8dd6-ff274ef675de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad1188c-45d7-40a3-bf75-cd7968acd2b5", "sighting_of_ref": "indicator--5a25a509-7399-4e9c-8dd6-ff274ef675de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b54337f-6f7f-4c9b-ad9d-caeb44ff6dc2", "sighting_of_ref": "indicator--9e89eeaf-4a49-4a8b-8bca-1886260dafe8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ad6dad-9460-4bbe-adb1-81f09129eedb", "sighting_of_ref": "indicator--9e89eeaf-4a49-4a8b-8bca-1886260dafe8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c215e0db-7e24-47b9-9539-3800aadb1314", "sighting_of_ref": "indicator--24c01465-49bc-4526-9fbd-f16fa8f0ed8f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ba46b5-6c35-415a-b93f-99ecb34e2ab2", "sighting_of_ref": "indicator--24c01465-49bc-4526-9fbd-f16fa8f0ed8f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4700d480-c1eb-4940-b89b-12ee2c9b8ca6", "sighting_of_ref": "indicator--24c01465-49bc-4526-9fbd-f16fa8f0ed8f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9524fa5-83f0-4f5d-b1f6-50aedf023874", "sighting_of_ref": "indicator--94a21540-94b3-4856-b316-b00eea33cd77", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d2bcc5-cb3d-4b38-a9a2-5bd3b0263336", "sighting_of_ref": "indicator--94a21540-94b3-4856-b316-b00eea33cd77", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975ff783-e72b-4d43-a668-2d53ed94fb99", "sighting_of_ref": "indicator--94a21540-94b3-4856-b316-b00eea33cd77", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1134e5-6abf-4957-a90b-5315697c3c77", "sighting_of_ref": "indicator--5e3f9b2c-51a4-4b12-a48e-5ab2c8f4a8f4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be68aa07-0429-4d26-b804-5fd79ba85972", "sighting_of_ref": "indicator--5e3f9b2c-51a4-4b12-a48e-5ab2c8f4a8f4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a94e9a-6f8e-4dba-bb60-126518c17e17", "sighting_of_ref": "indicator--5e3f9b2c-51a4-4b12-a48e-5ab2c8f4a8f4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c260f50-63a7-4c8a-8d44-ab4cc6797918", "sighting_of_ref": "indicator--9301ed0a-89f4-43b7-9a18-bb53dde7f883", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9568f137-3397-405a-826c-99ec1539899e", "sighting_of_ref": "indicator--9301ed0a-89f4-43b7-9a18-bb53dde7f883", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d7223b-9502-4953-84fa-73f2d3fd4fc9", "sighting_of_ref": "indicator--9301ed0a-89f4-43b7-9a18-bb53dde7f883", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39ecb49-c2c9-47ab-984e-e522297d7d89", "sighting_of_ref": "indicator--f6b69c86-2173-4e01-b3f8-f8f05cad63a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b20a5fb-506a-429f-aadb-54b6f40cd13d", "sighting_of_ref": "indicator--a8186622-b888-4902-9a7d-5e767c14def6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086cabcb-c82e-409d-9a11-aa8b55482e24", "sighting_of_ref": "indicator--0de97621-39a1-4fc5-855a-2d989d9670dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14250ca6-8ef7-4b04-b853-77765f680245", "sighting_of_ref": "indicator--0de97621-39a1-4fc5-855a-2d989d9670dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52068acf-b169-496a-affb-ca3600960c7a", "sighting_of_ref": "indicator--5fc6a70e-abdf-48b2-8e28-e6e0123ae3ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f33361-6364-4133-a4af-404903c72dc6", "sighting_of_ref": "indicator--57a51639-969a-4eae-8237-60afcf83d7c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122da555-2442-4484-8e8f-043b7059af6b", "sighting_of_ref": "indicator--38cb9bfb-e9e3-49a0-a431-58e02776a6f8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73b848c-985c-45e4-83f1-d363a32dfcd9", "sighting_of_ref": "indicator--275f514d-8c40-4e02-9fde-ff0380444fbd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8842c5e6-a0db-470a-88b7-13bed665c968", "sighting_of_ref": "indicator--1a175712-98f5-4cb6-a98d-382b38b8eccc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d98ecd-6254-43d7-b972-0cbc941d1898", "sighting_of_ref": "indicator--1a175712-98f5-4cb6-a98d-382b38b8eccc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9987292-8b83-40f3-9198-e02a32d9f57c", "sighting_of_ref": "indicator--be96637a-e226-4be0-a9df-c170e198408c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2916d892-183b-4769-a193-9ec8dcfeeb37", "sighting_of_ref": "indicator--efc3f052-9166-48fc-aca8-99a02b362860", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a255072-f213-455f-9333-687776e1df70", "sighting_of_ref": "indicator--edbf4593-bda2-4770-b676-a29164f4c9d5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf2ad3b-4c77-4a14-87c2-891417b79afa", "sighting_of_ref": "indicator--ad69fc34-2017-4a57-ae59-f8d10a3d4d9c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95907842-e66a-45f8-b50c-45750d971989", "sighting_of_ref": "indicator--ad69fc34-2017-4a57-ae59-f8d10a3d4d9c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef349b0d-c6d7-4e0e-a9e5-ae4445a12f77", "sighting_of_ref": "indicator--e320f108-811c-42c2-8045-2d9de3002a3d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9e8ca6-b331-4f76-ba78-f72689ee5742", "sighting_of_ref": "indicator--7afcbd41-1002-49bc-91cc-840fd88304c1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d7bc14-3a22-4954-ab25-fe1b83c8e37b", "sighting_of_ref": "indicator--7afcbd41-1002-49bc-91cc-840fd88304c1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b6d289-d5f6-43cd-931d-690d514fa574", "sighting_of_ref": "indicator--7afcbd41-1002-49bc-91cc-840fd88304c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b47d00c-8faf-4271-a971-d56b39c6cd25", "sighting_of_ref": "indicator--dadd168f-5183-458c-b3f2-a17bce5268cb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4932cb4b-e4ea-4f37-8921-64ebff81a276", "sighting_of_ref": "indicator--215b8bd6-a882-43b2-9847-0682367e5385", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86c4dc3-f98c-4182-ac3e-7a47e39b2b36", "sighting_of_ref": "indicator--bd337ccb-ac05-45d6-888f-0cc977ce5520", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e0fbe3-b03e-4145-bf25-994f46b538b1", "sighting_of_ref": "indicator--fd7e54e3-dd33-4d72-a928-ba251e904392", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3142e5d-257c-4891-a219-8aa0650a3bc6", "sighting_of_ref": "indicator--af5c0e2a-6051-4d7c-9abb-f035367b830d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db9a30b-c67c-49e1-a1e6-bce29add8b02", "sighting_of_ref": "indicator--8168e89f-a308-4088-8954-72f5c7eaf7a9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3997ed08-42ec-481b-abe7-9dea0a48820c", "sighting_of_ref": "indicator--4e4f0110-7c3b-4b94-9a8c-a00aa9fd27c3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad6b049-d610-4868-831f-f9573dfb4b2c", "sighting_of_ref": "indicator--4fe60292-89fe-481d-a5bc-d8fea047d31e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5557fd85-8683-49f0-8cf1-b4f14c7faf1b", "sighting_of_ref": "indicator--9cf6cc46-0bc5-4f94-b306-b594f6aa8e34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46953515-aba8-4fae-9b77-a03b4eca20a8", "sighting_of_ref": "indicator--9cf6cc46-0bc5-4f94-b306-b594f6aa8e34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a40740-0469-4253-8b85-612202653d92", "sighting_of_ref": "indicator--9cf6cc46-0bc5-4f94-b306-b594f6aa8e34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28627b94-796a-4ce0-9dda-5746e0e7504d", "sighting_of_ref": "indicator--462ff395-26c4-4989-9c25-d7ff11427ccb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e0a6df-b1d4-4d31-a34b-2c93de80f197", "sighting_of_ref": "indicator--462ff395-26c4-4989-9c25-d7ff11427ccb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ac748a-510d-4a23-b4b1-8177c88f722e", "sighting_of_ref": "indicator--16c76961-46ad-4b15-96f4-aba0ff0b1a2a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a51c803-a679-4b7e-a97b-b04c926cbeab", "sighting_of_ref": "indicator--16c76961-46ad-4b15-96f4-aba0ff0b1a2a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d5be99-7c7f-46d2-ac68-052672b23a05", "sighting_of_ref": "indicator--93b40aec-e08c-4462-b13e-bd95fa9405a8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773c042b-7381-4244-8667-dd35e703f6f2", "sighting_of_ref": "indicator--93b40aec-e08c-4462-b13e-bd95fa9405a8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d653df-db31-4536-bc00-a7c78bf638b9", "sighting_of_ref": "indicator--d346c7c0-e9d8-43a3-b2cd-53e2f9e56c12", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42b889b-4afc-45b9-9bbd-d1bd46ba8738", "sighting_of_ref": "indicator--73e9e7b1-17fa-4fa8-9334-0514843ef78f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c74f14e-e952-4b23-95ea-7795435733f2", "sighting_of_ref": "indicator--505da849-e5e6-4605-80e3-457dcf3b93b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c38490-cc61-451f-8b0e-ddeecfb69a32", "sighting_of_ref": "indicator--9dab046b-fa7e-4987-8372-32253dacda20", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdb2620-9eb7-4ad5-97a7-b17ca609571d", "sighting_of_ref": "indicator--7bdc811e-c151-4853-b017-88bc138aeb06", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdae7d5-ef09-4046-9d99-f582cc7983ee", "sighting_of_ref": "indicator--7bdc811e-c151-4853-b017-88bc138aeb06", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66308036-32a9-4e5a-8654-edb008ddac9e", "sighting_of_ref": "indicator--e9a3b911-2caf-42ee-8be5-e3e7cb2900cd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38e80d7-add3-43bc-a0c8-cc474de66643", "sighting_of_ref": "indicator--1d8ba71f-dc43-4c9f-856d-4a38031affbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d735655f-52ac-442f-8e9b-95c251767c27", "sighting_of_ref": "indicator--1d8ba71f-dc43-4c9f-856d-4a38031affbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66bccbe-24ae-4ce4-bba9-d5b176be2f1d", "sighting_of_ref": "indicator--932f6f6c-2336-4066-a868-aa20262f0251", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a375a5-4fdc-4eae-9d29-1a8fbeefe3dd", "sighting_of_ref": "indicator--5a215b3e-f59b-4e76-a9ab-bde52a474f82", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df353295-2fdf-4ad4-8c5a-d8675042148e", "sighting_of_ref": "indicator--5a215b3e-f59b-4e76-a9ab-bde52a474f82", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c64808b-b274-46b8-9f60-e8c57ab419fc", "sighting_of_ref": "indicator--d987074f-a936-409f-b30b-3e61d937235d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721c03c5-cbf4-4869-9299-54e23650c756", "sighting_of_ref": "indicator--86a7b4b9-377d-4b54-bb4f-e45c508d5272", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5a6610-205f-47ef-b303-e63c4c3bf53f", "sighting_of_ref": "indicator--86a7b4b9-377d-4b54-bb4f-e45c508d5272", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85afea0-6bac-49a6-ad12-a1721785e23d", "sighting_of_ref": "indicator--32a96f9e-8e48-404b-9bd8-8bbc085bb106", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652511a8-64c9-4619-aff9-276d36735e44", "sighting_of_ref": "indicator--a4f65116-22ff-46e2-a471-f0688660b49f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a42f4-08ab-4e0b-9782-e8ef4aa8e5fd", "sighting_of_ref": "indicator--57f1a3b7-0856-4c41-b53a-39b7cdfa88e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30afa9e-856d-40de-bbe6-78ad6f7f3b69", "sighting_of_ref": "indicator--57f1a3b7-0856-4c41-b53a-39b7cdfa88e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e21a2e-319a-4310-ace8-b68df18945c7", "sighting_of_ref": "indicator--667c5cb5-8cae-4c63-a81d-4ad519467bbc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ee1a69-e467-4dfd-bdd9-79dcbe922d0f", "sighting_of_ref": "indicator--8173e182-06ac-4ad5-af69-4bc8a649c511", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16006faf-19ec-4c9c-a1be-1e78a2929c3d", "sighting_of_ref": "indicator--8173e182-06ac-4ad5-af69-4bc8a649c511", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc17c38-dc33-4bd9-b767-74c4f9293528", "sighting_of_ref": "indicator--dd7edc03-ee38-4c3e-94d4-be59bad8e847", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2093619a-94b7-4271-908b-a8615a5c25e1", "sighting_of_ref": "indicator--18f50b12-4116-4db8-91a9-d1be4c34b3b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b76c96-ea63-429f-9694-6890b12b0ab7", "sighting_of_ref": "indicator--18f50b12-4116-4db8-91a9-d1be4c34b3b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6443ef-bcb3-4437-9311-2c54ce9740dc", "sighting_of_ref": "indicator--0fdf07df-acd0-4b9f-94e5-3b9f7921e314", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11966f4b-60c6-45c6-8a41-baf9b96fa6ab", "sighting_of_ref": "indicator--c63a2e0e-b767-4f7f-8159-f4ae29713f4e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06205221-143d-4f4a-8ccf-2a11c16a860a", "sighting_of_ref": "indicator--90e76c85-d5e9-48ad-a774-a54b69fc5d72", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd556070-a109-4175-8756-f0751e378f30", "sighting_of_ref": "indicator--90e76c85-d5e9-48ad-a774-a54b69fc5d72", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc7cdb8-fcdb-4dc0-a973-b85cdef2621b", "sighting_of_ref": "indicator--6d59e96d-5444-4cd3-a4e8-d7529368f3a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4943c4-7ded-4c41-8b33-194d9fe70df1", "sighting_of_ref": "indicator--14cef039-24bd-4796-a616-0ff912af4ecd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f15715-c2f1-4403-bc3f-5f025d0ae9b5", "sighting_of_ref": "indicator--14cef039-24bd-4796-a616-0ff912af4ecd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b058fb1-265e-45fa-b4cc-829955e1ae12", "sighting_of_ref": "indicator--773d681d-c159-4bce-a4f7-9176a7068a07", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7352f19-18b4-4a93-85d3-b76dbcfa5b1f", "sighting_of_ref": "indicator--f0b1db00-1654-4574-bf2e-e15646077c6d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b3fba0-b0b1-4a38-9ebb-038897ea06e3", "sighting_of_ref": "indicator--f0b1db00-1654-4574-bf2e-e15646077c6d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f639e24-c272-4032-8812-ae2459c76af4", "sighting_of_ref": "indicator--b5e68ebd-e35e-4c93-915a-a5f5f904244b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb64cba-0b21-4f12-b3dd-54a0e5e6110f", "sighting_of_ref": "indicator--b5e68ebd-e35e-4c93-915a-a5f5f904244b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6a7497-ff8c-41cd-b9f2-2be2eb3ff028", "sighting_of_ref": "indicator--4b347201-0c43-4788-ab1c-f9b7b1b787ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64629f4e-9ced-437a-970f-a79f677d561a", "sighting_of_ref": "indicator--4b347201-0c43-4788-ab1c-f9b7b1b787ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257f56b2-7c49-41f0-b2b3-6194b1d3acde", "sighting_of_ref": "indicator--591b7afe-ec2b-4024-bc34-b8ec3f7851b2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b8d8c0-cadf-4007-8af6-1e584927049d", "sighting_of_ref": "indicator--a7678c19-7f33-4598-9496-dfcf90e61637", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a43d78f-c24e-45bb-bcd2-159b54a3d3cf", "sighting_of_ref": "indicator--a7678c19-7f33-4598-9496-dfcf90e61637", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a123fec-c49a-4d46-a45f-a537eb3e2c22", "sighting_of_ref": "indicator--e828c01c-e71d-4921-b235-ce571f872342", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa8036f-654e-4361-972d-b11974f9cec5", "sighting_of_ref": "indicator--045b2b3d-b575-4feb-ba4a-8bb02e29e00d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c57921c-cdf2-4cdb-9f1c-57dab5fab029", "sighting_of_ref": "indicator--045b2b3d-b575-4feb-ba4a-8bb02e29e00d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1bb8a2-0cf0-44af-8d73-b38afa47c2a5", "sighting_of_ref": "indicator--156634ca-8a18-45aa-8522-531dcd28b6e8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8016a93-da51-4d20-a47f-96e3f67fef7f", "sighting_of_ref": "indicator--9ec1dc87-23dd-48da-ab18-c6a23c4036b3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6dc05b-e97b-432e-ac51-4d2d97cbfdb2", "sighting_of_ref": "indicator--9ec1dc87-23dd-48da-ab18-c6a23c4036b3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed8b9b7-3322-4712-8131-825a53f1ee3d", "sighting_of_ref": "indicator--9eceab31-30a0-4b71-9fa2-72392a58a327", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01da206-41a7-4107-9c21-b6915b615f18", "sighting_of_ref": "indicator--10f7690c-b881-4c2e-9283-711ed5d1780d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcda217f-0aa5-400b-a0d6-1417a69a77f6", "sighting_of_ref": "indicator--10f7690c-b881-4c2e-9283-711ed5d1780d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac23a75-2203-45fa-b825-f9678e109200", "sighting_of_ref": "indicator--46d2ec39-1ed3-4ad4-8589-d9f39172594a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d9e354-5c29-4ca3-9437-abaaa0ed83f0", "sighting_of_ref": "indicator--f85a2ed4-4b05-4d1d-a1a4-85ab15496c67", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c41d72-096d-42be-970b-b31b4606d455", "sighting_of_ref": "indicator--f85a2ed4-4b05-4d1d-a1a4-85ab15496c67", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e578ad-4f44-4032-bb24-c4a963b42477", "sighting_of_ref": "indicator--f443dbc1-b1ed-4cac-8528-0dc7e12b5ce2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3aa3da-06a4-402e-9cc9-8d63c80957f0", "sighting_of_ref": "indicator--b20404e6-1a95-43a6-a6ac-5a745a18bc3e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37530100-7190-40f0-9ffb-f3343246bd53", "sighting_of_ref": "indicator--b20404e6-1a95-43a6-a6ac-5a745a18bc3e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f40a548-c788-4024-ba8d-e89a6df5757d", "sighting_of_ref": "indicator--f56b5a2e-046f-4c10-b350-b1d92792eef0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eef8475-24a1-4d7e-be22-e465fa322c95", "sighting_of_ref": "indicator--4eb4a556-0c36-4c8d-b233-89734f2e5df9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143822d9-d7bf-4921-94ab-53bbe954dabe", "sighting_of_ref": "indicator--4eb4a556-0c36-4c8d-b233-89734f2e5df9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defbcc3f-bb22-4eff-a38a-eabccbb6da48", "sighting_of_ref": "indicator--86eda9af-e9a9-4b89-97aa-bfddbb1a2da5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713b12a4-9892-499d-a571-d1308b7b8bec", "sighting_of_ref": "indicator--6b38261c-4a81-4062-bc65-b85bd8629ec0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1648c0a-f433-40b4-9d33-5b126dfd8ca6", "sighting_of_ref": "indicator--9af84f4e-a2f6-4c3a-89dc-7f4e31c3f220", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f41935-4bb4-4b47-9967-8f34905ed5ee", "sighting_of_ref": "indicator--9af84f4e-a2f6-4c3a-89dc-7f4e31c3f220", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fb88bb-0064-4d88-ad6e-982c586b2312", "sighting_of_ref": "indicator--c822f5fd-755c-4959-98d9-30b0e9724541", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a39cb4-da8b-4d4c-b00a-6d6c6a88da00", "sighting_of_ref": "indicator--74f8663e-e297-44e4-bdf4-b9d81195e0ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1cf8aa-1fcf-4872-bac9-7ec27eae5456", "sighting_of_ref": "indicator--74f8663e-e297-44e4-bdf4-b9d81195e0ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd18dfe-abef-4ffd-8202-50fc09c0898c", "sighting_of_ref": "indicator--dd41a2a6-4f12-445e-925a-35ca47663576", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8941f84-fa68-4b10-b1b4-c45cf674c61a", "sighting_of_ref": "indicator--e3104c4c-8e0a-42b1-9de7-ca80b56beafd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2602d9c8-a722-4ded-8475-28e8cb15a2af", "sighting_of_ref": "indicator--e3104c4c-8e0a-42b1-9de7-ca80b56beafd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6358c9-25ea-4b18-8f16-06577b9691fe", "sighting_of_ref": "indicator--d3419a0b-2300-46f8-980d-0e4f14f8fb91", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930857cc-8447-482f-85c3-d2a793357910", "sighting_of_ref": "indicator--6d0c5b7b-29d7-4535-a9d2-fa0ec2fd57d1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c4ad9-c9fd-47f6-83d5-683c99cb9fff", "sighting_of_ref": "indicator--6d0c5b7b-29d7-4535-a9d2-fa0ec2fd57d1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d56553-7e48-44b8-8e63-2e35ddc6e6f2", "sighting_of_ref": "indicator--1532723a-77a9-49dd-a509-19505639d16b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767931d8-335c-4d23-8638-179aa6d7e51a", "sighting_of_ref": "indicator--1532723a-77a9-49dd-a509-19505639d16b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910b4f2c-7159-4f6b-9dad-012c14dde4f3", "sighting_of_ref": "indicator--9a69183f-98f9-49f3-a369-f110911de4b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46db2b3f-9cd6-4ff0-9cb6-ac6f1411a277", "sighting_of_ref": "indicator--9a69183f-98f9-49f3-a369-f110911de4b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7d34ab-f40f-4bc1-8812-36ae50060552", "sighting_of_ref": "indicator--6f687cd9-2e5d-4ebe-abc3-00ba56aadb5e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744f2f8e-84ea-4269-afdc-75849437e384", "sighting_of_ref": "indicator--713b7aa6-117a-42e7-a441-08b2c86ffc0e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0894a7-ac11-41da-a1d7-f7cbb466c57b", "sighting_of_ref": "indicator--713b7aa6-117a-42e7-a441-08b2c86ffc0e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c1b89b-4ba6-436e-a027-6021dde00278", "sighting_of_ref": "indicator--d68885d5-6124-4771-9db3-20370bdff9ad", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c996d35-f656-4bcd-bd28-d637b487b38c", "sighting_of_ref": "indicator--19217266-355e-4ead-8813-041520e1f272", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fabc7e5-51ec-46f2-911c-dd1b3bc0477e", "sighting_of_ref": "indicator--19217266-355e-4ead-8813-041520e1f272", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4bcbbd-8498-443d-9a31-615c2d7c0529", "sighting_of_ref": "indicator--e9cccb05-c871-4883-af36-5930d74b238d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba0a867-1d5a-40f6-857d-8758c61b2322", "sighting_of_ref": "indicator--b5506198-c115-4509-a92a-cbd4f6fd8506", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463f1eb2-2fa8-42ba-b5c2-bd19097ebbd4", "sighting_of_ref": "indicator--b5506198-c115-4509-a92a-cbd4f6fd8506", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d408fe1-8c81-4363-86d7-ff3797c3b8c5", "sighting_of_ref": "indicator--7940434f-b660-4146-9577-f2ba99f4eb57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36ce856-661b-4324-bc9a-a16771c7d933", "sighting_of_ref": "indicator--5a83626d-9665-4f67-950a-9f6f7f5f18a3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940c864f-f4af-4420-b9bd-e872444ce473", "sighting_of_ref": "indicator--5a83626d-9665-4f67-950a-9f6f7f5f18a3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79870655-290e-4fe5-99bd-cf15aa6d5646", "sighting_of_ref": "indicator--32c5cc95-23e3-4b74-8493-0f602c8b94be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5888f891-d0a9-4ab3-b6e5-79def44e800b", "sighting_of_ref": "indicator--dbd84a8f-32bf-4dd1-81d8-d7a6deb2ad86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5badd854-3dcd-41eb-8b2d-a5d4e724fbe7", "sighting_of_ref": "indicator--dbd84a8f-32bf-4dd1-81d8-d7a6deb2ad86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8088958a-a3fc-49a4-864c-fe65a6a68aef", "sighting_of_ref": "indicator--ca67376d-2be2-4f0b-807a-131a75f4dec9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1d24d8-273e-483f-9a53-237fa326f149", "sighting_of_ref": "indicator--a160e353-b7c9-4305-854c-c25534dc19d7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373733f1-b9ae-4e8a-b3c4-750da0f56c56", "sighting_of_ref": "indicator--99574651-f23c-461e-a4fd-6f9329729bfe", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5ca38c-fe7d-4b72-b569-34a0a7b9fe80", "sighting_of_ref": "indicator--5a9de151-9cf3-4424-b0b5-e5655e602e5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f9b213-6df4-437b-9683-857378432e05", "sighting_of_ref": "indicator--cc16a415-ff7c-4fd9-8ff7-598f5295d0b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c215655b-20d7-4435-ba6a-e70344203e7f", "sighting_of_ref": "indicator--cc16a415-ff7c-4fd9-8ff7-598f5295d0b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df8b861-772f-4420-96d3-8d0d66f412d6", "sighting_of_ref": "indicator--0f98b414-5ebc-4b2d-943c-af0f9c5dcc1b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fc7314-5f7e-4da0-82cd-66b7cf55ced5", "sighting_of_ref": "indicator--1ae89b60-ec5d-443a-b0c9-0835b4399ed2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041de1f-35e6-4f4f-8e60-8fb8c63c2128", "sighting_of_ref": "indicator--1ae89b60-ec5d-443a-b0c9-0835b4399ed2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ce19c-66ed-436c-a50c-7b3f5edefd9c", "sighting_of_ref": "indicator--8b3345cb-72a7-4cdd-8505-5626fc18c1e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab20dc4-c416-4afc-9e4b-cea932ffc758", "sighting_of_ref": "indicator--5d97d4fb-e47f-49cf-8c79-4ebe750025be", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56f9d11-8ac2-451d-be7d-1de378f1c17d", "sighting_of_ref": "indicator--5d97d4fb-e47f-49cf-8c79-4ebe750025be", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73222bd2-2c14-47cc-aeaf-dc75638ec220", "sighting_of_ref": "indicator--f6a2548e-60a4-4602-ae70-c6ec1e228d9a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e391299c-6530-4b93-9e4b-2f9552c5929a", "sighting_of_ref": "indicator--afd93545-7c72-4c2f-9f17-31c783e42f98", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85219489-5eed-4acb-b9cd-6af22f44cc37", "sighting_of_ref": "indicator--afd93545-7c72-4c2f-9f17-31c783e42f98", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2fa3d9-c67a-4bf8-b0a0-2095fd544bed", "sighting_of_ref": "indicator--abcf6cd8-70e3-4629-9e45-eab1c9789013", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71ef0bd-aab1-4d4c-994b-6a29b2b951dd", "sighting_of_ref": "indicator--21bd29ac-17b7-4bdc-9003-4d1fbb3c58ea", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc8ff96-8053-4a86-9d6c-78439ecb9d8f", "sighting_of_ref": "indicator--70b18778-bfd5-48a6-aed9-f841ba9dc839", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4056f576-1a38-4684-8870-60ad4ea632b4", "sighting_of_ref": "indicator--c3289218-6923-4720-bf8e-a5ff7bc3a4e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9388405-3494-4e0a-a48a-7e8ec4e05122", "sighting_of_ref": "indicator--c3289218-6923-4720-bf8e-a5ff7bc3a4e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c437b8-4bcf-4bde-bc65-cd66c72ff1af", "sighting_of_ref": "indicator--c3289218-6923-4720-bf8e-a5ff7bc3a4e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47200c49-68a0-4348-b7a5-6d3169253b11", "sighting_of_ref": "indicator--3977de7d-b861-43ea-8f7c-c5b8260e4dd8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dd6607-794c-49b9-959a-a8af15c775c9", "sighting_of_ref": "indicator--328056ce-ece2-48d3-8a37-2f46aa7dde59", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9318ca-1c9a-4205-a0ec-e9b6ba6b83af", "sighting_of_ref": "indicator--328056ce-ece2-48d3-8a37-2f46aa7dde59", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76082413-d196-4382-bfde-19a8022a20f4", "sighting_of_ref": "indicator--328056ce-ece2-48d3-8a37-2f46aa7dde59", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc2f877-09ca-4a4d-b36a-75832473775f", "sighting_of_ref": "indicator--562f3ba3-d5c6-4003-a091-c8166631b985", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b02bfd-a143-4859-b625-31ae07ab320a", "sighting_of_ref": "indicator--5747fc29-20dc-4cb0-bf1a-67ab32859ee6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd008af-d10f-488f-a4b7-805cdd480258", "sighting_of_ref": "indicator--aedf258c-1b39-43c0-bc3f-7d247eea1c1c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ab9b21-6080-4448-b8c4-03ea90c7eaf9", "sighting_of_ref": "indicator--ceae1920-9b2f-40b8-9439-26beeeace423", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b734262b-c867-4c98-9bf2-ab8a59fc2934", "sighting_of_ref": "indicator--10aa51eb-5b66-4215-89a3-b3602cb5d066", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ec0658-9429-44c2-ae3a-ab270e6bcb1c", "sighting_of_ref": "indicator--2df1fba3-f547-476d-9d59-99e7bc13577e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc08918a-c022-44b6-8ca5-5365c74e2181", "sighting_of_ref": "indicator--d62fa51c-70fa-456e-a990-fc936fb1d9b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f603e4-d634-4210-9e59-c11752cc7417", "sighting_of_ref": "indicator--7ac2433a-afcb-4bf7-aca9-2a7c4d76f579", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e08b4-66cd-4344-b753-72f213c57061", "sighting_of_ref": "indicator--7ac2433a-afcb-4bf7-aca9-2a7c4d76f579", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a9d6c-5907-46ff-bd69-fc3682a5bc81", "sighting_of_ref": "indicator--d2970b88-bc07-4095-9037-f6a4d1fed7c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522d41c6-b1e7-4616-88a5-3856f0c2953c", "sighting_of_ref": "indicator--bd6d8328-ecfa-4977-ae89-653f30c849a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab48e848-54f8-4ca3-a9cd-e513872d84e4", "sighting_of_ref": "indicator--6a069c0e-a365-4baa-b104-ec4afc2ea07d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acca128-e9ab-4cbc-bcb5-7e48c0e91102", "sighting_of_ref": "indicator--6a069c0e-a365-4baa-b104-ec4afc2ea07d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca21069-376f-407c-8454-1918ae3c21ec", "sighting_of_ref": "indicator--06f2cb6c-9865-4a81-a4d1-e024af9b8511", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc026c5-8f3c-411e-9a21-aff87b053d8c", "sighting_of_ref": "indicator--59cdd5fd-3be5-4999-a29f-b800bb33d3e1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aab26df-a76a-47e4-8b2f-ca2eba071d41", "sighting_of_ref": "indicator--8208a695-e5bb-4873-a5e8-e69547061653", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb3ffa9-402b-4b16-885f-7363c4c7b237", "sighting_of_ref": "indicator--8208a695-e5bb-4873-a5e8-e69547061653", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17ae350-01c0-4b9f-a062-7333a7e903ff", "sighting_of_ref": "indicator--927418bb-2d27-4ee1-8faa-1df1dbd11bf9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e271618-7031-4dc5-b7fd-d691002be229", "sighting_of_ref": "indicator--927418bb-2d27-4ee1-8faa-1df1dbd11bf9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b15d092-ebb7-45f1-9a1b-44b130d34ea7", "sighting_of_ref": "indicator--14b2331b-d3fb-471a-8f6b-3095eace6b13", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7037e950-42f7-464b-a28c-1d219e148d1c", "sighting_of_ref": "indicator--14b2331b-d3fb-471a-8f6b-3095eace6b13", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7a4d91-80f4-4c31-88f5-14f4f60c10a5", "sighting_of_ref": "indicator--a8b3bea4-e597-4bae-a2ad-9f697bc3b5b0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23949098-0de7-4489-b770-8788d1cb1f8f", "sighting_of_ref": "indicator--bca05e50-6b35-4210-a11b-6fe37bbed8a2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b1f284-e45e-4efa-9fb0-53b8c368dc69", "sighting_of_ref": "indicator--bca05e50-6b35-4210-a11b-6fe37bbed8a2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0c7b72-6af9-4025-9e55-c7a67f46c245", "sighting_of_ref": "indicator--3d54baad-fbd6-4e20-8acb-8ac340ac2a84", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39a2e13-cb78-4fee-83e4-e2a7037c8eac", "sighting_of_ref": "indicator--52793409-09be-47d6-8280-a37a7f6399ae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ff4f19-87af-42bf-bbae-473513e459d6", "sighting_of_ref": "indicator--52793409-09be-47d6-8280-a37a7f6399ae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7543d719-b815-47a4-aecc-6f9cffcc872f", "sighting_of_ref": "indicator--7d12d046-1406-477c-8589-7e1e190f010f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a32ec3-6e9d-4e06-a29d-98cef373cbf0", "sighting_of_ref": "indicator--e740ce7d-9d74-4a6c-ace4-1a9d2ff5d15e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf521b9e-177e-45d5-a1b5-e588b266f94f", "sighting_of_ref": "indicator--e740ce7d-9d74-4a6c-ace4-1a9d2ff5d15e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ec8881-b6ed-4dba-8c5b-5be1aff903be", "sighting_of_ref": "indicator--295c3c4c-149a-4200-bc56-3fa3467f8343", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389a5c93-b50f-46a4-a2e2-a343f1551ec4", "sighting_of_ref": "indicator--295c3c4c-149a-4200-bc56-3fa3467f8343", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385f60e1-a2f7-44ef-bdec-11df47e31268", "sighting_of_ref": "indicator--333383e1-d48f-4457-b86e-389dc0e4dd89", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6d30ad-4e00-4a8c-b1e1-9e30e450784d", "sighting_of_ref": "indicator--2e60688a-015b-48d8-8263-7a04729987fa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed91115-bed5-4302-b62c-db3a2f3d28f5", "sighting_of_ref": "indicator--2e60688a-015b-48d8-8263-7a04729987fa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a6512-54cb-4cd8-a458-e91eb5f187b6", "sighting_of_ref": "indicator--ec703cd0-f40b-4eac-a5cb-bbc9515da350", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7f9f9a-a01c-4b43-8ec1-90e44a7ce0ca", "sighting_of_ref": "indicator--a5d26fd9-b5f6-494f-bb26-de6951648d8a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e50a4ce-0454-4710-a248-1108ee2bbb80", "sighting_of_ref": "indicator--a5d26fd9-b5f6-494f-bb26-de6951648d8a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3de0b6b-7b45-4219-aac4-354a682142fa", "sighting_of_ref": "indicator--7baf8a41-4328-41e5-869f-d55e82b89664", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82aaf68-2a25-43ce-9a74-1d7bbe74d557", "sighting_of_ref": "indicator--5a514fc8-5f9d-4421-8e06-fbfebaabbffc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33ab3c9-8e06-40fc-800d-35a89c752994", "sighting_of_ref": "indicator--5a514fc8-5f9d-4421-8e06-fbfebaabbffc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb01502-c674-415c-b300-0549a141b5ca", "sighting_of_ref": "indicator--858cc379-fe8a-42c6-9a02-29a68c1c5b2e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51202136-d44a-422c-8102-3bfe79fcec0b", "sighting_of_ref": "indicator--e449d9ff-09a9-4be6-a3e3-ee97a8c10f33", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4defa5-66a4-415a-a9c6-9c63cfa84a24", "sighting_of_ref": "indicator--e449d9ff-09a9-4be6-a3e3-ee97a8c10f33", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb54740-637d-4f4c-ac17-6064c69255f1", "sighting_of_ref": "indicator--46c358c6-c497-4a5b-833c-d168330e63f8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3ee744-7840-42ce-86e8-5af9661a48c9", "sighting_of_ref": "indicator--a8c2c5fd-8bf8-4ccc-94dd-432f62bbc647", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87ff886-905b-443a-bfa9-7cdb4156db1d", "sighting_of_ref": "indicator--a8c2c5fd-8bf8-4ccc-94dd-432f62bbc647", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dde7de9-75ef-4d8f-b064-005b8b41ed32", "sighting_of_ref": "indicator--cd534ce1-a308-4157-a586-318345fba8e0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b7a782-67eb-40d5-9eb5-570261f9e25a", "sighting_of_ref": "indicator--83af30c8-51f9-4fef-9990-c13a81fdde0e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c6779e-b009-41dc-8856-82557efa4923", "sighting_of_ref": "indicator--bbc353d1-24b0-488a-b8d3-81871e23e91f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e5a626-cbf3-407f-bddc-8536400391c0", "sighting_of_ref": "indicator--bbc353d1-24b0-488a-b8d3-81871e23e91f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1812a2f2-cce9-4e0d-9a0d-c760061f53e1", "sighting_of_ref": "indicator--9b4f726a-8ce4-4c45-9354-5d81cc46277a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac2a937-7e31-458f-a8f4-7fa84348b124", "sighting_of_ref": "indicator--9857a040-8325-48e4-bdf7-0dc752370911", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad5398e-c2e3-4b29-a080-65212fe68773", "sighting_of_ref": "indicator--9857a040-8325-48e4-bdf7-0dc752370911", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810b3c42-c9d4-4320-8b53-f529e6ec1579", "sighting_of_ref": "indicator--009235bf-54fc-4647-a6e6-b4c89330976f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20ca5a5-a4b2-434c-ace9-e3ee7f6b5ba1", "sighting_of_ref": "indicator--e9d6136e-af95-40d7-bd37-d5d20e4f0123", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50626690-7359-4308-9775-b84286638b7c", "sighting_of_ref": "indicator--916f24e0-e95d-414c-8137-4d164901ed94", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891d087d-b50b-4dd5-bb41-026af0e85aad", "sighting_of_ref": "indicator--916f24e0-e95d-414c-8137-4d164901ed94", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df922586-9df9-41b9-92d1-f2c11d2a1c76", "sighting_of_ref": "indicator--2785b3ce-db74-4ab5-8c01-d638a5c141f7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5becfda1-5c58-41de-bca2-55a25c9fee2f", "sighting_of_ref": "indicator--e5e11c37-eff4-407f-b572-302e4c4a2df6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93586e4-bf62-481c-a79e-01d10cc59881", "sighting_of_ref": "indicator--e5e11c37-eff4-407f-b572-302e4c4a2df6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f603fac-f969-4924-a516-757be17a25b7", "sighting_of_ref": "indicator--a5afc2c4-23b4-4b6b-bc38-1399ab3265ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a544e989-0c07-4f42-9e91-3b1645527a68", "sighting_of_ref": "indicator--69caa4f6-a6f0-46d7-a5fa-f5ea4718c5a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095b0d09-fac5-4ed0-b400-0eedccf19f01", "sighting_of_ref": "indicator--1486c5c7-07b4-4387-9b6b-3b29137b242b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b2acf5-9534-43fe-86a3-d4032354a12e", "sighting_of_ref": "indicator--1486c5c7-07b4-4387-9b6b-3b29137b242b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5325702-684f-4ccd-9e41-a8d4232c510b", "sighting_of_ref": "indicator--3cede316-5c83-462b-99a7-2b8dc5468a24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b91c054-0341-49d1-ab77-183510bcc06d", "sighting_of_ref": "indicator--830dcb1b-a197-4212-8e9f-2967ff1667e8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9d82eb-f5bd-435e-84f5-3b46234d3bcd", "sighting_of_ref": "indicator--cbaacbb9-8b88-4430-8c1d-401c240a341b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4d9e78-5378-4110-86f8-63381d362b57", "sighting_of_ref": "indicator--f5ae91f4-87d7-471e-9bb4-f6af295c782c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab6fc8-b220-470d-974c-c8f142fcfeaf", "sighting_of_ref": "indicator--35869446-2bec-4212-871c-c1213f56fcfd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad88fd0-a69d-4056-b343-1e8eb8acd4fc", "sighting_of_ref": "indicator--40621b0f-9399-4170-a782-05238b0b1dc1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b29dd69-f223-4f05-8b8d-f8d51fbf03f0", "sighting_of_ref": "indicator--40621b0f-9399-4170-a782-05238b0b1dc1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c2d2ce-5058-4fa6-b5b7-2bf5ec6583ee", "sighting_of_ref": "indicator--a0f5506f-3a27-405f-9859-5879c591b486", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a51c6f2-bdfb-4cc3-91b3-24770b7d787e", "sighting_of_ref": "indicator--ae7ba816-add5-4653-90d2-05201420f1ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240371c8-1928-455c-9d99-ce60ee3f42b7", "sighting_of_ref": "indicator--ae7ba816-add5-4653-90d2-05201420f1ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59e0cb7-7fdf-4e31-947d-acbbe65244d4", "sighting_of_ref": "indicator--fa84742d-29bc-43d2-8545-6306f32010a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17edc33d-dbce-4f9d-bb29-ffeb3bbde356", "sighting_of_ref": "indicator--1c09789d-a5e7-4d52-97e8-716b55188542", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70668138-c2b6-4ffb-9409-280f00306e30", "sighting_of_ref": "indicator--1c09789d-a5e7-4d52-97e8-716b55188542", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa13846-c38b-4bed-bd06-762c11193bfd", "sighting_of_ref": "indicator--1ad9fbd9-4e72-4c82-ad10-a6740f32ba22", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d892f89-08a0-4dda-a344-8d929a55b44a", "sighting_of_ref": "indicator--1ad9fbd9-4e72-4c82-ad10-a6740f32ba22", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5432f70-6a34-4bcb-a593-bb59b2c7a370", "sighting_of_ref": "indicator--98a05b8b-2bfd-4cb2-bf44-06f38c85cba0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe7aef5-7c50-434c-b00a-a40d36292ee4", "sighting_of_ref": "indicator--1462cd24-7247-4b3a-b41b-2d88daa12239", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d17ea8-0803-4a5f-87af-785f9fd54777", "sighting_of_ref": "indicator--1462cd24-7247-4b3a-b41b-2d88daa12239", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c55a43-5de4-4528-b04c-8bc47c7ddae9", "sighting_of_ref": "indicator--b51f5f64-c840-4e57-bb85-a7a9a6ea8aac", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c698c7-434d-4c42-9272-26710b9082c5", "sighting_of_ref": "indicator--5f1d35b5-6dd9-4463-8326-5ecabdf77cc8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2205203b-dc8e-41ac-91e3-bdd0b12155e6", "sighting_of_ref": "indicator--749559df-cfde-4af3-9bb3-7c5bcf12f50a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ba468d-15bf-4756-ab99-002075093bfe", "sighting_of_ref": "indicator--ac40feb9-db70-486b-b4ba-8a66a274ca3e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760116cb-c359-4f9c-bbfa-e4bf449b5a49", "sighting_of_ref": "indicator--28622dd1-4628-4371-9b14-30577a8861e1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907f3c50-0294-4273-9efe-b6e08687373b", "sighting_of_ref": "indicator--28622dd1-4628-4371-9b14-30577a8861e1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea06f99-dc01-44da-a952-7058be7c160d", "sighting_of_ref": "indicator--1d9ed832-44c2-42e3-8cf3-085150e655cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6763cf-e8b4-4ca6-8657-baa496e642dd", "sighting_of_ref": "indicator--1d9ed832-44c2-42e3-8cf3-085150e655cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4acaf1-84a1-4b08-9055-63b0365df9b0", "sighting_of_ref": "indicator--eafe7031-13a3-48a9-9ece-40f944c6e5fa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0fbe2d-9e30-4150-9346-daf673e0eaeb", "sighting_of_ref": "indicator--a510456c-e16b-4a38-8777-5a9676d61c92", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5595a287-ba50-4164-87f3-ef1b26f3c89e", "sighting_of_ref": "indicator--a510456c-e16b-4a38-8777-5a9676d61c92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a04d7-c49f-4192-84a6-a61c2999b62f", "sighting_of_ref": "indicator--1bbe5573-e200-420a-af68-95c9d835aed2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d82447-c3f8-4756-b125-2d932c076456", "sighting_of_ref": "indicator--59caaf01-0f88-4d5f-8967-4061b410806d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e0ec8d-e7df-4eb6-927a-ea4fda4d8e5f", "sighting_of_ref": "indicator--59caaf01-0f88-4d5f-8967-4061b410806d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07559758-f816-4a72-b463-91f13bb65444", "sighting_of_ref": "indicator--5d04532e-de06-4b02-8568-087735472cf2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1c7545-0995-454c-a6b9-9cdd5c81a641", "sighting_of_ref": "indicator--368ed754-4384-443a-a13c-48695475cae7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7599613c-c396-4f96-9701-e34bb0e1d6cb", "sighting_of_ref": "indicator--368ed754-4384-443a-a13c-48695475cae7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c257e5ba-da5e-4758-b4f0-31227074042b", "sighting_of_ref": "indicator--6ac9fa69-6ac8-4bed-9337-0c09e660cc87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1601d297-b8b4-44b4-8559-f6234909c1c1", "sighting_of_ref": "indicator--f6419e18-8369-427b-ade7-3187bd429c76", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab0a69c-dda1-456b-a1ee-016e71d4795c", "sighting_of_ref": "indicator--f6419e18-8369-427b-ade7-3187bd429c76", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b013685-aef1-4011-bd0f-9275a5f7ff03", "sighting_of_ref": "indicator--a1d4b0d6-e0da-42a1-a614-e41b5c99a524", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cd0a77-1f92-4d40-9c4f-7e2bd40d0930", "sighting_of_ref": "indicator--b0a1a2d0-ff63-4598-988c-b8dad0a426c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f965cc-cd85-4714-b86f-dccb68383d14", "sighting_of_ref": "indicator--b0a1a2d0-ff63-4598-988c-b8dad0a426c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed207dbd-ef03-4a04-b27c-ce93f867d3d9", "sighting_of_ref": "indicator--b0a1a2d0-ff63-4598-988c-b8dad0a426c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1550da-4dfd-4602-bac9-3202cb715c6e", "sighting_of_ref": "indicator--2b9cc9d8-5b0f-4154-b183-46c2670b1f7f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc489323-02e3-48ed-bb85-2707c6c837b1", "sighting_of_ref": "indicator--7c9ef8ac-8c32-48d0-a50a-e7d16b4aee26", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f765669e-4d5c-40cc-b091-871fc8de7ad8", "sighting_of_ref": "indicator--7c9ef8ac-8c32-48d0-a50a-e7d16b4aee26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e0523e-1a28-4ebb-98ca-bb488d3ce9fc", "sighting_of_ref": "indicator--7c9ef8ac-8c32-48d0-a50a-e7d16b4aee26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e059fbc-3397-4875-82d2-15ebd2eefe55", "sighting_of_ref": "indicator--d875381f-c2a6-427b-bbd3-f668d956c08d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6a36e1-875e-45bb-9a5e-8d27c7738ff4", "sighting_of_ref": "indicator--fbafd5ea-7c07-407a-897c-43a55ca7f780", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62484da4-b4ab-441d-adf6-b73f00071b82", "sighting_of_ref": "indicator--fbafd5ea-7c07-407a-897c-43a55ca7f780", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349a2406-76bc-44f3-8e4b-44ee2ad918bc", "sighting_of_ref": "indicator--8c630c79-f371-496d-8823-2bb704d3238c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ac53ac-e344-4022-94a9-6b1c7ce8ffaf", "sighting_of_ref": "indicator--ef63eaaf-ac00-4c49-8a92-2b3ef6676db0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4aabab8-61e0-4dad-9814-e59d41883000", "sighting_of_ref": "indicator--ef63eaaf-ac00-4c49-8a92-2b3ef6676db0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c84d14-8def-41d2-aaaa-5d6907d42535", "sighting_of_ref": "indicator--07aa4126-ee24-480a-a0f9-567779a18bc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efdfb6d-ae88-4cba-8d3e-224eb08ac00b", "sighting_of_ref": "indicator--93b77887-cbd3-4024-b017-4160dbc5b9c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9f5d14-fd32-4562-b4ae-0fffe1df3515", "sighting_of_ref": "indicator--817a60ca-beab-4b99-8fa3-56e07a9519fe", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bb908b-8d13-4b74-8481-2b61dc3bca6c", "sighting_of_ref": "indicator--817a60ca-beab-4b99-8fa3-56e07a9519fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bbc001-084f-4596-a01c-2d747db1493b", "sighting_of_ref": "indicator--f0a58b52-16d2-4235-bc6b-ce86a09d457d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24c52e9-5ced-428d-84dd-c93b5cd9ebff", "sighting_of_ref": "indicator--f0a58b52-16d2-4235-bc6b-ce86a09d457d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc5e10b-d410-4132-af38-e2d7de460765", "sighting_of_ref": "indicator--efe80051-3640-4b59-ab9a-665ca9fc1466", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e826bb6-a14e-4a99-8076-b3eff115485f", "sighting_of_ref": "indicator--efe80051-3640-4b59-ab9a-665ca9fc1466", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0ac21a-200e-4919-b7cb-70a40ce11e4b", "sighting_of_ref": "indicator--2cf427fb-95d5-432f-97f8-e192d442f478", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b4190-3015-4c00-81b3-693d88c4fe42", "sighting_of_ref": "indicator--2cf427fb-95d5-432f-97f8-e192d442f478", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b23fb0-4bb2-48b2-bf86-69e0b6b76dd4", "sighting_of_ref": "indicator--d8751068-71e3-4b42-8510-696764f28287", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f778ae4-3459-412b-9457-47e45e18e02c", "sighting_of_ref": "indicator--cfdcf6a2-f670-4be5-99b8-b600ad39c732", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a1a149-e360-45fe-8561-4c9928e76db8", "sighting_of_ref": "indicator--cfdcf6a2-f670-4be5-99b8-b600ad39c732", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609e2743-b9b7-4ee2-ae3a-ea69c83acea8", "sighting_of_ref": "indicator--a970bd38-44a4-4b25-8172-e11d808d8f1c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1663f8cf-f2b3-4f0c-8dd7-00b69b6ffdbe", "sighting_of_ref": "indicator--b7a71c24-2590-406d-89e4-e6db3d51b739", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37aed24-5104-4721-a9f4-495e9ddc5349", "sighting_of_ref": "indicator--b7a71c24-2590-406d-89e4-e6db3d51b739", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8329885c-0293-4b0f-98fe-872705339873", "sighting_of_ref": "indicator--38d58a6e-39bd-409f-8060-803da0c7a916", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266a782-b3b6-4fd2-9cd6-11ac77c312e7", "sighting_of_ref": "indicator--89698d3b-1621-40ff-bd73-dc2e4000259d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582de987-a580-47d7-b1e2-368fc1a0a5c9", "sighting_of_ref": "indicator--89698d3b-1621-40ff-bd73-dc2e4000259d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5c728c-9724-4463-a896-388b01e57369", "sighting_of_ref": "indicator--433421f8-c08a-4c85-b7ad-745de121c18f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b9be12-8819-4d00-99a3-fe9ecf85f947", "sighting_of_ref": "indicator--edf19591-15b5-458f-8ab9-6515cfe818b7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2e5f88-203e-4d1d-9142-309dd81eabed", "sighting_of_ref": "indicator--edf19591-15b5-458f-8ab9-6515cfe818b7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9019d6-73b5-4410-a917-2c757c9e4cde", "sighting_of_ref": "indicator--22989d95-3528-4b83-a731-c6efb939cdb3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931384e3-b527-4ede-ab0d-686d43c3af41", "sighting_of_ref": "indicator--22989d95-3528-4b83-a731-c6efb939cdb3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064db484-b137-4213-88be-0962a90768e3", "sighting_of_ref": "indicator--98ffd223-a2da-41a0-8cf3-330cfbe02517", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee30c3d-5301-4304-9d1d-652c34c4df6c", "sighting_of_ref": "indicator--7b43dc97-71ee-4302-8f54-3d34e82a22c3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c821b1-b8ae-48b1-be94-709c3a05e09a", "sighting_of_ref": "indicator--7b43dc97-71ee-4302-8f54-3d34e82a22c3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceeda37-b173-4eaa-bf70-8b5ac1c3cabd", "sighting_of_ref": "indicator--decfa2bb-1fd2-4d44-b0af-9ed9e602c8e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56caf1ae-38e3-4cfd-871c-07520c82e77d", "sighting_of_ref": "indicator--6095b07e-b4a0-41e6-aeca-b244d7ccf14b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8162ced0-bfd8-47c3-891f-c02d4bc8cada", "sighting_of_ref": "indicator--d850d211-8a3a-4f38-9cef-0bfed70711ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f55bd9-443e-47fd-9fba-3a6e56fa0e2f", "sighting_of_ref": "indicator--d850d211-8a3a-4f38-9cef-0bfed70711ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f27fd24-8ad0-4113-9527-5e36fa4fc6cb", "sighting_of_ref": "indicator--51e5001d-0bd2-438e-8af5-3e58d05612b5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56570a9e-69e9-4802-a997-685050fab0d7", "sighting_of_ref": "indicator--4eda4fd9-bee0-448f-9016-6d6d1a13ac45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98456f9c-4ec1-4a69-b1b9-5223215576d4", "sighting_of_ref": "indicator--20a39366-8112-479a-9405-b8b848e9f10a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82216206-9785-49e2-b4d1-70ae9de331b3", "sighting_of_ref": "indicator--1f60da05-15bd-43c9-ad75-9ebbd6f7447a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e6cd6-13cd-4b99-8624-905e4e610879", "sighting_of_ref": "indicator--7d0ebd8f-74b0-474e-bd91-54518f91faed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0590dc75-7b00-4c9c-ac18-3c4901229107", "sighting_of_ref": "indicator--66f59bda-ab0c-47d6-a733-d8c0a658d7d8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820f1526-9fc9-44f4-a3ec-4a72a0834777", "sighting_of_ref": "indicator--66f59bda-ab0c-47d6-a733-d8c0a658d7d8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d39804-e7bf-4c5f-b42d-a6ed571c9b93", "sighting_of_ref": "indicator--b3dc0a44-d5ed-405d-8b46-98ddbc000690", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed9561-be58-43f6-97a1-9e531ec05f93", "sighting_of_ref": "indicator--3ea93213-ccd2-474e-b054-634bf8df529f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb6ee52-414b-4f46-9789-03c4ead00b26", "sighting_of_ref": "indicator--a7a356a4-d308-4b27-97d5-ea01d7def513", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec8b187-301c-4b15-a531-e5307edb6e4e", "sighting_of_ref": "indicator--fda04f21-c770-4ac2-8c22-6cb56607e8bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cc7ef0-089a-48ea-b2d5-89b5edc84922", "sighting_of_ref": "indicator--d584ae8b-f176-4d0b-a63c-905dad5c4624", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05523295-a820-4faf-bf5f-42881b86a386", "sighting_of_ref": "indicator--0ac4ad76-2a9a-445a-81f4-a23a8e2a6ab9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d422bd3-659c-4bdc-8127-75d689667d80", "sighting_of_ref": "indicator--759d8903-b2c4-432b-85bb-a97e929d8fbb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7203a725-4ba5-4bdf-9687-0d598c18f05b", "sighting_of_ref": "indicator--af3ed648-495d-4667-abd9-12e01529b90f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c54995a-1070-4646-8163-7587453c1b45", "sighting_of_ref": "indicator--a88f46d6-1303-400f-8c3e-23b5dbbb93f6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3d8fbf-353a-4e56-b4c1-e06e78619701", "sighting_of_ref": "indicator--a88f46d6-1303-400f-8c3e-23b5dbbb93f6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a648ea-aad1-42e1-add8-a6b048ec9579", "sighting_of_ref": "indicator--b7189684-bb0c-4705-87f6-89db2726125d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081c7425-268c-4798-af1c-bef3a852caac", "sighting_of_ref": "indicator--b7189684-bb0c-4705-87f6-89db2726125d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612b7a83-c822-4186-bf95-f3bd73d6da83", "sighting_of_ref": "indicator--3e465b43-87f0-4e4a-8bc7-de4a5cbf0eb2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514abe26-ac25-4ffe-84d0-e8a66b19018e", "sighting_of_ref": "indicator--9dfed188-3f78-4811-ad0b-93cfed565cd5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c926feba-dc15-449e-939b-8c5440bed924", "sighting_of_ref": "indicator--9dfed188-3f78-4811-ad0b-93cfed565cd5", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088ea9c6-70cc-484e-912f-a72663e42586", "sighting_of_ref": "indicator--1eb41ac8-a70b-4a1a-8361-2b723d1a30aa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5485e79a-8602-4143-9b2c-46a9ac7bd2d5", "sighting_of_ref": "indicator--ba955168-dc88-422e-951f-3d96d732a1ab", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1565ea79-1a54-42ec-b1ac-65c0e5fec2e0", "sighting_of_ref": "indicator--ba955168-dc88-422e-951f-3d96d732a1ab", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbf06cc-dce1-490b-a4ec-3045d239041f", "sighting_of_ref": "indicator--60bc1ee0-184b-44d9-8879-bd2963077952", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34614c9-f934-4f9b-8bc5-547262be4b25", "sighting_of_ref": "indicator--cb8b7bbe-b5f8-463a-885f-bc2b17f8111d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcf2b5a-496f-4fb5-adff-b2a20f635bc5", "sighting_of_ref": "indicator--cb8b7bbe-b5f8-463a-885f-bc2b17f8111d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc88825-da25-4685-90cb-6f9b69176c61", "sighting_of_ref": "indicator--edddaab9-180d-4584-86a1-c62c29a05d6e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ade25c-2b46-4749-8c37-e57f442f3353", "sighting_of_ref": "indicator--572c2e7e-7d1b-42ea-b4c2-5551e9522389", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dea94d-0b3c-4556-9177-7f8494a808a8", "sighting_of_ref": "indicator--572c2e7e-7d1b-42ea-b4c2-5551e9522389", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81e0985-c136-416c-bb4c-255e098cbe54", "sighting_of_ref": "indicator--348bd892-f0ae-4ffd-bf8c-7e9853f2f600", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb3363-c5c2-49f6-8a02-fa1cae77a2c5", "sighting_of_ref": "indicator--96435b6b-f16e-47b6-912a-25e3bef65244", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89203796-9eff-4cd3-a733-e273a822e2e4", "sighting_of_ref": "indicator--cc104c5f-89d5-457d-bb8b-5919cb21e4bc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df539c29-2d49-4636-bed5-4102fd29f7d3", "sighting_of_ref": "indicator--cc104c5f-89d5-457d-bb8b-5919cb21e4bc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62987e39-aaee-4f4b-9e4e-d4a4b921c54a", "sighting_of_ref": "indicator--378eb994-2d4a-496d-a653-ef65a33396bf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bea5bb2-12ea-4fcf-80cd-a553ede1b2e1", "sighting_of_ref": "indicator--6fa40ead-813d-4395-9f2d-c321db81b79f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed1a0db-6ab7-4ca8-ac72-0fd0c3f42939", "sighting_of_ref": "indicator--6fa40ead-813d-4395-9f2d-c321db81b79f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c641d601-6f72-4d20-a90e-e041c2c3b95d", "sighting_of_ref": "indicator--96a2446f-e3d2-49c3-9086-464cd7c55abf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfe1a0c-1f80-4b1f-bfa8-e9671e6add5d", "sighting_of_ref": "indicator--b8767db4-68ac-49cf-98f5-5b269122f1af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f77a4f9-13e6-4ea7-b6d2-d0966423e676", "sighting_of_ref": "indicator--b8767db4-68ac-49cf-98f5-5b269122f1af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8847a0e-365d-4af1-b3ba-60678efc43a1", "sighting_of_ref": "indicator--11a89ebf-ca49-45c4-bc40-d323e566625b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a46a94-5bbb-4277-afba-8b062869f206", "sighting_of_ref": "indicator--11a89ebf-ca49-45c4-bc40-d323e566625b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31b6da2-c51d-41e6-98af-99212d3ba5e0", "sighting_of_ref": "indicator--51f8781d-96a0-49cb-85c0-c4fa0fc832c2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9fbb1b-2d9f-4b1e-81ca-c5db585ccd09", "sighting_of_ref": "indicator--1f83e721-0add-4ec5-89f1-e382c0366b56", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fea59a-a65e-4220-8170-581d063b2c79", "sighting_of_ref": "indicator--1f83e721-0add-4ec5-89f1-e382c0366b56", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ffa78c-150e-4605-b204-0995f297569e", "sighting_of_ref": "indicator--f8ff3887-aed0-4a18-81b9-6e7baa216fb2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9c518f-6fec-408e-a876-cf152a55fcc4", "sighting_of_ref": "indicator--857f2656-4af7-440e-9fe6-a38435dcd83d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2fa010-2716-4230-ae4f-91e1a16e5f77", "sighting_of_ref": "indicator--857f2656-4af7-440e-9fe6-a38435dcd83d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfe64bd-3316-4de0-b084-1332422e10a7", "sighting_of_ref": "indicator--3ccbc4b1-9563-4484-89fe-3c3e1540a5c0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9dd6fe-456e-45b4-9ce2-47165bcf0721", "sighting_of_ref": "indicator--202856d3-927b-4166-a5c4-364abf53ec1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553aa87e-dc3a-4121-b9f0-38d2104328f5", "sighting_of_ref": "indicator--202856d3-927b-4166-a5c4-364abf53ec1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2af309-f068-462c-8e25-26f2259881e2", "sighting_of_ref": "indicator--202856d3-927b-4166-a5c4-364abf53ec1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a968fe8-8950-4be1-8530-aa3fdddbca4c", "sighting_of_ref": "indicator--e8b49bb3-a2eb-4298-8acb-183741ed050d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610ceed-6106-4d19-bfff-0dbd2ab0ad8f", "sighting_of_ref": "indicator--8003f660-0fa1-471e-add0-94348b1eec25", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fd5c50-ef27-4bcd-96f2-84c52c213189", "sighting_of_ref": "indicator--8003f660-0fa1-471e-add0-94348b1eec25", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac6ae45-8b8a-40a8-ae0a-c81be65e226c", "sighting_of_ref": "indicator--0b7769cd-26d4-4637-98d8-5fbcbd5d5010", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ff2df2-5d22-490c-866a-a11100e10887", "sighting_of_ref": "indicator--59cd831b-1fd3-4490-809a-de726af3b6dd", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd91809-9aae-45a9-bf24-fcf089f92f55", "sighting_of_ref": "indicator--59cd831b-1fd3-4490-809a-de726af3b6dd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3025c5-6e82-4eab-b1ab-fa029429a863", "sighting_of_ref": "indicator--f795645f-1ba9-4bcf-8557-0518b85b01e5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ec09ae-97be-404d-abbd-8f15c28cf7ea", "sighting_of_ref": "indicator--c3694c2e-ab8b-40fa-b7b9-f78e72634aef", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b98b01f-d887-41df-8ebf-1f26a361674d", "sighting_of_ref": "indicator--4b2a59ac-a559-44f6-a338-bab3821e8b10", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e1d43-78df-4fad-9d05-271eb9778c27", "sighting_of_ref": "indicator--4b2a59ac-a559-44f6-a338-bab3821e8b10", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153c4b49-bed5-4abf-816a-626dba054b8c", "sighting_of_ref": "indicator--05a14509-c3ab-44a0-a80e-9a9d0ab3c97e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b327905-1512-4863-a17c-f3e799a5e2ff", "sighting_of_ref": "indicator--05a14509-c3ab-44a0-a80e-9a9d0ab3c97e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a561a17-8376-4959-b2ac-aa03e3836352", "sighting_of_ref": "indicator--beccad89-0f60-4fbf-890a-2391c2fdfdf8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3299558c-60de-4b04-b455-10dc3649d620", "sighting_of_ref": "indicator--e1f8d501-2285-48f1-a294-42ceb627746a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ddd1aa-3e3a-4bd5-9a87-1c68faf127e9", "sighting_of_ref": "indicator--e1f8d501-2285-48f1-a294-42ceb627746a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d2995e-0b68-4c74-ad96-e0042170d469", "sighting_of_ref": "indicator--223b04d0-9c24-48f8-b8bc-142c6585450f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aacf47-7f70-42a3-9357-126984606aac", "sighting_of_ref": "indicator--873a4fed-26cf-4ae9-8f85-99f0df822e86", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435f1718-da83-43c1-8b9b-eaddb73b6970", "sighting_of_ref": "indicator--873a4fed-26cf-4ae9-8f85-99f0df822e86", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf0419f-e945-4b09-a4fb-ec39d83a172c", "sighting_of_ref": "indicator--0c6f17c7-712d-4bf7-9b6f-17bf6ab60c87", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c2930a-ebfe-4de2-8e92-30685a48855d", "sighting_of_ref": "indicator--cd9d81a4-280e-4c9c-86c6-5823f612a53c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f118ef0d-adb1-48ca-81cf-c8f980e65ad5", "sighting_of_ref": "indicator--cd9d81a4-280e-4c9c-86c6-5823f612a53c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3640ee-9abb-4ee6-8bf4-e1a8a7f55606", "sighting_of_ref": "indicator--cc6dbd4b-dc07-4d21-9063-fc753efc29c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7fff53-2b03-4c50-b6f4-eb24be703a23", "sighting_of_ref": "indicator--eb6be092-de4e-4282-b06f-f259437e5ea2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e739e62a-ca40-4248-aab3-29d1fc06e68c", "sighting_of_ref": "indicator--6a16bf5f-50f6-4c1e-9cea-44d1f9962e7b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e83156-28b4-4514-8aa7-62e6d3e59040", "sighting_of_ref": "indicator--6a16bf5f-50f6-4c1e-9cea-44d1f9962e7b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598534f9-137d-4da8-8082-b2b7a547a5b0", "sighting_of_ref": "indicator--a87361da-978d-445b-abdb-8e9cb38d1257", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bccee65-d11f-4453-8685-e96573a3e092", "sighting_of_ref": "indicator--c0d831c0-4cf6-4b06-a652-316f6c74dad7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5f99f4-cdfb-4a35-93d2-4166780b1bf9", "sighting_of_ref": "indicator--c0d831c0-4cf6-4b06-a652-316f6c74dad7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5407dd3-2eba-4196-a6a1-4b46a2344c91", "sighting_of_ref": "indicator--3c10dfa6-afed-43a7-a362-c7cd0f2c7bd3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9077c4-8705-4127-8423-e606d9478f79", "sighting_of_ref": "indicator--4b85e3cf-7a14-4539-b459-934ba33addbc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf614a-c256-47c5-b9a0-ced2b47c70b6", "sighting_of_ref": "indicator--4b85e3cf-7a14-4539-b459-934ba33addbc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3aea17-1b8f-443b-9ee5-5a0fe4671149", "sighting_of_ref": "indicator--41b8c1c9-4d45-463b-ba84-7c4aba5c9e04", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41a5f75-fb0a-4f40-9e2b-e12fe7eaa815", "sighting_of_ref": "indicator--41b8c1c9-4d45-463b-ba84-7c4aba5c9e04", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f0b0bb-4003-4a34-887a-5f30d3c2da48", "sighting_of_ref": "indicator--03784059-a6a5-4999-a846-fb3b3296d039", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db92114e-8f19-45af-8e4f-a843d212ef84", "sighting_of_ref": "indicator--e9b5e7d4-347f-4835-8817-fdc31dc84033", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ee9504-c312-418d-bf5c-86d715376005", "sighting_of_ref": "indicator--e9b5e7d4-347f-4835-8817-fdc31dc84033", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1526b7-db32-4153-9ef4-049b4afaea24", "sighting_of_ref": "indicator--790f1a95-fe45-498b-ba5f-8e0d37ab285e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd5fa16-1d46-4582-909e-3a6dac69f457", "sighting_of_ref": "indicator--0d600c57-2c53-4ca1-b095-6cb514fd1728", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997a41bb-e107-4176-9c65-0b74a6ceef3b", "sighting_of_ref": "indicator--0d600c57-2c53-4ca1-b095-6cb514fd1728", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58b9107-21e3-4a6d-bf6a-6fb9c2e4f078", "sighting_of_ref": "indicator--fc8dc8df-64e2-44cc-a39f-bdda37671e72", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a1cbcc-73cd-457b-b0a7-9d0e461b761f", "sighting_of_ref": "indicator--752cbb89-fbba-4f2e-97bc-97908993fa6c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e18670-d393-4715-8ba6-5765d2e2f3dd", "sighting_of_ref": "indicator--752cbb89-fbba-4f2e-97bc-97908993fa6c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2798212e-75c3-46b6-9000-02d0b280e8a1", "sighting_of_ref": "indicator--524a3d9a-8837-4314-b020-c43f60d91bc5", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07a8ee9-a9fc-4522-852a-f9f842692e2e", "sighting_of_ref": "indicator--ea786cbe-457f-4e11-b4b8-bb85b016e1aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f95094-502e-4608-9159-ae0ee2588dad", "sighting_of_ref": "indicator--ea786cbe-457f-4e11-b4b8-bb85b016e1aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42796763-908b-4216-97ef-0c411a664b60", "sighting_of_ref": "indicator--3df3e4a2-10b6-434f-9e71-03b1bd3a5452", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cee20d-c13f-45a3-9680-b2c96a439c46", "sighting_of_ref": "indicator--9f88319f-0291-46ef-a6a6-a8ddd424b610", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badee526-b73f-4a23-9fa6-ad8865bd428a", "sighting_of_ref": "indicator--9f88319f-0291-46ef-a6a6-a8ddd424b610", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a56aa2b-d814-4f73-8eed-d9209cf2a414", "sighting_of_ref": "indicator--4dd97943-50ee-48f5-97e9-13de179fcfdc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754ac461-a475-4430-ad20-a8cd1cb22831", "sighting_of_ref": "indicator--62aac93e-682b-4b0e-89a4-8f897d5a276f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e9ae18-734a-44e6-9f79-936968b9c84c", "sighting_of_ref": "indicator--62aac93e-682b-4b0e-89a4-8f897d5a276f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d3574f-99df-47a3-bed8-46c36f8a2bff", "sighting_of_ref": "indicator--706529d2-4a3e-499b-bd36-7ddeb0186732", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14b0cec-9c5b-4545-a5ee-60bc6882431e", "sighting_of_ref": "indicator--7aabbf28-3664-45aa-a41b-81750e213721", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ee58e7-cf4e-4992-ae5d-781e13f9a7d2", "sighting_of_ref": "indicator--7aabbf28-3664-45aa-a41b-81750e213721", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5e4fb6-e8ca-4553-9f88-4d658a2031ad", "sighting_of_ref": "indicator--a1e8f6ca-ca24-4506-be21-fc95b4afd714", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792caf64-b522-48f2-863d-8267d65b0aa0", "sighting_of_ref": "indicator--c58a66e6-f1cb-426f-a228-39eedf4d8839", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0aaae-492b-4beb-a921-c66716a159e2", "sighting_of_ref": "indicator--c58a66e6-f1cb-426f-a228-39eedf4d8839", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b35c07-f9fe-4959-9762-00eeb976575d", "sighting_of_ref": "indicator--abcdfa23-2e45-4823-bb7e-27efd99099c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c1d04a-5fde-4004-a741-2f3cdbdd1b6b", "sighting_of_ref": "indicator--2ba53d20-6212-4fad-8c30-af8df3c822ee", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f67e596-e706-48a4-b2dc-e98b8f2877c3", "sighting_of_ref": "indicator--2ba53d20-6212-4fad-8c30-af8df3c822ee", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e231a88-888f-4628-ba46-4b776929a26d", "sighting_of_ref": "indicator--597bc8a0-66e0-4b9d-8f5b-fb4a39b8a1ef", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91983d7-5dbc-4f77-b1f7-2f2d182f734d", "sighting_of_ref": "indicator--6f887529-9835-41f1-a91f-598470064f0c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ee3f03-8744-4256-8ee5-97e07a877407", "sighting_of_ref": "indicator--5306913b-459e-4b55-88b3-cfad811a2d5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55af219-b0d5-4fc8-b694-078344017fdc", "sighting_of_ref": "indicator--53c6f528-899c-4dc9-9218-587e2c02418f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a527c-76af-4cea-82eb-59ce2c7ed4f8", "sighting_of_ref": "indicator--163daf5f-e680-49d6-b6ba-b3747ae39952", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71bc3a9-95f6-4ca4-b3c4-3176c6c23baa", "sighting_of_ref": "indicator--7c9446d7-24a6-4d34-9bf4-b8942dbfe33f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bbb56c-f2f0-44d1-86b7-88609d28cc97", "sighting_of_ref": "indicator--7ad55a04-d7ce-4032-8686-8f5024f27bb4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6758636d-a19c-4473-a993-8da801d71728", "sighting_of_ref": "indicator--dc06b1d0-2adc-48d8-9497-4a9fe1034523", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23f44e7-3b50-450f-8e7e-8b57a981b34a", "sighting_of_ref": "indicator--dc06b1d0-2adc-48d8-9497-4a9fe1034523", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f04fbd7-4643-4cfb-b4a0-7e0eefde8435", "sighting_of_ref": "indicator--bf8d9490-6092-498d-a02c-942629d92351", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c79889-a5b7-401d-8f6e-a25ac977515a", "sighting_of_ref": "indicator--5c4e74f0-1a01-4567-b97a-02381663cd1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4ed60d-2cec-405e-af29-319f65a2dfe5", "sighting_of_ref": "indicator--5c4e74f0-1a01-4567-b97a-02381663cd1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9aaa75-abb0-48ae-93b8-91fdb2a6ea09", "sighting_of_ref": "indicator--d0c88d2e-f1ca-4322-b335-90febb2a4a6c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87b167f-f568-48a6-a8b5-cf8fc7331a1f", "sighting_of_ref": "indicator--0bf1d606-e8b1-4a9e-b0bd-ac22dc9bbeae", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cb2472-96d9-4b61-b1de-fdacb247ac4a", "sighting_of_ref": "indicator--0bf1d606-e8b1-4a9e-b0bd-ac22dc9bbeae", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e82c446-1574-4723-82c7-38449a42c1ae", "sighting_of_ref": "indicator--865785ef-f126-4ce2-9c6a-55b72a8d2cb7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61506df0-f3e0-4985-bfdb-a9ca282a0494", "sighting_of_ref": "indicator--a0f263d6-5128-4972-9308-195661606aa3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c19fd85-dce5-4051-8cd2-e69fd3cb333a", "sighting_of_ref": "indicator--a0f263d6-5128-4972-9308-195661606aa3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7562bfc4-90c9-4b2f-b410-7738587b6db5", "sighting_of_ref": "indicator--a0f263d6-5128-4972-9308-195661606aa3", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e919203b-d75b-4c4c-ab3a-abdddb7a20dc", "sighting_of_ref": "indicator--d9e2172e-bba4-4cd2-8b45-c5c4b23cc682", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfc1467-3f78-428f-a1dd-bd1afd719690", "sighting_of_ref": "indicator--e11001c9-c159-4073-842b-0dcb19183710", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ea5259-aa39-4640-98ef-1403b8a4d721", "sighting_of_ref": "indicator--e11001c9-c159-4073-842b-0dcb19183710", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc4b77c-c0d7-4797-8aed-f0185d85b399", "sighting_of_ref": "indicator--70cf6a44-fc1d-4a04-a3f8-49f267ea8334", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1f6d56-0e11-4053-b9ed-9155ac82278e", "sighting_of_ref": "indicator--934e9afd-40eb-4509-89dc-99e90733a22b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e03814-b70a-4f73-84be-adf52e883bdb", "sighting_of_ref": "indicator--934e9afd-40eb-4509-89dc-99e90733a22b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c50b2c-4150-4aa1-906f-e8ff24392437", "sighting_of_ref": "indicator--79cea70d-9883-4aaa-b82b-cad69ba52558", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcebab3-5777-41ff-9a13-35b2fe4a6d7d", "sighting_of_ref": "indicator--38da9387-afb4-4544-b785-76ab175ca020", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e393fd8-4224-46f8-bacc-035144439dce", "sighting_of_ref": "indicator--38da9387-afb4-4544-b785-76ab175ca020", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d33edb0-7d39-4869-acea-e247cffb1634", "sighting_of_ref": "indicator--16cc6314-e762-49c2-8341-3b035c500686", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6a78ad-a9ef-4f53-9cb5-90fd5b982c41", "sighting_of_ref": "indicator--058b14ee-a891-4336-a52e-079c56d78d1b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d93925-3849-4355-8646-83e2e1474a24", "sighting_of_ref": "indicator--058b14ee-a891-4336-a52e-079c56d78d1b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec92d7b-9009-437c-b73d-64dc5c6b9015", "sighting_of_ref": "indicator--a8f55822-aabe-44dc-9559-6ac496e4334a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9c0df0-4e8d-48e5-be33-45ed6c9b7b00", "sighting_of_ref": "indicator--50ff8df9-e66b-4781-b1f4-4b28c1cbd6e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e15dc9c-e4df-4a56-8392-400fa41989e2", "sighting_of_ref": "indicator--bf876c81-4ef6-4830-a5ac-3261870e51ba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a970ec19-c2ee-4dbc-8715-2a2ad6f0ac86", "sighting_of_ref": "indicator--bf876c81-4ef6-4830-a5ac-3261870e51ba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63772303-f829-4492-b705-a536b3a06d7e", "sighting_of_ref": "indicator--3c9910d7-dfba-42d7-b498-ddf9a12983c1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0761e7c-d241-4c18-959b-553946da2e2f", "sighting_of_ref": "indicator--c80a6849-1beb-4b02-9cc7-c896863c7bff", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f968d-69e8-4df4-9152-ce3517012db9", "sighting_of_ref": "indicator--c80a6849-1beb-4b02-9cc7-c896863c7bff", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4e77c3-5af1-4dc0-a880-44b1b5f7e7f6", "sighting_of_ref": "indicator--1ab6a866-ea41-470a-9861-18a8a3e5566c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfc1724-4283-403b-a25f-d5d32210ee4e", "sighting_of_ref": "indicator--82281a1e-761d-4d38-84ef-fb1e8237f22d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089639f3-1fa4-438d-a753-e48f641e3d65", "sighting_of_ref": "indicator--82281a1e-761d-4d38-84ef-fb1e8237f22d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25fbda4-2d36-4bdc-b793-cbeaa6eec2dc", "sighting_of_ref": "indicator--76d77ffa-e35f-46df-a218-2e06b44a2878", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb5fffd-2e3a-462e-ac4a-b49048af0949", "sighting_of_ref": "indicator--e273bddb-7a33-43b3-917e-0cf93f6a6203", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc261daf-6ed3-45d1-96a0-a330a0665011", "sighting_of_ref": "indicator--e273bddb-7a33-43b3-917e-0cf93f6a6203", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b532dd-f2d0-428f-8264-7c0474233c5f", "sighting_of_ref": "indicator--0738fb47-f2e3-44df-8dd4-9ca8d0b2a01d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98576b11-0662-48e8-996d-85c3ba2effcf", "sighting_of_ref": "indicator--e694bf47-230b-41f9-aa92-8e0d62748c20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46314bbe-3e03-47f6-9d0c-f2be858a177a", "sighting_of_ref": "indicator--e694bf47-230b-41f9-aa92-8e0d62748c20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ca12b7-b50a-42b9-9817-63ef9d3fee6a", "sighting_of_ref": "indicator--d749c415-dec3-4fc3-938a-bc9d2d87aed4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73c6b6b-072b-43e4-af0c-98020eba2399", "sighting_of_ref": "indicator--2133cafa-c088-4a2f-99f5-2a51581a9378", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6396b0a8-cb46-4b1c-bf1b-b562288c8d39", "sighting_of_ref": "indicator--2133cafa-c088-4a2f-99f5-2a51581a9378", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f5d2af-b0e9-4ae9-b12d-7b962121abdb", "sighting_of_ref": "indicator--375c2858-dcfa-4445-a3ae-5947d347f3d9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2790f77-4f89-4648-84d8-0be34e59dbef", "sighting_of_ref": "indicator--e70efd47-a862-4e23-824f-e7054e8583ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a70a29-4ea0-4ab3-8618-485a8522deb4", "sighting_of_ref": "indicator--e70efd47-a862-4e23-824f-e7054e8583ec", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cffd03b-ec04-4e0b-bfe6-35fe46a3214b", "sighting_of_ref": "indicator--7f3b9cc0-a9e1-4e5b-8a42-59c972c19979", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5ed6fe-2542-460e-9c68-34d3a81ecb9e", "sighting_of_ref": "indicator--8f9ba23a-0a6f-4506-867d-ba5a35147e20", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2eaf2c-a5df-4108-b7b3-a38c63b12ed4", "sighting_of_ref": "indicator--8f9ba23a-0a6f-4506-867d-ba5a35147e20", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47e3d61-b05a-492c-8b18-c98d7585f3a1", "sighting_of_ref": "indicator--a9359777-30be-409f-9bd9-7aedc05a34cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0086d403-a123-4503-ba2c-81ddbe14f1d7", "sighting_of_ref": "indicator--353e7aab-9213-4612-8693-42c68841a9e3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22091769-1e5c-40a0-9f9f-443f15ffc33d", "sighting_of_ref": "indicator--353e7aab-9213-4612-8693-42c68841a9e3", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed628a76-76a3-4856-b410-b9a7cd9b298e", "sighting_of_ref": "indicator--da6a8939-045e-4083-ba69-7dd5ab85e5a9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee118b-7472-40e6-b480-fbb52a348326", "sighting_of_ref": "indicator--15542e0a-be46-47fe-8b2b-b4c0bc191c24", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203883d2-969f-4cea-8682-c9d30a599c98", "sighting_of_ref": "indicator--15542e0a-be46-47fe-8b2b-b4c0bc191c24", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c5d16f-bb7b-4072-9a9d-1cbe19f2842c", "sighting_of_ref": "indicator--f2055077-84e7-4e59-8ae3-4ca1960b1126", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5f5a2-6eb6-4215-bbbc-16f4ed42de4e", "sighting_of_ref": "indicator--0852f555-e1cc-4165-8745-26e56d87fcaa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc265b0-c6cd-4634-af9b-41bf0a29f391", "sighting_of_ref": "indicator--0852f555-e1cc-4165-8745-26e56d87fcaa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b434579a-3fb3-4f42-8e94-9853b3391b15", "sighting_of_ref": "indicator--c7debb10-d487-4f8e-aca2-046b8e994f6b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a71639-b2f8-47fa-9438-d6cda6435d0e", "sighting_of_ref": "indicator--bbb132bd-d8dc-4b08-9efe-8bdd247434af", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699bba6-ec48-42f4-80e7-ae4bc8a41447", "sighting_of_ref": "indicator--bbb132bd-d8dc-4b08-9efe-8bdd247434af", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0b9a4b-38af-4bd6-9778-e966621bcbcd", "sighting_of_ref": "indicator--1bab735f-617c-4cf0-b055-fd2b678d3065", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0172e37e-64d8-4f55-95de-9d6c7e9f091c", "sighting_of_ref": "indicator--9745b57a-ad7c-4849-9dd0-d02ae41a7cce", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132f1229-2030-45cf-8703-a82d376fdbf2", "sighting_of_ref": "indicator--9745b57a-ad7c-4849-9dd0-d02ae41a7cce", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee29ecf1-84a1-4fed-ae3d-97f46047511c", "sighting_of_ref": "indicator--ba0cc3bc-57cb-4817-9a28-1506722c04c6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691295d2-3750-4b36-9c1e-9806ed72e1cf", "sighting_of_ref": "indicator--721b88ca-2edf-4cf2-80fa-f25a5c2f0ae0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370c21b9-a150-4e98-8de2-7d60bdb0d1db", "sighting_of_ref": "indicator--5a734883-26c7-4ef0-a031-9130aa7460fe", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1c3d9-afd7-46fa-9515-215422d9a728", "sighting_of_ref": "indicator--a0ae1547-84dc-469c-8307-0353b85b9811", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013911f0-e2b5-4666-84d9-a6e93aea24d0", "sighting_of_ref": "indicator--eb2f5c32-93ae-4dcd-ae7e-287687e097c2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e051baf-b360-485e-bc8e-a2600de8a230", "sighting_of_ref": "indicator--eb2f5c32-93ae-4dcd-ae7e-287687e097c2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8efa416-f5fc-44ce-b542-5c7ac26f1bb8", "sighting_of_ref": "indicator--f5ccca6a-a1f3-4ea6-b2b7-fd4b2afb399a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d25a9ea-d08f-4cc1-a4a5-b73d12c83dc7", "sighting_of_ref": "indicator--a8d7e5d7-9f4b-461d-9d41-031b0a50f901", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349673e4-506a-4721-82f4-85c3b414cc1e", "sighting_of_ref": "indicator--e45b72dc-f5ec-4f92-ba2f-42fed50240fb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a182d111-0365-47b1-a73a-4b2affbd3665", "sighting_of_ref": "indicator--3a9f0754-3c42-4c3a-822e-7259abdd32f2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ac9482-236f-4edc-9155-38c3dc4b3483", "sighting_of_ref": "indicator--99790e95-3246-4073-a1dd-aa705d358fda", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c060ac9-bf58-4855-b113-03f8bb528753", "sighting_of_ref": "indicator--7b0cf3f7-6171-471e-b5f4-2219f6d5ae1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eca600-ee6b-4a0e-86c8-998f90198fd3", "sighting_of_ref": "indicator--ad624254-fdd5-436d-8ece-095420317beb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b778d22c-764c-4822-8173-4b47e00c5450", "sighting_of_ref": "indicator--012de241-63a4-486a-8af8-077a8af84ea2", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8fbe29-c2f9-4fb3-8c23-1fdd84271364", "sighting_of_ref": "indicator--012de241-63a4-486a-8af8-077a8af84ea2", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c5a135-2d25-433e-978a-e117eb34b9e5", "sighting_of_ref": "indicator--825c3ad5-aa10-4f65-a5d3-7c0c046a5120", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781dbd8-df0d-4cf5-a64f-5a2dcabe4e5b", "sighting_of_ref": "indicator--6b3c3bf6-515c-4041-9073-a7bb11ca845f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306cedda-7756-4b05-bf99-460d379f5002", "sighting_of_ref": "indicator--6b3c3bf6-515c-4041-9073-a7bb11ca845f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695140c-d52a-4d94-88c2-d07ce69e3f88", "sighting_of_ref": "indicator--9a35f5a1-5291-402c-94ec-7095c66a3a42", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c9a65-4372-4e4d-93f3-21ed84ccc057", "sighting_of_ref": "indicator--849bf55c-f9b0-4e43-836d-8c0e6dc52ea6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0417b6-31f3-4dab-9a5e-51768b8e94ad", "sighting_of_ref": "indicator--849bf55c-f9b0-4e43-836d-8c0e6dc52ea6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845aacd7-1ca6-4d28-a2bf-06083989012b", "sighting_of_ref": "indicator--a84790b4-f83d-4981-9d72-6047641e29a7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13978876-3bda-45b3-be2b-92608d3bc5bd", "sighting_of_ref": "indicator--a84790b4-f83d-4981-9d72-6047641e29a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cb4d2a-e6df-4c5d-8793-b9e954583ac8", "sighting_of_ref": "indicator--8dd512ac-d81a-4fe9-a4e1-e1e7d4eec727", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e5c5e7-5960-4a53-a6cb-379f95051db3", "sighting_of_ref": "indicator--db074783-e04f-4f7d-b584-3b7f68667eaf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a8f118-ccf9-4597-8f02-8d3e157e6396", "sighting_of_ref": "indicator--db074783-e04f-4f7d-b584-3b7f68667eaf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b3ed7f-1e04-4a42-ad9f-405c134b1d5f", "sighting_of_ref": "indicator--9f5a53e3-b8f5-4f92-83e4-0ff8e620cbdf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45571bc8-4477-44e7-be58-9e8965034f4f", "sighting_of_ref": "indicator--4fb2c3f6-ce30-4305-b2da-95f6fc6e9382", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515508b2-94f3-4e23-8f37-9d2795120c4c", "sighting_of_ref": "indicator--4fb2c3f6-ce30-4305-b2da-95f6fc6e9382", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac523b35-8783-4620-a8c3-e84fb4ac4450", "sighting_of_ref": "indicator--b4f2f7f8-06f6-4bbf-95a6-5a513ebeecaf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dc71b5-96ba-4d32-8d9d-eda368b4d33d", "sighting_of_ref": "indicator--5dd14ba4-8c42-4431-affb-25086a934bf7", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd0cc9f-8f18-42b2-be2d-b2f7888683fe", "sighting_of_ref": "indicator--5dd14ba4-8c42-4431-affb-25086a934bf7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224645e-61c6-4dbf-9917-9444d4fb8309", "sighting_of_ref": "indicator--dbd5e334-eb78-415d-83c7-e6c2e38fe7a1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955fcc0a-baf4-4b48-93da-3d35cc0212b7", "sighting_of_ref": "indicator--edde01e3-d427-4445-b2d5-14c65e0f8f99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b470d222-be17-4e5b-8f27-8dbb4ce904bd", "sighting_of_ref": "indicator--edde01e3-d427-4445-b2d5-14c65e0f8f99", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6aa9ca-f222-41fd-b4aa-b5f061ed4241", "sighting_of_ref": "indicator--2d086e8f-4bbe-45aa-aae6-3e8d840ee9cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fc399e-b17a-4db5-89e0-d5fbdcd8936b", "sighting_of_ref": "indicator--29e89b26-ddfd-4278-9c12-08c6eaf6a190", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3a9510-f8b5-4057-8a22-836db9a10f8e", "sighting_of_ref": "indicator--29e89b26-ddfd-4278-9c12-08c6eaf6a190", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a0cf7e-0763-4f3a-b571-8c4f52051d00", "sighting_of_ref": "indicator--54e5e63c-d663-4732-b101-e1c93ce6d6de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466fc54f-09d6-48dc-95e0-ef7648e6bba6", "sighting_of_ref": "indicator--54e5e63c-d663-4732-b101-e1c93ce6d6de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a11203d-77b6-4313-bd6c-1e5ff6329668", "sighting_of_ref": "indicator--66f12c43-4b91-4436-a69d-0903f160c190", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0a0f22-7d30-422b-8738-f047e9af3b39", "sighting_of_ref": "indicator--11bad7ca-153c-40d1-b903-32a2ba29a525", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9964b176-7cd5-4d1e-88ef-28699f2894ca", "sighting_of_ref": "indicator--11bad7ca-153c-40d1-b903-32a2ba29a525", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eed4e3-f214-4cd5-8b3d-8e91b2d885d5", "sighting_of_ref": "indicator--010ffbeb-6677-468c-a26c-6a38ec4f56a4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec0575d-8967-45c2-9fb6-fac8cad1576b", "sighting_of_ref": "indicator--a13cf3ab-a951-45a8-8ba7-19bd56ab0b0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac31255-9e32-4fe0-99cb-cfc0f10eb5fa", "sighting_of_ref": "indicator--a13cf3ab-a951-45a8-8ba7-19bd56ab0b0b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e221080-cea2-4751-b7dc-d024a5cf3b9c", "sighting_of_ref": "indicator--b159ec62-d1f9-478a-b068-1d85bb0752fb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b007ec2-d568-41ea-8713-8a6e11e74fbf", "sighting_of_ref": "indicator--a230c264-eb46-456e-9dbb-5104e7240812", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f59fed-9ff0-40b9-9f48-5cd1642d9e5c", "sighting_of_ref": "indicator--a230c264-eb46-456e-9dbb-5104e7240812", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d548cd86-85c9-40f6-a965-21f08ed39dff", "sighting_of_ref": "indicator--b1743cf4-746d-461d-9c82-ed3290ad13cb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ae21b3-068a-47ca-8675-9fe83c1b709a", "sighting_of_ref": "indicator--59fcdd88-5d54-447e-bbc2-8ec641a28b09", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490faba3-3ade-4f50-8599-fe53be4627b8", "sighting_of_ref": "indicator--59fcdd88-5d54-447e-bbc2-8ec641a28b09", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55881a1c-b9ec-4341-b9c0-87abe18018ff", "sighting_of_ref": "indicator--0326c91c-6e2e-47c7-8a57-7772c44ae3aa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e0679e-c8ce-4fcb-8544-9a1291931ff8", "sighting_of_ref": "indicator--0326c91c-6e2e-47c7-8a57-7772c44ae3aa", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdee77d-3eff-4cb3-8932-41351bdb28a7", "sighting_of_ref": "indicator--a39d64f3-3770-4317-ac2a-d748ed420dba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d86929-26e6-4337-83b0-22543a765494", "sighting_of_ref": "indicator--4406520d-8c02-4eb0-9704-c851ff0e7669", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9135a9-b05f-43b2-88a8-71910a800087", "sighting_of_ref": "indicator--f8211c72-fe9d-43b9-8be1-49e75c4ea724", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ac98e9-1346-475a-a920-28b325eba8fb", "sighting_of_ref": "indicator--09efe213-a9f9-418c-8af3-d8fdc67f5d54", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2577a4f5-411b-409e-8c06-01165c18fd64", "sighting_of_ref": "indicator--bb84acf6-ffea-4f63-b47b-1f29664c81e7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d883c07a-b48a-4734-a775-530bd9611bb1", "sighting_of_ref": "indicator--53f66ba7-6805-4e90-999a-9e43eb7ba63b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d39491-1a01-45ec-a26d-2657509d02ae", "sighting_of_ref": "indicator--5a5a2a84-0dd1-4d05-8bb3-8f4e5dcc90f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eae4b1e-0ad7-4a7a-b7ca-ae3716a29507", "sighting_of_ref": "indicator--95c1c748-8b67-44eb-beef-9ac60ea2a700", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1def4d-917b-4d50-82f4-2eb757f292cf", "sighting_of_ref": "indicator--dfe0aef7-f61c-45a6-b133-5668919fc302", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02164a-e681-40c0-98f7-619ec24cca63", "sighting_of_ref": "indicator--c2f342f0-c23f-4282-b5a4-0477c638d9cd", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a869859-62d9-4183-bf17-df5ffb7de593", "sighting_of_ref": "indicator--d7fa0a38-d96e-4ca3-bcf4-6c242ccbe049", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90be5134-57aa-490c-9c4e-c26c151c0862", "sighting_of_ref": "indicator--8a7b8c30-d505-49b9-8dbf-b8db8d977599", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401c8d5e-eb33-4926-9bbe-a09aa5473ca4", "sighting_of_ref": "indicator--a43af524-cfed-498e-8194-fd25c68c046e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d32b2-c40e-4056-ba5e-ba6f8cfb906a", "sighting_of_ref": "indicator--3ef1fda5-98cd-4ecc-859e-c76ba69e3e61", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884d6d05-b43f-4178-9a2b-f3624bfc6449", "sighting_of_ref": "indicator--612b8cd1-5b63-452e-94e0-2befaf10f98a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c60ee7-4a2d-414e-ae2e-5d94ed4cebbd", "sighting_of_ref": "indicator--612b8cd1-5b63-452e-94e0-2befaf10f98a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5508ff9a-2b6c-4cc7-bdee-7905836e37b8", "sighting_of_ref": "indicator--612b8cd1-5b63-452e-94e0-2befaf10f98a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ef07ef-bba5-4872-9b9c-3c6b9b16554a", "sighting_of_ref": "indicator--597d828c-907e-4134-a8f0-7ea2c58b82c9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062047f4-157b-4859-93ba-b73817a36e81", "sighting_of_ref": "indicator--597d828c-907e-4134-a8f0-7ea2c58b82c9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2acf2ac-3149-4743-a79f-20e538ad44bb", "sighting_of_ref": "indicator--597d828c-907e-4134-a8f0-7ea2c58b82c9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fffadde-321c-4e78-b191-097921b6dc33", "sighting_of_ref": "indicator--2fcc3979-9440-44ba-b23f-d718e8bef419", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d9e221-ec34-4639-975f-f0285da0af59", "sighting_of_ref": "indicator--2fcc3979-9440-44ba-b23f-d718e8bef419", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c7a738-0546-4d40-9b87-73e77b96220f", "sighting_of_ref": "indicator--2fcc3979-9440-44ba-b23f-d718e8bef419", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3db7be-e137-4fc4-b76b-00f98cf99dff", "sighting_of_ref": "indicator--a84c093a-2a4a-46ff-94f9-6330bf468609", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ad5052-48e4-4a65-a495-1378e8a346cc", "sighting_of_ref": "indicator--a84c093a-2a4a-46ff-94f9-6330bf468609", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a838a827-190d-49dc-9fa5-6f7ba94d7bf1", "sighting_of_ref": "indicator--91550c60-4969-4d5c-9576-351df62510f1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74886e7e-370b-4741-8791-2e59a40050cc", "sighting_of_ref": "indicator--91550c60-4969-4d5c-9576-351df62510f1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6509bed7-232b-45b8-81ff-50cb8b7b25be", "sighting_of_ref": "indicator--b1e78d2c-31e9-4acb-82cf-87f7441fe8b1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6cc7e3-aeff-491b-98b5-8bac37efe96e", "sighting_of_ref": "indicator--7ccd8c3d-26f1-4f95-b0c3-81fbc4cfe028", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfeb724-a048-4cb3-a4b0-b78694d7d3ae", "sighting_of_ref": "indicator--a6896926-ba46-4631-8451-d7f3b1b0a0d4", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510cb085-5a1b-4d27-99aa-e3ba6d31961d", "sighting_of_ref": "indicator--a6896926-ba46-4631-8451-d7f3b1b0a0d4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9da94c-7c1b-4576-a380-95197498b351", "sighting_of_ref": "indicator--a6896926-ba46-4631-8451-d7f3b1b0a0d4", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db51547-661d-40a1-9837-3f6a09b00736", "sighting_of_ref": "indicator--696fa06a-86eb-462f-a312-b75959334c71", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a212aa-543b-4c69-b2a2-7d0b90fc7265", "sighting_of_ref": "indicator--43bc9dd8-909c-4896-aa88-513bb63832bb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417113b0-59f5-42a6-8101-0655eb0882db", "sighting_of_ref": "indicator--43bc9dd8-909c-4896-aa88-513bb63832bb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec1c05b-71e2-48a5-a57a-c95d3f598a4c", "sighting_of_ref": "indicator--601735cc-888c-4cc2-88d5-fff3b5fa781d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8272941a-4232-4995-aefe-da028d5e3a5d", "sighting_of_ref": "indicator--8dce00ec-990e-465c-93fb-880b8d0a0c99", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06f86fa-320d-4bcc-9976-66b242e4ea59", "sighting_of_ref": "indicator--2faaec14-7e3b-42c7-8c0d-b926c1cf6d1d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0377d6f-2bde-4308-a9d3-3c7547366e30", "sighting_of_ref": "indicator--a49b611f-8a13-4dd5-a7f6-4be674c65a49", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05472d27-e300-4f14-8341-c66ecbb30c1f", "sighting_of_ref": "indicator--e6c64c02-8c1f-45f1-99c9-53eafd772d04", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e1c270-e71f-41f0-b79e-a06fa770eb48", "sighting_of_ref": "indicator--64b8b9cf-7d49-41aa-9b5d-87b92a3899d0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f286418-3f87-45a4-85bd-9c3f04db25a5", "sighting_of_ref": "indicator--64b8b9cf-7d49-41aa-9b5d-87b92a3899d0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5b6eb7-bfa7-4900-8b81-b67250329a40", "sighting_of_ref": "indicator--64b8b9cf-7d49-41aa-9b5d-87b92a3899d0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1c6340-f64d-4667-8e50-de26f6ff01b5", "sighting_of_ref": "indicator--4c7f4136-eade-4c07-a3e8-caa1baf9ea9f", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1baa43b-233e-44c8-a39d-ffc07476ec01", "sighting_of_ref": "indicator--4c7f4136-eade-4c07-a3e8-caa1baf9ea9f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d49cc-1780-42b7-896d-cb450ed12a0a", "sighting_of_ref": "indicator--4c7f4136-eade-4c07-a3e8-caa1baf9ea9f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398bd06c-10f8-425c-bdff-98e88ee705de", "sighting_of_ref": "indicator--a1568380-153d-474b-b4e3-e868820ef26c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6545f6b-f5c7-428f-9781-288a494486e2", "sighting_of_ref": "indicator--1329d416-de1c-47ff-9988-bc8b507f870f", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ea000b-4326-4eb5-90ee-6e24017e3215", "sighting_of_ref": "indicator--122f5f49-5276-4d25-a993-9c2402ce438b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2fccd8-9ea7-42f4-947a-a76bc037ebaf", "sighting_of_ref": "indicator--122f5f49-5276-4d25-a993-9c2402ce438b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c6040-cd8c-404d-a806-db6d2a57753f", "sighting_of_ref": "indicator--e6d5613b-33e5-4bb2-b555-f949a9e36f3d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbd5539-0e29-41b3-bf1d-8eb5a855a312", "sighting_of_ref": "indicator--8efa8bb7-09fc-489f-a038-2a1d0a60bfbf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c379312-620d-4953-8bca-79d295251ec7", "sighting_of_ref": "indicator--faba368c-ac16-49ed-a3a2-b15ba9be5683", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c109d94-25ee-418a-ae65-b71db9b1a203", "sighting_of_ref": "indicator--9e85af19-72fa-42a8-9f3b-742994de0c26", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1947efd-36e7-4324-a4fe-f852098d639c", "sighting_of_ref": "indicator--9e85af19-72fa-42a8-9f3b-742994de0c26", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c9fb2e-5f40-409e-9ebd-754db4317535", "sighting_of_ref": "indicator--62bc1124-ef46-47e4-9491-14721336f907", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbb6a84-ed2e-4c2d-9167-11d5961cfdc9", "sighting_of_ref": "indicator--62bc1124-ef46-47e4-9491-14721336f907", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2745de94-54e7-4915-8245-da4a86f07c0e", "sighting_of_ref": "indicator--62bc1124-ef46-47e4-9491-14721336f907", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b52e368-afdf-451e-9a0d-73d89533f6b2", "sighting_of_ref": "indicator--f87be963-24c4-4ff6-bfe9-88be5d01ff7e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffb72a8-48a5-44fc-94e6-0df5cd92062a", "sighting_of_ref": "indicator--f87be963-24c4-4ff6-bfe9-88be5d01ff7e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36df82ee-8bdc-4e91-bab2-6b93765f2302", "sighting_of_ref": "indicator--f87be963-24c4-4ff6-bfe9-88be5d01ff7e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62621e0f-b948-4ca0-af57-4c28268796c7", "sighting_of_ref": "indicator--1a8718b6-45bf-408d-989d-ff8acfa4121a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e86851e-dafc-4dcc-9ab9-ef4713ed4c98", "sighting_of_ref": "indicator--1a8718b6-45bf-408d-989d-ff8acfa4121a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f665f5-4a5b-42c5-8601-9474cab8e4d3", "sighting_of_ref": "indicator--abf990ae-3eb2-4eb2-9aae-7736bdde64be", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b9e8ea-2bf4-44d9-a23b-8e6a9e5993c1", "sighting_of_ref": "indicator--9f00be4f-e724-419d-8ee6-582d129e1179", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a11284-12d3-48e3-8078-19e38e2f7029", "sighting_of_ref": "indicator--9f00be4f-e724-419d-8ee6-582d129e1179", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d1fb88-e651-46ff-8c84-8e0f76ae6fdd", "sighting_of_ref": "indicator--9f00be4f-e724-419d-8ee6-582d129e1179", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c58e62-4834-4d2d-ba06-ea775bd8d8fc", "sighting_of_ref": "indicator--99f7c741-6ef4-48f5-b2e5-b3d86ecb8a5e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b3a91d-5738-4edd-b130-899fb7f5c891", "sighting_of_ref": "indicator--83fe9e9e-ed81-443e-942b-f5c5b4aa520b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0898edfa-ef41-4475-a158-62a20e3ccc46", "sighting_of_ref": "indicator--83fe9e9e-ed81-443e-942b-f5c5b4aa520b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1e39de-dd2f-4870-a17d-ad4dad7fc484", "sighting_of_ref": "indicator--83fe9e9e-ed81-443e-942b-f5c5b4aa520b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaf9a3d-4b10-469a-b6a7-577a77c00916", "sighting_of_ref": "indicator--00c33f01-07f9-4554-b73f-dade095b42be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed1da52-4a2a-4573-bffb-a8444bb0faf4", "sighting_of_ref": "indicator--50b93dff-616c-4c0a-b735-da8dfa020fdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5ad8eb-7fba-40d7-87c6-9ffe0675054e", "sighting_of_ref": "indicator--a8f48074-2f95-4ef0-b68f-2aee5ce1eb8c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408b6120-d11e-4ed6-b2a5-aa7b41c258b4", "sighting_of_ref": "indicator--a8f48074-2f95-4ef0-b68f-2aee5ce1eb8c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c5c824-d0de-437a-85da-06d31e0ed4d3", "sighting_of_ref": "indicator--afe1bb80-417e-43f3-8212-f39e1daf8808", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b0fa4d-6776-40d8-ae6b-c4e441d0c265", "sighting_of_ref": "indicator--afe1bb80-417e-43f3-8212-f39e1daf8808", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fa9d3b-7472-40c9-b207-86e7ad578ae3", "sighting_of_ref": "indicator--0b24ba6c-3c85-4c14-9080-be8cd268d32a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68ee518-5ce0-4053-8fa0-d676c6cbb2a9", "sighting_of_ref": "indicator--2bdc1b55-3530-4488-b6c8-33c44dc9963a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef984d49-452b-4dac-af79-ef1cf68221aa", "sighting_of_ref": "indicator--5668eb7f-0e7b-4029-a7c4-6dcecac62b1e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074a46e0-5d6c-423d-9b6d-b789cd33f3e5", "sighting_of_ref": "indicator--5668eb7f-0e7b-4029-a7c4-6dcecac62b1e", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79dbb16-92b1-4a37-b829-acd9e74957b9", "sighting_of_ref": "indicator--5668eb7f-0e7b-4029-a7c4-6dcecac62b1e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12788286-07b7-49d0-bc24-a6ef485b22ac", "sighting_of_ref": "indicator--cab742e8-5d04-476a-aa9a-a7b3c3446248", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3022b56-be1b-481b-b771-7b37a5444f73", "sighting_of_ref": "indicator--cab742e8-5d04-476a-aa9a-a7b3c3446248", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3b7bd3-7dcd-48d7-a51c-7b3036c37741", "sighting_of_ref": "indicator--cab742e8-5d04-476a-aa9a-a7b3c3446248", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dacaad6-c248-47dc-b9ef-a060fbc0ff9c", "sighting_of_ref": "indicator--79d2eae2-3230-4639-89d5-7ebeccab3e5a", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313384c3-34bb-4265-8f3a-a5391ff66654", "sighting_of_ref": "indicator--d36d94ff-4a9b-496c-aee8-81d17eeeee8e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a49e664-d1ef-4d79-bf35-40296a404f78", "sighting_of_ref": "indicator--d7cb5f4c-1e38-4937-ab83-d47cd4958fd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ef8f94-64c2-4021-aefa-7ba13a3dd736", "sighting_of_ref": "indicator--d7cb5f4c-1e38-4937-ab83-d47cd4958fd6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4bf793-bd2f-4f40-94de-e471a4b9edb7", "sighting_of_ref": "indicator--d7cb5f4c-1e38-4937-ab83-d47cd4958fd6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4740418c-5d36-44fb-bd9e-4e08c371b750", "sighting_of_ref": "indicator--3e9f59b9-d828-45f2-a996-39184c3902db", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e248b9-74df-4c98-8a68-707abe2ca389", "sighting_of_ref": "indicator--a326a5b6-e384-4cdb-9039-4fcd3541ce93", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb033ff-74c8-4495-9781-501badc52a6c", "sighting_of_ref": "indicator--a326a5b6-e384-4cdb-9039-4fcd3541ce93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f0fd85-6595-4a0d-be9a-7df54e5ea8dd", "sighting_of_ref": "indicator--832584cd-88e9-4500-b93e-5e9ec1f2f2ca", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51911bc-b274-438c-9d99-5f5c29ddf805", "sighting_of_ref": "indicator--832584cd-88e9-4500-b93e-5e9ec1f2f2ca", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f6d8ca-5855-481c-828c-5b84e593c1c3", "sighting_of_ref": "indicator--832584cd-88e9-4500-b93e-5e9ec1f2f2ca", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbefafec-bd87-4f35-95e9-215ca956f054", "sighting_of_ref": "indicator--568effa0-106e-4b47-a1d4-3587cda96dba", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de03f761-28fc-4bd5-8bff-dcc2cd3fa310", "sighting_of_ref": "indicator--568effa0-106e-4b47-a1d4-3587cda96dba", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabe04cf-7faa-4b04-810b-a96229e0a2ab", "sighting_of_ref": "indicator--568effa0-106e-4b47-a1d4-3587cda96dba", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7afe6b4-81fe-4103-9d4b-eab90e835278", "sighting_of_ref": "indicator--c825262b-f7e1-4494-beae-416d391a4bc7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283e0ddc-ec17-4245-b7b3-070af2a1abd4", "sighting_of_ref": "indicator--c825262b-f7e1-4494-beae-416d391a4bc7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5dc103-2485-4f23-8351-78b82c784340", "sighting_of_ref": "indicator--4e09c64f-8e8d-4785-8426-b24c9772be70", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a40c07c-66f1-4a99-a5a9-34960cdab942", "sighting_of_ref": "indicator--4e09c64f-8e8d-4785-8426-b24c9772be70", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865d6a81-1573-43df-a631-3a1ef4bac7cf", "sighting_of_ref": "indicator--4e09c64f-8e8d-4785-8426-b24c9772be70", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb39cfc-6b8d-428d-876f-46c6b454f2f7", "sighting_of_ref": "indicator--97c954e5-7d1b-485c-86ee-3e42666c4ee1", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c10196-38f3-4c8d-b18e-970dcb15703a", "sighting_of_ref": "indicator--97c954e5-7d1b-485c-86ee-3e42666c4ee1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5d01bd-82c0-4dc0-81de-73f6ec070c3d", "sighting_of_ref": "indicator--97c954e5-7d1b-485c-86ee-3e42666c4ee1", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d3a4d3-9247-4254-99a9-3dba2c734598", "sighting_of_ref": "indicator--e38740bd-9b7e-4cb0-8524-f3725c27e221", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1ecc0c-9a1d-41ff-9936-5911a24912e4", "sighting_of_ref": "indicator--e38740bd-9b7e-4cb0-8524-f3725c27e221", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62dbf84-4186-4627-a37a-2781ee3fa5eb", "sighting_of_ref": "indicator--e38740bd-9b7e-4cb0-8524-f3725c27e221", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a7989c-2d0b-41f2-b33c-805f80650c03", "sighting_of_ref": "indicator--ca83d9a0-1b9b-40e7-992d-63aa8eff19e6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a398b99-8af6-4aed-9598-b6c834e38ae7", "sighting_of_ref": "indicator--ca83d9a0-1b9b-40e7-992d-63aa8eff19e6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d03494-3b2a-40b2-91e2-d39320eb5889", "sighting_of_ref": "indicator--ca83d9a0-1b9b-40e7-992d-63aa8eff19e6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dbebfc-fd50-4147-9bb4-40e995f08764", "sighting_of_ref": "indicator--a7bdf8bb-89bc-4df3-b07f-61e052e9450d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209f1c63-61fb-49f3-8b9a-eb79b8b27404", "sighting_of_ref": "indicator--a7bdf8bb-89bc-4df3-b07f-61e052e9450d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa04041-b9a0-4d16-81b4-be8f4d8f7782", "sighting_of_ref": "indicator--a7bdf8bb-89bc-4df3-b07f-61e052e9450d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc7388b-028d-455e-8434-662f982d4cce", "sighting_of_ref": "indicator--54297546-146c-477c-bacf-154bcc48d1b6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1b676d-a37c-47fa-9e2f-7e03c88000ea", "sighting_of_ref": "indicator--54297546-146c-477c-bacf-154bcc48d1b6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7fe649-99d1-4b8b-9e3f-f103a20facbc", "sighting_of_ref": "indicator--54297546-146c-477c-bacf-154bcc48d1b6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8756b070-c4f4-4e6d-8ac5-21e228d5d8af", "sighting_of_ref": "indicator--92017f1c-dbeb-48d7-ba3e-6e5c2477c0a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2c5485-b215-4e9d-91eb-fc90cf451104", "sighting_of_ref": "indicator--0fe6fc06-fcaf-4b71-9e01-7579fc77c9c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc489e57-7ba2-43bf-8fdc-3092823caa33", "sighting_of_ref": "indicator--6d551cc4-d814-446f-a63e-d1bf25951a4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c96e45c-fcdb-4960-8301-5491ebc3f198", "sighting_of_ref": "indicator--e7a8d856-b96a-430d-a1a4-1e42464c49e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1b7468-473e-4d60-a1fb-091af23f1c27", "sighting_of_ref": "indicator--6e7ca690-3527-4a15-bf0d-c48673de15f0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7415cc8c-842c-4c10-935a-4d43398c21dd", "sighting_of_ref": "indicator--6e7ca690-3527-4a15-bf0d-c48673de15f0", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64e7df1-6232-4bed-b74c-81c8e99923ff", "sighting_of_ref": "indicator--6e7ca690-3527-4a15-bf0d-c48673de15f0", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ffecf1-58e9-4f9d-aefb-95b6cf10639a", "sighting_of_ref": "indicator--1dc3def8-2fb5-4847-8cf7-60b09c1ec7bd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06769e70-a443-4131-9c8d-9a2b61c9f33f", "sighting_of_ref": "indicator--395b75f7-d19d-4b9e-8e43-6d420f8fedcb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e119d-1f11-4a82-af17-6acd82c62857", "sighting_of_ref": "indicator--395b75f7-d19d-4b9e-8e43-6d420f8fedcb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607528c0-7784-4698-9af4-30af25277b37", "sighting_of_ref": "indicator--395b75f7-d19d-4b9e-8e43-6d420f8fedcb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6656252-624d-434a-8190-0d57314a2eeb", "sighting_of_ref": "indicator--c938cc28-6689-44ba-9717-b6b2174b94ed", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9b2e2-a834-4664-9ac3-055060bb712d", "sighting_of_ref": "indicator--c938cc28-6689-44ba-9717-b6b2174b94ed", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f817e21-ed35-48c8-ad47-3582f71e29e7", "sighting_of_ref": "indicator--c938cc28-6689-44ba-9717-b6b2174b94ed", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fc1df2-e9fb-4479-ad25-a477dcd4f1d0", "sighting_of_ref": "indicator--ae5741a5-f45d-47e5-991b-3d34ffd37a93", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354113cf-b428-4c9d-a729-df2ca73de032", "sighting_of_ref": "indicator--ae5741a5-f45d-47e5-991b-3d34ffd37a93", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df0d80c-bde9-4e19-876c-1b5100bf9a38", "sighting_of_ref": "indicator--2446309e-92da-4a97-94b9-e9618578c427", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eced1e2-a17b-4ea2-8ce4-7e32801838a2", "sighting_of_ref": "indicator--2446309e-92da-4a97-94b9-e9618578c427", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d8b167-31e7-437b-88d2-14900ee3dc7a", "sighting_of_ref": "indicator--2446309e-92da-4a97-94b9-e9618578c427", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f2aac9-6146-48df-a92d-003ac753c56f", "sighting_of_ref": "indicator--c2655c50-aeec-41cc-bb65-311abf98bc75", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7ac7ec-b8f2-4bf7-aa12-5d5c2e8f5af6", "sighting_of_ref": "indicator--c2655c50-aeec-41cc-bb65-311abf98bc75", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b22376-b4a6-4ebd-bfbb-21909168aa3d", "sighting_of_ref": "indicator--c2655c50-aeec-41cc-bb65-311abf98bc75", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe13ce02-f0a3-47c9-b365-7986f44e43f0", "sighting_of_ref": "indicator--2fde08c5-864c-4649-8f0d-9d13bdfb71cc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557c6a4d-85be-41ec-82ff-de123291712f", "sighting_of_ref": "indicator--2fde08c5-864c-4649-8f0d-9d13bdfb71cc", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513529d-4981-47e5-be4e-9c9b5493d57d", "sighting_of_ref": "indicator--2fde08c5-864c-4649-8f0d-9d13bdfb71cc", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e01c26-2063-463f-b2c3-ff40bff6d384", "sighting_of_ref": "indicator--1c86e8d8-da07-4484-9bc3-79265ef187c8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4d4234-dbaf-44a2-bf6b-a2a9d1048338", "sighting_of_ref": "indicator--1c86e8d8-da07-4484-9bc3-79265ef187c8", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506ff0c7-e7f1-4ab7-bfea-00b2df09fc96", "sighting_of_ref": "indicator--1c86e8d8-da07-4484-9bc3-79265ef187c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e807af7-8bb5-4d8a-9310-583b2b177a22", "sighting_of_ref": "indicator--7ed81aa9-316b-4d8d-b7e2-74f57e882b08", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bd7985-4892-4c29-8006-db3a5db0d8bf", "sighting_of_ref": "indicator--7ed81aa9-316b-4d8d-b7e2-74f57e882b08", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049ae8f7-71f7-49a5-804f-1e31aaa9f42b", "sighting_of_ref": "indicator--7ed81aa9-316b-4d8d-b7e2-74f57e882b08", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1a0125-97bc-4e80-a4aa-c49a4f37d0bb", "sighting_of_ref": "indicator--665e4e8b-5dfa-49cf-90a6-3e0ee86814eb", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67624983-5c9d-4cef-88d4-967040035831", "sighting_of_ref": "indicator--8157561c-ebca-442d-b499-619ca8a744de", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91dddb4-07b7-4342-99cb-b1bb416bbf37", "sighting_of_ref": "indicator--8157561c-ebca-442d-b499-619ca8a744de", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9314629-0145-45b6-be14-6cc6cc88cab5", "sighting_of_ref": "indicator--8157561c-ebca-442d-b499-619ca8a744de", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9777ad-cfe3-433f-901e-f08a668a4cee", "sighting_of_ref": "indicator--1886a359-2d42-4565-9c33-df6a3e439b40", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f3ea4a-d138-42e6-8aa2-b033b35f151b", "sighting_of_ref": "indicator--1886a359-2d42-4565-9c33-df6a3e439b40", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f060927-83b4-46ea-8bf9-2f0dd3df660d", "sighting_of_ref": "indicator--1886a359-2d42-4565-9c33-df6a3e439b40", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c826a67b-c5ae-439b-904c-43e4e25ba61c", "sighting_of_ref": "indicator--6e6d393d-4512-43a1-8e3e-1eda838baa60", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d74d8-3764-45b3-9ed2-d5521af5b04d", "sighting_of_ref": "indicator--6e6d393d-4512-43a1-8e3e-1eda838baa60", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1b978c-b183-44f8-8603-7ca551ae4d08", "sighting_of_ref": "indicator--6e6d393d-4512-43a1-8e3e-1eda838baa60", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c47e6e2-a0ca-4d6f-a440-3597b40924c7", "sighting_of_ref": "indicator--cd1d0624-6702-4000-a03f-683a6ce14e29", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfc8b84-e9e7-4043-bf88-f56b79168bbf", "sighting_of_ref": "indicator--891c4624-7c2e-4ecd-835f-b50197d7ef1a", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f463c6-2d18-4efb-9089-1c025be780fd", "sighting_of_ref": "indicator--8f40e006-793a-483a-9051-8ed620e0c513", "where_sighted_refs": ["location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369a736b-5dc4-430c-a2fe-f84b15229862", "sighting_of_ref": "indicator--90763eee-17c0-417f-87b0-d6ff5f2e2fce", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90554e5-9b34-4757-b983-cc99e7d31666", "sighting_of_ref": "indicator--f24dd5a2-b87c-4635-955c-14c139d51dd1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5143db8-c5c0-4a2a-a6e7-141ea1d07cb4", "sighting_of_ref": "indicator--c8f3341f-1350-43b0-8864-61797b80a442", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa09535-638c-42e2-878e-bfbea9a7c92e", "sighting_of_ref": "indicator--c8f3341f-1350-43b0-8864-61797b80a442", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349703ba-db79-4af7-8b6a-4a1058c201b4", "sighting_of_ref": "indicator--d3da57f2-74a3-43e2-869f-49cfc24145e5", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56731e86-9786-4d32-a30d-64bab9e10d2e", "sighting_of_ref": "indicator--528dfff2-8f5b-4b79-b23f-dff5451de8f8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ecd67-33f1-48c2-8612-7b273b031d00", "sighting_of_ref": "indicator--8fdd6318-42aa-4493-a61f-bce6c219641f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02bfe4f-e284-4fab-9745-19af21c6767e", "sighting_of_ref": "indicator--79ad93f0-fd1a-4ba7-9f30-e4c3ec68b63b", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89534268-c255-48e0-bef4-74dc89628295", "sighting_of_ref": "indicator--b2d977ff-2bb8-4c07-9ab4-84351b0b2fdf", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5242125-246d-4fb9-981e-4ea148abf4bc", "sighting_of_ref": "indicator--cd813956-68f0-4d3b-a658-5cad69edf921", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fca23c-a494-4278-b463-a9cc10a3faaf", "sighting_of_ref": "indicator--cfb910e1-8835-4f62-a963-77b9894a7683", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16ff287-da26-4f83-993b-a3569647c815", "sighting_of_ref": "indicator--0605f6ec-c4fd-4735-8d9a-ee38d269c16f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58a4cfd-6503-4263-af13-e68158d274e3", "sighting_of_ref": "indicator--2509cd42-f753-472b-917d-6e149cac9d15", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6fee7f-2da4-4be5-8770-625183a84c66", "sighting_of_ref": "indicator--68ee9b9c-50be-463a-a19d-25a0ef40ffb1", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50652dd6-8e61-480c-af66-53e2aa8d2872", "sighting_of_ref": "indicator--7b52c44c-f9c2-435d-b666-aa50ec41ab9d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ab2bd4-9a4f-4652-b848-f57d09d417de", "sighting_of_ref": "indicator--07994486-cff3-4dbb-892a-cefab3686100", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b08363-c14e-4454-9ed3-66e4cd599abb", "sighting_of_ref": "indicator--247aea7e-c7a0-4e15-b06e-6c66393a501f", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2c0b2b-1270-44e6-a308-73cfb6f095c6", "sighting_of_ref": "indicator--b812f687-2a64-4340-b58b-83e3334a8de6", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71150454-bc4b-41c1-a69d-d3c90418cd95", "sighting_of_ref": "indicator--f712af6f-25f0-4873-8c0f-8bb735936107", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd1b2bc-96f9-4310-bc15-8099e0b9a426", "sighting_of_ref": "indicator--1c1b63df-8d9c-45ff-b4fc-c454b8ec2dcc", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a709cf10-0df1-4a77-8ec4-747cfe633ab9", "sighting_of_ref": "indicator--a982b09b-14d6-492b-8476-b2b3519fb7a2", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb74b0f-7887-4053-b0e2-c1714912d4fb", "sighting_of_ref": "indicator--046b1403-9ef0-4721-8632-607e1fb4f9d7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf520e7-b325-4532-b76b-649d75291e97", "sighting_of_ref": "indicator--993cbbdc-e368-415a-9d83-2d58e66f6acf", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a31c32-a6b3-4efa-a5ab-792efb9b5d34", "sighting_of_ref": "indicator--2533f50c-0dc2-4e8b-a4f0-8f9197bbcabd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cc40f-0751-4484-bee6-47af0bca135a", "sighting_of_ref": "indicator--8f8d658c-2c62-4173-90d3-e1cb15620ffa", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2379d5-2e7f-47db-a85c-a00108105d00", "sighting_of_ref": "indicator--8f8d658c-2c62-4173-90d3-e1cb15620ffa", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8787cd-80ef-4425-9c22-30f3c36b1f99", "sighting_of_ref": "indicator--c26021cc-a59a-4eae-a878-9ee03b145dd6", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3c14eb-389b-4e3d-919d-559700dd5f21", "sighting_of_ref": "indicator--c26021cc-a59a-4eae-a878-9ee03b145dd6", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec18519-a542-4d41-ba96-37d657079523", "sighting_of_ref": "indicator--4b61243a-69e3-4fd1-8c8e-ec7c03e0c90e", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d1b8b2-7bb8-4b43-bc8b-8e92de048c8c", "sighting_of_ref": "indicator--4b61243a-69e3-4fd1-8c8e-ec7c03e0c90e", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db61dcb-cfc7-45e1-9b10-273524e5033a", "sighting_of_ref": "indicator--ad764daf-35dc-49b7-9629-4406471a2571", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92e255c-cee2-4874-8607-e0bfe4606868", "sighting_of_ref": "indicator--ad764daf-35dc-49b7-9629-4406471a2571", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00716db3-9d70-4b6e-a319-8e4ca7073a7e", "sighting_of_ref": "indicator--ad764daf-35dc-49b7-9629-4406471a2571", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d99504-64f9-44c9-9e66-474ef1b1b51f", "sighting_of_ref": "indicator--76e0d0ef-0037-4496-9f97-fb5aaf0ffa57", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56abc76-e21a-4aa0-8c83-925c5c19e9b4", "sighting_of_ref": "indicator--76e0d0ef-0037-4496-9f97-fb5aaf0ffa57", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90a0f9e-7154-4ce5-a9ea-226fc1253282", "sighting_of_ref": "indicator--a54a96ad-ef4a-4843-9d36-f9566a753576", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed17d6a-3bec-4dcb-a9ba-5d275c9ced4b", "sighting_of_ref": "indicator--42c03561-9587-4352-8d28-7e698d3efa34", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62a4c2c-61f1-4d88-af90-e8aa714f083c", "sighting_of_ref": "indicator--42c03561-9587-4352-8d28-7e698d3efa34", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e5b725-ea3f-4c20-a0b3-8c5d960c5731", "sighting_of_ref": "indicator--42c03561-9587-4352-8d28-7e698d3efa34", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8751909-0088-4208-aade-e1451d24174e", "sighting_of_ref": "indicator--22b75151-3315-46d1-9442-bf15c99fe849", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a86f6fc-e448-47ca-97c1-2df08ba871b4", "sighting_of_ref": "indicator--23d52ea9-b8dc-487f-be59-225d4da0994d", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9322821-23ba-4de3-99b0-11fe2b58fdd5", "sighting_of_ref": "indicator--744231a3-3356-4822-aa6c-237cb5bdb502", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c396e62-a189-43c5-9033-f5230e2703c8", "sighting_of_ref": "indicator--744231a3-3356-4822-aa6c-237cb5bdb502", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a72ac-e33a-41fb-b3f4-29dec5f8ccb5", "sighting_of_ref": "indicator--744231a3-3356-4822-aa6c-237cb5bdb502", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cfedea-861e-4090-bab1-64b1b4c18840", "sighting_of_ref": "indicator--4f026f44-3120-40b0-b482-1e53b4f72f5d", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8619d779-158d-4fdd-b585-ef6fbb21ae54", "sighting_of_ref": "indicator--4f026f44-3120-40b0-b482-1e53b4f72f5d", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a6e6a0-c0a6-4fec-91a0-a0d88d54b5c8", "sighting_of_ref": "indicator--d7315433-49df-44d5-aca9-4bfd5d106bdd", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b58ad7-dcfb-4565-80ec-5e4abad2364a", "sighting_of_ref": "indicator--c543cfd3-ac4e-45a6-827c-6a9b7890c4a7", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ba8173-4447-4a70-a5ef-092eb88cfaa6", "sighting_of_ref": "indicator--bad86b19-37f9-4fb2-91e8-fac10dc83c92", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8f5597-1b8f-49b3-9d7d-929497177d53", "sighting_of_ref": "indicator--9edf3874-f122-4dab-b985-31fe118ebc0b", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e45fd7-af70-49d1-81fb-7822562ee447", "sighting_of_ref": "indicator--f83a349e-fcc9-4e03-b69b-4c7d76055e83", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c8bf6e-d21d-4adb-85bf-3d213644f5fc", "sighting_of_ref": "indicator--f83a349e-fcc9-4e03-b69b-4c7d76055e83", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59080d30-995a-4d67-8e38-2672f9df261e", "sighting_of_ref": "indicator--9cfc5c9c-61e6-4e1e-97e0-b37643c57dc4", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3d1bfe-bdd6-4121-b796-e49c7e0620ef", "sighting_of_ref": "indicator--87e9a12d-7b75-4d63-83aa-18e55d2f87cf", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faee19f6-a1c0-4714-9ee9-8f1a2b797512", "sighting_of_ref": "indicator--270ee204-aa2e-46d0-b05f-03ca2db2dd5c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d3d059-48f2-4443-8957-968e9bec1352", "sighting_of_ref": "indicator--a228ea4b-20a2-4bae-88a9-04ee153e3062", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a42d0f-d0f4-4715-836e-9ab0694f305c", "sighting_of_ref": "indicator--f2820ece-6d10-4957-a041-bf224cac0ae3", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20ef221-12f4-40d2-92f3-0f2addb61d0e", "sighting_of_ref": "indicator--36147e8d-1fa3-4e2b-b8cf-7e47cf573578", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deb6f76-5840-4132-a17a-0dd4659ab655", "sighting_of_ref": "indicator--a0266ca0-37e4-4438-a611-5216b22e87ad", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbd3420-2482-4ada-9502-9e6abd06d440", "sighting_of_ref": "indicator--40f0db29-f78d-4e7a-bc60-0f3207277ba8", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3dd339-690e-4841-86e1-53ef8a2f3600", "sighting_of_ref": "indicator--40f0db29-f78d-4e7a-bc60-0f3207277ba8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236c2a87-9b0e-4385-b92c-30a61e9b3bc8", "sighting_of_ref": "indicator--a2727183-1cdf-4523-8968-bf6469c74b63", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89016932-bb3b-4599-98c8-2f38a0acb3cd", "sighting_of_ref": "indicator--a9e80be8-b6c5-4c77-acbe-27f90d51d35c", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f0fe62-96a0-4cdb-a06b-7792b70866d6", "sighting_of_ref": "indicator--a9e80be8-b6c5-4c77-acbe-27f90d51d35c", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c12572-7067-45e2-bb61-d2330663c049", "sighting_of_ref": "indicator--a9e80be8-b6c5-4c77-acbe-27f90d51d35c", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b175266b-cc04-44d7-9c4c-0eaeb07eeea9", "sighting_of_ref": "indicator--705ed0fb-833f-421d-b024-7e1c975f67ec", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57ee0ed-dbab-485d-b3cf-6add4795e87d", "sighting_of_ref": "indicator--e81d77da-017a-49de-b502-43fdaf51aed9", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf3ea61-f419-455b-94c2-a77a4727fff3", "sighting_of_ref": "indicator--e81d77da-017a-49de-b502-43fdaf51aed9", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f81561-225a-4a45-b684-e33dc970cc73", "sighting_of_ref": "indicator--e81d77da-017a-49de-b502-43fdaf51aed9", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0003630e-a0ea-496d-8500-3cbd6dcc02ff", "sighting_of_ref": "indicator--b7a5fce6-1e8e-46a8-baf2-3d93db78c4cb", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db56f0d0-a3c0-4c06-b30f-0fc4bc6c3c04", "sighting_of_ref": "indicator--fbee161d-a652-4c65-967f-34f60bb07c45", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23c8bd9-290f-494f-8a87-328de9629a8d", "sighting_of_ref": "indicator--cd07d5d2-1c0e-49ea-a243-975d38f714b0", "where_sighted_refs": ["location--c65ff51f-c07f-47b2-8aae-d718d8686c14"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072461ef-fdb2-4a86-814d-73a22901e2da", "sighting_of_ref": "indicator--41688968-687e-4358-87e1-7d8d7cceccfb", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ef0161-697e-46e5-91aa-6d7dfc4d010a", "sighting_of_ref": "indicator--791cb5d6-9310-47f5-81b0-86213ddae088", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e17aeef-697a-4b30-8fd6-559869915d6b", "sighting_of_ref": "indicator--7d42ca25-f48d-4de8-a59b-2286502516a7", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f1197c-1421-4f92-a81f-ce4db3ef5a0c", "sighting_of_ref": "indicator--7fca149f-98d3-45e4-aa6f-7221fe9f5b3b", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26795671-d7fd-4a26-8d56-d5be8d08c317", "sighting_of_ref": "indicator--f12cc943-7a2a-4f1a-a2e5-3def1ba409c8", "where_sighted_refs": ["location--8906c0e9-f1d7-47f5-bc67-479abf8aefea"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2101c5-9a61-4e6d-9b86-5b54fb8213fa", "sighting_of_ref": "indicator--8028b7eb-869f-46da-a647-b3fef51b4f7a", "where_sighted_refs": ["location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d"], "first_seen": "2026-07-30T00:00:00.000Z", "last_seen": "2026-07-30T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--40fe4955-602b-4a29-8414-2a46e23db594", "name": "Threat Report for 2026-07-30", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-31T11:00:01.628Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--c65ff51f-c07f-47b2-8aae-d718d8686c14", "location--aceb36a4-fa4b-4a73-b612-08605dfcd7c2", "location--4efb6ff8-c82e-4e75-9eef-9bd490e9552d", "location--8906c0e9-f1d7-47f5-bc67-479abf8aefea", "infrastructure--e1698276-bb15-4940-91df-6d80d8eb1e5b", "infrastructure--af09259d-761d-4d74-a957-2d42137ee558", "relationship--5d320051-257f-489d-9788-9f41f2441900", "infrastructure--5c7d6276-5107-4f26-a90f-1acd017cca5d", "infrastructure--6931be07-b5b1-40ac-a95c-e234b9485644", "relationship--2ad98d07-1086-452f-a8fa-4d6309743b4c", "infrastructure--39bb23dd-a508-4684-8104-8221b2204eec", "relationship--cefc9d50-9728-4351-8024-0ad495f9313e", "infrastructure--e78aac74-9d04-48fc-8a38-05056328129e", "relationship--c9724a14-c657-43b0-ae96-bd228df39ed0", "vulnerability--c46d58e4-c51a-4f97-aa50-33daca853709", "vulnerability--5f6ea998-22a4-45e2-8e31-6371eb528ffc", "vulnerability--22a67071-791e-4936-942c-ca234854d76d", "vulnerability--bfeebea1-c16b-45fb-849e-8c477676da6d", "vulnerability--7bf0f1a8-1d80-453f-a615-3408394ce317", "vulnerability--193429ec-8440-4d7a-ac62-66efcb65bb2f", "vulnerability--4b33b2f9-6677-4b2b-a841-9fda3b4cf66d", "attack-pattern--9a840f3f-bcf8-41d4-9062-26bbed85c1d1", "attack-pattern--36e30756-e384-41f7-a2ca-9f8b14b80402", "attack-pattern--fdf581cf-e394-4740-9126-8df12de94ee8", "attack-pattern--000db3f1-4311-4381-91a5-ab2a08e87178", "attack-pattern--5cb465f2-8138-4a10-8a3d-386189d53c0a", "indicator--d7e1c6e5-3216-4616-b7bf-107126c3803e", "indicator--3500c450-229e-4c0d-aab2-38b08ec5d4e6", "indicator--28ebd2c2-ee7e-4fb0-8ccc-dfb63112ce05", "indicator--cc5232ad-2e0e-47f4-97e6-36ef3da404b2", "indicator--f45b3dbc-127a-46ae-a433-8df1df9a6c3b", "indicator--e96cc0b2-5121-4004-aae8-f16b63f3d75a", "indicator--ad1a3517-9999-4775-8f4b-834a60cdcb5a", "indicator--7f5deccb-2858-4795-9c03-d4fcc7b1eafc", "indicator--0566f13d-6a27-4363-a3d8-89618f6b3ec2", "indicator--e40aee4d-37bd-454b-bc28-3bb0bd4ad489", "indicator--a696635b-27d2-4e32-9335-100e2d4c5da7", "indicator--37448038-19b6-4079-8f15-c7c2245fefee", "indicator--25130ead-9a24-4f43-93f1-99a74c0baf4e", "indicator--a7565d86-b39a-4cbd-96b9-13d581d79d6c", "indicator--9a5beafe-3143-4aaf-ba35-c83efd8c18a6", "indicator--79fab8e2-7234-474f-9b07-a314303236a4", "indicator--9df660b0-fbec-4bf1-b99b-cd110df34b98", "indicator--05475e47-3a64-4a45-8ab0-377696437886", "indicator--d77951ea-12ba-431a-b04f-d293d2d36d6f", "indicator--a2c23a97-d02f-4f1f-ad16-f14b9ef8edef", "indicator--a20f6f2e-26a7-42ef-a1b6-8128a34841f7", "indicator--68beb27f-4654-4043-9b00-80178971031b", "indicator--85722c06-0ff5-4f46-a483-60f82d5d8ea4", "indicator--ccf5d36e-5903-4d44-93ca-ff01036644f3", "indicator--514d064b-6a80-4334-b6c6-48ffbdda8e19", "indicator--b307969c-3c4b-4a22-8365-c8d7edfe5dd5", "indicator--b909f392-4fb0-4b25-a7e7-079501ec8b7b", "indicator--221944d9-a4ec-457f-aa30-59bddf529992", "indicator--e28bbef4-b99d-4b98-8e0b-d7b6ec3936c2", "indicator--79e97ea0-fac4-4cf4-8bf4-6c9500369ccb", "indicator--a2f04ddb-9748-4f64-88dd-6b8a46ad6d71", "indicator--05ad3166-610f-4e2c-944f-396f2108db60", "indicator--7be084b2-da99-4963-9492-148260b44b43", "indicator--e8ab698f-6cb7-464a-a027-dcf4c7872777", "indicator--c30611a4-0a9b-45aa-9d75-cffb52b692f3", "indicator--190acfab-c750-4f1a-a804-d5415be9aa81", "indicator--af1c2dc9-0b3a-43e5-adff-7fe84b7c09f9", "indicator--1daa371c-b5fa-49db-93ca-d2b1e391c7d0", "indicator--f3118f28-8475-4e01-b26e-1401b25b5f44", "indicator--3ec7c856-326f-432d-896d-a337e52fa55e", "indicator--99fa2b29-e0fe-4260-aa12-054df913fbd8", "indicator--d19940ef-f886-423e-acb0-d0d6cb02fde9", "indicator--61f96206-dc0b-43ff-bbed-353119a5a7cb", "indicator--4c2154ce-60d8-4c1d-9f83-8cb1595e3dd2", "indicator--20738895-b964-4c8c-9b44-070c50920790", "indicator--cb86cb5f-34ee-470c-b07e-0d9e94757e93", "indicator--f9f04e94-b1f7-40e2-a8bd-f01174e2a50a", "indicator--42945b7c-f152-4044-b764-2d12b8914fd5", "indicator--d72f33a7-0621-403b-9edf-1a0d103cbdda", "indicator--1421f2c9-8159-4a3a-b214-667cfbab9c7a", "indicator--af68d3d8-181f-481d-ab50-9f5ecfdb93f7", "indicator--75d8406d-51bb-4098-935f-3b31640383bb", "indicator--e519e3cb-0e6d-464f-9584-b0196ed2afb6", "indicator--60f6b307-da03-4eab-a7d1-8a5d3d60462e", "indicator--17e1982c-1a1a-434b-9e1e-8f70e2fea30a", "indicator--1852a8ee-c8da-4bfa-9b3a-74cfb5008f9e", "indicator--0b2b7cd4-24fa-4ea3-bbc7-046133984f78", "indicator--9b00fdac-5557-49d3-be5c-9cac46b65203", "indicator--8eac8baf-659c-4e61-8cc6-4d22379067a3", "indicator--94c44706-204a-4e69-9d97-376cf1979587", "indicator--ac39d177-f804-43db-a82a-56b70abfa41b", "indicator--6c453d00-08f6-472d-98e0-5e63cf65e93a", "indicator--35cc15a7-0152-4b1d-a8fc-e73842248832", "indicator--85cfa350-7066-4780-98de-3cac14ffadca", "indicator--b98aff69-34f5-4a28-91b4-486c613b8570", "indicator--7d462c5e-d075-4527-8bfb-ead3fe6cdc0c", "indicator--e1e4db33-e673-4a15-9058-786bb69dc30a", "indicator--62f1624f-ecca-43ca-93bc-f928b6b23399", "indicator--bf525a67-0eab-4fe7-8301-3864fe0b3683", "indicator--8e57c983-6168-440e-b50a-cd225e328095", "indicator--386f13ad-168e-4e5e-be9e-0d25b3b0095a", "indicator--686f5b26-769a-42d7-b0fa-64fd94461701", "indicator--3646e61a-f815-4b04-85ca-6644ed8e34e6", "indicator--af67a3c8-2b5f-4a8d-933f-3df43acac715", "indicator--34d94e74-5615-4ba8-b1df-c1bab43edd25", "indicator--3cb31989-452c-4470-8aac-a47bb82a5090", "indicator--910b5c1c-7996-4b21-af62-6458485a2008", "indicator--b876927d-8953-4aa5-80b6-16c1e5592f0d", "indicator--e2dacea4-20a0-45c5-beca-ba6c83e609b1", "indicator--424471e5-c9d7-44d3-8398-8d42f9f44251", "indicator--6147b4a4-9546-4153-a8d1-a63bf082a4a0", "indicator--475f9ce3-aeda-4781-aa5d-a7e97cb3643c", "indicator--b2632b84-db5b-40eb-a746-2f10f7614a4c", "indicator--496cedc2-9629-4eec-ae05-b0c164ffe8ea", "indicator--d36b8eb8-4cde-427a-8465-19d1a62d11a1", "indicator--66e20f27-230c-4a01-b4bd-eb7dee3487e7", "indicator--7908aa0f-26a5-49f5-a78c-40e63439cfa0", "indicator--466ec57e-509f-423f-a9e6-5b4eee83209b", "indicator--43bd9553-890e-4d88-b0c5-c6e63e741b1c", "indicator--33a45e3a-cd73-4110-b3c0-bfceda6fc935", "indicator--a19f05fc-ceae-430e-87de-6877dbd28f01", "indicator--4553f220-e9b9-485b-bc42-9d56847ba56c", "indicator--1c809b1e-3fbf-478f-951a-6129a4b94799", "indicator--8ead3802-0ec9-4e58-b550-d64a86f44474", "indicator--6a00fd74-630d-4a0f-b573-96d050fceabb", "indicator--2d0ed12f-03ee-4e1d-a6ad-9b5621f80572", "indicator--3c149f5e-4803-4575-a7a7-cfac7e362e7b", "indicator--f0eb2304-d1d7-44a6-8fe3-92566845807d", "indicator--e92e84b0-1168-46fe-977a-d89777aa836f", "indicator--d7492057-61de-4222-91a1-bffbb059b0f9", "indicator--fb0893fe-f27c-406f-9bfb-1803ccc7ed1d", "indicator--4166089b-a2cb-4263-a8c8-bf82ed9a8d1a", "indicator--fcf8a0e8-b5b9-4a88-9cea-37bf37da1420", "indicator--31f82e31-2195-4cb9-8c79-455b7890c0fc", "indicator--28afc581-7819-4bbb-a46a-a46dda805944", "indicator--2cd874ae-3d97-444a-b9ec-0f55d14a14e6", "indicator--d351554d-e792-4d55-b6b7-7bbc694f6c32", "indicator--3f5dbaec-c9f1-4607-a6dc-aea252d26aab", "indicator--46f142b1-c5a3-4aa6-9b05-71e37fb2ed66", "indicator--3d4ff71e-fbab-4ea0-afbd-1ad64d70aaee", "indicator--b7934d1b-b0a8-4b08-97b9-236400d82f34", "indicator--698b1510-6fad-49bb-b282-c0158137f382", "indicator--c1f03dd5-6c62-4355-8721-576814ab6fca", "indicator--986ecb23-915b-4cfd-8b0f-0db32d6aeace", "indicator--6d5ba709-4dcb-4007-8780-5efb60084baf", "indicator--eb962109-e84a-43cd-9fdd-ef54092e8a28", "indicator--f57c8ee5-cfeb-4bc4-9aa1-a09679461575", "indicator--ecbffb56-b363-47a7-8461-4f07a6a2e777", "indicator--9cff283a-e58b-4f23-9f01-27472e9508d2", "indicator--126cc21c-2101-4e14-ac4f-aee37d36c8ae", "indicator--4ff01148-fbfa-4d03-945b-95088d430ed5", "indicator--3821fb42-4133-4866-aa71-766cdba5e21a", "indicator--cd6cddd5-934b-4cbd-b132-4f924b486d70", "indicator--e92ea518-4df9-41ae-8606-6311ef8adb58", "indicator--2ac9d596-9ef3-47fd-b37d-1f005797eaf5", "indicator--9f4fc7be-e482-4a4f-b9da-598abfdcecba", "indicator--6d2e7f07-b6fa-4255-889e-09144a74e828", "indicator--0a1fc6a2-9d47-40b9-b57a-afd95d1de228", "indicator--811358f3-572b-4b2c-8b9f-cc48baf56488", "indicator--50665b1f-86e5-4546-85bf-0a9f2a8dae60", "indicator--2ae36a24-f845-45cd-963c-6c30ad906665", "indicator--a1e04c41-7de1-4913-b93f-03768d3e247b", "indicator--7351da44-f0af-46f9-824b-ecf98f3264b9", "indicator--3841fbcd-8715-457a-ada7-ff2780567b9d", "indicator--3d02b8d4-fc21-4a2f-bf23-c4f2fcb9ffd1", "indicator--064376a1-1e1b-4f3f-a0c2-4da2797cccb2", "indicator--c55d6d66-54b1-40b7-9df3-10ac7db958a5", "indicator--22d94245-c965-4577-9cd9-8188fdb77379", "indicator--34b7e2f5-8c43-43af-86f6-ad78385a9628", "indicator--89196bdd-ea6b-4740-83ad-1ca0f6b608e2", "indicator--ba237cae-904e-4ac6-aa5a-40f4ced8a2f0", "indicator--63e68537-47d1-4f8e-b46b-91ef33886b69", "indicator--e443beb0-2340-4162-819e-85c732ab6ff0", "indicator--da0207b9-7c59-4a94-bab8-847dfc98c8d9", "indicator--333c0ad4-dfd1-40a6-8ce9-41663fa3ed7c", "indicator--1c112195-a6fc-4165-a66c-61768fe0c74e", "indicator--13c3d6af-0607-4591-9893-bb8b0caaa662", "indicator--13c3d465-4b84-4002-b105-a7652a439d8f", "indicator--3b7d5285-f7fe-4b3b-86b7-6324592562f8", "indicator--cc330a08-cd43-4470-bde0-7d0f00008b5b", "indicator--80c468e8-0633-4998-9088-4606e4fa4347", "indicator--2eeffa24-476d-4d74-9ada-cd90bb482c58", "indicator--7e6c7466-c126-4599-910e-741af7cd4092", "indicator--6db076d8-aeb6-4089-b905-129e68df24b3", "indicator--6a6ac223-8910-40bc-8be2-224090f5e360", "indicator--3fee0fdc-b7fb-415e-bfbc-597ab17d5b73", "indicator--6a48d42c-2147-4030-8933-664d01c91d36", "indicator--ef4b2adb-0e4e-4fa3-b48e-4e972056cf4b", "indicator--1d694d25-de70-481f-a1a0-bb1d9e0c5619", "indicator--140f882d-9ba7-4e9e-a1de-5475c9f0bde3", "indicator--0446a2da-354d-4267-98e7-01567ff5170a", "indicator--c9fe36e8-25ea-4fb4-beed-b1a51c2ac304", "indicator--55050abb-4d85-444a-a9cc-5030f34dec0e", "indicator--f09956b8-f6ff-4c15-9964-b407e9d67c47", "indicator--bf23cb16-c230-4e83-97f9-101d3065a81d", "indicator--79930be4-9064-445e-86e8-95209e805ebb", "indicator--67a8444b-f973-492c-acf4-aadb4ea316c7", "indicator--a3f7dd61-7979-4328-aadb-63ea92d655ff", "indicator--989bc5e8-ee83-4029-be2f-e6d376207e15", "indicator--4ad2c252-2eb0-4887-8f06-bb4545648a1e", "indicator--9e760e03-1a39-4890-9ccf-bd3e3ef38396", "indicator--a27f93c4-4a71-4069-80c1-003bdc0d9d7d", "indicator--402265a2-de7b-43d5-b834-d24b2e862bd4", "indicator--c25f9606-a168-4a34-a504-080cbaa8d8e0", "indicator--0ff2dd85-315e-4d6e-9904-af353f03960e", "indicator--e93e1ec6-296d-4e25-b342-0a62026b2129", "indicator--0adc7dc6-fc2d-46b4-b900-2497f455ff3d", "indicator--b3292fcd-54e1-4149-bae7-84e7dfdbf099", "indicator--cdc69751-9fc7-4c11-9a00-f7ac44fb3e46", "indicator--798a9fae-b772-45fa-a437-7e6f335c77a3", "indicator--1b6fa618-7e22-4880-ac2c-dbd2d00e63cc", "indicator--d0c3cb7b-7e4a-4ca7-9181-8c8c2baa8b70", "indicator--a3757691-6150-4a60-85cc-e4ae32c3f927", "indicator--d4bfa244-b8ff-400c-8c9d-4d310516b138", "indicator--cafcc7c3-fe27-4671-b3b1-49432efc236c", "indicator--2c43af5f-c62b-4a84-8c9d-0ffaa6fb4761", "indicator--9ebe19e8-60f4-412c-a627-63ea3ca948e8", "indicator--3a210f2e-5af6-4af6-8892-3cdbc978f532", "indicator--99990ea3-2107-480c-a02e-8439d73b45b3", "indicator--8b620b95-1f65-43cc-9605-0c692d859577", "indicator--81f57ef8-dd5d-4b30-a880-64a86bd5db49", "indicator--efe13fda-9806-4778-9588-da483443e644", "indicator--ae4120ea-8623-43c9-9a3e-a2f94f6cd573", "indicator--9495b9bb-51e3-4ec1-ba53-a880f5bf3b95", "indicator--fcbbfcf4-ef17-460c-9d64-e0233fa853c7", "indicator--9595558c-480e-4159-8999-9bcade5f5019", "indicator--d27e22b8-2bc9-44e7-8a25-948e4bdcc560", "indicator--715936c9-2f11-4673-99a3-86db94818f93", "indicator--070945e2-1115-4b99-8291-0f6836df6bd1", "indicator--ec179587-a471-4751-904f-cef6d8e41971", "indicator--23208a56-696f-4c33-8dac-1e5739e69545", "indicator--a282946f-ef21-4b60-bf39-6935c281d7a9", "indicator--1c69906a-df72-4beb-bf39-825a810e875a", "indicator--94b36ec7-8308-478e-bace-2f61e19959f8", "indicator--1a05e4c8-b0b8-4054-a8be-5a11ee21864c", "indicator--ee7b2c1a-f025-419f-915b-87673588cf01", "indicator--82094618-d77c-485d-85e0-0b38950737e9", "indicator--a5a3dbf5-abd4-4610-9312-b10484d1a818", "indicator--2fe93609-a7ab-48e9-9fba-3a38c9974cfa", "indicator--3799bd2e-9a4e-4743-b513-84a788081ec9", "indicator--713da011-567d-4bc4-94c4-bcf2ae2824da", "indicator--309ce07b-7fd2-4c6f-b823-64b943aa1269", "indicator--98066166-bb11-4c1b-abb5-972960629a72", "indicator--2dbca442-f32a-48ae-918c-c5749796c3c6", "indicator--f39393d3-7527-4ec5-889a-741bbe71f469", "indicator--94be2b6d-0de1-475a-aa73-78745e0844d5", "indicator--32dc600d-57ca-4328-9043-fdf5dd8ac9e1", "indicator--a207b45a-6338-4fc1-9327-bce780b3bf19", "indicator--c62a34d6-0c32-4ec1-addc-5d48f128c7e9", "indicator--1d4d2fc4-3c08-41a0-b4e1-58a34cc60644", "indicator--02ac23b3-77ab-4d11-b72b-d5c3e4a94b6b", "indicator--dbc3f2c5-250f-4037-89f7-85f1440a99b1", "indicator--28bf5a33-be0a-4f69-a003-3c9c6b1f3b99", "indicator--c15565bb-0a8f-48a8-a773-0217e85bf1be", "indicator--17d576d3-6e11-4ca0-9bb8-b8ea4521dc3f", "indicator--bcc5fd19-65c2-49f3-aecd-c50c0938ea1f", "indicator--04051d20-1543-443b-bab2-7fc67fd15b81", "indicator--a8c64a51-fe9b-4178-abbb-8e8d66527bcd", "indicator--6f06379d-e96a-425e-8d2a-fa3c4c6436a6", "indicator--9deb1652-d879-4d12-be35-4e038d8529e3", "indicator--4d19f0b2-5d4c-417b-8d9e-5d7684139dfe", "indicator--7441bb96-1576-4de6-a96a-cd360735bc97", "indicator--068ab334-dd20-4904-8516-cb4057397d4a", "indicator--3815b8ab-b603-4cd0-bb90-2c1214962e2d", "indicator--81f11dfa-18c4-451b-a695-d01e9b8e9aee", "indicator--2eff784c-daa3-4ff0-bb1a-24b6def74b19", "indicator--1cbef52a-92b3-44d8-85be-92fdaffdb01b", "indicator--b11815f9-2184-4e02-8066-1099395ad117", "indicator--6318750c-de72-4ef4-8a59-0cffef991588", "indicator--ac303efa-d63c-403a-a95a-c012769aebdf", "indicator--16c2c64e-256c-4a25-bae3-532be58dcadf", "indicator--fb07b4ed-ad40-45ec-8288-0dcde3a72234", "indicator--cf4462fd-7ce3-4173-8851-7ccd6b0b1342", "indicator--061be28c-8feb-4833-99df-54c532c579b6", "indicator--cd499fd5-e878-4fa1-957d-39d778abd32c", "indicator--02ecd1d5-b843-4518-970e-eff350f65382", "indicator--0940c328-cb47-4408-8104-7c06558833af", "indicator--6ed280fa-231f-484f-9d43-a8cd12fc2af4", "indicator--123da19f-df52-4f2b-b8f4-8ccb76d7396c", "indicator--99941a17-f55a-46c6-8aba-e96ce2d1490d", "indicator--acbb6f14-f366-40b1-a03f-132f50a75fa3", "indicator--c776de98-2722-411d-b676-9a6bed1fecde", "indicator--c1439528-c7b7-4a10-afe7-b0b164b40333", "indicator--d119a180-0c8b-4867-9701-53719141d803", "indicator--8415c3d6-53f9-421b-8ff3-6c004a7a102a", "indicator--52a05784-cae1-47c7-af30-ee6d60133f10", "indicator--01727133-4274-43cc-bd89-7c3741e2ef1c", "indicator--acf9a2fe-0dd8-490a-9dfd-f44d21fd138e", "indicator--cd0e6424-aa7c-4a03-bc56-4760594e1727", "indicator--c5799998-dbb7-4f33-bd9d-66f06178bbeb", "indicator--fca9bc6c-dbc2-4565-8355-70b7b4a6409c", "indicator--56939482-7af2-468a-a5ef-66a65817398a", "indicator--868df2d2-a437-4211-b1d1-cc050870b71c", "indicator--58519e20-d2da-48de-a6ac-ca3db36ba60e", "indicator--fe8bdbeb-5e86-4011-828b-3b897fadeedc", "indicator--2311f1ed-992f-45b3-ad7f-fd58d121a962", "indicator--be45cbb1-916a-4ec2-a58e-3959e5f684e6", "indicator--80562183-6465-4269-89c1-480e91f4dae6", "indicator--f701b2b2-2e7c-4707-8da0-aa8a0cc03a03", "indicator--130c59a5-b83e-4a6c-9b78-a1f1c6a8a880", "indicator--2e1fe9b6-e74d-40dc-886b-4b677f516d8d", "indicator--6f2a741e-210a-4773-b011-71ff6360d95c", "indicator--f69e7523-b1e2-4bf8-96a5-f048819ae9ce", "indicator--e583d3f7-6189-497b-ba60-6e45535c7378", "indicator--674c7228-78e2-437d-bbdb-4e8cda30f5c6", "indicator--86928a6b-12e1-4f0f-8714-734a113d4ff7", "indicator--285390ee-700c-4b84-80eb-20abab9cab33", "indicator--a21d1496-6df6-4e79-9992-c85d586df532", "indicator--34b45bb7-c452-450a-ba80-c130a7127e1c", "indicator--e5be6c60-5f13-4851-b43c-51af99e6100a", "indicator--2d354e1f-6071-4035-867e-1f578a90861d", "indicator--f888cb82-f758-4723-90a9-899697642892", "indicator--ee41aaae-0111-417e-b01f-e68bdb88e62b", "indicator--e11cbd31-cb8b-4298-8a71-0e29dd0238ed", "indicator--4d1b78eb-02b9-429c-8d3a-bbc127f946ee", "indicator--cc9775f8-4512-4deb-a7c0-5e6892ad4fda", "indicator--297c7756-9df7-4baa-956f-3f660e2ba28e", "indicator--d6172346-f4ab-4077-b1f9-d434a0864aab", "indicator--80ce91a0-e2a4-4ed9-b7cd-762e3ffd3840", "indicator--edf823cc-3625-42a7-ae4f-d69bd13cd01b", "indicator--88fda6d2-96d3-4b73-9f7d-e84761d2612a", "indicator--1fe5826a-430e-4731-b854-8f21c3c0e0ab", "indicator--9eb11de2-98d4-4c0c-81ed-f88461dd7c4d", "indicator--eb58dc90-f214-47c6-942d-00012647a7a5", "indicator--00df9a64-45a8-4ab2-95e5-852d665b266d", "indicator--060407d4-f8d5-4518-9aca-a8fca86ddebc", "indicator--314219c4-f88d-4fff-a760-a41aab7ce590", "indicator--3756e4ff-ab43-4782-9078-2ef718e6c51e", "indicator--ad9df013-df5c-40ff-a3dc-49ab04b014c1", "indicator--63bf35cd-ab7f-4478-85aa-e6ff746fe1d7", "indicator--5375f57e-a332-4423-a67e-440a4f0af046", "indicator--ae8ad9db-21bd-48e2-a535-f627c778a1ba", "indicator--04214483-9deb-4d6f-95e6-912b33566d6c", "indicator--3ccc0c7a-06fd-4420-8b97-9c5716ca7366", "indicator--77ec9521-ed74-4228-b3f4-815324de8877", "indicator--d2c2bdbd-c131-4cd6-af52-492e648720b8", "indicator--ac938620-c36a-469e-9160-53ca65263387", "indicator--ea3021b7-60b1-4f5d-87fc-45956b9a0b9e", "indicator--7ad82c20-f7a0-4b00-97c3-f21584b105cf", "indicator--065f1c3e-503e-4797-ad71-40bb1757a610", "indicator--0f507811-ea58-448a-8682-1b4484ab5a0d", "indicator--40b935d5-718e-4326-88ce-b9d3cb62438c", "indicator--ea67caa2-58b8-413f-921d-b1fc31397dd3", "indicator--d14d8de4-2da6-429d-a3fe-551271bed500", "indicator--78a0f124-6196-41ba-b2a6-de1e514bba9e", "indicator--56b8bad3-03c7-4d39-ad88-6037e558947e", "indicator--a0df989d-04e8-4cc7-9bda-5dd673577041", "indicator--091f4ab5-129b-46da-a16e-0a2eefa7091c", "indicator--c8075336-2d3a-45e0-bd48-2ce21d0cf68c", "indicator--3729a2bc-421f-4cd5-951a-eb473762dd50", "indicator--4f33779f-82fc-4b71-ab29-8d2080dac330", "indicator--b731bd58-8180-4cf4-b851-1c2a8ee4f233", "indicator--18776ae8-a6d1-4899-a33f-479b603ba5df", "indicator--45481bd8-aec9-4e5e-bd57-8919162dce16", "indicator--1cac5f2f-47e6-49d7-8366-bc259d1ca766", "indicator--bd73f3d8-5008-423e-b3fe-5962fd232736", "indicator--8845986c-bc46-4c7a-b9d3-354e71356e11", "indicator--65b3f0d6-5f11-44be-a64f-a6fb031abeff", "indicator--0471c6c0-2276-4eda-b5d9-0e3877680c59", "indicator--f15368b4-5346-42a2-b492-617828ba4317", "indicator--1f2b6c67-1161-44ce-bb5e-e587d487d3ba", "indicator--216c76a8-c10b-4fb4-9c84-d9e8a75e8549", "indicator--ee901c49-4bf1-47b8-9849-ac1cd63271ca", "indicator--a6b1b672-468c-4903-a5a5-20e77cbc5a9d", "indicator--9edffb4b-3836-4c3f-b94d-1f1fb1f56e54", "indicator--3912f577-07d6-404a-92cf-ded23ffd007f", "indicator--21b1acb4-a9d5-42ac-a69a-6cc3370e560f", "indicator--fdc7b48b-aacc-4e42-9f6c-da6200f97024", "indicator--0c5581e0-3f5a-41e8-8cca-860c61b6d73e", "indicator--cf3c48ad-52ce-4aab-8864-01144dcbcf75", "indicator--bb8b2709-6694-4396-b470-560d05df1c01", "indicator--8936c3b9-8fcc-4db0-9105-67cf07a932eb", "indicator--949c392e-75db-4b76-9c18-166bbf75bbe2", "indicator--85831023-514c-431a-a013-ad744d90c9aa", "indicator--ce83acf6-e13c-4e31-a07c-cb88399b8dbc", "indicator--26e769d2-3e62-4d3c-ac7c-1bc348078ff7", "indicator--45aae343-77f6-46a6-859f-a34ff1f30bf1", "indicator--c845d663-23f6-4acc-ac69-2094fa891ddb", "indicator--0f1a2807-4883-4139-93f1-6fbc797b68fe", "indicator--33873dd5-95d4-433e-9525-0ee1aa22818d", "indicator--ac1bba07-1e18-497a-bc80-76b3e08bf58c", "indicator--58519382-97de-4121-8aac-a8e49f837dc5", "indicator--3ff82508-23bd-4ef6-b0a5-0da0d5a825dd", "indicator--6bb3a831-69bf-48c7-8caf-ab68d81d1e0a", "indicator--9829f58c-f7cc-46e8-bc77-b4bc0f51004e", "indicator--846e79f0-d198-4745-a75d-197dfa2c93cc", "indicator--073a5a31-244f-453e-a263-c5fdccde0e86", "indicator--f1386e4f-0e07-46ff-ae06-f3a0f106e6ed", "indicator--fcce07a0-a8f9-4909-bfab-67c915df4dd7", "indicator--75d0e1c9-0ca1-40f4-ae8d-e7632688e242", "indicator--00ab0f70-7f86-4f62-bee0-434bc8a8d0cc", "indicator--f0fccb40-ce6e-47be-b269-60d5787dc4a1", "indicator--91f8df79-aac8-489f-a4ef-e1f84da6e25e", "indicator--377c9b4e-d359-48ac-ab65-63de7eb7ac8c", "indicator--059702df-ec89-4ec1-8a79-a8d85d1bf234", "indicator--8f8da8c7-ab6d-493d-9f61-3235b2ac40d8", "indicator--469eb7b0-6f01-4a4f-aa89-d3c7c6bbfecd", "indicator--324581c9-ff7c-4aaa-84ba-6fb2279ba7fe", "indicator--a179abad-9f1f-4e53-a946-09e848f387b8", "indicator--affcb219-3bbb-4253-9c5f-7f4ef56801f1", "indicator--b130b4fd-e7c6-4d51-9367-9f88ca325eb7", "indicator--b42eca97-593b-4134-8ea4-0d0e7b20667b", "indicator--427bb3bc-b13b-4289-879c-2f8372de64a0", "indicator--741e7b51-cd4c-4cc3-8505-0122a1159900", "indicator--743d8210-9ae2-4aee-8c6f-ad35ad1ad007", "indicator--6c41f097-a154-4a10-9572-f9a120a0e3f0", "indicator--22b38eb3-a17c-4bbb-a211-83e17547487b", "indicator--77d1d9ee-0dac-4ee0-b5df-5c872d39b900", "indicator--88b82d51-591c-472b-ac7a-04634fdfed07", "indicator--a71cf815-5833-4e24-8022-b279ba62f350", "indicator--f4ca13a5-2330-4c1b-994a-a96196eb4479", "indicator--94721e87-7279-421b-9a3a-63b890f2b75d", "indicator--a46c28ff-5e3d-45ab-a1d3-e41233619144", "indicator--43caf0b0-789e-471c-b959-3108eba94f3d", "indicator--d7cd9845-e4a7-4f60-b683-8bcac4ee545b", "indicator--76d3b6a1-e0db-4a7c-b7e4-035e6e7994a2", "indicator--b428d579-e791-4691-b62c-a0512f8387bc", "indicator--e694c519-9074-4c7e-aa0b-759d9c881fad", "indicator--0ab85011-3cba-434d-910c-a3ba16873031", "indicator--e4a774c4-3199-406f-8482-a3c05fed36d8", "indicator--5ca41d83-9010-43cb-b3a3-1a2f850edfa1", "indicator--c61e0d78-463b-4ccb-83ae-d23fb2114669", "indicator--429fc5e4-e817-4228-9253-5ca2a93da1af", "indicator--b7419872-a22f-41a2-a5de-ff0cf88e8d96", "indicator--5b8671d6-2978-4049-a60c-6329723c2aa5", "indicator--62ad9873-b402-4043-8145-dcf530b54693", "indicator--b241c113-0e6f-4faa-b075-8b2a1ab999bf", "indicator--192ddf0c-dddf-44fb-bf9e-82960d0c1a0e", "indicator--365ee05e-eb1a-488a-85ff-0e173f7d93b0", "indicator--a0d4ca8f-ee82-41e1-a9b4-528b2e1587f9", "indicator--c1673a40-d795-440e-a0e6-22408352585f", "indicator--220b24bb-39d9-44ae-8966-c80edd239e25", "indicator--bab2f9dd-2f25-448a-8085-eb47b4cc2cb9", "indicator--d0d062b6-e405-4688-8f54-a796f7633fb1", "indicator--47a9fdf3-ca86-4972-8247-c882f9cbecaa", "indicator--3ae87556-aaca-4e7c-9838-6e89bcae37e2", "indicator--6d5204f7-6afb-4879-aecc-bff060a91d5d", "indicator--ed677959-d763-4b9a-baa1-3618ad3e41db", "indicator--d3c7397a-e2a7-4c67-8f4c-aa8ebcc84fe7", "indicator--f9789b73-c9b6-4399-bf49-53232a96702d", "indicator--65c635af-938f-4329-b4b7-4a9e858fd35a", "indicator--b52eada6-21c6-48a9-8a8c-80ddcc10867d", "indicator--2bd7c082-05f0-4420-879e-8885b767bed2", "indicator--e1a467ac-6d8c-4b41-aa45-a9db8ff1e831", "indicator--8b0e0cd4-6a30-4e45-a9c2-7af07100cb6c", "indicator--b86f9c50-7733-4b10-9e52-8f11cdd9eae1", "indicator--83e99a44-3925-416b-bc27-b6400f42a3ea", "indicator--8f227920-5737-4c24-8883-38bd5ac36acd", "indicator--a650f2ee-0e98-4deb-9d65-347230dc2ccc", "indicator--685ca99f-bf3d-443e-b12a-933d3131c24e", "indicator--72f46439-0f81-4705-863d-2acb93e0ae38", "indicator--c253249e-b037-4447-b08e-c6eec6ff454e", "indicator--0fb999db-6e88-4fbb-9e05-374e24dfc08d", "indicator--a452b4e5-e7cf-482a-b249-68fb614adf3e", "indicator--d6bc22a3-626f-4673-af2b-15e2b7cc0e9f", "indicator--a884c630-1dd3-4dfd-9b67-250afe5c1e36", "indicator--23b94bc4-5d54-450a-bfe7-baeec45c01e7", "indicator--b76cfe7f-ef86-4efa-9f5c-baedc4e57254", "indicator--cadb2f9d-dd8f-4509-be4d-d68da043a8f1", "indicator--87feac52-e98d-4b7a-8c7c-f74bc68393f7", "indicator--afda3d43-cc64-47bd-b1d5-02bd05754f85", "indicator--4d7f2f1b-0991-4651-a795-4e356f4c9d5f", "indicator--4778e3aa-7ac3-4e8b-b487-dba6a366c4d4", "indicator--cc0220c5-9ff1-487e-b773-ca8c8073da56", "indicator--86fdad40-8d6b-4532-8026-4e320ce369eb", "indicator--29e4a10c-69a5-44e9-b5c1-ee767a0b011e", "indicator--11e2c70b-51e8-453d-b8ef-0cc6f8c5d9b1", "indicator--27e61f4e-096c-4147-b603-7ed2b948f0ba", "indicator--e17f87c3-433a-4396-8ee0-dd95db8de817", "indicator--c1b466f5-31a6-454a-93f7-9cc6d5796d60", "indicator--ae1d092e-b75b-40cd-a7ab-6e1fbddea425", "indicator--535f6e7f-845f-401c-8bd2-a80206af4fd6", "indicator--0a024e1f-62f8-461b-8cb9-93501a04918d", "indicator--0e7b053b-4141-479b-83cc-afbe9bbe047f", "indicator--3120adb2-978b-49b2-853b-14def75e85f2", "indicator--d2ccfef5-020a-4a77-8e9d-5c79e61d7259", "indicator--e3b26d15-9cec-4613-b37b-30c552ff951d", "indicator--864ffa9a-d259-4179-8fa0-ae55e7f97382", "indicator--16cd5087-0737-4019-9c1f-7ed741057fae", "indicator--2182365e-a733-4023-bc36-e9cd0cdb36a1", "indicator--508fb810-610a-47d2-a253-8641305d858b", "indicator--ba179c91-4e95-4c73-b852-0af2113dae02", "indicator--aa5e998a-4bc1-4129-b943-065ebc303df4", "indicator--7e6738df-6cd0-4a4c-b808-97f800ac0a6d", "indicator--d11f5fea-ea4e-4a08-8e65-4255520d53ee", "indicator--fdfff952-7e83-45bc-80a0-7c45d7237905", "indicator--475ee569-1101-4a67-a855-a012a0d392f6", "indicator--cadff580-830b-4add-ba1a-ea8a15a47a99", "indicator--bd46c0cc-19f9-4458-9d9a-4715f1d94729", "indicator--25e6fea1-0318-460e-a98e-8970ade18f2d", "indicator--19736469-85fd-444c-873c-6dc7ac4dc53e", "indicator--44f1dc4b-a798-4f92-a846-645c90d0f09f", "indicator--a54a58fd-cde9-427b-929f-caba44b20167", "indicator--ea8b2f6c-da03-4249-8ef3-6889c35b8483", "indicator--d7d5c8c7-c2e7-4443-92ca-566b499d0274", "indicator--751cd16f-1e71-4dee-9df2-b6bc7914f17e", "indicator--0371e506-ff10-4a7c-8791-9e8f66234794", "indicator--e51877be-a8b8-40ce-92b3-0a5f376e6736", "indicator--58de7580-cdce-416b-8e8d-5f73e8a9c86f", "indicator--b47e62df-ae75-4f73-ae0b-e530fadedc21", "indicator--fd7e638c-6404-4620-9e38-1024ac5a8574", "indicator--2e510cfe-b3e1-4be4-a3c8-94e72d975af7", "indicator--b647a59e-9c47-4c1d-a32c-ab5814e2e794", "indicator--5f2a2040-1fd7-426f-82b4-9daeed588edf", "indicator--8842164a-2657-46e9-95ed-f9b9b530d1cc", "indicator--9c975130-d68c-43f2-bf80-efebd9431174", "indicator--5cbaaadd-14fa-43f5-a749-ea2ea02d82a0", "indicator--53b92d11-4a8c-4b39-8827-4ef366127e69", "indicator--50581d73-7be8-44b1-8493-0cfb601c0e74", "indicator--1d87c8e2-eea1-493e-8009-078bf8ed36c0", "indicator--8f3c1fbf-e54f-40ef-85c9-1586bc145fd2", "indicator--e09f5305-9557-493f-bffa-b66b00771e77", "indicator--95a40f8a-7e65-4fce-b688-91a162950a98", "indicator--dbc9ed14-1bee-4bfb-9cf3-04f43b5d7e42", "indicator--e4c7ab4c-2362-4355-aac4-fb84963ae218", "indicator--b1a20793-3056-412e-8a6f-2b37ebc48822", "indicator--76f814e9-7b45-4430-a451-b8e505bc3620", "indicator--a577cc1d-7427-4f98-8acd-78611d16e59e", "indicator--f5d678ed-70d4-4b24-994f-97c496815dd1", "indicator--3dd88099-2e86-425e-90db-0360f2e3154a", "indicator--8603af1c-fb98-4177-9ad3-0fcb99519e12", "indicator--5557b806-c8a8-4325-bf49-8212ae425a0b", "indicator--0d5ec07c-5cde-4842-bb9c-9ddba6d4492e", "indicator--f7cf7a90-67ac-4df8-a934-c0173f46217a", "indicator--b9f98e7f-89d5-41d2-aa03-c58758db10e2", "indicator--b5d056c8-0994-4130-8514-22fa7c43d9fb", "indicator--b0175c7c-a048-4e22-b85d-22b5e6d74e41", "indicator--44754021-e045-4a3e-8dac-935c8d73435d", "indicator--01db7992-6079-422f-907f-9fc258d4eb27", "indicator--466c3667-321e-4bf1-816d-298865404e85", "indicator--48229ed9-7699-4d7e-bf8a-b059e3ed8de3", "indicator--6ac3d0a4-f113-4673-b1c1-1c7c93e1cbc5", "indicator--5ce09b5e-831c-44a9-8d2e-c9496db66827", "indicator--e999813c-0801-42ef-8090-55eb7474d1c4", "indicator--10365a85-c453-4a89-b74f-ee77c3bb2261", "indicator--31a43ed9-0310-4d63-aace-fc58e90d66aa", "indicator--cee3da60-adf5-4dbb-bc38-231728bcef82", "indicator--4916c91b-ed89-441c-8d84-99208c111b6f", "indicator--756c56be-f3d4-41e1-851e-b3a59920e57b", "indicator--58b3224d-ce67-4a3e-b87d-9f04492eec4a", "indicator--afeffeb5-6ac8-49ed-962e-027ecbc1e674", "indicator--c4936b75-8e40-4f7d-8b02-4ddc5c6904c5", "indicator--a20514af-dc30-46b4-82ce-0df1d03e6a87", "indicator--88faf9e0-9d3e-438f-8f20-28448b6496de", "indicator--319a50a4-8d30-4bd7-ad0d-c106a2799714", "indicator--032d1a4a-bdfb-43a3-9156-fa9697bc9be1", "indicator--8efe7381-b2ab-4b52-835b-ecc350bb750e", "indicator--f18f90de-15f3-480e-8148-2c92683c46c7", "indicator--a296855d-ba0f-4724-91b4-8dbc2a11bef6", "indicator--41c83f00-6238-4b44-883a-c20d86c19817", "indicator--5544c5aa-2507-4f4c-a5b8-1ebc9267f5b0", "indicator--d3688321-8fdc-4498-b326-ed0512c1af48", "indicator--d0dfe57d-f56f-4a66-bde4-2aa238fea509", "indicator--46740fd5-cbbd-4e34-b341-ad9a58a99a2e", "indicator--dd2e738a-8ef9-419b-9eb3-4495b78fc083", "indicator--cc44a4f3-9b36-4f13-92a0-f41c041a49c4", "indicator--39113f3b-953c-44d2-8c81-d6cd61403c96", "indicator--351fd104-ccda-438b-a0fc-c858c94fddc1", "indicator--8b42f9fb-1f19-4f16-9a81-f18da927f91c", "indicator--54c49d1d-0d19-49f5-8928-05889fde9bf7", "indicator--c341f951-1b03-4b40-a7e5-0d876f623311", "indicator--3acf1f25-d3f1-413d-97eb-d8864d789cc8", "indicator--0c3888e4-a921-494e-b731-ad4de8be6d09", "indicator--3f2937c0-2973-4e67-8e8e-1ae33e4ee9d7", "indicator--54fdc7ee-53bd-4aa2-a086-e2667d0416b7", "indicator--626d047c-5e02-435b-948d-51bcaf5fd46d", "indicator--60bf338f-3794-48eb-8f01-763da97146c6", "indicator--02266b01-b269-4068-a3e5-013f0b1545ad", "indicator--b42a8833-854a-42e1-b0a7-ef7e09715d12", "indicator--64156adc-b638-4b12-85ae-5197ee6bf740", "indicator--37fbccbc-e978-481f-bc48-572f141a37a4", "indicator--1cb7d31e-dc43-4537-9351-61e5f0bd7948", "indicator--e37549a0-9e5e-4187-8df5-eedb465e5bb1", "indicator--ba7a58d6-80cd-49f9-afe6-2cc38e4f61f9", "indicator--085164c4-6328-4e68-a0f1-86f9efe5ffad", "indicator--a3abd301-9eb9-4cc6-97b8-646656184378", "indicator--66e1bc18-6c0f-4091-bd04-ba407d14e356", "indicator--36855293-c9f6-45d9-beb8-12cf8ad3039e", "indicator--1766d399-5784-4040-b2d6-3f28546218aa", "indicator--db872ba0-c54c-45cd-a2d6-bd8526230e68", "indicator--fc72d0b1-73c8-44dd-a0ad-1fb8a079dd5b", "indicator--f89c3528-1cb1-4722-8a07-3f6cca62d472", "indicator--0188cbcd-8d14-4568-bae1-6bf8c80c01ff", "indicator--3bcc8286-8053-410c-9ee5-8933d1c3d17b", "indicator--c48c07b6-ce6d-43a1-8782-02a5cc9cf95b", "indicator--faddfd5e-656e-48b7-be47-c616bde5287e", "indicator--0cfbfa2b-fc1c-4db5-bf96-5832751808d3", "indicator--64ac4161-b771-498a-8bdb-890f4a4431b1", "indicator--37e27c2c-92d1-4499-a8d3-2cf57ff39b42", "indicator--b5769d10-b836-4ec1-aeae-2bb4cfdaf0de", "indicator--6593b3d4-dfd1-4a31-91c5-6b3e9a5a73d6", "indicator--8e039230-d14e-4701-b55a-0f98ee057b07", "indicator--2ebf6fc7-daf2-4ad8-8d55-5efd1b1252cb", "indicator--edb0b6c4-2506-494a-8d05-e917d9f453c7", "indicator--79dd68ae-ad34-4971-a7d3-22a206838dc8", "indicator--a08fb560-76b9-4a44-917f-c8c48ba1c8e9", "indicator--71e171aa-be62-4ada-8418-da44758f01c4", "indicator--c4bac487-78c2-4307-bfc6-e5a96744f112", "indicator--1b37c789-866d-4239-940b-1e1129d699c9", "indicator--72e24014-b1ac-4fc0-a7fc-c14e21bd18a7", "indicator--873e5a9d-0221-4814-8366-39843c401f3e", "indicator--96fd8b63-1c36-4da0-b390-9b1cdc38b3fc", "indicator--a9374d63-37ea-4744-9d18-72f6ed173d1f", "indicator--d5c9ef99-c18b-46c0-9120-cf41dbbe067f", "indicator--90ddbc21-6279-47b4-867f-f26f8254c91e", "indicator--4b8e5dfc-c6b4-4f9a-be1a-3d4e4986ac1b", "indicator--5ac8e33e-d82e-4aef-859d-78d22b7a15b9", "indicator--164f63f8-16c4-4f5d-af07-f5f4a80c821d", "indicator--b76e9c1a-15ce-4a5a-8ac3-f786ef41ce9a", "indicator--9152a881-af2f-4792-983e-dbd1bf55ba6c", "indicator--e521b325-91ea-4f5d-b11a-12c35c04441b", "indicator--3401cb77-0c3b-4641-9402-e5bc1e5a7724", "indicator--a94350ff-983f-4435-9b90-aaef7587a5f7", "indicator--11e9b2f9-26a4-4277-9aa6-0c707d004003", "indicator--99dcca17-7c9e-4c49-a5d8-aa391ae9d350", "indicator--46a9c2d6-18e3-486f-8ab6-34a48f3a11cf", "indicator--c5e8ad00-b57e-4d18-8a1e-9d7d20c8f410", "indicator--c60afd83-6c9a-4614-8cec-4a9a388f758b", "indicator--dd1c3a0b-66b5-4f79-940a-0de61edcff3c", "indicator--fbef81ea-ab88-4c3d-85f5-6764218fafca", "indicator--2ec4ca52-1a62-4764-a3f9-ddecb975f563", "indicator--5c19534d-fa3a-4288-bdd6-3e527d231382", "indicator--c773d0a6-28d4-44d3-87ca-c3cfa04008b8", "indicator--5fb1732f-567f-4fef-bf9a-19bb0cf55c54", "indicator--dd93d835-9c40-42d5-b630-04745e6f1c15", "indicator--5d6ef497-fccd-4056-8fba-94fafb2d27a6", "indicator--0ba7e516-dc3e-4af0-aa3c-f21552e3d741", "indicator--9ed05de3-9421-463c-8729-52a5c51b369d", "indicator--f64d16cd-b92b-43a4-a781-89b128c1366e", "indicator--dbeeb6ab-c979-421a-8f71-048bfee8acf3", "indicator--3177abd8-854a-4dd8-919c-daac1c96e751", "indicator--3f3488d4-a1c2-4dcd-afa1-76798004eef4", "indicator--e6a36891-a4f7-40c9-b0a7-ae1f89d7bbb0", "indicator--a5ed8706-1262-4ff9-8de5-671947edf63b", "indicator--b2e4b455-9b54-4790-b56a-ecd71b04d6cc", "indicator--bbadaf30-cd04-45f7-8cc8-628d1641a5d1", "indicator--8d4a6220-65f7-4bc5-b525-f98a4c56430d", "indicator--5db578a9-f9ae-4bc0-b453-a3435c2b7ff5", "indicator--18336d53-ce8c-495b-bc81-64bfa67eb7a5", "indicator--e67662f6-6b47-422f-a17b-9d397f991ca4", "indicator--6946adaf-a50b-4c30-9e68-9561d8e675fe", "indicator--fee0bff3-c387-423e-9ba0-ea1d9428ee78", "indicator--fe3bdab5-804b-4a73-ad3f-90ca8ac4e984", "indicator--97995b2a-4ec1-49aa-a8db-324a06b653c5", "indicator--b8685db2-6879-446d-aafb-d42288e53ca9", "indicator--3362b7eb-ebc5-44c6-b7f1-35692bfc22c0", "indicator--50336ee5-6e32-4a83-add0-42f66f177412", "indicator--191767fe-f775-4ec7-b7f6-17c90285f5f0", "indicator--af9eb889-884c-432e-9794-a524692acfa0", "indicator--4c4aeee5-cf50-474d-9b46-5cbe32c8cf5f", "indicator--d36cf489-7ac7-4528-b714-4d61935873d3", "indicator--ad755fbb-5d13-48e2-931b-139434626f0c", "indicator--6497e0b0-bdf1-4caf-8f46-931d96faa3e8", "indicator--40a54146-9c81-43c8-867b-949698e4e883", "indicator--0c91b0cf-5afc-47e9-870d-39ad57671709", "indicator--53fdb4a5-4374-4e33-a3bc-93acd73a2c5c", "indicator--2e011b8f-21fc-4faf-8eaf-6efecbdc5b0b", "indicator--fc6453c4-bd72-44ab-abb1-46eefb347e95", "indicator--65a82876-7d37-4e88-88cd-8d0b0dc304f8", "indicator--7a74608e-babf-48ef-a493-bbdb5e9a396c", "indicator--e8edb350-9ac2-483f-9016-1d7c4ccec323", "indicator--bddf4425-ed4b-4407-ac8b-96106c853f6e", "indicator--c3328214-5733-4a16-9c1b-125ab644796c", "indicator--80323401-f8d7-47b2-afb0-1c6f3766ba58", "indicator--c482c48d-c909-4efa-b40b-e00fba62d0a6", "indicator--9a579f32-37ac-4aac-9966-e54803fc18bf", "indicator--1a6e8628-357b-47a6-ae4b-56912c017c63", "indicator--ad92eb7a-7b08-4abe-8c43-61a77afd1659", "indicator--d01c98a0-60bf-4024-9e86-f956a0bf55cd", "indicator--8f2e896c-b4b2-4c93-ab90-94ef11e6d62c", "indicator--36675a00-b598-4c1d-a1b6-2905ecff6ba5", "indicator--aed7400d-7c0d-4fdf-9802-4eb99a8a65be", "indicator--179c8723-ce7a-4b34-b7c4-9f4baa9c5bb5", "indicator--9f23a8e8-94ea-4cad-b078-58f64656bccd", "indicator--917448e3-3fab-4091-8115-5e2da9c1593f", "indicator--01685546-a68d-4903-85a2-15504a9b0c77", "indicator--76ea7e54-1745-46f0-9470-28a09b731c44", "indicator--bd56d062-d3c2-4d11-8272-05b299d4c35b", "indicator--921bd0c0-a2f2-4c07-840e-1cc3626d9417", "indicator--40f8f650-d5c8-4a61-9d36-b6365829c052", "indicator--afd4ada2-c105-4d59-acb8-e0392a8f43c2", "indicator--56dd83d6-ca3f-41c7-b7d9-56c59aa9cd6b", "indicator--f6162614-c5e1-4211-9778-b4b01cfb4fe8", "indicator--78190d41-9acf-4041-bbe2-118fadb3db41", "indicator--b9bab477-7bba-4b20-8035-9739e1747f9a", "indicator--c0a58335-1afc-4fac-96e7-33fcbbf37c8a", "indicator--75cb80f0-3952-4347-9245-6c4d792e8603", "indicator--4317dddb-f18a-408e-a0cd-947fc8a174e5", "indicator--2d25e727-7599-44b1-9191-3b9909fcafc3", "indicator--0dc4681e-b40e-4782-b8da-3243a1e1640f", "indicator--1953723b-4376-4e82-9589-ccb7ddfa7f8c", "indicator--492f2c37-e5b3-4ca8-9883-bed22e2e1d9d", "indicator--3f1400e2-2876-4451-941b-144c7057f23a", "indicator--11169ffc-f1d0-427d-bc35-c0b82a1b3eef", "indicator--78bd7aee-0a85-4c46-9913-b6393005a48b", "indicator--59cfbf85-387d-4539-a5fc-76acc64f178f", "indicator--4e43c552-e570-46ae-8124-fa374452a360", "indicator--3bbb0a3b-6316-480b-b7ed-812573640856", "indicator--de25737a-b66f-45dc-a7a3-397637034e01", "indicator--343367fd-0dc9-41e5-b6e5-2e727e0abd00", "indicator--3b738010-54cb-4acf-aa69-e39e1d5f8e2a", "indicator--e3f5ca37-1be8-4ceb-8b23-3fcddd139aca", "indicator--17cdbbc1-9a47-4bd1-9fc1-0f2092a2292e", "indicator--b2939e88-88d9-475e-8e3a-e9a70b105dfa", "indicator--20ddec73-592f-4ed9-b171-6b7e76ff74da", "indicator--ac437192-7442-48a7-a977-d1ef298fbb44", "indicator--563be777-79f3-49c6-8820-4b81fdee9af6", "indicator--bc65fe98-e03c-42ab-8302-ed11c2cff416", "indicator--9e88d630-fa57-48fb-942b-15914a2b6193", "indicator--68f590da-5d8b-4d1b-87b4-a4f556dd36c4", "indicator--214cbf75-54b7-437b-9633-6b58e8e9dff4", "indicator--00bd43c3-1fe1-4b41-9a52-c85c0069aa07", "indicator--a7c8eb19-5e78-4b02-892c-bda30e6e820c", "indicator--bdfc8312-b06c-4f19-95b1-2d157393f12a", "indicator--2fe346ca-ee0f-4ab3-ba41-422a633cc829", "indicator--387743b7-08bd-4cb8-8961-c93f24a18cb0", "indicator--136656d4-e17b-4be6-81f6-afbc6c5fea46", "indicator--6866ef18-71a5-4089-bbcd-4b958e9bf419", "indicator--43afd193-49b6-4f35-b4dd-5e8031efdace", "indicator--64d9e8ab-9d6b-4c1b-8401-5f1b93c4cc9b", "indicator--8f1784ee-3689-41f0-8ffa-201e875cb44c", "indicator--b9361987-8512-4570-9277-b2cfe2162f9e", "indicator--185930e3-61c1-45ad-b5cb-9dd3076e653a", "indicator--cf5e53e2-a033-4686-8358-42e6757014fd", "indicator--cbcfc4db-1e5b-40fd-969d-798d95dcba00", "indicator--cc053a96-009f-43f8-bb7f-6623b157b7a9", "indicator--c5f32f1b-b4c3-4743-8e2c-e33c2f63a249", "indicator--ce0899f6-dc7e-45fa-b228-fd83c799732c", "indicator--a00c68f8-4815-49fd-8d10-b266759d8471", "indicator--ae838187-0091-490d-9c93-78666f02941f", "indicator--c361f223-affc-402e-b40b-2ccd42cf45c5", "indicator--cb5bcf4f-2350-443d-a2cf-dbd69cc01b07", "indicator--f4ab1cd6-99d0-4377-ad68-bf5a160f76ee", "indicator--83faefe5-40e6-4c9f-a6f8-b152c4374426", "indicator--8be3b60c-7353-4c6b-be8b-0a66ea74d369", "indicator--66d165ba-b955-4ac4-b257-70b71489585d", "indicator--53ac33e2-ce5b-4e27-a44d-53e82d2d5035", "indicator--336f2d85-1605-41d8-bb1a-f13b5a3904f3", "indicator--3f6f17d9-91e0-4b77-9d54-3609b80af627", "indicator--41b47ced-52df-4ba1-975a-cc461ada22d2", "indicator--09583e63-f0ad-4412-9169-3a902e623795", "indicator--c99bf341-5e89-4b23-a513-1e0716b58665", "indicator--78f1ae5a-6612-4ae5-ac2a-e6608a52af29", "indicator--7b1b4133-fda1-4159-82af-f4876755036a", "indicator--12f4ca65-d841-48b7-ac24-020198cea67b", "indicator--813ecc35-8f9a-442f-a9df-5987ac521d8a", "indicator--500b648f-8dd5-4d42-8046-8f1c95034998", "indicator--8e02093c-e94b-45b5-bade-e3d7000a2a2f", "indicator--b79d1aea-fb8b-484e-9cef-eaab93045b00", "indicator--dda1abf5-0b84-426c-aec9-9d7ad2374075", "indicator--31548d0c-9798-4f4c-9c44-1753335512c6", "indicator--389ae63f-6615-4b3a-9989-d949e34a7254", "indicator--89a5955b-94e0-40b6-9a54-498c448261c8", "indicator--482c3047-3821-4bcc-9920-82f9d89c6fca", "indicator--34c4059f-8d0d-4882-b00d-707390f96996", "indicator--13fda520-ad50-4246-bc16-10c783a79cc5", "indicator--d61c0ab4-37b0-4364-b652-4d51b079a311", "indicator--909847ac-f06e-44fa-b8fa-2dd8d720e5f5", "indicator--407d0653-7d85-45de-a373-2ca968101444", "indicator--832e0108-daf5-4128-bbb5-351d58b98026", "indicator--16efd46d-9e10-409a-9deb-c56d7fb17cc7", "indicator--611351c7-716b-4f08-b216-48bc2bd683b3", "indicator--9f4b7056-9df4-42a7-94ba-1cb07406494e", "indicator--9472aa31-2b80-4faf-9442-6773f5cb8786", "indicator--257759eb-a7aa-4585-b459-6796dc5c3251", "indicator--821d9c71-4746-46cc-83e0-5ae93c386388", "indicator--6cae0a4d-5248-467a-834c-8762b543c814", "indicator--a3f8b587-a0b3-44a1-b23c-204ec4006835", "indicator--cd21c392-f58b-4fed-84b4-517e5a63ecea", "indicator--d64846f5-1f4a-4e25-a7fb-01e6645b509e", "indicator--590e6bf7-016d-4053-bbf4-58edefb27764", "indicator--7d4b500d-01ea-4a8e-a72a-c83cb0c72bc4", "indicator--2b0d1911-8459-4939-9875-e76b1b730784", "indicator--f5ac2fb5-9d4d-4398-9c92-fec7a7bb311a", "indicator--c520ecc9-f51d-47a5-8c66-935d9c5ac785", "indicator--61cda673-9113-4af1-8939-1ca6128de740", "indicator--32668d87-954f-43e4-acb0-3a0aa7ca5433", "indicator--f04b0511-c85e-4886-8bf5-4093829d30b5", "indicator--b29fef66-efec-4f72-8ae1-202abce6f6fd", "indicator--45f08d1c-306d-4c11-9743-59f2d430930a", "indicator--0023bc29-2892-44c9-88cf-02589cfe6f2c", "indicator--3a5e9887-d9db-4502-aa67-4698e88ee81b", "indicator--948b9587-4ca9-4f2f-bae0-c424ad06434a", "indicator--20e0a10a-764f-4b46-bf79-6c947b970987", "indicator--b6819135-8065-4a89-a200-efe166ade4f7", "indicator--c801eb8a-4276-4328-969c-6d1d95688d9a", "indicator--087cfa0d-5b39-4e64-99bb-178c04fa42b3", "indicator--5ec5b2b2-3bdb-415f-bf73-403648ac3194", "indicator--41067c07-e362-42fc-94a3-52967f0f125f", "indicator--fbd5a693-5c58-4d65-9e3f-569f935f5c09", "indicator--e424a035-17c2-4697-863f-f25bc72d5c48", "indicator--33ed9d42-286c-4765-921d-0ac1c5999cd5", "indicator--eeb09479-710d-4a8e-bfc9-7bc059d3869d", "indicator--e3f9be2b-ef72-45c9-a4a0-bf36ecfe5d06", "indicator--5594a73b-d933-4305-bd42-1f6117a9e6b9", "indicator--0403b760-a57f-48fb-90f6-28de0970e85c", "indicator--cd70f206-d749-4321-b96c-4c51727cca43", "indicator--f4292f38-751a-4b48-9ea5-15388b570833", "indicator--720d8b56-6c89-4dce-8e9a-de236af58560", "indicator--013f247c-18a3-4176-b89d-253a9c429e9b", "indicator--508223a7-9295-43dc-b2d8-952627ae4c46", "indicator--03b92e2f-0f84-434e-956e-7313d55f8cdd", "indicator--4b0fdb1c-5e20-48e8-85a2-140d112db285", "indicator--8d19a4e7-0b2c-4c00-a0ca-fd0a8d0601ff", "indicator--067678b9-b0bb-487d-92e3-b10846ca9c6a", "indicator--c7c34630-ef05-4991-bb25-00e84453ea73", "indicator--079e522f-8b90-4d5e-b835-cf239d53fa75", "indicator--ceb5d2ec-6afc-48ef-be9c-1c5c740428c9", "indicator--4c6c8737-d11e-43b5-81b2-bbb97b9ff785", "indicator--b165c1c0-0dcd-4a34-b6de-70bf49bc227f", "indicator--96ea7aab-aa1a-44fe-9609-4d02b6a5f950", "indicator--5da068cb-22cd-4986-8a29-931cebe24cd3", "indicator--d94d13a2-ded7-4298-9104-dd88f2fe8110", "indicator--50db03a5-54fb-43ed-b45d-e8e0838c7bfe", "indicator--a4664e44-4a32-4ed5-9807-1c2d32c87d5f", "indicator--b0a910df-ef8e-4036-8547-257b86abd1ec", "indicator--5f2673a6-3b83-4147-a7ca-41a1e6edf529", "indicator--04b80484-2bc1-41fb-8abe-d818be866f77", "indicator--bb3ee6d6-d1f7-4251-8e48-f21b726b95fd", "indicator--8e6ab90c-2015-49cc-b2d9-ee53660e2bd4", "indicator--4defad63-874f-4d14-beef-7e4dedbf091e", "indicator--ac0af507-0b0d-4e85-be98-ad55b6efc9ea", "indicator--65cc0958-6cc7-4238-8794-ef291838550f", "indicator--32277c56-3b00-42e8-9ffb-02ca702f7e33", "indicator--b9eba218-f53d-4b8b-bf4e-bb7f38f087c4", "indicator--6b94fdda-91db-4dbd-8009-b8b30ba39da7", "indicator--e74784de-844f-4214-bfd1-51c750698443", "indicator--fdfa718e-aab9-45d3-be4c-806328dfd736", "indicator--20346ee0-e927-4661-8eb6-928a22bd647f", "indicator--02390557-abe5-49e8-87b4-32de58fca2a7", "indicator--22c97dfa-2b9d-4590-a4bb-b8dabc35b8ec", "indicator--935d5d5f-184e-47f7-b0e0-3cbc195318ed", "indicator--50815e98-bac0-4da8-bcfb-fa78f7f19b04", "indicator--3eabdebc-6ab6-4a28-bd42-fa9d77abc83c", "indicator--b838e76a-dc27-46d2-8b36-a2abe05fa769", "indicator--5b3c1c43-873a-45eb-863e-617e6a40b0df", "indicator--9277094d-e2ab-4e6f-b1e6-da8ec664a967", "indicator--18b5dab5-d932-44c3-bb9e-b3007a5fbb4a", "indicator--93b2ce72-4e50-4a53-8e55-978536db85da", "indicator--8dfd8d86-e670-485d-9efa-aeb13a1c2d77", "indicator--56739370-9f01-446a-bcf2-adbf1fa03f66", "indicator--df02e197-df0b-4c1c-9a49-45cc82a5a3f7", "indicator--8873f469-908f-4453-9e59-77f8d359d0ae", "indicator--a97b5a21-0b58-4471-b884-843a414b5523", "indicator--c7fe780d-ad4c-4f41-a090-c6784da38e85", "indicator--e765e70f-1617-4dad-93e9-52601a425488", "indicator--6ebcdc16-f652-46fb-b56b-8871eba76999", "indicator--18325ed3-13d3-4ac1-9f81-893b7556a29f", "indicator--3fa2b237-3e9d-4393-a9c3-22c27de74de8", "indicator--bad2255e-4075-4768-bf5c-f9487ab7ddec", "indicator--e21a8017-73e1-42aa-8279-3c9d7cfda160", "indicator--e95a81fb-38d3-4608-9a97-74dfd14e41ff", "indicator--1d830c15-c0ef-439c-a0b7-c9d0d1dd04bc", "indicator--6564418f-8d10-439a-b98b-7ff34e5f80e6", "indicator--d9e3b12b-eba6-4a74-bc79-44b43d045c7e", "indicator--93251fd0-1c27-4e64-90c5-2e5d8511b85c", "indicator--88d2baa8-ae0f-4898-b3a8-4606745ba459", "indicator--875b81b8-178d-46b4-a7bd-94a0b4c25d0d", "indicator--85699a41-2c16-4b56-ad89-6e0537958685", "indicator--6dd21d21-581a-4d32-9598-e7d054e69135", "indicator--c591fab1-94ed-4f07-8b4d-a470fc6a1bee", "indicator--e580c124-b546-4a37-81d2-6522e702244c", "indicator--5ff9d3fe-fd9c-43bf-b05b-7190b2ed027a", "indicator--420b331a-ab1e-42a8-a9cf-94ac81d87f1f", "indicator--29e3b453-427b-43e5-9ca7-829ba5b8f549", "indicator--83ead51f-49da-4631-b531-6463738985dc", "indicator--30552c96-2417-4ab7-a29f-5763c6b67acd", "indicator--d2c4f8a2-5b93-49eb-baf3-f368d18910ac", "indicator--b356ced3-ef2f-45c3-ad8b-046c304d275f", "indicator--002b37dd-e476-401e-a639-4a5d5b106090", "indicator--2c3181b4-ab39-4983-9f4f-3e84e4f959bf", "indicator--f56b83ca-2455-4e2d-bd2b-d9440c255ba6", "indicator--5944e29e-437c-41f1-b962-3759235df679", "indicator--9926f0c5-4eda-4fb3-8032-396c97e65770", "indicator--2b5c39e3-2f20-4471-b9e1-ea77459e57b9", "indicator--45d278ff-8bb0-42a6-9626-db07f5529329", "indicator--9af2fec2-0678-47e2-8dc0-59b48b17b479", "indicator--d927b771-7ae6-4f08-b101-2b9cdd402b52", "indicator--e85c67ca-d533-4fb5-9acb-495a12620153", "indicator--df70e39c-9168-45e0-ae8e-0f74b5c01c78", "indicator--4ef43abb-d5dc-47b5-b49c-8490bfba5789", "indicator--ed0fee90-4779-4971-8e43-472a78d70fe2", "indicator--f820714a-0702-4a33-8951-f96a2e103a14", "indicator--a222239f-da04-41f2-858c-9c0ef0f066ec", "indicator--1aaafbd7-4db0-49d1-8779-f07851088ea9", "indicator--345832be-7ec9-4b50-9d04-d1dddd434a59", "indicator--da721cde-28ba-4bd4-a956-ac27001aa0e4", "indicator--6191e719-d2ab-4a79-82d2-ae0c9d1d1b46", "indicator--a2f295c3-3815-40ec-97f6-1a98af791366", "indicator--413f90e8-ce97-4220-a211-88df87ee1961", "indicator--4b2e4c5f-4cee-4c86-98e0-b0c17b83773f", "indicator--a3470ef8-f36d-497c-9fa8-a48f787224f3", "indicator--29814587-17df-4f5e-9208-aa40e5e7a338", "indicator--62f478ff-7758-4796-b030-61d730bde0ea", "indicator--465fbd06-1bc4-47de-a513-5da652f704a6", "indicator--d38808d6-880c-40c6-9b48-d6bd26d1ef1a", "indicator--f69a5fa4-e7b7-4810-808d-8cddaf0b92c2", "indicator--ba6ad525-e04a-457f-93bc-471f80c05209", "indicator--25339395-41f0-4618-b583-0732a4e96882", "indicator--139ebcc7-9ded-4a01-a343-51f45f8fac9c", "indicator--7c25f129-34fc-46a9-82cc-e6d5ffa059b7", "indicator--954997a3-f1e7-440e-8328-67c596ae7475", "indicator--6a075354-3fca-4281-b969-d42eb93bd750", "indicator--16c9d6e3-27fc-4414-85fe-85e3ccffeccc", "indicator--e389d118-f4d6-4a2d-bd2c-fb16b5c1937c", "indicator--75dbb223-50bf-4071-9074-002013867018", "indicator--b0ff04f2-8631-457e-a815-01f4ac427c8b", "indicator--69840585-973f-4ec3-b952-d088329add26", "indicator--8fe1bff9-3383-4b43-ba10-3251a4cd7ae8", "indicator--a0522456-0219-4b04-8a51-7c2b42d01e05", "indicator--6ccf2161-c8fc-4826-b993-bcc918c22e09", "indicator--15b33cb1-12a0-4f86-be75-b30098b6cc6b", "indicator--c3f48595-92e6-4095-8463-94827fcd5e60", "indicator--066cd434-8688-4328-866d-fc900cdb6196", "indicator--c9d4ff81-b36c-4ff3-b056-015baf2e7b8f", "indicator--d32d2eba-90b3-469f-af8a-bb9c131da634", "indicator--dda55aff-e3bd-4734-b27b-058dd1253a17", "indicator--0c0b1700-3b42-4f14-b36d-ce6c11e577a6", "indicator--9bab2eab-86be-437e-943f-7e90fa0fce4f", "indicator--55a56950-5518-4ba2-836c-0b996f4ee391", "indicator--e7010353-3533-4172-aecb-209be561eadf", "indicator--792b4be0-7679-41aa-b4a6-b9138a65c85d", "indicator--e9bb65d6-2707-4c40-9e8c-928014958c3d", "indicator--f808655b-b85a-476d-a72d-4e3cc1e382c5", "indicator--d10f8a35-7cec-46ca-9828-e3aa0b6e508f", "indicator--5e474094-fd89-4e50-8867-c2fa618b5863", "indicator--0b755e08-9c55-4108-801f-d7295c363954", "indicator--255bd0bc-e45e-47f6-8852-17cd928e7b24", "indicator--d538898c-7f88-4250-86b4-4f28632538a7", "indicator--0d7533e8-4093-4b99-8a60-635dff25ebac", "indicator--ccf9734b-a698-49b3-8970-b71bfdd6ee97", "indicator--faecbc44-eeba-4c3e-942e-02df9566eada", "indicator--34bce724-3301-4350-9e0c-12ab7b743bdd", "indicator--99670095-836b-4290-a074-402f8d7d64bc", "indicator--f39b9c96-d54c-440c-9311-6f7618c3119c", "indicator--072132f6-3e82-4f20-a78b-356cc8f90765", "indicator--27aed469-399f-47fe-a809-48a7a11bc72e", "indicator--9cea912d-7d4e-4f78-b09b-9f2c2679a555", "indicator--f1c7362b-a062-419b-91ef-80fd9f070d4b", "indicator--960af7f3-927c-4824-a7c5-03e633add405", "indicator--f4781689-5c84-414e-82d2-7e0fa536d6d1", "indicator--c4f50695-cae6-456f-9afc-407b883e8d18", "indicator--409c3ba3-1d07-4292-a005-408ae54d4be1", "indicator--5e9907ef-4cce-4439-81ec-d2d06a5f2038", "indicator--988d82e9-5020-4982-97ab-46fe7be4af92", "indicator--f7d29e0c-7d3a-4798-bb10-39d3c52aa014", "indicator--dc9f9ae3-bb7a-43a1-bd7c-e17559d8d474", "indicator--1818261c-7202-425b-a929-e4c91e88795d", "indicator--29c39e1b-165f-4556-9cbe-1a957e2827a0", "indicator--13621c1d-f2fd-4691-9941-e9affb51f98b", "indicator--b2f6809f-906b-4075-9e8f-c3ab27577240", "indicator--cc0aaae9-f5f5-47c7-8f67-f4b4d84c16ab", "indicator--f4ba8b77-3248-4547-b383-b501abdd7a70", "indicator--283cd4b8-67df-4180-9e23-aa2e024829df", "indicator--1bbff0cc-fa8e-4ba2-8365-bf37c8195235", "indicator--2d72ef6b-ad99-46cb-a975-b7bd4ae2f561", "indicator--5cbb4fc4-d424-422c-9b7d-b86099bf044e", "indicator--8fad243c-a429-4474-afd8-637d1dbd1796", "indicator--56bc7b4b-2227-4da2-981b-6a68b96ad312", "indicator--c5e57b76-87c3-4dd8-a093-bcd5d94198b5", "indicator--96d8100c-a4d3-491f-9521-b815abb46cba", "indicator--3b7e0dd4-4032-4006-a881-870391439763", "indicator--59559b07-92f6-444a-81dd-cc17762726bc", "indicator--618c5cf6-b964-4dac-9d9d-cf3fa929582a", "indicator--36a17998-7a92-497a-aa73-b2947d4cf527", "indicator--95df475e-9c54-4d99-b0f9-c321bcb5a407", "indicator--00f8b616-9603-4d2f-99c1-31e7a3709cdb", "indicator--c15edec1-f8c6-46ed-931b-b149750728d5", "indicator--810fbac3-5734-4356-b7de-0ca1ffd7362e", "indicator--4dc75d4d-1554-4da7-b5c5-494f54918591", "indicator--c63f23e8-421c-44a4-9bfd-49b20f83ecce", "indicator--761193fc-87d6-4580-b61e-0d1fe6d3dca4", "indicator--c4210e7f-91fa-450f-bc2c-76c543552c9c", "indicator--47efa546-6b48-4592-bdf8-1893d2c92030", "indicator--7a86a04e-d599-4081-b5e9-325df0a53807", "indicator--5b2e87b6-716c-4083-870f-31d01326ccf0", "indicator--349c3768-4af9-4135-8642-5053233ce7fb", "indicator--7dd9f75c-3579-4ff1-a880-d7fdb2cdd0b1", "indicator--5f934fa9-7ff6-41e8-8964-fc1738b43390", "indicator--a9639cd7-f51f-46be-93f6-5c53a671de8c", "indicator--3f4fd2fa-be79-48c1-923b-198608c99c5f", "indicator--c249f991-c5f9-4162-a4d7-a01807db437f", "indicator--db57492f-7078-42b9-acc1-697c6211391f", "indicator--7c29f427-5967-4f51-8360-bc780a0f2ef2", "indicator--24d610f9-bb7a-4a7c-8795-64e54b5b689e", "indicator--79eb914a-5fc2-4b91-858d-cf4412f4381a", "indicator--440944d8-8882-4f44-b98f-6e2a805b05de", "indicator--1930f208-828f-45b4-aafc-1650455bcd60", "indicator--8607a09d-122a-4bbb-9922-5fc7195cc00c", "indicator--e6faa861-5480-4074-ae6b-dafea7caa695", "indicator--c0872feb-2a74-422d-8786-3ac32ca4296d", "indicator--08c1b19d-f66e-4615-852f-a050d8a0a3fe", "indicator--008adca4-fd04-4bea-8a68-35244c0bbf48", "indicator--3f43166e-9581-4367-826b-3915d8446d07", "indicator--992c4331-adf6-432a-b6a0-b5520ad66c4a", "indicator--c3fe58cf-d815-4586-9202-f5436b916822", "indicator--a3e3a1b3-166e-44c6-bf06-b439a48de7ec", "indicator--6a31df19-7dc7-454b-a3ed-0d096c284fc2", "indicator--378341c0-4d8e-4b0b-9ccb-c01592fb5e1e", "indicator--c43d9288-dc80-47a0-a16f-f17b349162d6", "indicator--91c97de1-f359-4dde-a5a0-32e3b34689d5", "indicator--f0f107ad-c631-476a-820b-c5194b21b666", "indicator--28f96619-cbef-4e2b-b712-8886eb93f112", "indicator--e0b9e81f-e2c3-463b-a5aa-c98fb39832a5", "indicator--cd876911-c259-41dd-b504-36fabb397bd1", "indicator--be31bc11-bbe2-4d74-b796-5b152caf38d5", "indicator--65bc8f23-6cb5-4915-ac72-70a19da71ff7", "indicator--420d2854-1294-474f-8dd7-75ebb73e13c1", "indicator--86ab68d3-3bc3-4fa1-9a6c-c629628ca97c", "indicator--5c1948de-1e67-4dc4-b758-4ae6133f1147", "indicator--22ff6707-69cd-45b6-af5b-3f95a054374c", "indicator--11a9abc1-bf92-4ab7-9186-d246f62cfc5f", "indicator--47128c3b-8b67-46f4-8eaa-fa4686e86fb9", "indicator--71a43446-0293-443d-aecb-e07b2f9f51a3", "indicator--574b222b-e9e0-4bc4-a488-0678ac1154cb", "indicator--d218c0fa-ed69-4f38-83b5-fec8eb5e042d", "indicator--13a13de2-11e2-440c-9d2f-be2646741764", "indicator--8c8dd549-f1da-40c9-95b3-2b94fade74e5", "indicator--e780f476-e663-4a6a-ae5d-8e8102545c93", "indicator--7142c960-d402-4969-be38-a39d3bbb7d94", "indicator--ad0b92e9-8904-496d-8d62-99856a4019ad", "indicator--192cb0dc-7a43-49bd-bd41-d53bc48e08ae", "indicator--37f74623-1969-4fae-ade2-891043d6ce9d", "indicator--5204e13e-d698-4269-88c0-d0e7d09fbd30", "indicator--8d24530d-c736-4e06-84f1-779636a0bbb1", "indicator--51398057-a7c7-4291-af53-94c86c482c0c", "indicator--94cf6a9b-2556-44fd-9599-e11b14e4f784", "indicator--aad94a3b-8785-48c8-a094-40cfb2538340", "indicator--20a7aea2-d650-45ff-9be3-c5a04b3e53b1", "indicator--ed382afd-e893-4dea-a583-06e3b26b6333", "indicator--fe56668b-0c7f-4264-ac2a-ff196c6e271c", "indicator--fc69e97b-8528-4815-93ff-7c4688fadc6e", "indicator--d323079c-ef62-42aa-8c84-5b36146c082b", "indicator--8cadee18-8ffb-4dfe-8db7-0cd641923157", "indicator--f9703424-94ca-4dea-8750-69f273592ef4", "indicator--a987260c-9909-4640-ac40-049ba9f96330", "indicator--ec07432f-39bb-40bf-9d5f-90096a5bea0f", "indicator--910a0ef2-df54-4dbc-a49b-c2019c297a55", "indicator--8cf43f00-d529-439c-8f33-aa13427b21df", "indicator--f41d4773-abda-44ed-8792-e0a09afde264", "indicator--e8657e8a-b9bc-49b5-88e5-8731015bf273", "indicator--fbdcb9a6-32cf-45fb-ad8c-c5dce6a44b9e", "indicator--fd8e01ea-23e9-4b2f-826b-180e02028d62", "indicator--8cef6fe5-db10-4318-8542-8803506273e1", "indicator--75eb9c20-8094-43df-a622-e200971f33fd", "indicator--79b64c38-d9cc-44b0-bad5-7847222ce3ae", "indicator--0bedad92-58d8-462b-8682-bbd2bd5f30a7", "indicator--2b72a2aa-be02-457b-8001-cc07774091af", "indicator--943962cd-9500-45e7-aef8-f01edf09b740", "indicator--73f1d2f6-f389-4b7c-b741-f723c7729d47", "indicator--423678db-88a0-4a9b-ac48-b085419e1699", "indicator--1d75261c-67b4-4f63-9694-e4cb4bad0289", "indicator--dabc48c6-58dc-4786-9a21-d5117aaa832c", "indicator--51f9213e-8b31-46cd-902e-d14179536e11", "indicator--6ebf253f-3adb-4807-a47d-ea9a5ebe3144", "indicator--3ab3a280-aeb5-48b7-a05b-bd810d58bd65", "indicator--ae2fa8ec-b43d-4501-9d5a-a8cd73064821", "indicator--b0530fb4-7aad-4b70-bcc4-cc695625c5e6", "indicator--9b1ff537-2f16-4f97-9d98-a55169b5300a", "indicator--8d28d0ad-54b4-4f97-a9be-04b4b392b98e", "indicator--c4b1ebf4-a3ff-45d7-b64f-1474699a8b8e", "indicator--d8273381-ccdd-4e14-8a2e-8591e822a090", "indicator--35ba475f-5516-4e9e-ad8b-e557a2703d24", "indicator--2f0466bf-1b02-4b26-8baa-80d07b144809", "indicator--d5b0cccf-16f2-4864-a360-98daf7667230", "indicator--eddc0e32-3939-4eb5-82c3-3a67e989da77", "indicator--0bf6b517-b9cb-443c-9712-cf4f85ee6df6", "indicator--13b9cd23-a57e-4218-b3a8-6790e05a10ec", "indicator--8e1a34b1-8b2e-40db-af5f-17910dac8ba5", "indicator--85dce19e-4f95-472e-a9b6-7204a31b33ca", "indicator--a87d52de-90a7-4054-996b-af54b8d6b445", "indicator--b3f3e4e8-82f9-48bd-94ea-f57f3aa76622", "indicator--c77a997e-13bb-4afe-983a-a53d484f1127", "indicator--c196e656-edb6-481f-89eb-7e41562a68e9", "indicator--f8301d9f-8b52-4d3c-be4e-59dddaa7eb9c", "indicator--9d3a7c49-63cc-49a9-8619-c12b517ef9cb", "indicator--ccfe54c1-b7bb-483c-a25c-ec1d7e280b78", "indicator--7e7a08db-d729-44fe-bd2a-a9549bbfede1", "indicator--b0c87cb2-bb26-42c8-a447-92cbb56fc10e", "indicator--37965651-fed1-4a74-8122-a31709917636", "indicator--98eb6da5-312b-4f27-ba88-fe8f19223744", "indicator--755d4113-d7df-4617-a496-4373f6bbcb09", "indicator--a495f193-10b6-472f-83ff-9d17906c06fb", "indicator--4fe1b591-7c2c-4da5-8fe6-246289732074", "indicator--d1cc8d1c-2763-4c9a-92bb-9fcdfefba943", "indicator--eb7e91a4-f9e1-47aa-a909-c92ab1a81913", "indicator--e9a1fe01-9eb7-4a00-b304-231bc1301190", "indicator--d5d2f33d-e2f8-4cc5-b6cb-fa620b5812ce", "indicator--57c29f72-483a-45ed-8e81-932282460f81", "indicator--1a053b83-0133-40ad-beb0-c2f5f2079ecf", "indicator--43e9e202-4db7-4d48-b8e3-23c3016906e1", "indicator--f9a2ac22-028d-47cc-b34c-09c38bd6b46a", "indicator--27343d3a-3f44-40e5-9d45-ddd7958b9fd0", "indicator--4cf67288-32e1-48ae-b32b-fd7be1a7fa43", "indicator--a5312004-decc-4f33-8e9c-7d86b0d02975", "indicator--7febcfad-acc8-4389-83bd-dd1db004ed26", "indicator--093ae24b-4183-4f93-8eda-5e5e51889ec5", "indicator--9f7959bc-6f4e-4590-a2ff-073f74a0251d", "indicator--6f337bd8-61eb-443a-bf7d-a804a8b8380c", "indicator--51b5cf77-cd09-432e-9ab5-9f42a683f0b3", "indicator--40e67467-51e5-402d-a775-f1b6264f57c1", "indicator--1642e9a6-e2f8-4ac7-bbaa-51e2a096a429", "indicator--7ec19ec1-4408-468f-89a2-6054210f71da", "indicator--09e913aa-210d-47c1-a8d5-e789c6f1fd8f", "indicator--e561b0ab-8462-4ffa-9e2e-cc26af67290e", "indicator--616adbff-4f6e-4cfa-80e4-441776997b4e", "indicator--398fa14d-e6ff-4762-9d89-68ef815507b3", "indicator--6c225327-bb77-4d9c-846b-2aa7c0aa9259", "indicator--2606d869-c3c6-4087-834f-a34c712ed856", "indicator--df1ba4e8-917e-432e-93f8-69365413237e", "indicator--ba8030f6-f5ba-4f4e-8d8d-ed19dc68b160", "indicator--13de2114-b282-49fa-8f12-91d272b116c6", "indicator--11fa097a-310f-4c03-9aa0-960bf75ef2d7", "indicator--0e46b9c4-d7c1-4567-bdf6-63322ec41062", "indicator--90aa292c-ac98-4c7d-b209-3932a767b7ab", "indicator--086fdb86-2323-449f-bc2a-9e1b2d52779d", "indicator--9f593f0e-64b3-4568-a3c1-7642e40eb19d", "indicator--346b70e2-172d-4016-8e08-eaf5aeb3e76b", "indicator--1e65a495-6e94-4825-a266-db51b613db48", "indicator--bbe3d6ae-84d6-413d-b176-198e4890142f", "indicator--57d99eac-40e6-4381-b182-0545fc1a977d", "indicator--c4bc1b5f-7850-44e1-83cb-3700070a8afc", "indicator--7424b7db-7a69-4727-b9f1-5b308b8136b6", "indicator--7b5ab434-53b2-417a-9187-10b838bc1ee3", "indicator--51aac6b9-8d56-4c9a-a6ed-ddb4d58b4e72", "indicator--f7113caa-be94-452a-b3e0-a911afe5a989", "indicator--75fbf809-ff93-417d-8764-88fe82a9aef3", "indicator--ba89e27a-3c97-4d38-adce-956a1279eb79", "indicator--274ca528-debe-4d9a-95ea-1b84d3c61c81", "indicator--3653d462-143f-45fc-b8df-673e0e39268d", "indicator--837e939b-9544-41e3-8676-357cb9f902ea", "indicator--4b62bced-f973-4a71-88d8-2d71743ce2f9", "indicator--9705baef-5c85-4bb6-a4fd-1c02242dbb35", "indicator--0e7b29db-1161-4e96-bec6-53c99450050b", "indicator--928af24d-2481-42ba-a5f1-9d21b8f8bb6d", "indicator--965bfa36-8931-435c-8df7-ff6f866c18f3", "indicator--e0cb19c0-6e82-4326-b514-eef7a8575d49", "indicator--71be4eb9-d329-4b9d-89fb-a7b782c8603e", "indicator--3dc925bc-6124-4a66-8976-b4a375fbe19b", "indicator--f48d4a5c-9744-48e3-bdc4-14c12c91c86c", "indicator--410dfb97-d8d6-4d79-bab3-d4a16971a262", "indicator--a437ab88-7f3a-4ae6-bae2-00899ef694e4", "indicator--ea2ada9d-9ba9-49e0-931e-1b14c9a3c306", "indicator--e6553a7b-d7e5-4098-9eca-dbf6fbe26294", "indicator--38dbf2db-bdc6-4e46-8022-a425ac477ed4", "indicator--bc6002ac-9759-435d-90e0-0646cc677f2a", "indicator--fc129e91-5b42-4869-ab1c-1c2351d15624", "indicator--b72960f4-e246-4e6d-88b4-937636bc0b9e", "indicator--8bf58609-aeed-4dd6-a6e8-ce9851592c7f", "indicator--df351004-d2cf-47c0-a693-fdfd3ef43d12", "indicator--11c5e41f-d7f4-4e6b-90e2-e6cb300ddeaa", "indicator--4f910b82-05b5-43eb-bfd6-4dbab44ef151", "indicator--e1823108-b5ba-4711-ac69-0e6a3f26edb0", "indicator--7d8640f4-4cea-49b5-a908-1161add5d1f4", "indicator--5d2606e9-495c-4686-b266-7be6fcd479ee", "indicator--691f5a8b-3214-4f9e-9ede-1ac4effc37b1", "indicator--ba054172-9e29-4346-8c89-cf0ff0a6b087", "indicator--cb524ede-d08a-4f41-8df9-e05e94e684fe", "indicator--88193c45-2c82-4e27-bf37-bb3bcc02a5ba", "indicator--9f153ad9-876b-48fb-842c-600d61ffb109", "indicator--8b8155cb-76df-4154-8a79-40fc4dacda50", "indicator--99613861-47b0-42f9-ad3c-fa1eec06e307", "indicator--1f25878f-7b19-4632-a2f3-3ed182e00bb4", "indicator--1620d808-7455-4164-b1e4-5c6468b2b08f", "indicator--b05e3d6c-44ce-42c6-8f16-a21756b49b41", "indicator--4aafd8ae-0e28-4f13-95c5-5f767eac3716", "indicator--5dd4cc5c-2813-4754-ac56-1820cd027073", "indicator--c35bc4c2-6485-4896-8580-cb1518db6e94", "indicator--a7ad7ab1-bb2b-4096-b5f8-f3c063191826", "indicator--10b5c53f-85a0-4609-acec-a66a80f5318a", "indicator--da154a94-9ceb-4df2-8350-8020098ace10", "indicator--fd9357ee-281d-4b6f-ac41-23f89c25202a", "indicator--8f58074b-18ca-4c49-a6d8-1bfe603b1136", "indicator--9d2701c0-3aac-4e9d-96b8-04b43f75f5a4", "indicator--b6d9be53-16a3-46d8-aea8-91942859ffff", "indicator--ba2d996b-397c-43f7-bff5-2c5be041d494", "indicator--268b676f-49f1-4622-820d-511b46bd9688", "indicator--9d6bfd79-93ff-4bb7-8333-abe6695f02f4", "indicator--b1d9186d-ec36-4e78-8ba3-90a9c5b2a024", "indicator--63a2446d-92e2-4d6a-89c8-7c70adc476f5", "indicator--37067721-cf1f-4e6a-986b-8518318a9321", "indicator--f9349a8d-35e4-4659-bc04-ffcc068b6d50", "indicator--e177ff53-2d89-4652-aa3f-805349c518df", "indicator--42c8cbc9-47fc-4730-80aa-107eaf0b5c63", "indicator--ad8b3ced-b370-4450-9f7b-3b3bdfed3189", "indicator--66f120db-a809-4fb1-8179-c0cf4f592172", "indicator--7c35b985-57ad-40fa-bed6-54756de93ed3", "indicator--75895398-d213-4c05-ac36-44853647706a", "indicator--31c8fee8-384e-453e-b778-1c8be3a1b328", "indicator--bb2106b4-c71d-439a-b96c-0b4bc5e40521", "indicator--c8af9fd1-4784-4595-bfc1-4e4aa9153736", "indicator--7553cc50-c752-4d46-8777-615afc719530", "indicator--b2118113-fb85-4873-8a53-2e7eadb708e7", "indicator--c607f78d-6c37-4e6e-8c78-0bd82cb30425", "indicator--e953200c-3db9-4455-a40a-d69675d830cd", "indicator--5fafb5cc-4a77-4820-8fae-d222a0309be1", "indicator--1ff47bf8-bd1b-4bcb-b80a-28df59f99ec6", "indicator--1ad56e44-1a9c-422a-868e-aad7dddc3806", "indicator--3e6b2dc0-f3a4-4000-9632-be01cf4efde4", "indicator--55937c0c-e14f-4d11-af18-0664675bb059", "indicator--5665537c-c59f-4ea2-ba0b-9e545dee4db4", "indicator--217014e5-7146-47cc-83cc-32838f540519", "indicator--7556d99a-971f-4d57-9e4d-8b3b0cf6ec2f", "indicator--362763e8-81ab-4c16-8b4b-fa216b8bea5f", "indicator--c729a2cd-99f9-4c64-ae8f-5dabbf935da3", "indicator--044e11a3-be3f-4dd2-a411-1a89b023f448", "indicator--1829605e-5525-43ec-9952-ad8e01dd2795", "indicator--9d46ba74-cde1-4706-8b34-eea08f263258", "indicator--8d00e6cf-0bde-43a9-9481-df33bf822299", "indicator--6dcbe889-c01c-48d7-9119-e7c362b34871", "indicator--34aef85c-9c8c-41e9-b123-a4e04df212bc", "indicator--0ceaa054-0051-474f-9410-489c621033a5", "indicator--9b251121-b8a7-4ea5-b73c-f757acd4beee", "indicator--d69ed49f-e258-4567-abd5-1878d5d6917d", "indicator--8df685b3-9040-41d3-9588-4bac75b095b4", "indicator--f784bcbd-0f9b-4f0a-9aea-e493f4d62c5a", "indicator--51b7b425-494f-4cec-a1ce-ae2986383722", "indicator--1d39bda7-6c78-4f07-b3da-92b1e12741e5", "indicator--3935562f-8670-4749-8519-90564effb74e", "indicator--328c68e7-2ec3-4240-bf10-5bd177261fe6", "indicator--9ef4e514-be98-4de3-be10-86a56bc49346", "indicator--7a12f324-fccd-483f-8ad7-88ca86b35065", "indicator--53fa0115-3e6e-4ab8-8f83-b3b07e003cf2", "indicator--ec599598-5a7e-4a3b-b726-35978fd0660d", "indicator--2cfb9b72-7ea5-42f9-971b-a31ba6ae329d", "indicator--186ee984-7073-4cb1-bfd3-7f7afe87ff7d", "indicator--93ae52f0-20d5-4f5e-a76e-90b1163ded0e", "indicator--3fe5ffa2-3995-4e98-bf78-4dd30e38619b", "indicator--b483c57d-09b1-4ea1-a016-9caa08dc9516", "indicator--59a4b87d-b6cd-4e79-8e1b-13c5e8409905", "indicator--4c491baf-0118-4bc0-b961-d66f3de69144", "indicator--636e92c7-1aaf-4e14-9050-6cb10b3f485a", "indicator--b5907c92-3eb0-43a2-b605-d0d8d6a110e1", "indicator--859d444e-222f-487a-af08-61d959b2d85d", "indicator--c88128c0-55c7-4547-858a-8fe30ea2f05b", "indicator--7fdf03fc-eb70-4b75-aa54-d18541db61f6", "indicator--1d073fc7-2448-4544-a802-61dbb705e446", "indicator--b4c4266d-86b6-4159-8966-9534cf063119", "indicator--ce881985-b6a4-4b25-848d-8a5baef25cf2", "indicator--87c566b4-0c08-41fd-8611-aada79a5cfe4", "indicator--6991a30b-bbc3-466c-a245-495bbd0cfa00", "indicator--2a627623-23ae-44ed-9dee-c9a2680ccc43", "indicator--655702f9-78d2-4f4e-aeb6-b2734be5663a", "indicator--5fe18141-ea16-41ea-ae68-3cd71ed2a88b", "indicator--dc4da178-d357-4ae7-89a7-baa2945a2bf6", "indicator--30392c0a-df5e-45e2-aff9-2c2744892afe", "indicator--d3524d3f-e94b-444e-8bd3-ed4d1f8342e6", "indicator--89a2368a-c7f2-444e-ba63-b6c1fb60e22c", "indicator--9e763969-96a9-4144-b939-4b0e9eb7d568", "indicator--8c52f940-cb94-4257-85ce-5c9eef581998", "indicator--ba18bbfd-96cf-43ee-add6-fbdacd3752c4", "indicator--a4599609-6be0-4368-8be7-6a203b862dd3", "indicator--85833065-83d2-4068-a377-d8aea8e402ab", "indicator--17e83821-c56c-496c-a2a5-83deb01b0c48", "indicator--e18712e2-fa9b-4fdb-908d-316e5ef5ae81", "indicator--d3c0bc10-4012-422c-b4ba-f627255e0e00", "indicator--b72eab6f-3b56-47c6-acfe-626a295811f4", "indicator--fd527a39-b1d0-4aae-8f03-0e81ef7c960d", "indicator--ef593518-a0d1-4532-abdf-518bead363f8", "indicator--c34a99df-35d7-4341-b4a1-ab951b29f21a", "indicator--fd312fdc-0bdb-4150-bf1c-20c7e7a6e94d", "indicator--abc77f47-4d79-4609-8ac5-fabde80a79fe", "indicator--04ff8e13-56f7-482a-ac72-a1fe69395a0a", "indicator--01d3fe5d-516d-44e3-80a3-0564d047fb6b", "indicator--b42e6ae3-cb3b-459a-a771-6ea8c684b038", "indicator--2ccbfaf1-ac4a-4e54-9109-89861bcc6680", "indicator--ab590fd0-62ad-4b6e-9c58-9b73b346f98a", "indicator--76b06deb-aba1-43e7-875e-d3a498717659", "indicator--0983ab5b-8180-41be-b0ff-75461c80d46b", "indicator--f0e296a1-416c-495d-bd3a-8417a43efae5", "indicator--eccd714f-dd84-4d1f-90f3-1c494bb6bac4", "indicator--00612e33-67fe-4087-b588-ef094d431ccf", "indicator--bbbb6388-0be1-4cb8-b354-4c1e0edeb2ab", "indicator--2752524c-32e5-4738-bcf9-8fa73fe0fc46", "indicator--7f5fcf4a-2acb-4140-9181-66744cc75e43", "indicator--3eec5e72-aa2c-4826-bdb7-3a2fc7c9931f", "indicator--7d825448-86ae-4f43-90f9-721591972065", "indicator--b308005f-cfc4-4149-bb31-0235a77d277b", "indicator--5c08a781-19a0-470d-ba05-67e05702d536", "indicator--7811827d-d4b4-457d-befe-5178eca5f399", "indicator--74a22b2e-774a-4d5e-8c42-b0df1a660dc8", "indicator--126b77ce-2979-48a8-9db0-3f45ed1eaa64", "indicator--4737ecca-67ff-4568-9233-818824a7ac79", "indicator--c4a3d30e-b2b8-41f7-b38c-523b42bde909", "indicator--e386ac1e-51f5-4222-87d3-2fe73a7687d4", "indicator--99bfb6b4-43e1-4b5f-bb29-30ab72661bb3", "indicator--b92796a6-c1b7-4db5-b2de-51d280c54a10", "indicator--36dd9733-8101-4430-92e9-5fda90247381", "indicator--3f79e725-22a5-460e-8f88-309bdadd3de3", "indicator--0e13c280-e045-4ac1-8ccb-3578e69bb05f", "indicator--a3e9281f-0dec-4f1b-a356-890e2d8ef843", "indicator--37f25c21-a227-42f5-8931-4103fc598f94", "indicator--d84d1ab8-896e-4446-9f1b-3e45955bc1fd", "indicator--5dc651eb-d9ff-49e4-98fe-ba4cba71b2b7", "indicator--2f640103-1e83-4510-aec1-37754f0a83ae", "indicator--2d0ece02-0efb-4db3-a84c-76bd944d5f2c", "indicator--2713ac47-8e71-4136-93b0-a001e746fe68", "indicator--a113c5f4-5cb4-4754-8625-08de9ef27bd4", "indicator--c0c4f73c-75b9-4452-91a6-267cffb000c6", "indicator--34868b3c-4129-40a7-83e0-25276507ec80", "indicator--179c8c6e-f5c3-49d0-84d7-65311e0d9ae4", "indicator--944f5c93-0a43-42b4-8d32-864b427011d4", "indicator--0c4264c9-c832-44f9-b4b1-b27c87acb2b8", "indicator--6aa7d657-2934-4fad-945f-e4632c660bad", "indicator--5ce5d645-fab3-4d4e-bbac-a707874a6d4e", "indicator--c4673f3c-f0a3-4438-9403-5fb4ca28a596", "indicator--d4fb98ad-34a1-452e-abfe-db29078186ea", "indicator--a3603596-4852-4e1b-9303-971e2fc2e781", "indicator--c713457d-ea8d-444c-8395-5e0948e458a5", "indicator--27633a4f-5b84-4020-8166-6744ff2b8553", "indicator--a38901e7-9bca-46aa-8d5b-3ac8038c8d25", "indicator--026d79db-8876-40b3-ab9a-d9e40c1ea0ab", "indicator--15651332-dd08-449e-b170-00128e721fb7", "indicator--b36d56a2-d3da-490d-906b-6c2cfd4eaea8", "indicator--f302333c-5c7c-4657-9b5f-f32c9e7680df", "indicator--e874d26d-7005-4875-a6a6-9f1c4478d029", "indicator--e08cf4c4-044b-4908-8dac-225409a715f9", "indicator--47113893-56db-43c0-8d7d-804156837192", "indicator--d3236ce5-bdc1-4079-bac3-53ed83b1d5b8", "indicator--76e1ab24-28f0-4943-9466-6beb6a6f9dad", "indicator--49a74f09-8a58-4133-aa92-1c3eabb881d7", "indicator--dc317825-add8-4c7e-af01-12337c976b1a", "indicator--1ac63196-3d05-4b67-ada9-05aabff69d2f", "indicator--5421b804-cdb1-48c1-887c-e6a844e3a0b6", "indicator--615fb164-6d72-4122-a577-2b47afe238cc", "indicator--3585b9ac-fccc-4502-9001-260016c0185e", "indicator--60d7ded0-6607-4117-9d36-bc058f124e42", "indicator--bc302864-d4ce-499b-871c-0c51c0627ab8", "indicator--6b073d14-43a9-4c4a-bcd4-cbfe42845541", "indicator--74f0b920-6c29-45b9-810f-3097a148dada", "indicator--fdeb5c34-3c2c-4373-a688-c37056c002f9", "indicator--aa22eb3c-9111-49e6-b20b-6f2c44cae56e", "indicator--52dcf296-a328-4db5-9b3e-21670f8678bc", "indicator--78853119-51e9-4b47-a9db-757c426de606", "indicator--56ca7b1b-36e7-4ce8-9552-4f64bbb9f500", "indicator--38c5b989-bc8f-461a-b58f-b6643c891c35", "indicator--dbe722a7-2fae-4bc9-b786-0510c91f4266", "indicator--679f0bc0-50eb-4278-9545-c7afa1460ea1", "indicator--aeaf8c34-6e44-4470-9541-40014b99a42a", "indicator--eb6196fd-aac0-432f-a31e-23db3cf0948d", "indicator--1a5b8fe5-8e79-4345-8805-b46f70c5d913", "indicator--b1b619ee-6045-4d4c-a915-6ad4647a7e1d", "indicator--7f1c0042-147a-4aa8-a5dc-5b9fb372879a", "indicator--a1f5d518-62e6-49f5-96ca-72145ec4f4b0", "indicator--307c30cc-5185-4f4a-8eb9-a304d885a324", "indicator--1f48579d-a098-485a-a873-f6a4b6d834fb", "indicator--89e8516a-179b-4aa9-a9ab-0fb6f3270cf4", "indicator--99ac3b8c-8c55-4a1a-bbf9-4a64a5da782e", "indicator--50eb0b7c-1f8e-462c-b143-68f644b3d3fa", "indicator--381df70a-7760-43b4-a720-7a0ee46bc35f", "indicator--c3081fa4-2dc7-445d-a889-91bd19789701", "indicator--9371c478-5999-4b22-954c-c88e7d538854", "indicator--1a7f2f37-eb6a-4651-a311-a0eca7dd9a19", "indicator--14a97dc6-977d-430e-8a50-d5e0ec5eb3ea", "indicator--8181c750-5b43-41ea-aec3-dbacf2ee942a", "indicator--18bec097-627a-4abe-9bdf-c10f47b357d7", "indicator--4ecbffac-d429-4d98-915c-841eb87e09dd", "indicator--2053e517-6fbd-4141-8d4a-a3d83cf57059", "indicator--7d93c242-fa9b-43ab-bd4d-dccd861899fc", "indicator--aa167fe1-037f-4cd1-b0a8-594a0d6bad52", "indicator--3a7e0877-8723-4160-8e9c-e52de3b47cd2", "indicator--e074af4b-5e35-4c71-b749-7c307a78e9f9", "indicator--c8cb6c5f-7678-427c-a5e6-5297c6245c15", "indicator--e936ccdf-1f16-406e-96ab-bcef06ca05ab", "indicator--ebc08a3a-3e7a-4b1c-92f7-57705e9c1e14", "indicator--b5b2ed54-072d-4632-ac85-477f75601d16", "indicator--ed88f743-c840-497c-86a6-9c88c7f51a77", "indicator--6422e632-c130-4896-81ee-b59c5baa7471", "indicator--2ce4a9e9-7171-4c5f-8309-b8333f10f9bb", "indicator--3e05478a-44ff-44e0-a5d6-5064b58447e7", "indicator--b13d1e3d-c76c-46d4-a483-07917f7ad932", "indicator--7df3ce89-63e2-46dd-9eec-e0106b187916", "indicator--28ace897-42b3-4984-afc9-a2e437d10ae6", "indicator--6a4e0f31-9c29-4d3a-ac65-b0039b7326bd", "indicator--2ac8acd0-f8b0-4e57-a53d-f9eaf0f67bf2", "indicator--e1ed6737-3ecc-431e-8cad-fab8fbf27839", "indicator--4ff99af8-9371-44b6-902e-ae27c17c1aec", "indicator--1df4a71e-6d03-488d-ae37-486fbb17b471", "indicator--0bc56d0f-c4f2-4dda-aaa6-2161502d5527", "indicator--d32d1ca1-afd6-4724-a79d-4a1e359efc38", "indicator--540c5f21-d243-42f0-b464-10a931b2110d", "indicator--4fe7f4dc-bc5f-4b9b-ad55-0e538870df9e", "indicator--65142a05-b91d-4c73-b814-2106e6d06a99", "indicator--3f731d39-c12b-41c2-a035-25b1f0687f4a", "indicator--1422879a-34d9-4e18-b334-55729a8ca6e6", "indicator--b8c8c8f6-6a18-47a4-b541-22eefbadab50", "indicator--eb2258d8-c4af-49b5-95f1-d1fa6e50458a", "indicator--635904f3-ede0-45f5-94c0-46bdf40aaec7", "indicator--84ec8ebd-abdd-4e4e-acd1-bd750edb9d98", "indicator--da3985ee-f82a-4a51-8521-06d01b0c48e2", "indicator--aefe2f58-f85c-42d1-88e2-0506726e7d84", "indicator--1468001f-0a40-4a18-bff3-74ec8a3d4d91", "indicator--a7be9b5d-5f84-449f-9fb5-1e111c6ae9c3", "indicator--9dd1b16c-6b31-4a26-ae59-b5c1263a98d5", "indicator--674b758f-f655-4dff-9c5f-afca4fca50b9", "indicator--9ac29df7-cec7-44d7-b26f-c6be26abbf4b", "indicator--d55e12cc-c269-4a1f-9bc7-99d624056787", "indicator--0b3ab956-b629-438f-a6c5-c9dddbdb0c4f", "indicator--8cd2330b-591c-4016-97d6-ff86ed15d413", "indicator--c1684c45-70cf-4202-8857-08e9b140d2d6", "indicator--6af27df3-c401-46af-8393-ca8ab92aadd7", "indicator--93200c0c-267b-4db4-a703-405c0507e0b7", "indicator--894967a3-c151-4609-8b7c-af49b5abd915", "indicator--4a4a15a2-0cbd-4e40-ab4e-070f92009798", "indicator--d8b68b30-e259-468e-88a3-50c97a13f09e", "indicator--3f8d2220-8c3f-4385-9d8b-8ca06a699533", "indicator--188df277-725c-448c-bb54-a707aed4d272", "indicator--3f3ff66b-0344-4e5c-8e4d-56e117825cc6", "indicator--d5e4fa31-5f5f-46c5-96e6-dc6272ccbf96", "indicator--56e1f7b9-beb8-40dd-99eb-df487a66b843", "indicator--2e3442f8-04ff-4bfc-bf10-597d0cd442be", "indicator--d2744043-4af6-4758-bccf-8956ae812268", "indicator--56e92100-4d16-410d-97fc-892104261483", "indicator--a6ca6b7f-1d09-4414-9e9c-467ed10059fa", "indicator--971df401-444c-414e-8cff-28ee56f76e93", "indicator--70cb4ffb-c8b1-46f1-8083-b47a9db93287", "indicator--1b8f5620-b249-4cc6-b681-a3085d9a7e59", "indicator--730c845e-3036-492d-8f90-5f43a4e8a825", "indicator--7043c4c8-eb00-416c-adb1-38176a67cc5d", "indicator--4064dd65-a978-4913-a534-6414486e967a", "indicator--c92b879d-3d79-46c0-b26b-5200472818d7", "indicator--b077a812-71e8-4c17-82df-513f09817c3c", "indicator--b3d6a74b-66b0-4a00-a25d-4ae77de39943", "indicator--bbb80bda-74ed-4591-8709-a0c2f4245202", "indicator--6e9cfb0e-3f96-411b-b7c7-7a9110ba27c8", "indicator--04c2cbb1-f33a-4c40-bead-3e5e5efa3249", "indicator--9ab1de58-9d35-4586-9641-22ce4debd438", "indicator--b4fc9f51-e9b3-4076-91f8-b1c2c1ad7c64", "indicator--941a1190-6495-4cd3-98e7-a088cb11805d", "indicator--2044291f-a475-4a53-b303-91501e9b640f", "indicator--25b3011a-a56b-4277-aec7-9bdf4a5e1bbc", "indicator--6bb68e46-bf76-45c4-9c74-7bc329ec607b", "indicator--7573b36f-864f-4a9b-8a17-7e768af59f3b", "indicator--7c9f7e00-b837-4987-b7a4-e89763168ac3", "indicator--c50859a7-7d05-440d-b3c3-5f57711abe36", "indicator--c2e9c4e0-c2b5-41c2-b6a3-2e9386d20af2", "indicator--15813ddf-c1aa-45a9-ba57-1cfa0738b90f", "indicator--84c5e9f3-3487-40ac-aabe-da279f9e6637", "indicator--bfc44340-1237-4712-bac8-436463a86bcb", "indicator--5b76d82e-224f-4b74-aec2-bace25ebd5f7", "indicator--ae2106b3-3ead-475d-b815-479e37e61219", "indicator--9a7da4e9-efc4-4dfa-a9d2-cba57df08fb1", "indicator--86186e7c-01da-4cfb-80dd-5700bffdde76", "indicator--26463208-ba1c-4373-b3d6-dc56952e79af", "indicator--fd9a9e44-32fd-4341-9cfa-9d42bf3f6ab9", "indicator--63ce7db8-8048-42d1-826b-39c7eff0dedb", "indicator--38069b57-ecfa-4afd-ba06-8c28722eaacb", "indicator--98bb3ed8-c109-4a7e-a141-2dbec4df7ae5", "indicator--223a17c8-7964-43c7-b0b4-3700aebc17d8", "indicator--70cb61d7-822d-4f95-ab0c-43804d564c65", "indicator--a73b08db-229b-4dce-9731-9014d68e7f33", "indicator--e23ca983-4050-4fb8-9b8e-c49f2c4f8ff2", "indicator--bc5bcdf3-793f-49cb-aa19-14a4ab5af847", "indicator--2da170cb-10b6-4bfc-977c-4777f90da199", "indicator--7abd4491-f672-4ff1-8815-65ece80f7b60", "indicator--6cabdf64-baff-4202-b16d-ed3e0e686d30", "indicator--494818df-cd44-4da9-b1dd-ee6bf7a39467", "indicator--2a74ee69-a24c-47fc-855f-bfb12aa0d19d", "indicator--c2758119-3dd6-4c1c-894b-2956f5b7d46b", "indicator--cf504b9b-82bb-4f73-a4e4-e86ce31d8747", "indicator--76d459b7-3824-4f71-924e-00198aaed129", "indicator--4a5aea82-090c-4eeb-a0e9-081e72877c0b", "indicator--170a0043-38ef-44cf-adc9-636d3a315a48", "indicator--e9602f62-27fc-4a0a-8bfc-d8e0a9af2578", "indicator--0ec28645-bea0-4a6f-a06a-92d432c98588", "indicator--a08eaa29-2a0a-4284-9c97-4806dec14a30", "indicator--324228e6-fe5c-4b90-afc2-8fd068bf8d8f", "indicator--f00d081d-62ad-4909-afbd-821ef3d64552", "indicator--b094faac-4da5-43af-8437-7f7e6a0570a0", "indicator--73064877-9a26-40c6-bf5c-d80f67def973", "indicator--8c084f46-7bb1-4140-9669-87633e85cef1", "indicator--8b5f7baa-6fec-4153-89c8-aba1f19109a9", "indicator--b78b95fb-a408-42fc-8cea-81dd56b4dbb5", "indicator--6ce1bd85-1833-4f90-ba2a-b1fcc87828c9", "indicator--a1c7d98c-6471-437f-9287-3e1dd81ba536", "indicator--5483abc0-a4f2-4a38-9371-07793f3a9dd8", "indicator--2830930a-afed-4e9f-93d7-3dbf71e91da1", "indicator--4d4d5427-c7d7-4980-b3e0-659ca49f78d6", "indicator--ebeef855-0748-470d-a511-4deed0f53481", "indicator--27fc9737-889a-4cff-9b36-23f8fcb05bef", "indicator--33c74fd6-a09f-47a9-8b24-266b14b552a2", "indicator--329d6902-424f-4001-b68b-889572419828", "indicator--4bc63a63-ae42-4f7b-9f7c-7a0adc467d5b", "indicator--8f372cc2-2a1d-4d31-b3a1-d8a146c002b2", "indicator--6a6c2a02-36df-47b3-8320-9d61328c9ed0", "indicator--1e0701f1-b028-460d-be37-bf983184bef7", "indicator--1acb3d53-f7ab-45fd-87a6-066f237022fc", "indicator--f95e0909-3f97-487b-b4a9-aaafe66230ee", "indicator--71d9de3a-583c-4524-83df-618dbd7d4fbf", "indicator--62ff9a37-7f94-4497-a3da-d372e001d99d", "indicator--7133ffe5-a38c-423d-85f9-bb584502b600", "indicator--bed6004a-4aaf-4803-a827-1fcecfdafa16", "indicator--cd1b96ea-8d8d-4953-8ca0-118bdba3bc2b", "indicator--4a18e10d-190a-48ea-9e14-cf9317d81e1d", "indicator--37878db5-fac5-4942-9ce5-bc9d9099a021", "indicator--5d298351-9c36-48d1-9da2-4b6ffd33fba1", "indicator--5bdf1eb7-1e4f-4da0-834c-f8753e2a3d7a", "indicator--97266ff1-b55c-426b-910c-c6b99d0c95a2", "indicator--c8f236a9-876a-42f9-a273-e9dbdf477a37", "indicator--2e5aa01b-5b9f-4f98-aad9-000f5b8dfa63", "indicator--92f9781a-8cd2-4ebc-893f-6e7be827bd84", "indicator--a39e7a07-ab0c-497d-a93f-634463f74541", "indicator--0cb434f5-64fa-435b-abbd-8881c090a13a", "indicator--b6f808b4-a975-4f67-a58e-5f68ff70be7a", "indicator--70a7b4d2-67d8-4821-a2e9-42d8ece793e1", "indicator--de7b92fc-e9cb-4e77-84b3-be241d28fca1", "indicator--cec1f9da-981d-46d1-813e-f38c3f17ec51", "indicator--458788f9-93d2-42ee-9042-6d5b97032a8e", "indicator--dac323da-464f-4d61-a51c-794e38e79045", "indicator--910d21cd-f441-4e2f-9a24-94585733a24e", "indicator--eeb257a1-2c20-4916-9ac5-33e0d8dc0fad", "indicator--823cf4ea-0cea-46f2-850d-3f416b26caf1", "indicator--4fee89d5-6bb0-4550-962b-5de10da27bc1", "indicator--142eb4a7-6a1a-4d67-9ded-6e7a95d5938f", "indicator--da81605b-3e61-463b-941b-e714ec4cad4e", "indicator--712c1852-6d46-492a-a950-dd2dfbb24b0c", "indicator--60a89491-3f95-4b6e-8dfc-35ae4f57093b", "indicator--f2579d47-0c77-433a-8ee6-8223448062ed", "indicator--2e2d2325-8a44-4ce5-856e-81e0fdafa1aa", "indicator--448fe2c3-0adb-4418-91ab-41c3d793c7e8", "indicator--85d5cb13-c85f-40ee-b756-e70377bff629", "indicator--c438cbc7-4c05-476a-b972-4792cd981af7", "indicator--66fe2664-8676-4fa0-ac51-68bc5085d56f", "indicator--9f1ca45f-249c-4b6b-b96f-bee029eac834", "indicator--db9bd22c-945a-49c5-bed6-5d62ed8519d2", "indicator--3cbb5fe1-7cb3-4ae0-a030-32a69328459e", "indicator--0c9fb632-baea-43bf-b7cd-dc749e86f1b0", "indicator--363cf273-be51-4424-9aa5-3b21b80c8ac1", "indicator--30d1a570-8b1f-49f2-835d-e0e1651f77b9", "indicator--0a3ffb20-6129-448a-8e1e-3fba63c727ee", "indicator--4141fc19-88f6-4dd0-bec3-11b520ff9a7c", "indicator--61496359-1546-47b3-b8e3-bde409e90ae5", "indicator--33ad48bd-bdbb-4e73-b579-d927ce2e2c13", "indicator--c9e054e6-b2e2-469a-96a0-72bbb4983729", "indicator--b6bcf8ff-46f2-4666-b825-25d2eecec43c", "indicator--1b5a0223-27e8-4b0d-9985-e92676a4bb20", "indicator--94dbd8c6-be5b-41c3-92be-42e5aac049ce", "indicator--637b4dc5-fc39-4660-84f1-845381763b5b", "indicator--50132546-3e40-4f6e-a718-a5fa20b265e6", "indicator--868247c2-4169-4074-a334-631aa7060811", "indicator--ab90a0fe-d0f8-42b2-88e4-1cc61ad59575", "indicator--28fc5048-89eb-4497-867c-15a01a87b986", "indicator--70a81708-0e18-4f26-b67b-0d1521a32cb4", "indicator--159085cf-8a72-4722-8fde-f5d8aaa01455", "indicator--01933ca5-7b55-4550-b1ed-141b2a161594", "indicator--34359a50-f92b-4b82-a1f4-28022b39ae5e", "indicator--d469c613-ca87-4414-86a3-ece173e67e66", "indicator--fcbd083f-623e-4c26-961e-0518f9914ce1", "indicator--79d1ab12-c8d8-4c18-9d7f-d15c54bfeb97", "indicator--73b48479-6abd-4e82-b462-a3e4c74fc7f3", "indicator--c0b0ca2e-c0e3-4bac-97d4-8d0ef507007a", "indicator--3dec0a40-471d-4d88-965e-000f587b6e65", "indicator--41240d9c-a69b-4bb3-9c1b-c4865057fbe7", "indicator--1d267eb3-a736-4bfe-b748-43e4b478c45e", "indicator--a099bcb0-dd6e-4eea-b53f-298f9c00409a", "indicator--a1155995-6fac-4245-9ffc-431e62a444ba", "indicator--5f7160a6-0862-47b8-8611-76830d2c0c28", "indicator--5c052ae2-7552-42a5-823c-1497454fe6e1", "indicator--9d05baea-7981-4880-975f-3792695646aa", "indicator--f5e417f0-0870-48ec-a479-ce16f3a0d9c7", "indicator--b12bb432-d623-43b5-8e89-fcbaeeb1de79", "indicator--da61f9be-57a9-4343-939d-417f59cfae5c", "indicator--c972405a-d092-4c30-a725-b08581d07aef", "indicator--c61954d3-abb7-4ef8-b4e8-20f64138cf38", "indicator--4de5a511-bc30-49ed-941a-88523db29332", "indicator--e3a6df71-e94e-4c31-a8f6-9a63a2b73b4a", "indicator--0f6b74ee-3bdf-4a03-ac62-d013b8af69f4", "indicator--fe476bdf-ff8b-4e38-be5c-2d7c0ce7a447", "indicator--554ecc2f-2c9e-42b9-9a2f-731cb7cf4059", "indicator--ee156f66-7221-4479-959f-2fbe7adfcf5e", "indicator--27b2aa04-1849-4b00-b0ab-618b4a2496b8", "indicator--8bc73f65-b8f7-476e-bf68-802fb31df222", "indicator--c0af8003-82d5-4b5b-8863-dcf339488966", "indicator--9f6ea83e-48d9-49ca-bfc4-e5730507560a", "indicator--c340d327-2ab1-4473-b110-e72501a24dce", "indicator--1d9a455d-38a7-4589-9957-ca69253ece56", "indicator--f094d2a3-108f-4c1f-a143-68bde112ab56", "indicator--b3e33672-9d9f-478f-acaa-fb551780285b", "indicator--3de4605d-e3f6-4a34-8e43-55b7210ef401", "indicator--6d7af4ff-d39b-4ed4-bbc8-370b8b782a6f", "indicator--9dcf76c6-e556-4526-86d1-3f4b877d2808", "indicator--3c3c79cb-09a0-4269-a190-ec95638139c7", "indicator--f7afacb6-b2d0-4fbe-8dd1-4d858f0490ab", "indicator--55070022-b83a-4609-80ab-b97d55f31bd8", "indicator--b9893cbb-21f4-46e4-b8bf-6be80034f396", "indicator--4fe8e296-00b8-4fde-920a-326bfb6db29f", "indicator--918358bd-6248-47c0-904c-96eeb8ecddf8", "indicator--b0f42d42-5987-458e-87b6-7554e1ef9d69", "indicator--f7d0f1a5-53e9-41cc-803d-d8c7f6b60c92", "indicator--87a3b038-9c88-4736-8374-50f0aba47a49", "indicator--d61219e8-2949-402e-9d8d-5333e45dbd76", "indicator--a9961231-2a54-49a8-8589-4c58c89fdf08", "indicator--ebb8ea65-2ec9-4ebe-83ce-3620e06fa75a", "indicator--196a020e-37b0-405f-893b-77a7778122d8", "indicator--b2c14d7e-ce4f-4d42-bd23-1559bc6d2388", "indicator--a1f2efd1-1945-42df-a117-31def8001a86", "indicator--40ff1143-3d03-44bd-a916-574bf66846f3", "indicator--f3b63ad1-f1f6-45b0-a59b-bfcd3dcfc131", "indicator--5c8b6aac-546f-4830-936c-dd4878e15d80", "indicator--6c9b8bcd-d8a1-4972-95c2-6e227a05672e", "indicator--6f196f77-8f6a-4aac-89e1-509dd7a5e412", "indicator--e2cd2c52-cbf6-47e6-a222-1b8ca390571c", "indicator--ce64de4a-357d-400f-a569-c69f555e7414", "indicator--6bf0f277-662d-417b-8ea7-f1296018f783", "indicator--b4ad9ab3-9eec-4f96-9360-70b521d5bf10", "indicator--9a01616c-aac6-432b-b95d-0799d04821e6", "indicator--65eed406-e9c6-4fea-83d0-d3032a702de5", "indicator--b9cde24a-172e-4076-8247-c49ddb98b9bf", "indicator--c62adc30-13d6-4e20-bbc3-3cf6aea341ac", "indicator--b671bb09-d342-4397-a7e7-4ecccaacb650", "indicator--81d7b485-b145-41e8-855e-f5733cadb722", "indicator--1d1c79e4-8de4-4cf1-ad12-33f0ed67e4c1", "indicator--04f11695-8734-4f0c-9ea5-06275567e32b", "indicator--3781427e-2520-44c2-9fd3-063ac932b4ae", "indicator--e11dac01-40d0-4228-9de7-e0957dd32870", "indicator--35998386-8976-438b-8ee7-68d6d06f609d", "indicator--1a2ab69a-340e-4f46-a1cf-127e0563651e", "indicator--f2984090-dafd-4772-8402-b351bd3fdf2b", "indicator--f509672c-f904-49e2-9aaf-55d0cb8f63e7", "indicator--d8a844e6-65ad-4ed1-8a22-068b8f0a3e47", "indicator--96e11c3d-7a79-4f59-9eca-73e73f2aef1c", "indicator--ae3688fd-722d-4ee0-9366-ae9228acbea4", "indicator--48705b13-795e-459c-b658-72ba6fe63ddf", "indicator--097fb962-7a31-4fd1-a4ee-6421cf1aed14", "indicator--ec055ea1-1284-4fbd-b3b9-a589d0fab138", "indicator--f11db84c-8449-44e6-8d16-867ac242f277", "indicator--e304374e-82ca-421b-af5a-22d8d4240d0c", "indicator--4e7f3cbb-02b6-43d7-be23-f8164dbc1e9b", "indicator--2e997ffe-8668-453b-bcd2-8120bcd9221e", "indicator--a91f3bcc-625b-4426-9900-e64a230b00e9", "indicator--9a71bae5-e0b7-4bbb-9966-6f7bfb5df76f", "indicator--c9c6971b-c518-4569-8102-c97875d07167", "indicator--80b7d5e5-9703-4432-b649-72d61fcd0f9a", "indicator--9a1d3875-a84c-45a1-a536-191c84c7e50b", "indicator--a4c4eac1-fc7f-462b-9e9b-0551e89d0f06", "indicator--44ca37fb-8856-4830-b3c3-53593ae7fdf2", "indicator--ba044583-991e-453e-8fb4-324414637779", "indicator--331d125e-0b95-4987-82f1-68021389c42f", "indicator--5a26537e-3254-4feb-a69a-79f78ab52660", "indicator--3202b775-d0bc-4328-a8a6-4a914cda7955", "indicator--ee6c669b-9ff1-4fdc-91a7-d842e2e98ebf", "indicator--ec229844-8587-4a59-a607-f722549835e4", "indicator--70817fb4-e3ce-4e1d-af55-d5f1224c003e", "indicator--ceed9b14-9eea-4cbd-b6db-f4ffbe51da7f", "indicator--82940a9e-75a4-41a5-9aea-c02b236f71ea", "indicator--43673cc2-2960-4d24-a922-2b19e0353d5f", "indicator--b42b5a08-dddf-43b2-8912-d7630d4a97d9", "indicator--3e4de9ed-f375-40be-8c63-c659f1294007", "indicator--8cbd51de-439c-4e3f-8e27-c4cd45f0f272", "indicator--8813a875-306f-4a84-9f97-79ce60cacdbe", "indicator--3b12257c-4fd1-4aff-aaf3-a38ba03f43be", "indicator--81e4b8fc-d4b8-46ca-814f-4e5ab4602a0c", "indicator--6f85ea72-1a07-410d-b68c-b7dbd0c69eb7", "indicator--7df5a07f-c9ed-43bb-bd41-3de7a7668d88", "indicator--e3e9ffe7-9314-4367-adb1-28427dcc66df", "indicator--5cb3be58-5d16-426c-b502-8b1966196f23", "indicator--9a59bdcc-7f9f-4ec5-867a-9d3d1d28589d", "indicator--3889a2e0-7154-4afc-b911-56a3f86e43c0", "indicator--aaf1dcc1-ea70-476b-806a-835732460979", "indicator--67162563-454b-43bc-97a9-273ea56b3bb0", "indicator--3c872969-fe73-45f0-b0e9-db5fddeedf90", "indicator--90445957-bc51-4c30-8613-3f2cc26ab021", "indicator--05bd70d9-d416-45c1-affd-93f61159c35e", "indicator--66349690-d690-4f79-a1e8-ca79c6434987", "indicator--78f29a45-328c-42a8-bb6f-0ee33c7664c9", "indicator--fb2ef2ca-5c16-4841-86ba-71d734eb939b", "indicator--9b733b3a-90c5-4d7f-9d8c-a96947cacd5d", "indicator--1ff06dd8-772a-44ad-98f8-a08cd0814c2f", "indicator--a83d72e3-fcd1-4fa2-bc45-0708b0812d7e", "indicator--cff2e151-f608-405f-a645-ec77f5462781", "indicator--cb60125e-f9fb-4463-9f07-e5d50337d403", "indicator--654734bc-54b6-4b6c-bef2-ff7d63db35e7", "indicator--35eae65c-f8df-4486-b15c-53045116ec4a", "indicator--28859c1e-0406-45ed-a7c7-15bfce7c8d1c", "indicator--5569b694-1498-4e5c-b2a5-0788d987d396", "indicator--e23012e9-48b9-489a-8032-684ef9e5cff7", "indicator--43dd585f-0d07-4f62-9bdf-fc8331ee6dc5", "indicator--ed639b2b-a7a2-40a7-ad4d-beceb3669000", "indicator--92bc3c12-f021-4765-934f-5947993f03ef", "indicator--70bf6aa5-aeca-46fa-ae0b-29047ed4dea9", "indicator--5a110f86-66a1-4356-9add-147da0a16cf1", "indicator--3517b0f1-41a1-41c0-bdd5-7df6504623a7", "indicator--ca9dcf03-5025-4a71-9001-da1a4eb86937", "indicator--12a6cede-b857-473a-9ac3-6c7542802621", "indicator--855f43f6-070f-4c4b-9634-7d97010f8c55", "indicator--2bed2625-d1e5-4b31-9296-e1b7207b9d42", "indicator--97d130da-6b70-4e79-bbb4-7ba33eadd2d4", "indicator--35fbdc95-3de2-42d5-b2ee-e89a5fd236d2", "indicator--955f6e70-0729-4f68-8eb1-493cccd55f1d", "indicator--60d25abb-eaa8-4b5e-9ac3-e7dd155ad6c3", "indicator--45bba1ba-5a88-4e25-bbc9-4442d9f97cfa", "indicator--99ef940c-36d0-4699-ad06-fcc4e4c258fc", "indicator--bc2e82b7-e918-4589-bfe9-f0a206686f67", "indicator--ef75d73e-8558-4aeb-ada6-914fb1115347", "indicator--b56941fb-2d94-466a-a30a-0485e9ccc78f", "indicator--6ad7dff0-ba42-494d-8023-3dc1abc81084", "indicator--1e8dbb1e-d0aa-4fab-8208-1c13044d8680", "indicator--eda589c5-e29f-4b24-a690-7c38399734b9", "indicator--df689c89-8778-4034-b2a7-dbdf689ab75f", "indicator--a277e187-8780-4f78-98f4-2c148a8c6ca1", "indicator--1153ef5e-1b73-469d-b6de-4ff92f45e808", "indicator--0bbbaea5-0146-4b0a-9619-3421ca1d9590", "indicator--46d9a067-3e2a-4944-b5ae-527244a11ad5", "indicator--a377e3a6-d0e1-4a36-a08a-fef41234b19f", "indicator--783c5169-3bb9-4f11-aa7c-9ad6c5946a7f", "indicator--d9a3e1d0-097f-4bd3-b940-3bdc98f78d5f", "indicator--3d02d843-7f44-4a80-9dcc-c1edab53e01e", "indicator--cca93158-3db8-4598-8cab-1d59d1ced16b", "indicator--9b0d4023-dc2e-431e-ac4a-db1942dc9980", "indicator--91bf19b2-e8df-4a3e-b959-853a8f2f569d", "indicator--c68742e4-3532-4666-9035-4de420a1360e", "indicator--040b01d9-c8b9-4788-8298-26acca0a0f70", "indicator--a76cfead-9593-422d-a822-3fafb3d2e74c", "indicator--562cc853-92f7-4db7-a897-d3218de1c463", "indicator--6f9ad878-f147-40c9-8056-9df9dadae917", "indicator--0c7c74ef-171f-4f7f-b78a-0e405a5b076a", "indicator--6b0ffaa7-4756-49c9-8ba0-704666f23deb", "indicator--4b606be6-0a50-467a-a66a-350c9dccb7ea", "indicator--d4fff5c3-30b5-46f5-ada2-3026cdb008b2", "indicator--fcdc6e93-975c-4148-9656-f138147a3afe", "indicator--bcb8867f-efb3-4d58-a6fc-13765d09f9d9", "indicator--83f22c17-c2a3-446c-978f-1eab0eb2843a", "indicator--d36a1eea-a109-460b-aaf4-c452f910da28", "indicator--70ecb478-1e0d-4877-87ff-b5328430c942", "indicator--a982eefb-8389-4aeb-a054-5c6a38ce9b73", "indicator--b108b3ea-c395-42bb-b768-17c6e26a1d73", "indicator--e0d51a51-c3a7-4a06-935b-6fe691837e4d", "indicator--a20098f3-5b12-407e-8ae8-3fd8f3dda153", "indicator--f1472566-7f23-4a54-ab45-a6877a75a792", "indicator--1c53538e-a6f9-4ae7-af1f-e48f5335505f", "indicator--17e3f6bc-9f11-40b8-adf2-a0752442f60a", "indicator--446d5c41-d833-44ad-b7c9-3896bde6f28d", "indicator--06471dd4-47b3-4cbc-b143-9ad4ae468325", "indicator--d0bcd499-dfc1-4755-9ee1-fadf4114cd32", "indicator--5a03ad5e-6238-4acc-8fab-0b40dbd9f561", "indicator--6c4c5e7e-d79d-43b8-9d56-15084578801a", "indicator--abf92f69-c8ba-4cf6-aa1a-c79e91d5afb4", "indicator--dcc919a3-9508-47d6-9ca8-a6200eeca1a8", "indicator--398ae6d5-1460-4765-815e-d4d3110dfe47", "indicator--b8ded5e0-acdf-4f3c-aadd-9db785206f06", "indicator--f191df1f-7b6b-49a4-81ef-cc4870450959", "indicator--0ba09058-befc-4c27-8bf5-4280e8a04eff", "indicator--3758db65-06a3-4521-b081-ec119daa6ff3", "indicator--10386527-d07c-4126-8435-e303a2c234be", "indicator--093b4739-9d09-499e-bec4-a38bb1646a21", "indicator--795cba58-09c3-4fff-b385-0780c0da1fa5", "indicator--c372d268-dccf-4aec-bd94-56a0d2471cf4", "indicator--dba51602-04ae-47a4-af7f-c9fc33540132", "indicator--b890a76b-bf2f-46ee-8b5d-1aa8adf6ce90", "indicator--00fb9226-bf1f-4343-9519-03af5d421925", "indicator--1efd0b32-0b82-4ac8-8f7e-05e4e95101ee", "indicator--2bfca665-200d-40f6-a972-aa618aa8e79b", "indicator--3cba084e-4566-4d29-b183-cf9b8aac1ad2", "indicator--4f1f4445-c3e0-4459-a422-7f207163d615", "indicator--4d86399e-55e0-44d7-8616-3e255e95729f", "indicator--4eccd0a1-90d4-4b15-bcca-53eb2f15fb43", "indicator--1b2d314f-b791-4091-ad5f-614deed75b4e", "indicator--3af4364a-0450-4c7e-aa01-e4e129ae91b2", "indicator--c48e5a4f-460c-4634-b478-078ad6ddfd66", "indicator--9561cbf1-18bf-4166-8cd5-6a9650233533", "indicator--1be53f64-d951-4e92-9dd6-049db0b591ff", "indicator--3df8ff38-d11f-449e-95af-4115974924be", "indicator--f0115ae2-ff59-437d-91d0-cbf76deef18e", "indicator--8c52afd0-1faa-409e-a649-ddefe22f8b9c", "indicator--c8535d24-51a9-4d87-a68c-7cca381bfa9c", "indicator--1c35ddad-5ef5-4d79-bcdf-62445d1475f4", "indicator--fb50eb7d-5915-438b-9024-d90f44c873a2", "indicator--405c81c1-d685-4767-9b89-a80d7d6da445", "indicator--17e83d27-b48c-4b26-81ff-d2a94a1736a3", "indicator--708c04fd-ea3f-4d64-aea1-edbe2c8082f2", "indicator--28aa9e85-2509-4380-9c4d-dadcd12a42d8", "indicator--a7baecc7-7f0a-4127-89b5-409739a95b66", "indicator--4946a88e-0300-45fb-9d4c-3f348f185445", "indicator--7207b677-fc11-4ed7-a33f-56d31fa8c712", "indicator--9b7a264d-03df-4b12-a4ed-398d408bf7eb", "indicator--0c530621-73ee-4ac3-a56c-f92da7d952c0", "indicator--38adb368-724a-4023-9572-28301f292a30", "indicator--58985814-2650-43eb-83d1-f90d22a49613", "indicator--320f5e8f-d719-4e8b-914f-b3b7b1199f7a", "indicator--1695c226-7088-44ae-8480-89587cd34f95", "indicator--784b903e-35e7-4dfc-9bd2-afa5c67bccc2", "indicator--74c9af45-9f28-46ce-a1f2-800680fd3dcc", "indicator--9b986fe0-aa91-4e12-b5c0-9bf459ca2513", "indicator--60a276b6-6f93-4800-b7cc-f9706383944c", "indicator--25dff743-a2a2-406e-82d0-85b56db6b6b1", "indicator--43243222-72ca-4692-b062-7b0c33103754", "indicator--7abb4044-8a48-4d73-9308-9d5c6a4935e2", "indicator--69473849-3ffc-4e63-b69b-a396234f1bf6", "indicator--2b498cfe-b4f5-4f97-a24d-6dabcd24ce0e", "indicator--0a2de819-da8c-450b-bc59-3c61831adfd5", "indicator--71a2eaf0-af48-4570-87db-1bdd96474535", "indicator--b57bf737-49bd-4e6b-9687-1b53e1c96b44", "indicator--85561686-8b49-45ee-b68c-21bb71b57353", "indicator--b0e8e620-093c-46e5-9d0a-b28f63e35ad4", "indicator--a30dc8ac-eb43-4b50-9a62-bcae0b7e4d64", "indicator--fbd154cf-4b03-4feb-b048-e5f4688d9094", "indicator--da25fb7d-4a21-4b0d-8bf6-52e5303181c7", "indicator--fed6d64d-2360-45ec-bb25-fe0e4453e2e6", "indicator--9dedeb77-91bd-498a-bc5a-e4382e7b0bca", "indicator--ed4c8fdd-e897-4c49-b742-9e51f8db1877", "indicator--dfdd8fa5-0549-4914-b94f-530c34dce66d", "indicator--dd81ed1b-feb6-403c-8806-5b020ea33713", "indicator--b0f8fcf8-7e7f-48b2-8274-14ffc67e0973", "indicator--a4fe2a1d-637c-48e4-a3d7-493a218e3441", "indicator--c00861a1-367a-455a-bab6-8033583400d5", "indicator--432fe988-a93e-4d20-b7bd-e76833257911", "indicator--70887304-995a-4907-806f-b3391de2a2a4", "indicator--f6832a80-dbbe-43bd-917b-eda3aa092cdd", "indicator--9f3f046f-e325-49d0-8e3c-854a787644d1", "indicator--c08cd64c-a825-41cd-ae95-00a4194f953d", "indicator--79b34f9b-d6f6-4a4f-8e06-88c7f3a31e1e", "indicator--5d0b35e7-a515-4e58-b110-397346bb7cef", "indicator--d6d0feb3-70e9-4350-a621-d29526942940", "indicator--4ccb9c9d-dfa6-443f-8a2b-f8349ab99381", "indicator--e827701c-878d-42bc-aec8-03c1751a6a68", "indicator--aa9de8e3-f620-4355-a588-4772e9d12ca1", "indicator--5ab9e9ef-7b88-4136-a28b-86a615f06dc4", "indicator--6614d40a-4d66-43c3-b6de-fdce0d5a7253", "indicator--ea825ae9-1160-4c30-9b77-9a10bfc1f33c", "indicator--d1c58e7c-e95c-4db2-b376-fcf7928bdda4", "indicator--2763d563-e7d9-4f98-a3c4-944f3e4c5295", "indicator--b0b4a8d1-6af1-4427-8b44-f968a0430e73", "indicator--0b21d001-fc1f-42b1-a93d-5c73630b3ff8", "indicator--ad0cb95b-b568-4e6b-a9ab-bdc3028867c7", "indicator--8a8bcee6-3c27-4c29-8018-988dbf95c577", "indicator--a3e16446-0f0d-4781-a87f-4713a45af9c4", "indicator--4cfbbe60-9af9-4b3e-a479-e9749d169c38", "indicator--937bdc30-debe-42e1-8075-8eec1cf9bf6e", "indicator--09b20fec-4542-4bd4-acfc-1a16a6ec495a", "indicator--890cbd98-74be-4e1c-b256-a28c062fa86d", "indicator--5df1ad7c-3231-4458-baaa-7efc441cb44c", "indicator--0b52ce89-f133-434a-8d07-346fb73abdec", "indicator--fe9d6c34-ae51-4dcd-9290-f0975b40f8aa", "indicator--fe583d75-1073-4187-a608-980d788fbc0d", "indicator--47be18b9-28f2-417a-8c59-6f2138286009", "indicator--637d52ae-c11f-4f25-bbee-68f1e9703e0c", "indicator--00b8dc2b-ba5b-4634-a142-74a515552601", "indicator--acc774b7-2ff3-464d-bfeb-f30870a2a5d6", "indicator--952d8a98-71c7-4f3d-b36d-bd9a1d724fa5", "indicator--0d543486-fb1f-4cf7-8d62-77ca0e5f74a1", "indicator--69702d3d-f81f-461e-95a3-bfffc9d3396d", "indicator--53b69936-54f6-477b-a8dc-04182acf09c7", "indicator--6c65a79f-8f7d-480c-8aea-d080de4df073", "indicator--844e5f59-db84-4784-b26f-e132094d6095", "indicator--07a044b2-8d7a-473c-9def-66ea2ba62fa5", "indicator--3e36028d-fcd2-411a-9c4f-3d2ca8d38ea1", "indicator--ddd07d2d-c69d-47e8-9486-84e0e680634a", "indicator--a30b134c-fb30-4074-abc8-f14f886387cd", "indicator--f70a5e20-7fba-40f5-942f-fc5d728a7add", "indicator--1bf41b4a-43e8-4a84-a874-3db90a2c2b78", "indicator--08bd6a97-bbb9-4270-a6bb-48a7db6c110d", "indicator--5caaf122-6d61-490e-b2e5-5c2a76212217", "indicator--c2a80104-facf-4350-8f00-6e6978aaefad", "indicator--d04e8013-6a81-4f22-a389-2d683d90d519", "indicator--2acbd8bc-1e8f-4b28-83fa-797eed05fa2b", "indicator--59bab628-f0ed-4d51-9408-bb7242b0d03f", "indicator--24a4bd84-a76f-49c0-84c3-f4937cada540", "indicator--a0477ba4-4b4b-45b4-9ad1-399104855ab9", "indicator--70446fee-cc89-48b8-b299-78272aeef42b", "indicator--3cce11cc-d05f-4ed5-be8c-67bf21f5e3cb", "indicator--5695b87c-b616-440d-9594-d587347db025", "indicator--3cc5b06e-0b47-43fd-8047-fbdd4b19a39e", "indicator--29161617-0d20-431c-aea5-045f2810ff45", "indicator--21f2b237-5e16-469d-b5a9-12e97faa7952", "indicator--16741a34-2ad9-4f0c-b89d-927c5f4b33b0", "indicator--b73ef452-7c67-425f-a755-1a8fd1f74dd8", "indicator--e3b5646c-28fd-4c75-b7f6-87565dec3e0d", "indicator--72d1a464-51f6-4b49-9b39-0a8844a7d508", "indicator--9294d5c3-ebec-4540-9d7e-5309afee6c00", "indicator--a879e5f6-3643-477b-bf6a-64ebe3716f78", "indicator--8b4eb8cf-b353-4aaa-bcb6-dd65715f6130", "indicator--66a4e730-f5d8-4933-8b4e-ac3623cfdde9", "indicator--a14a999e-c7ce-4eac-b5d3-ccb6b0fee7a7", "indicator--5a67e1de-b014-4e5c-81f4-43fe5fbe8eb9", "indicator--2892b66d-08ac-4461-b475-38b1a666ed99", "indicator--a4748d82-64f3-44da-b0c7-ff0f28eccb86", "indicator--aeae6cec-7e01-4e70-8924-c368a79e961d", "indicator--77e59026-676d-4acd-91d5-00fc1ff83ef7", "indicator--a145380f-af13-45b3-bb69-46f4ecc905b8", "indicator--43cfeb3f-25f0-4f5c-8a63-b17c33c8d988", "indicator--7e4dcba3-9a7e-4ad2-8655-f9f29deaeeee", "indicator--3f23db75-70bd-4031-b191-e2e00d2e1e84", "indicator--ec630f7a-75be-4d00-a2fe-c2501ca2027a", "indicator--7007765f-15b4-4d67-9967-39ac963a589c", "indicator--b17a816c-6a94-47a8-a398-b59b16123c82", "indicator--f85de8f0-6cb0-4c5f-bf95-7a4e86f2ce0f", "indicator--82430e57-5e53-4f79-8d52-ca00cc8b8303", "indicator--d71c8071-2f97-4db2-a5d3-50324d602b0d", "indicator--b211834b-7750-404c-8a1f-f8fe3019505f", "indicator--14aeb44a-880d-40d9-8a0b-77e0b39de79a", "indicator--fd07384a-b77e-41c7-9b6d-2115d399bafc", "indicator--574f25c5-4a4d-4e5e-8db1-18d2e5313ecd", "indicator--161dcacd-f7d7-457d-ae9c-dd7cb69eb9ab", "indicator--6150db72-65bb-46ea-a950-f74eb350aaf4", "indicator--6f0af7dd-adf0-40cf-a230-6989a82b931a", "indicator--27c873cc-1e0a-4552-bf5e-b14c69e2d23f", "indicator--a0cc0e9d-f312-4fac-975a-517975d3ae7b", "indicator--7456b349-f7b9-46dc-a019-ac9538685240", "indicator--5c95b6d0-b5c9-42af-ba1a-a01395a8bc33", "indicator--9ec8b8d5-8f58-4b28-ad34-80f1c65b5a8c", "indicator--ae96bf67-2561-4f99-90d1-ddbdd8533ea5", "indicator--91cabdcf-2321-4fc4-a294-0e8ba7c7e1fb", "indicator--4df0fe07-a861-48c4-b823-93352b55b94e", "indicator--c4f2e170-113b-4e3f-98a8-8fd88f821139", "indicator--94e29f08-e8c5-4bf5-a41a-b402a2e1c79a", "indicator--46c3a25f-e6c1-486a-b154-532dd4ce5c4e", "indicator--3da51919-e5dd-4a59-ac5d-3557d9bf106c", "indicator--efe77260-4d8c-4577-bc20-0057fa6fe8ae", "indicator--2827a1f6-4d00-4a55-b802-e35adc554d5f", "indicator--92189cbe-2b5f-4c5e-a61c-23983aca3b93", "indicator--df8419ba-ff75-44a8-950b-12ffc80362ec", "indicator--364655d4-5122-4255-ab6f-7f76ca889b67", "indicator--1fdd49e5-5c25-4945-a835-e90d9f0ccef9", "indicator--e69bb9ff-05eb-4df7-b068-bcf829d82d1a", "indicator--1a22add0-2aea-4585-be36-01416d08b61f", "indicator--00996980-559f-43ea-b5ee-dc41ba6586d4", "indicator--21a5fe8c-48b7-4d67-b204-9e4f49d34f27", "indicator--9617c32a-4b11-4bee-b478-057bcab7aa92", "indicator--8bb209b3-34ed-445c-ab2b-44e2a8ac2d63", "indicator--6b925c03-d747-4d05-bdef-294479f82186", "indicator--fded740d-73da-4748-9349-8b50028f39fd", "indicator--d569ec29-0005-4a02-b661-c190f02d0d36", "indicator--4e3dd8a7-14d2-442f-b731-ea2798004bd2", "indicator--661f5583-a4d0-40eb-876e-1556e3875f9e", "indicator--b7092613-68f6-4369-98d5-f2b3ce689b1e", "indicator--325a788d-d2da-4381-aff3-356337c26e31", "indicator--7550fce4-752c-441b-967b-4bd6cfb8d334", "indicator--71d548be-9b13-4af3-80f7-316ffa143414", "indicator--c9c74e71-9f1a-4627-886f-8f815b4120bb", "indicator--c250be33-48d1-443a-8c43-f75f753a1627", "indicator--f020a65f-1539-497e-bf1b-9fb9a84f5dd8", "indicator--edbbeed4-4f6b-425e-9c8d-f129eae4aaa6", "indicator--61a5ac65-e9f9-4ee1-917c-647b67b0bcb0", "indicator--69add143-8d7a-4ffc-b132-5340c341419e", "indicator--6cd108eb-f332-40f3-b728-7432e85e980d", "indicator--ca222403-465e-4d21-814c-189150519b04", "indicator--6e454be2-f83b-4a17-bc46-ee4cb03c781f", "indicator--8802f7f0-739c-4ef4-8dec-89cbadce2d35", "indicator--ac0cfb64-cbd3-4f15-9aac-63205cb83d0d", "indicator--83263ae3-af9e-41f9-b26d-346f72356097", "indicator--69681673-e210-42b4-a2c1-f50e2c00dc87", "indicator--4af78405-ddac-40b7-aee5-ce02358d92dc", "indicator--3b0bed9f-5998-4195-b178-ce2ded03b811", "indicator--abe64917-7832-4775-9662-a2da91a9e536", "indicator--59a69feb-f998-48b8-9589-ff8aef6e3a3d", "indicator--04559bc9-835e-4ad0-b3e1-8de8d107728a", "indicator--1a15dbf7-3bfe-4f4f-8015-5a4d42bbad2c", "indicator--37cec58b-19cb-43e9-8c43-4ab6f22cd427", "indicator--9eac2130-3cc8-4923-8863-cdabfb649b5b", "indicator--e70b2b0c-8b20-4f2d-9020-db42c51ef682", "indicator--de12b1de-cd34-42d7-a890-3ac0674d332a", "indicator--216d063d-ca38-4c80-a874-48208a5195a6", "indicator--1df1dfc7-811a-411c-8fd0-cb69f86d6fae", "indicator--510e0cb6-6fb0-4588-af40-53157176e3e6", "indicator--0a6f52e2-f153-490e-8c5d-52593c408cdf", "indicator--6588705d-f109-498f-8da0-be5bf6344b4b", "indicator--69bc5b7c-761b-4653-8cbc-681f98fccfad", "indicator--65e6acf9-569f-4fd5-84ae-a26b9021d9d6", "indicator--b0518771-ca9e-43ea-a23d-cc44fde25d8a", "indicator--35ea4a37-8b2d-47f3-852a-4cf86c407b17", "indicator--649b272d-31ad-4c17-8f6a-6c89b32e946d", "indicator--fc5bfd4b-f270-4da4-8ab4-e2054fd40182", "indicator--73272f86-e750-4bee-8758-868da692466c", "indicator--71131a7d-99fe-41f6-a1d2-e41b4246619d", "indicator--a796d624-a3a8-465b-99f8-d14a50207bc3", "indicator--e01bffab-48db-4678-bce3-613b4905ae53", "indicator--0b77ca4b-91ff-4411-af9d-b2c505a67928", "indicator--1586646e-d4e7-40df-8c7c-6db13329661c", "indicator--a744b5bb-cb47-48f5-92a2-1eb3874925ef", "indicator--41fb5eb9-73e8-4c41-92f9-1ede40fdf7be", "indicator--e4fa0953-c6e1-4dd4-b7d6-96b0cb0b1cb6", "indicator--4884d240-8207-4f52-bb52-085ef92ec29d", "indicator--c2e0f541-dbf0-4a95-ae67-948c0622272d", "indicator--5c118c6a-23c9-410b-a405-dd6a9b6714d5", "indicator--f5497ffe-78f8-483d-ad33-6d7baef9e0b8", "indicator--5e26721a-4d6d-44c5-9bf9-1b06e94d074f", "indicator--c8459950-e9e0-4905-9b7e-17cba5349e09", "indicator--9b1f5756-14f6-4962-b570-ed313c40e67d", "indicator--cbb7e0e6-5706-49a8-9966-519f0ec265ab", "indicator--949f096f-a313-4193-aefc-d7ff28bfe21c", "indicator--2e9e128d-47fe-44d7-b92a-ef02f08b6144", "indicator--0a7c4a00-a904-4c99-b7b1-2ca062a818fc", "indicator--70d53f43-09ed-4090-92f6-95a59a98aed5", "indicator--51d22fda-e585-4fac-93ef-c98d3da1b41d", "indicator--8c1e1601-18f7-4c27-8d63-7b7916b6dbba", "indicator--771a8c33-e92d-4944-9ac6-bc7d46f79feb", "indicator--dec908e9-8f62-411f-a38b-9a8e23658089", "indicator--bb9afa7f-28ba-4697-aedc-d960e8304f79", "indicator--17192722-ab0b-465a-8120-0b6d5712b928", "indicator--43197b4f-a286-46b3-8a1d-2da896e46085", "indicator--2991005e-b4da-4730-a90a-8ac49589454d", "indicator--847f7f8e-ce5f-40a1-9be1-7363f0fcb6da", "indicator--629f9265-e555-4c7d-8b32-84dd82d1c460", "indicator--a6cc53f6-7ae2-43c2-9cd7-0e78f92040ad", "indicator--12a561d4-ea59-499a-a43a-5ec47d94eb69", "indicator--f07144b0-a395-433d-927f-dc000f81eb41", "indicator--0967ea9d-99ee-4d40-ac7a-af163ba5fa69", "indicator--c64584b6-cfbc-4e58-a7e5-406558654b54", "indicator--fc3cef21-6b06-4e9c-ab07-1c58a384a3d0", "indicator--577b6a89-5d4a-4282-84b3-047e022de89a", "indicator--b4eab3bf-4bb7-4e69-ac9b-c91febb364b7", "indicator--ea61bcf8-78c0-4435-887a-eb9ce4599a70", "indicator--91b4a137-e3d0-471c-b664-1d8061e4cd97", "indicator--33649b5b-f43a-4c3e-aa90-1221fbb8a1f4", "indicator--fe4cb20e-88b6-43ff-b0b3-be2ef7e0d75f", "indicator--b1a314f5-bc4d-4824-887d-fabc28f536f5", "indicator--af0382e7-18fb-4f1d-958a-005340b0491e", "indicator--5548b193-c693-4f71-8e91-2fbb9c8de85a", "indicator--79fd922b-f7e5-436b-a1f8-ab766c3183ca", "indicator--faa75df1-c07f-497e-8fac-f89209480a13", "indicator--206e51c6-ff3c-4a48-ac54-30fb5e726cc7", "indicator--638999cf-8a5e-41b5-9135-470c305a722e", "indicator--2c888496-e55d-4c33-9ad2-699b13bf606f", "indicator--b5b9d031-90f9-4b94-9494-4f8f882358d3", "indicator--9e5d96bb-915f-43f6-b155-a2be5d0c934e", "indicator--89245778-efa9-4753-98f2-6f2f60fc1ae8", "indicator--f7638274-8667-4e88-933f-332ccc863c5a", "indicator--648c9fe7-4395-48a3-91d7-8218590eafa3", "indicator--007d607e-2b87-43b0-9527-3d9c2f0e7029", "indicator--c129c59f-5fee-4e2f-aa64-d929b502ecb9", "indicator--dfa9b89f-91d8-4c0f-8ae8-4942bcf782eb", "indicator--05ff23a5-5d92-4272-beac-de0b68490ed8", "indicator--0772c341-13ba-45df-8fbf-26d762f87c8a", "indicator--c952c8d4-74ee-45c8-b9ab-3c5cd4d3ef33", "indicator--88d01b5a-0dff-4a8f-be4c-5fe2d597708b", "indicator--c34e61cb-f4b1-4a61-b67d-6b6824e7d869", "indicator--471ef2b7-6c14-4fc8-a1d8-d09f19e967e6", "indicator--8fb7e954-c043-4e33-8fc4-9a461f7ff8aa", "indicator--d6f5e1dc-c79c-4aa2-aa16-85cfd93dff97", "indicator--c55f5893-9087-40b6-9e19-da6d3575de26", "indicator--e7fbc2f1-81a1-4d2a-85a6-c311d2c0e479", "indicator--3a1fb395-cb9a-484c-b7eb-1e28d6a32a19", "indicator--2a7e8228-b5b2-4622-9d06-55700a2b7da7", "indicator--e7c84649-5f41-41dd-9057-37ca6e9c3b05", "indicator--a3048b1d-38e3-4bf1-bd4c-03bbf78f60b3", "indicator--c08b8573-ba8d-4930-870c-3a9c407e827c", "indicator--b3fc68cc-4a8c-43d5-8d9a-d816944881ec", "indicator--da4ccbbc-46f4-4ffd-9bd6-b60dd20e58a4", "indicator--37251260-683c-4a26-9af2-18507f0043c5", "indicator--f90c0227-9ed0-47c3-920d-51a50b3c37cd", "indicator--e328ef8a-72fe-4173-8011-67c10ff884f8", "indicator--9e529c31-1054-4538-9066-5ca6ebb90c22", "indicator--d23d6e56-6af3-4336-aed2-228cb92b5e21", "indicator--1bc0035f-d514-4e1a-ae15-4e98915cf551", "indicator--204aa675-918c-4eee-a187-8f11196a3c34", "indicator--c620245f-d338-4032-8ce7-21123ef3e5a4", "indicator--989ee0fa-a907-47b7-b8de-c72ec8a3c745", "indicator--b02f93df-8f7c-4a87-b424-4b5e6e381ee5", "indicator--3f8f1380-57d0-4130-bdbd-4ebee4f98c9c", "indicator--0776f6e3-c713-419a-bfb0-d6273826c406", "indicator--b26523c1-cfed-40d2-ad1d-33e89349eea5", "indicator--197daf7f-8358-4995-8db7-fb86989e0688", "indicator--f84bccd0-14a9-4d2a-a8b1-e8820f6097f1", "indicator--dda5b0e5-a201-4f2b-8a45-689926ea8a0f", "indicator--bdf602d6-f093-45b5-8541-4f79805eb492", "indicator--90c41869-25db-4c30-8a5f-01efcaaa7467", "indicator--e3442d41-52ec-4b5d-9608-f72ec19ada5c", "indicator--6aa0719c-7ee7-47ae-9878-a08a49cdcce8", "indicator--be15d577-ce17-45e8-9ed1-88c1e155fce3", "indicator--6d6ac4ab-4dab-40e6-bacc-bca8782abca9", "indicator--196a610d-4fa9-49ce-bad0-523512575a91", "indicator--ea3e7616-72dd-4e6c-8c3b-93caacca06a8", "indicator--eb469937-0993-498d-aaa5-bd43eab159c3", "indicator--83fefc3c-b5c1-4287-8088-9d6925deefea", "indicator--18ad119c-1b96-45db-bf09-9d46247d39c4", "indicator--0ad2c096-c622-4bc4-8596-2f8c99a83e4f", "indicator--243f0d16-bac3-4d3a-9fc0-9e3506f11a75", "indicator--a94c2b23-7eb7-416e-9994-c5ad334cf8ef", "indicator--066b1acd-07ba-4af8-9e17-5f97920f339f", "indicator--0ab2a1df-a7e3-4ffc-9db6-8f77462315dc", "indicator--6a3a3017-ee18-4af2-9cbd-cf9c74fc0f54", "indicator--2bbadccd-245a-42ff-9083-767a9958763e", "indicator--60e40160-7567-4007-b6d3-9f3f5cd5677f", "indicator--fc265b27-e48f-42a1-bde3-c9816649109a", "indicator--f4651a20-7e59-4bba-ac7e-42f2e4e7e88f", "indicator--f99db74b-a249-438d-85a5-59b41696da8a", "indicator--1770587e-2cb1-44e3-a175-0cdd4aeb134e", "indicator--a0699ab7-cf55-4057-9c5f-2bdd922f7eaf", "indicator--89d8cda5-5d68-4873-8979-6b481437adf0", "indicator--cf170f27-db72-4829-b9d5-c5d03421338a", "indicator--0ef5acfb-325d-4cda-92b2-a7112c7ae31c", "indicator--97158036-2258-4435-aadf-a7a2fba12c63", "indicator--78ae2305-22a3-4128-a3cf-23bd8c3ba56e", "indicator--f2c1d33d-6d0a-4602-85a1-10a41a828efa", "indicator--9913a201-b7bf-4569-bad3-e2d75095d093", "indicator--93eb30b8-e91e-4b03-8a03-6f0775221c1c", "indicator--0b0aae7b-813f-4c24-8bac-41324686bda0", "relationship--d4f742f8-53a9-48f4-bc7a-2c8af79e9c6d", "relationship--205f2a04-af69-495c-99de-16cd4a68db72", "relationship--f1f26d22-3710-4165-984a-b11165da9b0b", "indicator--2d2a999b-095f-4152-a294-13f333a9921c", "indicator--bee0f5cf-c6b3-405c-97b4-4e57236a762c", "indicator--8f488a89-b12f-496e-820e-215ad98f1ec0", "indicator--028f1c28-c3cd-4a53-a9b5-36a032f9ac89", "relationship--f867d535-f2db-4a28-946c-39bb4c0462d3", "indicator--677b1a09-585c-4f41-a6fc-7c30208f94e8", "indicator--335c8791-8b7a-4025-98be-6fca858e9887", "indicator--d14193c4-f146-48ff-9e0d-120ef200852a", "indicator--40fe87f9-fb6d-4b33-addd-2ad8b9d8e045", "indicator--f1bb6bd5-7ffe-48e3-9891-9d9a70f55e92", "indicator--76ba04a9-6708-44d1-be8b-0ef309a3ed81", "indicator--f59dfbc6-2314-4266-9847-2b3b0377ac7b", "indicator--f87df6e9-d2d6-4207-9499-9ca286e85d80", "indicator--510e54fb-0f42-4167-bf9c-a89977657e00", "indicator--095d5ddf-cddf-407d-8b5f-7acc5cbd9d84", "indicator--8e34eb1d-a6b2-4008-b7e1-ec85f661c4ab", "indicator--056bf5a5-7326-4ede-9047-49fbde101adc", "indicator--02bdf392-3db7-4a7e-a87c-d94b00d47b0e", "indicator--01d798c6-9488-467b-b691-1d7a907db114", "indicator--f218cf11-6e43-4cc4-94f9-1569fe4be713", "indicator--043065bd-49fa-4554-be03-af7e802da134", "indicator--9508d53e-7aa1-4ecd-8937-3ba57fe1a817", "indicator--ac3d0f2d-4b43-4f52-b287-1fb7f4057f2e", "indicator--5fb85f9f-7b23-4db3-a58a-2ea508b702b5", "indicator--61202404-1166-4cc2-93a2-c6c4ffa40d7f", "indicator--52e28fb9-4bd1-436c-a16a-eaf06176200d", "indicator--70348e5f-e17d-4b9f-91f3-702cc66baae9", "indicator--1fe91b0a-5dbb-4756-a85e-316bcc159dc6", "indicator--2ef153a0-cdd8-4f93-a40c-4b7cee6d8863", "indicator--15a01e2f-f09d-439d-a902-c7767e048f35", "indicator--32727a03-e011-484a-92fd-b287998e6c79", "indicator--c3d1ff4a-74cd-4c7f-9bb1-1bc2a5e851f0", "indicator--0176ac43-b90d-429b-811a-ab20bb24b740", "indicator--6a070679-0369-4086-80ab-6d6ea9f0bfc6", "indicator--c85d1e2d-af7e-4580-b4d9-61c7c7db59c9", "indicator--6735df35-0500-4cd0-bc30-6248f7b61c81", "indicator--b764a417-dfa5-4249-aef2-326b3ba188a9", "indicator--9aeff04d-ae47-461f-80c6-7bedb1b2512b", "indicator--034b9d70-ba91-4810-80ed-06aaaebb05c6", "indicator--5d6df944-504c-4c99-8043-5bbf21c81ca8", "indicator--902867d0-af1a-4588-a794-afe7b4b9f061", "indicator--6c7c458a-ee0c-400c-989e-23b609a8a779", "indicator--c1fcf03f-fc29-4c16-be13-2358fdb70d09", "indicator--b067bc77-4aaf-455d-823e-bb54b4933c5b", "indicator--d3bd2809-9ea1-4809-8caa-f42a2c7c157f", "indicator--9cfc6f4e-1ac5-4478-8334-9671b4f64b33", "indicator--c6901762-236c-4f7f-a318-a66626d86f18", "indicator--f6fe4184-df2a-4de5-babc-fa2c06d1c3aa", "indicator--9f7d2131-55a5-412b-995c-a556c3a87ff7", "indicator--e7f4d2fc-68a2-493f-b7ae-541fd8ad48c7", "indicator--eb32b2c8-fce2-4c8a-8f7e-24d406cf7d96", "indicator--74a59259-f01e-4595-bc66-a3e03a7ece8a", "indicator--262f2911-ef0d-4b5a-96f2-bb56f592ba00", "indicator--67f79a1f-b8fa-470e-8757-a17959f12cd2", "indicator--5650e5e6-063f-44cd-a283-0b2a2af60d72", "indicator--0f2b4cd4-bca1-46c1-932a-a1753b45c70a", "indicator--601d454b-1c32-4f55-932b-7c98217d101d", "indicator--d5d450fe-a4fd-41be-83ac-b0f6f43e12fd", "indicator--8b2c5249-749b-4647-8255-5ee90dbe0b62", "indicator--5be8855a-8962-459a-9c2a-0451d83306b7", "indicator--ec50c8e6-24f3-4c56-ad5d-2eb87ec95f64", "indicator--658c3c8d-25bd-4381-96fb-b5023cb23649", "indicator--874c3c41-abd5-48fa-8f87-89ff53089b52", "indicator--f98faf70-cb15-425e-9c02-414f7b35db77", "indicator--4e3a7b29-6101-4449-a942-ea29f8b414b3", "indicator--7b122837-5fd6-4a5f-884b-0426c09093ea", "indicator--47d54cee-ea54-4ff8-a0be-f91c4f90d296", "indicator--5df69690-473e-4eac-9355-ee6dd38dd867", "indicator--28b4f23c-766a-40ee-adc1-2a28cba30beb", "indicator--8c3111c5-0ef5-4487-b1cf-ee9d35978472", "indicator--852bfc75-deb5-4c7a-bfff-3f4471920678", "indicator--7ebff560-dd00-4020-8eb6-fc2e5b764a2a", "indicator--4a5c9d14-7dc3-404d-ac16-f2bc2b4df273", "indicator--0b171bdd-b341-4138-88ba-2e483f180a79", "indicator--a1a61b3f-3b3e-45fb-aae3-aa5f4277f314", "indicator--0babf8fd-e021-475b-8c14-665aa819acfe", "indicator--2d942d77-b90f-4f26-9426-de8c63015547", "indicator--43618122-3d80-445b-8665-e8d5b6ef04ea", "indicator--71b8055f-d4a6-43bf-b985-33d552ccc8cf", "indicator--d1ae2d78-f893-45e8-bd09-a40056057e41", "indicator--30c2b37e-a8a2-40a7-ae9a-c041401ce4d0", "indicator--037edeb1-1b56-4db2-80e8-da40666a057c", "indicator--5d6ffb4d-a575-4a4c-9a3d-be30065cea5d", "indicator--079a07a3-c024-4df3-a05c-89b0f65d5de8", "indicator--af5436f0-2b94-4f95-97ff-a878fc2a7b42", "indicator--b0ba5a48-18cc-4a3c-af21-11d8e8b3e303", "indicator--4cabfc40-3c19-4e32-9620-55807a97ac6f", "indicator--1d36aa4c-b2ec-4e0a-b90f-b4ea15843a81", "indicator--90487530-1a6a-4929-9fc9-980633100d37", "indicator--c017ee90-b51e-4b8a-bfb1-211afd0e0814", "indicator--fa4a4aa6-2949-4562-b5fc-db195597799d", "indicator--f7b698c6-e22c-4727-a882-d651a09808d8", "indicator--bd3b1582-540a-4e03-a1ca-ed60ed361326", "indicator--46b855b6-06c9-4cde-8d9b-819c4f7c7ce3", "indicator--128929db-b329-4e17-af64-7e94754250d1", "indicator--05573d5b-163e-416c-8253-76755bae080c", "indicator--6a27cbb8-64c2-49af-8a25-3de1af3796fb", "indicator--f974850c-3f7c-49e6-ae09-92665dd22d09", "indicator--594643be-615d-42dd-98ab-d86a3df8d21f", "indicator--e32226ee-f826-4241-8502-bd201464cff9", "indicator--3966cc4c-dad9-4ee5-b3e3-c791040264f8", "indicator--90cc551a-e6c6-4ad1-902c-a995a36afaa1", "indicator--f9644448-e961-4c93-a5e9-d422f2975b10", "indicator--993386df-79a8-4f67-9dca-1bd61e11d66d", "indicator--5a5995a4-ac45-4329-a003-a6fc05076e76", "indicator--b3ef6769-1df9-41f8-ab86-2729570daced", "indicator--f075c27e-5996-44e6-aae5-a836e2019b37", "indicator--f7a0929a-2685-4fc0-b60d-5a4da03200d6", "indicator--3ee6d76c-0a15-474e-b982-b1837686827e", "indicator--14f92ca5-67c2-4433-b412-4716d48a3769", "indicator--c041cf5e-4417-4144-bb17-bc0353e1daef", "indicator--8f2783ac-5f2d-4b24-9d14-fa803cb52a68", "indicator--20cc55eb-63fa-4779-bb4a-f204941b69f3", "indicator--c2f159f4-5874-465f-9956-b7a4143f62dd", "indicator--80c1c238-46cd-41cc-948f-feb76c790ffe", "indicator--41714ba7-ba29-4435-99c7-3db853ebb380", "indicator--cb5a7b2e-61b5-4056-998d-5bca7a8fc495", "indicator--00bea7fc-6a42-4142-8188-85bf937812a1", "indicator--0950d7a5-76f7-4110-b348-08ebe73c7617", "indicator--2a5ad652-7e00-4f19-9327-5563453307a9", "indicator--3ddf683a-32be-427b-90ac-0c15f0a2ee40", "indicator--f10e7d21-07c6-4fc4-9abd-7961483c28b2", "indicator--5c882bf5-ee41-4fb6-af9f-8c858edba211", "indicator--afa28c12-6841-4e1d-a21b-ac4f1b342368", "indicator--6f8b1ea6-e329-49eb-986a-700d4646285a", "indicator--73ecea42-b8dc-4e1f-bf8c-a4449f2c5cc5", "indicator--05cd258f-e67c-4328-8a1a-25510fdf999e", "indicator--ab5c99ad-b4ee-41ab-bf43-245bbafbbd60", "indicator--41438a90-1026-4ac4-be56-dec253fdbe81", "indicator--b6752015-d171-4fb5-9d5d-d89379492e22", "indicator--d700eb1a-dc6d-4086-8b19-21eef3518199", "indicator--77a9cc39-f7cc-4efa-8a32-a3c4282bc12f", "indicator--f51634f1-dc72-4ee7-bc52-c6fb363dd69f", "indicator--29fdd83e-2014-49c6-a6ff-7340dbaca10a", "indicator--bc248229-9e53-4864-b99d-da9d80dedfaa", "indicator--4c4fabbc-4707-48c9-9f9d-f8aa057fd050", "indicator--a4b98f74-f58f-4048-83d7-e7bba99d6197", "indicator--0e9d73ee-f525-409d-b562-a941f2fd0d77", "indicator--917b11db-62b8-4a1e-bb4f-837d91108b0f", "indicator--5add9b49-3c17-4133-85c8-b4733cf4b825", "indicator--b1d87d49-47da-41aa-a0e7-6e9ff94fbe8c", "indicator--5ebab0fc-d5c8-46c8-81f9-236e075bb4ce", "indicator--f0eb6461-a49d-41f0-87e4-cab8dc19ce9e", "indicator--28aa609d-d565-45e4-af93-a14faa76ba89", "indicator--f695fc56-8480-4056-b98e-593465be778c", "indicator--bdcd88b2-4c06-4017-8dd9-5aa9583ecf78", "indicator--f4374b07-4213-4424-b050-422d84f518a3", "indicator--10ecda99-57ff-4d72-8049-42cb29caf7b9", "indicator--897f696a-a3f4-4c12-990e-39785f90084b", "indicator--d62da06f-ca2d-44e0-ad25-9ee9e2be473b", "indicator--615417fa-2af0-4041-8b95-514148ab0f28", "indicator--c75e5fb1-8124-45a9-ae9a-1a8c3a38648c", "indicator--645132ae-5473-415d-ba72-6e7401c3fb63", "indicator--38e2dd23-8cb1-43d1-9165-afa3d5323202", "indicator--85b65572-bfec-4b50-8aaf-289176e7833c", "indicator--20c89118-ae46-49fb-ac4a-ef0d539bef3f", "indicator--7e1fa8f3-00ec-4630-a295-c40dfdaab01b", "indicator--ddba4377-a6e2-4808-8b78-b495945f421a", "indicator--4c9edd47-3ae3-464c-bfaa-ef7c71706a88", "indicator--237ac03b-875c-46ed-951a-d7e88b831fa3", "indicator--22d90b5a-7f08-4530-b046-57122a27dee9", "indicator--1c44a51c-1680-416c-bddc-0425512f99e2", "indicator--99a8a842-1686-43c5-a8db-d15abb772053", "indicator--db9c92c6-0aff-4e67-a62a-c279f3ffc012", "indicator--7f9391c6-0d19-45dd-a3bd-82f1e6d96377", "indicator--b00139d9-f49c-4323-80b7-62363b04ec0a", "indicator--d2cae7cb-67f2-4cbf-9e57-b758a9819f4f", "indicator--d5cbc14a-2da0-4e14-91df-f90da58f15dc", "indicator--977fc2f9-6498-4dd5-9043-07c635ae1004", "indicator--4dd1a600-bb35-479e-b3c1-ed41e228892a", "indicator--a38c10e6-54bb-47ec-9b70-8da72187c824", "indicator--f8ed10c9-9127-4865-a5d1-0bda231fb581", "indicator--bc303156-4a46-4edc-a81d-593f6926f594", "indicator--a2b11be3-3da0-43f7-a776-1abb3d4cb747", "indicator--0bd2fa93-d60c-4a5a-9eba-12015c69d93e", "indicator--5bac4af7-83d2-40f4-8540-9826cbf6253d", "indicator--9b0e4a5a-da0b-47a4-bb48-427e9423ac42", "indicator--624f91cb-cfd8-4df3-a0d8-6f9d6048d4c8", "indicator--5589c4a5-9bcb-40bb-b1d5-9a83d7e8c6f9", "indicator--971e8a30-5dc3-4a7b-b488-c343bf28e62a", "indicator--f85b3c30-3834-40f7-a6ac-11ae3e8bcf4a", "indicator--053102df-40a8-46c0-93ca-0a432b6c99ba", "indicator--9212e9ef-b4f8-4e86-9d71-bdeca0ff4471", "indicator--9fac6caf-6080-42b3-a429-1f47eb038b83", "indicator--3c85bfce-ff78-4f5a-bf2b-2f566da422c0", "indicator--71bf22a3-f538-4840-b91f-97b888d130b0", "indicator--5668256e-293e-46c3-8678-01afd3239097", "indicator--fbe48204-6373-4c8f-a4ce-496092d7c6dc", "indicator--74abd7ce-0881-40da-9015-c4bf6f79ef38", "indicator--dc7e648c-2cc0-4ea3-a2aa-c0eacf5a2c30", "indicator--dc1c63d5-b100-4131-9940-16e4b86185c3", "indicator--136e68c1-d261-4838-975a-11ef1d5dbd3b", "indicator--70130620-cef6-4ba0-974f-b6db2e4ed41b", "indicator--1142c74f-dac3-44e1-b991-f09f8be6a3a8", "indicator--7e07c5be-11ec-49a9-9b49-fbf6549bc83f", "indicator--e6fd0341-ef7d-4e5b-b9cf-3a22d551c7c1", "indicator--4ae27b67-3b44-4ede-a376-0e0de87f456e", "indicator--dc076300-1818-4742-9d34-fc953894450d", "indicator--583c89b4-dba2-481f-930f-264569943b06", "indicator--a57772d0-1691-442e-9c69-03bad9de5ce2", "indicator--7b3c9c86-3e26-49eb-9b12-1aa06d24e82a", "indicator--d26994a7-d343-491f-a488-b4932ee3c4fb", "indicator--f6cd6823-9696-4650-8d52-5164ef45699b", "indicator--efe30445-46bc-41d2-be07-dceb604e8ea2", "indicator--3ecef04d-ddc7-4d97-8a54-64233dfef96f", "indicator--e9f1751f-36ee-4a0e-8daa-9c36da5a605b", "indicator--22d446f9-493a-4f7d-8553-8c22e5a13269", "indicator--37da2b97-77dd-4de0-8b1d-77044ed6c9cd", "indicator--f61c52a3-591a-42bc-98c9-d52e5f03318c", "indicator--f0d3bb3f-f142-4604-9405-9612e5f142fe", "indicator--2f5c1c91-47d9-479e-beb8-12af465c4591", "indicator--d5556536-b994-4f40-82a2-ec2760c92d49", "indicator--03b314c8-bc2f-4d10-969c-bb6fa38cdae5", "indicator--dc46c7d0-5e38-4169-9f0c-e02e454c28a4", "indicator--42479f81-955d-4205-99d0-be82ac61cb41", "indicator--3ec297f7-0e89-4938-8e18-26b84dcb9be0", "indicator--da718dac-72bc-4447-afc9-474c6c048007", "indicator--5b08abb1-c066-48f0-88b5-42466105dbf1", "indicator--8f74774c-b4d6-4cb5-bb0c-b95aa6f8363f", "indicator--9ad5ba87-869a-470f-8db0-cdfc89325b77", "indicator--a24e47ae-caac-4a93-85a4-6febd5e8252e", "indicator--8b788a84-0315-42e9-b60e-437478d9df37", "indicator--5c331877-c1ca-4f03-938b-007a672b06b8", "indicator--275f1d2e-a416-4c0f-9967-d521664c4fa7", "indicator--1810c778-3400-4117-888c-7fa5602d8b18", "indicator--7a35f036-6cfc-4cac-9d65-9efd328d37c5", "indicator--e0b15fec-ca4e-431b-95b8-6339d959f45c", "indicator--76a69ac0-cf28-4923-a997-273e66dbd66b", "indicator--4c906f82-92d0-4590-9dad-c28f9ec3ede3", "indicator--78e9823c-0b4c-469f-b2af-137e652843c7", "indicator--ff3b5729-f2d2-47ff-8213-c5bde81b82b8", "indicator--d61099a2-3733-4dc3-a2f2-5bc174230134", "indicator--de587612-42ab-4efd-b07f-c7f1fda4b6d7", "indicator--d5bfd8da-18a8-4d35-b8dc-f316dc3d5e2e", "indicator--2c578fed-e164-4e1e-9fe3-50ffb6f92ccc", "indicator--097834ea-a247-472f-8ffc-c8ce8335631f", "indicator--acfba706-6e3e-46a4-9f7f-772c63bc8a6e", "indicator--80786f5e-0148-455a-bf74-0bf6d6ea4771", "indicator--713b979c-1e96-4c06-a8dd-591e606cb429", "indicator--bf458f0b-336f-49dc-8f52-d7315f244ca1", "indicator--f126ff41-1bba-4425-8c6f-b89c8cf7cbba", "indicator--fa538492-f521-4c79-bd2e-08ca93f53353", "indicator--d0c1bbc7-4148-47e6-b3a4-f6c753d5c066", "indicator--be910347-6651-4cde-ab69-aebd417e50b4", "indicator--cf1917aa-c55f-490c-a24f-ff1cd05a5f08", "indicator--f1fff026-6d16-4fac-8447-846a8f2d165d", "indicator--be95c7d4-2aa9-46f3-bcd7-932e0b4d28f0", "indicator--46ee5b89-6cc7-473f-878c-b6ab37382d35", "indicator--058789b1-3dbd-4790-8d76-4a82838e382f", "indicator--54b3bdec-33c3-454a-94f7-04191641057a", "indicator--bbd197b9-799d-4485-9f67-7045bf666313", "indicator--48ee78ae-df55-4839-9aa5-43fb011e8135", "indicator--2e8bff6e-9795-483a-8acb-8e1c0a488081", "indicator--2b473b64-f5e6-4274-9a87-ecb465b40958", "indicator--eeda81e6-fde8-42b0-b06c-8173a19daf55", "indicator--66cb2055-9c51-4595-a370-bdfc48f65205", "indicator--20807be0-e652-4c93-b4c4-13f94e698c6a", "indicator--001c6d1d-c175-4fb3-b17e-590945839f12", "indicator--9ebb30e5-9189-4cc2-be77-73a21f3cc90f", "indicator--3c4707bb-76b0-4764-81b4-7939ffe95a1c", "indicator--1c5b4fbf-8c53-46d4-a8d6-18a67cecb7bb", "indicator--efa72ff2-40c9-43bc-a65e-aed7daa7b01c", "indicator--9f3290f8-8cdc-4500-9862-9b0bc9e875a2", "indicator--2403e043-4f74-46e6-939e-ab76b127a659", "indicator--ab3ecb5f-bc8f-4e91-8599-e84117376e09", "indicator--85cee56d-fe29-4867-a728-e43525b39dd8", "indicator--3466e980-3bfa-4f7e-aa17-d97c27bacba6", "indicator--66a2ac22-947d-40aa-a4b6-44abd17ec0b8", "indicator--44d95fe9-e3f8-4a31-9f9b-bc6a26768e9f", "indicator--4f8b6c79-b18d-4f8b-b21b-733d0c3c8ddb", "indicator--0f9b2e00-4c1d-4da4-abfe-bf08f840eb55", "indicator--1b2c84fa-0d02-487c-b91f-5c433348076b", "indicator--b8cea048-0d1a-4074-b4f8-767fe75d234e", "indicator--4d0bd6f2-e8d3-4298-aa3d-ee8d8287b2ac", "indicator--19ae587f-7f13-496d-89ec-d0da2af482ff", "indicator--55dcfde5-cf51-4ddf-9f5f-6dc9d86c02f0", "indicator--c1907630-ff95-46ff-9527-3cf0bf6e29e5", "indicator--ec9ab741-f21a-4e4a-a51d-68d8883987e9", "indicator--d683d19e-0e40-4c4d-8184-68f74d622d1a", "indicator--44a9a2cb-97a0-43c7-8c80-17d227daa38f", "indicator--c83e48f5-7423-4b64-bee9-43d2c1b221f4", "indicator--923f6049-b04f-4bf2-b98e-aaa46f94c982", "indicator--755d33b1-eaa3-4fa2-a734-29b548adc4fe", "indicator--064401ff-77a1-4f57-8755-e9f78e220556", "indicator--9207ea7f-4a56-4cf6-8035-91a5f8a3ee39", "indicator--e5973989-e469-4222-ba9e-7a2dd6a8f610", "indicator--9425f716-f021-4076-96bc-74ecf2c278f1", "indicator--9e81728c-6199-4f4b-b4e6-b81c9a511946", "indicator--995151ec-5c54-475f-9445-d240d3ed74bc", "indicator--8e9c1071-d91e-44d4-9d14-9abbcf6f91a3", "indicator--1ec34e71-12ba-494a-be7b-b68deae2c5f6", "indicator--72bc6a20-3c3c-40cd-b281-cd50eab718f6", "indicator--0c39a3a0-9605-4281-a716-3d9df66b3f43", "indicator--9befb902-12cc-4d16-99f3-3ef51e41a406", "indicator--7f28e858-800c-4c05-ae66-e558321c68c9", "indicator--9571bf37-e774-4f56-b7aa-e1638f448629", "indicator--8930d10c-2adb-4254-aa3d-855af81d1484", "indicator--cfbed741-bbb9-4842-b741-76660549092b", "indicator--56eb5ddf-5788-4477-a7ea-aee05b41d96c", "indicator--4bd36d58-9519-48ea-855f-23ac0c252aed", "indicator--2af06139-dfad-48c4-955e-f06139b51dac", "indicator--f2c28257-1daa-42f8-b6e9-e535129dd6e1", "indicator--eaf6526a-c823-4529-b16b-fc8880418e65", "indicator--bfb0bcbc-1363-4c18-86f2-04340bce9b49", "indicator--b865f559-b63d-4d24-95a4-5384f8b16426", "indicator--28ffe3ba-d5e7-4a7d-baad-9f9043fd453c", "indicator--cd5f7fb8-4915-468b-8f5f-1787a8656576", "indicator--e3d89bf7-40f0-46fb-8875-5f8178cbd8a5", "indicator--690249bb-c272-46a2-a4b2-0a2b29f0b503", "indicator--6dd890f0-b8f6-40bd-b2da-c6badc55238e", "indicator--350a2f1c-70a8-4aae-aad0-9328b724ef5a", "indicator--31d97540-2fb0-49dc-a840-f2b1569e7c70", "indicator--b0c7a602-9c00-4449-a6f1-4555a0e2b879", "indicator--12686269-688c-4cb4-989d-1eb404d87435", "indicator--2c5383a2-7a15-4620-a2be-0c8efa3bc372", "indicator--0a316658-51bb-469e-a1ed-99784a35f1d6", "indicator--41937865-bec7-4d28-b017-9f52bbf57c86", "indicator--fdf95703-12d9-48d6-9e96-bea962adde11", "indicator--03008f51-b625-4bcc-91ce-0413e8db2589", "indicator--dd12d553-113e-4eb4-a9e6-7f4cbf97ff5e", "indicator--b6d259fd-790e-4040-8ea6-f95ddfd8d1a5", "indicator--fc252ebe-298b-4b4e-baa0-a5493af71b44", "indicator--82e304e6-1405-49db-baa5-14444b9d487e", "indicator--cc9ed010-b92e-4455-8aa6-bbda32cb5054", "indicator--363793c1-35c2-40d7-b20a-2b9cea0c92f2", "indicator--7fc02374-0c6b-4944-92e2-22090ff23c0e", "indicator--6d5af6db-6c6e-41de-bbe2-dffbf14ee121", "indicator--e5b95e90-58af-433a-be94-1620ab3ecb8f", "indicator--a353a47c-4d59-4710-ac11-f7af4f3ba5aa", "indicator--4dc66e07-f05a-40a6-b9ec-b23cb21fe306", "indicator--ae7bb62d-fbb6-4a80-8e26-f494342b6641", "indicator--6cc9baba-08e6-4827-bc61-2a71aa49fba1", "indicator--776071a1-2a23-47e6-9f9a-3d5040be9818", "indicator--e92c3068-5a0e-4e68-ba69-b6a991cd817d", "indicator--24459c99-074b-4285-9c02-524ede15af5a", "indicator--e6b880b6-58f8-462b-81bd-10559ceaa7e4", "indicator--225507ef-d077-45c8-9b67-6b2d663163c5", "indicator--12ab7a61-5e10-4a54-93a2-a6bf3daf4155", "indicator--2e7004a5-2212-4728-9f97-1c60ec1e3c3e", "indicator--850c7ea5-dc8d-4c66-b66a-61395742a285", "indicator--4c445101-721f-4232-b940-a9c53b416214", "indicator--5a666198-ec71-4b40-a243-2a0f88bd0269", "indicator--5d7cd22c-1836-4030-8298-1783b3b3a1fe", "indicator--6d865c5e-ce7d-464f-8a8e-4d0fcd1fda60", "indicator--af503b21-417c-47be-9f7a-14dd22aca8ff", "indicator--ced938df-b9e9-4b02-9bd5-9cb012885172", "indicator--5b23ba13-281b-4cad-9a49-cabcb22535e4", "indicator--4f4e2157-b6eb-406a-907b-1955c04962c8", "indicator--eecf47b6-d9b0-4e67-b9eb-e56a59ede49d", "indicator--2069aa4c-baaf-4197-b0c2-3b0b05c71fa3", "indicator--d22e347b-8c99-4762-9347-874e34342c99", "indicator--e41bf207-3768-47bb-b90a-dd8d42b7bcaf", "indicator--d50fd686-e7e4-478a-ad97-5b74bda98598", "indicator--abdaed97-6ae3-4b84-b1a8-0f3d06813eb1", "indicator--f51bdf8e-2477-4e3e-807a-4bfe46457ca2", "indicator--b3ea08bf-1df5-4b19-a492-d839c6d60617", "indicator--674bf528-8006-4a3d-a5e9-eeea7be5e64a", "indicator--8483b79a-57aa-46f7-8b80-ff8d558b6e11", "indicator--920f1edf-61bb-4253-8a4b-f1e70e1c1565", "indicator--ba468a22-3c0d-4370-8cd2-8a54174573b2", "indicator--78d53b93-bbec-48c2-ac94-509711e5aa45", "indicator--1194400b-a917-4fe6-b98b-975844d8bd99", "indicator--f6235358-53db-4d3d-9064-dea1b0336247", "indicator--3a1766d1-a390-46d2-a9c6-31127e7e1502", "indicator--3a5e2516-d4fb-4b16-96c6-0eca6d3a02fe", "indicator--9cdd7b73-2d18-4a95-8153-39b1afc72764", "indicator--e68ff01c-759a-4cea-8a7b-cfc06f5eac9a", "indicator--466eb603-0805-440f-957a-2f67524431e4", "indicator--edc42426-603f-440a-8881-724fe4dee3b0", "indicator--1e47b6fb-6d9f-45bf-ad9c-387706264989", "indicator--60449ca3-11d3-405e-a638-b2dc0ce1581f", "indicator--e96f8e86-912a-4adb-80a1-896b67367d0e", "indicator--e9b172c6-6bdc-48be-937e-4e3ffc2e41a6", "indicator--7a671842-6a14-4642-b592-b6bfc46f6133", "indicator--f8066b3f-7d75-45d4-8af4-9b253cb6694c", "indicator--b10f0b46-c7a2-4bad-aa54-ac60cd4165ba", "indicator--b2647286-ba85-46aa-ac42-69b8b70de41e", "indicator--b363bee6-4543-4139-8f6c-02d3eb4eb92e", "indicator--8e3d83de-cfd1-49bd-8b9f-c2c6b842a3db", "indicator--29e1e77d-2862-44d8-aefc-7f11c31ffc8a", "indicator--3acc11dc-b55c-4de9-ae65-062ae89e29cc", "indicator--753018a8-15ef-4f17-96c3-d701c04734a8", "indicator--b3b974a2-c4cf-47b5-83b0-36a80d21b65f", "indicator--eec4c0e9-a601-492f-98d4-362c727f73e4", "indicator--6fa780d8-e48a-42be-962f-5d293debe047", "indicator--f0b1dd1a-1b69-416f-bdae-21143d33c611", "indicator--3401ae1b-beaf-4f9d-81df-537f39b1bd01", "indicator--1e0d59f6-3697-4229-bb72-94a155df680f", "indicator--d6efcba4-5b36-4112-95a2-c8c69f73873f", "indicator--7dd67b51-c9ff-4bb5-ac5f-3627e880e61d", "indicator--692b2a10-dc1e-41ba-ab3d-40bff60abfd9", "indicator--91e65133-a72b-4b18-b3bd-b3d1b6d4077d", "indicator--2b6f2294-8a2e-40a1-a0db-620771692c57", "indicator--d6768727-8e4a-4e61-8511-a249846de65a", "indicator--d24f192a-4b44-4788-aebc-1dc16744f2ea", "indicator--e4ba5b50-3de9-4b1c-8f39-989b568913ec", "indicator--e3617d78-e1a7-4ab8-b5da-9fc3a85e63c7", "indicator--0cfc6484-bd2e-4af2-b58f-f89731a4a2c9", "indicator--b3447e52-a1c2-4d65-a095-36a42dcea4e9", "indicator--01bcdb02-69b8-43ba-be4f-c703caf3de57", "indicator--bee5d380-2d99-4888-804e-8145b3449989", "indicator--ff7fd655-54f8-4e85-bfbd-f78ee12b61cf", "indicator--46f21d95-6690-4a82-aa4e-8e7b25665a42", "indicator--1005585f-d896-4f01-8891-978c10a79b2a", "indicator--dce06669-c7c3-4953-a749-621629a92161", "indicator--b745404d-971b-4395-9f50-3017375ab956", "indicator--54a0b506-f4b4-49de-b7c0-5b058396d5a2", "indicator--cdb49acb-3140-4241-ba80-0ebd0d1f682e", "indicator--df47f84c-5527-44a5-a34c-5cc06ee6191a", "indicator--d25b84b1-3dba-4842-bcb6-c309b03fff6f", "indicator--2045686b-fc52-40a9-9342-cc2752eeea3c", "indicator--2d374420-b586-4f1f-9b93-0f603f4b9980", "indicator--40781c71-f61f-48d2-9403-a2964a7ea7ce", "indicator--2c9e72c7-b206-4453-a262-5599cf19234f", "indicator--a73b6678-17de-4373-b78c-2174ef868485", "indicator--6d0a7491-9a04-4feb-867d-cf1cae036932", "indicator--0c281760-421a-4739-aa24-df8ffe57b512", "indicator--3cdd7b25-e73d-4fbb-9200-1cf777da006c", "indicator--22abdd88-d713-48ae-a5ad-7182d648a3a2", "indicator--9f454680-455a-4a66-8a77-56bcd5419464", "indicator--1211179a-29c8-47e2-82a5-77a0322200a1", "indicator--80afb9ce-5aca-49d2-9c7d-3d3847b85f31", "indicator--c12eab98-d3b2-4e3c-91b5-4a3ad0429841", "indicator--e907d4d9-3c7a-4b28-ab0d-12c041e72363", "indicator--ebda87fd-fcbb-4006-aebc-a743183045b8", "indicator--df9fdb52-0e1f-4a56-a2c1-7882747896c9", "indicator--5c22dfac-c9ed-4d27-b52b-7344e94821c4", "indicator--bde19ad5-5521-4d6c-b706-beacbe5bc396", "indicator--a6c32ac7-b53b-43ed-9151-ec64a63a58d2", "indicator--71ebc232-88e0-4a5a-b41d-5dda07c7f957", "indicator--308ea936-bf8a-486f-8fa3-1a534eb519e7", "indicator--0f3b0882-ecb8-4dae-a80d-37525697ef15", "indicator--aa8e85f5-8dcc-405c-9148-5ad51192c273", "indicator--d2fe41e4-8218-4d2a-8a47-00121d7ef7ae", "indicator--41c040c3-4655-4834-bac6-b12dafc11128", "indicator--b78bb79b-0cdc-41f7-a472-1658b486c70f", "indicator--6e1fc297-7b36-4178-87a4-9c4dfb287d32", "indicator--8594e68a-739a-4faf-9bf8-4e9335114f8f", "indicator--c1a1d8a3-dd96-4859-9055-1cecbdedcd5d", "indicator--c98aedb7-00f5-41b6-be58-7411aedb4a8c", "indicator--0da1ce57-90b3-4890-a75c-24a72d296199", "indicator--4e7a5ab8-48bd-4f4f-989e-b0aea95add5b", "indicator--9156fb4f-7aab-41fc-875b-a41340c5ca8d", "indicator--84a2be13-bfa0-404c-b2c3-b692a00f263d", "indicator--3928d54b-244b-44ad-a811-04e40a280205", "indicator--f8e51598-7c70-4b58-8abc-b6d665b0ce1a", "indicator--f8ff66b3-f6aa-4f55-a077-d29682b8d3c9", "indicator--7702a718-dcc1-4f83-9c03-bf37447b62a7", "indicator--851ce6e1-1e54-4596-9418-5ea64a9c0dd1", "indicator--de1a2987-d34b-4e87-8944-863d96762088", "indicator--41582892-c42b-49ac-917b-487a4b0fefd5", "indicator--ee53442e-7311-4a77-b838-dc341fd8b73c", "indicator--171cf289-2f92-4363-8f3a-10a5b1e29fda", "indicator--2ae829aa-8ce3-4d05-89dd-1216ee380047", "indicator--b36f003f-45cc-4851-b20d-129c226748fd", "indicator--4a6eea77-4224-4673-b6aa-a83b55749c26", "indicator--f08f2ddb-a907-4298-b698-adffd46b5fc7", "indicator--ef1d024e-a8ae-43c7-bcc2-422404b19a84", "indicator--8cc37179-3cb0-4136-8b5a-58ab18c72665", "indicator--05cd875a-4c2f-42eb-a5b0-af5102108fc2", "indicator--cfe3953a-8267-4cfd-9e6d-1e3c5005c705", "indicator--3f807ac2-3d13-4349-b584-5b1de1b4fa94", "indicator--4759a942-ee75-4da6-a7cd-32cd87825ec6", "indicator--6db26156-dda0-409c-8855-15f5f1d70b6b", "indicator--44f02533-613d-4519-9583-b9be21556526", "indicator--939f9405-2ec2-4d60-85bd-d6b856ef7b7e", "indicator--f09c8dc1-1309-47f5-9063-0873268d2d45", "indicator--e9868f68-5062-4b52-acd4-7fa5cc0ff1cd", "indicator--94683269-2e8e-4936-954b-7f29a745d0ac", "indicator--c774299e-836c-4870-ac1f-1c745fa35b53", "indicator--d761c943-9587-4ff0-805a-0e712a4509a5", "indicator--6ac49655-5198-466f-a358-ab91dcff41f5", "indicator--4548c8cc-8ee2-47e9-a662-7becb6381778", "indicator--b4b27058-2718-4f0c-8321-e5ba4f9b71de", "indicator--69ca7f7d-205c-4694-9448-f1f38a9aa079", "indicator--31482a72-d66b-4673-b0a4-5ff2bed6814f", "indicator--f52d3d92-8add-4f42-8de0-2008beae10eb", "indicator--6bcf48c8-7555-4ca7-866f-83eb11f545f3", "indicator--f12d8405-9728-492e-abfa-20661d913aa5", "indicator--f9192c61-4d4c-408b-949e-c56381ff8026", "indicator--cb81ea6d-67c3-461e-a070-6169ee2a7d1e", "indicator--ed0fb071-7c80-4066-a15a-3a04bc568dd5", "indicator--7bf48dba-31cc-4b3c-9b40-b830d8a20080", "indicator--6ccb16cd-4df6-4be0-a3f2-7f5ef64bf658", "indicator--819e298d-5c79-45c7-b5dd-f41c94b1e2d1", "indicator--d331174f-d6b2-4f73-ad9d-edd1ee07c201", "indicator--25949930-6890-425e-b9e2-81095e1c3ce5", "indicator--f63ac6ed-7f81-4154-be43-84b0f3284cb6", "indicator--f6ee0f11-44bd-467e-8c81-15988f70571e", "indicator--3b084188-d012-490c-96f8-5d7c4a14ecdb", "indicator--ff33a7d4-bcc2-4976-92a4-5951020369d2", "indicator--81b7a8de-d589-4d09-820c-5865f3e130f1", "indicator--f276b1ec-f81f-49ce-a1aa-687b0788d698", "indicator--147af086-38e3-481f-bd9c-9dc68a8ff179", "indicator--ff0140dd-d830-4c8d-b063-57ff1807a72c", "indicator--96527c98-0b60-4cc9-a826-13d7c2b5944e", "indicator--ad63eae3-8b7a-4707-a44f-0b6e7cc9da67", "indicator--44780ac3-2c8f-4075-9867-7d28654c91e7", "indicator--559eb58d-4d91-4486-98b2-6632aa914d42", "indicator--616f479b-b7d9-4c39-b7c0-aedae49dc42a", "indicator--638a1724-a90c-43f5-b457-24331b86a396", "indicator--21ea9b09-0d9e-42e7-ad94-465249be8d95", "indicator--1e159d09-d3e8-4864-9f07-28189d89a778", "indicator--4fdfa731-5db0-4ac8-871e-3e813e4848d5", "indicator--01603995-151a-42fb-9a26-bb0b2fb5bb48", "indicator--cafa4bd0-402f-40de-aa52-54a63cb415db", "indicator--54d006fb-d4fd-48d6-825f-21664295bcd3", "indicator--823f3ffb-7616-4030-8042-4fd2c9b506ee", "indicator--900cda20-cf3b-47e0-ae66-16dc81996444", "indicator--f11accc7-d5f1-4113-9669-c8121feba0f0", "indicator--12badc54-fe11-4abd-97e3-f6921e335645", "indicator--48a844be-8ca5-4604-b391-7a3917a8bd52", "indicator--a1b73aa3-4796-4c1a-855b-173258884328", "indicator--e7ba7764-5ed9-4504-a050-0fa09175faa9", "indicator--cfbcbf30-0c50-4de8-b21b-10d62db8f1f9", "indicator--bfe8a826-8bb8-48a6-9b1b-4f9bf1724e0f", "indicator--eddfc9c4-2dfc-40a5-9370-f1373bf8f5f6", "indicator--19a3b49b-ccbc-4bf4-8b73-cf8c4c0f25f6", "indicator--25702a9c-2a3c-4282-8e94-acc5ac493118", "indicator--13dd7ec9-3431-4311-ab6a-c901d16e9436", "indicator--4d062520-4548-477d-8433-978b374d72a7", "indicator--2cd995e0-90cf-4c15-a5b8-0834ac9f4cba", "indicator--068dc295-520c-4121-85c3-bac74f90066e", "indicator--786378b4-4013-4001-98e2-4b67e60f33d1", "indicator--2cd1b7ad-30da-4fd2-89e7-838204d6d91e", "indicator--fd98d4bc-8aa8-4b0b-8e5b-daedd5c80fda", "indicator--cb641f7c-94a2-4867-9710-17741bbe40cb", "indicator--a4a53025-252f-4043-b506-29351b63083c", "indicator--fed532c9-49c1-4b93-925c-48c0653b9215", "indicator--1d844b86-2194-47c5-8707-e63a67c9053f", "indicator--dd2980a8-45d7-433f-85cc-3b098ddead72", "indicator--3e730d89-2b6b-4972-99ae-a722fe2260cf", "indicator--f9e70611-53be-4fef-b316-f681bba65f14", "indicator--52fda35b-5652-4a9a-a56d-e9a81cf68a99", "indicator--ee56ea5c-99f1-43ff-a79d-780112f914c8", "indicator--964be26f-f0a1-4a8e-a944-19c26b2e3bd2", "indicator--92eaecf2-993a-45d8-b989-fb052e6a7725", "indicator--2b280f9a-3e64-4865-9ad8-38499bb574d5", "indicator--e8675a79-f5d8-4a6c-8c0c-ee325e13b9d8", "indicator--e7e0de06-9e86-4d36-9a74-c18e2478af08", "indicator--d7cceec0-f32e-4733-a8d8-185cef4d96fb", "indicator--fc78e7ce-55ce-444b-bfe4-fba8115a0901", "indicator--d3eed423-4e2e-434e-80b9-dade0e5ce712", "indicator--aa8a31f1-dec8-4193-bef3-de5834f26db6", "indicator--2b2d4e5b-94a5-4c94-86ba-c688ebac51c5", "indicator--e5edbce6-72e8-4f0d-8f11-27e28e7dfb8e", "indicator--aaecd6a7-a130-42c4-bdd0-979d8a14c17d", "indicator--3b9a58df-4d29-49bd-a646-9eef1d0728a1", "indicator--397b0822-4a3b-40df-b10b-15a594cf2fab", "indicator--67b5aa96-abc4-4980-b6e1-c025fcd65d90", "indicator--2040335b-da64-485f-81b2-712fb9ab91eb", "indicator--f1a433cd-7c1e-4d29-a555-8c3ced657ab8", "indicator--83217c60-c27f-4fde-8e10-36b3bd3dc6b5", "indicator--c4c94279-0c23-419b-adf2-3ae8fed8433d", "indicator--64639497-90a7-4a70-b786-ae3f7e32fb89", "indicator--23ada60f-9fa4-40f0-abf8-3ff51d0841ec", "indicator--747b712a-6b62-465b-9bb9-8e119c647405", "indicator--e4828fac-b1d8-40b6-b261-6725219dc345", "indicator--acb83160-3d8c-4e94-9f2c-aaa0a0a277fa", "indicator--907397ca-86e2-4139-8956-7c5044df7f3c", "indicator--9674f051-8691-4671-915c-7c8e424bbd1c", "indicator--2dc195ee-f9ed-4df4-b02e-1cb181b7b0ff", "indicator--c2884190-cb0d-4867-ac06-098aa607d33f", "indicator--328438ea-6759-4292-ac48-5134f98d19bb", "indicator--f37c5fd6-5bdb-469b-b4f9-d72d7fcadd57", "indicator--8ee8ab16-4af1-4285-bd5b-4dd5ad732035", "indicator--12f50ae6-98d3-45b5-9b3f-e7ff93b06a23", "indicator--d3c02031-4ed2-4bed-8acc-02fa3297d963", "indicator--1735a7b0-c3bf-46a5-895b-23bcd313e5b1", "indicator--b214beb0-8370-4007-8c0c-eb7f606d7332", "indicator--791f6707-6409-48c6-b764-d7b46a3e5a9c", "indicator--9ff8fb71-4fb1-4c6f-827e-92ddfb0ab6cf", "indicator--7f43c432-8a30-43d2-b1cc-f1c3a2d1edb5", "indicator--40baddab-6ff1-4606-8a53-5be0d5519d64", "indicator--9346b929-2e5c-4b54-87ac-38fb1cd3db4e", "indicator--28c1e8ed-028f-4627-bd9d-e7b014ee8177", "indicator--71ec6527-1aa7-43a1-b547-9769ef8cbb29", "indicator--ecf19bba-b10c-4f27-a3c6-3871d9fd28c6", "indicator--08ca029d-f4b2-422d-b754-54d5e3daa6d2", "indicator--4d69444e-91da-46c7-8934-02c2cdda486d", "indicator--fc1c427a-d735-444c-94fd-30a438aa1683", "indicator--f382ab4b-4087-48ee-b4fe-bf62882d006b", "indicator--8650d610-8f85-43fb-9264-5dab01617561", "indicator--d3ce9248-1cc8-48d4-bacb-9cec3906d013", "indicator--9bd97a7d-511f-40db-8619-56b4cb18a916", "indicator--49029016-9c78-402a-95ce-1c5de62102b5", "indicator--4d757139-4758-4359-aba4-406cf06efe50", "indicator--be596efa-c92c-4318-83fc-0fe3d7a6dbc6", "indicator--6eef93d1-0f1c-4020-8943-5b89a3a00393", "indicator--ad0b3602-5b72-49af-80e2-16f51f4213c4", "indicator--2fc4b5c8-ad52-4b15-a8e7-7714dd30794b", "indicator--2dcd02ed-0eff-4d4e-9024-03890b05cd7c", "indicator--1b55fab3-14f6-41aa-b250-aa5ba561d422", "indicator--433aeb11-0ddf-41bf-a2f1-d3274c260ca0", "indicator--729b7cf0-e4a0-479c-9fa8-3bb4cbdb1b4f", "indicator--3b01d371-8529-46ca-9fcc-e49ffc688ff5", "indicator--834d5a85-36ab-4531-b1eb-0098485e761c", "indicator--b683f820-83d3-4193-8b51-1bd33896f56e", "indicator--867894a1-c8f3-40a2-a8e6-5c0a7e9013a5", "indicator--8d8e3dfc-9396-4dee-8295-cc0c195550e0", "indicator--fc4b82a3-d2f2-43b5-8c5d-ca26f8198b5a", "indicator--0100f92b-e23d-41bd-8684-d5934d1ed7b3", "indicator--9e29442b-6adc-4b6a-9c6c-3e9bda6af6c5", "indicator--f91c22f5-79cd-4a2b-abae-aa6855683152", "indicator--e5b7f427-b45e-46a9-a1c7-e5e55c14a100", "indicator--9561e865-b32c-430f-ac57-3864e8f3a0b4", "indicator--6c801547-832b-4b64-a7b8-b57134de2bf4", "indicator--7c7df89e-ac72-4320-aaea-69c63a149f8d", "indicator--db6ff153-b43d-4ef4-94d7-3ff6f0588e79", "indicator--3e3f9223-6ceb-4eee-a444-76a172cfdbcb", "indicator--b8550a3a-b0df-4fdc-a7ff-aa45076ff72a", "indicator--37bfaba4-90a2-4191-9a4d-b04ca1296acf", "indicator--817fb6d8-4025-4f1f-9269-cee0012d2bc0", "indicator--b1e5a495-abfc-4ecb-ba25-6c0550f7eb90", "indicator--fe42bec1-c296-4574-9167-c3c6de2e7367", "indicator--83019492-f705-4ddd-be3d-1a77160c16ba", "indicator--a26f55bd-de71-4c4e-aefc-f1e216b1080d", "indicator--6797defc-a9a5-4fe7-af98-c47fe5f96c0f", "indicator--9e3eaaa7-c5fc-4850-93a3-cd9c68ea17e8", "indicator--5fed9a32-263f-4cb5-a2b2-ed7d75f08fd2", "indicator--8d79f35d-439c-497f-bb48-244f87d2bb77", "indicator--e72d823d-289c-4c47-81a1-afc608694589", "indicator--cc984921-9624-497c-9686-7837e581bf5b", "indicator--971ec43f-3add-4817-8faf-eb1bc51698c1", "indicator--a860ff42-b7a6-42f1-8093-6dff5e5f0f8d", "indicator--3449f026-7bcf-48ca-8174-9ed658ccf99e", "indicator--636d4205-78ea-46f0-aa1e-ff5ecdfb6644", "indicator--c3713e54-92d8-489c-9f35-3e84d8203832", "indicator--43d32f68-96e4-49f9-a820-ec6a21a86078", "indicator--e888df3b-3f61-41dd-9d1d-89fe23e745e4", "indicator--5ebd2fc4-da10-4541-8874-ab4b34773dae", "indicator--70b9674e-625e-4bcf-9c46-458d9f4e0371", "indicator--8bf455de-7f41-4a1b-ae4a-24d669fb1cf1", "indicator--487c6aeb-88a7-43c3-a66a-142df28987e2", "indicator--66b2ccd3-2b5a-4e41-b27d-77b5e3b29529", "indicator--f9fc9dcf-758d-4709-8251-a6d80664eb60", "indicator--a7749310-efeb-4d53-9198-4709fb5b2bc7", "indicator--2cfe2a88-181b-4030-af94-f73b178f3554", "indicator--f4275e5a-a014-4052-852c-5737ae83ecb8", "indicator--47080528-9048-4199-8608-d840465e1ea7", "indicator--2761ade3-c44d-40b8-9afb-c83b3e660f70", "indicator--3562070f-1d62-4e7c-85bf-15cb94ee3dac", "indicator--88bd81ae-11bf-41b6-bb97-30f9a45772ba", "indicator--a28deac1-63d9-45a7-9717-8a4177d298c7", "indicator--76b7c0dc-56d5-4901-bc39-f863bb5080e9", "indicator--15dffb18-e216-48b1-8697-d35eef083348", "indicator--be1d3f1c-0d4f-41ea-9ce0-a1652507571d", "indicator--66a9851a-08db-4ab8-a8b6-0c277120fce1", "indicator--f1e38a4c-074d-4759-8495-919878ba0b9f", "indicator--ce5bead9-1667-486c-8061-d4ec96b58796", "indicator--456abad3-e1be-40ee-bb73-c7aad16649bd", "indicator--78c5e376-a7ed-4c3c-8a68-a8d348d77f17", "indicator--51ab530b-437f-41ae-a6f8-89596c1a3f6c", "indicator--62b25d2e-e8b3-4ec0-82fa-51d6005edcfe", "indicator--de290c5f-a9d9-4a6d-8da6-556c996f8a17", "indicator--197c5a17-b79d-41b5-ab28-0f71d49ff846", "indicator--485e968e-909d-4781-b962-673af13d2670", "indicator--fcf69cdc-02fa-4de8-bf15-71a6e08de3dc", "indicator--ffe68835-9046-42bf-b352-8ba424ee4081", "indicator--260a7e21-0687-4cf8-867f-95a2ad0f92de", "indicator--7f5fd33a-8862-44fd-a7f8-3736c52c3100", "indicator--77d801f7-f991-4aac-ace6-19762b194c4c", "indicator--875e1218-0c32-43f8-88b2-1d8e42606317", "indicator--9ef45f4f-47a9-42c0-ab73-c303d213a050", "indicator--3452fd82-4584-44b5-906c-713e7a1d721f", "indicator--222222c6-a173-4b31-aa8a-6eeb595e933a", "indicator--6a043671-b19f-42b0-ac9a-89496386dd90", "indicator--da381d99-337b-45fb-9fc8-9446ce738ef1", "indicator--92371df0-3101-4100-8c76-7e7f3a060549", "indicator--42870f51-ba5c-44c9-b900-7d8a2c5501db", "indicator--df864aeb-cfe3-4eaa-8bc2-c50e368c7f06", "indicator--23b7d31a-f536-4bd9-8b00-06a610a8973b", "indicator--8e8718dd-4a7f-4d62-b0b3-b126e55f307d", "indicator--e5b72d51-2d32-4371-b095-266719d298b9", "indicator--f857813c-d013-4814-8317-9723ac7423f3", "relationship--87e7ea15-b4de-46bb-9d66-ceefe37901b2", "relationship--49178067-f991-484a-9814-d601e1382364", "indicator--a498e238-312f-41e1-82dc-aedd0ee7b808", "indicator--24821fb1-4011-4602-af51-62832bbf4585", "indicator--e077237c-3ab4-422c-b131-320238a43a45", "indicator--5d5c4be0-26ce-46da-acea-49a63c555993", "indicator--ac63268f-5123-4385-89b5-856e341cba4c", "indicator--9ca7d3cc-cab9-4ef6-890b-53eed9a790aa", "indicator--b06df205-18e1-42b9-8aa3-f9dd8c4c6ad2", "indicator--36389b73-8cfc-47c0-adbd-1a76debd51e3", "indicator--3684b31c-0657-46ed-84df-c7e895c0fbe9", "indicator--0f199760-3c16-4df9-991a-5135472d12b3", "indicator--8a7d25ea-e307-4db7-9e33-bf78c3fdb71a", "indicator--ba7382fc-fe1f-4459-b466-597fe3bd7d24", "indicator--0975c0b6-e345-4379-8e2d-9a2885e31111", "indicator--891ae8dd-9be9-4c47-b2cf-62abd15fa3f6", "indicator--bc773525-09d0-4faa-9d4a-ad8c8f138cc7", "indicator--02827152-d479-4dd2-a4ef-a3de64aece25", "indicator--c46dc80a-ac7c-4d77-9ab6-1be3e7bbdc38", "indicator--c818da11-b01f-4a48-8e39-685909ffe8bc", "indicator--7b856532-5714-45d9-bd12-32fb3984398b", "indicator--5ffb9961-3890-4972-9769-95cf3d2f9053", "indicator--2ae848bb-3fe7-4e7d-9fdd-ea9c9198b3b9", "indicator--dce1f2f0-aaf3-4b55-add0-e770fdfc8d10", "indicator--27494b0f-fd95-430f-a5f0-566d035a668d", "indicator--6d4673fb-64fb-49e2-a925-0c4c8b622bc8", "indicator--8dff43d7-2bbe-4167-bf6b-e57832ec35b0", "indicator--aeb5c5e2-af98-46e0-928d-42eef70f0052", "indicator--066b345b-0010-47ba-b290-69ccf78bf94f", "indicator--3c5e0277-45af-4df2-9b08-c410a22e16d8", "indicator--87af48ce-950d-461b-8a49-280af22fc30a", "indicator--4f7d10b3-27ab-4049-b472-00d5fa840060", "indicator--9a66fa4c-9a18-46fc-9dfa-6cb821b42fcc", "indicator--6cde7e09-a225-4d37-b14d-6cd4d3135fa7", "indicator--90f0f6d5-c81d-4792-a0e4-725ad1920b8b", "indicator--ae1f1684-179e-4d56-bd73-e641715a4b75", "indicator--8fdab63a-9fa5-40c4-a2f3-3645d8bdffe6", "indicator--50fad011-1254-4b2a-af87-384c9e7e1871", "indicator--480a7911-8aa3-4660-9fb4-61e8ff9b8abc", "indicator--15cc4752-5e46-43c1-af13-4d59682fac9f", "indicator--8efa11d2-8445-4299-8a16-7564c68f66fc", "indicator--e430bfce-2a4e-47ed-b378-d6a3d8277e29", "indicator--db4ac23c-e817-4722-8532-1354d3fef217", "indicator--bd463173-f901-46f3-bb6e-73df30d1458f", "indicator--be6a382b-6eee-4485-8059-014df216f8f4", "indicator--12df4fbb-c0eb-4e32-b2e7-d5734697a5cc", "indicator--0feabe3c-005a-4b37-9f8b-2b6e551ece74", "indicator--2ed971c9-3920-4319-b7d1-38bcea46774a", "indicator--e03d3ac4-0a1c-4bff-9583-1ee37fac78e8", "indicator--ae4b2f23-5010-41a1-b166-88d24362113e", "indicator--4cb1fb5e-f448-4ac6-a377-16a66975c397", "indicator--3e495327-18a6-4d8d-9e2b-52e90e6a3fa8", "indicator--3b63cf9c-3c11-4f00-9c1e-57fef8e4b9d6", "indicator--7d850217-b298-4e64-a407-713fd15b4f3a", "indicator--b142798c-4b3f-4393-935e-77ed2db8b5e7", "indicator--99c89ae3-2815-4a8b-85f6-82db2d58718b", "indicator--06617427-910f-4e31-9588-299a45ff5964", "indicator--e9b1e23d-24eb-4126-8a15-d8bc27db0512", "indicator--bd74098d-c93f-48ce-8606-0b0d059a8cae", "indicator--caaf8bba-d03e-410e-a083-2cca12e292d9", "indicator--13ed14a4-ff8e-4897-9738-8c4be86b8766", "indicator--c9b86b65-557c-4d31-8989-86e6ae28b06e", "indicator--9026c8e6-de9e-4645-b8a0-c95d6a2fe538", "indicator--0af62884-4422-43f0-a44c-385a2ea7678c", "indicator--55380ba1-5827-4a66-aa52-fd0526f7035c", "indicator--1c190837-f10f-4318-b433-c367b178163f", "indicator--6daaa8c3-8836-4fd3-9c09-1363d92fe765", "indicator--228af160-ad71-4a79-8efb-251e1c661a39", "indicator--0485a8fa-af0d-4182-b83c-734aec495950", "indicator--231a067c-c45c-4039-99ea-26abd3704530", "indicator--c822bd71-fcdc-49f0-b5de-7d58e4602a16", "indicator--19ead872-c2c9-4c1d-9eb8-358fed716091", "indicator--6504b2ef-7a8b-4757-a269-664d105cb42f", "indicator--369ac14f-7b39-4c65-a00f-c41cf758549b", "indicator--1f0d85c1-53f6-403f-be9f-b99a9cd09f18", "indicator--bcea93c8-c999-4a6e-b2dd-8a5663e8a7e7", "indicator--e7273d52-45b8-4263-b458-41329330d320", "indicator--a2492468-2ef6-4a67-ac8e-28f7e8eca1a2", "indicator--13eca6ae-095e-4711-8f93-d78b3e7f1dc0", "indicator--20e5e018-b9f1-4971-bce2-c52fc1083b85", "indicator--92cefab5-ea08-4713-b1f0-fb29b4169bb8", "indicator--a5d3f6bb-120f-412e-af80-0778cfc8243e", "indicator--0fc351fc-883f-4583-9b88-84834dd18b4b", "indicator--18a9a37c-4dac-47c3-b77e-292a66b33d59", "indicator--d7153524-0c7b-45b1-9e6f-597877baa919", "indicator--7e484cef-32f5-43e5-a96d-e01afcea1642", "indicator--2b1fd0ec-240e-4e64-b052-a271770b7af7", "indicator--692530dc-3816-432f-abc6-9f87dba113ff", "indicator--7755036f-effc-45f9-a912-3c16814dd947", "indicator--f8e8d178-ec1a-4682-9c78-cd3e197e0cfa", "indicator--4c4bb4a9-13f1-4051-9963-654fc4ecd8c5", "indicator--762d4844-fca6-43e7-b34f-7c1b8302336f", "indicator--cd04c02d-ad1a-4c51-93d6-e6cde191821e", "indicator--a5d2b4e2-1e2a-4dd2-8ec3-6ee9153603fc", "indicator--ccd57cc4-0924-4adf-be13-35add3b67450", "indicator--4f5b4a66-a69b-44f9-8009-5656e11a5c3a", "indicator--28d5197b-05d9-4189-a26a-29a55ff70408", "indicator--32948410-2195-441f-98ba-248fd4cd4473", "indicator--2b91bb55-781d-4859-bd97-e3c4c8f0f250", "indicator--cd86b8f6-3ce1-467d-9b45-d9942ed688ff", "indicator--d8a6312d-a6fa-4e01-bbe4-385da15a59ac", "indicator--25900794-c78e-4878-8439-9b825d9dc606", "indicator--714ceb6c-2e3f-4b77-b513-6fc185a0c21f", "indicator--aed0814c-8018-4bec-a697-55b9ade8a1e9", "indicator--ec3fe795-df54-4721-94dc-292955e8dbb9", "indicator--20e0cef9-539f-4e3f-b78e-af6d892e5f2e", "indicator--4a543e08-2c3a-400f-96dc-b6cc462aefda", "indicator--4a466ab1-0abc-454d-801f-a55bb715c3ca", "indicator--8ddc4fb6-bf2b-4a36-91f1-100307c7bbfd", "indicator--550e798b-a36a-4596-a06b-082be6bdd437", "indicator--02ad9763-cbce-4908-a1c7-1d14043062d3", "indicator--f0905a74-7373-4a30-980e-988bbf7b72c6", "indicator--ca37dce2-38af-4a89-8bf5-75e812ae16b1", "indicator--3b1f6f79-0ff6-47f2-9b78-349f58132acb", "indicator--cebd1e75-a179-4835-933f-6660196262cd", "indicator--1845117c-0976-4024-bf69-0b10054bb971", "indicator--19291fef-0295-4537-8b55-8264002e1c97", "indicator--a160b793-b73e-46a5-bfd6-437a3d1f039d", "indicator--060fd0c1-c7a8-4e16-a59f-107de44e1a81", "indicator--45f61068-849f-44e6-817f-8794b64647ff", "indicator--40f26000-321b-4873-b920-8f06b4462975", "indicator--e8d5e508-408c-442c-bc8f-7da4184ce49e", "indicator--0b2e55d5-61e4-402f-8486-864b6d597f64", "indicator--f0befd3c-8d56-4506-aeec-e6d4f79c2d98", "indicator--1f0955bb-61e3-4391-b256-b2815ca5bc02", "indicator--b64bfab8-8b9d-43e6-bed7-062ca2b1a22a", "indicator--7203f894-0512-4fa2-ac49-b292e9818e56", "indicator--2d59e0a2-44da-4d0b-b9b5-d7634641e6a8", "indicator--ff10cd8b-0b55-4693-aa9c-69ed8efe37bd", "indicator--13c34748-35d9-4765-8b8d-d0c77a7a6bfb", "indicator--847b9189-f78c-4020-930a-d851c025e071", "indicator--ff5949d7-fe85-4e3c-ab96-bb85bbe72949", "indicator--4d8a54ad-e159-413f-bfda-8dc536406e1a", "indicator--d9a4f006-dad8-4312-8db5-d3cee4ad134f", "indicator--2fa23a78-9721-4085-8b01-6ec45472d41d", "indicator--496d240a-8972-48b1-a436-f60ba66b49a8", "indicator--fd552e76-facb-474f-80a2-f0a86281be60", "indicator--193a1094-fc4d-43b4-9242-2cccd170bc8d", "indicator--ad704f96-abdd-4907-9ed5-a46b344b630e", "indicator--25d2cb48-1927-4713-a80d-74febb190090", "indicator--67af7f5f-ba4f-43d6-9649-2d286ad41ec2", "indicator--f31e53a7-10d2-4b33-a874-a1bcbfcf90d7", "indicator--2fd0d2a7-d6d5-4403-b9e4-988d369a1cf9", "indicator--02f4609a-951e-4e71-93ee-c2290a94e1ee", "indicator--01a03f5f-098a-41e0-9f8e-525967db0163", "indicator--4ef5d092-98b7-4307-a961-12640a7a80eb", "indicator--5d8b20b0-b1be-468b-ae7b-a7063bca1e1d", "indicator--0fd9edf5-1a66-4eb9-a9d4-dfa83417d1e5", "indicator--3fcab24e-2c20-409c-88c7-8ce53ba9e091", "indicator--86975c08-c588-45f1-aa84-9e83ef1de6b7", "indicator--f756c3ea-36cf-4989-be61-ebb47255020f", "indicator--4b953303-04bf-4ade-9f4f-3b4ea4c93cf1", "indicator--2abdeb75-4fe4-45e4-81f1-26875303df9c", "indicator--0a4c6c5b-98fa-4d79-a335-52cc92783580", "indicator--e0c2df77-38fb-4f60-a5c9-356c172cb5ce", "indicator--120972bb-12b4-4c3d-8ee2-2dce455db54b", "indicator--149c4fd1-d94a-47f5-8b5b-d1aa7cf9121b", "indicator--0cfa09a7-6748-4b0c-bfe8-64bcf06cd348", "indicator--419c67c5-8206-4f4d-a827-7acded4f8483", "indicator--417af029-55f3-4d0e-acfe-f9afd5e3c98c", "indicator--e1022fa2-e4cf-4811-a423-de376a4278b8", "indicator--9411a76b-cc45-4588-ba30-c32462ebf352", "indicator--c8e03a6c-e66f-44de-b93d-67da2a9613ba", "indicator--2c165704-f2d0-4a3a-8741-c5e684e371eb", "indicator--430ad5a6-1d54-4556-8450-bc229e822a62", "indicator--f1fb9f83-cc2d-4fb3-b76f-445e0ccf3053", "indicator--a1b3c034-8aff-4250-9062-87f0ad62b7f2", "indicator--7b478787-e984-4fbd-864c-4602d3f29919", "indicator--2da8b71d-9720-447d-9387-e2e1262fd2d0", "indicator--fc2ceb07-372a-4b84-b9e6-e043d391e621", "indicator--a58bc8af-2af7-48f5-8334-fac208ca58eb", "indicator--7f32e0dd-2c94-4f8a-a1b9-fe62f5091337", "indicator--3b649e87-9baa-432f-826d-ab6a80fd55be", "indicator--0c509044-126d-4be9-9aac-51ed407567ce", "indicator--2dc9fd08-02bd-4206-bd92-ddfe6b47ca8c", "indicator--81c502fe-1dfb-4dbc-805d-5c978dca6fcb", "indicator--415a26f9-e990-4bd0-9993-c88025f9342d", "indicator--78d63978-73d1-43ce-8e0d-bafbe5c6d7ba", "indicator--b0c08e23-bcb5-48fa-afc5-275796ac42d5", "indicator--702dca72-f219-42a4-af54-2e678aa1d3ff", "indicator--6d685897-fc57-46da-8cd0-fc56af9666c6", "indicator--94494535-d6ed-4fa2-9fb8-c0e7eaa2e102", "indicator--d0ed3550-1332-4319-9614-b803f4c0e4e5", "indicator--52cd1a01-cc4d-45cc-afbb-df0ef9c8fcc0", "indicator--5cd8d5af-5203-452d-989b-5398d0d6e6eb", "indicator--1c2702de-d2f4-44f7-bdee-47eafe0bd4fc", "indicator--2e9c16be-1d49-4c13-b33e-8b9e172e19fa", "indicator--c5d0d742-2432-4bd5-8886-88fd6ddb5654", "indicator--ce967342-66ed-4aeb-811d-54ba81139283", "indicator--db4ce18a-c2c9-40e7-a92d-dc466899c9ee", "indicator--310189a9-6c8f-41ed-b1c8-5646080d9e2b", "indicator--42d8af7c-6f04-4bd2-9643-c26127f353ae", "indicator--e5c23637-f294-423e-ba15-b9f000da691f", "indicator--628ef38c-a0aa-4135-b9fb-48c33351a477", "indicator--c32f69be-b43e-4b14-8d04-24b237d526e2", "indicator--6f4aaca7-e962-4033-9e19-dd0c09255377", "indicator--fece4f1e-266c-499c-9a36-3e8fabac0130", "indicator--358857e0-5282-4f49-9448-cd7bebe63fae", "indicator--251c970c-86dd-458e-af34-ddc54333b16a", "indicator--678a8b03-c3b5-4611-a6db-8ab174ba7ff9", "indicator--9dbcb8cc-fe97-4f11-9d76-0572d9e62b9a", "indicator--88b7482c-824b-4547-8a99-8831eeba9046", "indicator--68f3f0da-a7a1-4097-9477-c2955317a244", "indicator--90d7f0bd-c31f-41ea-8416-b5b405a2a711", "indicator--65cf0498-1d55-4700-a723-f8212ced53b2", "indicator--679d0020-9ab8-4e0d-a757-4efe1ba149fc", "indicator--7a4f2acd-8e07-48c6-ad5d-93304a944550", "indicator--c20afa06-63ea-471a-9b00-d830fddd3332", "indicator--a144d976-8dc6-40d5-ae89-b4b08a3cacf8", "indicator--599a41fa-9a7c-4d16-bcfa-bc8652144702", "indicator--030b0389-e944-4cce-8d1c-2e9ae57dd595", "indicator--6375cf64-785a-4d20-a70b-b7236c0de6fd", "indicator--e28a2962-26d1-42da-a293-c4893684b78d", "indicator--f34fb272-b2d9-455a-9a5e-fac3f59cccf2", "indicator--085a36ae-a251-407b-8265-04da9b8eb1ba", "indicator--f0f3d9e9-6b13-4fe8-9217-e31ea23c4678", "indicator--4d3b5c29-cf35-4b13-bca0-74e37f2e5e61", "indicator--ed42b355-2d9c-4636-88dc-44fe8ee1be7f", "indicator--ed285ce8-71a7-4375-b121-f359d94004c1", "indicator--10659ced-06ff-41d4-804f-89db4ff02279", "indicator--8edc0e25-6307-437d-babf-5517c7b76ebf", "indicator--297c1215-6fd2-4ccb-b7e5-cfdaf8dea291", "indicator--e573f02f-bfdd-46ef-b39e-7f861a90a649", "indicator--8aee72f5-06db-4894-822c-21857c84bc05", "indicator--5f29550d-c5d5-42a3-9279-836c028d8dfe", "indicator--c2a19076-e0af-4a0d-b0c0-c10613b5f7d9", "indicator--488bf11d-1bdb-4f38-a257-c67d32d07bea", "indicator--9396340b-3864-4e1e-a86b-03abb76bd804", "indicator--8e265571-495a-4555-830a-9f15b3f52a75", "indicator--6ed71367-e21d-4d6f-98e6-5c92444e34f7", "indicator--b7248402-8366-424b-9270-68b94efac4b4", "indicator--383c1111-c9b4-41a1-ab0d-3473b1506c55", "indicator--764b5b6e-03f4-4048-a470-d4e708e718e8", "indicator--9c346864-6e6c-4913-b137-8f2024e3b2d5", "indicator--d9027a5c-52a6-4efb-b222-49ffeb3f35ea", "indicator--236db97b-4525-49d6-9947-a230addea0c8", "indicator--506d0555-53bc-48f0-86d4-3416a9c2450b", "indicator--3755314d-1323-451d-b9e4-fd86490532ec", "indicator--276a2bdb-705f-470b-ad1a-09de35eb1c94", "indicator--40763683-bc8f-4d4c-b3f2-6aaa34d516a3", "indicator--1cefca79-7ef8-4a86-a26d-d512520c5b8a", "indicator--20eb1f92-a3c5-454f-a7de-ff743373124d", "indicator--1366f038-2803-43ed-85bb-704acdb43fc1", "indicator--ba3f7db8-10bc-48a7-806f-48f04704f490", "indicator--2ac13aa3-21c1-4f4b-bcbd-8a9375179fa5", "indicator--7a847ce8-ad4f-459e-828e-6c5c6d8627fa", "indicator--bf0e72a2-bb6f-46ef-9c13-595037f72880", "indicator--1220d40f-426c-4c8e-b8af-4f4191057c8f", "indicator--58d1724c-809d-4e09-acd7-9b6b5f9fce73", "indicator--e4dfba76-fa7a-4975-bbeb-47a44e6cdb67", "indicator--dce0b90f-2245-4248-9716-7d4bad331ef4", "indicator--a2201be5-59bc-4321-9673-f6f650b4a72f", "indicator--fac0f310-679b-466c-a63c-9acd71fb96e6", "indicator--514034ca-307f-4c79-92af-26511a4252d7", "indicator--7457f18b-3106-4318-aa52-a4e6825d5902", "indicator--262925bd-9d65-4cd7-bf1a-4fa92af9c5cd", "indicator--2ebb22d8-1742-4931-8cf6-376b63c21b03", "indicator--2e54f8af-9cb6-4f81-8055-7c192e56c3bb", "indicator--1e7a7ce9-a18b-451c-9170-d3347841691e", "indicator--4aa08fd7-8171-4605-8168-1c43ec396ac7", "indicator--09ede764-c004-4412-afa3-6a4865c3e432", "indicator--0e7a499f-8194-498a-9ab0-d8e45b7268bd", "indicator--0b78c085-dcae-4be7-aee2-9c9c9b9222da", "indicator--ed2a9e32-2127-49a5-a5cc-4ce9ed39a21c", "indicator--51d865d5-a93d-423b-9a58-260bda92102d", "indicator--3f9a3457-e14a-4795-825b-df47edf09b7a", "indicator--a17c91e9-f2ff-4241-9af4-e4bc182cd6e2", "indicator--bfa4dcce-15c6-4b0f-9e43-563f18ae1da5", "indicator--86827b68-7abf-461e-9d9f-7e517fbe2259", "indicator--6971ad9e-1f7a-4158-a3f5-ccb2c3d0b473", "indicator--d24e9668-c02c-493d-9100-966d085e1f0e", "indicator--c0e1e24a-a1ce-41d3-b214-a4bf51193ff5", "indicator--c6c703cb-f84f-4fff-ae71-de9e565048ca", "indicator--7d920fbb-ddc2-410e-8934-5a3934b945a2", "indicator--2410263a-f09f-4be6-865b-2f82031e2a61", "indicator--eb15e696-8780-4848-949e-784cb94cc27f", "indicator--dbe586de-575d-49d9-8f77-ae9d43776ece", "indicator--46bf4df5-3d83-4870-8b38-90f13d2f6396", "indicator--1328ee3e-e966-4eaf-94c6-ca9a70ce3128", "indicator--f8d2c541-2efa-4fee-adaa-8ae96e82ea80", "indicator--4c1cb9da-b363-45b5-8185-fbc762b5cd8f", "indicator--9c6bb7ef-a35f-4e46-b1f8-c6e15c71d3eb", "indicator--29176532-4c8b-47b2-9f4f-d4e2aebc27cb", "indicator--b4c5a013-2d37-4821-bf37-fb4839b959f2", "indicator--2e1f3543-c89d-4771-8a94-77a216a5db31", "indicator--a95aead4-e227-4205-908f-132cca33b375", "indicator--233e5668-8d06-4e72-abbb-fb6aa81fec4c", "indicator--f20ab0a3-e06c-45ac-a45e-0cf44a4e0fda", "indicator--0fea2752-bdfa-40e8-862a-c71d2db8efdc", "indicator--12813488-eae7-4458-a0bf-80260c90e775", "indicator--e23d2d5e-7bad-4fc1-9c14-995b619b5c12", "indicator--5e13fd4a-585d-47d7-8ace-9d0b03ee0b24", "indicator--7afb0349-c124-4a65-baff-9b6b6e6277f7", "indicator--d92941a7-702c-42cc-8dbf-3e2e99a4aafc", "indicator--bc4fc7e4-ec88-4623-b950-be5ba23d9a40", "indicator--6596bede-ef2e-4cc0-837f-d75170fc5552", "indicator--50a55b0d-52bb-420e-9dd6-b87965b73ebb", "indicator--52a53f9a-62e0-4886-b8b9-7735050bde58", "indicator--d7bedc41-48b2-434a-8f5f-79ff5390136c", "indicator--28e842be-fa15-4483-a16b-0de73b007146", "indicator--c85e5ee3-c4fc-4256-b4c8-2fd4b5aaf2d2", "indicator--eef21838-8fec-4615-8cbc-17c330c1f47e", "indicator--41d76d25-13e8-44d0-bf66-d6cae5a019fb", "indicator--d437de04-5dbd-469e-9bb4-f869653f9830", "indicator--a872774d-d3d8-451a-8944-4d24c13e691f", "indicator--dc515bed-754c-43dd-b3ca-52d0a52087c2", "indicator--ed0ed25a-7eec-4cdb-b28d-97481b59f8d1", "indicator--ec9cc7ac-777d-4dda-9a66-e2da9ad22e15", "indicator--3ba941f0-c6ff-489e-91b8-37626e1897cb", "indicator--c12e665d-67bc-4ea8-8cf5-1d77b61b3564", "indicator--7be57c8b-c8ed-471f-8e05-95a9adacc551", "indicator--50f3abac-b561-4575-8324-a79780f6017b", "indicator--f12ac9a9-c9db-4df6-85df-7750ab68a8ec", "indicator--bafcb6f7-41bd-4ef6-b688-9afd2ddbc46d", "indicator--90bd5ef6-1086-453f-8a9a-977a87530eab", "indicator--e7e4f457-8a80-4006-a5fc-658f227490f9", "indicator--8c50f694-0165-4457-8ec0-7c022438b43e", "indicator--65e221af-5c4d-43a8-a9f5-37108e1d26a8", "indicator--eae00135-d6e4-46df-9363-5e55ab27f014", "indicator--42456fdd-3485-4e86-8621-d300116a5dea", "indicator--2d2c7381-78f2-45c5-ab7e-38dcb381f088", "indicator--a37a76df-e0f2-405f-96bf-0a076ca4bb32", "indicator--e4cf4d9e-bdb6-4285-8b89-674c4632d095", "indicator--8f2fc2ef-3d01-4328-92a5-e931cee9b946", "indicator--eb4cc04d-6d8c-4da2-b92c-3e55929647d9", "indicator--d1c5ab73-1b56-4277-8f97-d1331c306b14", "indicator--f973e385-add5-4faf-b835-525bb853a44f", "indicator--dcb74292-db70-4b2f-8515-edf900e20501", "indicator--39e2ca99-29e9-402c-87fc-e7eed2cff3bf", "indicator--fcea0d0d-809b-4e8c-8c5c-ac865ae42af2", "indicator--d97b914e-e7a1-4bad-9e74-d5010e2df394", "indicator--4b21476f-1601-4b95-9a70-954d2d655acb", "indicator--8c7725bf-8fef-461f-b888-cbfaf17d8b62", "indicator--3607810d-96ed-4716-b8bf-6642b7065f1d", "indicator--0751fd6b-65d3-4fe0-9e77-4634efa310ec", "indicator--64f3624e-3ff1-49a9-84ff-dcd6a81967c6", "indicator--c5b992d7-4f9a-46d7-ab7e-99a0e77cbdb4", "indicator--d4c6e426-ed3f-4fbb-a95b-d52e6d7df68e", "indicator--6fb8fcde-8cbb-4832-b95d-fa2d3ad8b24e", "indicator--d5877fd4-2b4b-4250-a04a-63c88e38e496", "indicator--47aff0b2-da12-4ccb-a546-4ae583b3ebd0", "indicator--8fcb4e05-21a1-44e7-a868-c1560db9a3f3", "indicator--2d333d36-864d-4d7a-843f-b20f88c7bdbe", "indicator--a704b156-b9cd-4a0b-a776-3a7217f7cf5d", "indicator--8f3d8b6d-d2f2-45af-bd42-33050b64dada", "indicator--3b27caa5-7937-4ae2-9b13-ba543e36bee7", "indicator--55504b0a-9f16-4dcd-b657-33faae59f871", "indicator--9daf682b-6228-40bd-a7f5-d878ec535cff", "indicator--badffd5b-6bd6-451c-8109-a20daf8b38d1", "indicator--cb9bbe48-5e66-4920-917f-4a13565c60c2", "indicator--2fe2392e-a3f0-46ea-beaf-8dba3e35c0d0", "indicator--c1c88fa3-aaf6-4465-808a-96ae373db691", "indicator--c80a26da-1b7f-4ef7-9126-2ec4f1ab1dc2", "indicator--661de781-eedd-483a-8232-98aeb84fdf38", "indicator--040da3e8-c986-4424-9c27-11d5dc46fdb0", "indicator--58c3ae4e-27b1-43e1-838a-c83be6358c5f", "indicator--39185f3d-c011-4784-8b4c-287f933b7f5f", "indicator--aa9c705d-2fcc-4357-af4e-5cbb5418a8e5", "indicator--8745b8cf-2895-415c-9e00-72d89aaf4c18", "indicator--e13c512f-2437-4c3e-9d66-e965a6ee0d74", "indicator--1376a524-adb2-428d-b1ff-23e89f6c169d", "indicator--8eb21432-3be8-48cf-baf1-3bf09d62a672", "indicator--04d8510a-c5d3-419f-9a59-76ce6d62eb5a", "indicator--46a5c433-0070-4ac0-86a7-b79f894f3c99", "indicator--e690a1f2-01ec-4237-972f-3f0a4a91903d", "indicator--bc8e680c-fd46-4b5f-a517-27894e0480c1", "indicator--1138329a-bc2b-40e4-b6db-04bca5502e7e", "indicator--8f19bea0-cfb0-439c-9443-63e836a889b1", "indicator--974d7e3b-09ba-4600-b74f-a7cf83f25537", "indicator--d89d8f48-ebc4-47d8-b5ce-a6873c4fea62", "indicator--ed817a48-04a5-424b-a398-751c512d18db", "indicator--3d9c9e1c-9d5d-4b9d-a994-d6b0f633a200", "indicator--dd332467-1027-4704-af87-299977935b1b", "indicator--510137dc-7519-40f8-a7b8-ffbd5154546f", "indicator--68018e65-9db4-4b56-a74e-619fe4d7c536", "indicator--b8c5015c-5790-47a9-9550-d0523b36448d", "indicator--b6d4e813-154e-4581-b676-56c2412e8925", "indicator--17525a90-9c2e-4f4e-a005-553dae485548", "indicator--310c3efd-eca7-435e-ae97-9fafebec9107", "indicator--65971157-e791-412f-83ab-d3f5d621f7b0", "indicator--51c19ce8-2ad6-4565-b660-2fa0008a689f", "indicator--34f7ad32-7fe0-4e67-b8ce-0c9c423976ee", "indicator--19598eb6-3a72-48d9-bb8a-e7f687303db3", "indicator--d90978b1-73ef-497a-a68c-6afe1656a8ab", "indicator--fbea92de-b1da-46c3-95cf-2bc32cc6cb0e", "indicator--b78f0dbf-2928-4d38-aae9-0ba4f07d7805", "indicator--877b6e5e-edac-4945-a994-098c014184e7", "indicator--feba9d6f-a11c-4ceb-ace2-0aa5dc263804", "indicator--207b8f4b-9c95-40d2-a23c-74390ba735ca", "indicator--044cf923-a552-4301-bd79-f1c1201e846f", "indicator--bcbc89b0-0455-47d2-8ebd-a738128de22a", "indicator--2342b2fa-4630-4046-ada9-7d44a2be22eb", "indicator--b909d40d-08e0-4b24-a386-1816b7cd95ef", "indicator--4218063f-9954-4f07-92fe-dc8e62259b5e", "indicator--4cacbb52-a5b6-47cf-82eb-7be0182f3331", "indicator--d8f99233-920e-4211-aa7e-59b3768be743", "indicator--87a704ad-f949-4a88-9d10-6be03a4b74be", "indicator--fd9d1444-db75-423b-b8ab-74f36a00392b", "indicator--41d101c2-9fe2-418c-af51-870b9744f149", "indicator--eec2f4b7-7b09-4810-b6b6-6cdfd400f399", "indicator--f437689a-28f4-4b14-a81b-201085f53a56", "indicator--a3adff71-cdb1-4cf1-b13f-c07e6f0fd9f0", "indicator--52681c04-55ca-44fd-8bf6-c2c6ea6ac02c", "indicator--339dd9d5-8b85-4e3b-b8da-630988b799c5", "indicator--b9a6b81c-5b41-47e1-9e51-634002b72ceb", "indicator--2f3926ca-36d0-472a-8e73-2311d52c8712", "indicator--611da415-94d1-45cb-babf-3bc3ea387748", "indicator--8623c503-6c9a-46ac-9871-8b0c84bd402d", "indicator--821f6c3f-3d7d-4a06-8204-9e56451f651c", "indicator--400f50e0-0d4d-4f39-9d44-2c5328bbf94d", "indicator--b8ad5fd3-5232-4762-8539-9f0dc11a80e0", "indicator--53bcc58a-7819-43fb-992c-f0031765b8dd", "indicator--93dc0df7-d85f-4869-bdf5-a4edc23b0a57", "indicator--19aee356-6e80-4d0c-b1f1-91d2f5f9cc83", "indicator--cfbfe503-ec73-407c-bb1b-042af74485c5", "indicator--ba0a854f-f905-4d84-9f63-eebb2cbe5554", "indicator--aeb757e1-c918-4066-9fe1-eba06df2bda5", "indicator--9d401a33-ea86-4c81-9153-35df7dbec984", "indicator--c8c8b479-5a7c-400f-8eef-9c87adf87ca4", "indicator--1199e354-8597-4169-a901-8b4bd859897b", "indicator--603c3e25-63b3-4c5d-811c-a020b6549ab1", "indicator--321c8ad4-a1a0-489e-a05e-ac3b9aa5c260", "indicator--34d64a8a-2c2a-4e9d-bfde-f42e29894370", "indicator--3a6401ad-a99d-47cd-b8cd-c83c4a0400cf", "indicator--bbca9be9-7a4d-4bd7-98bf-6af15829569b", "indicator--5e0c8a5e-6981-43f8-8606-dd162e1c5524", "indicator--ef460da6-320a-4de6-a7f3-ce79b9766951", "indicator--7009c0a6-4a01-43ca-8604-99f8642a9a21", "indicator--ab9ea8bf-42e3-4b3d-8d2a-b98ed27453e8", "indicator--d18085c7-8da7-4d49-9a36-3223200646eb", "indicator--e3b890a8-fb5a-486f-ba24-a6f0de9c144e", "indicator--fc329607-d89f-45cf-aad5-e0598d54e18b", "indicator--be4460d1-c32b-40f7-a422-8b3a06d3d583", "indicator--5d7a828a-c9d7-4349-ac56-0a1773f7dd4f", "indicator--12626602-8ec6-4050-89b4-505430b58ec3", "indicator--d612dc65-38ab-48d4-ac25-4d8c3b5d7cb9", "indicator--8a3710b5-b311-4000-ae51-257f72d09d6a", "indicator--c31d4eea-4a8e-4f07-b013-adf8c93705d2", "indicator--9b6982fc-fa7e-4753-9392-37dffa9da801", "indicator--4ee561fa-974e-4b6b-8fde-bbab44e723e5", "indicator--708ea594-d9c2-48dd-92c3-79301bd21848", "indicator--73e4fb4c-34ad-4a6a-ae51-e550ed3f982d", "indicator--8ade82d8-ca4c-457e-97e1-cd1f9e582d12", "indicator--33fa71fd-ae6d-46cf-96f4-989890479b3a", "indicator--24315b6a-6803-493f-a06e-d490d9914aae", "indicator--412dc6cd-625a-4b73-b51d-8fda7f631f27", "indicator--6ec18890-c3e8-4903-bb62-90ceb0e0a4d7", "indicator--a9819637-8885-4336-9aed-87d827df7ce7", "indicator--1be3947d-046e-4af4-af24-eb680eac48e8", "indicator--4a04055b-de14-4048-a52b-037e1a5bac65", "indicator--ed20ed63-9e6d-4ca3-afa0-03265d2bbac1", "indicator--4f1d8854-088f-4e93-9f83-b60bff3935f8", "indicator--62fd4005-88ae-4df0-875a-271fd14e6574", "indicator--db7e4570-707a-432d-b633-d37f72ee7fe7", "indicator--68cf8cee-07ba-48a7-b838-c917da172199", "indicator--69e43062-9ffa-4f3f-aa5c-98a654332fa2", "indicator--25f4e2df-c197-434f-812f-fafdf411f6ed", "indicator--2dd0c7ea-4da9-4df4-9996-eff3b9dbb4c5", "indicator--8d3b60ab-57f2-4457-b532-62068a5d2318", "indicator--e22aad05-1bf7-4500-af47-437188ad02b8", "indicator--cabcd795-8c63-4e99-8639-d24f99a1cad6", "indicator--e3d7a300-1956-4398-b07e-6a6cc19aa893", "indicator--3b93230c-b7fe-4910-afb0-37e00e4b11f8", "indicator--d863b8cb-fe49-4ffe-aeb0-80fccdeb3195", "indicator--454b3941-bba4-4d30-bda4-4cc0d8d9ce83", "indicator--f1ac25e6-2a9a-4911-8bc8-676f60e22714", "indicator--5d71b08a-34b2-4424-80f5-10a76add5396", "indicator--3aa8c09c-4e96-4f59-b615-9d8b2c586bb7", "indicator--be5ac6b3-c8ac-4bd3-9113-6c4e88791452", "indicator--d8d4f0d6-fef5-48a7-a92f-d351f7622e1f", "indicator--e2138ed5-187b-44aa-896c-8f34b3b213c5", "indicator--81de4763-d714-44da-b46c-4dd4f2a0f8f5", "indicator--a65e2fbd-4919-4259-a991-40c1fbf909a8", "indicator--10d1e90f-1d50-417c-aff1-ce7300706947", "indicator--6ff5d311-61e8-4b48-b881-ca95b0640aca", "indicator--6b8f4b2a-f64d-4f1f-9c32-e803cb751048", "indicator--9f0ff0ad-0917-4771-87a8-b2ede6514ee7", "indicator--c5695cf2-99fe-4a0b-802a-fcdc0e853366", "indicator--36a4ff72-dcdf-4e4b-8582-e16e5eeb6060", "indicator--40dcc21e-dd67-4e92-a2f4-20cc027f3dde", "indicator--df40938f-3697-4f93-afae-9270b827047a", "indicator--4b1c6e55-1376-44e4-968e-17959a19f249", "indicator--4616fe16-d3b9-4fc2-9a63-891e1c9a4997", "indicator--11e25e2c-e6f6-487f-83dd-008aa0e4ded9", "indicator--c608fcfc-a418-4970-bedc-a7b0fc570245", "indicator--30deaba9-d97a-460d-bc1e-829a8ab6d198", "indicator--2f5c30ac-5a48-4717-ba1b-ffcf5861cdce", "indicator--ad0de4b5-d1fe-40fb-9ed2-44224621b26b", "indicator--ab54169f-ffe4-4497-812a-f957cfeece1c", "indicator--0ce4d400-c6ab-495b-a4be-eef2c61b31d5", "indicator--4d562268-5838-4e91-a859-bcaa8a540157", "indicator--d6fbd63b-9c81-4db0-835c-86c966b393dd", "indicator--4790125d-228e-4185-a099-417ea90e78cb", "indicator--e265d72b-40b1-41c0-90ec-5833a1f97fbc", "indicator--a783ca0a-41b0-4b1a-adac-a21e45985fac", "indicator--4341f84d-a676-450a-af1e-68e19a63555f", "indicator--a9cc9564-137e-40fa-b244-7546b3bcbd27", "indicator--7460d3a0-ba48-4d62-ae92-336703a14f79", "indicator--6fcc1794-0a9e-4466-aa1d-6705f3064938", "indicator--6c41a178-b342-45fa-a376-dd2426e28146", "indicator--3f66f501-20cc-4362-bf12-98206839bfa7", "indicator--3ee10233-eefd-4601-8312-c1021438378e", "indicator--46b205df-560f-4d5e-918b-cacc360d4170", "indicator--aa05a537-039b-4928-9372-0eacb7edfd8a", "indicator--cf25e22e-59d5-4534-95af-9a344f934af6", "indicator--eed951ce-dc63-474b-a5e6-5ba13287151e", "indicator--3bd570e1-2a41-4e50-8062-8479dae51370", "indicator--345b5f66-5c36-401f-b54b-4647735c4c43", "indicator--f3718c0a-385a-40a0-8f0c-915f0ed972b7", "indicator--7655b50d-4d0c-4610-9c59-928ef9cee0cb", "indicator--9c23a4be-66f8-4027-9ed6-adca62d0ac21", "indicator--6dd0d1e0-8b8b-46c7-9ecf-7acfc4a71fc1", "indicator--bf66b0ee-d47a-45f7-ad42-2f4ccc1d42d2", "indicator--d61d9f38-cc87-470c-a947-e72cbd4e64fe", "indicator--4eef0547-3dfb-4600-b2ff-e0713f43d682", "indicator--2e9dee53-8f09-457b-9f73-cf1a7c77bf6b", "indicator--a36a2573-dab3-47fb-a947-6e651366d77a", "indicator--262459fb-2241-4fd2-8191-e0d4a716b52d", "indicator--a66c4742-5ff9-4610-bb6e-a0980f9f081d", "indicator--8fefacdb-b849-46d8-8a0a-32d3cb09ae8a", "indicator--2fdbdfe6-1836-4579-8747-6a354d6b7921", "indicator--86770d59-449c-4faa-bdca-4bdd851e4a77", "indicator--58d7d123-db28-4ffc-98ab-89e3f3f8717d", "indicator--7851d731-5594-4431-96d1-e15150c21375", "indicator--7b60dc5d-b883-4ded-ab0e-2a02b16e050c", "indicator--4cebefe3-f467-42ff-adb3-3a5c1792f55a", "indicator--3d67cc1e-bc20-44d6-b5cc-04e48351c326", "indicator--f073ecfa-3093-4531-9a07-212cc9abcf1b", "indicator--bbbe7bf0-4049-4c8a-9ee5-7d203398682f", "indicator--1745dbe3-c9f2-4fcb-86d8-07e509baeee4", "indicator--00c108ee-d374-4203-844e-4b7f7a20f4d2", "indicator--3dd7ceff-9930-44aa-912e-0bd49cad6678", "indicator--7fdb9280-266c-424e-ba4a-c5447614184e", "indicator--481a7c14-9593-4b10-85f1-a3254d9364be", "indicator--e28b2efa-0f2c-405b-8f45-d2faee0eed95", "indicator--30036455-a894-408e-9042-d910f63cddfa", "indicator--323f0b96-d17d-40ae-817a-d1f7272543c4", "indicator--ee0e75b9-7fc1-429d-a1b4-6cf7b718a8d3", "indicator--1b568805-810d-4974-beb9-cdeac9bfec98", "indicator--4efca338-d964-4683-b2a2-b0231ad674df", "indicator--d72cc0bc-1f6c-45a9-b940-7ea26fab422e", "indicator--e322c15d-b337-4585-8c6f-eec0c4078bb9", "indicator--591d563a-d9fa-4635-b974-2daebf9a44e0", "indicator--e0016e27-6cfc-471a-85f8-072a902e0ab1", "indicator--3e26da76-e586-4b0d-90a7-eb2d33c3fb33", "indicator--25dfab35-bc30-46c5-b39f-5d5d09418fe6", "indicator--c4930e13-6d88-4f29-8cf1-2bfd7b37ec2d", "indicator--ac17ce1e-b03e-416b-8aa7-c0124e7f07c3", "indicator--d9bd59bb-9f39-4466-b17a-7608cb583505", "indicator--ba585560-e646-4b7d-8174-fb34e17fa334", "indicator--41a2e073-7b4c-43a6-85f4-13c132ea8e85", "indicator--feb7d691-9236-479f-81bb-754ae141005a", "indicator--b24c18b6-8dc6-42f0-a877-d62cdd2a2cbb", "indicator--d375e183-927a-471c-b575-0851e3eb3cc1", "indicator--d7725e62-f9d4-43eb-9f2d-0666adfd8eb7", "indicator--85409ade-1f39-493b-865e-645eadec5a00", "indicator--1d8adf63-b909-4ab2-8f86-daf18f89df8c", "indicator--5c8157a3-e848-4a02-98df-2a02b02bfe20", "indicator--47d766a9-8c89-492f-9772-f8f89a99ab56", "indicator--02ec2f2c-cc0d-4455-9144-9ee4dad83766", "indicator--5ae74411-ba8e-486e-875a-22e0e80fcacd", "indicator--2276d8f3-ca0d-42a2-a7d3-8a96416d8f86", "indicator--c00bf032-2a5b-42b1-bbad-e8c408d0580b", "indicator--7311d48e-afad-41ec-bc25-c86fe67bf999", "indicator--c3aaa730-038a-4d97-bef1-22ee44093be5", "indicator--2d8acd82-6a4a-4077-9f60-fd0452d61252", "indicator--c7e9a8ab-b062-47d1-903f-3a21c5631dfe", "indicator--506f1c60-92a1-4daf-9c0d-f69d29e0a282", "indicator--46b0ee6a-756d-4b56-abe6-0454eee6bb82", "indicator--0cb63f01-c088-401e-a5da-7652836da6a9", "indicator--31d51e0d-9068-4d83-88f3-a3427ec8868f", "indicator--216aa210-0ee6-4232-be04-e0b9d31cd8f9", "indicator--cd18f2d0-112c-4733-8c51-15aa3243dad5", "indicator--21f6d102-ea5c-4b9f-abac-1817458b2e4f", "indicator--e10fbc63-2839-4ee8-af24-f3ffec2e2d0b", "indicator--252cec7f-3b6b-4fcb-85af-503729727d9d", "indicator--dbb30801-df97-414e-b476-c6d98e3a352b", "indicator--a2913610-1b12-45c9-8132-3442dc82e0f1", "indicator--efeb93b7-1612-494c-a030-d962e6ff130b", "indicator--0d2f821b-67be-4501-8f85-84a08cad0590", "indicator--5f4ca37c-c3b2-4770-837e-c455c17567d7", "indicator--fa15b7e4-53fc-400a-b3e9-522faef7f7b1", "indicator--f8d54736-9098-4ce0-8231-5e3acc74f47d", "indicator--30f30fe9-b234-4953-9f98-dce9c4cf2566", "indicator--516a6d42-3c38-43bb-80b4-b1d25fc7c1a0", "indicator--c6041814-5154-4bbd-91ce-072bd9301b9c", "indicator--05bbf0fa-1979-4a39-9944-f4a7fb626f13", "indicator--a4eb8c54-fa27-4b31-a18e-9dcccf2efb39", "indicator--da7f630e-c419-4f22-bd73-f54f9755d1ef", "indicator--ad74d81d-de89-4bdb-bd62-180232500328", "indicator--aec2f28a-ed60-4d7e-a0be-89700bbab37c", "indicator--9f95aa76-ec29-4909-b9d0-d95ab8f9ec91", "indicator--0f16d35a-c9fe-47ad-a9fa-6e8657d120da", "indicator--2fc7e76e-cfe4-4825-9878-cbcd0343de2b", "indicator--1ae89dce-e095-4670-b9ce-7b9c4139cefe", "indicator--a72db38c-5de0-4354-ba48-d111063dfde8", "indicator--e3aed847-7ed7-41cd-8762-caaefdc0eac6", "indicator--01ace3d9-7ca7-4d4d-909b-62fedaf7259b", "indicator--fdbd14f6-428b-4cbd-9481-38d0b573a6c4", "indicator--82fe280e-a92a-4982-b06a-9532740f5221", "indicator--3ffd17bc-d1d2-4dd6-b83d-99af4a40a928", "indicator--72ba4186-ffc4-4456-86bc-12e0f2a8a559", "indicator--410207e8-1c6b-4008-9c34-84feaf0ec2d3", "indicator--3ce1de7d-3c47-43fa-9654-99e70cda2143", "indicator--e43045d5-5457-4478-b360-63598f3b7153", "indicator--d7a03b93-1a39-457d-b1d0-51c2649bab96", "indicator--b39bc5e6-4145-44b9-96f9-119adff796f1", "indicator--d721ed95-cc29-499b-acbd-9f9aa9a9e979", "indicator--8d2e645b-d25e-44a5-be30-7df213271f35", "indicator--241553cc-e5e1-40c7-861b-f6d040005e09", "indicator--2ac89d0f-bf75-4c8d-a35d-9d50c62bcc9f", "indicator--37d15e31-a6f8-42af-b15d-783b3f507c97", "indicator--0c3850f9-16e2-492f-95f7-f81114a29f16", "indicator--175db251-a515-478e-8fad-809dd0159ff3", "indicator--9aff8ac0-f14b-4bc2-9483-4aec6abd44f4", "indicator--9c94955e-0fc2-49fe-8ce0-f3f15624f726", "indicator--4490fcc5-19f6-42c1-913b-41cd303e996f", "indicator--0226d159-742d-40ea-9cbc-ac6c1ed0646d", "indicator--27ee1050-c6aa-4593-9072-8d08cdd4cb11", "indicator--34461f19-11bf-43fe-b52c-e4aaf1e5a773", "indicator--434067b1-3840-43bf-abdb-27097e5a030c", "indicator--1ce593ba-c7f0-4292-afb9-d29b78d81024", "indicator--c770b9a0-2e08-4b2f-882b-5974805d02b0", "indicator--c61b232f-b05d-4c1c-9a11-193a292523b6", "indicator--d5583c2a-3592-409f-8395-3c0482765a6f", "indicator--7b1fa6b7-e065-44ac-8218-b26ef02c80c0", "indicator--61456a95-3eff-4e74-a6af-bcbb8368dd34", "indicator--15f6aa23-619d-4ba7-8451-faba44c1f059", "indicator--6f0d8b82-9e78-48cc-9bf8-e988e70d21a8", "indicator--7470ac00-a13a-4294-930d-c20b68ef3f87", "indicator--29047b78-b270-4bd4-9afd-62758b236e25", "indicator--49403272-54c5-4580-90de-cba73e75d097", "indicator--48062fe4-a68f-438d-89f7-c524ef740a31", "indicator--d6652877-ca71-47ab-81eb-d8b7bdf2cfe8", "indicator--b386ca13-4bc0-41c7-82bd-d5beaef6dc5c", "indicator--6e67bbf5-8b04-40d4-a8a9-e4764ba64b12", "indicator--427bb615-f4f5-4aae-b712-93c1a027d057", "indicator--bfaa3cd9-9df1-48c5-a65c-0229f33745d2", "indicator--86f18cc4-5106-49e6-9d54-92c9b0115870", "indicator--c5470a94-40f8-4f99-94fc-666fea3a1ae4", "indicator--9b09cab8-5610-4438-b552-369e008b12d5", "indicator--5af9588b-bfd9-4d6d-848f-d0ca0a253e5d", "indicator--ae8c0ba7-d375-4fb0-95f7-9f7aaf6e2efa", "indicator--eed63c40-1e03-413a-9c71-74f8240fe5f2", "indicator--525270fe-00c7-47ca-b825-c608644898f6", "indicator--0b794a63-9e3a-42e3-a713-5517218e0405", "indicator--4802f53e-336c-4bf6-97b9-ad5e8c602422", "indicator--12652e8c-b90a-4c39-9cfe-ab3759e9e436", "indicator--5a31c963-adbe-4370-b14c-1815ef01cea3", "indicator--65e204a5-cb3a-4ac5-b5db-537555af2a39", "indicator--de8e3b5b-091c-490b-bf5d-c21e2b320601", "indicator--c6426ef8-0f50-4de0-8ba3-bdadaf76972c", "indicator--4cf58b22-d459-45cc-94e3-5a1eb043a73a", "indicator--f7072c09-fc30-4fe0-9584-e76564892510", "indicator--4af0747e-445d-4660-bcb3-4668a11241bc", "indicator--bfee2a6c-5696-42d6-a877-135e9d9587e9", "indicator--0c6fe982-06a2-451e-91db-f056a8a8bf89", "indicator--e4994195-d186-4aed-9f66-ee05e7a10476", "indicator--93c95aed-02e0-4f3d-b37c-83ff142b3ad5", "indicator--685e0962-9be1-46dd-b525-217150f8c0a2", "indicator--6085f1c3-75d2-4fe7-acbc-3b0331995de8", "indicator--8bb0c151-8deb-4ac5-b6f3-229d6295a78c", "indicator--11e734c4-e44e-468d-a11a-a3c8cb1e2f7f", "indicator--37677d4e-32e7-4801-8e5d-f22b798daf0c", "indicator--a63560b0-fd1c-46ba-9ae3-50397b5ddede", "indicator--f549bdde-770a-4322-9798-cb19a7371d5f", "indicator--de6f2c81-2a8d-432e-ac12-86380a838550", "indicator--cd198807-45e7-45fe-921c-b5f04b9f7e2c", "indicator--a78d8d19-e079-42b9-b409-2cacc56d9282", "indicator--501da9e6-2e5d-4b84-974a-1fd403d32655", "indicator--1c461b06-fb84-42bd-91e3-ed4050d39ab8", "indicator--621dd4a1-7d60-4117-9809-18abfdb6a5d2", "indicator--97492e3d-48e5-420e-9180-6ce9c2fb037d", "indicator--97479f5d-1ea0-4eeb-99a1-49010095420a", "indicator--0e8689d7-4917-4d3e-8926-1791cea318f6", "indicator--4ac021cc-ef6d-4f0a-9080-8b7d5a070e0c", "indicator--01d70549-43e6-48f6-80b2-388a169ae75e", "indicator--bfd40760-5e43-4411-82f3-5b0f9100725f", "indicator--4365e36e-4ae4-4c5f-bd63-7df7accc1b2e", "indicator--675ffd9d-d9e4-4f4c-87eb-e7b64b457b9e", "indicator--6d64ab66-ae3a-443d-8b44-8e2025d690d1", "indicator--20ce1aed-59bf-421d-8283-16f2d0efa9c9", "indicator--4ff04de9-632f-4cba-8af8-53ace55fb9d1", "indicator--a238d829-f488-4382-8297-b2b36fb5cbb3", "indicator--9ffa9437-20aa-45e2-909d-4acf83357d80", "indicator--29d7f9b7-d0d7-4259-948a-bbbfaa0e44e5", "indicator--c5cf23b4-9df9-46c9-85b7-adc020ddb978", "indicator--fbf00e8e-34a0-48eb-9243-072fdef9161c", "indicator--9ba705b6-c51d-4cc8-ad2f-7aff29082178", "indicator--caab400e-8227-4753-9028-a1bb74d106f9", "indicator--fa1d7766-6e19-4adf-93fd-9acd09cd246d", "indicator--318f8a56-e1e7-4aa3-85c2-24edb44591bb", "indicator--bf2f692e-f2dd-49f4-b740-cd2fbfde984d", "indicator--05552ef3-9cd2-4e42-8791-1d450d8311a7", "indicator--7b235527-6bff-4b6a-beac-ebbdd13e0afa", "indicator--86ce3779-78ac-46db-b741-2ffb64d9179d", "indicator--bc896995-9d70-42ae-918d-2ee57f4b6231", "indicator--5ffe163a-0650-491c-8cde-13bf0f35cfce", "indicator--ed80c8c5-ee46-4089-9b90-c01678a11a5c", "indicator--e8e5dc26-825e-408c-b528-6d273a708415", "indicator--79dca342-f005-4dc9-92a3-1980121e4431", "indicator--6551a65f-7dce-4559-9b2f-b0178b7c6803", "indicator--2c8e37da-2fc5-4175-ba68-8af29bf7dfd7", "indicator--5096a337-956b-4ddf-b088-1a3244dab845", "indicator--8f36b0fa-62fb-4142-83a7-ab98da52bf4e", "indicator--d56c4e90-21c1-43a0-af64-10d8e664a4da", "indicator--cedfa886-1ff8-4cde-9e5c-513e3155a5f8", "indicator--9bc427e0-8c78-455f-bc95-c2ff70b6d2d3", "indicator--d289e2cd-510b-4336-9f87-c33e4d5f24c8", "indicator--8b8194a8-c541-4d54-9e2c-706ea309c719", "indicator--f0b1ab89-caff-416c-959b-c2f1c43da4e8", "indicator--c4850601-34ca-491f-8d73-d6e1228b9f5b", "indicator--f9019b13-ac93-416c-b582-5a7dfdf76136", "indicator--0cac1945-9c03-4d3b-a7f3-e40e10fbde81", "indicator--307cbcb2-7553-449b-8131-5069775f5abf", "indicator--27d283b3-8692-4dbc-a655-e9c9b400d2c8", "indicator--7dc6cfea-59ae-4929-aa03-ca678fc3c8fa", "indicator--2201577a-59c7-4b0b-a82b-92acf62ae571", "indicator--7fd63423-2168-418f-a32f-c6bebf6b2db4", "indicator--54650e8f-7498-4b58-a865-e2e5a93f9299", "indicator--4a1447cb-c124-4e3f-a11e-da0d8f43d3bc", "indicator--0d5b9c91-bf39-408d-8bb0-06ea35f6eab8", "indicator--6c3c98a5-d950-4994-b180-8b8348afd7c4", "indicator--c4fbd1e2-84ba-4b54-906b-502e941b5ac3", "indicator--71e8adff-5814-4a3a-b237-736228efd321", "indicator--6ef41e2f-0b7d-47f7-b865-9a9d577fe237", "indicator--55d063e5-a7ad-4c40-9945-5deccac12171", "indicator--13b30084-917c-4f73-8dab-712aefaeddc6", "indicator--3abc5d81-f7bd-48b2-b6c8-e50b268ce73e", "indicator--e2d85086-b59d-4b1c-8e6c-1ad7ef3fa0d9", "indicator--ec945bee-af73-4e5c-9149-d7f24c5f143d", "indicator--0a7caf12-d5f2-496e-8342-a6cd3940ef25", "indicator--d8ac4f16-0aa3-4994-aec8-87a4bfecf7be", "indicator--98e3c9e4-0e2c-432e-adc0-4a08cc2825e7", "indicator--133f2040-c7c9-422e-89f1-9a606e1e6e7f", "indicator--1efb179c-330d-4cb8-9856-7967cef45c6b", "indicator--533ca672-4363-43e0-9677-18491cf4f9e7", "indicator--4c0c7d4c-7685-4337-8cfc-fef8dbf409ff", "indicator--2bf93895-7908-40ee-bb8d-327cc23d3afc", "indicator--67654acb-be19-4973-8592-35796ff3d096", "indicator--54b752f6-cc3d-4c62-b5e0-7dce98941ca9", "indicator--068defa7-1a75-40e0-a891-2f5cf87d4358", "indicator--550fb328-2025-4ca3-9f9a-254b4c5bf353", "indicator--293e7ed0-b0e3-48a9-b872-0dea3902e01a", "indicator--01cb3318-cf90-45a7-8193-c16435ed7d64", "indicator--134cf67b-8153-4c57-940d-c4d2fd856fd9", "indicator--bfda4e4f-22cc-4cf7-83e3-920db87c1ff4", "indicator--0373f3f4-62d7-4816-b0b1-9f56a36c8ae6", "indicator--57d67cca-6e4c-4b98-8304-272640b6fb5a", "indicator--48f6e7ea-f9d2-4241-8c60-c05eea414d69", "indicator--72b60463-7749-4c00-90c5-ce79277e6b9c", "indicator--01033800-fca7-4b8a-bbf8-c97af7841492", "indicator--b2e9fcb1-59a6-48dc-9aa5-d912e6b49b36", "indicator--ae679f90-d0e9-43f2-96ca-0eca6bd0c032", "indicator--b26ff8fe-2d77-49b1-8bce-730a0ea8ffdc", "indicator--2444798e-becd-49fd-9128-45c68f072ce1", "indicator--0293cead-27fd-46ae-8fb1-4d08104e632c", "indicator--4c8e89f0-6120-4439-87c5-9b160553cad0", "indicator--9550fbd1-9a2e-4569-9f45-79abf289477d", "indicator--dcef6487-4ec0-4a59-982e-b8cad7d9c6b6", "indicator--0b195376-7354-4866-9c73-552520f24f56", "indicator--57a8b963-5656-40fb-a746-0c4537055136", "indicator--37f61995-df84-4f83-aa80-cf982f3f8fbc", "indicator--f95db201-448d-4a55-8a64-f08f9576cf3b", "indicator--13445036-e9cf-4479-acec-f7650af71833", "indicator--6c573acb-84b6-4404-8aa4-de4f08df890f", "indicator--b489e23b-4330-461a-9560-53daf74caa0f", "indicator--f38ca222-cd92-44bd-9099-dbc1df84b8b5", "indicator--05639714-babe-4443-a87f-fb73aeda182d", "indicator--6b995a6a-88ee-4773-a524-a7e3bf7514b4", "indicator--31780896-cf82-44e2-b775-8e621ba14b67", "indicator--1eaaf84f-f695-47a2-b6df-736ed1e5c17c", "indicator--a16c4852-cc9b-4f7d-af34-5973223a07de", "indicator--b3ad9b24-1c58-45d4-9c74-5d3581769f23", "indicator--ef5413c2-53f2-420e-b6a9-4dab07d6a674", "indicator--caf22f40-f4bb-4b70-872d-ecd1c8a35060", "indicator--715c30b2-5063-4190-94b5-71ff1a551a64", "indicator--06e444c8-f7a5-48dc-942c-ed1ed408824c", "indicator--9bb7982f-9ee2-466f-b4f4-a280c9a6cab7", "indicator--5428ad95-6e69-467c-a6ac-843eabb81177", "indicator--4b68b2c3-d953-471b-8a02-6326aa7b62b8", "indicator--1c66f773-d70e-4d6c-9b18-211fd8e8e75b", "indicator--373fc0cf-156d-404f-a43e-66bfb088c476", "indicator--e04807f7-5645-4f4a-a81a-9d8e39443ed4", "indicator--9f466a5d-1ef1-4fa5-9527-81203fc3963d", "indicator--e95e80a4-51d8-4273-a720-4d2a81a06f88", "indicator--4440adc0-5480-432a-a3db-103e10a82f43", "indicator--68f910e4-fded-43c2-a7a8-9587e00f4ad2", "indicator--66b0f5de-f37a-4b85-9265-1de8459e08c5", "indicator--5b585fb7-89c5-4fab-8fce-37e04a3873de", "indicator--6e166cef-5ceb-4af0-8002-4178957a7c18", "indicator--84fcd66c-5b77-4c36-b372-eb11af081d3c", "indicator--f978e494-9ac7-4f76-b2ed-8867496805a0", "indicator--bd06caf5-06aa-464e-963a-83d65b9f21ae", "indicator--9b5fe56e-d5d3-46b7-a062-64e81260b1ab", "indicator--eacd599e-8ece-41d5-9893-84c3ecca7668", "indicator--01f770be-91ec-42d5-a497-7584a1d02b31", "indicator--ed6f31b5-29c3-44d1-8362-3a78728aa351", "indicator--a7d05b7c-6c2a-4901-b800-a44b027cdc96", "indicator--89fd6ec1-cef0-4328-996e-dda9b08e4a34", "indicator--6ed7cdda-c624-43cc-b39b-72a558278504", "indicator--b66ab2e5-73dc-4f80-8cf9-61a4c105f868", "indicator--c7c5f321-9358-4bbd-bba7-1f8ef0fe7ac5", "indicator--4b0b33b0-7c24-43e5-9720-38c11de87deb", "indicator--18ad83a1-dfa0-4a95-b5bd-6a2d25b4ffa8", "indicator--de60bf3d-bdd8-4813-a4f2-0ae673ee371c", "indicator--0be25625-c73b-4134-a5f8-b0a9103db4de", "indicator--4eafe69c-bf9f-42bc-a7a6-9772bf92e9ac", "indicator--7f1b4230-14c7-4c3f-8287-e85444c783f8", "indicator--e810d201-d59c-40d3-8c77-3130a8c6d517", "indicator--346d3c7b-6c2a-42a6-a010-83719251eaea", "indicator--d5ba82c6-e40c-4577-a2b4-c2e4cbd6d6ab", "indicator--4e57820e-f2a3-41cc-be77-a55a2ab547b3", "indicator--8ee434f4-0a7c-43f8-949c-a629e279ecfe", "indicator--354db6f6-8175-4f92-9e2d-0da5e73a5800", "indicator--3d283ef6-ed96-4ade-acc0-2cfd6008be5e", "indicator--20d69402-ec5f-4150-b73b-35e20343acda", "indicator--a779d79f-020e-467d-ac67-691dd36f6de0", "indicator--070e99eb-c334-4f8e-b5e5-bf7cd8750611", "indicator--11638f05-db95-4df0-8f8f-16f7fd176f18", "indicator--faaeb945-a322-4447-b170-09bb7b20c7a5", "indicator--789f2397-9d59-4d46-aeed-3047682d1acf", "indicator--d5d6fcc8-f09c-418e-8b7d-4f70694d6ccf", "indicator--8374832f-4421-4111-b434-ef2bab6c144e", "indicator--290f2a6d-999f-460c-8417-37fc965fb306", "indicator--ef150d3b-5a8f-4bdb-96be-9ea1a7d16388", "indicator--e3864e11-2cad-4c80-93c5-74d6fbadfcd2", "indicator--b3370d6f-810a-4265-abb2-16718f40b6ef", "indicator--18bc5717-a8ec-4b3e-8f6d-4ae972ea5263", "indicator--55bc5ec4-881b-4841-b16f-dac47dea6dd6", "indicator--5f28c94c-893d-4cfd-a54d-973a124fbf59", "indicator--2e7daba1-84aa-4e35-8d21-7c8325164d86", "indicator--3b07f198-1684-4faa-b817-8a73710519e8", "indicator--b60a271d-cd62-4c11-8b16-6c53f084900e", "indicator--c4034c2c-73d0-4876-a0ad-81461e182ed9", "indicator--a091893d-ab16-4b7b-b85d-b61b545bcfe5", "indicator--3a7f09c2-d453-49ec-b1bb-4b8fb5550951", "indicator--d2e772e4-aa9b-4f3d-b653-d2dd3b0b2218", "indicator--3a7352f9-e881-41ac-99a0-aaf4c0ad6bb4", "indicator--b4b069bb-7a0b-4b37-9a7f-f365e67fa03d", "indicator--c34be93c-6753-414b-a9d4-c74f4d511e40", "indicator--4b3af671-1bce-4e6c-8775-1e85136b0495", "indicator--a620b976-6d49-48f2-84fd-413aadedb2f9", "indicator--11fe834a-49d5-491e-a30c-c0fbf4092b48", "indicator--9d7e2694-c989-4e34-ba46-471cec4a5e45", "indicator--507aeb8b-3dbf-4abe-8d09-6bf89e38ad68", "indicator--1ca21322-0a63-40c7-9535-a1ebf93873b7", "indicator--023000b1-325f-4a28-8dd3-59e99a566c4a", "indicator--f8f478ea-1359-43cc-811d-bf484808f6ea", "indicator--91ad16b7-33a4-4cd9-91b0-7b2f9a1df208", "indicator--963143e2-c819-4c6f-9c04-60c3f40b705a", "indicator--a6b25921-0534-4c06-a4d1-6147ea0b020b", "indicator--8cdf0c54-60a9-4f7e-a9ce-ddbac52b70c6", "indicator--6a384b53-c5b2-42fd-ac8e-6dd08c955fbe", "indicator--9fec49d6-bd9b-4f24-b4a7-df130b3063f2", "indicator--de5b7e49-855d-48c8-972d-64d68ddbb809", "indicator--f581547c-4553-4dba-8fec-8a0d2e4f96a5", "indicator--dbb38a99-f35c-4024-a263-856e41b6104e", "indicator--70bbef01-6bbc-4a1c-b057-235b98e094e1", "indicator--6b76bceb-4e8b-4b9a-b980-cb6e95b367b8", "indicator--587f6bea-41b9-4c07-bdaf-9fef3c18b03a", "indicator--fa6a018d-221b-4c6e-bae3-48551fbe6c0d", "indicator--ed8ed8f3-8724-43ef-bde9-a05c77b80fdf", "indicator--d02abba8-84ae-4417-87ab-45cc81e45996", "indicator--e11db751-0718-49d5-bb86-d56c5c44284e", "indicator--a0724157-b527-4712-a387-dee77d13aa5d", "indicator--fd588a0e-5a4f-48da-82c4-4bc6101525ff", "indicator--60dfde0c-b989-4c88-97b4-d68138905c81", "indicator--e120bc7f-fb69-438d-bf3b-b74709f939cb", "indicator--8fef347c-9a13-447a-ab25-d94474649a5c", "indicator--5134bfbc-a23f-46d8-a868-141230cbb281", "indicator--61e35d9d-46b2-4468-a2fe-719fa0886d52", "indicator--e8f1a125-dc2c-43e3-b500-70ff86081122", "indicator--cdda09c4-9369-48cd-aba4-507ea569a7a1", "indicator--5d47615c-831c-4860-bf66-7faaf7e2fa71", "indicator--080ec188-7933-4734-b417-3b1e86f6be92", "indicator--1ff8686d-dfaf-4acb-ab38-be95314574a7", "indicator--0210abe4-214c-40f2-acc1-0e31acaa9fc9", "indicator--e91c1734-bd56-4076-9dee-e026ff2007de", "indicator--f3602187-cf74-436f-a5ba-6354fce7ff41", "indicator--03523639-5d14-4527-8341-409cd85c5c3e", "indicator--8287a27b-066d-420f-8f42-ec4a1656e829", "indicator--edb91098-eb9f-41bf-a8a2-daf83dd9203f", "indicator--0ce4aea9-a314-4aab-af5b-cdde6b24f2e6", "indicator--3598986d-6c80-4e59-8451-d27fc20205fb", "indicator--79ddaeb3-1aad-42e5-980f-db41ee327725", "indicator--4d4e6c33-43cf-4862-b88a-b0e9b2ad607a", "indicator--111cec37-9e27-4bb3-a45e-710d95581005", "indicator--984134a1-1d97-4a48-8cf5-cadcd6c85cb1", "indicator--537341db-0275-4a9f-870b-31a80a8d94aa", "indicator--bcf06213-37d9-4c5a-9a82-61544b4b684c", "indicator--956f434f-ef01-4db3-b1d3-2005cf099ebc", "indicator--51ddc36f-59aa-404a-9b2e-5bf8ecbb2a50", "indicator--8d235249-7ecc-4d18-84b6-cae9d7481bb8", "indicator--7749aac3-64e3-47f2-98d7-8f067c549003", "indicator--df004408-e22f-45d5-9638-6344b127ab12", "indicator--7ea2eb55-3ea5-4703-a800-3576ba93d97c", "indicator--b4a626c2-8d31-42dd-9158-860a208be634", "indicator--08dbce82-6527-4e3e-bd3e-a96c523370b5", "indicator--832f0e7f-c80d-405f-ab7d-436c8b5b7a0d", "indicator--5f2c1d84-0ee5-40e2-8378-090c32ca1eb3", "indicator--2a0c2bd4-18e2-43ec-8d19-fe17e2612d88", "indicator--537f4cac-fc64-414b-9cd0-5a9ed78d2c54", "indicator--992550f6-8402-4f35-9082-2aad90bfdfeb", "indicator--c0e689b7-facb-4b5c-a735-c7fab6e43c21", "indicator--3375f4a8-85c7-4a34-aa92-6a850e8eee5a", "indicator--38de4e6a-a2c2-43e5-b4ba-2128806e6943", "indicator--1016cf55-7d4e-4ec4-b20b-804bb926128c", "indicator--e2b45024-09fa-49e0-b78e-7ab8547cae1a", "indicator--6233c014-d6ca-4c26-966f-b2c9aff123fe", "indicator--886b3e67-cca6-4eba-9165-3debf020df92", "indicator--5a23e932-63aa-471d-996d-b2f865f766ce", "indicator--a823879a-457a-4e44-a6a6-1d6e6f7a4ce2", "indicator--86d8ba95-20b9-4eab-9bbb-33cb86f6c5b2", "indicator--568a3341-328e-4d64-b3f1-88ff4d76be08", "indicator--287449c5-be97-4c41-b6a7-f82b9a5e58a1", "indicator--6059cf4a-ad17-443b-acb2-5628f2754c54", "indicator--549b36c5-b718-447a-b4c8-c7f8817c6722", "indicator--c602c2f6-80d3-4ba9-b48e-c733fde967a1", "indicator--8a3fa6d0-751c-4d65-a63e-a56d4b2b8665", "indicator--1c60b37c-ccd5-4606-81f8-8887f5ff58a2", "indicator--d87ce36c-8577-49d1-bae7-3e84056e1330", "indicator--c15e87f1-c236-474a-9748-d7bd0d114faa", "indicator--d61748d7-3ad7-4779-a599-beddb96f23ac", "indicator--4669892d-09ef-4d5a-bca9-7d7d66f75c6c", "indicator--9102021a-0396-42ce-82e9-8dd4b4af52a1", "indicator--9cff35a1-c2c0-4607-a2c1-86fd0f6dde34", "indicator--5f6cdecd-53e7-4df7-ab3d-8a5f97f7381a", "indicator--80be97fa-0815-45a2-9a82-e93407c7b2fc", "indicator--c6bd0509-d3e6-4c50-a29c-12c96bab741d", "indicator--f5649c76-a760-45db-9a13-31cc46594e01", "indicator--d8b533ea-06db-4308-8931-67ce86754c2a", "indicator--44e643e3-5b98-4cb7-8bd7-31f7c8093a0d", "indicator--f9bf4f44-3226-4ff7-8707-5845fc1dbb27", "indicator--046b3ba9-44db-4fe9-bd59-cb3f42c8c6b9", "indicator--27c865f8-487a-429c-9b02-49e8c3fa237b", "indicator--acaec4ae-816f-428a-91a0-e3431633fe21", "indicator--3b88d1fc-a1dc-4921-bd31-918a53915b8b", "indicator--6470e9ee-ca9c-43b1-a5ea-4c80739fa22e", "indicator--8066a9b0-3c4a-4312-8166-6529bfea61a5", "indicator--0af0592c-840f-4f1f-a178-afda53c1de3d", "indicator--5ceaf0b3-04a5-4ae8-af6b-982c1a607c5a", "indicator--c9393e68-253f-4617-9036-7bc606a965b5", "indicator--4415e18a-fe80-4c0d-82a9-9c56ef416859", "indicator--cac6c63a-a3c8-4b27-9f0f-ace77774799e", "indicator--a7c01009-a417-40ed-9fda-7351bc0063ff", "indicator--3c0eceb2-f25a-499b-9614-bcde3f1f86d0", "indicator--20f1a080-b50a-4527-be9c-fadb1a5c19cf", "indicator--1e199463-014b-4eba-9016-033a2c25f0ad", "indicator--c52e1064-af89-48d0-b43c-bbf5b81bf65a", "indicator--5c6a1477-5493-42a9-9618-186baa523f64", "indicator--90cc2ac1-fb29-4835-ab32-4bdfe4f6e5e0", "indicator--e9b52e09-4ce1-439d-a02c-797eb155ca30", "indicator--e69fb261-2d3f-44d4-a0aa-e3ac08809009", "indicator--c855a3c2-08ed-47ef-afc1-89a983f6553c", "indicator--4ad1e648-c8a5-43b9-8a24-353acc833b00", "indicator--d3cb1251-7a93-400e-a4da-c527ffec57a9", "indicator--6b07be6f-c391-4a86-b9af-14d3c0813d3c", "indicator--22ed0f9e-93f8-4183-a339-493f9a7e42d4", "indicator--9e2b1c7c-e3a6-4e4a-929c-ca05d7694d6e", "indicator--c23b1855-b80a-490a-9f68-f5d6414ca702", "indicator--fa1dc448-d0d2-4d9e-9a05-e827dc233836", "indicator--187814ad-ff03-457c-99cd-630c9d33cacb", "indicator--b2f61e16-2bed-48ec-84fc-2b96d1aaeeda", "indicator--0b36b2c2-b53f-449d-8e5a-e9193b9098a4", "indicator--9f348223-316e-4395-9307-5fd56f2d9ce9", "indicator--9681ef04-25fe-4aaa-8298-12435ff1f2ae", "indicator--e8cccc4b-d0f6-490e-bab6-2fd11500582a", "indicator--d1b610f8-4aaa-4cc0-95d7-761ff17b59a1", "indicator--3866b32f-1370-4891-97dc-30d872c7378d", "indicator--eef1603f-e912-4c61-9c2e-63bf1a508068", "indicator--0c551f88-5919-4aaa-90f9-9743afb96c57", "indicator--8fd1821f-16e1-44fa-a20a-4e37c0f9c091", "indicator--0e809f7b-fb45-40c8-8032-cf3b06f2a284", "indicator--aeb26806-950b-4b7e-8dc4-eeb186b2bfcf", "indicator--e3932db6-0fc5-420a-9099-9050dff9c4f5", "indicator--22a5462d-5558-43ca-abf1-8ebd8da74090", "indicator--d0c69659-cad0-40a4-86ba-6a752973b674", "indicator--357a1bbc-34dc-472f-98a7-1f9e5670cfcd", "indicator--1cb0e75f-b84d-4ea3-977f-f68450d89652", "indicator--f4e2f21d-abfb-446a-98cb-6eea735e0b14", "indicator--9cf4b60c-b11f-4766-a4b9-1ae808342dc3", "indicator--7caf7e19-0880-46d6-b14b-c843cb01367c", "indicator--4615657f-9032-45f6-bcd2-bf7ce2c3a84b", "indicator--0b3ee56e-f331-4b95-a591-d06de3f49582", "indicator--0321da3a-cc69-4860-89ff-3b17cb69c678", "indicator--1d5e528d-0883-4555-b2a8-efdc15ac5b63", "indicator--529673c6-26f7-44e2-b792-6bbe9ab42e39", "indicator--b1d6e880-b0dc-47ce-a511-dc4c554088a9", "indicator--c6cfb279-dc33-49cc-a7a8-a17e57a8657a", "indicator--2f2ecfba-28c5-403b-9336-ba4b64925173", "indicator--e1a7bd66-1fae-4d66-806e-bc8fd830026d", "indicator--0dcaf00a-813c-4a19-8e7c-bce66f577af8", "indicator--e7c86edf-7f57-4f77-9499-5e4ae30f3657", "indicator--5c86f0a8-a6bd-4287-b55f-eb5bce74fca2", "indicator--2876d8aa-15ad-487a-8e16-cef88c990192", "indicator--132e4f6b-e933-43e2-885d-ba5df1905420", "indicator--ce27653e-4288-40b6-a36a-5e83bcf1c0ad", "indicator--de78d557-c6d0-48d2-9ad5-e688837a1199", "indicator--ac669219-6405-4b77-9bf6-13c7f3586d37", "indicator--eb1bc122-c211-49ed-a8df-986fc92a8a7f", "indicator--b5a22e02-7f24-4c19-b050-14286c789634", "indicator--ac65fe50-909a-40ae-8a28-040c3010af6f", "indicator--493c3202-7cbe-455f-bd4b-f0dab85faf5c", "indicator--09e3c083-e430-4875-b7d9-7c36eb7f2030", "indicator--b935688d-b40f-4ee9-ae56-ee58296bd2f0", "indicator--743d4d97-efe9-43e8-8261-34a377f40539", "indicator--7effce0d-b957-4531-957b-54b8369fea7d", "indicator--784c4b08-945c-4cd5-82c4-c9b59289ff49", "indicator--b159a9b8-a057-4418-9bb7-b059a2431d29", "indicator--bc503755-0706-4871-85f2-ebfcdd43ef81", "indicator--9f297eef-948e-4c26-b4ff-09f8fbfafb60", "indicator--55c121ce-96b5-486c-a145-809b0c1bc0d4", "indicator--0cc72d0d-9ff6-4908-ad8b-3f52cb716b4d", "indicator--da62afa9-c4e6-41ce-8e09-b027fdbe8f48", "indicator--9941595b-645a-4c68-a74d-927801000f39", "indicator--2d0b6f9c-f384-43e2-beda-9422a48331ce", "indicator--e2210546-0b5e-461b-89dc-4da31cba63ef", "indicator--eb2bb72e-e85c-4a5d-988d-8e16466818b6", "indicator--0eb51960-2e8c-4cc7-8259-2dc0efd78acf", "indicator--7d1e171e-0d3f-4a0a-91a9-cb6d0be197f1", "indicator--e4b87fd3-60e3-4b2d-beca-d2d355d0eb29", "indicator--96a09c30-c07e-4051-a25d-36805fe4a65e", "indicator--06cdd8d3-621b-4518-b478-107188c12f06", "indicator--1d8354ae-549b-47f2-a7e7-ada8f1112068", "indicator--82bb289a-7ba4-4717-87e9-a0b2eda5c8ad", "indicator--5bb75b26-b083-43e0-ad44-624a892b1337", "indicator--e54c8cd2-f4ff-4ae2-b4c5-8001d100adf8", "indicator--6228101e-6dd9-4165-97e3-0a3b2648cd77", "indicator--7516d307-a4a1-4924-90c7-a707904af84a", "indicator--e608a98d-5cd8-4aee-ad94-82ec4725d484", "indicator--e5d218fd-7aaa-44c4-9073-dbbbfd323817", "indicator--9c216059-db3c-41b5-8ee0-73d8828a04b6", "indicator--921e5bec-9087-454f-aa27-2e81d2ff999d", "indicator--64e074ad-5743-4993-9eb9-969a775a656f", "indicator--614e41b0-73d7-412f-9fb1-ccff5e4ae6d8", "indicator--e9f9e04d-d210-476b-85a8-ac117fcf1da8", "indicator--abc28a05-dc9b-48ef-8734-b8a320e05527", "indicator--b8b0c227-2151-4961-a4bd-7e96230fa4d5", "indicator--93e58519-a3ba-48ec-9ef1-a0722e231a28", "indicator--2ed5c14f-7ad1-42e3-b8f6-968e38fc2559", "indicator--21d3a70b-c55c-4c23-81e3-8684517d4858", "indicator--a6f76dfb-7848-4a5d-aed8-2b5d029832bb", "indicator--6737d4d0-44e0-496f-b1be-8741c2abfe7c", "indicator--c508f40f-9a00-4b72-aa08-e956fe789d00", "indicator--f469cffb-1a15-45e9-b9af-7dbea42c6714", "indicator--53ccb301-57d8-4047-9326-056ad965ad08", "indicator--024e0a85-1e58-45ed-a639-0382484ec0fe", "indicator--af6671a3-7a3b-41fc-8d33-2fb1ec46f46a", "indicator--90d9bcd1-d04d-4034-a009-25d53371886f", "indicator--f54fb5fb-708f-4cd2-92e8-8cbbca650797", "indicator--f21b239c-3eac-4a48-8ac4-114c1eb241f1", "indicator--0e634266-fed1-4a20-8f0a-66e0d3b77d5a", "indicator--f1321fd5-ab94-4d15-80f0-35209656bef0", "indicator--9c0874eb-cfdf-4de6-939c-292e4ef33d56", "indicator--cb59d463-4a90-44e2-930a-1a62f369a991", "indicator--4c6ef190-1757-43da-90f2-f19fcbbd40e6", "indicator--cd02d608-a321-4895-85e0-5f15d6ef1700", "indicator--61966cf3-5206-4713-8deb-1861eec570b5", "indicator--30208106-7956-474b-8e04-de79097b8edd", "indicator--5058f6a8-5491-4e99-b084-81845d0bcc34", "indicator--ef54ed2a-ca0a-4cf5-aadf-9285d8e5b08d", "indicator--a07fefff-5bdb-4c27-a7db-4e2a721bf1a8", "indicator--25219bb7-8796-42e8-adbe-273bb26b061d", "indicator--5d634e53-b664-4491-b296-9e759a644f5b", "indicator--f6fd56c4-cc6c-4993-991d-210d7d2b4482", "indicator--6a554dd3-bf43-480b-8470-4e6358491afc", "indicator--5144d918-4db9-4ef3-9e75-46cbb5bd6cdb", "indicator--87b31296-4b19-4c6f-92a7-0d329afd9049", "indicator--d80d055e-e6c1-4623-8de2-d919292c471e", "indicator--d9775033-aa27-4a1a-8f3c-4c28dfa92b79", "indicator--9e18a80a-454e-4a4e-98c9-59923a199615", "indicator--2d6ce734-f10a-485c-a845-faea13764b74", "indicator--3d5fd859-a2de-475d-a83c-644385526fae", "indicator--cd6fe7d5-c598-4fff-b0ff-dcd711c79fb3", "indicator--05cab5c8-eff2-4764-a154-dc6bf21622a9", "indicator--e429a57f-9c37-4b14-b6d1-26b3f4bf759b", "indicator--a6d636bd-f51e-4fdc-8b43-900b283b230f", "indicator--c0292ad7-45f9-47dd-8cc7-956badd846cf", "indicator--302a3cba-8c67-4396-a969-da1a229103ce", "indicator--2bdbbe73-3021-483e-a29d-e1a06345ce76", "indicator--4c8870f8-b52e-492e-83b5-33fe7af69c6d", "indicator--343e729a-9018-433f-aaea-85f45a88eda5", "indicator--ceea03aa-6115-4e41-9da7-614009f49c02", "indicator--cc7b7d75-13c7-4f4b-8bd8-4e704ba53f86", "indicator--34e3045b-a13d-4c4f-bbb1-7f940efb61d6", "indicator--4c437e4e-3830-4a7f-a3a9-afe42094e871", "indicator--b6fbb678-64a3-49a7-a9f4-9d0fe6371e82", "indicator--adc90a5c-63ef-44c6-95df-62c8fc02aff0", "indicator--4a663198-5b72-4fac-be9d-b94f06fd376a", "indicator--017f09b0-954f-49e8-8f95-edf5ceeb27aa", "indicator--81ab0f93-d95f-4133-b31d-514768ed2081", "indicator--c3768bf2-b5cb-49ac-8fa5-4d11e3b27837", "indicator--99324761-32b2-4dce-99f3-a602f28658d8", "indicator--a3dfb548-d113-476b-86b0-8aed25eda221", "indicator--df8bdb02-9963-4c5b-886c-bb48bc0c84ca", "indicator--90947b5d-f6ad-4dec-b195-47474cbc9a6c", "indicator--ffb18794-ad20-412d-b781-f2a1c1f604d4", "indicator--c945ee16-04a7-4c44-b967-e08d2b2ba158", "indicator--3bb3613c-43f7-4e73-a6a5-d120aac87e86", "indicator--4955c0cc-c287-4d0b-8754-02ee56ef9443", "indicator--9315d426-2fac-4550-9d9d-7d7883aaf9c9", "indicator--0be2d811-40e0-404c-aee4-811de17c3195", "indicator--36d54c09-9ab6-48a6-a96e-029dccc00c33", "indicator--51de1faf-604b-431f-8de9-133b4c9bfb2e", "indicator--11b65e6d-65cb-4aa4-ba3d-f40306660d7f", "indicator--d8cdaa5f-0130-4452-9549-ce25ee19e06c", "indicator--0456f413-38da-4dcd-ae76-fc9a1e65926d", "indicator--bb1c1b5b-cd49-488c-b731-56af0606c076", "indicator--98ccf943-3f62-47d8-a09c-36c8b995907d", "indicator--5ceb1fb4-efab-46db-8ccc-09717e72603b", "indicator--89a2bff0-bd02-4d30-a08e-e9d15df66e53", "indicator--e2cf5d53-a1c9-4cd4-9953-b3601e3ee0b2", "indicator--e81e9ba8-400a-4d04-8681-b4730b65d7e9", "indicator--54a8ff43-8728-4815-a4ac-e96db36fb7be", "indicator--8ee22914-bbd0-4450-8f6d-50b9b3750909", "indicator--e896dd56-d6c6-4018-b1d0-48d043e2bbe6", "indicator--f10d638e-9fb6-40d8-a444-f3d9fcbc1561", "indicator--e450f8ce-d302-4ee7-9bc0-ba4eac3b122f", "indicator--5f74cc43-6492-4136-a873-9e0b387c1932", "indicator--0f2bec41-3b95-4f65-837f-aa6e049857ae", "indicator--899cdef6-e613-4ee3-b9d7-973b3d1b6daf", "indicator--50620dc4-f276-4404-96f8-e62539de19d7", "indicator--d9cdca02-7b60-4942-aeea-dd6c0e86b01c", "indicator--7653c406-e5ef-463e-ab78-0dd075be20c6", "indicator--1a77f4d8-7fd0-41f9-ab9b-c07abbb9e4b1", "indicator--d5af38d0-b7b4-4ceb-a358-638d708ccbae", "indicator--58f82c50-535e-4ea2-b4ea-11e41f197dcc", "indicator--f1a42857-dbc8-43dc-99c8-14d6557d9a1a", "indicator--36c5751f-c830-4358-a968-4f6d9694ee03", "indicator--4c6a3bdb-b962-40b5-b412-6c8d111b2a46", "indicator--6c1814af-95c6-4c02-bdab-f38cd16b98aa", "indicator--60edc6a7-6592-4398-8163-58329ec30ec9", "indicator--398ee756-658a-46b2-ad87-1ba48898aabe", "indicator--ad26617a-52a1-46bd-b85c-da97626dcb60", "indicator--1c74f281-8f3f-4fee-ba54-7b8006d1094a", "indicator--5963c986-cabe-402d-9472-497a1535c9eb", "indicator--d5727a85-ef9c-465d-a55a-b0099eded3a9", "indicator--b29f3bdb-9a43-4aac-995e-59b4417ac5c3", "indicator--d785aa5b-c946-492d-9b01-6e63c671be05", "indicator--af590258-6083-4242-882e-9d753baaf3c3", "indicator--c0a063b7-e21c-4b0f-a812-26a8c8947b27", "indicator--eb4f7781-1eac-48a4-8bf0-7eae1e2f86e8", "indicator--601e858f-2586-4f97-bf55-a72169813784", "indicator--d30d9f8d-fa9d-4877-99a8-8f90d93c1b96", "indicator--1d0c1b49-92bf-4266-b2b2-01fa3ae5807d", "indicator--06df62e0-8db9-47c1-96bd-e2bda5a38ec5", "indicator--0b4d14bd-c1a5-4b99-a039-bdb1f3604230", "indicator--e8e4c455-4e98-4293-b434-c44f5739757f", "indicator--dc59f8bd-a9fc-436a-9f2a-2f41369ad892", "indicator--e5a089ac-7c07-4262-a874-5d1e626a15b8", "indicator--58faec9b-997a-4a20-a512-dcff1e8866f2", "indicator--9df68e35-c864-47e5-882e-0993ecc108d5", "indicator--7e47e1b4-0687-4f72-844e-4b0606ddbc30", "indicator--cd2173e8-2fb6-4912-a06b-1b3e39deed3a", "indicator--e86c671e-2c85-4339-a99b-63a2ff77029b", "indicator--27a38fae-52f6-4359-be7f-325caf486a9c", "indicator--28de0fbf-047d-4d83-b337-17c0cf52d83d", "indicator--e8d3cd3a-a2e2-4f4f-8af0-210a3cf906f5", "indicator--54568915-b1e9-4eb0-80b6-53c851a6dcdf", "indicator--b27d910b-8f75-4e1e-897e-75cd01dbcb06", "indicator--3623d6c6-187b-46eb-8734-785ed894889b", "indicator--267e50ee-8e3f-4dea-8c1b-31f6c51ba048", "indicator--8b054549-d5e0-4271-93e6-7f556cf4a038", "indicator--792dae12-a1f7-4ff8-8bc4-693624e4089e", "indicator--adc4ba9c-f196-48e9-aa9d-91c44a952bb7", "indicator--ca5b8d33-2c2e-4bf0-a560-1cb4ea02ffee", "indicator--79177a62-81f2-47cc-9122-3db89df261fa", "indicator--205a8740-dbb9-42bc-9c61-756cc784f727", "indicator--5fde9e8a-9be8-4989-875b-bb7682e4ed7c", "indicator--26231d55-08ac-4bea-9e87-52d84cd28bfb", "indicator--dbfcaa20-6a80-4c52-82ca-642d23411c93", "indicator--3c897754-a072-404b-9499-31aa40373edb", "indicator--2d3160eb-e477-4fd4-bbad-33a1a32469d9", "indicator--5b16d33b-9480-4b90-9186-f1ecf9acf8be", "indicator--2ac4ed57-bfca-4a2f-adff-9f906d7cde73", "indicator--665e226e-557b-48e3-9c28-48add98618a1", "indicator--aabb08c0-f937-4b7f-a65c-e6f8e0afa1e4", "indicator--cf0b1a3c-5576-41f4-a3f6-054a018772c3", "indicator--96ee7edf-1182-42fe-aa1d-631b84e37c32", "indicator--e827fa3a-c14d-481d-9170-a71643125962", "indicator--8ed5e6d6-26b0-441e-9097-8fa0671bf354", "indicator--44c929c7-6e3c-4f8b-bc54-441cdd3583e9", "indicator--51209efb-97a5-471f-bb80-c32239f7badb", "indicator--b6fc5014-631b-4353-8ea8-4c22df8a633b", "indicator--297f82d2-e1f0-4ed2-822c-0516893b7375", "indicator--a975ccee-e59e-4b7e-a266-a0487b63f8da", "indicator--f8879cb8-8644-49da-bdf1-f5f8fbf207b2", "indicator--d396f1e0-d176-45d7-8639-36db94713729", "indicator--98f4da04-ac0b-4a93-be9e-ede436df58ab", "indicator--c4704833-7dda-423d-9b24-de5f3e2c36c0", "indicator--9ec27d3f-7a1a-4dcc-8872-c16b9263563c", "indicator--09cb561f-aea3-4505-977a-85fa6cf4b687", "indicator--b38e495a-4e7b-49fa-84ad-e7c8ddcb7fdb", "indicator--48145870-3626-4aeb-856d-01d62920b008", "indicator--10d84362-8f88-4666-ae76-d8661b52636d", "indicator--734ae599-ae5c-4b06-88e1-4924be939597", "indicator--1d7c9107-fee3-433b-80fa-8ef39169a774", "indicator--3d4135b4-e667-418a-ae51-451220a4d3b6", "indicator--99764dce-5aa6-49d6-8d9f-d8f4e8b3a11f", "indicator--412bb555-942f-4570-a0a2-49e53a587ab2", "indicator--d21d1272-164d-494e-827e-d9f1e37f999f", "indicator--7f677826-4a73-4675-a6be-d55423a9fa3c", "indicator--e40900f7-dc0e-4760-be67-502c31a14a1b", "indicator--47dfc322-6b1e-4fc1-bd5f-9de7d1d624c8", "indicator--e2290b62-d828-40d2-b3a1-5c7371615604", "indicator--693c7092-3170-496b-b0c6-e227cadbc14f", "indicator--26c68983-15a2-424e-81f4-2162338ac39e", "indicator--4acde9df-d6da-416b-9686-653eb9630101", "indicator--45dcba0a-b028-4d82-a7d4-8f750d1a428c", "indicator--c76937d0-1dc1-4440-bcf2-0fda36c0a071", "indicator--464993ec-dd6c-45b7-8398-cde403666373", "indicator--8d22dc15-1307-4c96-9bcc-2179439665f5", "indicator--b984efd8-1bd9-45df-8825-148b88e30620", "indicator--81e512b0-adaf-4cf0-835e-b423f1ed9038", "indicator--4234c492-f4b9-4082-9296-6d962b84a799", "indicator--d07aa568-f564-48f6-8e68-78a5c0e59fe1", "indicator--7746d1b4-ae41-405f-971a-ac8525bc088c", "indicator--25d8a7cf-c72d-4d96-a21d-7efb84365a47", "indicator--4f39f674-c0fa-46b0-a567-42249dcea6fa", "indicator--78efbaf1-0aa2-419e-bbe9-a0e97c76e19b", "indicator--e74e6435-b5c7-4885-842f-8de3bc7abe7f", "indicator--494b5744-d1c7-4fa5-8c93-58fcf1068102", "indicator--969eac7a-97ce-451f-b61c-57df5b9fa0a1", "indicator--5e192d48-fad9-4d22-b8b6-1b27dbccdceb", "indicator--b609a593-16bc-4e3d-8c67-4f388cee5b20", "indicator--c37c41f1-9491-4781-9258-9ef5d5c3ff13", "indicator--53150aef-66a4-4f9f-898d-cbe64f80772f", "indicator--f8c23c7e-c229-4e95-87cd-939f029a7237", "indicator--e294c7bf-23b5-4589-9f19-c0038f440731", "indicator--42fe0720-0b62-49bd-bdf1-9129abe900e0", "indicator--b7cfa44f-b9f6-4eb1-96f7-faa3b105e01d", "indicator--9f9fdb2f-d441-4882-90cb-d237dcf412dc", "indicator--41bcee23-bc9b-4965-af20-386d7f27cb00", "indicator--b1fb5db9-9ba7-40f0-9d8b-9f1ab3eb1745", "indicator--907e6707-2352-45c5-b1c3-af5369876805", "indicator--f705bc9b-e427-4458-bcff-6c900f1cc133", "indicator--a39fb5b8-c3fa-4fb8-a3ff-90699fc158d1", "indicator--c6e72e27-34f7-4ede-9de6-523dc3934fbe", "indicator--7b9ad144-687c-4e9a-966c-46713bb87f4a", "indicator--3911dbd7-8b02-4270-810c-e7c6afa65c8f", "indicator--836a17ef-2bbc-4187-a50f-65afc6ed2106", "indicator--edb6b623-dc54-4f95-ac3d-8875ba7e2804", "indicator--4c4f24c8-76e1-4425-b94d-fb408fbd0c1f", "indicator--0578ac94-001b-406e-9377-55845704a007", "indicator--c159270f-91b5-44f3-a4fe-569b2cfbf23e", "indicator--e3b63a4f-9836-448c-9173-11880869b715", "indicator--cb7c9026-406b-4362-82fa-02dd8c9fcfbc", "indicator--b093dcb3-fcd4-4cf0-8a7f-52575d17da30", "indicator--d126cd8d-c788-4f1b-a5fc-f4e128636c98", "indicator--9b9c7e15-0891-4f5f-a843-bcdade9abd0a", "indicator--99ab2e0d-6752-4319-ba9e-aeda17bc2e45", "indicator--4a0a7738-25cc-459f-8f0c-3e7785c65ce3", "indicator--efd33eab-b424-474a-8a6f-7d04689fc73b", "indicator--c91a4ae0-857f-46d7-84ae-8f86c0774270", "indicator--d8e69891-535d-4851-bb14-452120fcea9d", "indicator--8fec7641-5206-4bbc-8986-615ad7e31303", "indicator--7ed44da3-4f0f-4641-b9dd-2c2fa8c5fe48", "indicator--17f78990-e852-48e1-b48a-53b84e85a978", "indicator--d228a872-43af-49ba-ae34-7284d1a74b13", "indicator--c68030fc-b8c4-4655-b2cb-4e8986f6c478", "indicator--7bab0475-5adc-4f43-a89b-49912dafedd7", "indicator--96b3dde5-d1d9-4df0-8ea1-5ede6468cddf", "indicator--d4f111cb-58be-4a30-a2b2-db93edda018c", "indicator--9546a54b-ed9f-4df9-a5b9-df583271e6b5", "indicator--ea2625bd-3f0d-4fb6-a939-0c04335b2acc", "indicator--ff8724fd-0744-47ef-81a0-772ee22e288f", "indicator--8120f898-f3a9-4756-af9a-48be39dbd401", "indicator--db51f9c4-1114-46de-bd82-19013d7db291", "indicator--9406c821-c3e6-4296-92fc-55cfe917b3fb", "indicator--c6829d33-7114-4abd-9d98-1e0dbbdf9b86", "indicator--4d9fb5d9-d65f-41d9-8d07-5c2f88baa012", "indicator--414486b6-3122-4fe6-8c9f-68b689a904c7", "indicator--af2b20aa-2d0c-4dcd-8df6-16b1a3dbfb87", "indicator--9afe977a-28fa-4623-8558-c5d2da3bc9e4", "indicator--90283b4d-6892-492e-9c55-a99af961c28e", "indicator--46d5835f-a660-4525-86aa-da90f7845f44", "indicator--90bae533-236d-43bc-bfcd-7cf9b90ab8cc", "indicator--ed6a6fc6-9473-4e67-b7d1-88482fff2c71", "indicator--3f9e59b2-c353-472a-b8a4-fa892b13e1a6", "indicator--23be55c9-87aa-4020-aed3-fda38be3b0af", "indicator--43eaccae-e54f-4d99-91ff-da25e6007ef4", "indicator--a5556203-031c-4b5c-a077-a28f99627c78", "indicator--f0ea9596-e4b7-48b2-96a2-150c0763d696", "indicator--4d19f286-9f4e-4ba5-befa-e2c8ce0e6e58", "indicator--c5893b43-1df0-42d7-a70c-34878380c6bb", "indicator--e946ad5d-2ec3-4bcd-a721-b720e166d66f", "indicator--0b992e50-1394-4b4f-966e-76004e766547", "indicator--383187ad-fedc-41d6-b9bb-c570a1c41ffc", "indicator--f634749c-5f81-4264-b4d1-17335d219fb5", "indicator--d655a788-0234-46f1-9099-0e9008abc22d", "indicator--e1a1f770-ede7-428b-b39d-0527b08fa88a", "indicator--47fd3753-96db-430d-9edf-21e5ba5ec18e", "indicator--ecf171ce-6f70-4d2d-9f7e-577afea4f50f", "indicator--47038188-0ba0-4997-9b73-875d5d47e0ed", "indicator--78625d34-08e7-49a8-b50d-ab725768755b", "indicator--bd883293-6915-44ab-ac38-e6c09fa99c6b", "indicator--eebd2629-7882-466c-bdfd-0548b64de150", "indicator--fadeabb0-1112-42d2-a09f-cf35e6e133eb", "indicator--34b1cb1d-3f11-4728-b290-e8f655089fe9", "indicator--362ac749-d3eb-431d-aabb-36ea96942e87", "indicator--6f0d6b03-852f-4e7c-83db-6d2a122e91bc", "indicator--9c4a8df3-bd47-442e-a5e2-6d91e957063c", "indicator--acecd35c-247b-491a-9234-47c8f4534808", "indicator--8f53137b-ba95-49a9-bb1d-ba4a1582a476", "indicator--f8fdd9f0-a5bb-4f4e-85a6-af526938fb8e", "indicator--57a67985-e435-4798-9020-2d605975d1b5", "indicator--9b75e7b8-6216-4ce6-9d0c-38836bfe1685", "indicator--98f1c10b-f239-4d6c-bda7-c4de0e516d23", "indicator--3d74f421-3936-4ea2-a5f7-358e70ad48fb", "indicator--2394ad40-2970-46c3-b4c6-97637376a96c", "indicator--c91cb9ac-0c53-482a-b2e5-11b8c809ba9d", "indicator--0c2cd256-9fea-41e6-ab91-5185e92b1e5b", "indicator--b7ee12ba-6e2a-49e2-8729-42a8af554598", "indicator--991b3914-0bb6-4509-a78f-8f19553228c2", "indicator--11d708ce-f907-4756-b17b-9788c924c7a3", "indicator--bf388d3a-928f-407f-8289-f49b0f2f69e8", "indicator--822d9ea3-4960-42a7-b3eb-81e1b6217801", "indicator--01c8343b-15f8-4a52-b754-dee4ccc22000", "indicator--7a6237f9-5d7f-45a0-b466-f8a03407cbb4", "indicator--f4310e83-ac52-4510-ad72-be396d379f0a", "indicator--1ab6d896-2ebb-4e83-a951-ef55a014cc0a", "indicator--7b3be475-1405-4608-8161-1fe4090f8d5e", "indicator--46f12c53-180f-4983-98ab-a4d7ab068192", "indicator--2d4a8eaf-82e0-4516-b3c2-beae01f89b0c", "indicator--97f32c73-6a21-492f-b32f-5e8035ec1152", "indicator--002e5d51-8f88-4ba8-aea3-bd4008c0cb31", "indicator--82f2c1de-0481-42fe-9113-b169820fce59", "indicator--fbe278ed-b73e-46f9-b386-e04e4289165e", "indicator--55dfb30d-3b8a-430e-ada5-e6cfdf96acf0", "indicator--24997ba1-c972-4409-ba38-9fb4242a2aac", "indicator--87fc3598-0a34-40e8-868b-64a43db25e65", "indicator--7940e783-5765-4ce4-b143-6d294a32a4f8", "indicator--06f993db-a4e0-4b19-98e1-485739b8a7d9", "indicator--278dcabb-4e1c-48ed-a808-1dfb436f3c5d", "indicator--19928138-b3ea-45ae-80a4-54a30a17d940", "indicator--aff7c312-5fd4-4a9f-87e0-84c7380811c4", "indicator--343d95f6-eab1-46dc-9d1e-39b551e4b587", "indicator--97814fd0-0862-49ae-a01b-2b4fc2f12fcc", "indicator--2611b6e0-c03b-4d46-9803-682168ea3101", "indicator--0af65d44-5324-49b5-8516-4726f5f8dca8", "indicator--0af60df2-25d8-43cc-a216-13ac23d71da1", "indicator--49fe3c02-a6a7-486e-a6ae-0009f98ecbc8", "indicator--62772ef9-cf2a-4e1b-b915-b14b8db69705", "indicator--e081f9d7-0966-4f30-89a3-2239f7f2d4c9", "indicator--dd0a9932-95ec-4d1f-9feb-88ecb0beb804", "indicator--9acd28f4-2a4f-4cd7-a575-1f96e77e9017", "indicator--c1cc418a-2d17-4db3-b79d-32a4d5fd78d7", "indicator--f28253d6-8ea8-40c5-94d5-35328934f074", "indicator--f934e24f-02e6-4097-8746-f6a64f1574f3", "indicator--e6e353c7-41af-4615-bcc4-970aed2198fa", "indicator--f7ccd441-e1f2-421c-8eff-84a70491c080", "indicator--a03c9b26-093e-4117-837f-68d2deca3e8a", "indicator--998610e8-9c24-4e88-a66f-805625bc20ea", "indicator--11cbf09f-1693-4b8a-8b3a-f450af67863c", "indicator--a2a64a0a-5f5a-42dd-a828-e715bd29ce60", "indicator--6cbb76b7-aa8e-43f0-b9d9-0c32fb599de0", "indicator--53af3642-8366-4036-b6a8-f6a467c3e18d", "indicator--512bea4b-914f-4e82-9003-a17a1e947d4f", "relationship--50fd51b4-d237-4d7c-a38a-1f98e0f1933a", "indicator--95a2e988-7d18-449b-b3e0-1cf6c9087c2e", "indicator--259f4a9f-ed33-45b0-a6ae-9cafce67c704", "indicator--81a43fbe-f03d-4cef-a02e-f44f345a8c7e", "indicator--1f4ab283-003c-45d7-9c84-92d76ae870a4", "indicator--9aca4f35-43d2-42b3-889d-e13e86c21a3a", "indicator--c0ddb85a-a72d-4d16-bd57-a3bdb73d1220", "indicator--6f67f196-8b8d-423b-a39c-16badd2e5110", "indicator--eeb0475b-96c7-4cb9-91a3-284f2e827aec", "indicator--32506e9f-8263-467b-be3f-68b7d3cba134", "indicator--508a8333-8201-4d71-b209-0fa36c050b3f", "indicator--396b4d55-5d74-49b3-8deb-41bdafd7db78", "indicator--016c1619-dd1a-4767-b12e-dc494c577ab0", "indicator--7d0c4d89-8963-405a-ac93-d1f0c45dbe6b", "indicator--fffd431e-1b82-477d-9018-461ddee908e0", "indicator--7dabe8a0-93e2-4420-b916-bce8b473aa53", "indicator--6f84081f-ede8-4f20-8552-67b3beea0ca5", "indicator--9e8822f6-73a9-4311-bdb7-ba4d69f4f7be", "indicator--66ceed0d-507d-470a-b44f-4ba8732b7208", "indicator--269f7da0-3a04-4d50-9d7d-9367fca2a17f", "indicator--9f5dfc84-2b9a-4aa4-8974-6a56b104edac", "indicator--036d8881-463d-47a2-adfa-19c19fa41f1a", "indicator--c4faebde-0c87-4644-9eb2-fbaa39658826", "indicator--6abc542c-6c7b-4c21-9c27-0a9d61a231b7", "indicator--35dccdba-baed-4e0a-bcb2-0ce1e1e7db38", "indicator--ef76ac9a-0bf4-4490-aade-c75f938924c6", "indicator--3f7bff2f-9af2-4e9b-adb6-7c545b771285", "indicator--6164278f-47f9-4ba7-a206-45a71e8f660e", "indicator--c83acdd1-f7d6-4ea5-95fc-9d6141dcfa78", "indicator--4afa1284-de66-404c-8168-e9777327715d", "indicator--d8df95c4-f0f2-481a-bd80-70b578b87922", "indicator--d2e7a854-42ec-4d46-9739-0555d6d35011", "indicator--6fb0b9ed-6847-4e47-9b1c-ea5f64c52d67", "indicator--01734b49-3fe7-405c-9d88-04708b3bb85d", "indicator--06d364fc-79d2-4df3-b836-57aa2e59b59f", "indicator--ba6cac07-de5b-4291-8c03-21eeebed4288", "indicator--b8cfef35-e3b4-464a-a743-e56d51518bed", "indicator--0c0ea192-8909-4c4b-a39a-cc9459ee46a7", "indicator--e2dc6526-1ab1-43a5-9f86-fd42ec0cba94", "indicator--bbd0520b-815e-4055-89db-6109ffcacd28", "indicator--520ab51f-050f-469a-935f-3891fe8282dd", "indicator--fe7cdbfd-aac0-4c21-a327-5aea66a627d0", "indicator--5f08ebbe-c565-464c-8cfd-654fed261ce7", "indicator--56313e32-22fa-4186-80b7-1ccfa832e170", "indicator--497e1e6a-eefa-48bf-9fd2-d12538c032af", "indicator--431dd0e8-a871-4979-bed5-0f806b0c2a92", "indicator--b8487283-6ab7-47c3-a632-d9d9100b696f", "indicator--58b12b30-d96e-4e6a-bc75-c88effcce1e7", "indicator--22fcf61a-5e93-4a1f-bbb4-33fd68477cd8", "indicator--cc7ca9df-54dd-41fe-97db-10687d3a212b", "indicator--f3530f37-759d-4b0d-883d-257a487d38cb", "indicator--5bcb3542-92ba-48e3-830d-1fe49ff537b7", "indicator--47d72759-e1af-4e36-ae03-beb82b6ba250", "indicator--3d73e012-78f2-4dba-8787-d33055653499", "indicator--c4134131-e991-4ea6-b122-d900306d1f2e", "indicator--588c6bd3-8a77-443c-90dd-d1ec1b541688", "indicator--bdb109a0-b5aa-4d27-acce-edb2f3e83572", "indicator--c75f0648-e32f-462c-954b-ab8f1e73c944", "indicator--cf6529b5-854d-4896-ac9f-c75717304b3a", "indicator--94f120bc-560b-4e42-87e1-b4e4eb41ef40", "indicator--5e8bd060-e440-44d5-9b85-5a4449e1fb4c", "indicator--61bbb121-f0ec-4b8c-96a8-ea8c1b10cf77", "indicator--9a3c0654-1a83-41c1-bfe7-fac4afa64cb4", "indicator--3a4118ad-392f-443b-b40d-d7f4a4332a92", "indicator--e3845e63-0417-4da5-9cc0-bb69e68602d5", "indicator--53ef82f4-37be-4e93-8871-108f97178080", "indicator--bf8e2eac-74c0-4242-8d79-b0aea78d8938", "indicator--9a576034-1fa3-4bdd-a33c-a2381c7e52ef", "indicator--b170c6a1-3207-466f-b9b1-ddbc922931fa", "indicator--9b38f96c-6ae3-43b4-9125-b6f22bc29a6d", "indicator--d60d691b-db31-4ca7-93c3-299370be40b1", "indicator--4b0b4aaf-5325-4381-93f6-7a405b29fb75", "indicator--1d3ba21f-fe91-4d98-988c-b0f817efa891", "indicator--8d62b48f-1d25-4f0a-b6b4-55d2880a8493", "indicator--ee43d712-615f-469d-ace2-dba37d78a248", "indicator--ec20a19a-cda0-462a-b6c8-80b9390e7712", "indicator--c9e010a2-9013-4f4b-b061-1891f3d660ec", "indicator--1bc011d7-a1bb-4c24-8c17-c34d5d1884e0", "indicator--5a6aa913-af70-421c-9d20-c4bf8af3a6b3", "indicator--d4ecf771-dc09-422d-9af6-089478fe84ec", "indicator--5b19ea5b-5306-427d-9542-757daf9595e1", "indicator--fc1e5c15-6197-4feb-828e-d50a8e4eff39", "indicator--4ad6db0d-2d91-444d-a48c-8d61ba8ae162", "indicator--b4eff95a-ff98-4fc9-af59-d65208cf328d", "indicator--88a0fce6-74e2-4ed1-a2ae-9c674e9c1f87", "indicator--632f5a90-2dd4-4cf4-9738-138d263b96bd", "indicator--1aac34d9-9223-4905-806d-3e0b95237594", "indicator--1cd237b0-86f7-4b63-9764-8ec824422d4e", "indicator--d67f9c20-f019-4aad-9e74-fd9a162303df", "indicator--7215139d-baad-4fee-a611-fd4503e32b6c", "indicator--740a84da-a229-4a5c-8cb2-ea5c9da51019", "indicator--83e0c36c-5c11-4db5-89e9-e00b1e32353a", "indicator--a13e5254-7ea8-496d-bf3e-fa52c80bfea9", "indicator--25a460ba-4c67-48a7-a7f1-89e00df1e197", "indicator--97e2d569-b7c4-49ab-913b-a85099742529", "indicator--c872cf08-7394-401a-a659-61f8869241cd", "indicator--516390fb-353e-4fe2-a6b2-554614863d40", "indicator--e9bc4f57-6445-41ad-a861-93a52ad2550e", "indicator--72f7436f-3f22-47e4-a37e-6f54695a7335", "indicator--d23f5f63-8a9e-4f1e-b81f-9e7958d75366", "indicator--be72919d-779b-474c-aafa-99347e6e427f", "indicator--b8c099d8-31b0-4496-92c0-cf6ed037b561", "indicator--62b1618f-4747-42db-b581-83790c99e3e7", "indicator--ab557d81-9b62-485a-8563-ca9d846b9bcc", "indicator--d90011cd-aa1a-4ea1-b333-22a4c3e5fef3", "indicator--1f9ca5d9-89fa-4d85-ad3c-517a0386cdaf", "indicator--ef598f61-a3e0-4124-b72a-2432ef59be80", "indicator--ddf4b206-0516-4aea-a6b3-ea679731d6ec", "indicator--0b81e374-d038-4aa7-bbe8-804b5f2313e7", "indicator--c1ce8b6a-83c7-4ece-ba43-815efe6ba1b8", "indicator--b1da1a0d-9745-4709-aff1-261033023574", "indicator--7497b55f-6020-48ae-a6f5-21560d66a2bb", "indicator--b82f8775-0ea5-428c-91af-f73f3214ed78", "indicator--8ecb35ad-ae2b-484c-b506-93902bda1118", "indicator--445faf43-8310-4a54-a149-e2f8be345507", "indicator--38492ba7-2373-4c6b-a605-f8571515baac", "indicator--0dfbbb7f-49ee-401e-808e-e01e1b04a0c0", "indicator--b185bb71-fa3c-4cab-96da-6347dfe08a62", "indicator--13c00b30-465b-44a4-aa99-cc4cfc44d78f", "indicator--6ece9d65-7371-4c30-950a-07b42e27a239", "indicator--fec9b21c-1d3b-4d7f-80d5-967c587cf924", "indicator--f40c2962-0fb1-43f7-815a-ddf45f830606", "indicator--e5fa3e91-6db5-484c-8103-9f3268c596a2", "indicator--934c6897-8ba9-4d09-9691-3dfd7e257ac2", "indicator--728c6f8d-2530-4ed8-842d-d3a17e7e7912", "indicator--53110e81-f658-482a-abd8-2404ded890ba", "indicator--eaeec7c2-46b3-43db-aba0-fa9980382f5b", "indicator--806c6177-3f8e-4d6c-830f-14073e784a53", "indicator--edc9e12a-df14-47f3-ba7a-f43516ba705e", "indicator--888449de-1deb-4eb4-956f-f1573532da2d", "indicator--605c986a-7e9e-4b0f-926f-fb8187b2dbf7", "indicator--5f21fd86-0707-4a51-ae42-9c1245c9d23b", "indicator--6bf975a8-7f91-4310-9e2a-42ae0fb6a833", "indicator--0bfc3b9b-b076-4dc1-977e-c76dda005d36", "indicator--4d2be3dc-8651-4a0d-b053-2a22e166ff30", "indicator--c5744817-5f53-4981-b083-c34269607fa0", "indicator--2f84b6f8-09d6-40f8-9ac7-0d01f94e701e", "indicator--7f1e9aab-02fd-4162-93b7-a28ac81c218f", "indicator--aac95a77-1855-4b30-acf3-b5aa3f42ba01", "indicator--f3914ba3-3f03-42ab-9dd7-dc7a1b38dd63", "indicator--77917a03-dcaa-448c-a798-3bd16e459428", "indicator--d767cc9b-1580-4e0f-bb0f-a164443da143", "indicator--c1fa13e8-5d60-4d63-b6db-e8e0c123a851", "indicator--0d4ea0c1-b6ba-48bf-b321-6c39891a74a2", "indicator--51ce6178-db90-4243-930c-7ef9fe7be626", "indicator--8161383e-35bd-47cf-8051-86579c7201fa", "indicator--a06c0afb-bdf3-4d55-a812-82c4aa3f7ac7", "indicator--5ae43992-f98d-45d8-a063-aa7e9bd6abac", "indicator--ce18232e-76a9-455f-8bea-685be52cb2ad", "indicator--291590a6-ed2c-457f-980b-ab8d14a81095", "indicator--e1f5c0c7-7fc9-447e-bdf4-1231e0275837", "indicator--a6bc2585-82e4-4a87-8c53-1632e4364b5e", "indicator--56d43fa4-a0b4-4342-9beb-fbe5db91f563", "indicator--27104555-6421-4c95-9c79-b86ccdf8c207", "indicator--c5fdf50d-28a8-491b-b161-780c8b56df44", "indicator--ac41f2d2-0d79-4391-bdb8-765715b84bd1", "indicator--11da6188-6bf8-4582-a6c6-c8fbaaa29e6a", "indicator--7397dbed-0881-420c-a0df-b0afd4964ea9", "indicator--4fd8e1c3-8299-4b04-85f4-a7315d1c48a1", "indicator--d4de0e87-18f8-4549-8391-79cc97574ce2", "indicator--e681d796-924a-4021-a00b-a3769b12da84", "indicator--e7142955-b554-4abb-b4ff-40c70fd7f275", "indicator--a2d3800a-ce84-4105-980b-8e98889ae94d", "indicator--4b5b4a2d-5a55-4767-8e23-f78307c3815e", "indicator--dfb28111-5183-4188-a611-ee745f23d1ac", "indicator--3c21c8b1-ecd0-46c1-bdc6-323db4a1690f", "indicator--500a3247-6a65-4b48-a682-f7d77a720fce", "indicator--eb677df9-2e75-46bf-a9d4-b5463017db0b", "indicator--afccfcf3-2edf-458e-80f4-2736bd75abed", "indicator--9eaf6d0c-3b95-4910-8eac-d7ab45ef720a", "indicator--639c244b-1c25-4df4-80ad-f9f1ac4d5434", "indicator--90e13139-f462-4b87-8fb9-f6c5bcc3a48d", "indicator--839a9c81-9f20-46b4-afee-00f7f83e71c8", "indicator--0085d0bd-f3eb-49b5-885b-5fa64450ed36", "indicator--59ca7802-d676-43f4-b1bb-60eb631050ca", "indicator--34a60a59-6cc7-4f98-a5c8-958857af00d2", "indicator--9734e497-7c69-4c64-aceb-df2d139bc728", "indicator--4ef5d613-4421-4763-8273-8e49d33fc412", "indicator--ccd3fed0-303c-4457-8009-9dcd38b2796f", "indicator--c5b14440-5291-4bd3-b241-7ccbf648af5e", "indicator--6401cc8c-f211-4486-97b4-64af801337a8", "indicator--9c6fb874-f3d2-412b-8ef0-ebf2673a3427", "indicator--34fbd2eb-3bca-4673-9f36-361ed2fab505", "indicator--3e7dd1eb-6f41-487c-a80e-a36c137cc4c2", "indicator--a7f02585-8311-4d3a-a835-db27e6d10d93", "indicator--ae4c3e1b-dcd6-4090-ae48-e87b66526eba", "indicator--d16a935b-1fb2-4f5a-8988-50104ae2b425", "indicator--f13c6f16-01d8-4aa6-ae82-cc7e70fdb7f3", "indicator--8fc884de-19e7-4034-b33e-ed5d2ad0b81c", "indicator--a9b3b3c1-5202-426e-a334-af40b565f113", "indicator--2d551fd5-cdc9-4ee6-b52c-21a29ba562d0", "indicator--2c2a74d0-05e6-444d-9bbb-c317bab235a7", "indicator--fde178d6-a634-42a9-b074-53119e7036b9", "indicator--5ecd4d98-de97-4044-bcae-f915d1ec75ab", "indicator--96e925d5-cf43-4fcb-a5f1-3faa5d80967b", "indicator--db389fac-3c89-4741-b295-72ab9f9cbc6b", "indicator--a0cc3cff-0414-4363-93bc-c79a3f6bbfea", "indicator--664e38cc-d679-4ed5-951f-22705845421b", "indicator--c2b6575f-c7f2-487b-b483-e0bb7cefeb51", "indicator--eb878aa9-5389-4a36-b76b-8ccb4c7487f3", "indicator--8edae3c9-c53d-4053-a75e-888e63eff006", "indicator--72fef39f-755d-4bc9-a862-43a8adaf2492", "indicator--be264dbf-a11a-45e7-a370-6756a2769780", "indicator--f174c404-99e7-4839-b52a-c81106813e61", "indicator--01e0ab4d-1d89-4e3e-bc3f-2c19db0347df", "indicator--7742a7c8-c263-4110-82af-d0277e089a88", "indicator--f097e1b1-0a56-4b68-aa48-1b377c2602b9", "indicator--8661285d-f4f7-4d31-a5a8-6c909ba47db6", "indicator--28918408-ca2a-4dcf-8d6d-98c35335b483", "indicator--1a23f236-4f87-45a1-86fa-56aa09828302", "indicator--b48e0183-f426-48f5-b322-1ca99ebe730c", "indicator--9b2d6d52-d6aa-445b-b90b-634d3cfaeb88", "indicator--95f8e015-ea48-45d7-9227-0426d0b388a5", "indicator--8af8f2a3-a170-4e8c-a880-200bac131504", "indicator--fb6bfc2f-05f9-47cc-bbd5-81ca3d881063", "indicator--0ebcef61-451b-4cc1-928b-b381fabc4154", "indicator--8f539fe5-e698-4c01-a112-eeb45cb88bea", "indicator--fecb7e08-3d05-462e-91c8-958a8f2272e4", "indicator--91754b55-6fc9-46ad-9f59-13981adc22fd", "indicator--3a195f06-ec11-4ba3-b0c3-48021498e1e4", "indicator--42c9df30-da82-4e4a-b418-23ed1e70c0cd", "indicator--485f59cc-9e48-48db-b9bb-aed9441377d6", "indicator--d4a27c09-29d7-480d-8379-000587b03e27", "indicator--6588a817-9067-416e-981e-acbc43db8e1b", "indicator--a7528d50-287e-4bc2-85f9-e29f97f4f456", "indicator--b149f6c9-0146-4350-9cce-857f6079f137", "indicator--e803c5c2-9c92-4318-9c7f-b4cd0c6a1fb6", "indicator--3df6226c-68d3-46e9-944b-9dfaf96d7120", "indicator--d01af842-aedf-4278-bb9c-ad388b27bd6a", "indicator--29f2865d-46a5-470c-99bd-fd0214382702", "indicator--42381f12-f8c6-4d9d-b1b8-6d6943e9c81c", "indicator--879e395a-1276-4c6b-871a-636d891c4849", "indicator--adaaf75e-227c-4a93-863f-f247f604940e", "indicator--6b7fe325-18bf-4128-88ff-997592f96b0e", "indicator--3ed8a46a-6ed7-4de0-959f-9b4ef37540da", "indicator--ad429141-244e-48e6-a27b-f22a46acd095", "indicator--484a45f2-c95b-4057-8c82-dbfc7f7afe31", "indicator--50340a85-17a4-4948-9d3b-c694a414b920", "indicator--0191e756-f81e-4dc8-ab21-ff1acbd7c40c", "indicator--f0020cd5-e551-4fbe-9523-e7d4a8225d15", "indicator--f888d7ca-d7b3-4c34-a7d1-6995fbd52871", "indicator--e3583bca-acb0-412c-a913-7204bbfda022", "indicator--c6477c2d-d1d0-4904-bb6d-281dd2e96567", "indicator--2616c2d0-e270-4b09-8158-23ce207d2a0b", "indicator--778dbf82-6e8e-4b7d-9c2d-4ec24b90959d", "indicator--8dc9edab-7d64-45a1-89a8-9dd577ba066d", "indicator--41a952e4-f4b0-436b-b664-50dd3541b9f2", "indicator--1bc4a6b2-c0ad-4f8e-add7-a15f3eea9ec3", "indicator--d98a3b06-a031-4526-a94d-0e65b9e270cc", "indicator--a35dd163-90a8-4c90-af1b-1a6598fcaae7", "indicator--5f3a25e3-0e64-4b01-8f8d-4804b1fa5e21", "indicator--73cd50ab-3ea2-42f9-8cc2-03908402bce1", "indicator--c58e04d1-a866-4c06-8460-20fc62fe66f4", "indicator--eaa60a4c-2ccc-4aad-8381-e7ce2b377eb7", "indicator--3b6ff36a-14e1-4182-bf4d-789de0a576b8", "indicator--7d8e09a5-3355-40bd-a5f4-79fe1f0143f7", "indicator--cd6a81fc-a9a9-40c9-b6a9-bfb267ff8f14", "indicator--09b20921-bcea-4136-8116-84be0e4c7666", "indicator--a3b1abd4-9b42-40e5-8f56-b22557fcda65", "indicator--d06d2b87-8e14-420b-9c85-21cbd1d9dd40", "indicator--59d63b91-4cdb-403a-be37-d3fa57344b95", "indicator--b2bb4078-7d8b-4a56-a7a6-b155b0bea0c4", "indicator--8b23bb91-b1ea-4282-b430-2e28642d7323", "indicator--faf2bc74-5420-48bd-b2ca-36ebc49916be", "indicator--47e4fcbc-b708-4113-978c-b71d5071f48e", "indicator--68fc6866-8650-4403-bbf1-ab0658d5c859", "indicator--d702d521-74cc-49b5-9f29-0ea8678e9c00", "indicator--6fc79ba5-6bd3-4721-8aed-257d05ccac7e", "indicator--27266bd9-ce7a-49d4-99c0-99b18b242bb7", "indicator--d10e1f0d-7b10-4d52-8ece-25a68f033c6d", "indicator--7cb25f2e-1d9e-4e68-9dbb-e1f2219002f7", "indicator--b5e20c0d-f365-4b90-a9e3-0f69660af2a4", "indicator--353be5ee-a115-4b76-b57b-38457fe1d874", "indicator--8f35aa98-bf25-4865-8ee6-8255e681543f", "indicator--42ad9fc4-3e70-4585-ad55-315533a0ff17", "indicator--627094f0-a9c9-4686-856c-94d959171bc7", "indicator--a7e4abf3-c70a-42bd-896b-c041df25ee31", "indicator--22641c61-fe53-4a3c-990d-5979a6d8a0a8", "indicator--e12d73c1-e43f-4928-ae3d-5e6acbabf6da", "indicator--78d30ee7-18f3-409b-9c55-ad82d6eec0fa", "indicator--4f404e9f-6f4a-48d8-a20f-238a1a77af7a", "indicator--347b92f4-043d-42cd-8641-fb0bd7f41c30", "indicator--53cdc769-b8e1-4105-ae66-db13f3e77699", "indicator--971f93d8-2ac9-4eb4-8e13-89b05249c523", "indicator--bc08ee8f-c71c-493f-bb7a-9e4a893a4ead", "indicator--c2e7c5c6-8e37-4a2d-8fc6-61ffbc1767b7", "indicator--a58c9278-55dd-4e4a-93b8-1a85be2527a3", "indicator--6db45784-6885-41c3-958a-5ce2cb648c46", "indicator--c61de29b-e8ed-4288-a9bf-368affe145af", "indicator--8d182a6a-8989-4d98-841d-0ee9705647ee", "indicator--ecdaaafa-4a9c-44fb-91e2-ead36e282d19", "indicator--972714a9-ba3d-46ba-a34e-79234a33d2f1", "indicator--f03ede32-3f06-4f54-a729-41c6581a9b86", "indicator--bebfee6c-3b2c-4b62-913d-20366ed56db0", "indicator--3f844b71-51b5-4b3d-ab12-390f5fd6437d", "indicator--9b205479-cdac-4ccb-8a4c-df0d969f2d72", "indicator--eb98d838-6afa-4976-beba-565cdbab7d9d", "indicator--211c4a8d-8c52-4af7-ad05-e7716c556bb0", "indicator--285f8d55-0b79-4865-bf1c-c59126ed3c8b", "indicator--d6203527-ce9e-4b37-915c-fc40ef13cb8d", "indicator--7c3b4dce-8032-400f-bb86-3eef5548042c", "indicator--7af4163c-5009-47de-a7c4-606de474ea81", "indicator--c7785361-61ab-474c-a762-70bbd0ea94cc", "indicator--0b90f69d-2246-4f10-9f6f-8b314208faeb", "indicator--9484c65b-364e-4461-9798-fe1cead50d83", "indicator--4ffbdac9-b587-45dd-aaa8-baa9b16da799", "indicator--4186da19-c340-451b-b33c-750d9daa4e15", "indicator--62e573bb-b07a-4d98-ad45-fa8eda065b1a", "indicator--d3874c54-260d-4557-8b89-96f2eb22ed7a", "indicator--a5d3758d-530b-42e7-90d5-7435bee7bfe1", "indicator--9171b9b2-0928-4b25-89d8-2f4fccee9942", "indicator--361a25cb-6c14-44f2-a221-7da9c7e68acd", "indicator--d7f5f9ea-30e8-46ac-b144-1bcf0b89e685", "indicator--70ea16cf-b850-490c-b10b-80519a981641", "indicator--19f614e7-8c32-41fb-a86d-ce08f44b3ef6", "indicator--4e785aa7-cb2c-4869-a792-876c26f8a513", "indicator--799f4799-432b-473b-b665-49f9bfe79a65", "indicator--8ecb4980-78e3-46ac-8dd7-40640adeb819", "indicator--70e199c8-85d3-4ac0-bb92-09565a04517e", "indicator--58fa13a4-aaca-4f96-bc28-453470d2174d", "indicator--f86e028e-3f29-47a3-ad3b-fc25eb144483", "indicator--b3227fd7-934f-458f-a264-c79ec1b93d7d", "indicator--24643c69-df96-4850-be64-20f3a357fc5f", "indicator--e3fe2bcc-433d-4efa-9f56-708d832aba67", "indicator--7192b906-9df8-461c-83e4-81b3d948ec5c", "indicator--09940a68-8e00-4c4e-bbef-55f246dbb35b", "indicator--4fef7dd5-c47b-4487-8a0e-adc16b8e5771", "indicator--da258ede-014f-4c16-90e0-58fdb2ca378e", "indicator--7388b734-0fbb-4915-80f8-b54e3d2821a9", "indicator--18d3a842-38a3-4be4-95a8-6376425140e9", "indicator--912f2179-43a9-47c0-afc4-95107c68ab2c", "indicator--31008bd6-169d-48df-a09b-fa00f5036bbb", "indicator--1ed2047d-ae20-486e-8936-43a05fe7e0f7", "indicator--e5702ace-6d0d-4c0b-afb0-a81657eef31e", "indicator--c4d19f67-df68-42a7-b4e5-fb283301fed8", "indicator--7bd462ac-d9de-48ef-bbe8-7dd25499ce8b", "indicator--435580ae-5e62-420c-ad58-8a1a5383a4e7", "indicator--54189284-9601-4106-8e4b-2a67442f634e", "indicator--652bfa02-b1f6-4165-b7dd-29ca4683164b", "indicator--4d97ce44-53c9-4805-804f-23a79b3c0c59", "indicator--f4bdfca7-6f2d-475c-8caf-3ec1cde47049", "indicator--f6be398d-6e21-4061-b0a1-a3afedabd10b", "indicator--3d413385-5a59-42af-9a13-64a5bd1af3ef", "indicator--e9fbd62c-5846-4f4c-817b-c8bcb2872a5e", "indicator--d8ad5145-d63b-493d-872d-395f4f1bb0e3", "indicator--ea8b0102-7904-40eb-bff4-2a264746549e", "indicator--6a134863-de1a-4b06-8b0e-065ba02367c4", "indicator--60d41651-009e-415f-b260-13ba60d258a2", "indicator--d3a05cf5-3eae-4ff9-8332-8233e76efcf3", "indicator--3fcb03ba-2425-4461-a71a-96c95d566f5f", "indicator--561efbe2-4fb6-423f-a4b7-f746b538c81b", "indicator--c4a4c788-496e-4603-9bb1-10f42bbadb74", "indicator--c8c8f2eb-3ba6-4987-8434-deeb5be84a8e", "indicator--70e5986a-28db-4910-b200-e3f5dcebf572", "indicator--8b8409f9-c415-490b-9646-e3c7a70a3e52", "indicator--5c0a2e70-a1ef-4e7a-bba4-915eed74de39", "indicator--5ab584cd-c0f0-42d9-9172-e8140eca95c4", "indicator--57f2d09e-980b-4323-bcf6-020fb103c6e3", "indicator--d4421ec0-fea5-4afe-9c6a-322d0588c40c", "indicator--c147b27b-7a8a-46f7-9685-b5b4cad4536d", "indicator--5f213797-746b-4006-8041-4af68406432d", "indicator--e508d55b-8910-490e-a704-e27ea5b0bd48", "indicator--58e8e60c-fe7b-4d88-a30e-c27b1722131f", "indicator--0b503c06-de54-469a-b90e-6f4532d8fefa", "indicator--dfcabfe4-872a-468b-828b-26dd5cf92e40", "indicator--4653db50-25f4-4c07-8bce-77a39c3fec28", "indicator--14595655-6baf-49f6-88bb-19bda67bc138", "indicator--d96027cb-5254-4cfb-9a19-ff251862bd99", "indicator--dce63b19-6c1f-40a4-a222-f2bae07e7549", "indicator--ff1c1c4d-2960-4c5b-bd3b-48f25a6ff4a1", "indicator--0e5e4942-1896-4e95-a87a-ddfded0db6ff", "indicator--28fc2452-3483-40a7-a07f-50c6f961bfdf", "indicator--2eee8140-51b1-4cd3-bc9f-5f621a1a9b93", "indicator--aef39593-13d7-4740-9a2f-660158e07337", "indicator--83fa41b6-e584-465e-a1ac-1bdf3b916c3a", "indicator--b1fdb8e6-cb6f-4f72-b9d4-05b7c417ebbb", "indicator--d8be7491-8da5-46b2-9726-eb86d4e7c06f", "indicator--e973d8a0-9317-4e96-b7cc-fa46c068a942", "indicator--e7d9bf62-b44c-4e25-ae0d-dc1431333a3d", "indicator--fdb14d40-ccea-475c-9d1c-dab545b57ed4", "indicator--cde61fe6-a5b2-435e-a8f8-5083477a69bc", "indicator--0d042511-c8e6-4a88-a2e1-a52e1b4f525e", "indicator--582882c3-4c34-45f1-b1fd-0115420567a8", "indicator--4f3f94fe-59b0-40c6-b071-2849cecdf132", "indicator--0d6d1ba1-f0fa-4daa-8090-960bd87196c1", "indicator--90385018-12dc-4bbd-9ccc-6d1df8809729", "indicator--b700a3cd-f1c8-4ecb-89a8-6b650756278f", "indicator--ebff765d-54aa-4b9b-b0e0-2d4fd1f7d674", "indicator--6d7e24a0-41f3-4d3f-a935-501882e8a7b7", "indicator--32b6d28a-d2cc-47b6-8912-e6489f2c3014", "indicator--e26e6b90-d20d-44bd-8bdb-860daa49b37e", "indicator--5d49234f-c17b-4afe-879f-7b1f45f03c3a", "indicator--7f7bfb70-882d-4bd9-9d9e-b4e662663232", "indicator--afce0cbf-bc5c-491a-8d63-0f5de7e93cb3", "indicator--a1fd1816-4fe2-469a-9b0e-3bbeb5f9fb9a", "indicator--549de579-a31d-42df-aade-4e8a0a3333a1", "indicator--2a348975-c670-40d7-9595-137d681701e8", "indicator--6e4734b1-25e1-4237-bfd6-ab9e4f7ca968", "indicator--91f210b0-5196-4119-9948-7388fca9a068", "indicator--182352d8-527d-4fa3-828c-5eee25cf8c71", "indicator--3b997cbb-5f41-4b32-9530-d0d14b79979c", "indicator--97878800-504b-460a-8e75-dad36cbfae54", "indicator--8a5be18d-bf0a-47a9-8c98-4955abb79d77", "indicator--91ae5a74-3f19-4827-af1b-28ffedec3bdd", "indicator--91bdfc35-182a-4264-a14e-abe206f322e5", "indicator--8dbe9b39-514a-414a-8498-a2a076f1995a", "indicator--4da58df8-f04d-4492-9386-46a5a198a60e", "indicator--9d5d0be7-9239-4964-b17b-c602a987600a", "indicator--7f352d9a-caa0-4f19-bcce-cb28e0f99ea4", "indicator--3e4a4899-18bb-4f22-b799-2e177f73b51f", "indicator--3e0dfcb2-7e59-4a1b-b7c9-348b225f144a", "indicator--58b0cd88-0063-4252-9cf8-4293ed75dca3", "indicator--2449abd3-85cb-47ee-a03d-5bab783e7c42", "indicator--7c2e8a07-273d-4e50-802f-82ee0fc5e505", "indicator--bc2b9bb8-8883-4792-b00e-1c36f43d3b9d", "indicator--3c2eda0a-1015-4e9e-8cff-e148b65329d7", "indicator--19237f83-4ddb-4fc5-947b-c7adfef8cd1d", "indicator--63ec38d3-8d6d-4398-ac14-e8d6a82e1b55", "indicator--830c0957-1e1f-43ca-883e-7b49a24362f9", "indicator--c748f19f-cca3-4c02-88c1-d33b0a22df54", "indicator--dbfa7e29-9ea5-4773-aa84-9c72f535e3e0", "indicator--350a3d92-9be0-4b15-9177-43222372d568", "indicator--d787c806-d24e-4c83-a2b0-84ccc175904e", "indicator--d2dfec3b-c610-45ae-af11-492a1cdc0457", "indicator--d6fc3694-9eda-4c0d-967f-dc05437753e9", "indicator--e3b5c2f6-1c03-4d24-a8ba-9df27cc30727", "indicator--67c7405d-3d47-49f6-9b12-da1fe69a908b", "indicator--d1d38037-7714-480c-a297-9f638b74de40", "indicator--cb510d9b-9c9b-498f-9ab1-1298d828eca9", "indicator--6c093025-2598-4c2f-a323-3b3b255fbfd1", "indicator--e1a6bd75-66a2-480a-bceb-da0d95f82159", "indicator--b3bbb283-6969-401e-9b1c-5c2af3669ff2", "indicator--96c48596-0640-488a-8cab-1cabe2b0ad32", "indicator--7306ecc7-e48f-49d0-89ad-92fcac00ea3a", "indicator--453ce46d-9ef0-42c1-a269-45eb6fd4af0b", "indicator--a8325989-ffd0-4d71-a4a6-261be6041d95", "indicator--77783eb6-68f6-4ae1-9cda-1f5f16c7b638", "indicator--e4838dd1-644a-478f-8161-6f9e32734ff1", "indicator--0c611c9a-9bf0-483b-b2bf-ae0d2f540947", "indicator--dcbfaf37-71a4-4dae-955d-0bba51620496", "indicator--d73666d6-62cf-4d2c-b00e-609e98c33e8e", "indicator--9804013e-6ec4-447d-a98c-a616a00c59ed", "indicator--8f3fe574-dd6d-4f0a-b837-160fe2f35fd3", "indicator--c0916115-f36c-487f-9d33-fda20f544d1d", "indicator--c8c5ffa5-b1ab-4dd8-8068-582120f1ec0c", "indicator--66be98cd-43f5-4794-bc04-0019992f0611", "indicator--f81d2d2d-896d-4c72-b146-46af790ed722", "indicator--71b9d6df-b60a-4615-939f-3e68c97ae910", "indicator--c94996ba-41fd-48e6-a458-247c69c6f84a", "indicator--a35b35e6-27ed-4778-a621-1e837a86ba61", "indicator--a1fa8086-ffb2-4154-bd94-edfe0c31c811", "indicator--22a2032b-03b5-472e-93d5-7126864fe135", "indicator--2fc15a34-a424-4223-a403-7e09610741bb", "indicator--f383e4cf-1c51-4ef6-a24e-6a543b718605", "indicator--a666fa95-ea87-4afa-b7ef-e220b97c0338", "indicator--9dff7d07-d70b-4b36-92fc-359d5844903c", "indicator--caf21f75-d0b9-4aac-ba56-cdc20e7310db", "indicator--6d814a85-53b7-43b7-8989-ffa7c024aa47", "indicator--b480a8f4-0a16-4309-b21a-d4bc16388ccb", "indicator--40a65c74-8844-4cf5-845b-99329a107b24", "indicator--63706ec1-5092-4645-8c5f-73bed38e36c3", "indicator--7c17f7bc-4a42-421b-8249-0118c2c06db2", "indicator--c38e87d5-53ae-4b2e-991d-87b6199daa72", "indicator--7906cb7f-cbc0-47dd-b588-4b8ada708384", "indicator--54e0a377-5782-4b5d-b3e2-65e30fbc6cc9", "indicator--30ca64a4-ea82-4012-be03-51b9cf9de03b", "indicator--ebc6d973-3824-4f4c-b3ad-df2043edb3a2", "indicator--c90a3824-b577-4977-b7be-968d4dd06d02", "indicator--1effaa56-aeb8-4320-87f9-eb999fef2d38", "indicator--bc5fa721-96d1-4a49-bbc2-77c72232cd29", "indicator--19a6cd86-5861-4aac-8015-031513b9803d", "indicator--3114e872-32f4-4d3c-8a7c-643401b2c420", "indicator--8d392ef5-576a-48f2-b697-0039e723dc6b", "indicator--8559b689-beb2-4684-b935-5deefd2b2dda", "indicator--fc4f37d8-80a5-40ec-9604-b2bc59bb369d", "indicator--9f95de07-574d-484d-ad14-16518898ea97", "indicator--72fc482a-1353-423e-bacd-0dce0f5d722f", "indicator--1cada969-27ad-4884-ae1b-f13af5a5dcb9", "indicator--b85f4234-fe39-4707-8854-265f5fe8b5cc", "indicator--ca6675e8-9c0b-4e78-8176-d7735dc7757b", "indicator--3871004d-a352-4e5c-91e0-6c2d3ab03899", "indicator--2ba69aba-ac56-4f7b-ae91-2b280359f169", "indicator--d7f05f16-cd14-482c-8dd3-ee0b8170e3fe", "indicator--959e71b3-8ec3-4e72-9fcf-00e53e811a9a", "indicator--44923368-d847-40da-9701-40f225c23117", "indicator--78b4f8f9-73d4-49cc-9920-00a7c28ec6fb", "indicator--a89aa813-8752-4f62-bc68-0b811d711387", "indicator--2c08a2c4-ebbd-4740-9fc4-73469720ad8a", "indicator--923e3526-30a6-454b-bca0-6c14c8cc4005", "indicator--7863dae9-637d-4dff-9077-e4e5789947ca", "indicator--0f49e01b-d9f5-4c6c-81ad-0ca715cb6b22", "indicator--3f03ad4c-b97d-4234-a385-502ad1c8efae", "indicator--2040c9c4-d3f2-41a2-974d-c6c68e4fcc1b", "indicator--0caee5b1-2a48-4e05-bcd0-55a0fa2bb595", "indicator--dcdbffc5-2095-4956-aa12-7279d0ed6bfc", "indicator--bbcc75ad-5923-4d5a-98cd-93aa98840bdb", "indicator--17ddffed-574f-4c71-9951-36362aa78b0b", "indicator--fe3c9335-5fc1-4d14-9cdf-dca3a0ba8689", "indicator--7c606dbd-9c22-4719-8a9d-5f07fc79a379", "indicator--4ff5e2f1-f2ce-4bfd-bf9c-eb7d3df075e6", "indicator--06f35ce6-61d2-4a2e-94de-8c8c9b767c96", "indicator--366b56ae-adc7-47d7-b342-d6a86c63f2d3", "indicator--69e08604-54a2-47a6-a883-2830e08e6ba7", "indicator--aafe1b48-9287-4fe1-8129-499057ee6d4d", "indicator--ef7d944b-e289-48c4-8281-ed22e8520bd6", "indicator--59763e0a-f442-41de-8f3b-cd8f2c21227d", "indicator--cc804279-249c-4248-bc2b-fdabe7498436", "indicator--4f65e5c4-5c48-46df-b30f-cd977a391113", "indicator--11b4e702-3de1-4daa-ad10-bdb274ec0abf", "indicator--e81e14e3-f40f-445e-b0b8-3a2e73e44a02", "indicator--4724ca8e-a8aa-4cef-81c6-573ddf4f9348", "indicator--f620b65e-015d-4159-88a0-713e6cbcafc7", "indicator--c86f68de-fa75-4fda-b77a-09862707119d", "indicator--07e48ff8-4be3-43d8-8705-4f7aa1c4a2cb", "indicator--733dfcc3-f1eb-4c39-9953-d39ab0683fdd", "indicator--e334909a-d113-468f-963d-99dd48f68d95", "indicator--a5b4fb1e-ed92-4520-a049-ac37fb6e6eb3", "indicator--6812396d-28a0-4b6a-9a69-b4503a9fdf41", "indicator--816c7ab1-fdf5-4226-8300-99834af30dee", "indicator--8be1afc4-1b19-4756-b9a0-b899d4dfa65a", "indicator--41b9fedc-3aec-44f7-a7a9-e89344262804", "indicator--f31a1ba9-cb74-43b7-b3b1-e4ea80b6d097", "indicator--83090782-bca4-46ef-b6a6-68669fe4f666", "indicator--710b0a5b-ad4f-4f97-be09-a2f0388112ae", "indicator--2196b94e-293c-4a0c-8974-f952901bd4ab", "indicator--26428872-884f-4fc8-a888-325273272dfe", "indicator--09c5e32b-4dc2-4e44-b3a1-e02c5b10ec5a", "indicator--4d58514b-75d2-4254-a26e-b55c7c7f61d4", "indicator--373a0e1c-8769-4338-abb8-ed8e5d707197", "indicator--ca68889a-c21b-4d38-ae11-1c9893a9490a", "indicator--3bfd04ca-9e9f-4322-908d-4a95dc753ace", "indicator--ba3d9524-443a-4125-be61-b194ae7ff899", "indicator--323c0b02-41ea-46a5-a7a9-bd0c083c7791", "indicator--9f59a93e-6a93-4837-9e2d-833ca20b8cf4", "indicator--b9e1c586-f92f-466f-96f0-1441e8f5784c", "indicator--09ed647d-55dd-4f4f-bc75-7fb6211f4cd0", "indicator--f1d1beb4-996c-436a-a255-b5a9ec2a0e98", "indicator--65ee88fc-1db3-4be1-9ae7-f2d6dded6806", "indicator--3a5a13c1-e768-4463-9644-b54d44eaa6f7", "indicator--c10f38c5-a3fa-4f65-af70-cd34b4ebb4ee", "indicator--0c68f348-4c3c-47a7-b06c-fa6c374c45fb", "indicator--df6d6574-a36c-4af7-a459-2df0503534e5", "indicator--65d64c03-2cad-4d7c-8cbb-266b6b73f0d4", "indicator--4c6fb7af-be5f-4ce1-909e-03f89bdcfdf2", "indicator--3ecb71ed-b6ca-4bcd-a2f3-2ccf819f2336", "indicator--5a5c51f0-e7c5-4e11-8e9c-8c6410823b88", "indicator--5b304a68-1642-42bf-abcb-dae3e645acfd", "indicator--3c213881-e4ac-42d4-b525-bd3619d136cb", "indicator--b6b3142e-f71f-494e-b81a-5ba8c7c10ebd", "indicator--ff33fe7b-5db6-403e-b59b-a8f56a875a3e", "indicator--90913dec-70ab-4b71-9928-0b564ee74524", "indicator--6ab36db2-2e64-4ca1-b308-6838ddcfd4fa", "indicator--464a5eee-afdb-4d3a-a37f-70b6ee52af2f", "indicator--44aabd77-034a-4b7e-befc-ef55dab207a8", "indicator--98f560f6-d905-463c-bb3d-cf9574f10f0f", "indicator--d964ed21-01cd-44d5-a128-2636ce3238b2", "indicator--930e5cd7-9da0-4887-890d-c7a1aeaa08b0", "indicator--070566dd-611b-46da-9769-a12fde556c91", "indicator--f898f5af-95c5-49cf-a886-143a5fefccbe", "indicator--59a7aeae-d818-4167-9a51-949b4800ec1a", "indicator--10a379b1-895a-47dc-b058-6f5b327ccb34", "indicator--fd9ba16b-c17f-4a9b-b22c-0165092a6582", "indicator--c1eda9fa-1e94-4803-a8e9-0f9565d8628c", "indicator--463d802c-99d5-4467-8a11-7d12793d3610", "indicator--4ef0a4a6-44f9-48a9-801b-82f4899f9a9e", "indicator--aa99cac9-03b1-48d9-80d5-2f9c0aba4cc7", "indicator--3c647570-8103-4ae0-8709-c375b946c2d2", "indicator--7eb13127-d77a-4725-a559-0a438503b46d", "indicator--7ed7a26d-7f6b-4d98-a311-845673f1bccf", "indicator--691ed4ff-e032-42fc-8188-90c0d57976ba", "indicator--a2ea5e46-fa87-491d-90a1-27b2a5b8b711", "indicator--e8de7985-ce41-4f92-9558-e50558546825", "indicator--cb6311f8-f1f4-4da3-bb56-8d01e5a024db", "indicator--64909ce5-0c66-405f-b5d5-7136f0295a69", "indicator--8faf5829-003b-4b94-9555-30b45a279d6f", "indicator--a307c983-a1b3-4ef2-9e0c-8469575f9932", "indicator--4db40232-de5f-4664-9d4b-9870f861a947", "indicator--5aef1b01-6846-4a75-8387-bb54096f7039", "indicator--66cc67fc-8376-4007-a6af-fe09c0ca0f4c", "indicator--d609357a-5f7f-46c2-b2c4-aea2e67763f4", "indicator--8ac2d252-d784-4eb9-af18-571646beb98b", "indicator--e9f1f1a2-1304-4c4f-bbfe-36f96d98323f", "indicator--8fce3577-12f9-4df8-8f5e-1c6f0843428e", "indicator--b3d6b077-f537-4a74-b72d-d9511ba01895", "indicator--6cee72cd-ef7e-4b5b-bd14-2d2d938f82e2", "indicator--e3762fff-6746-4dcb-9c86-9f15c54cbb08", "indicator--3ad85438-8af2-4524-b920-a09e22d52e72", "indicator--e43f827c-6d84-43a7-a0a9-f344573372da", "indicator--4a8694d4-9ae4-4784-a34a-ef5c50c55de9", "indicator--a2761b74-7989-4098-ac74-6713b366d4d0", "indicator--c64460c4-5b9a-41d4-b09d-dd81ea1432ec", "indicator--97d85f58-88f7-46a9-8e94-e89bd225bf3d", "indicator--5fbff303-2e0b-4335-8ae9-47e1255776c5", "indicator--0c8b819a-26fc-411f-a733-9d7e5683c494", "indicator--a56dcc6b-a786-4362-9c94-69f84636c310", "indicator--33ff3418-2c3a-45dd-b84f-05e0553ffd18", "indicator--26f6968e-db32-489d-8a3a-df4ea951500d", "indicator--cbd6c9e8-aec8-416f-b4c0-43905a419873", "indicator--5e7b8d87-122c-497b-bd16-9719500adc0b", "indicator--19194de5-bbb0-4ff5-a16a-40e59522b9e0", "indicator--76c7eeaf-3be8-430f-b654-51c2920a4235", "indicator--0364788a-32e6-4f70-ad29-44f804623204", "indicator--9716cc0f-b66f-4a71-bc39-644b3e4514df", "indicator--9e8dac43-15d8-431d-9c3e-125bd10ecc34", "indicator--1d31cf9f-7f66-4cd9-ab34-bac6cfaa5460", "indicator--d2ca0d9b-735f-4266-8935-2f90f548403e", "indicator--1468f1bc-9f1e-432d-aaa3-6358554b694b", "indicator--d1e2eb43-6de3-43c3-8e5a-dcb17cb5ebe3", "indicator--73563ab9-b22c-4e23-94ac-4f7af970f557", "indicator--8a5c6a36-c7d6-4ed0-b468-1ca260d5e775", "indicator--d39aba25-f15a-40fd-a48d-5221f4cd41dd", "indicator--cf89ba28-750a-4b03-9793-f8aa277420f1", "indicator--20c99d9e-320c-4cec-9999-2a7f4c6c9afe", "indicator--ab10d156-5e00-46d2-bed5-24a370128daf", "indicator--cb34ae4c-58d5-41ea-a80b-4ccff3da4495", "indicator--25783f68-3e5d-445c-9c8d-d18362d14e20", "indicator--e7f43ac4-5e3a-4f1d-a8b8-fd8c32aaf12d", "indicator--f4217949-ca41-4e71-ae90-07987b6c8b9e", "indicator--6d923d2b-e342-4f2a-a6c9-5be9b8dda000", "indicator--7727deaa-36c8-4d37-8072-961d9d4369c4", "indicator--41cfe2f1-e757-493a-be23-dd9e09c02418", "indicator--d33b57c7-4e46-49f5-a4da-e5d85bbf3213", "indicator--261cd7d4-2a1a-4607-a2a0-138abf05487b", "indicator--b34d69dd-0935-44b8-a1f1-25e8fbd4d557", "indicator--43dd3484-9eef-4979-95fd-fac6eb19921a", "indicator--cf7facd2-6e94-497c-b8fb-1c8104c517e6", "indicator--104fa521-58c0-4bed-84aa-d0347f0d2ec1", "indicator--06345bee-4a8e-445b-ad1e-b5ecc758fec5", "indicator--bcb5cb69-389c-4260-8c23-e6f393421eaa", "indicator--5e2c19fe-fa18-4a50-ac06-c135f2d1ede3", "indicator--558881a1-0613-4735-9ff1-2775ca5d8d2e", "indicator--d82c58c0-137c-4162-b79f-1134c47240c6", "indicator--904457e9-b9cb-463e-a80f-e854cad110e2", "indicator--35680692-b75b-4249-b8f0-5b81abda0157", "indicator--9e7e649d-98ed-4c72-b774-f2c0112f336b", "indicator--8a2b8dc0-b762-442c-8198-57d8376b12d5", "indicator--89734791-3d58-4681-86fb-67af9aaa67ba", "indicator--4590ca0c-f41d-4045-8b6a-67e60439d33b", "indicator--6c3ef0fc-aabd-4b4f-9c27-eb018611a028", "indicator--65623fb3-5878-47f9-8a9b-6a016fcac849", "indicator--09d0c62a-1af2-418f-958e-95b46d563616", "indicator--2ae65060-e376-4e41-a0e7-f1c67249f142", "indicator--243785a0-a6bb-4f5b-8aaf-83984a3e5b30", "indicator--5da0c8c0-5b3f-47ad-b03d-59dee21936a6", "indicator--67012171-86c4-4b4f-8b91-81c79c072693", "indicator--a19ad506-f246-47e9-8515-f0314f8b1f50", "indicator--b467bd13-80c5-414d-a334-539d452fe8be", "indicator--980e942e-65e1-4c96-b0c8-9a161591c2da", "indicator--e334eb26-85f7-490d-afe6-e50449c07717", "indicator--da1e3b40-d276-4e1c-be68-95e7805535ef", "indicator--1768a358-9ff3-4b1d-84e1-504ae8616522", "indicator--30bb6d65-4708-45ac-8542-00e0ab891597", "indicator--ccedcb6b-319d-4737-bf87-a371b07f85d6", "indicator--7f66a834-351b-4b93-8ee3-6db4d820e1ee", "indicator--1f19a79b-38a5-490f-bd60-cc7b0528f043", "indicator--d6bbb987-1d2d-4da9-98f1-68cc3ff5f978", "indicator--de20b55a-9df7-4869-a3d3-6fcdb07ff4ff", "indicator--63992251-2153-4498-b4b7-556abe81ba1b", "indicator--c5177e3b-68e2-4ba4-a090-987fc5fbb526", "indicator--e1562c13-6780-4525-ac2f-3a83a649a583", "indicator--d278e63b-767b-418e-b077-65a6da92a96c", "indicator--92258c2b-d8f3-47c1-9de3-eadeeafd31d5", "indicator--411ce190-aba5-4cfb-a042-91815e3fb951", "indicator--87099170-2c89-42ab-9ee7-228b34d150ae", "indicator--bcfd407b-8a87-4d9e-a8be-f64f1909d32b", "indicator--b49b0862-cba8-4571-938d-aaf8a091571e", "indicator--f0640ec9-272f-483d-b415-c96acba636fe", "indicator--2377316b-d2c9-401c-9aed-69115f1c30d1", "indicator--e55191d0-1fcf-4e9c-971e-0b3f52a5f9f6", "indicator--bdf6211e-0f85-4849-afb5-f5827c7c8731", "indicator--e3da1ef3-902b-42bb-81af-b2cd984d4053", "indicator--42bfb400-4e6d-4462-bb80-ada792b2c1a8", "indicator--6bb924dd-69e3-49d9-a2ca-95f39a7230dc", "indicator--1582a876-7e8c-4775-b9a8-d27f268a68ab", "indicator--7787f392-88ea-4bd2-9340-e3d2fce8d257", "indicator--ce00219a-231f-4ec8-835f-ac165e284555", "indicator--ed565df9-ba37-419f-8f20-0a0177f88b31", "indicator--2436cf47-4077-4a5a-ac80-df6e7d9ade32", "indicator--f6477f8f-6dc7-46f6-927b-5591068af8e5", "indicator--588b33f7-f861-4b12-83e8-9e8c614460e5", "indicator--5c7c5641-2df7-43a5-9c2f-472a8462b2c8", "indicator--45ffc426-f1af-42c8-beac-39e07cc67d7a", "indicator--ab23e7a4-2462-452d-9313-c3199c55c850", "indicator--0fe22a91-e10d-4025-8e78-f0169ec40be6", "indicator--9231deb7-d54f-43f2-b39a-9902f34b2aef", "indicator--a8e87fac-8e53-4d47-b237-17cf7a32fd24", "indicator--37ea5e97-1d96-4fe7-80d8-5ac88fb3f944", "indicator--b0414c9f-ec04-493b-bb3d-ca6cb6824b53", "indicator--d96f47a7-fa1a-428a-9432-4847fef42c9e", "indicator--b261a45d-910e-468f-954a-2c4e5e12f013", "indicator--ac28af38-e64c-4778-b8ab-b0cd4714b00f", "indicator--95f2d3e7-ab7c-45be-812c-7f781ba6dc51", "indicator--887aec1b-5b31-4446-b950-b98833bdb499", "indicator--b7534a77-145d-4543-b227-f121a5d7ed52", "indicator--4edd4173-5150-4159-97d5-a37423845d15", "indicator--8a93beff-6097-45bd-aac4-98d01bf386e8", "indicator--688d0a31-a1fa-49b9-98fc-492b26bb08b7", "indicator--1a738ee6-d6ba-41f3-88d4-ef20150ada45", "indicator--e6806c06-6f82-4678-b104-cfc882a2cd1c", "indicator--6823692b-7ec5-4691-9112-a120e1c17935", "indicator--ba0822b1-2521-40b5-b1dd-56e12bb54019", "indicator--a80cd7e8-b6ef-470b-9d7c-4346c6ccbdef", "indicator--14e27531-6369-45f1-966b-8c626be9536f", "indicator--22629315-8056-4fac-b663-98745b797203", "indicator--c9557e94-661e-4372-bf07-aa0cea6a5d06", "indicator--76ca12a2-24bf-4eab-a0fa-06610ae037f9", "indicator--f626d1a3-fb88-4495-ad9c-46e6c52edefe", "indicator--5fd8f7a2-2eb0-45ea-bf57-af8829d552e0", "indicator--b057c9df-f888-455a-80e0-08db63adf3dd", "indicator--4dce37a7-d3b7-4443-bbca-d594331f3f57", "indicator--61b41ab8-1476-4be6-9cea-8f11d0337a86", "indicator--1fef4e78-c32c-478b-bb62-da9d73ff45f6", "indicator--9f0136bb-7709-4b80-8ee3-f90dc89c91e2", "indicator--26e0f66f-36e0-4144-906d-d8db2e6f1765", "indicator--84559a26-fe45-4f36-a193-862604766384", "indicator--eed27e6d-a65b-4beb-a6ad-36d3f148c195", "indicator--878f7903-3939-4c42-a1ec-25f49474cd1b", "indicator--7c66dd3d-316e-4897-b75e-e3ecfa3efbf9", "indicator--18a41208-387f-4618-a851-73606a950b77", "indicator--68bc1844-a8e0-4b38-b89d-1b6358436867", "indicator--d320d744-f8f0-4dbe-bc26-0ce84eaee65c", "indicator--65aaeef4-6828-4612-9c1c-7a3ed2666717", "indicator--e55bdcde-7639-4f8c-bc47-e74c520d7399", "indicator--4b360a4e-5882-42af-9263-871a99711d51", "indicator--27bf1497-6943-44e5-8895-a9a56fb835a7", "indicator--86001765-8368-42d2-b97c-eecd3d24c2f1", "indicator--74f317ae-3b9c-4080-86d8-044ccd1ec90c", "indicator--0670ab14-bd11-4734-99c5-399206e09965", "indicator--105ba084-8ce6-4bf0-a911-aa791d433d94", "indicator--e35cd702-51d8-48fa-9072-7bb49b1ed1e1", "indicator--2d4df57b-1ed3-4323-8a81-f725d69ee138", "indicator--ba324a17-8c75-461a-ab70-9022d2603946", "indicator--9a46949d-8559-4842-b676-8a25d7d5850b", "indicator--4aa27874-bfdf-4332-bb87-30d883326dfd", "indicator--74c15dbb-8260-4a21-8fd4-923eda4c032e", "indicator--af725ac6-d709-47f9-867b-b66f3e773653", "indicator--5535d01a-a792-4bba-8b2d-8e993d227af8", "indicator--ab53735c-c3e8-4dad-a29e-ee8d7c11c40d", "indicator--80251ebc-fe7c-446c-88f3-77d9f0c9b0fb", "indicator--eaf855ca-1ced-408d-8830-e8d4575000d7", "indicator--39ab8722-aac2-4c2b-bae4-fe809ae17bf5", "indicator--5d4f6830-3ac7-4937-bb93-63b7df3cac55", "indicator--2311bd7b-62b8-4375-8f77-300a3964cfa9", "indicator--4471ef1d-76a2-4c8d-b0db-7539421cf384", "indicator--f1adc3c3-8732-4e1f-a980-95647950c929", "indicator--cd17dbdc-3f0b-47f7-8dc0-646012b2ffce", "indicator--5627374e-d4fe-4026-b0cb-b892b0652631", "indicator--a71fb111-2ca6-4435-b877-ba76d3f3278a", "indicator--18c9d87e-af99-4417-b337-48bfa733e918", "indicator--5440f5e8-8e31-4447-beba-a86057875cf6", "indicator--36d2c23e-eb36-4313-93ec-ff9c78a9c6cd", "indicator--2d3a60a3-cb8d-4ec8-9efc-6c095a31e187", "indicator--0be60eb0-3f6f-4b8b-b358-af92391c6929", "indicator--120b4363-4e11-4f5f-a9ab-d26fa9ac6958", "indicator--a8ad1dac-9891-48e8-8d03-4890f212104b", "indicator--2c7b9a45-7eb9-4d18-b6c1-f1c956c04f3a", "indicator--ae307ce9-e43b-461b-834b-64c0de9f7ede", "indicator--2f991b48-9c10-4d5f-92e1-7862a79b1165", "indicator--89ebf8ae-2f75-47d6-a94b-6b67a379fbfd", "indicator--27a7bb8f-fbd0-496d-a2af-ff197eeb3bff", "indicator--3740a10b-1fdf-44a1-97d3-c86bcca5a6f1", "indicator--4d3b2d1c-1d8d-4b63-bbb6-d3b1a527df2f", "indicator--fdb49697-87d6-4746-b929-7ee0123f3f95", "indicator--eaed7532-4045-405e-bf1b-2a43c333f9bd", "indicator--f3a1070b-73a1-4edc-b7df-988b234f96ea", "indicator--bc60813b-169e-411f-9892-849bd8277b89", "indicator--07000620-fc67-432b-8c2a-b6d6d9e984c0", "indicator--fc7e1ec6-44c8-4c46-8d88-79162cda24ad", "indicator--3251d447-40e7-4479-806b-d9c4098bb827", "indicator--62803f4e-ab42-4dbe-a23c-6bfe67efa544", "indicator--86b807ac-0eb7-45b5-a1ac-34eef624e928", "indicator--f7a0ea31-ab0a-4a94-a099-055462c62ec8", "indicator--c00ad383-77d0-4b7e-9132-dbc03ac7b8ff", "indicator--549dd593-fb73-45b2-909b-87318cffd331", "indicator--b8fbfc03-9f6c-42af-93bd-6d1ce8020bf0", "indicator--a42ccf5e-a7ac-4c51-a525-a4d78b57b93a", "indicator--9cdfc01a-7920-4e7a-95fd-b049d8736390", "indicator--7bfd0ba8-6c19-4adf-863e-dae8a86ad3e3", "indicator--0ce24ac0-8f01-4dd5-b885-326474b20dcf", "indicator--7aaa6557-10f3-45f6-8c1f-56311ccfc551", "indicator--4bfc44f5-782f-4aa4-aadc-4a960e960cba", "indicator--07bd07c0-4d5f-4cb5-a980-0de47e18ee30", "indicator--cc47eba8-800c-4c64-b264-6a5904e357d4", "indicator--65801279-b919-4c08-be12-55351016dcc8", "indicator--e7bb1238-dda4-43e5-bdc8-5884dbf95003", "indicator--e7d9bbec-e34b-4e6c-aa20-adf90d00d520", "indicator--f5f754d8-57f2-4547-8daa-876d3a860563", "indicator--0e26ed10-c790-43ed-a24e-8d589494cdad", "indicator--286fc02a-51c9-4aa6-844e-04ac028fe105", "indicator--cced2d6a-7259-4ae4-b909-19ce8f91150f", "indicator--8f46af2e-0b0c-4ad2-915c-6b9281a83878", "indicator--2350262a-d008-482e-94df-b7762d7b823f", "indicator--9fd565dd-88a5-4b16-9db5-4f50e5cf59aa", "indicator--aaabb558-5895-4048-97f2-410ae4d4f5f9", "indicator--17a0e90b-caff-4e42-87f0-8f27fad27afb", "indicator--a2c1fd31-342d-4b42-9763-bff21e6fe972", "indicator--1bf04733-5225-4f1b-b980-cf74c3be1c33", "indicator--e85a1f96-df11-4087-b90d-5c9cc4130dde", "indicator--a1d0c17f-1d01-4bae-92c6-a99f02111334", "indicator--a3667704-72bb-4b56-a719-c98424b8db12", "indicator--490ac241-bc3e-4e6d-b64b-7731e9391c29", "indicator--b9e0d329-26cb-4628-b759-7604d5a9d061", "indicator--809843cf-a3ee-46e6-bb21-8b51228447f9", "indicator--e2eb4d16-16e7-4448-9575-f855c9020e02", "indicator--eff14dd6-8cda-4aa2-ad32-0e21786002bf", "indicator--d0c37f24-05ce-47dc-9827-f4b8169d3162", "indicator--244f7611-ce52-4e04-80bd-8ecb0315698c", "indicator--3197ea42-0bce-4405-b3bc-62034f92ec52", "indicator--bb2e0c5a-b506-437b-af5e-81b300cc402e", "indicator--bf47ddd1-6048-4f35-8ce5-fc99430bbd6d", "indicator--af96764a-8161-45be-978d-9f2b45e6aa55", "indicator--b8838456-b51b-488f-a9d7-473728104316", "indicator--f2d12111-193b-4739-b5e1-ada52918df17", "indicator--c746b077-fe9d-4cf4-b77b-d09631f402f7", "indicator--a0e7f058-e4a6-433e-abe8-2e9458a941eb", "indicator--2c21baf4-8774-4fba-bf8b-6cad2b4a295d", "indicator--d2a95ca8-9f5f-44d6-a681-d0a0966949df", "indicator--c6863ac8-bd31-419a-b594-b17a7882a284", "indicator--d9d3b922-fd16-4d2b-99f9-5a3d6de8a325", "indicator--3f27e44d-5ed4-4391-be0f-7879cddb240c", "indicator--5537d88a-45ae-4374-82f1-18bc1e2c5a4e", "indicator--66354340-3d0a-4cb9-bea4-81c59309e999", "indicator--caa5f370-4904-4469-89ea-7f31201086f9", "indicator--5903d8d8-58b9-4433-8116-702aeaab6d83", "indicator--2423dc33-377e-4e30-be5b-9878ab1c49f3", "indicator--e123caae-1f72-4412-884b-1395ac340467", "indicator--d2c013a0-d3aa-4253-a949-d09f1522fbbe", "indicator--6f1e8071-ad4f-4195-b912-82968c1ccc40", "indicator--2a0f7731-2b05-4df4-89b3-af126492f2b1", "indicator--4ce45327-3cfa-40fb-85a6-1bbea3cced88", "indicator--1f3dc84e-5ce1-439d-8f40-dbb773ee2f28", "indicator--246f410b-dba3-4c33-a13c-34d3e71af153", "indicator--2f85bc60-3e0e-4211-91f3-5c994feeb994", "indicator--6bda4727-e5e2-407e-b1a7-ca4f240aee1f", "indicator--d4be1f5f-ee51-4c82-8893-1ba14e57e436", "indicator--7c049746-38e1-45d7-ba80-c0194f3fe3b7", "indicator--a31ae30e-cc81-4995-b7df-79e8fc5faea3", "indicator--51eb73e6-06c6-48a8-ad6f-22bcacce151f", "indicator--eae1d99a-c461-4f01-9056-86c880635dae", "indicator--6f6801d5-80e8-441a-90da-39fd602941f2", "indicator--e2a0c70f-888e-499c-b0de-6597cf238db5", "indicator--666afd43-7e25-4325-8b6b-41efc7e1585c", "indicator--2db9672e-60de-461a-9286-bcbfbaaad6c6", "indicator--b1c6a4f4-2ab5-4f01-ba1d-6ae07bb43c89", "indicator--8f3035e5-5f56-4452-b8cc-3cd79f4bdc51", "indicator--d241b1e7-c015-434e-b6b8-62a24c75af30", "indicator--e421d474-ade8-4e2e-9bdd-c8e887c04afb", "indicator--f6ba23ca-7c83-48fc-ad8d-af5f2289809d", "indicator--4eb512fc-7886-4160-b5cb-4eb919f0eb3a", "indicator--717ce189-0b82-4d12-ae78-28133654463b", "indicator--580fc054-8f78-402d-ad9a-9c544fd5c186", "indicator--0422c249-bbc8-477e-ade4-e5cb04ac30db", "indicator--a518c221-3cc5-43c1-85b5-d66b634354b4", "indicator--09927431-1b74-4bc8-b70c-84f92df8ecd3", "indicator--c583ac10-be53-4afa-a3d1-f31ea3d56a4a", "indicator--24312b12-47f5-4724-9aba-ba6b0a7a33dd", "indicator--70bcf0c3-6eee-4552-a890-b773a4a71970", "indicator--426c1773-664c-4f36-843f-67dc650fe260", "indicator--a4413ddd-b6ac-4a93-bdcc-6ae79b2d4f19", "indicator--06816165-590c-467e-b9f3-eceb9dd0596e", "indicator--48f5da25-0f79-4f04-a45f-561428eff653", "indicator--c03954db-2d0d-45d0-a11f-c60051032d60", "indicator--25edd270-7aea-498a-acbe-9ebd7f455c97", "indicator--7495585f-1fc3-474e-8778-ef2fd7257258", "indicator--0f0dd013-709b-4956-a4dd-cbf6e985a4d5", "indicator--6537fe00-c23f-4e13-b491-bee2e0f486a9", "indicator--40313d8b-d1d7-4fb6-86eb-99aab9eaf041", "indicator--d01e5084-7ccd-4102-9484-cd2115547853", "indicator--3fb0c962-6584-4a86-993f-b23d3f64dd0e", "indicator--82b6bb69-185e-4bac-bb97-80159cdd5445", "indicator--91090de1-4011-4d23-a979-c7d39478f46a", "indicator--612a960b-fea5-4bec-9cf1-0cc919366b41", "indicator--1cbbd2ef-f4fc-4f36-8d1e-871dec9a1fb7", "indicator--0c20a132-59a2-463b-903e-85b79ebefca0", "indicator--1b55d51c-6919-4149-a74f-9c309fc0ba97", "indicator--c65af1b5-8a18-4fb9-81c8-63dfcc6a6d60", "indicator--305b9861-9c9b-4454-a85f-d6491ce349c2", "indicator--5a20b396-5a85-44eb-861f-8a62ab0b0e01", "indicator--3d33d57d-e4d8-4724-87fd-8446cdaa132d", "indicator--396af4bc-4fa6-49a3-9624-6f27ac5bb4fb", "indicator--470d1723-c81e-44c2-8d70-96a00c613799", "indicator--87a7b193-ff50-42c2-b73f-cb02f6d18c10", "indicator--81b5d90b-b254-4058-8e9e-14a7e175f758", "indicator--ec949152-1591-4d7e-843b-3bc3b90c23fc", "indicator--3e7f597f-eddc-4a96-9c54-9a3751e8ddca", "indicator--fda2eb43-ffce-4610-a149-13ddeb788999", "indicator--ee51cd7b-9c14-4aa7-b8be-78297a50f9ec", "indicator--d2c5aa7e-cd33-4f79-8df2-480bfa152510", "indicator--152744ac-a23c-4704-8d1a-462d6e2d69b2", "indicator--d5273c4e-e0cb-4802-a696-b9e294a3c2ba", "indicator--8618f1fa-7f04-4cf6-91a6-5fe95a2c1668", "indicator--9e3255ce-ad68-4c9b-8113-6a17fb3efcc9", "indicator--2fc1953d-a812-4f46-804c-4750f88a61b6", "indicator--737247db-d0d6-4128-b8bd-fceaeeee8c68", "indicator--ad0b59b9-2127-4444-8cf1-4df0b2715cdb", "indicator--e38371f2-b9b2-42e0-8f69-a190aa528917", "indicator--4c9b68e2-eaee-40bd-b4ce-b9faf5c34450", "indicator--3af5d401-89c5-4ddc-9f9e-96dcd9ca4b09", "indicator--9612ee5c-47c8-44e4-a252-091de2f86dbf", "indicator--86009309-1f24-43c6-9f4c-4b5992b9ff39", "indicator--cb83315d-905c-44ac-bbb4-16f50b254e86", "indicator--e3c98faa-0837-4587-afd8-a8b5f2ffc87c", "indicator--308903f4-b5eb-4624-adde-1bca866c8e08", "indicator--287dbfdd-555d-430c-be16-dc5e1a1828bf", "indicator--b0ad57e4-740d-4812-a855-22467ef58698", "indicator--6a2e4253-c540-4010-b753-4ec346ebddd8", "indicator--8a14fb53-4113-4a34-bbc5-454b6c10ab03", "indicator--aea569cb-e30d-4d07-a6c0-d8ae105d32aa", "indicator--db99c78c-57cf-434f-8e6f-58c6c5635b5e", "indicator--2aabe2c6-dfed-4492-9797-d01e67fc626c", "indicator--6c6fa86b-d88c-4196-bf89-390830b2ca9d", "indicator--f5ab2648-2ee5-4d75-954f-08733bea0a70", "indicator--85229c7b-7447-4d1f-9e82-2de17481484a", "indicator--0ce86e14-379d-47d4-b4d6-8b19881c4e5d", "indicator--ddbd513e-8e67-42f3-a1eb-2a2286c2ea16", "indicator--e99e1652-6add-4328-bd32-2e1b0c453e83", "indicator--80277948-9243-4068-ac2e-023f0a8cae62", "indicator--0fd43ba0-30b7-4dd3-9647-d98e019dea2e", "indicator--20a27116-756c-44d7-bd56-bdff4ee80f95", "indicator--11f90a26-2a8f-423c-9723-37d069568a74", "indicator--2aeb48cc-948b-4cfe-b0b2-8ad2204b09d7", "indicator--89422e0b-6ea5-484c-804d-4628d0aa622a", "indicator--d7718927-ea2c-4db8-9a3c-f8b876154c34", "indicator--71694e25-0ce7-4e44-b1ed-54d9afedb91c", "indicator--b0996dfc-480f-4c38-9bcc-512bf6723ab9", "indicator--35f372ee-d4eb-4ce9-9f41-fc3ba4b2f653", "indicator--8171f5a8-e8ab-430d-8ee9-9e4e71c8f9b2", "indicator--7693b09b-7104-4d4a-b489-eb8f1c4dc332", "indicator--21a51dee-b201-419f-a9f7-d8e96b7e51d1", "indicator--8fc85af8-4a7b-4688-aa47-05d78a732177", "indicator--fa464c98-0558-4202-9266-4bbd013a1a71", "indicator--f00b489b-523e-48e7-b08f-8450d06b73cf", "indicator--1bb0e728-e027-4eb9-9099-e82a18646439", "indicator--e82238f9-54e0-4405-aa5b-907c98d43030", "indicator--17e319e2-e447-42ad-8429-46f8d52d5f01", "indicator--060c446c-8af5-4cf2-9172-d03743810ba5", "indicator--3052499e-f9ce-45ce-9ce0-489ebadc4fd6", "indicator--54b5455a-6f11-49b4-b1f8-e41e6c2c5f4a", "indicator--1d7724ac-7475-400d-b45d-d2e59ddc2a2a", "indicator--4cdb2aa0-51b1-4d38-96be-edd5e779a257", "indicator--ff7c78d8-ab5d-40f2-aa9b-d8dcdc435921", "indicator--b7dcc9e9-2931-4f92-bc64-3da36f6fc470", "indicator--7f5e6a36-9626-4a06-a137-3b4e96996942", "indicator--9fe5a4c0-a3d4-493d-a00a-ba3958f68ff1", "indicator--34bf5b27-4c2b-457b-8e9a-6fe69b11dca0", "indicator--3e11b16e-750e-4bce-a359-92ad6bbb179d", "indicator--f1ff756f-1cd5-499d-8929-18450df65181", "indicator--87d7930f-2d71-4969-9287-8899d7a9df1d", "indicator--4f93ecb3-a49d-4738-8694-52ed66744ed8", "indicator--2d6b9f0e-f95f-4d79-9bb5-2336c713275a", "indicator--3f161a32-070a-46bd-85fb-7d559998bd25", "indicator--2551c476-20bc-42fa-8517-0985ebf23b96", "indicator--4a35f146-538b-4b2d-8f93-2bb9cdbf3043", "indicator--bc251ba0-3552-4649-88ca-cd32abff0114", "indicator--262ac64c-6c8a-4a97-8951-65475a21efa2", "indicator--b55fec15-ccfe-4fb2-a3bf-fd74f6a91084", "indicator--6716151c-7886-445a-8e39-314122846b88", "indicator--9748912c-5a84-4256-b3ea-39ee3ca017b4", "indicator--e77285c5-a051-480c-b42b-f88593626c60", "indicator--9e6fc9e9-07d8-493d-a567-e12dfa4fc7c5", "indicator--d5fe527a-7894-4574-ac46-498f5f1a64bc", "indicator--ceb00b40-2831-4c4a-9488-4b4d89aa544f", "indicator--468a51ce-aac8-4d62-8286-e5150defb740", "indicator--e922ef93-1d7f-454e-b7b3-1d654b47ddfe", "indicator--00b37384-2c99-4c9f-b1fe-076d3663772b", "indicator--5fc227d1-3771-4e38-8f6c-30889c0d4620", "indicator--ba2ae67f-52c8-44cb-b0bb-d0811d64ce0a", "indicator--761d513e-2184-4654-85ff-11b016153bb7", "indicator--30f5e24f-fd8a-4204-8ed7-669dded8b1ae", "indicator--1c93099a-ff3c-4c5d-8958-33cda16d9e57", "indicator--e85f2669-46cc-4d01-894e-f039f9cfddc3", "indicator--12b6d8f7-4b62-4d37-a937-67f8b23471c3", "indicator--8516d410-0435-4986-babf-09e787c609be", "indicator--5db34ca7-9122-4b96-a229-5218c0116991", "indicator--3fba1ada-14b6-491c-8b85-c95d61087523", "indicator--a633bc47-ed47-4c22-8409-126cb9826af9", "indicator--918db999-966d-4de6-94b3-4af15b9a606e", "indicator--cd671d6d-473c-4457-be56-a96833740a7e", "indicator--92f484d8-a6bc-430d-8edc-87a6155a8eb3", "indicator--2a3297a6-0619-4fba-b240-e817f69cb69e", "indicator--43dd8c47-90be-401f-b6d4-6476d3f7867e", "indicator--072c32a2-0f4c-4b20-b2d9-9a51e00bf25e", "indicator--d53301e7-b0e7-40c7-8a91-faffc2ccd9f1", "indicator--29072112-ba2f-4e64-a8a5-6fa3b3c18864", "indicator--6b252222-11ae-476e-8109-1a77e90fa1b6", "indicator--fd02bc51-c7f0-45b2-9477-bb2eee2443f2", "indicator--bc2116c2-9a4e-42c5-9efa-1bf4cd03f88e", "indicator--1bc4e38b-6e00-4de0-9a98-cf81b5887b2e", "indicator--d78b199a-89f9-4687-99a3-f90f623df965", "indicator--8e188769-60e5-4d7a-8ace-b072470204d0", "indicator--1e0816d8-aa38-41a3-88a6-14bbbb16c900", "indicator--b178389e-0083-44fa-a673-7921ef4dee86", "indicator--62733fd0-2b3b-44c8-96e6-80e10472fda5", "indicator--e54adc0c-0c3c-430c-a121-d7d10facfeea", "indicator--619bb9fa-57d3-4fb0-a619-cfa67caeb676", "indicator--685db73b-7615-4a01-8bb0-32c2a0a70b25", "indicator--215a0f1d-f631-4c1c-917e-97b6a954d9cd", "indicator--11baeb79-54dc-448b-b437-3d116320b0ab", "indicator--80325c52-dacc-43f5-91f1-d17cedc252da", "indicator--2f45c94f-592b-447a-aaf8-adc1f0abbae3", "indicator--f6521e03-eb94-4f98-a2df-953b4d35f8a6", "indicator--07fbe3d1-7ee4-414a-98bc-74d55364fd94", "indicator--a67c1efd-d9dc-4056-afc1-6bb9286d4a07", "indicator--53dd2656-86b9-4c13-864a-e5b3c7e15828", "indicator--9b323884-cc53-480a-8af6-6c7a481f5fd2", "indicator--7b9fc358-51d4-4014-a16f-01cb63a43cd6", "indicator--2ae24bd9-5a72-4a51-886d-838b0adbfd9b", "indicator--bdbcd61c-e1e5-471f-b977-92c563faa793", "indicator--53a86409-372e-4944-86d2-ef3fadcf66b0", "indicator--2a83261a-e6f3-4e8a-94b9-3016dfb9fad2", "indicator--142c51a1-b71d-45bf-a419-2118c25a93fe", "indicator--b9d10ed6-f74a-4d96-888e-8bbd808580c6", "indicator--1c7933ae-deea-40f7-a2af-c878f867bf6d", "indicator--07f3fb51-d4ea-42f4-b315-11e04f7ce28a", "indicator--a4869fcc-2a61-490b-946d-238b5aa4da53", "indicator--ea2e1e02-239b-48c2-95c8-a13920ac0f53", "indicator--b2839fcf-1822-4e5e-9f63-0a22e6020665", "indicator--d9141a3b-2b34-4053-8788-f2aa6009cb55", "indicator--2c718cb3-0dcd-482c-9132-b903e94a6b4c", "indicator--70bdec1d-78ff-408a-95c2-1b7cd6d902cb", "indicator--ff43c26c-5d6a-48c0-8225-b085a3f743ce", "indicator--da5a4461-4437-4af2-9d86-070174eca842", "indicator--f2138605-c005-493d-a215-8672193cff7e", "indicator--c9e498b6-4cf6-4566-9797-53974dc58d94", "indicator--f4974c12-7995-41f8-b703-125eed01abd2", "indicator--96f65bd5-835c-4912-96f8-2351c9c5bc6c", "indicator--c97766f1-87cd-4f2c-9797-b72b637a962b", "indicator--2f0a3831-e941-4f61-b632-bbf99fae6f3e", "indicator--7da2e218-528c-4f6b-8dab-a0b734a5e3ab", "indicator--39d10574-2189-42e8-8204-39e4c619b0e4", "indicator--e8b79e2c-e27c-4858-aefc-9f017f1feca6", "indicator--90d0c5f3-ec11-45a7-a312-9cbee25f65ce", "indicator--6aa78a83-df21-49f6-ba20-b8a03cb079af", "indicator--b8c73c07-eace-4980-9405-81105f99658e", "indicator--44ceeebd-b8ca-4fd7-8343-9a4feba2ffa9", "indicator--d923e392-0c7e-4c92-8e6c-bd94f3ea34b2", "indicator--745ab204-c9b3-4b10-98ab-a822fb60ec6f", "indicator--7db7e5c5-2a06-41c5-b010-049c92c90087", "indicator--824cc343-bed1-483d-a076-bffeca170bfd", "indicator--91bbb41b-3abb-490c-adba-7b2eda851270", "indicator--f419722b-dd27-48e2-b8cc-62569a1ef466", "indicator--63bd74d1-c058-4ff7-b7a8-97050892c0d5", "indicator--599662b3-5a4a-4a21-a517-3a3f7389a22c", "indicator--27e3e64f-f049-46e8-8c88-0dd0154427b9", "indicator--40033701-e025-475b-84cb-3881cbe0b55c", "indicator--8b908e73-245d-4dea-8501-c20ec62c7b6c", "indicator--c43bc021-0572-4fd0-a29d-60c68ee6848d", "indicator--81227b92-13ad-4e5d-9147-09ee8f69250b", "indicator--60314f6a-4c4e-4447-845b-8b3d5953726e", "indicator--01990ddd-e55c-42fd-bd20-c412386d588c", "indicator--904e5368-067c-485a-a786-e0bd2d2f10e3", "indicator--7adea12a-86fd-49fe-9c24-ccc21a0b9c53", "indicator--135d1138-b30a-4f43-9e22-c2ac9f2af287", "indicator--f93debfb-2bda-4089-a8de-eb225ac01522", "indicator--cceca675-4f90-409a-87ce-207e6a465c67", "indicator--95f37512-f876-4ed8-8a79-a124eaf65b09", "indicator--c9b24f1d-3b72-49ed-8e73-40cd47b5919c", "indicator--ec6dbcf8-f18e-43b6-9070-5a589b8bf34c", "indicator--eb99352a-4da9-44c5-9c6f-a0d3e0cad8f2", "indicator--f2ef5614-a3de-4437-884f-90fd36d6a94c", "indicator--0d042c98-9fae-42dd-8c22-bc3d2aa00c6c", "indicator--8823fbe4-2eac-44c5-ad71-607c2eea4f09", "indicator--2d24d9f6-ab04-48a9-a809-7a8d8af57b08", "indicator--9829cbf1-b1a7-493f-8f48-12d773020c2d", "indicator--b7dab4fb-3348-41d8-87d0-716024a3805e", "indicator--5f129d6b-e784-4d39-b34a-38bc280d5212", "indicator--8b5dfda6-7510-4d4d-baeb-62366dd589d7", "indicator--ab5099d5-dbed-4213-bece-e32bd23be806", "indicator--b999dee6-6de1-4a4f-87f2-2968e4a743ec", "indicator--02d375ee-f071-4a0d-b2d5-74140b9171c8", "indicator--e9abf0b9-07ad-42ed-a9b1-217365c18d52", "indicator--57806929-a732-4ee1-9772-d01a141a2a76", "indicator--843268d8-7b6e-4239-8f7a-d5caf74d1d32", "indicator--e7faa3e2-e462-494f-8a01-df6077f77dd5", "indicator--352097f6-95c7-4a65-af85-92dc9c019baa", "indicator--2db37ee6-fec3-45d6-9f97-acbe95dd94bb", "indicator--b1b279fe-bf26-4ab9-8ab5-dcb0a0aa56f3", "indicator--ac2068f7-7b8c-4f41-a71c-692afb155911", "indicator--f80def07-3b70-4d45-a660-476c48216ff2", "indicator--e8e32a6f-f031-4089-8cbc-8892c8825bfb", "indicator--02e30234-b859-47f5-af73-df61653a8c51", "indicator--b08841b8-678e-4e53-bf4b-a3e9800ca973", "indicator--3dffe59e-a2db-4393-a7bc-06180b575170", "indicator--035e298e-9f7f-460a-afcd-0588ae7716b0", "indicator--24659014-ba91-4de5-8a4a-ceea375038c4", "indicator--fd504543-3e6a-4c31-9294-ed15e366c926", "indicator--6af6b4aa-3741-4b1b-8a7b-52a16be35a2d", "indicator--3b059a34-8c8b-4049-b3d1-11df2d337ccc", "indicator--8a167f91-86ab-4aaf-aae1-c1cc8f3d5360", "indicator--dbdd28f5-d0e2-4f59-b061-46a522b20a3f", "indicator--21eaaf50-16e8-47b4-82dc-f19cc957bd51", "indicator--d0588a0a-bb4d-4f4b-bed2-6ebfbb5f274d", "indicator--6ae5315c-b50d-4b36-a251-6e3ead4a13a3", "indicator--ed568505-2ceb-41e3-b033-4f376049923c", "indicator--6b7796a7-9a99-4658-9753-0df65d6e67cc", "indicator--bde1fd59-9901-40d6-923a-41a497306872", "indicator--395c314a-7386-4806-9fcc-cd4ac4320732", "indicator--8f6bfc82-8e27-47b8-a475-027ba3afe072", "indicator--d4664886-8789-443b-b26f-5109e1735b78", "indicator--a9462915-dc84-4fa8-a48e-f5306b8bd3d4", "indicator--ddb2fac1-f711-4ce5-8d3f-0914269ff87b", "indicator--014ffc75-9184-4954-a96d-e73ee4b95089", "indicator--6eb31b69-9a37-4dbc-b892-fd7808e11baf", "indicator--163ba043-856a-4d45-b3c1-9e1dbf125d37", "indicator--f701bb06-a75f-49ee-b4f8-c79cc4ee998c", "indicator--e0accabc-c389-44b9-ae4d-286bca7986fc", "indicator--efd16477-2c4d-4089-9c07-dcfc2b16a687", "indicator--bdd781d1-2616-48fa-a3e5-41773bf11f23", "indicator--dbf3fdb4-c09d-4d60-8c01-17bc6cb6b163", "indicator--3fef9704-925d-4ed7-8d03-7838e886ab4c", "indicator--6dfc3749-c873-41c5-a8a0-890ff0758902", "indicator--de6225d9-0199-4ddf-8573-d93654662e8f", "indicator--367517d2-7381-480b-a5b9-fc66bb89bb07", "indicator--21a171e7-a0ac-4a44-a383-9a4d5a31d74b", "indicator--6f6160f0-7005-4d57-a6d2-8e67c3b53572", "indicator--f5326f56-3bbc-4a4a-bbe1-b998eb788663", "indicator--b042304b-7c99-4d7f-b64a-f4c84a428b30", "indicator--aeecac14-5c56-4526-9e01-c8d360b65c10", "indicator--3c20ffa9-fcb5-4fa3-b4d4-2fcab371379e", "indicator--343c983e-b32f-4678-bfb4-3510945bfdd5", "indicator--c0025b2f-03dc-41bd-b96f-afc3aa261175", "indicator--899cc834-25cb-4cac-8fc9-557f3c7a3a41", "indicator--f75836a8-5e68-43c7-a914-38f06289d8fa", "indicator--5ba89d38-e2b0-478b-b70a-7d3aade3d742", "indicator--da3ed989-0d36-4306-b7b1-1acd36c9bd91", "indicator--9f08753f-40f4-4dfb-9161-37e8daed7489", "indicator--6777a7a7-30fe-4349-a979-6698c85d64f6", "indicator--bf63a72f-c9ac-4f68-b67e-349035e452a3", "indicator--690dbce5-937b-43e7-9c3a-d6c67c5597ba", "indicator--599c028d-6375-4940-bba4-01abf8421100", "indicator--eee37693-bd83-46d6-a3b2-fc24013cfa16", "indicator--bb4fdedd-0fd4-4340-a4e7-c35bd6d39847", "indicator--90e8f7f2-24cb-4ee2-a488-af0a61582efe", "indicator--1a6bb029-9888-4f92-87e1-aaca863e826a", "indicator--954633d9-3ae3-4be3-9b16-8557bdf0ba5f", "indicator--a7cf754d-e7dd-4220-a2be-599227ee824d", "indicator--cb990b6c-628d-4960-8d03-a388d1bf2d1f", "indicator--6de85ef4-3382-4193-b3e3-8f5dde54296f", "indicator--0744a2e1-258e-4083-a10a-68fb01dc5158", "indicator--57064dc6-a8b9-47ae-8e0c-67f4e7da966d", "indicator--afeae8d2-524a-40d0-a723-a41eaca86710", "indicator--07363915-8bc0-459e-8f9a-c163faa164f0", "indicator--bb9f4aef-e76d-461c-b739-a8e4698ea636", "indicator--685008cd-8678-4b19-b3b0-34cb681e5bc0", "indicator--596ab9a0-1016-461f-96b3-a74fbd6aff04", "indicator--cfdd7842-c3e6-4f56-8769-48b2fa27e5e5", "indicator--1b221457-ba29-46d4-bdbd-7eaa78134d74", "indicator--f18e053d-7bbf-4ad8-b619-6be8f4c83050", "indicator--8a7ddc8f-1277-4a9d-bd36-be2d2fe256d5", "indicator--1c8176ab-a0fe-43ce-9135-229b40cfe9bd", "indicator--7d0e4f53-84ce-40e8-a20a-d2ea05113acb", "indicator--a9a2ee34-9276-49f6-b7c8-46d817d812c1", "indicator--b0827e43-0ec3-4a1f-b5f7-1d9da489d970", "indicator--b660ccbb-0c41-427d-83e5-933bc2d5e6bd", "indicator--04e3791e-65d3-431d-8cf3-3c2ea747a5c8", "indicator--ac51ba57-2380-4c4f-bfb0-73f808c7b203", "indicator--14a14bed-2ec2-46e3-9d30-e0a3db3d1188", "indicator--0e220052-2ada-41a7-8ce0-d7e25c92e64e", "indicator--86fa96d9-12a2-468f-9ca1-c8d483d6ca1f", "indicator--4bed14ba-56f0-4213-8c3f-78dca7fffa42", "indicator--def887b2-7a80-465c-87a7-90cf9ab68389", "indicator--3b11b733-80c3-47e3-a60b-f4a12699eb43", "indicator--50c47e18-3d7e-4af6-b6ec-dbf2f1a7d4f3", "indicator--5350ee41-1745-4b1b-9329-db3289535e2d", "indicator--aaefda39-f692-428c-9645-b2762a71b82c", "indicator--ebaead14-e86e-45fd-a9c1-e4fefbb197ce", "indicator--1fc329bc-4615-4bf7-a0e3-d78f62e4e472", "indicator--47c46ee3-ecd8-4e62-a0ff-4486e1b13a82", "indicator--f1226aae-fbd0-44e7-82ce-3cc0d035761f", "indicator--6bbe1ef2-a34c-48e8-9a4f-2eb3efee1118", "indicator--38906723-8887-4d1f-8123-d05b8269b9e0", "indicator--8d82b94e-58b4-49d4-a143-88a3d2c7c947", "indicator--94832d62-90cc-4a22-9c83-7ec846a4210f", "indicator--601f4812-a3f2-4d0c-90f3-e159f16fd355", "indicator--dd21b6a8-4616-4006-9a01-fb5e9d989396", "indicator--9eac7874-9b44-44aa-9c13-40d6310f55e8", "indicator--a89402dd-7b2f-45db-81ca-445c397892e9", "indicator--cc701393-3f44-4e1e-a4dc-b06763bc40a1", "indicator--2841f6c3-44a2-4a2f-b808-6d72d72fc69e", "indicator--ce361d03-a872-4c0c-9f17-b030f64d0dcb", "indicator--b34f7e1c-3058-48d0-b11b-ef3928c6585a", "indicator--f04a47ba-5aa5-45a5-bc53-e00e78f32b00", "indicator--475d503c-9362-4dd5-b7d3-8eee152e8bc4", "indicator--a7f8e41d-eee8-48e9-851d-04db3a7a1a02", "indicator--1c8597c7-6719-4703-a97f-b0dc75ec6d32", "indicator--78d4dd18-3fce-4466-b950-3dcc06364cf2", "indicator--1b054f2f-6764-4371-9358-a95b0c7e8ac8", "indicator--0543512e-18c0-4083-b9b7-94252b896e48", "indicator--136d99f2-6ca3-44ed-8462-1543d2064e6e", "indicator--69872ec6-4299-4349-b559-9134e51017b8", "indicator--60c50bf1-991f-4391-a779-6bf4db6abe89", "indicator--3d36cab4-62a1-47c4-8004-3ec8fb8a6038", "indicator--a5f8d6e3-f44a-46ad-bebe-90b9ded6e797", "indicator--33aae6d8-c952-4dbd-8cee-543343fca5fa", "indicator--65934b47-1f91-41f0-bb86-b8d4b23f02a8", "indicator--a2dba2ab-f358-4f23-a786-7800578eb734", "indicator--fe31d405-54b8-4ffb-af08-4d443e4ad673", "indicator--f48ab944-de92-4056-95ee-bb859f294f4b", "indicator--f30ee444-01a3-4f63-99e7-1c404e6acaa2", "indicator--6e26bec5-edb5-4885-89a7-d64ea2a41876", "indicator--bc807e51-e14c-46be-a3d1-4d67192c8d98", "indicator--f4ca1907-e3e1-4da6-b745-8b44503ae5b1", "indicator--aea50bd9-9603-4bd9-a9bf-2fd56cfda9b3", "indicator--4ec78b92-5d29-45df-9c5d-ea45650aacb5", "indicator--c36a0e1e-2b32-41b1-9fb7-461bcffd6ced", "indicator--4c910b37-4b76-487e-a60f-ee4f9308b010", "indicator--c9f918d5-4a09-4394-833a-f94a7414330b", "indicator--3d289757-3099-4d30-83d6-b9a79a379dfd", "indicator--e245badd-3d57-4ffa-8e04-2cd38e2d1095", "indicator--7e99ca5e-ceb5-48ea-8420-801b3c160ef6", "indicator--67f1e8af-1f75-4774-b600-91336b8afcfa", "indicator--0a815250-2e6e-4366-9f54-6000023a4e87", "indicator--99fc9ee0-8c08-4d38-91d3-da28ff2e9104", "indicator--af54f5c7-0969-4fa5-85d4-f1c7a117db3f", "indicator--dd4bf946-9cc4-45ed-9322-4cf391a19ea3", "indicator--6f9bebb2-191e-4c31-adf4-9c2c505d3f25", "indicator--fe5fe154-4060-4dcd-b8ea-6303793fbd7d", "indicator--015b15c8-6e05-4444-ad57-454000c5915f", "indicator--29caafe0-9a71-4864-bf6c-0eda21f6ab5a", "indicator--205e1c13-c19d-4f88-8ba9-9b6fcd65cb48", "indicator--fa5378bb-803a-4637-9f2b-e5bdd3eeb094", "indicator--fe743a53-3d03-42df-8856-02b0d987ff1f", "indicator--485e7036-3b5d-40a7-b32d-8c3bcb2a5a57", "indicator--f89634a1-f487-471f-89a8-55a2b073d9de", "indicator--9a2bd724-67c8-4d07-95f3-615a02f3177c", "indicator--16c47554-b8b0-4492-b597-4ce4726aec01", "indicator--c952333f-cc02-411f-accc-d7c25b25aa58", "indicator--99394032-022b-41a6-ab7b-a6dd24e77ca5", "indicator--fd56eb85-698b-40c3-8351-822c6c56edd3", "indicator--78822a01-2942-4481-9075-e1834f385a2a", "indicator--58fdb405-595a-4005-92b2-84c2d5ba9403", "indicator--d14eb06a-2ac1-4af6-b00d-13467194915b", "indicator--9816bf4b-0d1a-47a4-a679-7d68d3513899", "indicator--d7a48219-e651-4dad-ab34-7da6977288b0", "indicator--4b244940-1715-4c45-bb02-7ba0641f8a59", "indicator--cbe5b76a-7a8f-4a1e-88a1-5d2cfc7af8c8", "indicator--0458e779-3163-4a8f-9eca-99b814fdcff5", "indicator--7dcd5ea3-175c-4a84-82c9-5330a33d1678", "indicator--d416fb99-2107-47a1-a465-fa842e86d50a", "indicator--8868010f-53e4-4c43-ad0e-f6d70f78d453", "indicator--98b86c69-6507-40d0-9a06-de74e9d29a5e", "indicator--023abfb6-a176-4066-a056-07568a2890f4", "indicator--926f21c8-b021-44a3-ab26-bd90f4781559", "indicator--5ff47c5c-7ed6-4dc3-92df-4b2f9b869e0d", "indicator--dc1c68a1-5a9b-43d4-8764-66d56b66c7ef", "indicator--e7968867-0e5a-47cc-b2f0-2969d6f9c0d9", "indicator--510d8ff3-424e-4678-88f8-f77bcb4ad922", "indicator--156fde55-eb75-441a-bede-093f1616ab61", "indicator--c137badd-5ed1-4037-b71e-deeff56aad5b", "indicator--8efd1fb0-44da-4d92-b741-0fbbfd3704d9", "indicator--7f6e8e60-556a-4fc3-9869-53e3d2ef4d47", "indicator--6573f353-4373-4894-9509-5c9d89b2427a", "indicator--87ab96d9-0f21-4672-83ac-347c11ae52b8", "indicator--f3c0ddb3-c648-4759-8365-8fedee975cdf", "indicator--4471cbb0-475b-4839-8597-503fa9403d2d", "indicator--06e83765-d7a8-43b0-bedc-21760038d9e7", "indicator--0b157cbf-d65b-458d-8f08-e24005d38308", "indicator--241fabb5-7a72-4b65-9a8f-eeb8968c21a9", "indicator--5255b5cb-9cfe-4f25-a1b5-d4d06c69c5f9", "indicator--21f68f6c-9c1b-4ffd-8426-4f651056e8e2", "indicator--a2c8a0ab-4f96-464e-904d-706a87ad0506", "indicator--4cf4d419-269e-4df4-bf86-50a2e23fb671", "indicator--152f7e34-deb7-4fd7-9932-2465945a672f", "indicator--d8a25223-81e5-4cde-8f97-f0d99faa1dfe", "indicator--e9df0944-059a-44fe-be38-65606154b02a", "indicator--dab955fa-5f3e-460c-bf4d-f7db3e38f88b", "indicator--65f1c591-601a-43d8-ab1a-4d19da9e3fc6", "indicator--43cc589c-fa8c-40db-a436-775d20dcc8da", "indicator--83cb884c-198f-4fff-871d-acc889f1f515", "indicator--b354ad2c-bedd-453a-9a68-46cd4b88489e", "indicator--52a80287-08c2-4d68-af12-c937389f82f2", "indicator--6c08843d-8e1d-4fae-9bcc-2362c71f2f83", "indicator--6be48003-8b09-4d17-9545-2ebf14130aa2", "indicator--d6fdf088-66eb-4458-883c-85205d68b2ab", "indicator--35b96211-f6b3-4bf2-8d19-23e6729b4bed", "indicator--ae5832f2-6ab6-411a-ad4f-3afec27bc999", "indicator--56a0b2bf-37bd-4994-a082-5742bd6b50b0", "indicator--9e20a83e-d891-434d-a236-a800e18686b1", "indicator--84fa2b5f-8685-4578-8cef-345f7e2391ac", "indicator--171f017c-78cb-4c9a-b17b-6ac2b3a52d21", "indicator--14b9894f-12a5-4aad-a6b2-458bf841f797", "indicator--23df8daf-54bc-4037-a9b4-c8aebb7d8841", "indicator--f9315dc6-f906-4968-b300-83833cd3841c", "indicator--fff1a626-f0b4-43a8-84ae-517c4b157306", "indicator--74ad5275-28e1-4b61-ba15-124f8a0b8012", "indicator--0c708fcf-f55b-4fb1-b47a-6a184932eec4", "indicator--b381eb66-22b8-491a-ae1d-dfed11c3c8b0", "indicator--29b37de6-d9b4-4c30-bfdc-e93ca0e0863f", "indicator--be784489-eb9b-4629-8da3-1fade1c30393", "indicator--0ac52a5b-a455-417e-9b3d-d867c0aa7afa", "indicator--e8a1ad28-c5e2-420a-b320-7fef86a8a544", "indicator--53076d50-a922-4874-b4ac-5801d3f01e11", "indicator--0b99b034-a32e-4c96-8afc-2d2b71bd8091", "indicator--293f4d21-4c28-4f00-a49e-20bc315be0f6", "indicator--c5375c7b-4998-4c85-87bb-baf2acc84356", "indicator--6b3794d6-5dea-4aca-9188-133dd4ab8919", "indicator--9ed8ba7d-5ce3-4a64-9c21-07b923163d3e", "indicator--4027b7d2-9caa-490a-b926-fc42523f82a4", "indicator--ce24cc9a-f4de-4ec7-8e71-f93a8a546588", "indicator--60ef35bb-b0d4-42ad-8b2d-91d47dc0fa8a", "indicator--f1bac443-9f57-4286-bbb3-35a75ce95ff9", "indicator--b5d5032d-5f8d-42d1-a848-99eb903b14e2", "indicator--b25d9ea9-5a85-4b99-9594-8f7cf92b0e90", "indicator--06dd0b97-8d97-48eb-ace7-8652f667db45", "indicator--47825a99-829e-4bc5-89c9-7bdb4a70cc29", "indicator--112eadf7-367f-4269-b201-2f46937cc94f", "indicator--08a7acc4-6466-483d-bb59-a3aa1e8910cd", "indicator--181c4353-7e21-4914-9121-c8b6bb252d71", "indicator--08efce81-9acc-4c8b-bc77-0234869f1b3c", "indicator--93679cf1-28b5-4dfe-af9c-4af0df100e32", "indicator--c97080eb-2094-48b1-b4b3-b0188c77c6ae", "indicator--30dfcbba-c743-4ea3-8db3-bc6a38379c3f", "indicator--85075414-a881-4ea4-a515-9a87e7651583", "indicator--8d934185-c137-4215-b3a1-fbb3e51bdcc4", "indicator--d6a5ed31-338a-485c-ba79-e83f1986debb", "indicator--602dbf19-f812-4188-b4c0-4a422ca6cd7b", "indicator--a4dd1058-d5f9-49bf-aa5c-21b1dd77673f", "indicator--28108f9d-f911-4364-ab47-f79dc8e1e82f", "indicator--4b3f42a0-1ddd-43c6-b7dd-c25941ee0c56", "indicator--434a5d3d-ffd7-4fe4-9e4f-e93f7e141e6e", "indicator--7281077f-84fa-4460-af04-97ca6ba3048a", "indicator--70fa7443-5e75-43d4-85c4-c818ff075468", "indicator--e7ab3553-b53d-43b1-b507-1d17be9fb7b7", "indicator--c509eba0-535d-4483-8dff-20c5b5f4a33a", "indicator--287208eb-90a4-4142-8b7b-8891afb07d9d", "indicator--8becbb1e-4729-491a-81b5-74299ebb4c15", "indicator--fd3f2dd5-0b16-46c1-ad19-5f5823a3adfa", "indicator--54e87e5b-c20b-4bee-a627-edfc1010bdcc", "indicator--4b618b7e-59d2-42e9-b85c-466a5e4384e6", "indicator--939710b8-d2af-4f3c-81de-fcebdf0441ef", "indicator--86f45bb5-9494-4b1c-b905-fc9f68c40d90", "indicator--5fffe18b-f299-48c3-afdb-e9762882c264", "indicator--00c96fdc-d4f5-4f16-8bc0-5a40a42e2ec6", "indicator--c3c8fb9b-4ac9-4ebe-bbeb-ef99572bcd37", "indicator--fe50a5f2-58e9-4e27-a5bb-c061b7bfc171", "indicator--21bfa14e-9241-44e5-94d5-aa2b5b87edfd", "indicator--526bc428-e402-4627-8c89-44556be77068", "indicator--8f06dca5-27a4-4cf2-8e7c-9eab9c83e9a4", "indicator--ad418960-373d-4af6-ba4c-cc5c4929c9f1", "indicator--7f8d52a9-5d86-4bed-8069-d8bd02793ff7", "indicator--4d640a88-a6ff-4e21-a0c6-4eb86e91261e", "indicator--d954961d-fe9e-477b-aadf-aa524248764d", "indicator--7153bcb1-415d-49f3-9e26-74743c344caa", "indicator--5372a2c7-3d72-47ef-b70b-662dea636513", "indicator--71393a91-2ff7-453b-8f90-1a7a55f6a24c", "indicator--8761dc9b-1f76-421f-bb60-d65e7d9ad1db", "indicator--8d5732f9-b43c-4e7d-b178-814b27f3f549", "indicator--217ffef4-c0a3-48a7-89a8-daafda52f413", "indicator--b2d6a167-18d9-49ca-956c-147424a540bc", "indicator--b6cdc411-dd32-4e1f-b36a-28143f65d079", "indicator--1c822135-8ef9-4ef7-a157-be7ecc253281", "indicator--3d18c76f-b656-4852-94ea-929424cf119c", "indicator--b3872abb-8005-4878-8d1b-e067f99c0ec3", "indicator--c747d57d-854c-4265-bfab-824773f3f6ee", "indicator--d7fa96fa-f2ee-4839-85e4-21c25b92bbd2", "indicator--124e65df-417f-4bf4-b7e9-f64eb84a9863", "indicator--ec2412b4-b3e8-4e2b-885a-ebe2175ff843", "indicator--319e7271-6a61-4f0a-861e-179cc05c88a3", "indicator--441bcb1b-53ec-43aa-bdec-94a15dc4472c", "indicator--60f90d55-eed0-45e8-8818-74bba61193b5", "indicator--6ef42eb0-5022-4386-bce5-7aae8d52a6af", "indicator--ce55fd4a-b5ff-477e-9b27-980d5f23af51", "indicator--ab7bb94d-a4c9-43ad-9e0d-4bdc09d5a2da", "indicator--b74b36b4-01c7-4b25-afd3-6ec644616a8d", "indicator--f77db9d4-4315-4a08-ae45-14c43fb24b0b", "indicator--235bf775-1f8b-4f33-8d27-6d5ea8a4439c", "indicator--6d781774-3b3f-4f02-bfdd-93cf4207f773", "indicator--ae4a116f-87c3-4526-be0b-28b8eb995691", "indicator--fec7bd20-a98d-4f30-a605-5a094c3cf424", "indicator--a8d38e84-46fa-4c63-85d0-449cda33728a", "indicator--6452bca0-6f4a-48b7-8c03-727194b22abf", "indicator--0259917a-5003-4c33-b335-8d69a44b52e2", "indicator--8cc98453-3e9c-4263-887b-0db4662f4f9c", "indicator--30894bb7-4843-49f0-aeea-b01dfc3206d1", "indicator--316500ad-7399-42f1-b986-178a34f23850", "indicator--fd63b1ff-ab81-4a23-aa2c-5aa5167e3590", "indicator--d5eff323-0936-4a8e-8c31-c5c204c3553b", "indicator--0c2db32c-d72e-419d-966f-da84b1a56189", "indicator--d9ad4972-35cd-43f4-bc8b-dda691e4a4fe", "indicator--0b7a0fbd-79be-47b3-9abc-6cf0b442187f", "indicator--6cc314d9-dd88-406c-82dc-128ef4d924c1", "indicator--7c882d9b-d088-46fb-b720-a626b7d0f8c3", "indicator--be1e4187-ba44-4329-8e6f-faeda326ca7d", "indicator--6331b9c9-6970-4996-8c89-94a3fe313ac7", "indicator--d96306d5-84b8-4faa-af61-20b685bf21b7", "indicator--23d0a9c4-d039-4e28-9111-8c8f610c055a", "indicator--f4544db2-874a-44b0-b667-235ca8698ace", "indicator--05bb9e70-2650-4d26-8584-a27b9fdbfa9f", "indicator--9307af14-eb37-4691-99a4-00ed0d4b4a7f", "indicator--464b0982-1715-42df-9dd5-a28b7d6ccb98", "indicator--0b94e82c-134c-486c-af40-ef240a41668b", "indicator--51198dfe-5f43-4620-b475-3adda396e789", "indicator--ef5b5051-c4bd-4a7b-b4d3-4b85e2a1c402", "indicator--9dfecccc-ca91-4f40-91fa-dfc216545058", "indicator--7339e0f3-7a0a-41e5-ae65-e97b46cda733", "indicator--1ebe8010-a82e-4e5d-bd60-c2344db91f44", "indicator--ad7fc1da-c1c5-4c81-95e9-1db21bdf471f", "indicator--83336530-837f-4d1e-864a-caf66d3c376b", "indicator--c9e7cb3e-57c8-45dc-a970-fa8348853f64", "indicator--6b4fb150-7c7f-4a01-b223-f8f9dfba4014", "indicator--5645e4cc-2972-4c6e-9b0e-d3d566f9efae", "indicator--bb345e1e-eeb9-4267-8851-7ea4517015ff", "indicator--696ecfa7-f2f5-4cfa-b37b-d929a18c7f7e", "indicator--d5a58a62-af8e-4a21-b149-324a4f7f0c1e", "indicator--eb311bca-7423-4838-8c88-f59b1e2f88a4", "indicator--fdc25e06-9bce-4d7d-a69e-1db3d4ef1926", "indicator--6322c4fd-1f29-4dfa-8f9d-958ccba4e346", "indicator--52fafa88-8a6f-4bee-a7d6-ef0463cc20e7", "indicator--9263988c-60be-4cc3-967e-5bfd5f135f88", "indicator--81ae815b-e29a-4999-bc93-214e5030f9e6", "indicator--a21649ab-dca5-400b-a206-2f065ff66d7c", "indicator--d6efc4d5-5225-4a64-a4fe-9ce8e84c1844", "indicator--2eb5c38a-bac5-4b61-b18a-3d38bdeb5ddd", "indicator--9eecdb4c-50c5-4699-8f79-d0e67d9ca0e1", "indicator--cf22d40c-9625-4fe1-8514-bb05c7f79ef8", "indicator--b4aee747-7403-4fbd-a7b5-3bd6f1cea088", "indicator--3409d49f-75af-4a7c-9298-b743313d9cf4", "indicator--5855ccfc-01dd-4b2a-8b05-581f9fae4ca7", "indicator--c02c57e2-09b3-4850-8794-2b63953fe58e", "indicator--89c99638-30b9-4625-a13e-1a4476853af2", "indicator--21cfca9b-dff4-4839-98bf-9a9b5795d45d", "indicator--ea525583-8fb0-4359-bb3c-c2506d6b62bb", "indicator--cf172d61-2eda-42f0-bff6-22f974117265", "indicator--ccc7ea0c-cb10-489b-ab7c-f797e2224ed8", "indicator--6774d246-16d5-48bf-8059-ac9017384b5a", "indicator--d8890915-6054-4507-9f40-29b53a20027c", "indicator--1dff111d-4d6b-473b-9334-16cc76e1244b", "indicator--1ec11574-ec34-42dc-a300-540d9ce84215", "indicator--50de728b-5360-4301-b8a3-c603c53d472f", "indicator--84ef8660-423d-4b9e-8b17-c1c3bd3e2413", "indicator--55f56bed-5bff-40b9-b5d9-2f3991964381", "indicator--74f4a81f-4886-469d-83e3-711a29e195c7", "indicator--136a9785-864c-4f55-b7ba-19871805a094", "indicator--c58ae253-01c1-4ec8-b300-ab0b8d45f596", "indicator--1790c066-2c11-4abb-8f44-c7f9dccd16a1", "indicator--69f15c08-1416-4f3f-89aa-e17e8353d65f", "indicator--28daf004-77fb-4d2f-a5c9-4129fc16f05f", "indicator--3ae9bbae-4fa9-44b1-a653-07c43015293f", "indicator--49fba6da-bbfb-4809-8b66-f807ecc96081", "indicator--b0bc3148-3c7c-4a01-8a76-7a102097edc6", "indicator--8bb4513a-aca2-4fa9-a455-a904ace3f9a6", "indicator--b3a088e1-6aa8-46cd-b955-0a89f2b2c189", "indicator--a96dac8b-11e4-4c0e-afe8-fb0408de8bdf", "indicator--48f0b6f1-7970-4cd2-94f6-36713566a055", "indicator--f30fb77a-3c94-483c-9791-5d231fb2a6c6", "indicator--2812b5a9-9614-4344-bbcb-e557ed93fbb9", "indicator--ace64d60-befe-49e9-a5e8-59cf1e70b78e", "indicator--9315cc0a-7113-4471-a831-e35677b82c1a", "indicator--232e1c9b-9b40-4b1e-94e4-6cccf1910be3", "indicator--f03352da-f90a-4889-b6fe-e7480d6ec816", "indicator--5d6406d0-282f-4272-bcc7-34e7dc7f3a43", "indicator--26dd125e-983a-4f48-ab2e-01c9f742a110", "indicator--ac959bf8-df33-4e72-b203-f391a7ed0220", "indicator--dff5ddfc-f33c-4586-8f45-a8ac25ae2bcd", "indicator--96892e86-72bd-4932-8525-22ed5a3a2dda", "indicator--a2e03919-a3ff-4807-9a3a-b10159465b77", "indicator--656ad368-ae94-4447-9f97-6a8d506cc79c", "indicator--f001ad94-ab28-46e8-8e29-87835c0c1248", "indicator--589573a0-6c04-4926-b57f-1831694c717b", "indicator--be6d9b01-01cf-49e2-8aa1-f165c9d2b397", "indicator--7c4a7c6a-89ed-4676-b681-3b0fefe6dd71", "indicator--76d47593-457f-430f-bc3e-8726870bc6d6", "indicator--af635983-4cbc-438b-9ac2-b42916a7f84c", "indicator--6062f8f8-eb45-4f19-8b76-25e0897febc7", "indicator--62307774-b5d0-4ea6-b370-7277db361d1f", "indicator--f6a4aa4c-90c0-418c-a073-1de2d023d994", "indicator--10b7357c-021c-4b10-83d9-1087a5e615db", "indicator--4fe7f243-00f1-43f7-8990-b04b07e2c38a", "indicator--acaef885-18e4-4c24-85fc-cd60a2eaa464", "indicator--33b78683-9fbb-4b90-ac2e-62a72d941c67", "indicator--04579b36-1bf0-4b6c-b68f-b9baaaf35e23", "indicator--ce0a7074-3464-4a81-a1a9-5ff16e4f42d8", "indicator--32a27f78-c486-4f2c-a68f-abb27427b923", "indicator--6a7a2466-7b85-4c52-9921-a9eb9f368d55", "indicator--c5e52f83-ec88-45c9-ae12-00e14eb91f99", "indicator--a621c13a-368d-4c4c-8e6e-1802fa016549", "indicator--09187e9b-0f8f-4e91-bdc9-8ad05affba4e", "indicator--6a4b1f08-a948-4397-9d01-0eae9a43f993", "indicator--05051f00-17e0-4dba-b85e-ac2a7d71cfd6", "indicator--d9365004-53bc-4be5-808a-495c55839a48", "indicator--6f062bdf-e411-48a3-9d95-f1982f499ec0", "indicator--6e923040-b491-4984-85ac-b7c4f1fe4e0d", "indicator--0bcaa80c-01e0-4bcf-96ac-bbecf01f8ff8", "indicator--41426bdc-c8ad-4678-ab83-6c97e3857a71", "indicator--a7ffb41c-177d-42a3-ba3a-016e936d78b6", "indicator--a06159b1-a6ea-4fcf-982b-261678cad177", "indicator--83b0a582-36d6-45f9-a1bb-e108820bd597", "indicator--48e8d243-e36b-4f9c-8d94-aac4d6ec900a", "indicator--3e69b198-17ab-40a1-b75b-7af098e10bd4", "indicator--c43eb5c1-785b-4a45-8902-783fc5e2f803", "indicator--9eeb5d77-b160-4acc-82d2-d3267ee7cba3", "indicator--03dfd5ab-5611-48b9-936b-d7f44cc4795d", "indicator--5455f831-8d90-4c33-b365-a468c6d6c075", "indicator--1b55b180-7d81-433a-bd09-e8a1aff6590c", "indicator--8385326b-8749-4fb1-ae81-ed4b17911c58", "indicator--a1938fa4-12d8-417d-81fb-dac51d96dd3a", "indicator--2d6b67ca-0966-4111-a8d3-34035cca989b", "indicator--12b4faeb-391e-4b11-b2df-924267dc882f", "indicator--e3b85964-831d-4a5c-b769-b72d738e1832", "indicator--26f19f23-fb8c-4ea0-b9ee-49bd5d77a5c4", "indicator--c9015789-a8ff-4572-a2b1-9a649d470216", "indicator--3eba4450-29cb-4977-8c7a-95c8ae0f2d83", "indicator--8161f1d6-ba86-498d-adb6-ccef9a8c862b", "indicator--bebe637a-5cbb-47e9-9abc-6d72998d9afa", "indicator--26270f2a-c10c-4bad-87fe-ab611ec93253", "indicator--9da311ba-d1d5-4790-ab7a-f57ada232ad5", "indicator--7969fc9a-d5e5-4323-bb32-65f2885f76b4", "indicator--a7df2a9e-da1a-4a57-aab5-cfd232d5e8d5", "indicator--ad10f3df-6394-47f0-9076-3a51bc589e2f", "indicator--5a6a13bb-6a99-44b8-a9d4-1737893cbd47", "indicator--dcbd1c31-d9d4-4217-abf8-3134737da8fd", "indicator--83c7c24d-8fee-4c19-9b2b-2c798ce22880", "indicator--ef6f7da6-3b96-4a22-9573-342d1352cea6", "indicator--0b6aaee3-fb2b-4653-a651-55876e4d447c", "indicator--facc3d62-5b2e-47d6-8cdf-a294b0ec5df1", "indicator--b00eca3f-c8e5-4e34-8b31-bf1c27f81106", "indicator--9c9ce5b6-4f6b-4be7-911e-99f8b6fa7abb", "indicator--a838a780-d83e-4f22-ac52-ce347354ab7a", "indicator--b79d28bb-ab70-4221-84d9-e2593bbf00c0", "indicator--3d03cbf5-9979-42ad-b447-a4ce03b4b48f", "indicator--05c9b52b-ccc9-4b79-913e-c3b3629af423", "indicator--ab7fad1c-80e4-4fff-8c6e-044140cbb0de", "indicator--cb7e719d-1879-4a84-9990-cb6126a5ddc0", "indicator--e95fb5f1-fcf3-4f0d-a211-18e0fca7e6e5", "indicator--b23d9c41-3947-41e0-a08f-a6abcc7ee890", "indicator--f0cb59f3-2154-4e72-9768-919346f7758e", "indicator--72984a38-e4ff-4557-956d-affc9279aefe", "indicator--dfab2d01-0bad-40c8-8c2d-68fa5cfdc47d", "indicator--089e5dfd-de33-4beb-9b07-5f5e0409baff", "indicator--2e15d937-b34a-4e8f-8bf0-61fce19d2553", "indicator--ec54edea-0b81-4006-8e48-f5f58038815e", "indicator--ac76d9de-00f7-4c3d-9c34-d33377391053", "indicator--5d43e916-e2ad-48de-95aa-ea8b7d1af412", "indicator--bf9f1392-22c2-43e0-b793-d3242545a64d", "indicator--c63ea058-6360-411d-95fa-67dff2b02cad", "indicator--f4e5ef50-1b8d-4363-a3e1-44f60aace4ee", "indicator--88b2871d-3054-448c-8d74-7af99f61879c", "indicator--b4ad6bed-eed3-4167-b1f9-fa227924f75a", "indicator--ba063ba9-3294-40da-9cd9-b65717a7bcad", "indicator--f5952220-62b3-4d5d-b31b-05e16cbe0b7a", "indicator--0940889a-14d5-436a-89dc-98775499ee04", "indicator--b5cca8c3-479d-48f7-bfd6-0180d5bb62bd", "indicator--42c303f8-092a-45fc-af3b-3bed053b7ea4", "indicator--afc526f0-875d-4ae6-a424-6c47f9935130", "indicator--b1d98ee1-bfde-4d31-8109-e61849d4eae3", "indicator--bd67540d-0c0d-4931-86e2-d978ed71279d", "indicator--692650e8-003f-4afa-9e51-96fa1914ddf6", "indicator--49ced576-b5f9-4840-bf78-b738cec918d3", "indicator--b522ab58-3adf-4396-a695-75c1ed76d6b7", "indicator--02a492ca-44ea-4f12-b503-6208b1069c38", "indicator--e5d84dd4-0e10-40bd-9163-9eb9cea61eb4", "indicator--95d8e794-464d-453b-bbb2-60c3d9447852", "indicator--e08fc85e-78ae-4f3f-974b-52b5fab6d872", "indicator--fe83e04c-326c-42b4-a1ac-7ad89fc7007e", "indicator--fdf598fa-5b24-494c-a2f3-040fce464472", "indicator--d336aaac-486b-4ffb-a69a-518bcefba327", "indicator--c5f1161c-bb65-40af-849a-ee82eea5ab39", "indicator--271983c1-5f83-4b29-8b3c-331355d89bd5", "indicator--971728b4-096f-4844-b55d-e42e337648b9", "indicator--f00176b5-3e9e-411c-b5e8-45769baaf25d", "indicator--d818c242-85e4-4741-8826-41700bfd1538", "indicator--5cf01e24-7aa9-423e-948a-aef2e235c80d", "indicator--de1e344a-5e76-45bf-a6f6-8581e4099d9d", "indicator--71460eb5-2fda-44e3-86ef-ce591bf937da", "indicator--c9d4a5a3-2c7f-4bdb-9239-f6cfd31150d8", "indicator--7267377d-c294-45fd-9dd8-5fa795439969", "indicator--f178bfb6-b18f-474a-a7ba-d0b166217a18", "indicator--14eac664-bdd9-48dc-9d8c-dba2cb616b8c", "indicator--72d34dc8-ed89-4f9c-be84-366706480769", "indicator--931803ed-6e10-4afa-a96f-937202a26868", "indicator--897c2115-57fd-41f5-ae31-19e3f6c0e37c", "indicator--d4f1a802-39ac-4e10-90cd-97f3a2ed652f", "indicator--21c03240-4730-488f-ac56-fdf9736859a6", "indicator--5d5fe3c9-9931-4859-b002-f8536e556322", "indicator--60f47ab1-3e70-410b-a998-d7eebc332e98", "indicator--5312ddde-da1e-4d1d-ab78-adde41e2622c", "indicator--5a3e3586-4b9a-4840-b382-ff3c825f50a8", "indicator--40a06bd1-0d32-409f-b485-f4cb20a7a4e9", "indicator--bd0a9643-c92d-4618-b30a-bbf6f53def89", "indicator--0313af72-e1ab-4aff-814e-9d29cebd149d", "indicator--8efb3db0-a9c7-4bba-8df7-d198da70ce29", "indicator--d625e818-1ee8-40c5-a5aa-1f7d92106592", "indicator--fae627bc-8585-466a-8817-7631f943ac00", "indicator--4546dfa6-83b0-4a1d-a86e-10d37a0f1b0d", "indicator--623bb300-1cf6-4161-8da0-f7fcef8c1dc8", "indicator--99472b68-8d14-4a31-99c4-7e18b9dda1b9", "indicator--32ed5917-e3e5-4727-bec7-a68e1b57e7da", "indicator--382908db-1abf-487e-adf6-5531de616031", "indicator--80c3aa2f-6ac3-4099-becf-b3fe0fb83184", "indicator--9a17e835-fec3-44e7-a26e-f50760fc1dae", "indicator--7459d643-f861-4bad-a654-ee0454f02c09", "indicator--afe1921c-9c97-4c6b-bacb-97ad18b482aa", "indicator--ff58e5df-8398-4b9a-8a72-d14dc9014aee", "indicator--a885e4a1-2084-47e6-bd8b-c14df663b749", "indicator--da2207c4-5ecf-4595-922b-c624999384ce", "indicator--f078ccbf-19ed-4d51-b313-a4072ff2650d", "indicator--271299ad-bdec-4913-b017-cae268fee953", "indicator--8db6a621-a06b-42d1-a8e0-0bde7b8e9949", "indicator--efa451d9-d1d4-4397-ad5b-061da7dcf6fe", "indicator--633a017c-f2a4-4054-86c7-8e0512db926c", "indicator--73b09d22-636a-4b25-8100-48d9300777ff", "indicator--f54c94da-7d02-47cd-8513-eba8480d02b3", "indicator--18e9b521-629b-43e0-91b1-69aa3fb528ce", "indicator--c1fb6c2d-da9e-492e-95d9-ff9041f22240", "indicator--10758108-d88d-45a3-8583-ee300896b702", "indicator--57bc7d0d-9d52-48b8-99c7-e64561457458", "indicator--8f2adb7f-1c5b-4f0e-8a5d-b3db9a2f98a5", "indicator--1c8d2564-90e6-4a13-9b2a-ac85cea896fb", "indicator--1c75f0fc-615a-4244-ad6b-d04f70e70ebd", "indicator--fc8692c8-3fa9-40c1-9b0b-58b215abe3e4", "indicator--6c38f255-e6e8-42c8-bfb5-fa4f1e7d18b9", "indicator--6d34fc6d-137d-4725-a9f0-18238ee90099", "indicator--40a00ddc-a3ce-4151-82af-e0f97961cd94", "indicator--004f4e94-2e81-4a9c-872d-5ea95a4efae3", "indicator--d2fda83d-3708-4532-b1a4-e5009ef0b0c0", "indicator--4a712822-db7f-4bc6-ac42-ad4d3c6fd907", "indicator--1a5f8c04-bbef-4ee7-ab12-c2e11b2cb6c3", "indicator--2036123a-d064-41f2-b4a4-7c78ffba2cbf", "indicator--825edd94-a013-42a6-9735-c342d1cacc0b", "indicator--897f2dfa-2b6f-4f73-868d-c9ff60933e2b", "indicator--b3b6fd76-3b27-4686-959d-d9b83107124d", "indicator--a2d5cb63-d15d-428e-a583-de264f1cc544", "indicator--f10298e8-537d-44d2-86bb-6644c39d1d31", "indicator--e8e14d37-6cc6-483e-86bc-50f1679003bb", "indicator--80d45e30-7d2e-48ae-9930-3649e72974b9", "indicator--d1f71ffb-98b9-4c41-a9af-625184462887", "indicator--66a64b24-0bf9-4ca1-94fb-7446ba169a0f", "indicator--76814c7c-8828-438f-abed-db0501a84786", "indicator--808d1f0e-e842-42a9-9542-49a4173432f5", "indicator--6360d533-bfb6-428e-afeb-17bb5e0d5bbb", "indicator--e4bd72f7-14ea-405f-a103-ad813f8a4dcb", "indicator--64c3ab26-74bc-4ef1-b10c-cd96437aa57a", "indicator--058a96fb-db96-4ee7-a9d1-0410a6234f22", "indicator--186d11b2-add6-4baf-b347-272c0a775060", "indicator--36f624fc-312d-4af3-bd0e-f54e3b029872", "indicator--ffbd20b3-6d84-479f-b8b3-98a66c5b619c", "indicator--1c06b9a1-f0f8-4ddb-9fe5-a65accb97432", "indicator--dc207d53-e0e1-4ddb-8324-5fe55b2f0233", "indicator--5e9a5e66-ea04-479d-8f99-18632cd35e5e", "indicator--f68420b2-becb-44f6-8142-51a09302f4d1", "indicator--af231230-ebf4-49a4-b511-5e545bce0384", "indicator--3e67d4d9-1a1e-41bc-96ed-b8903d96e362", "indicator--3fa73065-5740-42cd-872c-38fa6cc54d13", "indicator--0fe9721e-f5bb-4197-ad63-14c629ddb0e7", "indicator--670f903b-bae0-4ed1-99a6-769edc3a3951", "indicator--5bf920a0-06d6-4bc2-9435-4baee037f1bf", "indicator--e90cb6f9-15a9-4d6a-b358-856e50f41491", "indicator--4ec4d995-7766-4658-a59e-d0cb29d93dd0", "indicator--96775a73-8b92-4560-9ac9-a3020f83d47a", "indicator--b60c7864-a7e4-4f8b-b394-e04969daca2c", "indicator--1b2e7359-d360-46c0-8156-23d59d83938e", "indicator--086e5a17-8ced-4eab-a6a1-7594da638f8c", "indicator--7261fd3e-f642-4f8f-80b2-82196d76a4b4", "indicator--7fcd69a9-b3df-45ff-a1dd-fa2d821fadab", "indicator--52839550-957f-4929-8d58-69faddc12d92", "indicator--bf10fb58-602d-4342-9b81-afcfaae272cd", "indicator--9b64bcf9-88dc-42db-9208-896e90f5d9b5", "indicator--529ba75e-23d9-4507-82fa-561d3e848ee0", "indicator--c1a870bf-f2a5-4f70-aae5-c44c530b5c09", "indicator--9a6ab491-234d-4037-ada9-c8cca5a826a9", "indicator--bb455d91-f8e3-49a3-bc42-38ecb2a0d434", "indicator--25b14fc0-6dc7-41a5-801a-0f511fab5fd1", "indicator--29538853-7935-4e37-892f-957d77055e4e", "indicator--684da8cc-2e48-48fd-b2f5-d77e69aa8002", "indicator--b43af721-e130-4c90-ba27-ec281c90c51b", "indicator--e4cf0f47-e6da-46f9-8255-2076fb953ba2", "indicator--f5215572-8844-4c58-b52d-3221706f9941", "indicator--c5d0f10f-543c-4427-a836-7e3e0d96b2a1", "indicator--f5f6dc95-fdb6-4a8b-9e5f-d101049b494a", "indicator--26cc267d-57ff-445b-bfbd-f814831908a8", "indicator--b7ecd5a0-e026-4bf4-a2a7-53f57a74f49e", "indicator--cb577a28-4d37-495c-b9f4-c06576cd20b4", "indicator--ebfc46b5-7420-4f9e-a201-d7d2a72c32ac", "indicator--e774ba7a-1736-408c-9e93-c21c6b474d1f", "indicator--7f90676a-ebcd-4145-a5fa-9f1166e408b9", "indicator--37867262-9d47-4302-90b8-c93a0f7bec7f", "indicator--1d8ddd1e-96f9-4c40-a0f0-85631b027974", "indicator--ea987def-19db-4929-8f02-a58ece72b3af", "indicator--f516b1d9-f1dd-4f97-9e18-c02dda2cb230", "indicator--06b8af30-1f91-4918-8ab2-47b564554cec", "indicator--ef5dbc50-6e7c-40bb-b9eb-b63ba0d47402", "indicator--3824c949-ef0f-4048-a63e-5aa8b7e7bb08", "indicator--22a73bb1-e35b-4269-80f3-be9ec7e02f50", "indicator--25fba72d-9d7d-4e69-9266-49e0c87db174", "indicator--e87b8350-f82a-4006-8d23-322cc5a9f3fb", "indicator--e5cc6d83-fa3e-4b60-85c5-e56a00e2005f", "indicator--da3a010f-e8b4-4b88-923e-96eef995ffbf", "indicator--3bb7a1d0-a1f1-4598-95fc-31d3f12eb86d", "indicator--cab8dd52-3804-48ab-848a-325801b2afa7", "indicator--613d2cf1-f0f2-457c-bedb-0edec1bc0761", "indicator--473d0d0b-e4c4-4e18-8188-d8f382fb72d2", "indicator--809d9274-a209-4493-b3d8-4678183a9996", "indicator--806ee840-2f19-4958-b5b5-ac41c24a9044", "indicator--2c6e8a39-7a52-4d99-99c4-69b4447e70b4", "indicator--f99dd3e5-fe76-41d0-aa4a-a08e5a580357", "indicator--398a2119-c8be-4709-b6b3-ba7692f6a40d", "indicator--1f515b11-a7f0-4fb9-8dd4-2d2d155f1041", "indicator--df260d49-0548-46a5-812a-a53e6b2a910b", "indicator--5208236c-f5bc-427d-9a7a-7254ed48d735", "indicator--dc0e2e66-447f-4dfa-a6a4-a4e451d95c79", "indicator--ffc8f1d1-3dfb-470b-bae8-0a247fee2d84", "indicator--752ef162-dbcd-4bd4-a385-c6b9d63f06fb", "indicator--67a8b91a-449f-4f30-9fde-b4151a51421f", "indicator--05c27c32-b486-4a89-a8ef-8899b6130fcb", "indicator--ee84b3c6-5ccf-45ea-9a99-42b940f09d9e", "indicator--12e6dcab-f75b-42ff-813c-395c6c3e9f45", "indicator--140c8fb1-70a1-476f-9f6f-2b1d1461d1a9", "indicator--92379d5e-9b8a-40d0-a72e-43aae47e9ff9", "indicator--b3f8c154-7cd0-4c04-867f-0b9638387e9a", "indicator--2f18f0b0-c428-49df-84f4-bf723946c3c2", "indicator--ee05483f-d7c2-40de-9029-3727c1374c33", "indicator--b2ce8f30-a606-461c-967a-f91247942f67", "indicator--7abefcf1-7e80-46aa-b89c-401be4f2177b", "indicator--587cab33-7e58-4b02-908c-6833daf68829", "indicator--cd70ac65-8d78-430e-9a39-77a2c6d5f30b", "indicator--a98a6ac1-72ad-47aa-b90b-3d92222717f4", "indicator--13da7880-3bdd-43c7-8ce8-c931db568b8d", "indicator--43b39c78-88ec-454d-a8b5-880ebf02a208", "indicator--aeaa38ad-7eb6-4d53-a2b1-7d5efb859963", "indicator--e8669cca-ae27-4c68-87a4-2ace1599298b", "indicator--318e8418-3d87-4807-8d9b-2b0601576010", "indicator--6dd8dcec-ad7a-47b8-bc80-d970b7e49492", "indicator--497982a4-861e-49e0-95ac-1aabc4520157", "indicator--934f6042-4ec5-4e13-b3af-f0e0cb6e891b", "indicator--13b45ed9-bcf2-493c-9120-f53206f8bfaf", "indicator--74eb3ac5-fda1-4a47-82d1-9f69620f68a0", "indicator--fe63ecbf-d9a8-4d40-be05-b9d075a4181e", "indicator--ed150d83-c295-47fd-bc27-704e287d6475", "indicator--e9b99ea5-89e0-40b7-b175-ddcf140bbba2", "indicator--4c89a615-0188-4e85-954c-6b7953cc2efc", "indicator--22be66b8-9a6f-4ed0-a805-31ff97a69218", "indicator--a8eaf308-5bdb-47a9-85f1-e560b16fff5b", "indicator--31eef7e6-9287-492e-b1ad-b787e46207dd", "indicator--7f9d1865-b268-4fad-a0ab-0edd00299978", "indicator--9bfe8d79-faa0-48a6-90e0-f268b20af533", "indicator--6ccfe917-d51b-42ec-8037-d534a1b0fbcb", "indicator--effdcbbb-89c1-46ee-be11-87095114901d", "indicator--17092575-5011-4732-a537-788ba32c5af9", "indicator--7970074c-290c-44fc-9f6f-63bf2c60135f", "indicator--1867763a-9e48-4906-a1a3-fee71b6199b0", "indicator--3f7587d5-4bcf-4856-b16d-58e0545b0200", "indicator--9bbead0b-7786-4cf7-86e8-dd110488e62c", "indicator--57fb5e00-b7d1-4bbd-ad93-a005dcb491a7", "indicator--b036babd-8ef6-44a9-99c9-a73ebf296df1", "indicator--756dec52-73d7-4a9e-8a30-5888ce2a5cb4", "indicator--4b5f7fb7-b4fa-4ce7-8f83-acdfa87ddfd2", "indicator--a7752e9f-7a42-4866-96da-9d5230bb0cee", "indicator--bc07785d-d6c7-4a48-ae12-61fb55bacf99", "indicator--d3ec7218-d72a-4230-beff-6893585fd6de", "indicator--dc5df256-0f43-4246-bedb-9fa9ec84e546", "indicator--a05b3fe1-6649-4184-b9ed-7ac4c1597de6", "indicator--49768d29-7ebf-4043-8b0b-0668e300417f", "indicator--98612fa5-10fb-4e3f-b46b-57f35ab6bf67", "indicator--c1e86340-75d0-4055-bb75-aa7864c734c7", "indicator--4e195642-5f29-4e08-b9f5-b8294a150035", "indicator--90981d94-c8f0-4ef9-a2af-4327c5b92306", "indicator--506d5159-8564-449b-a942-b38ba2c10577", "indicator--bda58168-ca49-43aa-b72b-1f959256333c", "indicator--8f0c5d5b-cc6e-442a-86c6-9343756c04da", "indicator--67ce9142-057e-457e-88fc-e8674f9cbe32", "indicator--c0d97566-15e6-447a-a463-616783fa41ad", "indicator--1c7d54d3-fbdc-459f-84e6-55110978aa6a", "indicator--d6748a62-22a0-41ac-8681-6f7c1b0b0008", "indicator--af745b03-3991-4a8c-a740-fcf5d1973936", "indicator--c8800174-2461-4515-82da-54088a513bed", "indicator--c663f96f-cb8a-4461-92fb-c10406af7fd3", "indicator--737e3378-ffe3-42cc-b798-b695d995c9f4", "indicator--d1f98e77-2f05-4081-9d58-7080eed82f2a", "indicator--8742c754-fe0d-4ae8-bdb4-5c907b367c58", "indicator--ef5a94b0-6fce-436d-991c-cbcf08a5ba82", "indicator--b2cdc399-3b76-49ff-91d8-7065136d92a5", "indicator--29056bd6-6069-4518-8c11-0ca7aab06508", "indicator--773faad0-f0db-4c52-bbd9-30283676ab65", "indicator--f5385740-1054-499b-9f32-7b82b6acca24", "indicator--fc736c7a-536e-4bdd-90f9-984057aa49d1", "indicator--fffdbd4c-1e23-4658-9082-43736f2f6349", "indicator--e6bef4b6-9046-4aec-94b5-e5716acc93b2", "indicator--dace3740-3af2-4a05-9c35-b54c318bf6eb", "indicator--e0769b18-67eb-4afe-8e99-8f7a065828af", "indicator--4475d68e-c735-4fb9-b1f0-283777372cc4", "indicator--31d1a0fb-21a6-4a4a-a3f5-689e2f0ab09e", "indicator--ee0f4461-2456-4c1b-b5ca-87cb14fc4fb6", "indicator--bba5a440-f151-4ad2-91a4-51ba7c1f795e", "indicator--b8507dd3-3f5f-4839-8405-454e3ada27ce", "indicator--705e8bb2-2052-4e21-9e8e-bd829a3fb720", "indicator--25fe1718-f0ca-4240-b5db-78582d79595c", "indicator--ab11ba75-a70e-4d32-8715-2d8e1d5f892d", "indicator--fe79ec55-fc9f-461c-b892-03c4d648f6b2", "indicator--1ebb0007-ff04-4ec1-9f50-7bf79e4d5bef", "indicator--23a2872b-d00d-40ac-a4a9-823ae42a51f0", "indicator--b6a5b110-9dc0-4bb5-8a5a-c204917cb213", "indicator--99c09f7c-4297-455e-90e6-45d32c9f5858", "indicator--86f33765-1f36-4200-b67d-9e1912b7cf54", "indicator--05e52d79-d782-446b-bfdb-ad08540fd30c", "indicator--7a89d495-e7bb-4b02-886a-7ebfe8783e14", "indicator--f66d1723-2ae9-467e-afdf-7bd2fef5ffbe", "indicator--01c175be-3bee-4012-ae92-109d0d5669e5", "indicator--27858314-3da0-41eb-9c73-f17afdc597a6", "indicator--ce645246-3815-4ba5-aab2-e981d13158d3", "indicator--27d70fd8-1db1-4144-8d8e-e476d772665d", "indicator--2b075a5c-693b-4390-81a2-bfde4b4b2e9c", "indicator--51baf8d0-12a7-42e6-946f-139dc0a06a4f", "indicator--0b41dc5d-a32a-44b4-8d5b-0fe7986e141b", "indicator--4c1db7e2-5ae8-47b9-8f85-52a30a93613d", "indicator--ba8c2cb0-b420-4a03-8864-b5ce795045a4", "indicator--f0a4d4d7-f446-46c4-8bb8-498eba455583", "indicator--41c09f63-b768-4ae6-861a-4d519d5ab458", "indicator--b768a129-11ab-4b0c-ad56-8185abb2857b", "indicator--c1d77e58-37bc-42a1-9368-92f5c6ae6855", "indicator--008bde0f-3323-4447-83d6-1c3c572a1e1f", "indicator--e789c3ac-8827-4600-8812-5159b36c6527", "indicator--8c70ba15-4238-4aaf-9d47-03f796b6f826", "indicator--13bb7149-7959-4066-94b7-2d2fe3337bc0", "indicator--757537c4-a6ae-4e70-ad22-a563558e5749", "indicator--81a4fc83-b20b-4427-9df9-16d2eceb073f", "indicator--ed3fda5e-aaaa-4feb-aaf5-84b81b936476", "indicator--30a69ad4-d6bb-40a7-b5f2-ba38c7c8ebc1", "indicator--d3713475-d43a-4b67-9753-572ca99d51bd", "indicator--78d98687-dac2-4eb4-ab7c-98d9fe85c20c", "indicator--ea431654-7dc0-4867-a9d8-d9272d9779b6", "relationship--c01acc7f-f112-4687-818e-0a6838100c50", "indicator--1cac8528-10e6-4088-ae71-972f17196513", "indicator--612bbbfd-bb36-466f-8497-5cac83150aab", "indicator--90c97a27-050f-4d65-8299-913ddb9d5c05", "indicator--bc2b4f05-7bff-4d4d-9e33-ed77874c9281", "indicator--9bd14eb7-f469-4ad6-9e86-523dd28f8edc", "indicator--891385f4-ffd0-40a8-9834-b8862a168766", "indicator--4ee2788c-035d-47f0-8bca-ea507e84feaa", "indicator--f23e280b-8a04-468d-92b7-e55df42e6ddd", "indicator--126f3628-24d9-4be5-aae5-1aa3fe914444", "indicator--d8df0c5d-e312-4cfe-8706-4c5702842244", "indicator--c82db79a-4518-41bf-80a2-2a70050880c3", "indicator--e822087b-eae7-4df9-838b-6c7c17a76182", "indicator--dd40ee00-e75b-4cf0-98af-440f0651ed81", "indicator--48d65082-3b3b-4e25-9c68-3e9e2ce8503a", "indicator--6c515b49-82fe-4373-a01b-28dcc01a6ea3", "indicator--afdc1f1c-87df-4e73-a599-f4d6e1c74f0b", "indicator--cf494470-19d1-478c-a1a5-ed58c395ec35", "indicator--3606e433-9ab4-4d1c-8d0a-6a0e78eb1a5a", "indicator--0d2bc57c-a039-4824-8e12-f5d3d64b9445", "indicator--a49de235-e11e-4420-84f1-f9b1a5e0ce09", "indicator--6e683a0d-9dfb-44b2-b82b-c7d53eeea124", "indicator--44fe6a68-87c3-4baa-ab5f-b353dd79d280", "indicator--407100c5-9cc5-4dcd-97c6-b991e2e6e459", "indicator--9423a2bf-1d55-4c67-a129-6a084e1ee090", "indicator--b115a5a5-a7c7-4005-a66d-89e500eb796e", "indicator--aa09fc15-666b-45e6-90d2-c5b6841849e9", "indicator--1eece303-79f5-43e1-bace-b94f6d9a7590", "indicator--38c06710-6576-4e15-87a7-6e32caf7b716", "indicator--3ab988af-6a90-4720-9bd9-4da10d853b50", "indicator--7a2f5491-ee63-4c6c-a752-2e9e7d7a8a8a", "indicator--deccec3b-65c4-4d89-ba7c-6bb1edb1b01c", "indicator--3619190b-36be-4663-9166-6d25b3456ac6", "indicator--80e51bb4-c5ed-4572-9e3b-bbe7dfdda24d", "indicator--9b37c834-20a9-459d-976e-93a83e13061a", "indicator--2ed04af4-a762-439e-9141-275200907f94", "indicator--dddd4af4-2235-4b3f-8b4a-6fcfe76a83c5", "indicator--30256e11-2c83-42e2-8903-37a3ae135400", "indicator--bad2c652-fd04-4b60-8b5e-c1a8eed8b9b3", "indicator--77c5ef07-a3d7-4796-9708-2351d432dfeb", "indicator--fe075415-a779-48ea-a583-9b0eb2cfa1d6", "indicator--0ce8c6e6-18d1-4c7b-a5df-2aa03f422c17", "indicator--62346638-d1b6-4632-aea7-73e069464f93", "indicator--82917317-7d8e-4970-9dda-c185828b7985", "indicator--549e644a-8ac0-4216-8dad-6b85a1de7e14", "indicator--0a4c94be-2ec8-4304-86ce-a2edc69c2125", "indicator--908e6cd2-d328-461a-81e4-cf9bf14c940a", "indicator--16738405-5a73-4c43-9c43-354e8d627222", "indicator--17f9cfed-af3b-4e4f-ae96-ad9cf09b2bd1", "indicator--9f4cb8ec-fe35-4e35-b01e-0c70db1f06b8", "indicator--8fcdc32c-e576-429f-89cf-2f892136e102", "indicator--39afe064-da5d-4126-af4f-757fe60c595f", "indicator--bf42e82d-7fb4-438c-8946-cacb5a97eff8", "indicator--a5f88d75-982f-47b2-95c1-4d83b086f180", "indicator--c44ea662-114c-432b-85ab-5ba393e303cb", "indicator--5d974a99-4cf4-45b8-834d-8a706a812c5c", "indicator--a702cd0a-2117-4389-ba7c-29964824efe1", "indicator--4f6e5a52-b08e-4d41-9ee9-0531f8e5b238", "indicator--f71e645a-b420-41c9-a304-df6570275d42", "indicator--b658d8fd-b200-4d9a-ae00-34237999926f", "relationship--ff713d48-1516-4b37-9fa1-5c861d47b6cb", "relationship--0c4b7953-a748-464d-9c04-cbbe4d36ecdb", "relationship--dd03e2fb-4822-45df-981f-069082ee0e61", "relationship--753d50a6-7e39-4b82-823c-90517290500e", "indicator--aee44830-b663-4ba7-a424-9632ea5606d2", "indicator--8f28403c-14ce-416a-9692-4e917ecb9b8b", "indicator--e4403c84-8386-44f8-9824-f5bc0534e12f", "indicator--85051681-7c28-4a8b-88c1-6e927c89ec42", "indicator--33ab0cf2-b6cb-4ccc-876f-318967870094", "indicator--d75ce6a0-cf97-4d7c-bf33-f5489e171f29", "indicator--5f363550-b8b6-49cb-9db0-0b6c2a726151", "indicator--6edd50b9-607d-4681-aaa6-5a9c0b963d58", "indicator--1a0ad370-043d-4143-a9ad-71543d86d31d", "indicator--36b506c1-53c6-48b5-90a0-3c4d14b62041", "indicator--424444ad-dac4-4b42-8c82-d5f44352d42a", "indicator--ae2caeaf-8131-4be2-9c7f-24c49bbd6f7d", "indicator--a7e06c98-3175-470b-866e-13ab86bb9b0a", "indicator--67c3944c-8e96-4609-aa76-3a9aaed04d2b", "indicator--9ee91669-28f6-45f5-a8c5-a8c535e587e4", "indicator--2bab646f-5fae-47d9-b70e-5331ca5c6df9", "indicator--1c81c38f-c5a2-4b80-a9a7-ca59d93e7341", "indicator--a7b4377e-5ada-47ae-9e66-59fb8b543b5a", "indicator--57e36f83-556c-4454-b0cc-90dbb6f5e6c6", "indicator--b1a0fad7-32c1-457e-9157-d7bfeca65536", "indicator--27db46dd-d429-4031-a2f8-fbdb7f7b8a36", "indicator--6fb268b1-eedf-4111-8676-98f9ba54ea83", "indicator--5883ad19-a66b-49c3-80d2-2ccacc82dbd9", "indicator--35664010-49c7-4ef8-b505-4493c182c36a", "indicator--55ed9382-28d2-489e-9894-b3fb151e59be", "indicator--c2831d45-0c51-4975-92d3-024839954e4c", "indicator--9a1afc2a-de44-4582-b5ab-9cc57876f00f", "indicator--06128337-5a32-4982-8d0b-abb450379d52", "indicator--08faa2e2-aae8-4f62-9883-8bfe7569c80a", "indicator--4d27e804-0c3b-4dbc-a69d-709ccfd1b18a", "indicator--426cb2d4-2d49-4e05-958c-6cb58da2b2b3", "indicator--8fbd58ef-1647-448d-bade-9edbcc54ed87", "indicator--865edc3f-707d-4915-93c0-c85277cdadcc", "indicator--2a1cddac-27b8-481b-b0db-ded10783aeb3", "indicator--cbc0303b-5186-4706-98cf-41222fc98981", "indicator--b7b73f01-a592-4a4a-a504-72d3ca84d208", "indicator--ce44d723-2448-4d73-9a06-bd4fbc5489a0", "indicator--7f17ca16-30ac-40e2-a392-51113c0757a6", "indicator--e1e7c297-215b-4688-905f-4b0c731e274b", "indicator--c2c4478b-47d0-4113-8c09-ca601a1ca750", "indicator--830a154c-116e-4371-8b7c-9c6e9b16ac5d", "indicator--817eade0-5c49-4edc-bf27-7cca3bf80416", "indicator--cc9b6ef0-8ee4-4777-b1e2-318bb1d47abc", "indicator--23ac77de-fe4e-4598-8e79-2930fca8e3cc", "indicator--f55ff99e-f9f9-4daa-885a-0fca27b6faf8", "indicator--aadc537b-0ab2-40be-a5f2-13b425567db1", "indicator--8d6ac024-f8ab-4766-ae47-84424b67444e", "indicator--90a856a3-aae5-4303-abeb-61e3f00a6ebd", "indicator--f0d655a8-c3a5-440e-b18b-668ace9f00ac", "indicator--347922d3-9c07-4468-b33c-8571670f6d7f", "indicator--d14c0965-92ff-4090-b4a4-cd4025bead74", "indicator--34971050-9dbf-49c8-a53f-8429de2025db", "indicator--c798ccad-197d-4bbd-a12a-fe5e3ac4eaaa", "indicator--cf7eacad-0ed6-4285-bc34-33cdb3d29b72", "relationship--89e54563-81d2-4068-bbf5-00893cb479c5", "indicator--30497fd6-7f15-4073-95b8-72846e476b73", "indicator--6384238d-bdd0-4bc0-8651-fffa2bd59286", "indicator--6e4bac7c-f730-48d3-894d-37f32ae71ce1", "indicator--3ff07d56-8d01-46c6-9871-f5a998479947", "indicator--6b6ae1ee-4fee-4438-8d7a-26c4d30914a8", "indicator--3023363a-f33a-4f68-a36f-ebbe2b427d96", "indicator--289a63b6-857f-4be7-9a98-03ab38921a71", "indicator--40890f97-0c79-4b67-ae87-de6ab754dd23", "indicator--a58f87a9-cbc4-40ac-967f-2738d6c3eca4", "indicator--0a2bd9a6-a648-49b8-9e66-8c02966d2e52", "indicator--ab75832b-ee66-4c34-8103-33ae671a8831", "relationship--6ffd8d56-7f89-447c-96a4-f331b729089e", "relationship--8d06a065-93ac-4bb2-b521-3bf2a6b296cd", "relationship--7b1402a9-ff36-4351-8062-75de6d52a4e4", "relationship--e33154e1-ac74-4dd4-94c2-492ec0079737", "relationship--55b48f9a-a1cb-4310-9971-1d13734132ec", "indicator--0599e1ef-960a-43ec-8efb-22ef982424f2", "indicator--1dd6d7a3-2765-4eca-9e13-8593b61caf0b", "indicator--84e82521-eada-49a6-a235-00d08a29bb5b", "indicator--8091122c-5a93-4c5f-bd76-961da2596e1b", "indicator--46c29a8a-6ff0-454a-9c32-259a280a2533", "indicator--1f41481d-1363-4519-8323-71eaf220b843", "indicator--c602a88b-4583-4dbe-8c8b-876c58bef982", "indicator--a3c88d61-53ef-419d-b0a8-3c1a5e7e0fee", "indicator--6d04e897-14e2-4102-9a8f-c2d3e4da113f", "indicator--ca198f77-7fe9-47be-bf10-46676b484d62", "indicator--135785f4-8bf8-4938-af54-fd10c5ab98b5", "indicator--38c4a421-1abe-4ae3-9fc4-9403f61f6cc1", "indicator--99903e07-9d81-48c8-8463-434781331309", "indicator--210226ed-1822-4fe9-9a5d-f906fdd1beaf", "indicator--811d3dd9-2863-41f4-97c2-81b28faf69f1", "indicator--a4a2b25c-c4f7-4384-a997-f08f280a4211", "indicator--ced56fe2-5cac-498a-805e-3daa4d2df138", "indicator--805f42c8-8744-4cd6-88da-d28db16ed445", "indicator--5f3dec96-47c4-4257-9155-1788111ce0d4", "indicator--4efbe15f-740f-4677-af65-9bed3aba47a7", "indicator--6ac8d221-dbfa-4863-a8f9-f1a62588b31f", "indicator--9360a20d-8e57-4470-80f3-6fc5fc8ae145", "indicator--979f047a-1745-40ec-8312-7519b678e38a", "indicator--39c17da3-f0d1-4ef5-8e91-af07695951ff", "relationship--43693c85-2221-40f7-9a69-adea5246de3f", "relationship--88cb3cb9-5b9a-4ce2-855b-63940e3158f9", "indicator--fb8ed8a5-d143-4e68-a112-11957eb40e5b", "indicator--228b2fe9-50af-4ae4-a7ed-28175609a611", "indicator--3a38cb42-e816-4cfc-9bf3-0d35f3125b84", "indicator--c8c1f0c5-c0a5-453e-b7d3-19e77c29de5f", "indicator--071cae68-ca1d-4116-9159-2f0451007010", "indicator--ef89013e-8dfc-4067-9bb3-43bec1fd849c", "indicator--2e8b6ae4-c6f3-48b0-b1fe-70872dbac87f", "indicator--2dff0e03-7b73-48db-9a06-28bef84004c2", "indicator--1186d3d4-d8a3-4e07-a94d-66dbc813f1ec", "indicator--5ffbbdbf-4a8c-4bfc-b305-ee59abe61037", "indicator--081e6c09-9ddd-45c1-8d0e-917d331dd75c", "indicator--49e8ae83-10d8-43fb-8def-91a10ce8d72d", "indicator--b501419f-5a9c-40f1-87b4-7c2cbbf824e4", "indicator--9bdf970a-7c1a-4fde-a550-a3d84eaf21a5", "indicator--e1d5e13f-3e11-4a03-a112-8897a8907e54", "indicator--4c33aae4-fa2a-4295-b6cc-2dd043ad6e65", "indicator--a7cebfea-3ade-4c05-b1e3-41fad606c6e3", "indicator--e32bced9-4b26-417b-9c15-839b4f961b2d", "indicator--97f1fadb-df24-4061-b1e7-9edc2f28fc9b", "indicator--d65db6da-e686-4215-92d2-9cd0b2416d34", "indicator--c8e48f6c-6eda-46ee-871b-f5e92306e5d4", "indicator--e2734486-ff5a-4fe1-89f1-20550bccf685", "indicator--3aab3901-20f9-4e37-a6f6-e4c9696d9202", "indicator--75ef1fda-4cdb-4f2e-811a-353a68c7506c", "indicator--f5138a3c-c405-428c-a1cc-645ac23fe6b1", "indicator--c4fbeb4e-7b69-46b9-9bf8-85d864534b41", "indicator--9dd1f2a6-77f5-404e-932b-ba6d73d0fd2a", "indicator--bd4561a9-0dae-448f-942c-810918eeaf03", "indicator--1ca843b3-e99c-4df0-9cc9-7380a1a455be", "indicator--0f96a8a6-24aa-4831-aa10-771172a0e8ac", "indicator--6d9148de-eb30-4573-8eba-016e6057cf52", "indicator--7412f26c-c439-40b8-94d4-5b9cd2fcfce9", "indicator--ac2ea65d-195c-4429-97b4-0bf10553dc48", "indicator--0405d667-1106-426f-a094-2ba58587ae58", "indicator--a1ea7b58-b398-4787-9f8d-e694a9569865", "indicator--3ae5ab12-1abf-47a0-89e0-5c2f0896d88c", "indicator--20136f66-7e78-4d65-8a5a-dfbb6d7416ca", "indicator--fef6c1de-f98f-46fe-bd87-aa07723fa5ad", "indicator--aea15160-9ef6-4955-b213-672099795700", "indicator--61859e9e-66f2-4959-a1a9-408b3989b4a9", "indicator--be3e3d58-cccc-4b26-90e5-8f53e729dc1a", "indicator--1b911abf-2e63-498e-bb6b-b5e4b39eeb04", "indicator--1bb21abc-1f49-4ce9-bfc8-a57fc8f267e7", "indicator--6e7e042c-a24b-4ad2-8310-4e45494514e0", "indicator--bb98dbc4-1172-46d3-bbee-111812ba4127", "indicator--c4f933fd-2122-4adf-bb00-aa68a383d9e2", "indicator--d4946784-ff48-4c5f-af19-3042ff631fbf", "indicator--4b7b3b04-2902-47cb-a81f-87ead1aaa43e", "indicator--5fcc9da6-5886-40b8-95d1-21769c6cd555", "indicator--9b3505f9-c977-4bf8-8053-9fba7ecf5405", "indicator--ad183c9a-0376-4414-a7b1-08404834c906", "indicator--dad34352-dfd3-464c-9552-1d1a24853304", "indicator--a014232c-2aa9-4adc-96a3-c10a6a8948bd", "indicator--59e493b2-fd1c-4f1c-ba1f-f6085e3d4d45", "indicator--09f18dde-101c-4809-87b0-9d2a3afbeb10", "indicator--619397b5-fcc9-4393-8ddf-18b0ef421b79", "indicator--9c08d9c4-54cf-4dc8-bd0f-f0880d489249", "indicator--5bee64c4-d529-4938-97cc-6af110887a88", "indicator--e79289e1-92b9-43b2-bf24-bc9a4a81f521", "indicator--6d1c1663-aac5-4b06-876a-a5495be23d2e", "indicator--22451421-89b0-4f3c-a92e-b50ab9edfd42", "indicator--e7fb1628-efa6-4a8e-bd5a-caabc5821cff", "indicator--3d31e588-32fe-4f4e-928c-061e38aa5c42", "indicator--ae2755e3-76c2-4c41-9d2a-0dee84f4cf19", "indicator--a5d345ff-73ae-4eab-80c9-687c5c40238f", "indicator--a4eeb3ae-29ab-4ebb-b8a1-2e91490f2903", "indicator--7410c5d9-63ed-4e2c-8163-c944e6d7dca8", "indicator--650d0a66-3231-451e-b07e-3b8e29ceadfb", "indicator--0ea33992-301e-4735-8b9c-72365d892548", "indicator--a63276c3-5097-45c7-b7b6-ca610c11cbdc", "indicator--c84e4ccd-d1e4-4170-9068-c57ee72177b1", "indicator--74522ac0-8e7f-4761-8d62-f608c05e2042", "indicator--76c9a7f1-8169-49f5-ac1a-91f7aff6e1e0", "indicator--42924c1e-d807-4a4d-b421-3edd5b16c76a", "indicator--249119be-537e-4a8d-823e-a8c4443a2110", "indicator--c23dc12e-fedc-4505-a799-7ad2f16d7caf", "indicator--a94b13c6-32e9-406b-9263-c0db884fc917", "indicator--c5be932f-b596-4254-a304-4c25aee171cd", "indicator--178053bd-a5bf-4cc5-804f-2e6f5c6e425f", "indicator--d3d16fdc-f997-4f1e-a614-6a11eecb4524", "indicator--71f0f72d-1317-4359-95f3-c6ad2c6af469", "indicator--1d255d0a-7dd7-4f8a-9c3f-fa3dd092e713", "indicator--a641cedd-055d-4439-a707-8697c4a67647", "indicator--069cbfa2-8797-4fbc-b557-5f1e2df96ece", "indicator--d8a24681-6ca9-4169-a1a9-13776fea8262", "indicator--e2277905-0f24-4778-bb57-4eb02d4b5b34", "indicator--71a5d376-1c93-4cb4-b6c3-614511b8c014", "indicator--d6f1c4e8-8bd0-476e-acee-19836a38628a", "indicator--0c15bfb0-8c4a-4121-8b4b-b2bc6ccf6799", "indicator--c963b275-0968-48dc-8264-c58080acf019", "indicator--38640d09-6046-44b6-95d0-aa6062c9bd39", "indicator--22444308-0ac2-47af-ae1c-c0c0d5dc4550", "indicator--bc00735a-3296-49c2-be7d-f78079cb6f1d", "indicator--da6dd8f4-92a3-4e50-9dc1-7221e523f833", "indicator--074e8829-dd47-4f90-bd5a-283b340b20fb", "indicator--8ee6b280-e213-4931-bd30-566e7db9fd3c", "indicator--c0396537-68fa-4100-91d2-1fe90555bfaa", "indicator--792cbbce-7d55-40ce-b966-d415dda80e77", "indicator--c52e9424-af04-4235-9bcb-eace9a23ec49", "indicator--51d89b06-7994-4d57-a2f9-80c267ec01c5", "indicator--6aec7d89-e7f7-49f8-8d36-cef0494265a5", "indicator--b8d47ca1-42fb-4e8d-86cc-1ae054b52010", "indicator--d6443b9f-4f6d-4fb5-931d-65d697a5f036", "indicator--17d71fe9-7ac9-440e-98df-6e2145247dcf", "indicator--03698453-f744-4c16-84ff-37af4ee3bf0a", "indicator--b93b21d1-1005-40f8-9594-8bbd8863ec09", "indicator--a3283bde-5908-4ec6-8461-9500ae41ea96", "indicator--6861fd16-ac9b-4638-ae40-c5312c5d2c8d", "indicator--d0ab1f80-c712-452b-9149-47abb3e7b721", "indicator--573f39fc-c37b-42ca-a71c-95024e5c6d17", "indicator--8825f271-9e9a-4429-a471-d9a7cda71e06", "indicator--85d000a4-9611-4b0c-9968-2d9cff780c81", "indicator--13b068a6-845c-49e0-9b61-c56ac90c6f38", "indicator--5796879e-0948-43f7-80c1-fc1171d8d83e", "indicator--2c3784a5-5ea9-43cf-ae05-03f5eb891db8", "indicator--e7477d53-20fd-4f3c-8fe2-14b23be7d052", "indicator--bab7b29e-208d-4718-8343-73833e886d3c", "indicator--01fd1f7c-878b-4052-8684-b209e8d70d2d", "indicator--fe00cc23-aa6a-4a74-8467-9459fcd504c5", "indicator--61656abe-8122-4ddf-a066-6c352faec53f", "indicator--fe69583f-7786-4099-83d5-8c0859fcb106", "indicator--f5106778-04ce-42b0-81df-0a96c700c731", "indicator--4f508e92-131a-4aad-88f8-9e1fe2dcb913", "indicator--909e0339-b7c4-4306-afb1-782859cddfc1", "indicator--9aee978e-0fdc-4a6d-be54-c0dab100cd17", "indicator--b3df516f-a2a8-4922-b69e-0e0407bfe965", "indicator--fed633d9-7dd9-43cd-a486-2b85c9f8f3fa", "indicator--d3193284-b3cf-4e10-a924-174dd8595bf7", "indicator--158ff2aa-2129-4b38-9642-8f0c4bdd18cb", "indicator--7c2a3374-fbc0-4ebd-8210-3c8f8c452d98", "indicator--624ba68b-ff47-49c8-8c5a-1434930b5060", "indicator--0a40a419-46ec-4214-9cd2-55a04b2531ab", "indicator--92ffcd20-3ca7-4824-b4d2-d2a37ff91382", "indicator--1004cdde-d477-47a1-9872-6f1777cc862d", "indicator--598c77b7-af68-442e-a118-842183b0ea7b", "indicator--4dc6ab94-101b-4e06-b627-a497d03fe5a6", "indicator--1917772b-b3b3-475c-906a-6e2a07ce0fb6", "indicator--846bdeaa-b00b-43d3-b64a-1575e3abbfb4", "indicator--747aa98a-a5d6-49ef-b36d-9fc4d3be3f7f", "indicator--c923c59e-fab7-4319-a3ce-01272689bae0", "indicator--ede13274-f5dd-4cd9-b338-eeed051378d4", "indicator--bebc6d2a-8040-4520-8630-973be4730075", "indicator--47b35bdc-b851-4659-83c0-6891bdf259bc", "indicator--1e13d7f3-e689-48d4-a47f-87ef034a6933", "indicator--ac959461-a1ee-4f44-b84a-9ff33c256f1d", "indicator--aae5c414-b788-40e2-90ca-a38f75741882", "indicator--95f04134-3880-43a9-9fc1-757ba041fa3a", "indicator--8762c2d0-a6d5-4989-b801-93193fcaed2c", "indicator--8ceedded-1026-4d20-bb98-b19801f0485a", "indicator--23846a84-e2c3-4af4-b46a-e6e47e5bb5fd", "indicator--16f74db9-f128-4413-94f5-e81d50f19e0c", "indicator--9e22dd35-6ebb-45b2-a124-fd7e1524d419", "indicator--b6d6cc04-64aa-45ca-b908-70d5d03cf4db", "indicator--04acd08d-9c40-46ff-90f8-f29eb639937b", "indicator--69d1ab34-a6d8-45c0-879f-59238971844f", "indicator--d65f6c04-8787-4d60-a334-07ff5ddf2a2c", "indicator--57c77f34-84d5-438a-baf0-3a6a1296cddf", "indicator--cce1d2c9-96ee-425e-b928-2e5f78e77872", "indicator--323334cd-0fc6-4bd2-9257-5497884412c3", "indicator--80656f00-1415-4c05-badc-f5e36fc06d84", "indicator--99392c5e-ced4-4c26-8f9a-9e6a1bdce7c1", "indicator--e7d0a4d6-aa30-4ec4-a3ae-f013814f8b35", "indicator--aa217322-9f65-4f81-876c-47a48019c78d", "indicator--8ce9f678-a4eb-4271-aea8-37d06d9c0a71", "indicator--23418e9d-9011-4b04-a3d1-04f49812bee0", "indicator--521f4346-a257-4b5d-846f-50688da264d2", "indicator--4cc866e8-8762-4e3b-800c-5c4b5b308bee", "indicator--3d8e3e93-cc90-45ea-a9f6-f580e778fa62", "indicator--c1222022-c5b6-4b49-8cda-42311668678a", "indicator--712590e2-46d4-440c-9cf7-980f41c8963e", "indicator--87658fb7-4674-4d0f-8cfb-a64d103db7d8", "indicator--b9d96056-6c32-4f50-be1f-2a5f8c9e1356", "indicator--4df8d1f0-d7a4-47db-a1a6-3c40283f3576", "indicator--2818c7ba-9ac1-47b9-8504-6e544caa00d2", "indicator--d4e6ea14-92c9-4b90-a7f4-eb6e112c9291", "indicator--8a67e63c-307c-4e2b-8250-0ca6be564078", "indicator--5fa0d787-06cc-43e9-ada1-6ad3ceed1413", "indicator--0b501285-d4f6-4f1d-b978-498030938b95", "indicator--7a244803-052d-49ca-9022-cfbf5d2ebae4", "indicator--1c9dde63-ee8d-4fd9-a7c3-4b66daf08033", "indicator--55dd2b43-7346-4410-b08a-55348c5ae98a", "indicator--a304b3da-4b91-4649-b2cf-e036e0c47782", "indicator--e3cc5e31-7e84-491c-b1f0-c05063bb2bd9", "indicator--b49c56c9-1ba9-43f7-a854-c7f562fa9a82", "indicator--14b46555-2115-439a-ae6e-cce9088b4355", "indicator--56ad86bc-5733-45a2-81dc-b9ca1db8ea24", "indicator--b581317b-d4eb-44a8-91ca-6a2e3816c835", "indicator--ff502a04-814f-4199-a8a6-e3963cdd6a86", "indicator--a4676384-6433-43e7-8e63-bf19ddbef7d4", "indicator--cdb7a453-05eb-497f-b203-007f2b3d9971", "indicator--31b0e47c-411b-4f5b-abca-fe6a94a010c2", "indicator--fd82afa8-c16d-4c3b-8b6c-f94ffdd296b2", "indicator--d37d59d3-0cac-40ef-b7ed-ce82e5757763", "indicator--f8e01ff7-da8d-4d77-a477-4636652df90d", "indicator--0c5d4ef9-2615-406e-ab8f-9e1663371ee3", "indicator--fd7285dd-4b80-4bdc-b8a5-9c3991bf7d3b", "indicator--296ce6b3-dece-4594-850a-5bc1166a1131", "indicator--81be0685-ee2d-404d-b501-b831cdcfc435", "indicator--7ab87f79-7ee8-4b2c-95d3-c8b2bf6194af", "indicator--24d23ff7-b582-4ad2-9a14-99eaffb9e1e3", "indicator--0020d83b-e265-4d9f-a71f-8379479eb5da", "indicator--2aff957b-38e6-4199-b746-c0c746eb45fb", "indicator--d2765d2f-adaf-429e-a282-6f66502d4f43", "indicator--86102c2f-63db-45b9-9f4d-34d87d8e883d", "indicator--67bdc5de-1ddc-4e13-8196-867223d53d1a", "indicator--0e52329b-c2b3-4ada-bd37-8ed9f2497cf4", "indicator--f697f2e9-4470-41b2-849a-14c48049ae91", "indicator--076587db-70e8-422c-a1b4-e56a454e900e", "indicator--cf4957de-016e-4ec4-868a-7b91151f7190", "indicator--d1076541-9947-4caf-a5ff-2f7c9fcb1664", "indicator--e2384fa2-8c10-44e0-bf2f-6f88285f2216", "indicator--10bd2b2b-e64a-499e-b7dc-604ff5aa90f0", "indicator--d2155b5c-031e-41d0-ba41-46b45d264c64", "indicator--78c99cef-d61f-4a92-921c-593500d9b2da", "indicator--5a5bedaa-cfe2-4fc7-91e3-c2fda47bb4da", "indicator--0ef2a5e2-5093-4b61-8a93-5940c06953a1", "indicator--48b64e5f-9a68-49e8-b6ee-983442e1a8ec", "indicator--c2d3aab7-f0e9-435a-928f-b98965206229", "indicator--0f44bcfb-5a9c-4a94-bc30-c29a6c2874ab", "indicator--a33a13c4-673c-461f-adcc-cb1cc068d5c5", "indicator--25ef5818-7a26-4e38-8784-a5676fe58e49", "indicator--c3b08c6c-0c5a-477a-995f-7ab7af4c07a9", "indicator--4f9b0454-b043-47bf-8ef4-8510ea327864", "indicator--6051a0ee-aab1-47a9-9974-391590bf8e56", "indicator--5b1417ec-9cd2-47fd-b445-a9a6eff23048", "indicator--d28935ca-0cc3-475b-a23c-a966065560fc", "indicator--be8faa8e-9e9b-4295-9c86-f52b018e1d33", "indicator--6813b045-920e-4814-8b1f-1b0230c3041c", "indicator--e91601fa-4023-4dd3-ac10-90967ba015bb", "indicator--bf3344bf-d200-46bd-9ccd-c69f78e6c12c", "indicator--b2a89756-a92b-41e7-b3fc-0e544cd636e8", "indicator--127aa072-6386-41ed-8c7a-1c02fc4d415a", "indicator--6a624d74-f633-4bea-8e03-505058ea273b", "indicator--8f83f945-2a33-4e5c-a851-f74d1e25a6fb", "indicator--de9afd6a-80c3-4cad-af75-21beea1dec5a", "indicator--47786c9f-5b3e-4415-9d86-6e5f73755be5", "indicator--b5ab0580-260c-4daf-9f97-675860cc47e6", "indicator--2e840e45-4a01-4f29-b2f6-e433c773323c", "indicator--a06958fb-a492-48ae-bdf8-dd2595a6d477", "indicator--ec301bfd-2356-4d6f-b370-2a650749c2f0", "indicator--ad110adc-66a3-46bb-aca1-1f60d1f4a722", "indicator--07a6008c-4243-41ba-8517-588330a2f360", "indicator--ba2aa1eb-4fb0-4ce9-a964-925d93cc986a", "indicator--1afe8e11-23da-4542-bfce-c68a82cd510e", "indicator--28c31747-d965-4568-9ec2-4c0dded971cb", "indicator--aebbfd9c-23cc-4f67-9dae-ee4628e778f0", "indicator--b2244280-9ca5-4b88-a38a-e04e8b119eab", "indicator--ba7740ab-69e1-4f02-bc5b-3340e37106a5", "indicator--561505c4-0d98-494f-9738-fd4c18a48b88", "indicator--b69d1c15-a9c7-436e-abdb-e03e73b93fe8", "indicator--e09347f5-0696-4b48-93bb-16979b8628c2", "indicator--f6a94a8b-8356-47d2-88df-387808046b1f", "indicator--32943821-5f24-419f-b8f9-86f349add971", "indicator--0d0b160a-ab6e-4d10-955c-ab1b7ba2bb73", "indicator--e11f2ca0-a3c3-45f5-ad51-5e3764d92315", "indicator--082da050-8c74-4a15-9bba-612a88b24b42", "indicator--f604ab6d-fd2d-4fce-8c80-32282acf80b7", "indicator--d0f59b75-333d-4489-826b-d6778ebdda27", "indicator--27f3d8cb-c80e-437c-a377-30f30eeaf7b6", "indicator--82817855-8acc-45ea-bbd6-23aff2ad7cb1", "indicator--789b0569-34eb-487b-a60a-c6bc8055b81e", "indicator--54dd43fd-dece-472d-87ba-7498f619ab32", "indicator--1bc3caa4-97cb-49f5-8b99-bb76e1166f26", "indicator--d7feefcc-874a-4ca7-83c1-33316ae31c9e", "indicator--8d2a87da-34ce-492b-9c26-f6e393e33826", "indicator--51ab4103-0e6e-4939-aa35-19bd3b1c6b28", "indicator--2254a507-f13c-4054-af14-31c0d40cb56c", "indicator--041cc741-cc2a-4a3e-8b90-8ebbb1dfcfc7", "indicator--0fa1f4b1-c2e9-4b22-bc2f-dc5e0e6b73ef", "indicator--d47a7f06-c0b3-42f3-99bf-612cff8b4a10", "indicator--8eeae57a-5cbd-4860-b579-ae02acc9c512", "indicator--a2bf63a9-7cf4-483c-99ad-db12d1b5b38b", "indicator--301aefc5-f7e4-49c3-9f29-2af4a464ad10", "indicator--68f9b5ef-7b8e-4806-a54d-820d2fd18ba5", "indicator--18b86ba1-f27e-4e66-bc0c-7b2b7654cbb6", "indicator--12c3a273-3c7a-47d2-9ce4-3160342db6dc", "indicator--e83f3a5e-853c-4915-b44b-e70ee1066451", "indicator--bc8c4d2b-790f-4993-8a9a-b176aa74174e", "indicator--4aebb397-f798-4cea-8d31-ad8cd8d48e4c", "indicator--c3a4f39f-2656-41bf-af01-0653fc5bb90e", "indicator--eaefd869-b881-49d3-a083-9dbb35e4ca08", "indicator--8bbafe3b-ff4a-498b-a7d0-f197c97c0bf7", "indicator--966ad7fc-7a6a-4092-be9f-dbf98d04a3c1", "indicator--5c717836-7a5f-4a09-891b-dd3fca204624", "indicator--326e5fd8-4c88-4aba-9ee3-894268d5d586", "indicator--16e34003-7b31-46cb-8ded-86fb4c8f53e4", "indicator--b77c56de-bc41-481b-bf0b-d2c6332df054", "indicator--562eebc1-10d0-4daf-9ead-842cb7ff6a2c", "indicator--83319f1a-f73b-4668-b6ed-c43d1096ec85", "indicator--4ac98e05-3446-4896-bff0-d145fab40193", "indicator--4b1ac19c-0731-470e-902c-0c4665f5e279", "indicator--b8d878cd-2330-413e-98d5-7c3bf1e0a0be", "indicator--44c3abf6-d682-45da-b409-cee9bcee0db5", "indicator--568e8268-b18f-4a35-a198-2b2deddab69c", "indicator--b7ae8536-8494-41cd-a75c-ecbb68b23b12", "indicator--09d5c384-6c53-4b94-bd8c-6865522531af", "indicator--79abca33-010e-4fbe-8f74-75f6c47f850a", "indicator--94b14aa6-1f7c-46de-8ab1-01e37ef19115", "indicator--1e262221-751c-483d-ba20-3051ee4f3766", "indicator--1fddb11a-5870-460b-8a56-075f11967a1a", "indicator--c3372536-2290-4084-ad25-f6845a74242f", "indicator--e768aac0-2d4b-42a5-b798-0e70c757ea4b", "indicator--c98a44f9-c0dd-4b89-bfc5-6810421ce0c2", "indicator--9bf7e2ae-347b-4aaf-bc15-1e03e4cae473", "indicator--c58da695-fb9f-4a05-bb1a-6a51380079e3", "indicator--32384790-f68a-47e1-bb55-3b5f3e9aacc4", "indicator--958c0bd6-c4b0-4f0f-ae0b-0794848c2f03", "indicator--9b47da2e-98be-44f4-ab40-fac3d1b5408c", "indicator--d40a073b-ec8b-4210-a499-0b0810c44d34", "indicator--0a8d39b5-6f4b-46d2-8978-ea25d9f4655d", "indicator--0a4f31e7-ed90-4071-8a91-92a760c1b219", "indicator--c7e80442-8657-4593-b8a0-ee68e0429731", "indicator--8714f41c-eb78-4216-97af-5e00db1eb7af", "indicator--19ea9d50-c597-4070-8e78-7015d066e3cb", "indicator--c0c81b16-b8ad-482b-838f-7db3f3da71e0", "indicator--14549aba-afc1-4137-a939-342a4c55c4b5", "indicator--1d5e0faa-4f92-41cf-b3a3-b5acbd8c723f", "indicator--c6a44805-7e3d-4b2b-a938-52c0f35f0c82", "indicator--d82769df-d18b-49ab-8c88-cdffb01e605f", "indicator--1d16021a-1ff1-4dd6-abb7-6bdeb4fb792c", "indicator--c3f5e479-4ed4-4fdd-b949-9c7d9be756c7", "indicator--482c794a-aec7-4d23-8c1a-ed0874bf2098", "indicator--f614cc33-044a-4529-8828-7c9f895e9e3a", "indicator--163ce27f-7a7a-4d53-8e86-ced3bf29dda3", "indicator--9d269994-5718-48d5-8627-4133d8643308", "indicator--36f404c9-3d3b-401f-8d87-a0d9de553ede", "indicator--b5d1f0cd-a1f1-4dde-9a57-bed8ec0c078b", "indicator--52a9e221-87ec-4e3f-a8d1-e88283ce1fe6", "indicator--60e5b583-7f2f-4bce-814d-ac6671709280", "indicator--c2f77768-a594-41be-aff8-d77179365ad3", "indicator--99484304-eaad-47ba-8c3f-388795f030b5", "indicator--10d5343a-f3c8-48ca-9b52-13f25c18e27f", "indicator--c9b23aee-a5c5-48b2-8861-70aecfe2b91d", "indicator--6239fbc8-ffda-4ba3-96d3-911a2622e028", "indicator--a49a1cbe-be1f-4fdb-9e14-987033c58de4", "indicator--e0d51a81-2c5b-409b-9a68-cdf1c688d126", "indicator--c3cfc577-2947-409f-824c-0ccf7b2a8fdf", "indicator--ae9ffdaf-808a-4c39-8143-a08eb3c59667", "indicator--5fabd47d-0696-4b11-a6f4-b02dc5dbf033", "indicator--24f8c5be-0d33-4044-9f6b-598cd5ead76a", "indicator--f60109ed-0416-40f9-83ee-cde4c0a561c8", "indicator--efb32fbe-7a97-498c-90c9-fd6a0826a731", "indicator--eea93362-cc62-4aa5-8d1a-11f0239fffc2", "indicator--5085b4e2-17f5-4c60-aa8d-2af49409d381", "indicator--1b35a12f-2473-4194-93c1-0e8706e03821", "indicator--b8939d9e-f82c-4f33-94dd-6196eec7c401", "indicator--aa25fbc2-c646-4296-b0c8-e8e1f2f823d3", "indicator--8dceee68-59cc-4e34-91f4-88a71d677e11", "indicator--336b9ca9-4e6f-425f-a652-1b18c8fbe173", "indicator--55958a6b-7f61-4610-b356-386e44d2dbbd", "indicator--44092fdd-57d9-454d-a45e-f7839fa2c226", "indicator--99e1cece-dd21-46d6-b394-1ed67e4a143d", "indicator--3ef74be7-f1e1-400b-95f1-39ead995e465", "indicator--0e09b901-9508-4994-9c61-f325c7fd4bd9", "indicator--6636ebd6-13ec-47bf-87ea-ff2934c2aef2", "indicator--41b215cf-8f14-498f-8eec-0d35748afbb9", "indicator--e7fee69c-c779-494d-90de-56491afd8d8d", "indicator--a04538ad-6882-4641-b376-bd77153d61fb", "indicator--8d1a87f8-c083-49d7-a136-16eb9fcf679c", "indicator--abe25cfc-7971-49b6-929d-cb3cc422c995", "indicator--e9bf5a66-6ec8-43c4-9528-bded7c4ecae1", "indicator--2ebc8cf5-9dd8-4b10-9769-3af182d00346", "indicator--1c662b5d-ce83-4cfa-8291-50689acacd44", "indicator--767b295c-3034-4973-abbd-4d3e4e7a1d1d", "indicator--87472630-4d86-4349-9228-94cd9090b725", "indicator--bb5ecc5a-26f8-4df4-b7f9-c98497269f71", "indicator--9306ccc0-45ea-4016-86a6-45f6587e6f86", "indicator--fc2d6a5a-4124-4c54-87be-598870d63b6e", "indicator--62cc5540-9e8b-4d41-b00a-e259903afdba", "indicator--c82be9d6-51a4-481e-b575-00cc892bff88", "indicator--d2e73413-e0c5-439b-8d3f-73d996b06a2f", "indicator--c50a2844-bcdc-4f41-9893-56d360962525", "indicator--6fb353f6-f686-4875-8c39-85cbfb4279ae", "indicator--0d4a41f4-5d80-48e3-b5d6-765fd48e9f78", "indicator--5e753421-e7c2-424b-b576-50a7ea28c974", "indicator--b28a26a7-30e3-469a-b10b-7395b65d2cb5", "indicator--7cb2df27-a4a0-481f-afc2-d750247abf8e", "indicator--d9accb1a-c88f-41ed-bca8-0207cd5a3b4f", "indicator--4cacf6e3-0228-4930-8a4b-b3e153e1bb6d", "indicator--576bb2d2-1a50-4c1d-a371-e2e5f071970f", "indicator--b14587a0-3bc5-42c8-b85a-c734228a7b58", "indicator--08637e97-09c9-4016-9dbc-94cae95713db", "indicator--41ac5d35-d7a6-4a97-94ba-3600d353959a", "indicator--67e0b1e3-d7ad-4199-9ac2-b0a2359a68fe", "indicator--6bd43330-2c15-4a33-9d16-c274fb2c4ed1", "indicator--df78af42-17ee-4181-b056-7c7b76c9b26e", "indicator--acb79f63-eea2-4e4d-b93c-e9f4f15005a7", "indicator--1bdae6ee-6234-47b1-92c9-eeca7b780a6a", "indicator--1fc5da0a-8348-405c-8148-7623f00eaf4b", "indicator--74143529-8052-4d48-a06a-6bbc30bd0563", "indicator--21636998-ef5d-4202-912c-3b886611007d", "indicator--cb2ce9df-0e8b-42fe-be41-3233e01dd205", "indicator--c1e7e885-d588-4497-afb6-7c0edc6babd9", "indicator--b12d1891-1b95-4b09-b48f-24937c64b36c", "indicator--5a18f788-4981-4d40-bec4-d481c5c8a657", "indicator--b79d9dba-67ab-418e-bf02-1c03f54fc3c0", "indicator--9882b35d-596f-4b21-8ec7-43b1525a981f", "indicator--967d04aa-30e3-4b15-b2e8-a806001b5787", "indicator--7f0c362b-fd99-4e5f-a044-d8eeadcc2af8", "indicator--058bb8c7-828d-4359-8f6d-bc055731a72e", "indicator--29900271-3efa-4f45-827c-2105e1157e6b", "indicator--cf9c7e3f-4a48-400f-919d-6ae77f7aaf5c", "indicator--99b7c98b-76e9-4a99-9f6b-ad9ed5604da2", "indicator--87473191-904a-4593-9677-f1872e23bcd0", "indicator--a3f918ca-ae9e-4589-9bb8-566a000bcc61", "indicator--49b4a14e-edc4-439b-8457-cbadd537506a", "indicator--bb8654d6-7afa-49c5-bcd8-fbd07c2de380", "indicator--44ab3244-f535-4d73-97dc-495df5aa45da", "indicator--0c0aa07c-f57d-4c8d-9ee0-ee57a3b092f6", "indicator--ec55bd2d-d031-41d4-b45a-c0deb5551892", "indicator--99c7fed8-fd61-4fc8-a3db-3298615f27a7", "indicator--794459e8-4e06-40ac-923b-6868df57956c", "indicator--0ee8ce51-7b88-4fc7-8875-efc79a657b1b", "indicator--8fea16e4-789a-433f-8d8f-0fdb2a4f55da", "indicator--40bb0806-eb21-4ed4-b080-9931fc179cea", "indicator--ca60ac4a-5af8-4ee6-b132-0419a616356e", "indicator--8861b83d-0010-4ec2-a140-f7309dc2aa2b", "indicator--5c8635c1-2099-49d8-9f00-5bb30de76c52", "indicator--643f5d2d-e785-411d-a24c-6b9e5fc1f19f", "indicator--b8001af4-270b-43be-b7cd-98089ea988e8", "indicator--76006b17-55c0-44e8-a61e-b26d8fa160f7", "indicator--37934898-9061-4af5-ad22-eac0d2e41e71", "indicator--4c339254-3d7e-4e42-956b-bf264fe6410c", "indicator--91398140-33cf-4116-819b-81e7015571dd", "indicator--d4e65894-dca7-468a-89ad-c1951fab7000", "indicator--63b08f09-f0d7-4259-99b1-4c702ce9dc2c", "indicator--584af071-dad9-4a95-bc54-23bd8edd5531", "indicator--1b0f5618-df4a-4b04-bf17-aa4b00e93433", "indicator--ca38259b-92a1-480a-ac50-342414a815ed", "indicator--412d7755-b78d-4879-8cca-bdfd7cf317b6", "indicator--5a8380a3-a65c-464c-8c19-4a170d2b647e", "indicator--fc910064-5031-4422-ba08-6baaa84d4bb6", "indicator--48574514-94ac-4bc2-aa82-3ae6af76ccb8", "indicator--39948965-8c92-48fe-bfba-a90b38af194d", "indicator--44fc1580-f96a-440e-ab12-8eb36a1faa57", "indicator--840c61db-e9ca-4d2e-a878-e1fb148a7fc4", "indicator--0c5bf010-335c-42f3-b7ea-7aed991a3b2d", "indicator--60b3a127-528b-4308-a287-4d1c4194f5db", "indicator--f2f9d84a-a171-4ee4-8c25-7e843f4aad95", "indicator--8f3288f7-6fb5-4b85-9792-4ce67d5f7bbd", "indicator--042bcd5e-eb86-4e16-a2ac-5e5a20c65da9", "indicator--e01afda1-7736-4ef9-8781-91d7514639c8", "indicator--80d122fe-d483-447a-9ca4-645d50f92590", "indicator--7aa11dc6-4169-42f0-9eb6-3613b0d34106", "indicator--0e8ebe9a-7f6b-4490-bffb-32a28863a0f4", "indicator--55380e94-1e77-4fd9-a048-c042c9342fcd", "indicator--ab3bb49a-8dc1-460e-acdd-a64b648ff983", "indicator--06ea88eb-68e0-4892-a984-dbc8c4319a2d", "indicator--25962167-c639-4a37-92dc-7c0a4b653b9f", "indicator--a1034adf-b0a5-476d-9961-ae3668fdd9aa", "indicator--cf74778e-e307-42ed-946e-78daa63b6da5", "indicator--9eafb986-09c5-495a-a779-7b461bb71479", "indicator--ea03663f-9607-45c2-b369-3b1d1899700a", "indicator--e52a1565-1f77-4dd9-a1be-a25480695661", "indicator--9b4cc972-b5f1-4765-9c8e-4603b7220894", "indicator--d31bb486-11fc-4a5b-9744-6d293e7d3057", "indicator--beb43c3e-1399-44ac-8159-93e70225d951", "indicator--b253a1b5-3602-40a5-a255-dbb87c464847", "indicator--9c2d8a5d-c919-4d10-b4e2-92c1ad215898", "indicator--dcf16817-1a09-491d-9d23-4bc7cbc35052", "indicator--69150834-1c2c-43d4-9f2b-bfbeb8855b09", "indicator--0e91cbed-f237-4d11-8124-ec3b727aa493", "indicator--73bc3859-6dba-4729-9214-b376630fa427", "indicator--7c34958f-6d4c-46f3-8bae-db91a6eb63e8", "indicator--9932338d-f29d-4982-affb-5d3bdcead82e", "indicator--149c2b21-70ae-41f5-bbb4-601d294c69bb", "indicator--b3320843-fc45-4723-b9fc-766bb3e57938", "indicator--51f33e68-03ec-4601-8250-b606931e5e47", "indicator--7024a9a2-4ae7-4d6c-a359-259517bbab48", "indicator--428fe827-9344-4764-81e0-b95b54ed21d6", "indicator--be4cfdd4-d46e-4811-a407-db647f8349ea", "indicator--0ef2878f-dce7-4f28-8f46-e7f25744e48e", "indicator--bc2d7a5c-35dd-4b6a-9ed3-11ac662d337d", "indicator--617ecfce-02df-43ed-b073-e03e4ac83a26", "indicator--ec69e572-f3b8-4195-b583-74c42bc510cd", "indicator--f3dfea2b-c1a9-4d05-8ad7-ce64027d4e1e", "indicator--f788c0be-9847-4fcf-8d71-bb3e71577cdd", "indicator--b5851dd3-4fb7-4eb7-88f6-220c7b3c6ab8", "indicator--2efe4937-2409-41a2-af6e-1686d208607d", "indicator--582e7289-819e-48d4-8b46-54dc485a36b0", "indicator--f6a62e25-07f4-4ee7-b6ad-b2e8f18b591d", "indicator--46a83ee7-1282-49c7-b5b0-e37131335c3c", "indicator--c57db696-894c-4090-84b7-385ab281baab", "indicator--d7c2aaf7-fb7e-4b25-b222-016d7fa383b4", "indicator--93fd7008-4c85-40ad-8e7a-ea6b9de9b51f", "indicator--2f56681c-e2ab-4c4e-a6bd-db9b826eb658", "indicator--decbaab7-2206-4622-b824-0d1261b45e36", "indicator--2be62588-b18d-4ab8-ac57-9853ae3e3fa7", "indicator--ee1b892e-839c-4844-b4d8-4bf4d09d48a1", "indicator--67fe7e68-1329-481b-be2c-9f699468bf5a", "indicator--dfa3abd1-7609-4ce9-9d5e-5df0bf4bb864", "indicator--0b4b34e5-49df-456d-bd52-e0fd766a0927", "indicator--f9984f4b-f714-4d74-803c-7e6b3f0e4255", "indicator--0e90eacd-1cc3-4e33-8690-0ec76feac845", "indicator--7ac8d8ce-84f8-48ad-b974-e5b76e3c6b97", "indicator--7e870825-474a-4bdc-983e-f1483f07945e", "indicator--c571d43a-f680-44d0-9e79-68cd71bf2acb", "indicator--57223780-3ad9-4cb4-8bc0-a89f56d1d0db", "indicator--e949176c-b363-419d-9bdf-b2417b9cba45", "indicator--8aca7a27-0a78-4a91-9bda-5d07d962bb4d", "indicator--9f01052b-9ff5-47ab-a9a6-0dd8cb8ba1ad", "indicator--d3495c08-1b7f-4c8b-8ff3-c12c4eb1cc5e", "indicator--9de1375a-26b5-4bc1-9178-b9116e5fe0a4", "indicator--d5a923d1-c5f5-4843-9f7f-fe9e49555969", "indicator--62b63295-a3c7-4308-ae57-728c43712e2f", "indicator--78af6f8d-8543-48b2-a093-9261e51c6e16", "indicator--1f947b17-a1fe-4254-afe9-8146671866f4", "indicator--0dec3ee0-9edb-4ee7-8be7-524841141e6b", "indicator--cfd509b4-dd53-47e0-970c-5a938ea23f8d", "indicator--9895d767-2aed-49d2-b0c6-4fa9d7d4099e", "indicator--90f87f72-a16d-42ef-88ae-1b11e254337b", "indicator--e2ec76f9-3025-4bf1-a0e4-fa95a8a6f62b", "indicator--ac33b03d-3de5-4115-a599-40e79913d690", "indicator--55194ada-5db1-4cb4-91e5-6ff2441c611a", "indicator--98658a4d-9ee2-4289-908b-c76e8f8edb67", "indicator--dea5d149-0d04-4f7d-82f0-80eb394c42c7", "indicator--88446d0e-0e07-4d48-a5a6-80c6fc4df80b", "indicator--68763684-765f-4bea-bf0f-7b6772cb8006", "indicator--abe949be-e8d0-4a8a-b307-96fa835c6295", "indicator--d2f9dbc1-8cea-442d-857f-a0a1a682852d", "indicator--f31cdd54-020c-43d9-af40-8f0895900e84", "indicator--097867b7-44d2-4e70-9bbc-06e56b1b77d4", "indicator--e3547774-485e-4064-8c85-bae83019132f", "indicator--a171f0db-4f43-4cc2-9031-5fc761158a94", "indicator--059c9a0f-7173-40f0-836f-dea4ca05f47f", "indicator--ad71affe-a99b-4585-83ce-73a0d8f5c4c8", "indicator--f423f4a0-ce7d-4193-8d81-12a7f5c2a407", "indicator--79be022c-53fd-4646-9820-b89400c7d99c", "indicator--796da6f4-92d0-4001-95eb-f517539fb7b2", "indicator--5292331b-5c0b-485c-b43d-8dcc566f0750", "indicator--56fa9120-10eb-4cfc-8dd3-7c3b6526a6ef", "indicator--0e4c45d9-e426-4102-88c2-cbaa16d47971", "indicator--7af9a1e0-26bf-4b15-802f-b3c4196f0972", "indicator--6fbedb36-524b-4b1b-9d12-d5a48becc016", "indicator--8b8bc36c-2e8c-437b-a99b-42f4e65af08c", "indicator--528494d8-c1d2-44c3-9257-a0db6172f100", "indicator--f9594298-a818-4139-b49d-e9919185c5c3", "indicator--db18f076-bb5b-4504-874a-47ba76dd9bf5", "indicator--c3555fb2-177e-4b80-8ae9-75c8201fe332", "indicator--a6b19445-606d-4be8-8b65-8e9136c6ccb6", "indicator--bd41856b-35d7-41fa-bb33-a5d580d9b1c5", "indicator--1b313357-2093-40a8-ac52-d7e7b76ecf3d", "indicator--031143b8-99e2-4d12-8b0c-625538d45de7", "indicator--5b2dcfb6-284e-4799-b3bd-8528f8b5622c", "indicator--79ab7edc-c082-4eac-9c25-a1a3bb78502c", "indicator--550ee004-cab8-4a49-93ce-9df5657dbbb8", "indicator--d6cb664c-8d69-4743-bebe-34605327bdb0", "indicator--c7b66fa8-f7b0-4ab9-8983-ab7d82394f55", "indicator--d0369943-c3cc-4c05-8121-b70b8b5e885c", "indicator--cd46c2c4-166c-461b-9142-8050a17c6aef", "indicator--bc98cdf1-769b-41b7-be9e-526a3ad49d05", "indicator--c61a3fa2-8591-4942-b924-80f0acc09107", "indicator--fa7aa70a-e4c5-4b74-bab4-fe53c96c4c6e", "indicator--dd84310d-6a3a-41ad-b33f-07140f4d8280", "indicator--2c0585a4-b60c-43c0-ab18-0e2cbc4cd85d", "indicator--75d65c16-3340-4c5b-8991-ea35e4cdb870", "indicator--3b081992-7054-4527-b650-85ff0ebcb29d", "indicator--47f3b614-2163-45cb-a3ad-004869c4cf16", "indicator--0a54e7a9-04a8-477a-a30e-6ac01b602a59", "indicator--306a8b90-401c-47e0-b52b-10d516b49c61", "indicator--8b699a21-3905-4818-8715-594e9f84fd9a", "indicator--4123a26d-49bd-4cbf-a037-76da8f407735", "indicator--eb1a589b-5918-455a-a1ae-f5fff8380734", "indicator--2562fad6-2201-443c-bfcb-c5d4d2728dd2", "indicator--2eb82504-60f2-4479-ac6e-c87ce80b39dc", "indicator--e99a81dd-700a-43df-b7e1-7ad5fbf441ed", "indicator--4f6e429f-86e0-473c-8cb7-55e601b88959", "indicator--323fe284-62ff-46eb-b108-750a9147a1f2", "indicator--dfcacad2-246b-40b8-a241-ce6483112d0f", "indicator--51e233c8-3f6a-4e13-90b1-dd2a71af3bbf", "indicator--b9fcd3b4-b15b-4347-94ec-beb6ce4376dc", "indicator--e633c93a-7e0f-46ba-a49d-50dee64c9a37", "indicator--5792d9b6-3b69-44c4-a2b1-4cfb66554ebd", "indicator--3af37c0e-7360-445f-9193-e2bd2d120983", "indicator--0072c3b4-e93e-4029-9088-ae67b2385338", "indicator--89a4be97-a1b5-4198-853f-4f5a2d9075ae", "indicator--f7b3e3a2-8801-4e06-80d3-976cc4b734a4", "indicator--7efff852-9597-4032-86f6-3dd9653944d7", "indicator--74243d1f-a227-44a4-b5b9-2a69474f7cda", "indicator--dffdbe3b-fbde-4f2a-b3df-71cf533d2504", "indicator--7ff3dd38-5042-4be3-a46b-81b793e2fe10", "indicator--5db17786-38e3-4e60-af7e-e7715cbb7a20", "indicator--e5d491cf-4275-459b-a3ff-417ab2326eab", "indicator--290a9da5-33b9-4710-8ad6-69df0fd164b6", "indicator--b8f1fea3-d539-4df4-8802-33320bb73686", "indicator--4b3e6827-f0d9-4a58-8416-d0bcb8ccb48b", "indicator--51ee463f-ddba-4a35-b0f1-0eaa2c963b44", "indicator--6e63a7f5-f243-4bec-acf2-f72539778702", "indicator--7a9ef134-1b54-4641-87f3-402769b6cc43", "indicator--bcd2b836-ee4f-4428-9691-0d78686b40cb", "indicator--47af05f3-0b4f-4cb3-98e1-496517f8202a", "indicator--4a3a0fd1-e259-4839-9c63-fcfc509eb3b4", "indicator--2722f3b1-68a4-42df-819a-d41b776feb6f", "indicator--aeee5b1a-c914-4a52-9b21-21730701766d", "indicator--19fd703f-e644-4507-8811-dc35ba0a4924", "indicator--6369b1c9-e64d-4014-b583-61ad65122ba4", "indicator--0e1a672f-7e74-4093-bd78-3ad50e13ada3", "indicator--bc950f61-1050-485d-8343-4d07ad434e6f", "indicator--c56331aa-2001-4a32-a9c4-19ee7a30db9f", "indicator--071f4665-24f6-47e4-8547-79729955fc01", "indicator--74879013-5c58-43db-beed-c9634cf67247", "indicator--e397898f-4212-441e-9a7f-67b071566267", "indicator--70cd6b9b-c51e-4fcb-b3a2-fa3a3e29b14e", "indicator--3af10141-19f8-4bf7-bcd0-cdecdb5531f9", "indicator--694d3b29-03b7-45ea-b1dc-114b1073c347", "indicator--69d31836-02ff-4782-b26d-4aa296094599", "indicator--b08e7cdc-83ab-4fa3-919e-9300d0df3595", "indicator--b20190bb-7e25-4ac0-bb12-719c4320d6dd", "indicator--a7c82c3f-5f7d-45e0-a098-719ee913acc4", "indicator--536d1ecf-a927-4e00-8d86-f81987f05458", "indicator--6e927af7-5817-4a4f-94a5-3d7fbea93c9c", "indicator--f00f3e45-ae1d-4da8-b0b9-000c609e11b6", "indicator--92bbab21-beea-414b-8406-6e3e7cd97338", "indicator--faff1390-c24c-4488-a371-148e1ebca077", "indicator--e232b595-4a3a-4d70-ad9a-b48183d1b506", "indicator--699c0013-3e7d-467d-845c-4e3fe1e3f9d7", "indicator--58a4fb49-091d-4a86-b469-bd1f837551b0", "indicator--62c3518e-bb00-491a-8eab-d33895ce2df7", "indicator--0eb003a6-749a-40fa-b653-aa74e3c0b6c3", "indicator--124318ff-e2bf-40f4-acf8-f05b77e0de25", "indicator--ec4c69eb-57b1-4add-a9c1-9f2a36c17ee5", "indicator--fcce91ea-219c-49c2-bfe8-e008fc5a6c42", "indicator--92feddf5-c37e-4854-9b26-37499e5a3e78", "indicator--68629e67-d9e4-4050-8a8b-6f281ab4766e", "indicator--9c1a5a38-4bec-476b-8f53-792ab9c6152f", "indicator--47c91211-b4cb-40dc-ba38-412d66e5f089", "indicator--4f7be1d7-7638-426a-9856-19d4c19f1d42", "indicator--2d760c5b-5667-4923-b90c-b950af4a8f3b", "indicator--13548624-e1ca-4ebc-a87e-55ba8080d6d2", "indicator--d9571542-baf5-4dc9-a9ec-53d11b6b7b76", "indicator--e7b6e73b-0885-4a80-b983-e9033a5974a3", "indicator--228bd807-54d7-4a4f-bfe6-db0af480bcdc", "indicator--df7a7079-1ebb-40ec-bf98-765cc71be798", "indicator--34329c65-570a-4517-b5b6-19f8c03e222d", "indicator--d0ad4493-70d2-4e56-863a-8923b359e7a4", "indicator--20b6df79-eaf0-4332-b561-f9c77a7875a3", "indicator--64d85e06-a259-49cd-9f6a-d0798cd7b5e2", "indicator--ebd148fc-0d17-41b1-b54c-62a2b4b11c68", "indicator--42024fb4-ff75-46cc-8719-46bc502c2bac", "indicator--f08f20e3-8870-433e-8c94-f0d8e8530007", "indicator--db672f65-5b57-49d0-91b3-fa4293c883bc", "indicator--107f5f81-18b8-4b4c-9199-996b871d11f9", "indicator--4f9409c2-6ebc-46d9-9364-11b827a7a2f6", "indicator--32384b18-3ccd-48b6-aeb8-0797e85e22f9", "indicator--1f043401-74aa-4b59-bacc-951a1fb1e4da", "indicator--4eedde76-e6f4-4125-ade0-6655345cb350", "indicator--1baa4df9-9d00-4f2a-b0b6-17796fc9f77a", "indicator--2216ceff-3a4b-4dca-b904-4ea69bad8836", "indicator--fa3c9acd-9fe3-445e-a443-22528a2ea5e6", "indicator--262636dd-e300-4cc0-95bd-6b00882b4beb", "indicator--e23f4a90-89ea-4ad5-8791-ead41c60d6a6", "indicator--dba5409e-4344-43ec-9941-ebba1b3c4423", "indicator--cf6fa4a6-2181-4093-96ca-d3baedb94b90", "indicator--de75b9d7-82b5-438d-816b-d1754b315786", "indicator--2d08217c-c516-47b9-a1aa-27774672d6e9", "indicator--161938c8-3537-4726-ba8a-497b45ce9dd6", "indicator--cba6e3b6-1476-4c48-98aa-f1182a09e9db", "indicator--c8fe790b-4fd8-40e6-bdb7-a81e7cc45c23", "indicator--5bffc104-9152-426b-91ed-7d5d947f770a", "indicator--4e6af028-197d-47a3-aa9c-b3b139926603", "indicator--ca7c1002-a13c-45d8-9eb5-d7f90297b5c5", "indicator--974bddd1-9a20-4226-9cd8-2cba4f82dfe6", "indicator--e09c5ac6-b253-4dc1-967e-e0b7707159ef", "indicator--4f5e940c-a6ad-48e9-af74-8141a6ee6588", "indicator--7e7f1634-aff4-406b-96f0-a3430828625a", "indicator--57a54ae1-89c0-4c5c-86c8-b2c5fbf71ea3", "indicator--1d0db233-df61-4ed2-8e0b-b7ebd1b4c558", "indicator--e77b3b1a-0964-4eab-89ef-128e33185b0a", "indicator--2f25d611-cb47-48a2-a933-5812681455ce", "indicator--b7196a92-18d3-4902-ae2e-1b63305e8bcc", "indicator--c379a99d-23e3-4d20-a373-8f94d6316ff6", "indicator--c75753de-1683-462a-ab26-6c41892b2b60", "indicator--43f7df1e-ad83-41f7-81fc-65155dc95661", "indicator--d87b1eaa-980a-4163-a8d0-8f4b56befe1c", "indicator--cf31e632-1eb7-4e4c-95af-4c377434b330", "indicator--f1fd0717-65ba-4cd6-aced-bebead5d305c", "indicator--27ba9e9f-21ca-47c0-9915-2756fe8d551f", "indicator--399086d0-00f7-499c-8ed9-f0a790453a63", "indicator--06dbef92-2f3d-4c20-99e3-a182d0e5ba94", "indicator--c31c5269-69af-4888-8c1a-ab31813dc393", "indicator--827492a5-0d38-47c0-88b1-e859ce9fbaac", "indicator--ea35cff0-d2e4-4920-9c31-7f017eb350a1", "indicator--4e7d69ba-49f2-416e-a275-f37896332bcf", "indicator--ce0b4351-4964-418f-be17-279409a85d95", "indicator--05dec809-770d-40b9-8993-ec2eb5d71087", "indicator--27d69e88-c1ca-44cd-9691-043d858e0438", "indicator--65369cbe-4212-414d-ab18-c0481901ef6d", "indicator--4f77f285-6d5a-471e-b0ad-b095758d5c3c", "indicator--d612ddef-c048-4e3a-b7b8-3326473fade8", "indicator--d01d7bac-ec73-4543-9f8e-805afdeb156e", "indicator--fe59fc09-300e-4598-862f-46a7f0730258", "indicator--643e31aa-a863-4795-8cca-a818f10a4883", "indicator--ce600f6f-cc83-4932-a50c-c753d30215db", "indicator--11e20e7f-36a5-4849-ad15-aa7b482f4e70", "indicator--c9657264-d03f-42a6-bf1e-b498416af976", "indicator--b981a01a-c552-4638-8af5-12d55deb2741", "indicator--8bde3d4b-0c04-440a-a2c4-841cb693d77d", "indicator--38e3a884-c691-4155-af7a-02a5b07f4ea5", "indicator--1c58d23c-d9ef-4d99-a816-8789032fde1c", "indicator--3c4f4dca-6c57-4f02-a3ba-49a6501e7a88", "indicator--d18aea01-cce4-4e7e-a785-848a4a42778c", "indicator--3d0b7509-0666-4475-8e17-07978da602bd", "indicator--ddf06afd-a485-49d5-a7d5-258b5c5e8285", "indicator--0cb7ce32-9009-42bd-abc2-67832e4cf6ed", "indicator--bea7c7db-72f5-43bb-8b86-782cc5cfdcf7", "indicator--0667ca54-f3cc-4c9d-8d3a-1343b35b8fd5", "indicator--f2d3e92e-3798-4ced-9468-24ea428ca43f", "indicator--58e822c4-a4dc-44e7-a073-c672dbf5d82c", "indicator--96174902-307f-49e6-a924-23ad706e3f19", "indicator--7699cee8-e1a6-4c4f-aab3-e79002de1fa6", "indicator--26d32c5d-a50d-4e68-869b-197b7645c75a", "indicator--6169fe3b-25e7-4aea-8563-da9112fd1b67", "indicator--ad066d0e-e672-4ea7-a386-fd8346dd2492", "indicator--e55ba2f4-c5e3-4ea0-9026-952c1cb76df4", "indicator--50090d60-d100-4eb6-94f2-716b264d60c0", "indicator--072d9724-2a21-4977-8bef-a6fcff16d8cd", "indicator--2c445d1f-267e-457a-91c5-f5c7b2ff3ba5", "indicator--5d749b36-32e2-424a-9fc7-10f6c9a2106d", "indicator--83712f27-15bc-44e4-82a8-f8303c39f49e", "indicator--0be59706-ab5a-4100-a685-0fec635aaed3", "indicator--12bd1642-2e53-49a1-8ec7-a9e7cabf0874", "indicator--b550626f-5b6e-4d6b-93fe-ca884f70b5a0", "indicator--42caf092-11d9-498f-8671-6cea8aa5c8e0", "indicator--3ad16c41-2125-4a3c-bfba-b7f43980f8dd", "indicator--65883e51-4415-42dc-8515-8d336aacfd24", "indicator--5f19dc27-57b6-42f0-adef-ccf5dbd594c4", "indicator--c5cbe35e-fcf7-4502-9147-2c3ced4d30d0", "relationship--4c4b1c37-5a50-4104-9dca-724b8d729bbb", "indicator--f78e9913-b8a6-4942-80f8-c80f8d400c00", "indicator--9f2c4265-9651-48ec-8385-1273a33ced27", "indicator--e37388f1-a5b0-436a-b193-966e557a93a5", "indicator--9253792e-484a-4e5e-ab1c-1b4fa3dce6b4", "indicator--ae21ba54-ff75-46ba-90be-5be0d9298417", "indicator--b0a760df-068d-4fae-b682-c46f71966372", "indicator--911461af-a1bf-4cff-88cc-047c7fff36f4", "indicator--d9ce9ed2-73d4-4f8e-9fd0-f1bb8b168dc4", "indicator--69ba2d2d-2d33-4683-9da9-300ea8f3fc87", "indicator--30a06868-a1a8-48c6-9b52-dc49a17506fc", "indicator--5da2c3e9-7e7f-42f8-b8ca-a95489d06c14", "indicator--98eb42fb-24ee-4168-93b0-fb83606fb38f", "indicator--7fa61c76-5591-4443-bbc3-a44d171fa185", "indicator--6adc1cba-75c8-4b5d-9642-f8154e63f878", "indicator--ec727823-91fb-4c0a-b894-b2699a93eb74", "relationship--d7caced1-aefb-44c5-b9ef-1bd9b1751744", "relationship--4a98f46c-7643-4079-a904-69471d20d98f", "indicator--e9691bf4-cbb1-47a4-9036-ecab9ca3fbc5", "indicator--b0fdd36b-69be-4241-b434-b0b4bd743bc9", "indicator--1ea8b4d9-6d2d-4406-bac6-202e4041a9ec", "indicator--f4114e5b-e7a7-47df-8c57-40b15c80ba1f", "indicator--4df667fa-e036-4f0a-9d8e-3c5010c2a043", "indicator--ac713f3c-dafd-4251-9dbe-1c8bc8e43f01", "indicator--29b299ca-23f1-44e8-912e-f81e6d00d344", "indicator--fce9ea19-75fe-4b23-9fe5-7f269ab53667", "indicator--72b10281-a043-4aa3-b2ad-2d4a15a3a62d", "indicator--ce109595-4b35-41d6-ac96-fcb4af4f3fc4", "indicator--14bb5819-0f5c-4e1f-8dc9-ae5731025c11", "indicator--06a7377d-4d89-4a87-8f17-2b1a7b550ef2", "indicator--37222493-3c33-4986-adf5-b2ff3a528397", "indicator--12d440a3-1930-43d5-b46c-18a8875c09f8", "indicator--0fba3ad6-28fa-465a-8ae4-544bfd73bb94", "indicator--15e27e52-dc9a-4b55-996a-ec2dfabaf7fe", "indicator--146a85eb-1ce7-4215-a6ea-5ff41be629b9", "indicator--157b6909-354f-44b1-be38-20535f5c2fbc", "indicator--cf563cf5-b878-4a0f-a20d-2ffcf27a4f25", "indicator--54dfb8ac-a1a9-41fb-b6e7-51f9e7864ac2", "indicator--bf016bf3-ed6d-4096-a65c-761dd3b74a25", "indicator--8957dc56-c999-42be-ba39-24584c418ff0", "indicator--f168b1c8-dea1-48b3-b05b-468b47f004b3", "indicator--7484b53b-a685-4d61-862f-ea8974bd756c", "indicator--9e0a08f8-dea8-469f-bb11-d21a6ffacb6f", "indicator--ff2d2309-4319-412a-837b-ade47fcd083d", "indicator--7a641098-9558-43ad-aa4f-3af1edc6fb0d", "indicator--0d3b09f3-b9fb-452b-a916-61f92ad878f6", "indicator--28d59656-fe0d-4e0c-a44a-7f7100bac67a", "indicator--00a459c8-348f-4ef4-829f-4a544b576f77", "indicator--1271b755-bec4-4862-80bc-b19af287ae05", "indicator--bfb38260-e422-4157-ba05-fcfdb2f78482", "indicator--ba60492a-522f-4134-aeda-0ce980a11f7c", "indicator--c9d4325b-b914-46b3-966b-13d79fe11705", "indicator--d8f7d616-57b8-409d-81e6-853ed1a80225", "indicator--42ba1b45-0556-483f-9349-63d570558777", "indicator--ed4275f0-0749-4b39-a28c-5299eba7b443", "indicator--83a293ae-0672-4e75-a8be-77114fb034ea", "indicator--4e2c6eef-3bc7-4996-976c-a4da29f1088e", "indicator--0d8b617a-e983-43d5-88b1-f1153350e32c", "indicator--ce533900-7e8e-4173-b273-3796bb4bc184", "indicator--c6b7d46b-ca00-4f9b-bc0d-a17df1c1d6c0", "indicator--9023ebfa-96eb-471c-93d9-ea465f485442", "indicator--1b7c5bba-1f2a-4158-9ca0-5734e92a67c2", "indicator--8490ff59-4ade-4d40-b91c-2dfe3206df05", "indicator--5bc9b395-0ce8-4a05-96bc-012c5a23ce9c", "indicator--386911e5-6ca5-41d9-ad69-687e93e50d42", "indicator--a88d4d97-3abe-4fb7-9358-13a57737b7be", "indicator--9f77fcd2-b2c8-4944-952d-7031845e0d52", "indicator--d89f1a47-94ab-45d0-ab0e-61326c34a5f3", "indicator--34a63e88-702b-43fb-b6da-f02d99dae0a5", "indicator--503e8274-08ca-4a1e-b1e2-13a76d59a4d4", "indicator--2e96ba6f-2b21-4d41-b027-654a2ee17335", "indicator--ba4c0844-9fdb-411c-95ca-ad1f0c700c10", "indicator--e66af864-9dbf-49c8-a7c2-b9d9dad497b8", "indicator--63e8f9aa-a8ca-4e20-a04d-3b943c55802f", "indicator--19a20593-8e14-4386-8b11-347ef96dc38e", "indicator--7204a933-33c6-45f1-b8e2-216bd8e4e08a", "indicator--38003ec4-c796-41a2-8b05-b315ec83d9dd", "indicator--1159d7f9-6d96-4485-8b9a-b529986736a2", "indicator--a8cf8bfb-1992-4983-add5-b95e8f2ac8d5", "indicator--6c36c112-e1a4-4cf0-b1b0-613e95a88d71", "indicator--2592d30e-55fb-414d-8bf2-ea9da92feec1", "indicator--e79ce013-061d-4e98-b64c-5e73dff0ee4b", "indicator--4871ed04-e776-4a16-a348-788505465d39", "indicator--de424c0b-bb3a-49a7-98a9-cfe85ac78ddf", "indicator--b7bb3069-d93c-4e0e-8565-a9098ecb2d7c", "indicator--284f506c-6323-4abd-bf40-048a85424206", "indicator--9f1de636-f210-46f0-943f-05b158a1b6e9", "indicator--abf2c71d-2baf-4b82-952d-3d01216ff379", "indicator--0b560267-4f16-46cb-a736-1241fe70cf6f", "indicator--d36fb4d3-5f3f-49ea-ba1f-3437c4c7914c", "indicator--af01eca9-bc67-431e-a39d-5e99d1c25e5e", "indicator--97cfb427-095a-4e5f-8843-be6feeda2e65", "indicator--7ae5a80e-2303-432f-a95e-ca3469de5474", "indicator--1b06abcf-e353-43b3-b982-91229412195d", "indicator--b9ad845b-e201-4931-9125-66799bb91aa2", "indicator--a981aa45-c592-49e4-bcf0-ec2d402f83f0", "indicator--eaadea83-c97b-404a-b21c-d4eae04cd03c", "indicator--4c7ed6c3-9025-4af6-b16b-3a1b8e429236", "indicator--c31007fe-d579-4d6a-a539-1eb257d844ae", "indicator--c4322d98-9c6d-4309-b650-acccb2eb7b71", "indicator--79ac5e5a-d883-4def-b13c-a61a9f13bc7c", "indicator--55ddbb58-20a6-47ee-a2f2-96c3df5a2ed9", "indicator--8667216a-a3fb-418c-aa67-0872f46da90d", "indicator--1ab993b3-8f77-43db-848f-37691debd5ce", "indicator--f1ce1699-0dee-4f2f-90e8-0c174c827b5f", "indicator--274d2f9f-d394-483d-8340-149e30b15a28", "indicator--29644e32-939f-47d0-8133-989490d8a3b9", "indicator--bd462071-9935-469f-ac03-814bed2d6be1", "indicator--011e74cd-78ea-4b95-9a2f-2a8039e1e233", "indicator--2aac5671-c463-45eb-975b-893c9b75d4ed", "indicator--5c5f8d7c-6e83-4a5e-b122-8349c7139ce9", "indicator--d46cd209-c575-48d7-9bd0-25b2a47832a6", "indicator--ab1a465a-c3b5-4005-9cf6-08c04992fa24", "indicator--ca31a4de-5e82-4551-8e56-0c77ee6d7d33", "indicator--76e55240-f7a6-440e-9218-20c6d699ec32", "indicator--e2f7ea02-78ee-490a-8992-b07516513e83", "indicator--16c5e3f7-43c6-40b8-8815-90202d68d998", "indicator--a9f091e7-915a-4aba-99b2-076bd6b3e25a", "indicator--483d69e7-34f8-4eb9-8d9c-0224d66b08cd", "indicator--d06735c4-4f7c-4804-b4d5-7dfff49b16b6", "indicator--34127a9f-42cf-4297-8ca1-85ea8beb223e", "indicator--546cd612-c5d7-4e87-921f-58cd2cd5ea22", "indicator--dc5234fd-4263-43c1-a43c-16675860bcc4", "indicator--c4f1d45a-9dba-4022-a496-706ec7148909", "indicator--5fe2d2e7-91fd-4cab-ade0-5937ae250f2a", "indicator--9f9f51b3-4bb3-4315-8bd7-9b646527d9ba", "indicator--cdf4c206-3145-467d-93ef-a8691319d975", "indicator--7bc1ffed-7493-4d98-b6b5-eaa0eb5f69d9", "indicator--0be5f9c3-9ba3-4d6e-8553-73ff4208c6e1", "indicator--35939941-252b-4aae-aa2e-745620a2da08", "indicator--0de5ab20-aa13-433a-840d-9562cf6f04c3", "indicator--7e115da7-cee9-4a2f-9b97-d0051a65afd2", "indicator--4a12e417-7203-4957-9aac-358a2902e27c", "indicator--cecafc84-e7df-446c-8b9c-e179d86ee8f8", "indicator--34f56d8e-eb98-4ca0-ac3a-a879a2f05d93", "indicator--c64c25dc-4d71-45b7-b805-2e021d487413", "indicator--ee41e7d8-4490-4186-a0e8-05261dce6ca5", "indicator--f2f92b17-ed26-4415-b5c8-95bdab76d959", "indicator--fe48547f-997e-46e5-9e23-7c64eea3f89f", "indicator--4415fa45-48a4-407a-a4f7-f3235fccdf08", "indicator--3bd57432-545c-4e57-b44e-000b615c2268", "indicator--f47e1ef1-b507-4076-9a0c-90b2c1994a14", "indicator--8e1edcce-4c58-4ff9-9639-ff75df9d1ca2", "indicator--b9bf47c1-d7f8-4479-81a2-981c4444f9b3", "indicator--ad5beb56-5728-41cc-9ba5-d2a2171ee8a6", "indicator--fcf53d00-c6b3-4f9b-90af-766d6e5b3fbb", "indicator--c9f4c36f-231b-4c56-b35c-94c65c9ff44d", "indicator--8ca7ca6b-5d14-47a3-a771-131e461c586e", "indicator--8d308bfe-6036-4b36-88f9-3748cf032fa9", "indicator--83e680ca-d7da-4e2a-8c0a-f18da68e1f9d", "indicator--0bfbbb4f-878f-437f-9e3c-c4d3f2a53b48", "indicator--cc261441-4257-483e-8b6b-ac0ce2db65d0", "indicator--d308749c-7c6c-42cf-94ae-f289497ad09e", "indicator--bff60b5c-2377-4438-b396-b223a127c118", "indicator--eeb58d58-e394-4284-9678-b05c54e47214", "indicator--7e5c86c2-c69d-4fad-aa7f-e1d090d94981", "indicator--ac6f1f80-2aa7-4826-ba42-40b30af64fb0", "indicator--d56fccb3-6776-46ae-a494-5c5b6be27885", "indicator--4163171e-5987-4b71-85c9-cab083903d37", "indicator--e4dd6f9a-0752-4b43-8c1a-9f7c549b0684", "indicator--9d9fd815-e653-49c9-9170-50511b973efb", "indicator--fdc4841d-e4fd-49c0-9af4-2610082d5802", "indicator--49abe622-dd37-4623-b238-2d00f708386e", "indicator--65bdb35e-1f63-413c-a7b1-a9cb76b4f682", "indicator--1d1e49c1-06db-4f2a-be5a-ea22c2773e2a", "indicator--2a77cc8f-e1d3-4655-a169-348b54cd07a4", "indicator--81161977-750e-4b57-8ce7-60014a7b54bd", "indicator--4dc11d5b-7c91-4c4a-935f-aeff3bf84a14", "indicator--c5f8ea21-2baf-4bb0-8c23-efde70d772cd", "indicator--a57c7112-dc0f-431b-b077-d490aa5833b1", "indicator--c487e90b-b143-4aec-85e1-542d07ab4422", "indicator--891423d4-35ac-47d4-bd3b-3c18847496d6", "indicator--19ef433f-56d3-4a27-a436-6c770987f6f9", "indicator--b83b2312-dc12-4e0e-91a5-e4e3453837cb", "indicator--70f7c45c-41d9-4f4d-a50a-85fcea543d22", "indicator--134c0ec0-5e52-4163-a511-befcbbbc5871", "indicator--deee27cf-d558-4876-a6c5-59bb385b59e9", "indicator--75eeb6b5-28bf-447f-ac66-845384bcca32", "indicator--c5fd1531-3e0f-45d2-88d4-a60e71f814a9", "indicator--8ddf1567-b7f4-4da4-a17f-ae26fc146e82", "indicator--103c91e7-dd88-4217-bbd6-3008f2987b0f", "indicator--62caa48e-601d-4b72-922d-a8d748f62a10", "indicator--f4888dd5-74f3-46a7-9d0e-b2f06daf78a4", "indicator--7b33b84f-e2f2-46ba-abcb-73c34fd21b3b", "indicator--4959a1cf-bf36-4a7a-b627-a2339976e9b7", "indicator--d52b72f1-48c8-4128-8b2c-f02fdcba5531", "indicator--a1e1aa4f-4d14-499e-8d80-f28c6989e6f6", "indicator--4bf87366-3974-4361-ab64-2fbaec2e89c6", "indicator--1441227f-668a-45c0-a720-e5267decf46d", "indicator--428d0b35-94db-4a0c-806e-1c2ddbe14a88", "indicator--ce57bffb-e10d-4261-8808-e9949fb9e9a1", "indicator--e6b02154-fa43-41b0-848c-3e67b5eced8f", "indicator--8c2595e5-f31f-451f-8b0f-9f3644677f9e", "indicator--53570a57-e745-43a0-9cd5-e0331f08b60a", "indicator--0dbf4c7b-8d3b-44a1-a13d-d205cc2aeda1", "indicator--8f0936ad-29d5-442f-b545-d0ee0da21f9b", "indicator--a64b1abc-78bd-4858-81bd-9f4d25fe9129", "indicator--dc67552f-9288-493e-8950-da06acf509de", "indicator--0b5450aa-fc58-4df5-832c-43792563dbae", "indicator--8eb3b31e-9477-4716-8079-972bb63a535e", "indicator--beae6008-a32d-4913-ad56-21b31ef7b2e7", "indicator--9f4555b7-b210-45df-aa29-504ffcd244fc", "indicator--8451611c-3474-4260-8b26-82dab8a77d27", "indicator--357336fc-dd1b-45df-a2ab-6dee35990438", "indicator--40a9a60f-c5cc-4d43-aa62-1c1c001f41be", "indicator--72260aeb-c6d6-4648-b035-fe441bb844f4", "indicator--f5caae1c-9f75-4c7a-a52a-41f8f4f8fb7a", "indicator--0c616949-5021-4e2e-85f8-2804c94aecdd", "indicator--752a33af-f1e0-477c-84f7-230d4b31e599", "indicator--2caa80bf-961f-45d0-8899-573dd34a031a", "indicator--3b86257f-a723-4186-bbae-05177c2f6e43", "indicator--f4fc643c-0752-42df-add4-07be808a15af", "indicator--0696c3ed-6dc0-4bdb-a9d5-e378a2d8ef88", "indicator--9c2d43fd-6418-4dee-878e-38bc5636b8ed", "indicator--fe8ba5a0-81d4-4218-b435-654d3e4825bd", "indicator--787b2c2b-8a65-4fbe-8343-03669ee31e5a", "indicator--a51d1867-c01a-4cc8-89a8-7de52464fa23", "indicator--b3ad506b-5a67-4498-b480-4462ff9729ea", "indicator--20aaaa61-9b96-40db-bf55-652c7ba5dd3e", "indicator--36f0276f-1fca-4f22-bba7-be5affd67034", "indicator--4bdb54c6-8f85-42c2-9957-0a51604f78c9", "indicator--6648d2f4-4674-4970-affd-dc32c594642a", "indicator--7c18284a-2bb0-44b6-9650-758160907754", "indicator--816804dd-e4e5-415c-b04b-924e666be1be", "indicator--09ced798-634d-4e84-bca8-962e7e92ebb8", "indicator--de4cf4b6-3be8-426f-ae40-c4a6f38ca483", "indicator--de5dcf8d-c1fe-4f9b-b0c7-697cf8e29d3f", "indicator--18e2bff0-00c1-48dc-9ed2-0641037854fd", "indicator--60a1221b-83c4-43d4-b0c3-8e5b92c9d1d8", "indicator--4c0ce98d-ab6f-45d0-a3ac-c10f86dc239c", "indicator--0ebaec52-58bd-46d1-8981-6f21f6f4adec", "indicator--3aeedfde-5c8d-4cce-ab47-57d11c024b23", "indicator--64bf1888-2c81-4a12-bbb4-7cc013ecf05c", "indicator--bed128fd-5905-4556-9709-152dea9d2f62", "indicator--a43f6c0f-9d21-438f-822e-78ad593c555b", "indicator--edb2d944-119b-4ca4-80f8-bcd4577c5778", "indicator--7a23d752-204a-4b20-af5c-ec6ba3b0fd9c", "indicator--74d77ba7-b7ca-4661-91de-08bda3001b98", "indicator--0b2b6517-3071-46c1-ac24-becc48a2423c", "indicator--c2c93d08-4a33-4614-802a-613e14bb0e53", "indicator--7adb0221-6cdd-4cd5-a6bf-8f1f9b02f83f", "indicator--db537d40-276f-4066-95a1-5cfe70a3f91c", "indicator--bc997bec-f032-4a51-9109-fce4300a9c26", "indicator--2aa7959c-1d2d-45e6-99ae-d86cfb079a3e", "indicator--869a5ea5-44e6-4039-8e14-b59b5777cf6a", "indicator--72dbd9b2-8696-4451-943d-cf0b1b34c9bd", "indicator--afa37eff-8afb-4cf9-ab02-b0bc0a244142", "indicator--717ac9b9-deec-4829-b218-31ffb60b178a", "indicator--b7431b59-4b3e-42be-8e7d-099e9cf2d4fa", "indicator--1b304d62-bf9f-4b5c-8137-5b9ddff92f08", "indicator--0ffd558d-eed6-4320-a7a4-d2f13795064b", "indicator--3336b55e-eb3a-4710-9745-1e78912ae4c8", "indicator--a67bc83e-799b-42ec-a30f-9877bc7c56af", "indicator--090dd3e8-254c-4274-9676-29a5448fb6f6", "indicator--0903e470-e527-4f5d-84e1-f574e9cfed2c", "indicator--56bc74c7-4d95-4202-8538-ae4a41344b8c", "indicator--e8ae048a-4127-4a17-b979-734142533136", "indicator--49f53034-399e-4745-bccd-d7c245ab5d9e", "indicator--39db3d2c-6d6a-46f4-9cc8-fdae967b1435", "indicator--0af0b4b9-31d6-4908-8f90-05e522dcd032", "indicator--bb91efa1-62bb-4d8c-8e56-c587be6c1103", "indicator--98a34e62-a9e9-45e0-b282-3c953fb4f0df", "indicator--bd8f198a-4b3a-4981-9968-650443f9217e", "indicator--23aad197-3951-4086-a7e4-f6191f65c164", "indicator--04348733-458b-43b9-a79c-55add9c57130", "indicator--62e4bf66-9665-40c0-b62b-bb2f5d33a384", "indicator--508c6b5d-a78c-4d9d-abde-81d46214055d", "indicator--97d7e705-aa4a-4822-9b2a-d8943381eb1a", "indicator--d1c202be-a147-47db-97f3-79a55b36c6ba", "indicator--d687fe86-863a-4f47-a866-eb376b150604", "indicator--360aba06-1558-402e-b25f-979799fe8569", "indicator--1b0a329e-2330-4278-b71d-ddf770b958e2", "indicator--fca692f3-ae72-4300-a8a3-ce0e80eed83d", "indicator--1bca84d0-b169-4471-8a78-ceaf3dda3e6d", "indicator--8df559ed-0aab-461f-942e-2f4483df9dab", "indicator--7afe0640-6b7d-4e9e-aeff-5a22b8147b12", "indicator--8ee5770f-c428-4e37-916e-666934343ecb", "indicator--b03e2488-f984-4b86-85b3-929920c781bc", "indicator--51147a35-1a71-44f1-921b-fbf5f2715b60", "indicator--964d0db6-0e3e-42dc-b0ce-ab4ad44d595c", "indicator--eb4025e7-92df-489c-824b-d4663c36f909", "indicator--46235913-11e9-428c-8a20-ce916e215151", "indicator--7cf5d06c-18e9-4188-9bf3-83b9c428c3b4", "indicator--218653e4-96c4-4e37-9dfc-38ced93802d2", "indicator--c6f00723-73e0-40db-8e54-818c877abac1", "indicator--0dc0b1b5-88e8-455e-8932-3c09458be257", "indicator--49de70c1-b88d-4245-813f-350073445a84", "indicator--cd2ca9cc-7c33-4b8a-9d3c-2df7bc006613", "indicator--3f6a1ee5-f981-4895-b886-db95c1a5e9dd", "indicator--765fd6eb-82c8-47a4-b70e-ccd400f29c90", "indicator--d6bfdae1-3a85-4257-8b9f-9ba79b8a7e9d", "indicator--4ab2650d-a9d2-4927-b24e-d2e279affc0d", "indicator--01793e31-631d-4e3e-a02d-7199ed359515", "indicator--23b6636d-93f7-4810-965a-0408dffc3cdd", "indicator--fa709069-95c1-4a85-83fd-7583d4d7b3cf", "indicator--0b581d64-ba79-496b-874d-eefb044cebdc", "indicator--17d86018-c525-4571-979a-24f21282ba2c", "indicator--06deb7a5-1231-4516-8489-dd0517d78be8", "indicator--f1bcd7ac-0c91-434c-88d6-d547bb4ead62", "indicator--19d934f9-e47c-4546-858b-89e8ec463fe4", "indicator--3996d37e-7670-4929-9cf4-91f41e873cbe", "indicator--4adb141c-ec90-4fee-8894-2929c9f0f8cc", "indicator--52aad611-cf05-4c3f-ba4e-0c0024bdfe92", "indicator--f3bc41a3-fc0c-4c1a-abd5-5b7928f4da11", "indicator--e1791468-61c6-4941-88c1-dbd7d6395acc", "indicator--104de924-29ae-44b7-8129-716491d89286", "indicator--1e725bd7-5fba-4c0f-b0ef-bba135af16fa", "indicator--d8313044-5b9d-4664-b7d1-c9261b8cc9e5", "indicator--e5733688-18b2-40be-9516-5ad57c194851", "indicator--5e2cb044-6d5b-4510-8734-35e97b5da733", "indicator--4be49696-3891-46d3-9de4-084d395ce98c", "indicator--834d0195-5702-42e7-9046-3e3c0ffa20a7", "indicator--0bb31948-4517-4580-9f84-0ab92427ffe9", "indicator--44e6d1f5-d7e1-4e0a-b60d-5c562850fc4c", "indicator--f4ace311-daa1-4eb6-8f4e-64f4e391ab04", "indicator--5cf295de-bec2-46ac-81d4-6d0a21c4c7f1", "indicator--df1a5346-9dbe-453e-b289-61ed5105efae", "indicator--24e6ae25-5ef2-40ea-bb86-15189fcf8941", "indicator--08ffcd51-21a5-435c-9180-3e54fa1c6fd7", "indicator--f9030c48-615c-4b79-ab35-8c9de095937f", "indicator--29b0bd8c-729b-4206-a430-c2ba7f601061", "indicator--8fae5b3b-56a7-4c76-9ad9-41a995e6b646", "indicator--6e8fd3aa-5be6-4d43-a899-80d6da3d3a74", "indicator--d66fabd5-4372-4fe8-b987-75db1a430e66", "indicator--cb07c896-e78f-4ec4-85c8-9bb7d941320d", "indicator--647fdf01-d369-470c-b03a-d3169dd6cc78", "indicator--6f30aa18-4584-4042-96c5-306a7625fdbc", "indicator--683de0eb-cd57-443f-a6db-ab74aef51ecb", "indicator--822d8ec0-b72b-4fa6-976c-d1af5c406d1c", "indicator--2d5c802b-b7cf-471c-ad51-95e2c7d8b8f7", "indicator--e783299b-851f-489b-859e-e921228d8e86", "indicator--c0484023-3ae6-493e-81ef-545cd14f22c2", "indicator--21b637b1-cb20-43fc-8a99-9682e8d0f408", "indicator--99fe7c53-d2f8-483f-986d-6706d815760d", "indicator--067042a8-57e0-44f8-9511-770151396398", "indicator--af63965c-dca3-494e-a1ca-6a72a2fc9b6d", "indicator--0c295a21-06a8-4f3e-b5b8-1fb29bf653bb", "indicator--41495f7c-1445-4dec-b925-9f11e11b5f2f", "indicator--2e9002f7-51b3-4ac2-8e14-964477d969ab", "indicator--509d9127-ef04-4344-99fd-ee2f19a255cb", "indicator--f1063056-0679-46dc-87ad-fbd585806a80", "indicator--985cb4d8-00de-4bef-94fd-1ddefaae8f18", "indicator--9462bc45-7b75-4aee-ac8f-8e22b4cb1f53", "indicator--f9af6b35-aed9-4812-b8c6-2d398975a53e", "indicator--21025558-762e-49d1-b48a-f14d4e8054e2", "indicator--bd375b6d-fe88-4220-aa1d-7fbc5b451682", "indicator--c9a1dafd-b3f9-451b-809e-96a78638ef82", "indicator--8366c13f-467f-432f-a61e-b02518767ceb", "indicator--586141aa-febd-40da-b116-74fe300ef391", "indicator--f883d79d-bb63-4a08-be5a-50e24f8db8a8", "indicator--4983aa9b-b74f-4050-9c61-8eb84b11a99e", "indicator--b2a99797-65a1-4dfa-8d3f-85dbddedce87", "indicator--c3dcdee5-5fcc-4d0e-9779-e683360758fc", "indicator--ec5cbf4a-677b-464b-9b04-e59760dd0514", "indicator--9e617f6d-3cc6-4960-ad36-404f3cd11e60", "indicator--78d03678-55d8-444c-89d9-971ab3bd620d", "indicator--4584841e-8d44-4304-833a-fd0c0e458876", "indicator--7e908a81-84fb-4de2-839c-66cb01317e87", "indicator--a74db112-0e25-4134-95e7-00ba87c53a8f", "indicator--fe14c80d-97c2-491b-827e-a64e44ad8ecd", "indicator--755922a7-7cc3-4088-91c8-f7d05238d00f", "indicator--a35f1491-8ebd-4353-9f56-d6fde8038224", "indicator--a1e8aea6-a4b6-48cf-bef1-d90615a28585", "indicator--27aa89da-6340-4488-bf17-ca66174974fd", "indicator--e8536778-57d4-4b33-9930-69deef699835", "indicator--ce2b7d4c-c54f-4220-8697-ddd4c6501dab", "indicator--31f4d283-6ca9-40ae-a75c-1fd421945b69", "indicator--a3ff8a0a-bd63-426a-9300-a2e24c3c2848", "indicator--c36c6210-12c9-40ba-9387-69820014a259", "indicator--25c38ba2-04c2-4f63-a53b-e55f66bd0fb0", "indicator--521450d4-61e0-404e-9301-8a5114aa3e7b", "indicator--0ee9538f-79a3-4496-8bf7-06c0374df5f9", "indicator--96c8b3f4-d763-411f-98f1-02ff892ed086", "indicator--98b07fed-8dc5-4990-8db3-1218d9610425", "indicator--b715dda9-75f1-490b-887f-9fa174b05094", "indicator--881d0346-9794-4fed-8ded-1601e6312bc7", "indicator--fd375ed5-39c4-40e9-a5eb-29e7dd2dcf6e", "indicator--ae199237-f937-4077-a2c6-9405b06e24c3", "indicator--6384f9a6-fce1-4f0c-a9b8-fd43f6fb6601", "indicator--a00ceee2-68e6-4713-8c35-ab7593591182", "indicator--15370566-7505-417b-8e6e-d9726c7a7e59", "indicator--9b5eded7-9674-4cbe-a754-39212dcbb943", "indicator--f9f4e751-4306-4ab8-bafc-af18b6a9ad24", "indicator--2542f106-186c-471b-808a-85187901677e", "indicator--447359b1-e8da-4cfe-82c0-258b472df71f", "indicator--05791b4e-c47c-41da-9461-6e8166b30f2e", "indicator--1b40c991-e848-4636-8fe4-ab363a276caf", "indicator--5dbe0f50-a402-4a87-aa3d-de57b3573515", "indicator--ac1a554a-423d-493b-aad2-6881ea2ca44c", "indicator--5f0fb5b5-2eda-44ac-8423-96d493513933", "indicator--28a12184-eac5-428b-9494-3e40e43e2fc8", "indicator--817f4af3-9f7b-4e31-aee5-865e873bd923", "indicator--76f9897e-d5bf-4c60-8e87-e11b85f966e9", "indicator--287ce6c7-bdae-4ee3-adfc-bc88e95e0c19", "indicator--1a7f5674-fbe7-4f91-a2eb-c9660ab111e2", "indicator--cb185d3c-c51d-4272-b89f-708369b355e0", "indicator--bb8807c8-dedb-42f4-85dc-2fe19eb4728c", "indicator--9d8058e8-f275-49ff-a44a-a038c2b02d22", "indicator--b42dae2c-8c10-4d84-8803-9e534e14557d", "indicator--999d928f-f003-44a4-82d7-381560cb0cc2", "indicator--0c689ee7-6593-424c-8cab-909993bf6711", "indicator--394e5cf6-61a5-4504-ac7e-c8afe986b238", "indicator--a6535075-2229-4f09-8de8-5b54d0aecf57", "indicator--a4628a94-0071-4067-bfd7-0ab249d4907c", "indicator--e0221ec2-bd13-426a-8fab-5f154acd5247", "indicator--c3680aca-aff7-425f-a8fc-63dd1a2799b4", "indicator--1f5b335f-9c94-4e9d-bb85-208a0976cf8b", "indicator--4c86dbc3-af0f-489f-af41-76215849adec", "indicator--3c811c6e-ab4d-4d25-abc9-a84848a150a1", "indicator--ea1a2a75-4fff-4d6d-ac46-f02b0ac386c0", "indicator--27c656a9-6775-4435-8f67-ff43db88fea0", "indicator--0fb3e7d1-8b39-477d-94f6-0ae18cb3de36", "indicator--aee23ee7-ca71-45b4-a6f0-d6a114789dff", "indicator--88636e17-0d29-4d0d-8c1a-68b6fc10bebc", "indicator--1f31fed0-9ea3-4093-ab5b-68871e40b6ab", "indicator--35164ba8-e771-4298-9dfc-85026e248f1d", "indicator--8a3a909e-8c8d-4ae0-93a8-835fc98ad06c", "indicator--5083fa4a-7bf3-490c-93b8-dda79969954f", "indicator--834d47b6-8f95-460c-9439-4cedf1cfdf73", "indicator--6b447be1-062d-4212-a53a-b382e88aae12", "indicator--3addcc25-beb7-4352-bbc9-5a51d851ed44", "indicator--b80a8621-ac8d-44bc-be28-0f40e14584fe", "indicator--335fcf39-2759-4a90-a9f0-97c34a41d902", "indicator--98a3f972-a563-4a09-a3dc-ca7184a9a39b", "indicator--d090d706-33bf-417f-add3-a193ac2bace2", "indicator--6b798ba3-90bf-43e4-b742-ff8ffa6d8bee", "indicator--17584c4a-6cfc-474c-9d3e-7d5f14320bf4", "indicator--8ff81779-199c-41aa-adee-4cf6d6998503", "indicator--86c13a67-e53e-44b9-855d-09cd71e0afb6", "indicator--6ffa1491-1c80-4471-bb2e-eabb7f04d5ee", "indicator--c242c2a9-1863-4cdf-b394-227fa080cbfa", "indicator--56eb569e-d618-471b-bb6a-2744745f6e33", "indicator--c68cd3fc-0962-466a-a414-281d96e46b99", "indicator--e68bf62d-c0df-436b-95fd-db4bbed9098b", "indicator--2f55d076-3fdb-4c3f-9f77-e4a6232f2d51", "indicator--7b7c9200-ad90-42cf-bcc5-d9173e42c86a", "indicator--33d4ad6e-6b88-48e5-823f-8f966a9b8d44", "indicator--ebd9a9e5-94f3-405a-9cc1-76a87c64494e", "indicator--9f6bfc2c-f5d6-47a6-833e-94f7d2cb10ef", "indicator--2d8248e2-95bd-42cb-b557-e95ab412a7d0", "indicator--5253bbde-56cf-4409-8b18-97fe38c20139", "indicator--0541ca1e-f808-453b-a354-699e13995f37", "indicator--5d51f362-6757-4e28-adbc-10c6a0554f1c", "indicator--fe916d2a-dd28-496a-a5b8-deaf6bd62f45", "indicator--9fbc90dd-2f60-400c-b148-4bbc54cf350a", "indicator--c5b9cfbe-b56b-46fa-bbf5-a3576bb720ab", "indicator--c65198ee-ae10-4cf2-9530-cbe6d0f426ab", "indicator--ee4084b9-24f0-43a5-a34c-145ec8ee7b0f", "indicator--2c682a56-7e6b-4a7a-ad73-38ef8e85dfd8", "indicator--8875942a-f89b-4a09-9729-63fb6d60aefc", "indicator--f1d62262-405b-4e3e-aa8b-95fef0b4a6ea", "indicator--7610f2a2-ce66-48ac-b684-e7e7d559be29", "indicator--5e32fde7-7695-4783-8f80-8f3ed960c177", "indicator--770e088b-c930-4be4-82f2-42dc3d21f277", "indicator--27053ada-382d-417b-920e-3aab669362ef", "indicator--2e85ebad-d7c8-42f1-997c-2b7d01507017", "indicator--be7664aa-f850-4d8a-85f1-c1f45ca07c9c", "indicator--ec7bc671-cde9-4856-8f21-7137045d10f9", "indicator--5e225aeb-aa43-4119-bea4-abb6faf390df", "indicator--183efc24-ef42-4e61-9ae3-534c9a87f46d", "indicator--001f8763-b0c2-4772-8c99-d411de35f5cd", "indicator--1a5f7e76-5359-4e48-951a-5fdfb6d56be2", "indicator--8eb6dda1-7b5f-46f1-bb26-52ce98a1156d", "indicator--2badf3f2-b3dd-4fd7-9b73-ef07ef48d5a5", "indicator--843fcbb7-9771-4266-9922-76d18e59408e", "indicator--8e3f142d-0857-4f31-bc82-f7c1fc7e5e6a", "indicator--9407ec1f-8e30-44a6-9389-074ddf627345", "indicator--66771a48-7c29-46a9-9e7a-bda8d9ccc5f1", "indicator--262e2ea7-de84-4ba1-a44d-fe9f8dfb08bc", "indicator--f0c0aeed-7190-4470-9978-c033d7ed07d7", "indicator--7108d6a8-7d70-4a15-9114-1120223f0209", "indicator--a603e0c9-2d89-454b-908f-9c59a94f3fb7", "indicator--442bcd3a-ed48-4c0b-ba4f-d52dce231c5f", "indicator--5aff2e12-7c97-44dd-9be4-bf6f8fd2f45e", "indicator--e0c5c5b1-9ae1-4518-88ee-4f8a1fafec23", "indicator--fe99feec-5a18-4445-8726-de950cc937a3", "indicator--6073a559-d121-4a94-8463-a31a2102ab4c", "indicator--e62876db-0893-4728-9765-e8d1c6718dfa", "indicator--b4adbb70-c37c-4931-9a28-f54c889a9c73", "indicator--13495a11-e69a-4ae6-bb5c-4adf4229bb3d", "indicator--2e7c589d-b394-49c9-ab91-58069378b28e", "indicator--224d50fb-befc-4a9e-803a-275fcde5e5a8", "indicator--2a7c0fce-da2e-49dd-a996-f9e305af1dae", "indicator--df57ce03-c9b1-432a-a4b8-40d44cf9a7ba", "indicator--f404b9a1-da67-4d3d-a4be-4ddebfa0440d", "indicator--12d5e8e2-0d14-4d1f-bb53-9e4bf3538490", "indicator--cdd761cf-8367-4fd7-82b0-9166aa27fa35", "indicator--34bbb5a6-ddee-4c02-82bc-31fecafbe7ce", "indicator--3e9d52b6-2b08-4330-9717-eb416737c4de", "indicator--228b8f51-8b1c-4d4d-b1c8-2dd25c558c8b", "indicator--f508c813-9381-448e-aaff-51a823c356f6", "indicator--d2a1b472-9553-4f77-b093-38f0bf88a980", "indicator--bcd25acf-6ed1-43ed-88f3-cbf60f44cae0", "indicator--780062eb-28ae-4981-99f8-39100b9d90bf", "indicator--d2c9b4ff-8e1d-4934-82f7-87b104a153b3", "indicator--86aa786b-dfae-4700-a820-52f67cb9a5ff", "indicator--5ba17769-6f2a-413d-9d23-1b281c7cc2da", "indicator--e0b0e152-80be-4ef6-8ab5-be5f9682126d", "indicator--abeb516c-cc9e-4b0c-a885-deeb3bc2333c", "indicator--d53d4677-7240-4542-aad3-c5d813d86205", "indicator--e67d2c56-f30f-4e57-b003-cc03cc0023c9", "indicator--0c3e6198-d306-4cec-8c7a-06d5e5294a9e", "indicator--65cccf0b-9659-48fd-9d6d-cad048c0546f", "indicator--0d3f74b3-f954-4790-ac94-370f14bb62a7", "indicator--69d40387-316e-4f6e-aac5-cc228b1eb847", "indicator--d2e6079d-e8b7-4e99-97ee-99085d4eec46", "indicator--1cbdbc81-a842-4a95-bf17-56fd5274ac0b", "indicator--9dce61ea-8871-431a-a27c-ff9c18eb30c7", "indicator--2866a6d8-0137-4333-beab-54f52897425d", "indicator--7aa87fcf-2d93-4424-aa34-2dbef4587191", "indicator--8aa4b62b-dd29-4a87-8522-f4966d7e7206", "indicator--5e1f384f-1702-4d58-86d2-6c65d9a8a8d5", "indicator--b9500e3a-7ba0-4bb3-bc0c-bf0d9f4a5d44", "indicator--7cf63900-45a1-46d7-bfd9-84b6acdfd21e", "indicator--e85f741d-fcd8-48cb-ba98-4b11291d9340", "indicator--4794b82b-2fb1-4be9-8697-aeea31a21784", "indicator--560bb92c-791f-4d33-9ff2-59c6ed485f0a", "indicator--4af556a6-499a-44bb-80b6-b8de2a3eddb5", "indicator--c0e75d24-99df-41d8-817e-44732abc9e97", "indicator--569303b0-fd95-4166-ab7b-976b2e93427a", "indicator--87492550-3d91-4848-b304-3f7d675ca287", "indicator--9f9ceb35-882b-41d1-8469-6961a0af9d25", "indicator--c6fe14d1-9492-416a-8995-3efd2d71474a", "indicator--d7016244-3567-4db1-80a3-c4b6a3ddfe54", "indicator--29bfb06c-df6c-4c64-8381-a5cf22fc9779", "indicator--267dcfdf-2b3b-4561-87fd-eedca266ebb8", "indicator--27ea1c54-6cf1-45e5-97cb-e4be02f4870a", "indicator--d3dfa510-c160-4527-b349-b2336c269194", "indicator--d1f02425-e00c-4c05-bdff-cf3b8d602a9f", "indicator--fe7250cb-0fe7-4f8f-b916-2a4bbee76284", "indicator--28f3417a-282d-4839-aeb9-c38a8d0a7afd", "indicator--c2c78da2-de6a-4acc-80f4-0a6f8226085c", "indicator--b815a263-2f96-4a11-b9d5-9f9d8960ad9f", "indicator--9be5c549-0ac5-4b6d-8bd2-d0fb3be17f1a", "indicator--75e892fd-7520-40e6-ba68-0e8ee07a34d7", "indicator--548638d5-7c63-42b4-9bb7-e640e1c0c0b9", "indicator--bf638052-ed56-46f8-a1be-c1691f34a69d", "indicator--60e8905f-7e8d-4c59-8aef-d912c6f430c5", "indicator--93d1ebf2-b29c-427e-9e2b-b53ad6e95e7a", "indicator--2a45bcd1-1b6a-4bf0-b399-0ed6e5d3f3ec", "indicator--e501a656-6b10-40cd-a670-3204a643f8d4", "indicator--2201ee84-b93f-48fb-8d27-bec7f5eb4fbc", "indicator--5e7d1d9e-9089-4d00-861b-ff8adbd4ea9d", "indicator--9cd123e7-db98-43b2-80f9-5f901b271a85", "indicator--1168fb0b-16cd-41de-a989-57dcce9bf8dc", "indicator--00404deb-9cfd-4b6e-9aab-b23577d3ec82", "indicator--6b7765e1-b550-46e8-80ab-bc5559dd2d5d", "indicator--272a7e7b-ee4f-4b0c-aeae-1a15c06a7eda", "indicator--d44d13de-fd4a-411e-80d8-8638be34f5dd", "indicator--863f5ce7-6c9b-4139-b91c-c9dff54fd955", "indicator--4116a480-2298-4c62-b916-49fd17521cb0", "indicator--7bc196de-7b16-40f5-8be3-37c74ece4cc6", "indicator--ebff781c-9c37-49a2-a6f3-a613e4d2d2f8", "indicator--f999cc30-70fb-4b02-a9fc-1a5aaaca22a4", "indicator--fbbae413-c6e9-4d84-a6a0-736e2adb7936", "indicator--a2cb247d-f981-4667-8b7b-aa5a40a5b337", "indicator--d5b245dd-19f1-41ac-be01-91c2f79d8c4b", "indicator--c5906cd6-f97b-4a5e-8186-766336ec3a07", "indicator--c3be43c9-37d9-4478-bb2c-4055e2bb3731", "indicator--1f6ba333-f6f1-4692-ba55-d9a0af03d9bb", "indicator--d5e349dc-0c0a-4991-88f9-16d85cff900d", "indicator--235d3cc4-26c6-42b7-8c33-95264deeb36c", "indicator--2411b7ae-6c9e-42f3-8da9-2a17a0fbc45b", "indicator--901eb31e-b7ae-458b-95a9-9608a759a841", "indicator--4cd13d84-e476-494f-944b-16215c5ee587", "indicator--58a5cb33-fd21-42d9-93c6-8329ca76a3fe", "indicator--034d24d7-c7d5-4f5e-9e4c-97a1a05a6da3", "indicator--d66895ec-2a57-4584-8b23-75af83719e14", "indicator--dfc18941-dc73-4f6e-a3cd-ad6e453641ad", "indicator--cedcc0e5-7fd5-4dd4-953e-1f9f638314f6", "indicator--fe674ef4-5a34-4dd1-9810-de561d7f0b16", "indicator--45889612-dd60-4d0a-8fa8-2eff8e6f2a34", "indicator--d0f14dcc-1c3c-48cc-bc7f-13eede7793e8", "indicator--3c5f0e6d-2c7d-4414-9285-67fac18cd1f7", "indicator--a057f23e-d974-4758-ab56-4cd59d63e4dd", "indicator--77311cc8-d4cd-497b-a7bb-7ffa903b22e5", "indicator--0bd855ee-1f1a-4960-9490-6eac8bf064b2", "indicator--a1e04a32-4af5-49fb-8e73-1c6acbafde91", "indicator--d1dc46f5-47a3-43f6-89cd-5b677a09d628", "indicator--87b09911-e07f-4c3f-aec5-e0307551a178", "indicator--99b006d8-ec2a-4c42-b3b9-a1c69fcbec19", "indicator--eedc1f9e-81cd-4cf5-8af6-7291e828f130", "indicator--30b042a7-0369-43b1-b3ef-0e74b96e1caa", "indicator--0320b1ca-b868-4309-be19-75cc64c442ab", "indicator--27844a74-c99f-4516-a797-a05766f3f292", "indicator--16880087-3227-46bc-a776-1b186a70b784", "indicator--6c077a8b-7bd4-4952-940d-12c5c6dfbe06", "indicator--f8cc2395-a18f-4fbb-b9cc-bc6962872088", "indicator--01e19a4e-1c18-497c-a3bb-395220192553", "indicator--6b26e9b4-5556-47cf-8e6b-de75a070190d", "indicator--7ed7cf74-5bdf-44c0-bfac-6490179e5c24", "indicator--04e186df-53af-4411-9e67-6c000b4e7864", "indicator--2bf9477a-76b4-48c8-8dcf-4b72535bfa67", "indicator--89d72359-0f1c-46c0-aade-442e4cdec590", "indicator--fdc11ece-2126-4fea-a9d0-374c3752bf14", "indicator--86112996-05a0-439e-b699-d825625ecce2", "indicator--e8839456-f4c2-4a79-8475-432d64fe3f75", "indicator--7831d680-5ef1-414e-a0b7-d890036b1b4e", "indicator--3df1ebcd-8ae8-45dc-baaa-e06ea07e4975", "indicator--02cad11e-297b-4f93-9b08-ee837b1a2a36", "indicator--2c767135-b439-4105-9f3e-80309b20befe", "indicator--20bc7ff1-7ead-4803-a4f4-786793b5a9a2", "indicator--9b6b775c-44fc-470c-b308-46b56f5bf544", "indicator--3cd07e59-5ecf-4957-b445-bd6aa9967611", "indicator--7ffe762d-9fad-4731-bd69-db047f6d66f3", "indicator--6f3ef48a-5cf3-4764-9d7e-4c660b2d7dc7", "indicator--56d43f57-1948-41bc-8844-7eae1b26df19", "indicator--c922fb1e-cedd-4e4f-9f0b-e1c92e30f800", "indicator--536f8214-3f13-40c4-9dd5-6a04fd59f1de", "indicator--46a257e6-5b79-44da-91f8-6f9d6d81bbd9", "indicator--e0f5311a-66f6-4c48-a375-3555aefe183a", "indicator--4a15c1a7-8a79-45ec-81bf-9d156e50c6c0", "indicator--3ad528bc-cb0c-46da-bdc7-04d3dff6f47f", "indicator--b0317253-81f8-4849-a4a6-6da72d69d13f", "indicator--e85cff8b-e580-4673-b397-66cc14a24a3b", "indicator--5c35a93a-8c3b-4f87-a34e-382b316c4a77", "indicator--a2485a97-3844-4cfb-b6dc-557324cd6a43", "indicator--ef599ead-8d44-4af4-a238-5b6ef59ba2d0", "indicator--99b45f2d-e2df-48df-83a3-e0f628c71ff1", "indicator--d5c3aa9b-22d1-4b5c-a251-4c193ca30be7", "indicator--c93f49bf-db4d-45dd-8356-ee916e4a2d19", "indicator--5efcc321-3414-433c-960b-3c5df0dd69d7", "indicator--78b69312-c4d6-4a6a-b470-fd2c86c76716", "indicator--51eec102-7b39-4572-a177-7d11cae04b33", "indicator--771d867f-2fce-49b7-8430-19151dfb6b3d", "indicator--493a10a4-3b28-4cf4-94f5-53145e96834f", "indicator--642e6749-e666-4fd6-a8f2-0bbb14fb64ca", "indicator--04cae19d-e0c3-4398-b6c3-c28d9294359b", "indicator--ef995dad-eee7-43a5-bd4c-f5da2f13f343", "indicator--443731e4-91c8-4087-a237-c6f72d4ac631", "indicator--fce645e1-99f4-4343-bc70-2e0a760e0ef9", "indicator--37d7a5b0-2c38-4474-a6d5-5b80def09c94", "indicator--815c3855-6ac9-4c93-aade-cbc1ad281cc3", "indicator--a909cff2-b1d8-4b40-8706-939b3f88cb97", "indicator--65287327-7721-41ee-8456-4469df2fccae", "indicator--8fbd95bd-ffad-4a62-ac17-830cf04e8c54", "indicator--da0ca1f0-471b-4751-bcdb-12dea7f842f7", "indicator--d64c0c63-e477-42f6-a60b-b9e5ae40c11c", "indicator--5787671f-9973-47a4-8fd4-35b22d12f084", "indicator--5cac3df2-a9e5-416a-9063-30354461827c", "indicator--a63179d3-f294-4f8b-b066-54ce898766c5", "indicator--1bf1c0a8-81e5-4333-87f4-75971bc3ce8d", "indicator--43e7b5de-c492-4e4d-bf82-d4b48ab2cc65", "indicator--29df72a8-4b2b-4085-ac64-f56c4375b6d4", "indicator--8f44828f-1d3f-4498-b0a7-677fc54216d2", "indicator--3ce2c56d-faca-4dd3-abe6-10e7756ae901", "indicator--aa98b245-735f-4ab1-be4b-77ba7e3f4acd", "indicator--4fc72e1f-dacf-4eca-a4e6-676f1bd64bc8", "indicator--9e828a64-f6e8-4ea3-aacb-7cf249316853", "indicator--71537fc8-e96c-460c-a746-e3fa87d5afb6", "indicator--cbd1f900-0e24-4869-9add-01bae3fc7c30", "indicator--5b028653-b599-4675-80bb-be72b81ae155", "indicator--b8beb20a-c78a-41f1-82c6-9d41b1333097", "indicator--cf94290c-0968-4000-9e8a-b1568098d1c9", "indicator--c5065c5e-f1e4-4259-bd44-a83d308084b1", "indicator--977fba7f-e818-43f8-9ca3-221628eb75c7", "indicator--bdcaf346-3c54-4d39-ab53-36109fd460b1", "indicator--5a2e61af-d1e4-461b-ba8d-4fbabc603d13", "indicator--937a5ad8-fc6c-4d5e-b98e-8a4f76a6a1ee", "indicator--a7e96971-e40d-4f96-875b-a0e2e2c6a0c9", "indicator--cd1f9bff-1267-4748-a69d-fcba4dc9d635", "indicator--8e2a70d7-42fb-4846-8af0-af6c64fa4905", "indicator--1d4a6db8-fde4-468f-96f0-e8d06918716f", "indicator--f7a64ed9-b207-4416-bcc1-475a9ae9b32b", "indicator--4ff1cd60-17c9-40f8-a7f3-80147414584c", "indicator--1299ad28-7557-4b1c-b739-60eec0e8b241", "indicator--a7e1a503-38fd-4f24-a735-d0e222514ed5", "indicator--66c87381-9f0d-47e2-b40d-c5262d808661", "indicator--fbebed93-810c-453e-9ea2-8c6a4f12511e", "indicator--0030d1d4-490a-4621-b64f-553af90d5ca9", "indicator--c2bc0b4b-6816-4fd7-a9e5-5747649e7a64", "indicator--4707f9c1-f602-4480-a73c-15dc302d0920", "indicator--12e590de-a2df-44cd-b0ed-f346bb876305", "indicator--82dc65a4-521c-4ce9-a852-5a7d60fee7be", "indicator--8b7d59f4-9d5b-476c-8403-b2717597e1de", "indicator--90b8ddc6-e4cb-4a34-837d-7e0761319578", "indicator--2100ef02-1b2b-4662-a34d-d37c554fe135", "indicator--7382b4b8-0e29-4fa1-a0d2-4c3dc251c1fc", "indicator--47426787-5af5-45d7-a29b-2bc08d23162b", "indicator--6eb06a75-ea9e-45a5-b84b-771ff6b3a3b9", "indicator--e1b2c0f2-ab84-429c-8a5a-c278bff5e766", "indicator--c8ebe589-9daf-49ca-8c01-f83cceeea468", "indicator--55e5f4a8-5439-4812-8851-f3b3cd06536b", "indicator--bc8cbdc0-b1c9-4157-84ad-190cae35ecba", "indicator--c6f0b0c3-a42b-4743-922f-7f3f0f32bb5d", "indicator--78fedd54-c842-4278-bcf2-4c0cc73e4b84", "indicator--dd9c23de-6b0c-474e-8bcb-1700e2b77a30", "indicator--53895b2d-a13a-46ad-a4ac-77401199ca78", "indicator--a67b6839-f2ec-4d53-813b-ae5a948fb533", "indicator--50f68ae2-b497-4033-8f40-1116971dfeae", "indicator--8679f4d5-564a-4675-a71d-d550f650622e", "indicator--c1cb4b5c-b806-4b02-bc73-bbad5b6bc30e", "indicator--c6136808-b07a-46de-8a92-224d0619e34f", "indicator--1ecc4f95-f6fc-480d-a0a7-3c621c314e95", "indicator--dee1b643-b751-498b-8c8e-d1158e0befaa", "indicator--313fc7b3-5993-42d0-b86c-30e3ca8e3862", "indicator--a73b3ab8-2468-44d3-a847-ef297fb048d3", "indicator--42714a0d-8779-49db-a65c-bcd5254d50ba", "indicator--6c57c1b2-3a81-4149-9fc2-2e7071deff91", "indicator--72f2527e-79d1-4df5-94f8-e186aaa07b73", "indicator--05bc9313-3f2c-4ec7-a129-b628d9ea5244", "indicator--a9c1fae6-ac52-4ef2-b3cf-08d61dcc9bb3", "indicator--4b67cdf8-0ac4-4d4b-a9ee-f811abe26fe7", "indicator--4f0b18bf-27dd-4a00-a64f-db2f3955e6cd", "indicator--da88df1f-343f-4cd8-9de6-8b66e29a1459", "indicator--53a6246b-c52b-41f7-817a-9bdf102c1c5e", "indicator--c2a6c1aa-ef0d-4c67-a078-f74b1fd17d52", "indicator--5a79dc33-f1bd-458c-9b6b-1764042847d1", "indicator--c3283b9f-d4a8-4c07-b624-6252d151247e", "indicator--6432e4ae-6457-49e9-9e17-82ccc8b92db2", "indicator--a0cd1e0b-12a9-4e69-8300-6adcb2ea48c2", "indicator--49d18fb4-5450-4109-9590-4f9b5cd969af", "indicator--7d5a501b-6d05-43d9-83d7-fa4d15819454", "indicator--f38717fe-df8e-4195-96f1-b93d21f6cb4e", "indicator--86d8422a-bd6b-45e5-978c-9ce849d47880", "indicator--3448b41d-c745-45f3-aa39-bfbe71e44511", "indicator--d82f3a1c-0142-46ff-9fe2-7d7d88631c74", "indicator--dbb2fcbd-26ec-4185-a792-3a5cc87664a4", "indicator--8354e755-cd0b-4361-beb3-065ffa752f16", "indicator--3f7ac76f-c24e-4077-93c2-4dcbd60ae79b", "indicator--188bba69-7572-4ae4-a1be-2a3c3cdb3f93", "indicator--ae4cf6fd-acc9-4f59-a427-8d692a60b68c", "indicator--fb458c6f-a3ad-4f6e-86cb-5ebf7e84c3b3", "indicator--44ea8b24-7870-4256-bcaf-ce326f92263e", "indicator--23583211-a048-492e-a35d-e8092058e207", "indicator--98af4297-a82a-470c-8c45-a1e3f55f7dee", "indicator--7fcfd57d-bb6e-4986-b298-9ac33d436e59", "indicator--c7b549b4-913b-4c0c-b9d9-f0a7a1849b53", "indicator--045ea0b7-c2b3-4c2f-bcf3-872178d8ec4e", "indicator--ebe6d9d4-ba38-4a6a-8886-46c7d8dfc582", "indicator--78dc0b42-f4af-4fd7-acaf-ea9dcbdba275", "indicator--f9cfb99e-01bf-4e24-a585-856ce0f8193d", "indicator--608d57c0-b9fe-461d-a289-0cab3daf6b11", "indicator--c7ad87ac-09b0-4002-9e28-26b930f7b297", "indicator--159860e9-aea4-498d-80d1-3ac6ce2c6eec", "indicator--ba2312d8-3fa8-4a18-89c3-722bf3f975b7", "indicator--7419a3b0-3785-4205-9edf-4ff01796db53", "indicator--97beaaa9-4e24-4b40-a57f-ccb0a6f3754a", "indicator--c0c347ee-656d-4f7a-91ee-a4f156675014", "indicator--bcdcef40-f49d-4e98-bf0f-1aeddada84a4", "indicator--297e0ef8-9ac5-4426-a385-b13d120ffc03", "indicator--5df9c5a8-9592-422a-9c37-6b77f22f022c", "indicator--86208c66-9933-4dfd-b966-19707db739d5", "indicator--618a5259-625a-409d-8e83-e1dab4966381", "indicator--3f2aca11-bd13-4da3-a75b-691c9cdf949b", "indicator--d4f057a5-f04f-4aaf-aeda-ac0ed2474dd5", "indicator--4716f511-18ba-47ad-b535-c6d097d8e98b", "indicator--35bc5978-65ef-42f7-b9f1-9cdb7be1c9f4", "indicator--2eda7883-3460-42c4-aa74-f8acb7b5eea6", "indicator--a2aa0899-1a14-41c0-8705-258486729147", "indicator--90363e60-c661-4e3b-a9ca-8884f129ea65", "indicator--72865630-4b80-4928-818d-d952c0666dc3", "indicator--3c0029ef-b1e9-4d19-a1b7-52c79e706c9e", "indicator--a0edbe47-92a7-4c26-b4a4-879f36dc1506", "indicator--43c32aac-4d70-4eb6-952e-f4bf59189690", "indicator--f3beed9d-d37a-4cac-b8fb-46af8dee662a", "indicator--78bcf2a2-8cc6-4eb2-af0f-aeb754289fe5", "indicator--f296cab1-f3f5-4ba0-b6d4-57dbd230a16a", "indicator--abe1f622-82eb-4b14-bfe1-4f148dcee47c", "indicator--4ea0326f-4729-4e75-9c74-0f6d65b9f063", "indicator--434220b3-3af5-4a34-8722-746ec9b92091", "indicator--b1c9aa8a-f905-4f86-96ab-9781fcef3fa3", "relationship--5e07143e-ca49-441d-a6e9-15f5c850df25", "relationship--eec95d2a-b6a5-4446-9c69-9429f0ba7093", "relationship--6cedf2c2-6017-4d60-ba94-679a37030164", "relationship--820fd7bc-9f3c-4277-88b1-24af52e4a426", "relationship--1e2169a1-7790-4d46-9363-bcbcb4545dff", "relationship--08066296-ccfc-4e2b-8356-cda54e734008", "relationship--a3251251-042c-4499-a52a-848c3f3d4173", "indicator--39ec68d3-2877-4f6d-803f-02443b327a59", "indicator--a1719373-c76d-4a85-80d1-6df8884b4ca7", "indicator--48c0c288-df4a-45da-adaa-20cb930d437c", "indicator--d8674d71-9cb1-4029-9d64-59e0a0cd70ab", "indicator--431e9ac5-cabc-47c8-b0f7-d74a41ad970b", "indicator--4c7abdd3-a69a-4cd1-9b47-53b6fefbab96", "indicator--239f5b37-d281-4828-afe9-13b6dd6b84c8", "indicator--00a44e22-2531-4a5d-a13b-3d9e9be304bd", "indicator--c0780046-e556-4149-b389-eb24ffd0b50f", "indicator--1ef8571d-5e56-4a66-8d91-aa879d12fc2b", "indicator--46dfd803-ec7d-4121-acd2-a1de1e2d0103", "indicator--55d0999a-71c1-44d1-a0f8-82d6e728f3cb", "indicator--80723781-a69a-436c-bd8a-689a2d3148f9", "indicator--cf4f639a-3a68-4695-8e80-2a5edf972a0f", "indicator--3cfbc52f-66d8-47bc-918a-7d204e39d9ee", "indicator--8046d93d-2782-43a4-8bc9-f874425069c4", "indicator--6c2d02f1-276a-442a-a1b7-7c408d74dbbd", "indicator--2b22305c-8767-492f-8553-0f3dfc8d0327", "indicator--36200cd1-a862-4820-9a8c-3c842469c618", "indicator--def754f9-df97-4967-a622-2fab3fc9c4e9", "indicator--ce421bfe-da4c-49d5-8dee-6800bd438337", "indicator--d094c400-57f0-419a-881d-fbccdbb6559a", "indicator--7f9a5814-48ce-4c23-bcbc-64a8396935a1", "indicator--e26a316c-0de9-4077-8e95-4ad989ce7808", "indicator--2e81dfeb-92c2-48d2-934e-353b8a769cf3", "indicator--08eff965-08d1-4614-b0be-71b7d74f52ec", "indicator--878b9bd6-b6b4-46cf-871e-e26abafad10b", "indicator--9b2e569f-6578-4bc4-b3b2-17bc8fa6d822", "indicator--b4b3a933-6340-47ef-b953-7e1922ae2fcf", "indicator--47cc6dc7-992e-42ac-bb54-37414bc318d6", "indicator--70fbbe25-8163-4afc-973e-82e33f75bb8d", "indicator--62346125-95db-4c75-a386-a04b72c2dd28", "indicator--a389ebe4-4d5d-409d-beda-47ab0b6bec2b", "indicator--5d7c2c8a-6b92-4485-88c0-41b8496c5897", "indicator--8ab55d44-c864-4ad7-b80f-cb4b7f311b0b", "indicator--fa736a24-3bb9-4a78-9b8e-4153779c9234", "indicator--39ea335a-7759-433a-8dc8-80ed93f7263c", "indicator--f626c6e3-3fa9-46b6-a62d-f257080a34be", "indicator--923a370e-18ff-45cd-8045-4c1a821afc30", "indicator--5c2c3df9-0cd8-4d66-a4d0-e76ba0d7b305", "indicator--2fc9c6b3-33c4-49fe-84b8-3f7389bfed7c", "indicator--1551e484-57bd-4e6b-a442-f93c2c36ab2c", "indicator--106767e7-b245-4930-be02-0664b6ac0e9b", "indicator--a9bf5dee-394a-4b88-9b24-88947025d066", "indicator--759053c2-4a5d-4adc-abed-8180c84b88d7", "indicator--a5c09544-0a7c-4513-a7ab-9b760d992afe", "indicator--9483e9cd-77b8-4652-a9b7-0a01bd894e40", "indicator--7a41c6b7-dca3-4316-8bd9-f975be299bfd", "indicator--58ca4074-9708-4c6a-b2d6-09791658bc58", "indicator--4f914ec4-5616-46d7-97e7-3cd1c027d2c2", "indicator--aa16d31a-192c-426d-b63e-28697d31adab", "indicator--62d955ac-b64d-44a1-8d60-079357fd5a62", "indicator--de267f0b-33f5-4ee6-acd4-78508ef6b1c4", "indicator--ee1343ee-00cd-4bef-9499-c2c27aabaca2", "indicator--ee567e24-7d7d-413d-ac0e-d6bcd9eb74fa", "indicator--18e2f985-5973-48b7-b699-9457ea132f41", "indicator--26b4c249-d91b-44a0-bde3-339b48c48549", "indicator--b4d2d897-eabd-431d-84a6-7301673acd2b", "indicator--04ae3467-54d3-4067-979e-3edff0c98535", "indicator--7d7b77bd-497f-4c8c-ad3a-c27eef60f488", "indicator--e42f5c1a-3dfd-4c02-bd6a-273bce78c87f", "indicator--d1f4ad51-953b-4b2b-9bf5-619efde7d04a", "indicator--ee528a5d-43f9-489d-a39d-ed7f97ab1fe1", "indicator--b60c8b9a-a603-4a57-9ddc-2d48011dd0b1", "indicator--5d4b7e03-0dde-4202-a286-1d3e0900a05d", "indicator--4e5bf55a-7f26-4278-af1c-678715657bc4", "indicator--1b893225-c827-4b82-b65d-7680d97373ed", "indicator--d413fa03-645c-4479-acf1-0d289cbdf1db", "indicator--187661b5-c144-48e4-b832-52ef06ba19b7", "indicator--2786fdb1-78a1-48f9-a69b-0ea21d0717f4", "indicator--3cc27931-a9a7-4dba-b93c-a91ca92e417a", "indicator--815a1aae-25e7-48f1-95b1-e3092846c7da", "indicator--8f1848e6-7b0b-4a31-bbe9-d69eb1239282", "indicator--d7b187a5-3d2d-4457-8621-859722eb993b", "indicator--106af879-0ea2-43fe-97e7-b9f306d5a80c", "indicator--c1a34133-7c67-49e0-b72c-b92326c792b8", "indicator--fac289ac-de66-46bc-b170-4c9d693f74dd", "indicator--82de1fa9-f4ab-4ce1-8ed5-4389e75618fc", "indicator--87233d67-8d5a-4bdb-b124-0989628e54a9", "indicator--e5e6335d-1c1d-41f1-910c-b69550ede05b", "indicator--6e5ec365-5cd7-4eba-ae23-24ea2ec84052", "indicator--dce06285-9a91-4334-b90c-9fdee937d4f8", "indicator--fc02f665-935f-47cf-9f28-4a783e7ee40e", "indicator--8af0c2bf-a3ce-4c93-a1b3-a0c8faff8ece", "indicator--48d6943b-299b-4716-b37b-76320821eb97", "indicator--d380e880-e462-4537-b595-d8b536e41be5", "indicator--9828e357-8ff0-4b85-a08d-852b471ddc23", "indicator--9880e40a-e128-41dc-b0e6-3ebc1ca2ea77", "indicator--d57ed008-df2f-43b6-979c-1f645227e6af", "indicator--9f80d03b-50cd-4886-a749-4811fb8ffd9f", "indicator--fe09e24f-e0dc-45f4-8b7e-117ed9d685b1", "indicator--c16b25bb-49b0-44e0-8ac8-ff56770d91fd", "indicator--1463085a-4f68-4d8c-a1ad-0a289d990d99", "indicator--e49d7236-3903-4ba0-b3c4-38c1dec940ff", "indicator--7d4587d0-2f2e-4e4f-bd5a-484a1b844361", "indicator--2a516ffe-a31d-47a4-8c07-41c245b7e0ce", "indicator--f253eab2-25a7-4233-917a-af20eb45dcae", "indicator--d46dac49-26f0-4317-8b89-a92901aa97e5", "indicator--e95ec19a-2477-41a3-ab2a-62eb733f2dcc", "indicator--55de53e0-d369-432e-b9a4-a77a62dc8876", "indicator--1353646e-efa5-4eaa-845a-5479fc4871bb", "indicator--a0f4b747-0d55-4007-ba61-1097f834b24a", "indicator--2ad20a97-6466-4125-9b48-bf305d4437a3", "indicator--a9525a60-7e36-416e-8485-de4294ada48a", "indicator--a3230f74-33b3-4745-8454-d577a0ec90de", "indicator--0e6ac3f0-da19-468a-a859-6db9281d9ea6", "indicator--5054f9ab-4e93-4f3c-a2ad-24b8aef562c2", "indicator--a1d62e53-26e1-48a7-a699-ea3357f0e418", "indicator--46098b62-2644-44aa-9d90-78881b137091", "indicator--4322a3a2-0612-47d8-ae44-c89e27b044c3", "indicator--98e3e98a-46a8-4fe5-99f2-3371fb272856", "indicator--74060373-c7a5-4c02-80a5-64d9c2a4d4cb", "indicator--010122f0-1448-4f87-a830-fefb429cd7b9", "indicator--11fb97d3-c83e-44f3-9b86-6cce0ee28e94", "indicator--49d0b7f8-946c-4d60-8cec-2eb6ef480341", "indicator--761f455d-dfb9-44f6-8c4e-eb61d03822aa", "indicator--0fbddd52-9444-4223-973a-17b4345426ad", "indicator--98099356-9c51-4e66-855a-49ac7196f606", "indicator--519ab50f-5380-432f-84ef-86d0fc4524a9", "indicator--72f528c1-bf7e-415f-8a62-719917d31ec2", "indicator--7b1b467a-9e91-42ad-b467-7f8860a53bc2", "indicator--f9b38336-f6c8-44f4-aa62-3e55570b5308", "indicator--ed3182b1-4234-4bec-abe1-1a88f019749c", "indicator--d89de064-8c52-4018-ad9a-f61702c0a605", "indicator--625c7c7f-a78e-4d29-b6f0-a1e730cbb9e1", "indicator--becc3a21-a87e-489a-b7e0-5d38a4b99db1", "indicator--9464e98f-36d0-490e-a532-c810e661202c", "indicator--376463ff-a166-488d-aa97-01ed0092df4a", "indicator--0697bdd8-9440-49eb-b661-156055faa834", "indicator--2c9702d1-d5ed-4e10-888d-4a35721d2016", "indicator--4d228d3d-6499-42ef-9ec0-c7834230988d", "indicator--08a99912-fa77-4868-b241-0da172a96447", "indicator--0832b12a-fb47-4aff-a291-9f56e7d04a7e", "indicator--a382d0f0-0232-41da-a8b3-9bbf2a07e795", "indicator--f5f2c907-9699-4c1d-8350-4a9d93918e43", "indicator--334723c3-5289-4c86-ac5c-0d5f32afd1f8", "indicator--3c6fc27d-7575-4fd1-a52c-0f8be97f106e", "indicator--0f8721f5-f32e-481c-99a8-4c83daa1a83b", "indicator--d769993e-eeea-49fc-9356-af447347bcd5", "indicator--c49350b3-02b0-4741-bec5-43ac36a5ecb2", "indicator--07b0bb6d-e457-4ca2-befa-abd6df4dc89c", "indicator--880f3e2f-dcef-4d6e-bc72-8df8e8bf2894", "indicator--b97eb51e-d823-40e8-8c2d-27f569202ab5", "indicator--ab4f4da1-bf6f-4457-9e01-84ce32b06892", "indicator--6ca47f88-cf8b-4f39-9313-f4fe4718a121", "indicator--568a353e-9e31-4a3e-9ebb-240c3c8297a0", "indicator--a25e2952-1a92-4727-88a8-3944968dfc0a", "indicator--35414945-748d-4910-97c8-4cf4b74e9570", "indicator--e5bb8445-47b3-4c88-ad03-257f6d402129", "indicator--26a54507-cfda-4e21-8269-5545aa7644f0", "indicator--1a4ba2c5-4115-4acc-9899-ac92340d6d2f", "indicator--12e67e68-bbc0-44f6-90a1-d58592305d33", "indicator--76aacc21-6427-4901-8104-dc120b46deaf", "indicator--03d71c15-129c-4dc2-936f-dadbaf870ca4", "indicator--dc306ef1-118c-4e09-9c93-f74469c17f26", "indicator--8e9caf68-5b5d-4fd0-b093-17eec643220e", "indicator--651bcdda-e886-48a5-8929-55b25fcb691b", "indicator--6c6aec78-2f35-4bc7-9fc0-74b860751dd3", "indicator--a6b5ffaa-39f4-4948-b509-2483d36dfbbd", "indicator--93b66093-86a4-411e-84ab-3c3568e8a185", "indicator--adeb9307-b230-4a3f-b0a5-86e291b28d7c", "indicator--63e8ce8c-e8df-4ca5-81f9-b451529b68ea", "indicator--f79a2019-2b23-4ac8-98c7-efa2da46991c", "indicator--0ef73f8c-75ed-4723-81a8-dba2fdc23deb", "indicator--47cc7fb0-1361-4376-ac62-4b10e9f5818b", "indicator--ee672767-a835-469b-98c0-f953da90211f", "indicator--ae41b726-d4d1-4d42-9425-a47005312909", "indicator--f84c1ccd-8807-41ba-bff0-489d4acae50c", "indicator--d00567b1-7e72-448c-bc25-cfa408b879f5", "indicator--b958cebe-b5bc-481f-a5bf-4d6a43671900", "indicator--6cd98b86-750a-4e46-a51b-eb49ededa621", "indicator--4bf63dda-6387-4bae-94eb-f23ca7aff377", "indicator--2abe2f6a-1122-49b5-b4c1-d187ffd3cbbe", "indicator--1452cad0-3bb8-45d9-8eff-19bf572bb0a1", "indicator--11764d10-dc84-40e5-a32e-738f4a767533", "indicator--9ffc4be2-0b22-4059-9469-6c8ba1595085", "indicator--7e164e8b-4973-4be4-9e10-27827100811f", "indicator--640c4195-bf3a-4510-be8d-977e98eeff5a", "indicator--7afc5c62-6594-41b3-8dc4-117775d005fe", "indicator--d1023d5b-a874-4962-abee-74600f01607e", "indicator--74cae419-67e2-4a4c-b3d3-e1e27b5def53", "indicator--ebbd1c27-7b4f-4b32-8f5e-5467bc613cf7", "indicator--f1a7fa81-159f-4f1e-9bdc-d58cd6e172c7", "indicator--49a82201-3b29-4b32-8190-6622640a1a33", "indicator--d222ba8d-0d7f-40e7-aaa4-618f985c5464", "indicator--4088d3d4-f112-4272-96b4-37b2724b7948", "indicator--e616bd1d-e8bb-4c06-b47c-51a4c38e6b35", "indicator--abdfa70c-1bd6-4a71-af28-57228bbea595", "indicator--9451db74-f8d2-4711-80b7-c7849858d3a0", "indicator--82899685-6942-4d22-b84c-4d7acdc39461", "indicator--807b572b-a3b9-4300-abf1-5447ca57f100", "indicator--c303fe0d-2017-4421-9958-c7b61154677a", "indicator--ddc427d3-d7ea-4c41-b32f-1dcac679908f", "indicator--e14244fb-b9e6-47ff-ab85-548732ee52ca", "indicator--f987d759-13ad-442f-8dd2-0beba6decb70", "indicator--cbe6b43b-f410-4b29-8438-56deb884118b", "indicator--9f1c5ad6-2da6-43a0-b14f-7447c99c4fa3", "indicator--5738abf3-3465-47c9-90b7-b69e4d2c9105", "indicator--a313444b-a21b-4233-a11b-d6466735a57e", "indicator--b1ca8102-cced-42b7-a6e5-2ff43d1290e3", "indicator--674f6288-973c-4689-b0f2-b8b0c867279e", "indicator--2038197a-e5b5-4652-8937-74bc3c22a3e4", "indicator--1183fd36-876a-45d8-8a5f-409ac3bc6f52", "indicator--24c10da7-691f-4f47-a248-a2b294cb7768", "indicator--2878d41a-0b56-488b-9a2e-0583779c453e", "indicator--d58ede1c-474c-4188-ab62-e661e30e2d91", "indicator--55a1726d-ef02-4da3-ba06-07a8891d53b5", "indicator--0c109677-248d-4c98-9358-f0f311fb55fb", "indicator--818ccaa6-f349-4c25-add1-cbe414624b33", "indicator--75fd36df-c4d3-423d-ba84-526b76eb16ac", "indicator--4c0d13f5-c494-4cc5-b0f6-397775e6f42d", "indicator--f8d97e08-dfe8-41c3-bea6-96baf9e400b3", "indicator--1e5a4974-9322-4001-b1ff-691187da3484", "indicator--2b00f950-862b-4f62-94cc-5eb1e38c6389", "indicator--8afee2ac-5f2b-4fd4-8dda-d8b784b83ac1", "indicator--41f7ef3e-02b1-44df-8d73-4be7fdc55b50", "indicator--fedfcb6f-0a91-430a-855e-fb38a7b8e782", "indicator--bc5119c3-0ee4-404e-b854-f8b0085c15ce", "indicator--344df48a-41a9-4ba2-a752-187dab3afa84", "indicator--cd98b573-e55f-41d1-89f5-235bd555912e", "indicator--7b6ff8ae-5a83-4565-a5df-6375da025ce7", "indicator--f3c0fdb7-f43c-4dc9-b9d1-5e19bfa982cc", "indicator--6ce624cb-5d1f-4496-819b-2d78e7576201", "indicator--88beb675-5c6d-40a9-9522-9bafc7b4d14a", "indicator--9b08c32b-5ba6-4f80-aa83-153397c876e3", "indicator--a4c83a79-c512-4f9e-94b4-e6337a0deba0", "indicator--0b63c7bb-b54b-4033-a426-c0aac22a6d65", "indicator--66b3fe41-994d-4576-8115-c2c483ce54b2", "indicator--999b6125-c520-4ffa-b630-20ecdd83ec33", "indicator--2d97892c-7f67-4485-b6a8-9e2bc02f136c", "indicator--480babc4-9fa8-4085-894c-8241407283f5", "indicator--4766faaa-c06f-409d-a7b0-64010c2a5c44", "indicator--e91413ce-e858-4a61-ad84-ff11f8c663c4", "indicator--984fed7f-9f76-4986-9b57-bd02a1652da0", "indicator--367ebeb4-128c-4977-9d47-83d9a8afec65", "indicator--ec56ecbb-f44c-408b-873d-ea7e33cd408e", "indicator--a5ea7e94-0ae9-4f81-ad7d-c681325ea83b", "indicator--896ae882-6146-49de-9c30-f13b503d1146", "indicator--55b02877-d29d-42ed-8752-31e962e66cff", "indicator--f2fd96a9-eea0-44ad-8058-1f6756a773bf", "indicator--515edd3b-8bda-44dc-9d58-ecf67bfa465d", "indicator--b02dbc2b-c209-4172-8130-9f328de6d151", "indicator--baabc483-f79f-4937-a3d8-3a18c7746b94", "indicator--ebcb131e-a59f-4e2a-bcbf-71833463a538", "indicator--f5661429-1579-450a-9839-fb0376555481", "indicator--4d7453fb-0902-4000-ac2d-c0bf1ec376ad", "indicator--6e807962-a8fc-41e1-8e96-19b4dc64c496", "indicator--95d00e1f-bf1c-448c-870f-8d81efabf5f8", "indicator--f9f986ff-d6f7-4988-ac34-3b880c77406f", "indicator--6488c95c-292b-44f9-a5c7-0ae0989daff8", "indicator--ca2f5a68-a082-4eab-bec0-09dd2393cbf0", "indicator--36e7f9e2-cd56-4724-93d7-8d8f952657ee", "indicator--4a3a3078-acea-4775-9d68-793464db061f", "indicator--30a484a3-6b32-43d0-9d08-4c5924a2bf7f", "indicator--21985ee0-f757-4b3e-b974-03371f480980", "indicator--75e41c25-452e-4818-92df-9d35e9f7e27c", "indicator--75f7bc6e-be31-419d-a419-38d5e1cb308d", "indicator--02522c20-41de-4d47-bc2c-4c59f219e1cd", "indicator--1ba5ce5b-3adb-4ac9-913e-663bd782a706", "indicator--17e3f740-7ae2-47d5-a119-435bba9c5362", "indicator--247b50d2-32f3-40cb-b26c-359ee9a85062", "indicator--032aabef-22d3-4dd1-9146-4dc6c133db7a", "indicator--a363a08b-6863-4e7d-94b9-081ddb7b9327", "indicator--70b63bcb-3ec2-4f5c-a804-ae618d50beda", "indicator--7ac05bf9-a393-405b-9d36-ea5333bb00b1", "indicator--bb7d7ce5-b88b-445a-bdda-1ed3bfc51a30", "indicator--05659b57-3fe6-4c82-a010-8f145f7a7b5f", "indicator--a5f42640-013b-4a57-96bb-1c1a68edadb3", "indicator--fe86116b-b2da-4fd5-b683-697fc62bd1fa", "indicator--e315ccc9-3e4f-450f-958f-0a3b768b6ba1", "indicator--aa271aac-11f9-49d5-9612-98978cea3664", "indicator--8d4c1a1c-aac1-4d65-99a0-8681b6e037b8", "indicator--8eac847e-959d-4830-8172-6ce2c93bd88a", "indicator--997e70cc-0eaf-44d5-bbd9-6cc87a22c70b", "indicator--7985dca0-3b81-4405-b585-11a2236c9fdc", "indicator--7872eb55-4b3b-41f4-8ee5-17ddfacd358e", "indicator--f5115882-1e28-4d0b-89f0-fb72a6cd020c", "indicator--43227e58-0871-437c-8692-63d4a0c75df6", "indicator--ec2681dd-f981-478b-94bb-e8d120d3493a", "indicator--f1ddc8cf-2846-4039-ba31-04351e85e716", "indicator--51a9161b-dacf-4c08-9563-69d0247a1a8b", "indicator--71f8b861-7de2-4d65-a144-098809f57496", "indicator--b1a6bd88-5841-41d4-941a-4fade0a6a390", "indicator--5b659812-52b2-463d-8113-70f8303f4415", "indicator--62c648a9-1166-40dc-acc1-6eb730e3a938", "indicator--ca2681e1-a53a-429a-b0d5-0e91592f5c2f", "indicator--54baf9fd-a4c6-4f11-87a2-835c60f16c86", "indicator--baced607-a6c1-4e4a-a7a6-edf6f7509d33", "indicator--bb793f95-1dd1-406a-ad08-bc02a43074bd", "indicator--2b36a037-2237-4449-998d-4098a28a8e88", "indicator--adfb46f1-693a-45d9-9abd-3bd2221cb680", "indicator--d52b8037-42b3-41ad-9198-2e6b72e05b50", "indicator--3deb2e8c-bb52-4215-aa35-e1bcd8a01011", "indicator--273bf3ca-c9a1-4223-ac45-b0f1affdefec", "indicator--6917a8ca-cd9b-4378-97c4-865e3cc9f982", "indicator--3f5d5f55-b384-4ac6-890b-0afe8858643a", "indicator--2ab3298c-37ca-45ec-a1dc-a41801678398", "indicator--42c1a054-2394-4d38-a91c-33a94f4d5e12", "indicator--7d8e76f1-2d15-44a4-b32d-ace624208370", "indicator--1e1f4113-01e0-439b-9d0b-f294a85ce0f9", "indicator--d6510ca1-029e-447f-b9ea-3619ae4d5c1f", "indicator--3728a933-0aa3-4057-98b3-1dc8ba5c9c0c", "indicator--07da4655-1c38-400f-99ba-f5e648c1f898", "indicator--d0ebb737-e0cc-4ee9-92c0-e2f79970ef91", "indicator--cd6c4be4-24c8-4cfb-9b8c-974205c7349c", "indicator--b0d33690-0d44-4107-b700-b00fff01b7ab", "indicator--689b9e2e-a291-4121-a867-2ff007080280", "indicator--bdb9437b-ec7c-41d1-9f55-3763432e91cc", "indicator--a1e48777-fbc5-4b2b-ab10-4622447b18db", "indicator--2d379259-ffe9-4207-bd18-b6830a0fbc67", "indicator--b3c4c6bf-6062-4a9e-92df-70bc560dd4b8", "indicator--df49e522-a040-4b8d-ba57-0361025c2f4b", "indicator--be6c659b-091a-4436-b463-47e546cf3e07", "indicator--8f932c19-e6e4-40d6-9118-f8b561db9853", "indicator--316bbb46-ddf6-4427-97ad-732a95b0123f", "indicator--2cec50c5-3993-49b3-9ede-99e50ee02bfa", "indicator--6425407d-7d3b-4db0-94a0-2a2930f6bd56", "indicator--51278a69-2445-43bd-a453-52ae9a792c11", "indicator--c6fb6b6d-6457-4943-8087-a1ad55a8b1fd", "indicator--27ec01f3-e371-4a2a-a0b0-b1d8b2861b5b", "indicator--2963c21b-cd62-41c2-b60a-2e2362000de7", "indicator--4f39166e-f279-4e27-8fa1-7a55d6043eee", "indicator--7d327807-346e-4944-ad8f-39b8043677cc", "indicator--27749999-0a3e-4116-afc3-c9623aafdbb8", "indicator--9f849a49-fbf6-4acc-8169-190ee9cd4abc", "indicator--e0fc3e2f-f4ba-415e-9950-261fe7236e40", "indicator--f8aea81c-6473-4492-9a91-b9e2cd9cd14b", "indicator--7e8b0f82-ca2c-4a5b-9f3c-23037d820749", "indicator--b00d5bcd-9c12-4878-a754-36accd2b12f2", "indicator--11ccd7bb-10a7-4543-8103-eeac70e50999", "indicator--fffb1124-94fd-413f-8945-ae73dd0296ec", "indicator--d74f70e1-43ee-440c-9587-e6595e9046d7", "indicator--11c5d7e7-d161-4100-81e9-df7dcb5d5fb9", "indicator--ebed9302-7dfe-43f1-9add-bdc2a897ba11", "indicator--32aaa2da-2385-476c-b514-fa8f25c2a215", "indicator--56fd3804-e2f1-47b9-b4e2-e85e72a17766", "indicator--ded55e20-3d6d-40f5-83bc-fd2fea851ded", "indicator--901edcda-4784-4a8c-88c0-862aab0a2a16", "indicator--f3c08a0e-da1e-48f8-950d-906d2fa2ce3d", "indicator--f640373f-3a12-4933-ad49-707fbce873a2", "indicator--301a15ad-eb66-4fc1-bb55-83145ed6ecd8", "indicator--02b67a47-2476-4dcb-8b31-c0de249eedd6", "indicator--7332e2ac-c656-48ab-bcb8-7a4e5b315dba", "indicator--74f9abbc-6580-4b0b-b78b-a416362047e4", "indicator--c19c2256-dd98-42de-b3e9-5240ab6458d4", "indicator--2d2e9408-8fd3-4716-8682-cc06b07e9426", "indicator--bc891715-b152-44f4-be45-e6a7077126f4", "indicator--c2663c4d-9a20-4f1c-80db-e0b8c474f163", "indicator--e3002b54-83c0-4a5e-a443-1147952f7450", "indicator--15792c4c-7f74-498e-81c8-77732a5e42b8", "indicator--7ea347a2-a948-4b5a-9f1d-cc5d679e4101", "indicator--f8775497-cd03-4503-8cdd-2256630563ac", "indicator--df2af01e-6ba4-4463-822e-f49a60d704f7", "indicator--0af04d87-db8c-4206-9ea8-b0d66161d9d3", "indicator--17d650f5-2468-4af8-8885-3dde36255e00", "indicator--1d57c567-2dba-46dd-9398-13e05b466352", "indicator--323d3365-3bcc-4a3b-be89-2db2b1b7ffd9", "indicator--d2b92085-0b1c-4484-9948-7428b4a6e222", "indicator--eb9b9163-ad00-4f54-9c80-cc9f902b33ec", "indicator--90486013-ad9d-4971-bcc3-42731f6687f6", "indicator--8ca4cbd5-3260-43b4-b77b-f503121c4810", "indicator--07031af0-972f-4381-bc6f-038f295983ff", "indicator--67326d02-455a-4469-9c0e-04daef7c22fd", "indicator--bdefdaac-9bf3-41e6-8de3-5e87ec52ba6c", "indicator--4e874ac0-6506-4213-b9e5-44973c4ce616", "indicator--4016785b-e4fa-4710-a0c5-591df8306ffc", "indicator--2f3fa2d8-86cd-40de-a632-29df18823742", "indicator--ccbc5796-882c-41ba-b311-eef5377203c8", "indicator--bb1074bc-6e4a-47df-b7c7-fcdbaafb7d24", "indicator--a7e00643-cf43-43b5-ba27-63584b48355f", "indicator--12cf585d-bea1-46fc-8ecc-dcd232157f94", "indicator--6a642e85-3bfb-4d76-870f-8f07580e1759", "indicator--d055e1a0-b279-4e09-bb82-780baa915e50", "indicator--b9301034-bc75-4e64-a93f-d5005d442c33", "indicator--58f08440-4ef7-477b-9421-294368063419", "indicator--7f4a6a1a-46c9-441a-baab-e4ae71633a11", "indicator--2e965004-7b99-47eb-95d9-8257118394e8", "indicator--34e637e7-8d73-4505-b536-70814dd15a3b", "indicator--a752890f-4a00-4aa5-b96a-212220495685", "indicator--4ab6ab14-4714-4497-8f4d-840bba99db75", "indicator--14a5e24b-9751-431f-8679-cede0c89762f", "indicator--4c319ea5-40c9-4193-8804-5f2cbb245598", "indicator--36c72a1c-7adc-46ba-8fa8-2fbb176b37f8", "indicator--06f84230-a8e3-421f-8de3-435229370d64", "indicator--e56c18e1-0077-4428-bc82-7cf002231dcf", "indicator--740204d2-0e0a-4848-a018-10c559557ad0", "indicator--648de8d4-9abe-4765-b214-774b717b0bbf", "indicator--4a6c66ce-1322-47c9-ac73-6d03f42e8ff7", "indicator--d53eddd1-33c1-4cd2-9029-abb294c3ed21", "indicator--14291b4a-3099-427a-919c-cf12e1165cd8", "indicator--c3f3fc79-176e-417e-a2a1-9e132e1ba6f9", "indicator--85379650-c4ae-41af-a155-130768afd2c1", "indicator--245f3d3b-94f5-4bfe-a3f8-12b788a79c5e", "indicator--84de8daa-0e9c-4908-85ca-a37fa4b79208", "indicator--8e84828d-366b-4d90-9c1a-ab2c0f5f0ed5", "indicator--75e58e6b-992d-439d-b71a-242ae8cec459", "indicator--9c32144e-acfd-49e4-b134-8bb0c32f2e2b", "indicator--4cdcb0f1-e0f3-4ce0-b75c-81fa7c2359cb", "indicator--84880829-36b3-4c46-a3e7-267571fff229", "indicator--001b46df-845d-4f63-aab3-f510cc1c3857", "indicator--fd05f933-9ebe-4416-b6f6-7023eefdd6ad", "indicator--92ff43f9-57a3-4e94-9658-12e0a6576e66", "indicator--bc23ce14-a1eb-4082-b273-29432a8d2fa0", "indicator--2cae70f1-d23f-4b67-a7b1-e2a8ae42d89d", "indicator--2744f9dd-49af-4aea-aab3-c49992d913ac", "indicator--758e2d2b-c75d-4f7e-afb6-f1937ce870a6", "indicator--2f3ddc82-f95f-4598-a211-d2f15120f0dc", "indicator--70053c14-2784-4165-803f-8ac59dfaebf4", "indicator--07ef42a3-bb85-47ca-ba2c-dd544c08f8be", "indicator--747a16a9-a6a1-477c-b233-cd6712dcf4e5", "indicator--bc6ee4bf-7461-46ff-84c6-05f08ebae22b", "indicator--4c3f8b34-3873-4283-83b3-109dc2caa5cb", "indicator--3b6a28c6-f4fa-47f7-bd7f-8b17401209e5", "indicator--80f53004-afb6-4e9e-8160-e1c67f420bc2", "indicator--dd10ab9f-6ec5-40b1-8680-f222eaafdb5e", "indicator--7d41122c-8ecd-47d7-9c44-68ef3e1cd701", "indicator--9904c733-b15d-4244-ae38-8006b8504d1f", "indicator--0745ed51-b8d3-46e7-ade3-aa87acc7d5db", "indicator--a8987cbb-da0b-4e52-a1f2-f2bc41debf8c", "indicator--76d57b19-5530-48be-91e2-6dc675f0dfd2", "indicator--29d802a1-7fd0-48bd-a815-f019ee10cc6c", "indicator--39077bfe-41c6-4641-a76f-be396a89a3c5", "indicator--ae72d79c-c121-449d-8792-2a0f99e0eccc", "indicator--3a6a5588-c0c8-4bd8-9fd8-e94e86b8de4d", "indicator--1c040ffe-1ea0-4c2b-b539-2a460afbbf24", "indicator--ebe265a0-fc68-4efc-abf0-6f4291729f5b", "indicator--e602e1a9-a0b6-4b93-89ca-ecf7124387b1", "indicator--da92fda6-6e99-436a-9a41-94d57c366f42", "indicator--95d9f8b9-9eb9-4067-85f3-513b2a3074a8", "indicator--f4e6fea6-5abc-4adc-b60e-07676d3709e2", "indicator--7e5f1dd5-6818-4361-b6b2-54050b279ac5", "indicator--e200392a-84f8-47cd-98e3-072486271393", "indicator--dc455b66-2f8e-4fec-8ef9-973a69b1974a", "indicator--caf61d31-1131-4802-970b-eff4daa3f01d", "indicator--e78a3fad-b171-4d85-b01e-806c9a9703e0", "indicator--3cec6054-b17d-49e3-b87d-a54bd64597d6", "indicator--5f3f531e-c808-41a7-97fb-cbdbed0b23d9", "indicator--b46a4970-94b9-45f2-86fb-f1ccde8368ac", "indicator--2cab270f-0875-414e-9b83-c40edd458f6b", "indicator--f3abc7d1-a16f-49e2-a7b6-a259a5730a8b", "indicator--1e2f6b64-7b18-4e0c-bbee-6d724bef07a1", "indicator--0c94de1d-e2fc-4aad-9604-9deac85d01c0", "indicator--e99b24d3-451c-4f8a-b341-53649419732f", "indicator--e91a4915-45b9-46c3-9436-ea4bf8e83205", "indicator--0d697b26-07f8-489f-93fc-7f16b9a692a7", "indicator--7c590c8f-eccc-4858-9fc8-f39666e924e2", "indicator--65413fc3-04b1-4497-8617-083696de5226", "indicator--78a7151c-8494-4528-955c-571170cd930b", "indicator--83484e4d-2d55-4893-83a8-40fe1d78382c", "indicator--0f0ae175-98d5-4bae-b8da-97978e4d1df2", "indicator--fa2a6edb-f68e-4f4a-8329-c5b4def19c12", "indicator--b24a2d11-4b27-49ad-b3d6-328a3b41ee8f", "indicator--ce9cd03d-e277-40a3-a755-57a57a8de288", "indicator--efab505e-2e85-484d-9c3e-b0ea3c2bb797", "indicator--70b48729-91d4-49ff-90ab-9c868102cbe4", "indicator--77886034-ea9d-4fb5-a814-24add1bc4751", "indicator--5b058a3e-2a70-42e9-87ab-70a3b025770e", "indicator--ce70c1a0-4fa3-48c0-a197-f8b35832fa2c", "indicator--7662ec37-0c51-4e6c-84ec-bfa3f38fc40a", "indicator--cd4c8913-b1a9-4f17-824a-136f54cdae25", "indicator--25331318-aac5-4191-9fc8-c03c4e228ca1", "indicator--30f6531d-1eaa-48b3-a4d3-7c63301e939b", "indicator--928e98aa-45d9-4b44-9cb2-1c2621c75a39", "indicator--5117ab66-d3e3-4f55-917a-f223f3af83ba", "indicator--6f792f31-7e70-4a0b-9170-6904841ccff8", "indicator--a18bb253-54f9-4232-bb37-18276e331872", "indicator--be2a77a1-56c6-4ebf-90c2-eda81cd2204d", "indicator--86994ecc-25f5-4b6e-bc2b-3a0bf167b18f", "indicator--2b612f1c-39f8-4250-bfbd-a77a1203a4de", "indicator--72e7ab66-e0b0-4f74-b14e-1c8e6909e31f", "indicator--d21b1bd9-1962-451f-b5b7-bc577e523424", "indicator--76a1a205-ec25-42bd-bd62-3bc1d4f4bd79", "indicator--755f80a1-8cb5-41c4-8d9f-809981d22714", "indicator--f9bc58a2-f31e-43de-b510-e4e09753439e", "indicator--623bd2f1-baaa-4498-a319-fcb77972a7eb", "indicator--cc612ca6-cf6c-409a-a215-8233a6d55a45", "indicator--2cdef3f5-7f8b-4064-bd71-c539e1d445d2", "indicator--15b2f1b8-373e-4b49-9856-47fbf59848f3", "indicator--e4c61e5f-6c78-4154-835a-042dba00d41d", "indicator--02d2f0df-03e9-42fc-b6aa-90538d7d7c1c", "indicator--ff6033b0-f655-478f-9263-46e97cb353dd", "indicator--7f013d5e-be6f-4095-a43f-67506a90b26c", "indicator--91a6ec66-eb06-4952-bdbd-f1e2457e9d95", "indicator--508db384-5b0d-491d-9725-3ce6ac9dbc92", "indicator--9c244e44-8c13-423c-8193-577270e73fdd", "indicator--e87bd38f-ae0a-40ec-afc4-ece293446659", "indicator--5191a578-c679-4d48-a3ec-2c07878afb3b", "indicator--51b4ad46-2187-4b9e-8c46-aaef34c3ff7e", "indicator--b524fadd-73ac-4899-997f-ea0a65a05053", "indicator--55db2237-5b0c-49f5-b12e-4b7f3d9fc1a1", "indicator--8d45b0e6-6b06-4ada-8707-97c074e684b1", "indicator--d7bd1b99-a569-48f2-b541-93c9fd0548d4", "indicator--10702f3e-02de-49eb-9707-09ee02bd7589", "indicator--7c950c82-70dd-4d57-8e1f-fae7f7939bda", "indicator--1d397775-a83d-4f46-96e2-d977c795fc61", "indicator--aa10856d-b96d-4b1c-9154-8a0939c876e4", "indicator--097b8297-1bcc-4ab2-be7f-0f2ebb7ee04b", "indicator--c340c384-9e95-4013-b711-03850ae67320", "indicator--cc6d7ba1-1d37-464d-8aec-e560c8f12a93", "indicator--c81c77fd-335e-44da-a229-8e2e71f4a00f", "indicator--be52a9df-1234-419f-91d2-b34f23f0d232", "indicator--2dbc303b-b7b6-4bb2-995a-8586af85424e", "indicator--c1c67eab-9eb3-4113-86b5-7e9075338167", "indicator--13790735-b6c4-4aad-a6fa-8919af20c842", "indicator--306ef391-43c2-461e-88f2-d7a8338a711a", "indicator--0a92de5a-3669-473b-ad31-36a2d5dd2992", "indicator--ea09fc3d-94b2-4064-b36c-d38f208f2e83", "indicator--e5ea113a-bfa7-4ca0-b7df-0f1e93758e02", "indicator--a0950c05-5bf1-48ce-83e8-1ecd0d5b60fa", "indicator--ef2d974f-af9b-4100-b11f-015233c128b6", "indicator--a8b11b7c-3faa-4876-a7a3-52e904066261", "indicator--d8258f05-a0f3-4f9d-b9e2-23a40d7b9d9d", "indicator--a4aadf2e-b36d-469f-99a5-04f169196f71", "indicator--99c5af95-76b3-438e-8780-5ee7520df6af", "indicator--8843fcb6-5c43-4ff7-b27f-41998e327b0f", "indicator--3a54b0df-cf8a-4c98-bab4-3403776c5202", "indicator--01415de2-367b-4a6b-8c4a-ba74892cd16d", "indicator--1a492247-e157-4438-80f9-9f23e461f4f0", "indicator--4ead3378-1122-4e37-b4ba-3d3e868145b0", "indicator--27e33f8b-151f-4bed-815d-ed47ca47c768", "indicator--1558fc15-9eb5-4c88-86b0-f2ce08c4c0af", "indicator--b23159ae-e846-4c9e-b38d-a8b3ac7f4a66", "indicator--53507ace-cc72-455b-a0d2-4ec0933eaec6", "indicator--4d0cc0e5-d18a-4e8e-a6da-79f3a3476edc", "indicator--cc19b1c9-c9f8-4f66-ad4d-4c01e270cf5b", "indicator--97355313-44f5-4236-afc9-d0bdc7f78a4f", "indicator--ff3bb4c3-bf3a-4d67-a520-f3e664629eea", "indicator--b49c4a4c-748a-480e-bd71-07487323ecac", "indicator--44ff4a5f-7d95-409e-8e4e-1ac94c742b7c", "indicator--e1b71227-6412-4375-996b-1842b94483b9", "indicator--d8ff7f98-4998-464d-b2f5-2f154595bb0b", "indicator--814b46e0-7be2-4c63-af9a-f8fd146ad20c", "indicator--854db7d3-d5c3-4567-b1b6-084dfedb1f7d", "indicator--108a2104-d2c0-4e4b-b27b-3a3e28c81da6", "indicator--140642e3-759d-4ee4-b71f-8bc9bb255e2c", "indicator--e003d514-5d90-4dee-b7a9-a25743c210ab", "indicator--9c805714-a570-4269-a9a5-7b7e7f1e3eae", "indicator--194e72b4-29cd-4e3d-9a3f-5ca4d4063e0c", "indicator--31f76584-b702-4119-b732-dd1fe491ab94", "indicator--2a0b61a3-5da7-457d-94ed-4424857a231c", "indicator--0272aa9b-5ba8-4df8-bab9-bbf32cacb9dc", "indicator--e630c2ff-78a3-4348-ad99-e097fc110eee", "indicator--ca1fae8f-abe4-4d0d-a521-84afd85d10d5", "indicator--9b9ac626-9a1d-4aa2-90a1-fdabce87a77a", "indicator--b04ee178-63aa-4fb6-945c-44f79fe8ea79", "indicator--40f6c321-6abb-4bd4-a2b5-33fee26126eb", "indicator--ea1f9dd4-ee4b-4561-972f-38593f2cc08f", "indicator--29568d61-b939-4db4-896e-957715d3a635", "indicator--d7e2f81c-2e4a-482f-9697-c984e387de64", "indicator--99dcc351-afff-46b7-9232-d53d3112cbd3", "indicator--ad85a1c1-07d2-40d6-aec0-b4282d5ca123", "indicator--4358b626-c569-4a69-b1ce-c34e0a4b14a7", "indicator--b090d520-7f39-4e3d-b385-f6089ef8359e", "indicator--b4bf863d-b803-410d-8b81-545e9771356b", "indicator--5e5aae64-f710-4286-9c72-7d1832ec8baf", "indicator--8da0556b-558c-4de8-bf07-a3b964a9df55", "indicator--f286ad1d-2a72-433e-a4e7-910f48bfa927", "indicator--5c599a40-3f93-4b3a-a859-50af6d0ccef1", "indicator--4cb37739-ecf5-4d9f-88e3-aedd7a721938", "indicator--4146e315-a718-4dc3-9b9a-a7878bfc3814", "indicator--237ed22f-0e2a-43ff-87fb-ba33207bb749", "indicator--b25fe6db-6990-45a0-bf53-bf7ec6a89585", "indicator--08fcf99b-219f-4789-8682-90a4fb9599d1", "indicator--a85d44db-382a-4b08-9353-df77492176a2", "indicator--529771ab-135f-43ec-885a-c555200ca764", "indicator--fb3bf129-47b0-4f7e-8e09-b12904645d92", "indicator--89e95f71-ff1a-4e29-a6fa-108493c44c3d", "indicator--270db484-cd59-4b49-b8b3-af0a11e73b25", "indicator--5982d421-3cf3-4678-bbd4-6ace8dcbc3b5", "indicator--ba39d175-b3a6-495f-9c08-d0972ac22188", "indicator--93156b55-a098-4420-8c3a-c57eba370a2a", "indicator--d71d976c-677f-4228-bdb0-f3832352ee1f", "indicator--aacf21b0-f139-4e2e-9a4c-15d1f1948cbd", "indicator--b56f2d80-8305-4f5a-a2b9-025c121195a0", "indicator--1192171c-64e7-4ede-b338-f51eedec3c97", "indicator--cef1629f-12e6-4ab3-b4fa-cc8fdb3fb680", "indicator--2fe1cf77-5682-417e-af5b-e513694e8a95", "indicator--a8cee0dc-8bc2-4d83-8a44-8ef3485b4954", "indicator--96b3c410-ff2d-4d7f-96ca-8448d210c620", "indicator--9c41e54f-3fe0-4175-a6a3-c9ea1860e14f", "indicator--f9921359-787c-4660-b208-98b3bc2c1740", "indicator--10213b25-0d51-40bc-876b-eefe895bd62e", "indicator--0cb2d752-58c9-405d-a07b-26f414a8e372", "indicator--e9d37581-1acf-4085-96bc-93b48b9aa9a4", "indicator--963e09a2-8d16-4f9f-8cb8-b4a7d3e30d92", "indicator--4365f7ba-ab0e-4947-b6fc-1732524aa256", "indicator--84c736f8-443c-45f0-a98f-4d8dc28423d7", "indicator--4a2c0416-79f5-48d4-9d03-1d2b11eb0b84", "indicator--623eb334-ac03-411a-9dce-4469df5ad91f", "indicator--e9e8fa6f-2461-4953-9a14-5bb55fa566b7", "indicator--f4f098a3-d746-43a8-872d-373f99f376c7", "indicator--ce3140cb-f333-4383-8bef-68121d29130b", "indicator--621148e2-b6b7-42cb-bff0-f8f3038856d2", "indicator--9bbf2957-c05a-4a4e-8bd8-e5923c99b296", "indicator--d797bf30-fed8-4274-8ac7-9b9e39833ba2", "indicator--2ae1e68c-8f1c-4513-ba8d-720eed4dce06", "indicator--e1d9ee22-8610-4782-95cc-7bb4cfd5b020", "indicator--df97cbe6-cfb8-4254-8b10-c0a65ccb4244", "indicator--a6933c65-cbb5-4984-ad2d-a994411fbffe", "indicator--a9543935-d3b4-48c1-8194-4db1c6eb6b66", "indicator--15e804fd-32e2-49ef-8c93-49a63bd41ba8", "indicator--b2363aa5-81d2-4cab-b80c-bcb55cd1745b", "indicator--1ebd9667-a088-4c54-a716-0ecc281ce2c8", "indicator--06b76a36-c088-4721-a1d3-008ca0580f69", "indicator--2199b404-0975-4aee-a99d-950ea51a9d28", "indicator--54a97629-5fa7-42b9-818c-fbbf22fc4f40", "indicator--482abb15-b49e-4520-b4b0-e7a4b574a6ff", "indicator--3a775bfb-0be7-4ecc-9d2d-3fad0d6e915a", "indicator--43a926a9-533a-4c85-ad69-186d96c84fdd", "indicator--9c5a4596-3bdd-4135-a48a-4905fc2de9d7", "indicator--3ba67c38-9970-4d52-8ae9-4fb572c17c8f", "indicator--e93bed42-f2c7-4a25-b9a8-5fc6fd353eac", "indicator--484be653-8e7a-42d3-9c7f-500907747bef", "indicator--3bcfdf2c-eeff-4624-8256-24e05c000905", "indicator--4fd576c4-83d3-437b-93e8-6265dca6261e", "indicator--61b10545-882a-4d20-887b-151d87b8f9e1", "indicator--9c52fd3c-7080-4847-898c-b04678d7bac9", "indicator--e0e12520-8cbc-40a7-88ae-7abec6b414e5", "indicator--e76d71e8-008f-448b-8c24-29bc66456849", "indicator--64a9269b-9cd7-40fe-8da6-52e7474e0406", "indicator--430646d0-33e6-403e-8407-709e558d04f5", "indicator--fbef632b-c0cc-4d57-8724-9744921fc89f", "indicator--92f1c429-0130-4417-9aea-b5382094648f", "indicator--c9642830-c201-4b45-b38d-4fb5a758ef8f", "indicator--2a3b476d-16e3-4e0b-a32f-a76dd7c15336", "indicator--ef8ea33f-428d-486e-aaab-9cd863f14249", "indicator--9cba34ee-ebe0-4cae-bc80-b98b2d758dfb", "indicator--255151f9-807e-44ca-a230-fc405e02e452", "indicator--365cc3c6-143c-45fe-8596-620e69d582cb", "indicator--150ef49b-bc7a-426c-942d-5e2114189fbc", "indicator--3eabaefa-0f0f-40c2-8638-a4e3c24500c0", "indicator--e0a43db4-cc90-4b40-9e80-fe7dbb28fc22", "indicator--97609ef1-766b-407b-8b5a-16e5ff3d8c2e", "indicator--a39af141-6625-4446-ae85-b0604fc38206", "indicator--f3418508-e88f-405c-b55c-013cef72cac6", "indicator--9ab6ace0-4882-43b9-8079-a9682d19d4cf", "indicator--996dbb51-1f90-4a06-8eab-f3e3a03f6852", "indicator--21f3ac3d-86fc-41a0-aa06-fa291ffe9a55", "indicator--1e5c4b62-a9dc-475a-b93e-63aa755a9c46", "indicator--d8bb9a88-f5c1-47d7-87d7-984dc44ea20a", "indicator--76dd38ea-7bb2-4790-bc01-e671b9b589ae", "indicator--d795e2b0-2dcf-422b-93f4-58b773df0351", "indicator--9ba769d2-95b4-43c5-8be3-98e43855063f", "indicator--67e7e79e-df58-4212-8182-51c4bdb74bfd", "indicator--afe26159-d8f3-4d7a-8eda-d947f232a4de", "indicator--bc01d40b-4821-4da5-a17d-26b82038264e", "indicator--952b9472-1c69-4e38-94ca-4e7021db0b40", "indicator--ea285d4d-33ea-45e2-a024-db79ecaf17b8", "indicator--9eea5a55-f811-4862-a7b0-a4651e1a617d", "indicator--6fb5208b-788d-453f-ba5e-7c80ff2eb45d", "indicator--77b75a11-f47f-4d43-b7c3-fc67f9f19a75", "indicator--afe0ef9f-df11-4dbd-8b36-addd749aad51", "indicator--444b3fc1-8922-4d39-a531-3e7a26e71394", "indicator--941f8b15-08fc-40c4-812f-6f3fdb25c27d", "indicator--c93cdef2-ef6f-41e2-bdea-05b1726568e4", "indicator--857abc16-91be-4acd-b996-e42b10a1259c", "indicator--39660155-1be2-4cf1-be0a-068c0f95db71", "indicator--a1f0684c-522b-4a57-93ff-e6f37843a10f", "indicator--8e8f9b3f-bef2-402f-9757-62c008d280d7", "indicator--3acbdcca-99fa-4abf-9132-bf0d3b104c44", "indicator--9ebd0dd8-b26b-413e-a5c9-c23a18bf0408", "indicator--9ac7cda2-45e5-49bd-bd4c-c7cc345a500b", "indicator--4bd07d2a-be77-4109-a499-09319708bd85", "indicator--fbe47933-9099-4f34-bd27-985d9080cb42", "indicator--03144dc5-8f06-4c1e-8d90-459d9b48682d", "indicator--7f3703a2-1429-4497-9722-ea13ec6d8cce", "indicator--58aea122-2aec-4cf5-b0da-4ade43f53f2c", "indicator--03c5dd7f-5dd3-47dc-9282-731ef2815b95", "indicator--fb07b8ec-7ecf-4c2d-9f92-d3f6c8c29c0e", "indicator--307774a3-563b-4b12-94fc-f4c08bb20e55", "indicator--85832ac8-7ef4-4a70-a81e-b982bc44a8f7", "indicator--8ba1859f-2a63-43f2-b32d-1e3a74728e01", "indicator--7177a602-0e37-4445-a924-61ca9aa2a100", "indicator--4a7d058d-fa4c-4bf9-9e83-edc616280a5f", "indicator--d9863aca-245a-4981-9d99-1041ad2ff0ef", "indicator--80ea39d6-ecb8-465f-98e4-d04d99560e4c", "indicator--aafd1815-4adc-4e3e-a158-cdea0f44d6d0", "indicator--de62ba4f-0fd3-462e-8046-ff2be061433a", "indicator--afb446dc-a5d7-49c6-943a-91bae45000ed", "indicator--c6771788-8a4b-4d4e-9fc8-8d4166e3199a", "indicator--f35a6022-cea2-4098-a9c9-29662f54c4e1", "indicator--71012c73-db21-4300-bdbf-9183fdfafa89", "indicator--ee2c5f4e-6181-4ee3-a4e9-3fe2681ceec1", "indicator--2c8b5223-0dc8-47db-be56-369e2213f36e", "indicator--665946ea-bb25-48af-8f66-326967c2ceb2", "indicator--d5f77d49-5064-4654-9355-04c74b78a3c1", "indicator--10edf0be-863d-49f0-8b92-3af26d341927", "indicator--9a366c62-cca1-4d4a-ab4b-7846f0f6a723", "indicator--9d0530e8-c159-4d45-8cef-c025b06d2c13", "indicator--ba9034c5-0678-44c2-87ad-03a37bc4e89d", "indicator--eae6ae28-3ee2-43d1-aa73-c541b50b2558", "indicator--2ba376c6-2955-4719-a0d0-fab62d118cd1", "indicator--9308841a-6ece-4097-88a2-a194968b1af1", "indicator--bf80335d-1a86-46a1-8056-63d9f8a15710", "indicator--d57b3a98-3136-4acb-9483-ef2a430105a8", "indicator--cd958097-a605-41d5-9a14-48a75e3a90bc", "indicator--e15f55f0-be83-435f-a7ea-a105f3b71518", "indicator--4c507736-fe66-4dea-a3dc-bd0ff047227c", "indicator--3c6e63df-e725-4555-a68b-38c1ca41dba9", "indicator--4078dfa4-e0c6-4e34-abd5-f3d82f9f18cd", "indicator--66fe55c0-620d-4efe-ae15-15fc6bfc73d5", "indicator--3747885d-b7d6-4eb0-b261-341edd7323f6", "indicator--63e42804-a4ca-459a-92d0-65ae546dd124", "indicator--3ec31b90-3d3a-4b47-8538-99219f03a5c8", "indicator--5fdb86d4-51d1-4c8c-a780-e498a392bfdd", "indicator--a3aff060-0f3a-4b3c-93e0-ce2304682610", "indicator--d48e66ad-4f42-4bf6-bc01-0ddf7fac76e4", "indicator--08c1a9ee-51a6-4a67-83eb-d44edc025868", "indicator--fc20b2e0-7c00-429b-9525-3c62d658cb7c", "indicator--b0942f4e-be32-45c5-95e6-32be24a32b82", "indicator--f561899d-2aa8-43ea-b7f1-9d76e78a4abd", "indicator--5540115e-b69a-4f90-8d7c-0be67d08017f", "indicator--baf238be-e423-4dff-83b2-08ba5ff6aeb1", "indicator--9753588d-32f4-4bbb-9f89-15c9517b9762", "indicator--354e286a-1b6f-4853-b491-123a14011e73", "indicator--a8161d36-5163-4056-93bf-841e6ce8d88e", "indicator--4eb702fb-ef8b-485f-8cf4-262329298442", "indicator--d52cd9c1-51e3-4afb-8587-84d2c41db17d", "indicator--830f8dcc-d4bd-49c0-814e-65965eebc16f", "indicator--97e68842-8d33-4734-8dea-71233b1aa374", "indicator--20339c51-e827-44b8-98ee-f6f5671fb7d1", "indicator--fadb6129-86a9-48e7-8762-745fef111567", "indicator--3538519b-4759-48bb-91e3-78754024f479", "indicator--cb2152b4-c259-4ee4-9967-bce22c3a57b2", "indicator--38ff014e-7b8f-441c-82b1-82763c627324", "indicator--0967db6c-e4c2-4333-87e8-dcdefb42c83b", "indicator--656816ab-facb-44d3-a05b-1b804e906f28", "indicator--10d3be63-90b3-48fa-8b3c-a3f71d2d9ff5", "indicator--3fb908e5-77fd-4e51-9946-e607549c8d19", "indicator--fedf3bf2-b5cf-438f-8af1-559231bded9f", "indicator--3ee9f98b-a293-4dbb-afb5-ea65e98d42e9", "indicator--3e9a218f-4869-47db-8b22-b7eb16503fe0", "indicator--57e4849a-cad2-4ad5-9cb9-4e027e775e39", "indicator--d5f1155e-042a-4d81-9ce0-c1b389436e85", "indicator--acb10f1a-3bdd-4e2e-aaa2-5f583abaf38b", "indicator--6c73e690-414a-41d7-bfb0-7ce9ff667484", "indicator--d1c781a9-915b-45a2-b2fe-eaabb5b5f1f0", "indicator--0d5f04d6-b92c-4481-9121-f6a82b281f09", "indicator--47f914d1-598a-42da-97e4-7b03f0e3e8ab", "indicator--e61487f8-eb92-4cf9-89c9-db7ae81cff33", "indicator--639f7e88-e825-4773-aa64-759a868cd3bb", "indicator--da5f84b9-6f44-49c6-b051-e2ebaaeef9f6", "indicator--f40c4dd1-e83b-48e1-bb8a-90a24ce846b3", "indicator--909e6069-8e6e-462b-9d25-2344545d6e70", "indicator--d139bced-be15-4e93-848d-16f4abe602a5", "indicator--52d6b6a5-eb32-4a2c-8e49-ae641ae5275d", "indicator--9718fbdb-3997-4dbb-9da2-366d43714264", "indicator--bc948e0e-855a-4a33-8793-cf2b9bccb4b7", "indicator--063a4c54-e56d-4fd5-a9be-79f1e70d59e1", "indicator--4a6db37e-02d3-4917-a1d4-11312172e6c4", "indicator--d564138e-6fa0-4eb0-bb96-349c35b3d8d6", "indicator--13fc07b8-d264-451f-87ba-8e7ca1173a0e", "indicator--1b1c3170-d9c7-476f-98f0-a6a38a56e864", "indicator--dcc0a75e-f8c9-4597-a515-ea9fcdffa95f", "indicator--584c4404-784d-45a9-86b7-26c405bf9b47", "indicator--a7d0e0be-65e0-4e82-962a-0e269b5a2acf", "indicator--291d6b8d-cde6-468e-8fee-ea5228c2321a", "indicator--da2635ef-c80d-40a0-801b-203dff166c88", "indicator--e807b61f-6a35-4186-9cde-b692fa641f6e", "indicator--69b7f5ef-71d5-48b3-801e-d8d9ca075bc7", "indicator--90f9c343-caf6-4fc0-bf62-685e310637e6", "indicator--b56028f5-833f-4887-aaee-c59c42507035", "indicator--9e9aff39-59da-4fc7-93b9-c936b78b2e8a", "indicator--c344f56a-0750-44a7-8bea-c65070a67515", "indicator--1aea6311-2167-4852-99e1-1197abdc8297", "indicator--0e1f9586-f9f0-4612-8ea3-b76085f98738", "indicator--20f1cf80-3b35-4796-9f0c-614d1b9c7ec4", "indicator--f8370f49-890b-4af6-8832-8fbeefc8c6db", "indicator--43c5b799-64e5-4834-a631-1ec5530e6680", "indicator--9cbe7a9f-a66f-4e5a-9421-b09e5492bd8d", "indicator--1d7f071c-0029-4ceb-9c6d-a8029f8c52b1", "indicator--52ea18b1-fefd-4978-97bf-268ae57e3a67", "indicator--b1e480e4-3760-45cc-b565-725fc800d304", "indicator--d77fa10e-c767-45ee-86c0-7934663ba56b", "indicator--4fc873e9-8774-460c-8ba4-72a30e111653", "indicator--981007e1-02b8-46a1-be95-fb11a00ed275", "indicator--f6fd908d-7d66-4ca9-855c-fa8120ec645c", "indicator--9c05dd05-cbc0-4954-a97b-60294488852b", "indicator--94b257c4-ad32-4c55-b5ab-1bc4bae67e5f", "indicator--af21c568-26a9-43c3-90b5-68105dbaf43c", "indicator--8abbd0a7-609e-466d-9938-a82b2dfc5cc9", "indicator--f2c1f0e3-848b-409e-895d-1cbfbd59869e", "indicator--846ceede-4792-43b9-aa11-e29d91e590aa", "indicator--933da2c7-0f02-4987-8af4-9f89afceb9d7", "indicator--ac59389c-1df6-48eb-a0a1-92e866ed9ff4", "indicator--ec2d9b30-cd10-4f50-b26c-2078eb68f5a9", "indicator--babe7327-0227-4526-818c-2321b30e6595", "indicator--587e1071-6b2b-4826-8646-4db36b8ae1e4", "indicator--e5b78d38-40fc-4ba0-838e-e6d35eb927a6", "indicator--85e6700b-f546-486d-b0c5-bbaad74ee7e2", "indicator--a009c729-93e7-4dfe-bce8-d364cd80009f", "indicator--fb3ebb90-37c9-449b-9dac-12929f6e92dc", "indicator--2505b16b-b4c4-4530-9117-6fe37c2b942f", "indicator--c4c9e258-3524-44c4-92fd-4a7e50b89f45", "indicator--2bac8dc8-3849-4de2-8ba3-7d868d8ee3ac", "indicator--6986f6f6-759a-4044-9112-9eb22bfed6e2", "indicator--63593135-35af-4870-917e-bb79432ec397", "indicator--0abaffed-c91f-4d1f-8b71-0a6953085d85", "indicator--f9c1be5c-65ef-4350-b7d4-cba9bf242ef3", "indicator--a61c513b-fb08-4709-9eb2-c0b53d124e08", "indicator--58282622-bf86-48a1-91ca-84ff713d90e1", "indicator--1c054106-2758-4a82-bbbf-b448c5970719", "indicator--6b314c56-ff1e-4b73-9a17-2c86d93b89de", "indicator--bda50433-4d8b-42d2-bc20-8a69e7b80220", "indicator--7b172501-a15f-4af7-9157-58e2e50bcf4e", "indicator--4fdf1203-8dd2-4459-8d7b-2dd6f9f91bc3", "indicator--8df3a755-f158-443a-a312-2ed27cb446af", "indicator--12ea14df-8a2f-4030-bd85-d9a522cbe0e5", "indicator--bff56f53-4e0c-4f72-b719-2e00853980a1", "indicator--0e269747-b4d9-45d6-bfa1-d51e0e29f47f", "indicator--03e4cd1b-8891-482b-a8ef-d33a2fd982d1", "indicator--0611a33b-c775-4832-8565-440683b0bf68", "indicator--4244df4f-3c30-4a0f-b8df-035b42206855", "indicator--51244331-c661-4bfa-b696-b744c65292e7", "indicator--4ac7f477-9ae3-4f98-a8c1-e9020b3c3b94", "indicator--06a1b463-0866-479f-943a-4295ef230af2", "indicator--4ff6f411-a5d0-422b-8b1f-68dbeb767233", "indicator--b6908102-167e-465a-a540-fd3ec530a171", "indicator--e0cc0824-b3cf-4263-8228-7ba1f52eb76c", "indicator--300bfeb8-81e8-4ebf-8d53-7400b9dccfef", "indicator--58d1451d-f120-4017-8f85-f9aea235f33c", "indicator--f0d0c786-ae6a-4f1b-bc6d-0ee6a933911a", "indicator--6d220719-a5fc-44d4-8c8c-798006ee3e58", "indicator--6bb48eba-2854-43b5-929d-565519caaff1", "indicator--5453fbda-f1e6-43aa-a9c7-4d7d59ad49c2", "indicator--470c60b0-e011-425b-9c9b-1f0aed840d1a", "indicator--a0ad1e7f-1972-43e1-9029-eefedf63eaf5", "indicator--b19ff231-e4a7-4932-a89c-1bb383ea9c53", "indicator--e3b5a2c4-501a-4275-9685-3ecc209e7141", "indicator--67c13860-0641-4d55-9afe-cce3224ad5e0", "indicator--2b3e1302-a9b8-4bfd-b647-5cfce1ddcf3a", "indicator--442147c9-90bd-441d-b027-ead5ffd06260", "indicator--599716d4-5654-4097-bc12-7e81967ffcf7", "indicator--e3d59861-2d5b-4924-9b42-c006500dedf0", "indicator--52dc5725-290d-4dba-ba8e-c4b7be47faa0", "indicator--5b4af732-f5bf-49c1-a16c-aa4fdb202d33", "indicator--a5791297-ee78-4af4-af4e-f2e54eaa4fa9", "indicator--ef2094a5-8ec9-40ef-9c65-e61bc9b027d7", "indicator--1a31a14f-4a46-45d2-adff-f914d3352da0", "indicator--bbb2ab81-79ed-495f-afa4-376b28981c1c", "indicator--0f754529-bab2-40ed-ac1c-23a667b1b7b3", "indicator--efbf0602-292c-4c2f-821c-d7d43bd111f4", "indicator--8d4cec68-2411-4c98-b8d7-63337c764fff", "indicator--a7cc3396-283e-4d8f-9e50-61f05b17b46c", "indicator--55140131-e4bc-4cfb-a1d4-5d727a2cba89", "indicator--a64c9aee-8475-4fbc-b035-9e07f39592df", "indicator--94b645f2-4d6d-477a-af83-606c49a8da10", "indicator--2fc05144-2427-4eb9-86cc-994fdbef608d", "indicator--b535f618-36ca-46f6-8acf-51a32ec92285", "indicator--fd61e023-e27e-4541-950a-1954e52568a3", "indicator--45f24acc-eaf4-4618-8fce-e7aa65f54df8", "indicator--a576fec9-ee1b-4b0c-8d6e-683c785109b1", "indicator--d612f9e3-aa40-4c13-a0ac-f1b02c0f57fa", "indicator--5770c791-a8a7-43e1-bc2f-39ade975de51", "indicator--0d5e4395-f191-4d3f-a5a0-cbfd98014327", "indicator--c4d8a40b-3e3a-4693-b92a-36ed2f8c6e1c", "indicator--bcf20af0-c804-47af-9308-eee03b6c5887", "indicator--029bf42a-da23-401b-8be8-3d665d84f2b9", "indicator--2c1f7148-5205-4f85-a5aa-29ad04352108", "indicator--2f8d9927-c41d-4069-bf4c-8ed59c52738d", "indicator--42a87dd2-e76c-4ed7-b184-c21eb43aa7e6", "indicator--861d8370-3b4a-4021-9c6f-bbe97d265418", "indicator--e4d24cea-1b11-4f75-a31c-400bf5f0ae35", "indicator--5e071132-060e-4e57-964f-d7708659f09d", "indicator--c2af273e-28e0-42e2-9815-d70eaba5c482", "indicator--8dd07b76-8834-4976-b032-67c4bd3eefd8", "indicator--a8cbc8a8-eeae-4cec-91cb-edb908b494ff", "indicator--90071988-4c83-408a-9507-69f6451f6757", "indicator--ebdeaf42-f0d1-4f8a-81d6-97118b8b8940", "indicator--c59297c1-bd68-4542-afc7-153113fb5b5e", "indicator--3c268c40-c246-4079-9566-74db2a7cdcab", "indicator--984a3298-19b6-459e-8fcc-11c583dab089", "indicator--587b03bc-7ce2-456c-8a7b-6bc970940584", "indicator--70618a19-d831-449f-ba91-4caeab5fa544", "indicator--93a10fbf-0156-4a91-a990-af712f690b7e", "indicator--22762e54-8dfe-47a9-a09e-64dc7e1312a6", "indicator--4c51561c-c2d7-4b01-aac4-2bc4d4520a34", "indicator--79ca7e23-7a5e-4d1c-a8b2-404e4b8e0283", "indicator--af705103-5938-497c-9809-da51f3ad93b8", "indicator--4c38164f-257e-4c82-a604-3ab2fac53436", "indicator--bb603a28-1ff6-49c7-87d4-563510b5df5b", "indicator--3b8d45d6-9a72-45bf-88ae-9c546e1d4549", "indicator--21d70b5e-351c-40f2-9bfc-c21dac26d54c", "indicator--ff5644fd-2ee4-4cb0-b86c-44302a9757db", "indicator--6065b00e-62aa-42d9-a096-08c075bc2d47", "indicator--4f678749-89d5-44e4-9588-c06bff53859b", "indicator--e59cb4e5-6c7d-4f21-91c1-5165a08c7202", "indicator--f2e42a94-c482-430d-9db1-addd1ed71045", "indicator--cbd25a7f-76c0-4e4d-aae1-3295ae7f8200", "indicator--45f1a263-f00b-4394-8d3b-612edd716ead", "indicator--fd7723cc-15c9-4cde-b986-4d41cd01726e", "indicator--af4808f6-00de-4666-ba04-ce2b6f9d76e7", "indicator--e6ee10f9-6082-4e27-b874-74c8a13a8066", "indicator--6a931b58-da69-40e2-9ccc-ebe303096d75", "indicator--784878fa-2dca-4e7e-bd93-0bb63f222d80", "indicator--6de1f6d6-c987-4d06-bdfa-92785878d596", "indicator--79085023-5da7-44da-ae1d-6946eda18e23", "indicator--0ea9c872-e132-4136-a27f-7c9260a58a26", "indicator--9198682e-7bf8-4c77-a6ba-fff361e07456", "indicator--15912cf7-955d-4874-93c6-e7c2deb320bc", "indicator--0c825d12-f803-4468-ad1d-a27784769edf", "indicator--2583d1b7-4131-4406-961e-080b2b46f6bf", "indicator--728eb9e2-2276-4ecc-905b-17431c823136", "indicator--52d2c388-9be4-4c45-9e5b-8fff82754c46", "indicator--32d5a7f5-1190-40af-a913-018cf12a0845", "indicator--d495a5e7-e95d-4881-a9d1-eeaa0dca1dcb", "indicator--baaa2f64-1ba1-4f97-989a-4a5e1950a431", "indicator--cee4d4b0-8e66-40c6-9833-97dd746f6476", "indicator--f53d3bae-412a-41b1-ba39-e31b15b22e61", "indicator--c11eebc8-f446-483d-9607-73bae38e33d8", "indicator--a78ad847-186f-4eed-9810-cd2ad195db19", "indicator--861df15e-9cdc-4c87-80c6-c6ad8601bfde", "indicator--1f719e63-4c26-4988-a4f3-3135bc9433d3", "indicator--b33c90b7-844a-48cb-b7d8-c6d7157f25ba", "indicator--8ea835fb-e396-4b0d-90e2-87852f64025c", "indicator--dc7a8cad-527a-4a5c-a066-f9657491cc32", "indicator--89c157b0-dd30-46ec-bee4-a1db22b7399a", "indicator--6a13e584-e4b1-49b2-a4b0-298bfa085f6d", "indicator--8d2ae722-f62b-474a-9b78-16c89ef5ded9", "indicator--6560a5a1-341b-4893-a5c9-cfc85601adb0", "indicator--208ffa31-737c-4266-9de1-362828b679ba", "indicator--28762251-3325-411e-87b9-6960a1d73584", "indicator--5e4141f8-cb2f-4106-abe7-727efd1c2aa5", "indicator--34f19df3-3895-405f-b15d-a7f3c69dfbeb", "indicator--ac09d5eb-fa93-4ee1-a421-3bca02e813e8", "indicator--844a2261-fae3-4ac0-813a-cf9b20ad94a6", "indicator--ad755c74-0cc3-4689-a6ca-11819a1fb069", "indicator--8d20f258-9c3b-42f8-b64d-1b685d4a8a71", "indicator--123b68d3-42da-4082-a207-eae884ffe5b5", "indicator--a6a81286-781b-4453-8e29-846072cfbe05", "indicator--4c0882f3-836c-4296-8a84-bf408c9b7f93", "indicator--faac7180-e04b-4d22-83a2-e66c4ef3e5c1", "indicator--ea924729-62a4-417b-8475-5bd0716f3596", "indicator--77d088ed-37b7-4af5-a414-8bc29bfc417d", "indicator--09b73fe5-af28-444f-b59b-15c11433aa88", "indicator--c7e5fec0-08c9-4af2-8a7c-fab9be42803d", "indicator--09cd2753-691a-4183-97a7-744e3c6ec840", "indicator--c314b754-c6f7-4b06-ad52-1854a0ed2c60", "indicator--06410803-9178-4712-8412-0c9900914b31", "indicator--b6217697-6e50-45b7-83f3-8fa03693a13e", "indicator--1c614e66-adc2-4454-9f22-b0a12fe59e8a", "indicator--d41adb1f-ae47-4877-9ed7-095623bca7d9", "indicator--ce373da2-2b93-4d5f-9037-58c23f13ee8a", "indicator--7889e737-d304-4593-a864-651594ee18f0", "indicator--c8289c07-82ec-47df-b26b-71d6b250f4cf", "indicator--3d1bf9e8-a01e-490c-9637-af8ee6e08c31", "indicator--5ddfab51-787f-4d1f-9bd2-0f84da71c977", "indicator--3f804228-594e-4248-8acf-f99dad02c7e8", "indicator--3b342e77-8ef4-4498-897f-01c2893135ac", "indicator--31bab0a2-d4b8-4f0d-9667-afe2ab7a02ae", "indicator--c3cdd173-4fcd-4745-ab55-1529cf49be67", "indicator--b6761435-185c-47b4-aa35-03549b87b02a", "indicator--26ab12ac-8dbb-4071-983e-d7e46794002d", "indicator--0d5fc89c-54d0-4c32-aa89-3220a5cde099", "indicator--c064b54d-234c-4496-8e11-0a8f6ce77ba0", "indicator--c6d5c290-1063-4c78-91a5-296a0e5efe3f", "indicator--3c006211-fdb0-4bec-95ed-b2f26b16b639", "indicator--6e65e54f-8cb8-4fd1-adfe-9fa100b073e8", "indicator--3157bec9-d70c-4299-a663-c18f714e64df", "indicator--6dfff3ff-03dc-468f-9c66-fee0f6553c5a", "indicator--6a35da2e-f6e9-4859-93b9-be4c028719e3", "indicator--c97a8b48-4248-4238-822b-8223befb43a7", "indicator--d49780ae-6a20-4252-88ee-244eb677e722", "indicator--69239cce-cee9-4332-bd5a-73f352700789", "indicator--7b24fe9a-0a79-4002-bdf3-003d8a740fb0", "indicator--b86da4d4-a7b8-417a-9d1c-f99209e775d5", "indicator--409b697c-a627-42f9-8848-3db5172a2863", "indicator--7dee52df-a366-45ca-90b0-25d930e704e6", "indicator--6f9a98be-d6a9-41b3-bc41-bde736a6523b", "indicator--55cef411-7b06-4987-8fa4-3d5143189e82", "indicator--16e65197-8ed3-45d1-9675-b710e5b3cc35", "indicator--c04d878f-2bc4-40e7-b901-a9c46eb2f8da", "indicator--e7c1747a-9cce-4982-9950-2f5823aaad56", "indicator--1e009de1-a347-4c04-96eb-06395296e72b", "indicator--16c1b06e-eaf3-4d2c-9675-6cdc1a0123d6", "indicator--0f2ab816-e5fb-4ec5-b502-586297a9eb27", "indicator--51482e43-19e3-4704-ad5c-55581d43dcce", "indicator--135552fb-e2fe-4aa0-8e35-96e26bc6ceaa", "indicator--c35c38dc-b1c0-4e09-a194-6fbd3abc7110", "indicator--e40ef185-cb05-4330-b3bd-d484cdafa9aa", "indicator--4ef3eb7e-7f3e-4f4c-9d50-2b81f54213ee", "indicator--7c7627c5-0467-4c07-958a-2d8aa36b6d95", "indicator--7a3a60fa-5cf7-4d94-bf49-60b5390ebdd5", "indicator--ffe2e421-8cd7-4647-9570-467cf2824069", "indicator--4b019bc6-f7f7-4b6b-905d-d08d1d4b45ae", "indicator--8f6d416c-2d81-4302-aeb3-457eebec8eac", "indicator--b8b2f77b-5038-4790-b69e-ce79134dc82e", "indicator--01523014-30ce-48e4-b7d9-28057af3e75b", "indicator--1712bb10-f52b-41a7-82d1-59c32ea14415", "indicator--8b63d4a1-bcee-4cb0-9f3e-7b741cf62e7c", "indicator--c3b7855d-1040-490b-92fb-e7b81975dff5", "indicator--53fa97d9-0de8-483e-8028-70c6896d4f83", "indicator--9e4ccd60-bbc0-47fb-8552-b7bd8db7d31b", "indicator--0e90a181-964b-4cf4-b686-7d6bc15058d6", "indicator--b4261529-631e-4ceb-97a7-2e9e94e4b7e8", "indicator--55e512f7-e785-4253-9ade-24ed9023a828", "indicator--cb8cffee-2900-4277-8b39-0fea8e2fdd18", "indicator--70a71532-cc87-47b1-bfed-f123660bfaf7", "indicator--93a4ca7a-e600-4c95-a730-fae292125d27", "indicator--cbc62c76-0d07-4ad2-9dad-aa265a926a28", "indicator--4084f8e7-1378-4b47-a4cb-a3872bc2a374", "indicator--a20e1268-f42d-4cb6-9ade-ea65504c5ba8", "indicator--c0908f24-a296-49f2-a9a2-d8752ac3a3cb", "indicator--b0d093f3-edaa-4727-96bc-5654f0de4cc5", "indicator--6eb26ab2-a9d6-4b56-9779-0ed488365cf9", "indicator--d006594e-afda-4cc1-a22c-d6417349a7cd", "indicator--33aaba5e-584e-43c1-8aae-02dceaa3c5e2", "indicator--bf550005-e9dd-4fa4-8e07-afca180f7056", "indicator--d4e47600-7181-4d2d-810c-bf8d0d99e9ef", "indicator--1031358d-c6af-4710-8db3-1eb3ccb46ef3", "indicator--3b4feb26-471d-47c4-bee3-7558c114ca7e", "indicator--5d97cae6-19fd-4fad-9e37-cfd44f07c146", "indicator--eb5ecff9-d73c-4d01-a4b3-a4f8522ae3ce", "indicator--3e4e1e9f-93d0-4b27-b8d1-21a5ffbb3ee9", "indicator--5583f67b-d91d-471f-804a-600ee82dbc4d", "indicator--6a52b7a3-fc96-434f-8f49-87a79f44d779", "indicator--0241b2b8-5185-4c57-9100-44afead24126", "indicator--50bbc7fc-4bd8-47f0-9e9d-fad82c5599ad", "indicator--347978a6-91a8-4e3b-992a-55d24e138ebe", "indicator--069a7944-bf52-4f11-9998-a7de80d22f57", "indicator--6411ad75-aa19-4352-a77b-967bad3d103e", "indicator--d9a46b8d-50a1-4579-bf6e-23c4dd62b4f4", "indicator--d5dfb0fe-e881-40cf-b097-bbc1d1454848", "indicator--8e395f60-e3e4-45ac-b19e-117fd1d84401", "indicator--9cf7cb47-0a85-4a10-887b-5919b8769036", "indicator--f729419d-9923-4a24-9a53-f9c70f773085", "indicator--e949d3b5-4f11-4f7c-9851-89e3fef007ad", "indicator--158c2e95-2588-4da9-be2c-413b543d20f5", "indicator--1a5a15f7-a1c9-4ae9-a166-8c77ffd02ae6", "indicator--b125a960-792b-472a-9ce1-8eb7d1a81234", "indicator--3c0e5303-77e4-4e73-8677-a730844ee683", "indicator--b3475afb-39ea-4c3d-900a-6a0b26f90207", "indicator--3362b123-a54d-48a2-aeea-9f6b023c004f", "indicator--dd829c2d-e1f5-437d-b054-83bd13f7b21a", "indicator--71579783-92c3-4bc0-9ee0-86a050d5be41", "indicator--779ac3f1-1c4c-43e4-b72f-fa3f75a349c3", "indicator--839bda1d-67b0-42c1-837b-6af9f30032e8", "indicator--955ae1b1-6316-4b40-8d72-021d2503b23f", "indicator--f5a645dd-da3b-4898-a081-ee195debe3de", "indicator--c32911b4-1665-4ce1-8d09-9551896a4024", "indicator--db6080b9-cb47-4132-b618-89fe3ac2ce03", "indicator--744ac32a-8790-4cd9-a1b9-9658dced6e87", "indicator--19e37b0f-bbbb-4e75-960d-f4ff4257876c", "indicator--c8492421-7756-41c1-8bc2-5016dc10aeef", "indicator--263bf135-4f21-4d70-bb50-a7d2c5737bcc", "indicator--2bbf9bde-b3eb-47f5-9ae9-767377e836bc", "indicator--9f06a5be-e894-45dc-b35c-45e1eb81ed85", "indicator--b3a3a139-a31f-447f-ab4f-274545be9e73", "indicator--4aba3ed0-e318-41fd-8525-54bad743f856", "indicator--c96d11dc-8cff-448c-bd60-c4646fd68aed", "indicator--6465b081-ad4e-4f0b-b87f-4dca30263653", "indicator--653238e7-d7ce-4466-bdcd-df302501a873", "indicator--a2879783-09eb-4671-9aff-252bed16b3e6", "indicator--3b132137-d4dd-4789-81aa-939a1476e8b6", "indicator--2d6955f0-449c-4b80-8c3d-37e7557e3fb6", "indicator--b836ffed-09fd-4393-b6e4-fc96dc407fb1", "indicator--698cf039-d33b-43ec-b5b7-61af9f645454", "indicator--c8cbf03f-63eb-4f2e-85aa-bd53693b7468", "indicator--9a286559-aad4-416b-abb8-30a394f0566d", "indicator--f60631f4-91c4-4c17-8a64-235ebcd99b5c", "indicator--9c3652e2-ab51-4218-a802-e1cb6a25ac88", "indicator--d655c98d-ecf5-463d-bbc4-6335c88806ef", "indicator--e6a96fbb-b754-4d29-a222-8b5a9dc30694", "indicator--b691cd8e-a2f1-4d15-9ad2-82c1842df2aa", "indicator--17866ebb-6581-4eb5-9501-0aa593638315", "indicator--2244486b-49ba-40a7-9682-6919ab33a4ec", "indicator--40510b9d-cca4-468a-8a09-00afd2c19717", "indicator--87eb05e5-4f46-416e-a433-a0bf008e7514", "indicator--57bcb091-1861-4a0b-b7ac-2ee9f2b5f98e", "indicator--7112af33-f630-4333-b6c1-9889696b6264", "indicator--8e016eb3-0375-498d-9979-c2d9f1a1bb7d", "indicator--a1f283ca-0b1f-4acb-9388-c6f30e328a46", "indicator--466b67e6-f9f4-492a-ab60-3455769f80c7", "indicator--6c1c87af-6040-4730-9951-5487fdd56e53", "indicator--a7b44e49-de4e-44a2-a9b1-6221df1d003b", "indicator--6bd98755-4dc0-44f2-a103-a6de8cedaa47", "indicator--e6ee0063-64b5-4830-9fb4-111ac7a24552", "indicator--fe0f3001-45e9-43e6-915b-68663f9dcb29", "indicator--7eda2d22-817c-4661-af14-911afc5e6f70", "indicator--28a3e23e-ace3-47d2-b679-d8e3bcfc4b73", "indicator--037fd375-fb48-4875-935d-3187ae45c07e", "indicator--17364097-b894-45b2-8984-f62df7e5c733", "indicator--fb4d26f6-f6af-46f4-b5e5-a21926088266", "indicator--8d69cc57-84b6-4f82-a3cf-b2a6bc0573bf", "indicator--83bad99e-1280-4fd8-9cb5-1c50d53f0130", "indicator--d7e2d33b-25b5-4c78-bcd1-ffb92c5c18cf", "indicator--568a6a15-dd55-4550-814a-d9b46f9f4f4f", "indicator--cbd1da9c-9af2-4776-b445-6b8e55df0028", "indicator--89c6ce3d-99d7-4050-8777-0621601b403d", "indicator--64909207-ed81-484f-92c6-fda4eee8a592", "indicator--ad5822ac-c21d-4397-a2a1-478e3dd736e6", "indicator--2d4940ee-33eb-4672-a48e-cc226dd90c67", "indicator--e0801d20-01b4-4e44-83a3-944426511951", "indicator--4e304c3b-3073-4375-a83a-c4fd6c3226c3", "indicator--00d6e718-999e-4531-b9f3-2edf4925c533", "indicator--d824392b-3e5c-498a-b3ba-3059e1a14779", "indicator--5cc9ab2b-6a8c-47d6-a906-64d00c9c9e0e", "indicator--09482ad7-ade3-44c0-9709-7523ce24575f", "indicator--96dab479-22cd-422b-ade5-0368c4499ce0", "indicator--b1c10893-59c9-4191-83c7-94618c6216e1", "indicator--e98293c9-371c-4d3a-804d-512f9849e772", "indicator--2eb103ad-76fb-413d-8202-e2007c575687", "indicator--e8662d2b-2046-4092-a896-8193de41ca84", "indicator--a6d70a94-f159-48e7-b837-660619d21e54", "indicator--fb3d3835-8e38-402a-92b9-c4e277270717", "indicator--8ba8fe39-73db-4461-b519-2acd7ebecf20", "indicator--0f73dba4-c3b2-48bd-87f9-521aa6877d48", "indicator--47d99f28-dd7c-4186-87de-cb7061d91fd7", "indicator--8051733a-ebb7-435a-b7be-3bf33a9b557d", "indicator--5f348785-2b05-436b-8ce8-97730ac08c78", "indicator--eb531cfd-c943-4498-b97e-7c2d5d5959ec", "indicator--327bb93a-c13e-4fb1-b49b-06253615840b", "indicator--885c79f7-1f0a-4b77-b073-2779c844a2dc", "indicator--a395b2ad-b6b2-418b-b4eb-e3d0abd71702", "indicator--9bb1a3ca-c91b-4c34-8a9c-772831c2679f", "indicator--0b7cce8e-d406-4058-b01e-4080abb391aa", "indicator--85cf59b1-bb70-4222-b30a-0a1efbdd0205", "indicator--de455672-7ac3-417b-9338-0f02dc6d7ab4", "indicator--c9fabd41-2a61-47fc-b6f4-7dcda8631aea", "indicator--1b66d8ee-e075-40c2-9cb5-100083ab0bda", "indicator--f782f697-4659-4053-a97f-117dbf810fe1", "indicator--8d390caa-3ccd-4c36-a2e2-cfb51c0ab71d", "indicator--a5c6feb1-3601-41a2-8151-1a47b8f4c242", "indicator--59301499-af80-4f28-bf0e-1ddeba284cae", "indicator--d80d7d74-6a2b-4a04-b784-0c5b5b3aaf46", "indicator--273d53b4-6215-4e76-8321-d20b2fb8913a", "indicator--633f0c47-e76c-4c8c-baf8-3f8e6408a213", "indicator--c023f800-c7a0-4034-8d90-25f396cc04f3", "indicator--9da90da6-8658-4e25-9366-b68a30e83eb5", "indicator--fd77d7da-a88b-4ea8-9166-587baf2e2637", "indicator--bba49ef7-140e-4352-acc3-917e0653f64b", "indicator--590b09c5-3121-441c-9c15-7aadabe7671b", "indicator--a4644137-c84e-4ff2-a099-2ad36968cfcf", "indicator--f01227bb-595b-409c-bb8c-bf2ceeae6c53", "indicator--d53ef20e-8025-46ae-ae12-1b9e3e4269ef", "indicator--a974d532-2e36-4e3c-b4b5-a63b600920f3", "indicator--24de2f18-003e-4a53-bcb1-19891a50c5d0", "indicator--81717295-21f4-443c-aba8-a36338fb77b9", "indicator--566ffa95-5b03-4268-b334-a82f32c92d3f", "indicator--246d5f7e-32b7-40e0-8b50-fbd022751b72", "indicator--aa6dc546-c4b7-4874-bcb0-912ff1a5f845", "indicator--8ce81cec-fa52-4766-b7c8-d816b10a6d74", "indicator--cd365437-d47d-49a4-bc0d-0435521c12ab", "indicator--af949944-7a34-4949-8edf-1f092ab35dc1", "indicator--13d87770-64b6-4691-a21c-bc5ce71a6ff9", "indicator--d647d56a-698e-4ab5-98aa-b6e155108ae6", "indicator--30fb2948-283e-442e-8dfb-d6a2b9d7ef5c", "indicator--2a122e58-1c0f-4ce7-85da-0af1fb437723", "indicator--ebd29ece-3101-4982-a0b1-f4fbd96307ff", "indicator--b87f74d6-7c63-4eef-9c4d-3ae156ca7fa7", "indicator--8fe56f59-6452-4edd-a999-8e24b9805e28", "indicator--bfd7ac74-29a4-4edc-af9b-f30dcf4b268d", "indicator--1cb64776-32d1-4087-8fe6-109fef057e8e", "indicator--df54f5a1-73a6-495e-9737-82800915c2b3", "indicator--ae13b080-cb83-4c71-80b4-afceb891254c", "indicator--c4bafde3-f2ff-456d-be4b-2cc52698927e", "indicator--2c722b31-f106-445f-a564-3db354f76f8f", "indicator--37f027b4-51f4-42b1-a94e-bd5b12cf8f26", "indicator--6588e611-cbf5-41a3-ab00-16a1bcf74e93", "indicator--b1425e97-3dc5-44ea-a7ea-6c7ecf198b00", "indicator--3ae93306-71e0-493e-9e68-1fb03d600fbe", "indicator--ebd6ff13-e5d1-4054-86f1-c3515b9d8232", "indicator--ccdf6882-2b40-4771-9559-72ce04ecf111", "indicator--108ebd65-319a-401a-9050-5311ed3bdb5b", "indicator--f04281f3-deaa-4b92-9a6e-3d81e8297e20", "indicator--50120a3b-80da-4ccf-a1bf-b7c83ca06211", "indicator--2423feb8-7304-41f9-b5bd-4723750f4bfa", "indicator--e7c229a6-e233-4232-8c6c-ccb1ce02760a", "indicator--67f6d34b-bf03-4c52-a6eb-cfd388806907", "indicator--610559ec-42af-4be8-b35a-5d01b2464cb3", "indicator--0c4f7d0a-eb5a-430a-a9d2-5f94c76cc2b5", "indicator--5ab01e96-8196-450f-9d6d-a337ccda5651", "indicator--df4817d7-36f2-4ec0-9732-f08fa3abfd1d", "indicator--b355a5b0-84eb-48a4-864b-7870205815ad", "indicator--93cb8a19-6c73-4905-b1c1-04c75ac11e2c", "indicator--373eb880-7d01-4921-a00c-7d4b12cc095e", "indicator--32eb7b14-0de7-4c7b-af39-048d918477a9", "indicator--e92e231a-8e19-433f-9140-bf8ea05142aa", "indicator--14de93db-04be-4da6-a7f7-2bcce69328a4", "indicator--22fe2245-8141-4e48-bcc6-78cbb0a6e5c8", "indicator--dd558def-16b4-4dd6-9ce0-99b013b5715b", "indicator--eddbdace-b0e0-4c90-9488-299d724ccc65", "indicator--a017de78-ef8e-499d-ab5c-5600b2e65a08", "indicator--5be2ba69-aede-49fd-bf8a-aa5b5c085af5", "indicator--3c86d55a-fa70-471d-9203-a450a0f9c962", "indicator--2d6122b6-c382-4a24-837e-39024807ad52", "indicator--ea2c544e-7833-4a02-a200-8a604c4d65cd", "indicator--8a5a6dea-33ad-4f8a-9d46-931a45504f7a", "indicator--ad219e87-0a67-4f76-a7e0-f5cf0b5201f7", "indicator--4b66146e-8594-41a1-902c-aeb178858cba", "indicator--ce2f6d10-7c1f-4dd2-aef9-03d5d4d54df6", "indicator--42329c2c-1c51-4115-997f-3b1181e5a704", "indicator--7df09bca-87ea-4726-a6d1-bf8282217593", "indicator--6bc989bd-b6b8-4554-b396-33986d7c5f77", "indicator--b213defc-dc7d-42ee-946f-8bdd7dee17e3", "indicator--f8485383-5200-45bc-9dbc-fb81715c4576", "indicator--5420fe82-051a-469c-aed3-d9f88d80dd2a", "indicator--ab4037e3-6b8b-46ed-ad7b-09122dbabdb8", "indicator--8593439f-9026-4d1c-bc00-d1472977fbc2", "indicator--b46eba39-5244-4553-9fbd-657781dafe7e", "indicator--6c1a1396-aafc-4240-8b93-42c4a1b5888f", "indicator--e52ba87d-8306-47ff-9b40-6b5ec05fbb5f", "indicator--e519c3db-ca3a-4378-b3e1-9be1ee18d9d6", "indicator--e958009a-83ed-4e04-9c72-d2f4c9d3cabb", "indicator--b6301457-0bfe-4450-b0e4-1c561e40546b", "indicator--432c7d12-d0fa-426d-9dcd-81ec0cd25174", "indicator--0c7df763-eeb9-4e13-8920-740687c9f056", "indicator--230c0088-5825-4073-9eda-415acc997c6e", "indicator--43740349-8a7c-4855-b1d3-892e383ce980", "indicator--461802d5-d3fe-4aca-87c8-08b9ed2298ba", "indicator--c9308a87-974c-4f41-b133-1e0fe0daf31c", "indicator--9df7e54a-b4d9-4b52-a620-1c0e75457d84", "indicator--78277e72-c789-40d6-b0f0-9e7157123059", "indicator--745f8f0c-565a-40cd-a0e6-1946e7e75495", "indicator--9a5124d0-0015-4c67-bd0d-0f29d82d4992", "indicator--384126c7-87d3-4677-b8e3-810060bae1cd", "indicator--0e297c4a-71b3-495a-aa41-24199a13312a", "indicator--9fd3f9dc-3038-40ff-bdef-3d31739dbceb", "indicator--6f315025-7d30-4405-bf98-1ab1197f1e69", "indicator--894e084d-16fb-4b71-bb07-47cbc639d204", "indicator--84d35746-30c6-419c-aa86-06686d649880", "indicator--7e8d1449-735f-4f53-b184-aaff57397537", "indicator--d953d25f-02d4-4668-aec9-972517a6d4a7", "indicator--9859ff85-327d-417e-bd8e-0c4db626c82b", "indicator--fd3c92ca-df31-4cab-8857-bd8c6485ab4a", "indicator--0297a6fd-6e2b-411e-b558-25f2019b9324", "indicator--61a55280-ac50-4203-b40e-531930278abe", "indicator--6051b0a8-cbab-450c-8a79-fac85266f4bb", "indicator--6aadf3ad-14d0-4d75-a0e3-69aa0b1286a9", "indicator--6c68c3a3-f472-454d-a3d4-fdc5eef38823", "indicator--8c845219-b491-4c76-8733-f51e678aaeb1", "indicator--c2dcb4c8-32fb-473d-8648-16b5a2a69323", "indicator--e2c50b63-5120-4d6f-b1c5-21cc8b72fb38", "indicator--1e1afa8e-b8e4-4751-9102-57d9febabcf9", "indicator--bc237b5c-5650-47f8-972e-f710ad1d08be", "indicator--32cfdbed-ab10-4c67-93b6-927f3eecab95", "indicator--a2207bb6-091c-4cde-8d41-422ffdb7252e", "indicator--be782e0f-f11f-4340-82c1-194f9afe7f90", "indicator--91c61adb-3a0f-4dce-9486-4319d5c306f6", "indicator--d3574dbc-5139-45e6-b90f-abac63f4f5ae", "indicator--da76ffb7-a68e-4244-b34e-0a530e9f0835", "indicator--7cac95af-2b89-41da-b25b-e5dca7430a29", "indicator--06fcf7b5-ba13-43bb-aabd-b755ee82be13", "indicator--ca151ae6-c38b-432d-bbf6-4c39399c6886", "indicator--0cfe5442-7e05-456e-ac5d-ee87adf1b6bc", "indicator--21aea6ae-bfff-486a-a926-fb1c4d64508a", "indicator--ace4ca94-0e22-46f2-bd5a-9910f8ed1563", "indicator--775492aa-2bb3-477a-9888-9005c6948945", "indicator--1a3bceae-8b60-4aa3-a494-aae6c84346d9", "indicator--9cd0fc5b-08b0-4cf8-9102-687ab64d5913", "indicator--2a08d4b6-f5fd-46ac-a2e3-c14718f5a613", "indicator--a4546e62-c43e-464d-966a-47e7facb1353", "indicator--4d62c4aa-767e-411f-b135-b60d7d94c304", "indicator--01b425a0-9d08-4824-86f0-c7c30aa9011c", "indicator--01be1159-b75f-4c03-a448-b55bc8a206d8", "indicator--f58dacab-8c83-4660-bcad-a2b1c08966ee", "indicator--50eaa25e-8888-4a00-aab9-2dc502696f3b", "indicator--f4433f82-85c6-45c3-90b5-7786c5ad9085", "indicator--369b0fcc-a4a0-4352-874a-c4f1ab8d5565", "indicator--a500f0fb-d64c-4f66-90db-18afd0b22521", "indicator--9919177c-ac64-49d4-a8bd-9750b6d7e2f8", "indicator--b6b16e60-dab1-49ca-b819-f03310ba099d", "indicator--5925e31a-e55f-4a4e-9501-43123be193ef", "indicator--30e43fb3-9afe-4fb5-b860-29cd243e04a4", "indicator--4ec60b21-3293-4fe0-bfd3-5aff93059983", "indicator--d3054b4f-57ec-481d-9a6f-0e62024d21cb", "indicator--098dacca-ff22-4b91-9960-b3d40ac34e8e", "indicator--d0f6802a-0249-4265-9b6f-c9902466c9b8", "indicator--5e6e969d-9576-450d-88ce-51d8f92a2961", "indicator--0a332448-1c17-4c15-a3f3-3e9fe80744e5", "indicator--19aa08c0-a4ae-4ad7-9ca3-d9c90f3f03d7", "indicator--0828b93a-04a2-456f-9d8c-52a3a134e452", "indicator--635de8ce-c054-49bb-b32d-9d7e2408a058", "indicator--2e810314-7724-427f-aed3-439d156e1c2f", "indicator--11d446a8-6afc-45b9-9e3b-ad9e58500ad9", "indicator--7f837961-c49f-4fbe-9772-cb55a6eebb5a", "indicator--d4171685-81db-4947-baf0-89500708fd98", "indicator--64795ac5-5e1d-4d71-8b7b-fcfd6cac7b78", "indicator--e0c993d0-9c69-493e-bbce-0ea9dd5365f8", "indicator--5d5e098c-afb8-428b-895d-7192ac4e1d0d", "indicator--f750765d-08d4-47ff-a66a-b67bf3e30457", "indicator--d2415824-29db-4a1f-9f73-7bf25c45b148", "indicator--da0a5187-f5e7-4cb6-bdfc-a43fffae7a09", "indicator--436846ca-a380-4a30-9eae-6d86d3a214f3", "indicator--6600c14d-68e4-4b4a-aa02-123b0b4cbfb1", "indicator--d4159823-8ace-4f1a-aa1a-cc1c3fbf2519", "indicator--27df2ed6-09e5-46ee-8009-a9e629e033d6", "indicator--b3d636a5-d095-44f1-8dd1-d27297bb922f", "indicator--e4efa77c-81d0-4b21-aee6-6c9e2414a341", "indicator--0ae52441-1c68-4caa-9920-e7cdfbd3cf24", "indicator--d7e95de5-64d0-484f-b1ee-37230225aa4b", "indicator--4e7b7619-2086-43be-b635-17bf3098c0b8", "indicator--c1510d89-d43f-480a-a968-ee88e4238cdf", "indicator--dcf5f346-5579-4b22-8578-62f9b333ca9a", "indicator--aa6ba7fa-d17f-4aaa-8568-1f9cbea84621", "indicator--298257c0-2388-4980-8568-0e0d3c28204b", "indicator--71d80237-9dc2-4c5d-9a08-0b022f7528ea", "indicator--05ff8b12-51eb-468d-b1f0-b2f005e18906", "indicator--0a9db0ae-9e10-49ca-8f09-bfd61f52fe63", "indicator--214a633c-1163-4f08-8745-4e1fe9b45fa5", "indicator--514f305c-47a8-49fa-b290-b3c4d7a2d731", "indicator--34605c2a-bf6c-48d4-913f-b2e84ec3d978", "indicator--27fffc68-cad3-45c2-ae45-4e4b78ba7bb0", "indicator--b993cef9-4495-4e56-9c0d-2f2704b6bce1", "indicator--c0591fa0-4034-4bba-958c-6d8b1bd486e2", "indicator--aca6ba99-6a6e-455a-bfa4-5e09971750ac", "indicator--943ec47e-f851-4a4c-8c47-900466e6180a", "indicator--bf93daba-8b42-4761-82a0-f6bc13317393", "indicator--0ece1ab1-b62b-4acb-8438-0f2484ab3da7", "indicator--fa6a4e4f-fd70-4785-b98a-4a8bad98a3ab", "indicator--9027e41a-c287-4ece-bc8f-7868fd2d8052", "indicator--2302a2de-8cd7-4b8a-b7b8-ca593c47f723", "indicator--2c3ab832-2fad-4a9b-bc2c-4a5e459493e5", "indicator--ad5d18c8-dc4b-48fd-932a-5128adf951b7", "indicator--b5c60178-c673-41cb-8cb5-6280ff031d6a", "indicator--90cc6b5e-ab17-4827-8c0c-47b247119159", "indicator--c9e93a6f-cfd3-4d1c-9fbe-48493747ab7d", "indicator--b441eb26-1427-4b91-8ca9-aa2f53005aea", "indicator--e133355a-c3de-4898-b76e-5334ee58eb46", "indicator--94e13d98-fd66-4f90-b120-ab6cce7309c0", "indicator--4e013b26-97c2-4fe5-bfe2-0e6bfe05fa03", "indicator--f1251dec-7430-471c-879a-e3f40ef316df", "indicator--9b8b5018-8e4a-4f00-9ce2-3d34e062bcff", "indicator--9d7eddf8-841e-49ad-8090-a3358050b877", "indicator--f48feb93-41b9-4f6f-8f06-df192fac200a", "indicator--da2dd30e-f592-4453-8f66-bdefb3cf456d", "indicator--5155418b-80df-45dc-aaec-9eb11afc646b", "indicator--9f1e29c1-a805-4a5c-a7fb-ed04aca8c09b", "indicator--325aba75-9c47-4211-ba67-82f5562d4e79", "indicator--b0b70d01-01bf-47a7-a3c4-5b363e49592a", "indicator--02a211fa-cc03-4e72-a506-4e51b8926af2", "indicator--4e8de071-298a-46f4-9754-a251dc4c1922", "indicator--5d873cdb-191b-48b9-a90a-27fa5125d6e1", "indicator--aabe047c-a226-4740-b83a-ca311ed3c5be", "indicator--2c5f69d2-025b-4e90-978e-ce2f9e653905", "indicator--b75269a4-49e6-4dc7-bdac-17ce1c7f810f", "indicator--47bd1400-e024-4c0c-bae4-732c4829741c", "indicator--e94b0402-77d4-4b6a-8c71-410214e65590", "indicator--783af8e6-66a6-496f-bc10-71cc935bc560", "indicator--d2533a1f-8de5-4f09-8ec8-39de787e283f", "indicator--89bb4b01-ca40-4ddc-ae8a-be73095afecd", "indicator--b0bfab7d-f618-4191-ba65-d06bbbd43acf", "indicator--05e3e994-46f9-4c65-b3c6-d7a5873bc648", "indicator--58936542-9aca-47f2-baaa-864cc0e5cd56", "indicator--da363e50-4b5f-4b51-b97a-04a82332be93", "indicator--0c6dedc0-364f-4a79-ae60-f416b9a592cc", "indicator--32b2b5c1-ba47-4324-a11c-949d48aa5c9a", "indicator--f5579276-1c1e-4c6c-9b6b-8325b598a4a9", "indicator--6f250385-96bd-48c5-9f9d-6fa7e1c6ba98", "indicator--1ea5c68b-8f02-40b1-8a71-c8e227753ecb", "indicator--047f7a6d-c9c7-4938-ab33-afbc3913213f", "indicator--bde6e54f-82ff-4494-8ad4-08e55791d6e7", "indicator--68eac1d6-f35b-4619-b92a-e3b9d2410bc1", "indicator--47c4d5f0-5a5c-46da-8c96-e36b910975c1", "indicator--ce47fc04-771c-41fb-8a96-abd66e94a578", "indicator--8f6bfbed-a411-4258-892d-80077d905be4", "indicator--5ba62c6a-2fbc-4498-9a96-834d4b03b52d", "indicator--073f7e89-d340-459e-b834-29a1d37ca785", "indicator--155b3e2c-efdf-4e5b-86a4-d25b77b240c1", "indicator--18a8a850-442b-4918-8268-ffa880ef9e3f", "indicator--099d8fbf-b247-4089-baad-fe43a790094f", "indicator--905fcfa4-f603-41ad-9fbb-b0820f03b353", "indicator--76eaefcf-30ea-443d-81e1-29126d4a57d5", "indicator--5b0e03f4-fa87-4b5b-a0f8-544bb5fb190e", "indicator--3270b6fa-b3f4-438c-8086-44867c436347", "indicator--23f72573-b9d7-4c6e-ace2-9ed0f046bad1", "indicator--6fa3bb0d-c51b-4138-90e9-06ed5c06635c", "indicator--51ebbc38-6cd5-4018-8ade-0b957f11eea1", "indicator--95a3ce84-d7fa-46d1-9734-7af89d08e392", "indicator--8f3e66fa-5039-4e61-a0e5-8194fd4c3107", "indicator--9a36f0bf-2335-411e-8d5d-f6fb7dbf4fb7", "indicator--d9de77a9-16fa-49ba-b9db-b140d0512264", "indicator--7b264074-cb08-4bb0-9584-74cecd9c9731", "indicator--62d9d61d-3d20-4efb-a995-5a1b892a0381", "indicator--2abfa34e-2477-4973-a685-5431281013bc", "indicator--27a34dc3-85af-4586-8673-fc80fda8a8f2", "indicator--35b5a134-f710-47b5-8441-de6bcff59d93", "indicator--08f30c59-8c2b-4b10-979c-3591096f726e", "indicator--5cc1ba0b-a3e7-4a92-a334-8b75cc8a3ab0", "indicator--ade1c871-5240-46e6-802f-15c080191e69", "indicator--7ccb7b98-2e02-435a-ba48-ff14e38468d8", "indicator--017bad5f-e0ad-4c27-bac1-f6cb7faf461f", "indicator--2dd7a06c-50d0-4818-b03e-6a2c7ef7afc3", "indicator--a6563fde-44d5-4994-926a-fe8cdf8e81f8", "indicator--f6275234-f9c2-42b7-a360-da83155dd222", "indicator--c6c5cba5-f2f9-4834-afcb-fc365bca5608", "indicator--b8bc13cf-ce41-46a5-8413-e1e75d1844d1", "indicator--f0c1dc74-72e7-452c-8927-73920980d73c", "indicator--42de61b2-29ef-49b0-bdeb-0f70314d12d8", "indicator--d8c6508d-8ea9-46e8-bf2e-16cf66b0e0d8", "indicator--2d801596-1fcd-4f25-b54a-26a6dbf3f52e", "indicator--c7614bc6-1f59-47ef-bc54-e34492a23e56", "indicator--1baed89a-3862-479e-860f-d384299b22e2", "indicator--582cfee6-cd20-4bdb-a6e7-a6637959cd20", "indicator--bd76e4bd-703b-4734-b4af-e9da77088e2d", "indicator--04438ce9-9df0-4685-8ab6-4bcd6521af91", "indicator--138cd88e-a093-4ddf-94dd-3f92599356ad", "indicator--c1925b01-4ebf-4992-9acc-de58c988abfc", "indicator--c618b429-89a5-4b14-a60d-64cc6d04b1dd", "indicator--978751cd-39d5-464f-bdbb-ad9e5c9134d5", "indicator--a2bf553d-da14-4f61-99ba-2eb52b7ab86c", "indicator--bc8f12d9-7490-4e04-ac19-564a58ac78e1", "indicator--c1638e25-d611-42ca-acb6-569af09e3673", "indicator--3969b40a-aef9-49a5-a484-a04081c128b1", "indicator--9eb286a0-a01d-4ac2-b2d5-498993ec1090", "indicator--41c7058a-0460-4a73-badd-da8f8d228bee", "indicator--890f5755-1ba8-42a7-b857-79fcf2024862", "indicator--6c120c1a-d5ca-4558-868b-9f5b87509671", "indicator--42474574-2f97-431a-bb2e-7006e271b1e4", "indicator--90298893-1262-4061-92d7-9c16cbc47fe6", "indicator--aead88ac-74da-49f4-82a7-5f0ee65c6870", "indicator--ab206948-834e-47e2-95b0-709796d9e577", "indicator--aec0146f-e4f0-4918-ba26-7c934c3c45b6", "indicator--826d58d4-9570-4c3a-b34f-0806cdd9b433", "indicator--7437fefe-d379-449d-a51d-d33ffcc33246", "indicator--bd375e5f-2c64-47e2-8c9b-27fe093b8680", "indicator--6728199d-b415-46f8-a81c-33a68e8684d6", "indicator--7f1a65fe-2b42-4585-928d-0b438a55ad26", "indicator--cca1e2db-61ce-4388-b27c-7e1b9bec5106", "indicator--0ff46ebe-0315-4cdc-8784-887ac6d25114", "indicator--205ec8c6-fc86-4fcd-84ab-61abb63afd67", "indicator--389e9fd8-4b60-4ac7-9613-0167887bd3aa", "indicator--11cd51ab-50e8-4771-9523-d5c844f0800d", "indicator--f826f622-e8ee-4604-abee-1221e6c9f144", "indicator--294e997a-6837-43b6-8791-9d180674e91b", "indicator--e711c88c-d7d2-4dc3-8299-7d9b1961ebbf", "indicator--65a99bbe-485a-425b-9089-35a964e4d349", "indicator--8ad31b28-345c-4bec-ad03-178a947a901e", "indicator--2721f986-4c98-4029-9c5a-4b80f9b62d7d", "indicator--60212526-5d71-4adc-8ef0-5397a23bd3fe", "indicator--47185a14-9766-4929-ac1e-4eea45258818", "indicator--13437e5e-82ee-4502-96a5-ad4ea461497c", "indicator--649f4da1-d570-42cd-bea6-3fae96263baf", "indicator--c4ae3346-0f20-4b58-93ed-fffc1f5bf34a", "indicator--cd1261d2-774c-42cf-a1fc-5bf782aafef2", "indicator--78c4bcc5-f132-4347-a4fa-1cf8bcc8899a", "indicator--cd5363bd-1736-4ced-9d99-32be7dbbc19b", "indicator--5836621a-ffe9-4e06-bd1e-e3bde5d78425", "indicator--aae293b6-943c-4246-98d4-19f177d4560d", "indicator--0b70da78-3667-413b-a8b8-54a536f78e41", "indicator--7f9f3211-6d87-4c8a-93e9-05d2d3a5e215", "indicator--509fee02-a64e-45e4-a0a1-dd8b5f578ce4", "indicator--6decd1a4-651c-4d46-a787-0088b083808e", "indicator--117b2c71-50e4-4866-9200-a074686b2238", "indicator--f10d0a8b-7d84-44f0-852d-7b1e68552604", "indicator--4d185a63-b94a-42d8-8211-f1e9646be7be", "indicator--32eadfae-9416-47a0-954c-ce786c055d85", "indicator--603f206a-c619-4ce9-8047-566846e1e53f", "indicator--ce0ada24-fdf5-43e8-948e-ce56dd396b27", "indicator--e2228a04-3ab8-4145-b711-e7d15527497f", "indicator--5c908730-804b-49a2-a1c7-f12d6b1026f5", "indicator--b77ae665-155f-48e9-8a27-0519d552bc15", "indicator--6f1afd65-dadd-47c6-841e-0ac252357032", "indicator--f9a5a17f-8df4-4ba4-9111-a230edfe688c", "indicator--818a30fd-4e5f-4706-9608-166700072443", "indicator--ba85d6fc-3a38-4515-99a9-67f557095228", "indicator--30a368f7-502b-43cd-b214-8c604969294b", "indicator--9cd515ac-05fd-4c38-8b6d-6a75a5226420", "indicator--f6601ef5-0402-4c5f-a4b3-17608d0ac38c", "indicator--bd8b276c-c749-473c-b355-03d1b7c838c5", "indicator--8417ccf5-db0f-42b1-99a0-fa9dfe3f994d", "indicator--e31b183b-3380-40b8-99f9-2695c9155f0a", "indicator--2d325abc-ffef-4ad1-a7dc-15d6b9496b4a", "indicator--ddcd651e-ca2a-418d-994b-32e2260c8277", "indicator--bbc51d89-e3d6-4a03-8e3a-aab4f8a5c6c2", "indicator--42e0fba4-0b44-446a-a95a-6f15b250813a", "indicator--2c07bd5c-97b3-4f20-a569-c58db8717f6a", "indicator--f700aae3-fef9-4d36-b1d3-bcfc27c3937e", "indicator--212d79b7-d858-4dc4-9fd0-18c34008f988", "indicator--3d9cb014-23f5-4dd6-8756-c044595b4b29", "indicator--e61f69a3-e86e-4205-8994-6eb5c88aff4f", "indicator--4a636cc0-2429-48a6-80dc-a359befe7ae4", "indicator--919cb263-940f-48c8-96f0-d1138e093fe4", "indicator--7d99dd97-15d2-4108-8739-325451585915", "indicator--2e721f8a-fa8e-45e5-a408-ff9631563fef", "indicator--134eb7bb-306c-4c0b-9290-19a046aed23e", "indicator--9f82021a-bb83-4585-8cc2-20acd9525768", "indicator--301928e6-57c7-4253-89cd-a489308168d5", "indicator--0ecc3d69-34cf-4e81-9beb-764b5735b485", "indicator--7d252edb-1a4b-47db-87e0-1638ff3d2c99", "indicator--8f2b7758-49c6-4f06-bbf0-60c2d497c7a7", "indicator--34324c58-ccfe-44ca-a8f0-d205e44ee475", "indicator--e8ba675f-87d3-4a33-80a3-060096985286", "indicator--6ad16089-8277-41ac-b898-e89dd68b8c79", "indicator--c3999dce-89b0-468d-a165-a9370f1b92f6", "indicator--fde45186-a3ca-4ab5-b4f8-604fe6a424a4", "indicator--ea9472db-9549-4ec1-91e6-633ff4ad6342", "indicator--2012a705-7235-47fc-80e9-8316e463a4d6", "indicator--c4a593f1-5711-4030-a7f7-4ca9b6c6d406", "indicator--05893611-af33-4a8d-9413-334f7f8dc0a3", "indicator--c69ce3cd-47f9-406d-b5f1-e0642ca5598e", "indicator--691183cf-592e-4c81-9f95-fd220528d023", "indicator--8cfb115d-526c-4a03-babf-4e8feffb80ef", "indicator--16b0ab0d-1777-4524-980f-1c3ba9da6b52", "indicator--e5ffbdc5-9ecb-4913-a342-2af264db1e7f", "indicator--ecee94bd-1e8a-4f66-9af6-d5c5bf58f8f1", "indicator--c476389e-ebd1-4011-91fc-fc6acf83ef96", "indicator--a2ab6689-7a36-4fb4-8c07-64dc185037ce", "indicator--0197d610-6d77-478c-ad9d-9fc85ef02005", "indicator--1dabc02c-8de5-4d4b-bb8c-1fa4899509a1", "indicator--8fc4de54-d438-432a-9c80-7fb79d8bfbe9", "indicator--24283898-89b1-45c4-a507-e067f1a79536", "indicator--643163ab-498f-41ef-8a5f-18a3341498a1", "indicator--207f8a62-23b4-4f72-adc5-e65b862b75ae", "indicator--e88d7c29-fcf0-48d7-b611-c8d3c1950f31", "indicator--af829389-3174-413b-83f6-4409dfc8c435", "indicator--1acfa5be-03ab-44f7-a483-4c6e42a2352b", "indicator--1db60dcb-9c41-4673-b886-f81b8fd6a0ed", "indicator--6095413f-e2f3-4ad6-aa2b-34bc6bd366c1", "indicator--e00db9a6-0d3d-4e23-8c54-e514746927c1", "indicator--dbd0923a-c6f5-4d65-967b-2e122cc8df0b", "indicator--4db1d1c8-0000-4700-acb9-4d614bc3379f", "indicator--7c930959-9236-4826-8a2f-77b414e4e356", "indicator--df740303-7b28-468a-9320-7a9de145bf39", "indicator--4f057fdc-c74f-420f-a71e-422375993594", "indicator--7b4a745b-d28d-42f6-a813-5ea47e0041be", "indicator--62e6533a-b30a-4633-9237-428f1cd2539b", "indicator--2f255db7-5e68-484c-934d-8d6ed7457df3", "indicator--b9901445-897c-4f6d-b3f3-b8d09136b260", "indicator--895d16df-ebe2-4a28-a8ab-614455818481", "indicator--f372b0e7-9bb0-452e-8b0e-7c8b140b7dbc", "indicator--a7f3af06-2241-4fd2-8e7f-2cefa7d25f00", "indicator--82f3ac6c-d867-4687-8634-cbd01e3e8326", "indicator--75a52b50-2fb8-4e9a-b3f9-6cc1c301cc34", "indicator--a49fedb8-6d89-4f75-baa3-7f810b1408c4", "indicator--8a85e198-2835-4dc9-b004-c452c8882692", "indicator--95d498b3-7fd0-45ff-a9c2-a29332b88e16", "indicator--f34460b1-d04c-409e-976e-021a35907937", "indicator--712f9ad8-b63b-43c6-a8ce-24e84454ebda", "indicator--7570a5bb-fb02-4748-ae67-a2ef277a6fb3", "indicator--ddddc218-586f-4381-a52f-3e7b52a82312", "indicator--93d347fe-d142-4f19-8b84-bf2aa6185527", "indicator--24e49e2b-19b3-4a55-bef7-0dae284fddc5", "indicator--17998862-9dc8-469f-b783-06257744cc39", "indicator--ee0e8950-1585-44a3-8591-ded7b9f335f4", "indicator--12d954cb-e922-4364-9a8a-3383054a6495", "indicator--0e764b12-eb8f-4d2d-a994-915623f95cc1", "indicator--e93a64b5-45b3-4a9c-aad3-06acc788c90f", "indicator--184a1f82-5d7a-4180-8e47-db8de29bae7f", "indicator--70f47618-e48e-4f61-a4ce-21ef5cfe3acd", "indicator--c0b465bb-fcb8-4d6f-82e4-5a16161689b5", "indicator--5e93948c-c661-4a2b-810d-8f8cc2730714", "indicator--01abbd21-8c57-444e-bc18-25e2a1ac3192", "indicator--2265ef2c-c471-409e-a170-a963ff9883ee", "indicator--02d76c09-7bb1-474b-ba03-dd6573d7417b", "indicator--85deb58d-cbf5-48c1-ba90-47c609078afa", "indicator--375bfb38-126b-4836-91f7-57ed9380423a", "indicator--ceb5df44-105c-495c-ab77-9a61b938c31f", "indicator--76c488ed-e48d-4b8b-9ec8-b29593d97ada", "indicator--fe3af96f-9370-4131-98b4-f68cecdee2b6", "indicator--43cbbf84-38b3-420e-803f-5087bc6f77de", "indicator--00eaa00f-d200-4603-af3e-8a04f19ae1a7", "indicator--da5ffe2d-1a08-462c-b9d4-d05661ed04c1", "indicator--0fe2c827-aa2e-4149-8bf5-c8c1115f5a44", "indicator--33ad9061-6b88-4d60-9a0e-8b98ad7ca8ee", "indicator--8044b6c6-c766-4ef0-bbd3-3d79f96d1179", "indicator--ec030f39-5793-4bf8-8e07-a6c4399cdd3f", "indicator--d637514f-7cd7-4ee5-ac1f-edecf47c878f", "indicator--b4a99f68-badb-42e2-b461-cc6bc52d2921", "indicator--de68411a-9ff2-40ea-8c72-47c9d916aab2", "indicator--74a9e235-5dc1-47bc-8749-7c374e13e689", "indicator--f6d17047-e8a1-46f7-9c21-24ff8b594cfb", "indicator--805e7f98-6de7-4e25-973c-361512606efd", "indicator--4689aaed-2be5-4b8e-85a0-f13b2c4e531f", "indicator--24506d77-e88e-43e2-be86-cdd71287f338", "indicator--67fd7961-c330-41eb-9e8c-8e5fb4c57095", "indicator--9e1560ac-0f7a-416b-b9e0-d2285a1cf0d8", "indicator--434f8891-6962-41e5-a9f9-7036d62dd6c2", "indicator--b45a7045-045e-4440-a5e2-7b33309cbe1f", "indicator--784ca2f4-46f7-4f5f-bfd5-1d1917630fb2", "indicator--439667fa-6b99-48f5-9415-1e9d9ec66b67", "indicator--38a5d8e5-9f32-43a0-abae-69c9f40a1e84", "indicator--ffa23426-41ed-43f7-bc23-3d3f18312573", "indicator--22991f6c-9e47-448d-bd43-b4f7494801e1", "indicator--3dc86807-c7c5-4c2a-9c2a-64fb75014870", "indicator--fbe69f5d-69ee-44b9-9fb2-a3a5a526c9f1", "indicator--86a5b49b-19f3-40c1-b1ad-b82088090bed", "indicator--fc02013d-2bf9-4b0f-bd0d-90c4db0fb6f5", "indicator--c6d5760e-c50b-46eb-9080-6e86c4682408", "indicator--b1569d30-0f6b-43d1-bc3a-3a75d407255b", "indicator--136338ec-23ce-4a43-ab6a-a01bcf8a56b7", "indicator--9283a864-d5e8-4c6a-94ab-84604700469b", "indicator--c3e98aa4-b661-423c-80a6-dfdd6edd1c57", "indicator--17e90c30-5a21-4a1f-9191-c8b4ae4bc82a", "indicator--30b64a30-51a0-476b-92b4-1d8d43cada8c", "indicator--3271431f-cec7-4193-b6fe-ca4e54d58ef3", "indicator--209b502b-6f86-41d3-a989-be7a9191dd7b", "indicator--da52955b-038b-418f-991e-da50b3059662", "indicator--91a45b08-9a4b-46a6-8d15-187e9433f40b", "indicator--11e1f676-55d5-402c-a592-3f1a24855994", "indicator--9785f12b-b2c7-49df-9063-972920310f3a", "indicator--e04d70b8-d8d0-4b9d-8657-249419c53557", "indicator--bc696bc0-c277-476f-bea0-2ab3cbd02cdf", "indicator--0023fc7a-3b01-4ca5-8b84-d996a740f462", "indicator--633812e7-b9a6-45df-a2d3-1360a4e48f84", "indicator--23b26048-86c8-4dc0-8da7-6c7e64bc9c14", "indicator--54a52348-e599-49ff-a1f9-08f859a53c4a", "indicator--ce079984-1fe5-4010-8250-162f5bf394d7", "indicator--b03fcf43-10f5-4aa1-b3b4-a28b5e01b164", "indicator--9b116106-a40d-4649-8d8e-6a1cc0f374d5", "indicator--5e38348c-7fd4-4dcb-90e8-216e5381961b", "indicator--2136868f-4c76-43e5-ad3f-fbd621e995d0", "indicator--d76a88bc-9858-40c6-9589-c32a02f5a950", "indicator--484ca886-176c-4ada-b894-6d53d646827f", "indicator--70a17e51-d373-49d8-96c8-48f24e4e5451", "indicator--3a066bef-73d3-4c85-a5d4-69afbefa99af", "indicator--a7739022-d895-4a20-a8e1-79c9904fd919", "indicator--c77e9e49-48f8-4bf0-912c-3579a484dbd9", "indicator--9c8555a2-afd7-409b-bda0-b169699debe7", "indicator--2ffcfec5-40d6-4b43-9424-5b972945fad1", "indicator--367ec0e0-22c7-4d02-ab5a-59339e6904b4", "indicator--aef71059-8e74-416a-bc97-b583427dd959", "indicator--7437c25b-03de-47df-a801-e697e0500dde", "indicator--418fd926-db21-4d3d-8056-0b7ebd510389", "indicator--0d96c122-093f-4194-9450-2a3d019444f9", "indicator--f92bd93d-5b0b-4c3d-abd8-8c198889f301", "indicator--7dd8cf07-9dca-4774-93a9-12a09c49902b", "indicator--ab338bbb-bd93-4c60-a376-a33195cd5709", "indicator--72f6c582-c3a0-4462-ac83-20968ad74168", "indicator--2510fbc3-8ff4-4b8e-ac9e-1722ef44b5f8", "indicator--54ecf324-ab46-43fc-909d-c2129fb3c8f5", "indicator--d8af72ba-d8a7-4eae-b593-9b675564f351", "indicator--236bb2b8-e2a1-418d-973d-bee5707b1105", "indicator--de6df0c3-86d3-4fed-bcc1-de02dba17603", "indicator--a7526f3b-2e19-4277-9f11-396b299bab14", "indicator--3c80ba56-7069-4681-bf5c-1d2b448b2efc", "indicator--ca2ae42d-c2a1-4c05-9cb0-e5dba41b9f24", "indicator--45d46df6-5eea-432a-af20-4c002ecd16ab", "indicator--4c510763-1fd4-4921-a5eb-ef373676649c", "indicator--fa32ded4-44fb-495e-8c46-29b09b8c7194", "indicator--629380af-afd8-4142-be01-09fdf761ce9c", "indicator--e99ba21f-883c-4211-94ba-ed8fef74cb0a", "indicator--b2b35d0b-15af-4c4c-8420-7be3bd109ef1", "indicator--b9db1283-ea58-4242-853c-3005e8c5eb3d", "indicator--338e353e-8081-4cc0-8621-5a7e8bdb2d17", "indicator--c9f1893e-5e30-481d-bd7b-270b39430def", "indicator--f446cc46-eab2-4dcf-9b94-2049e78efc23", "indicator--b6bdcd43-4eda-4a71-89d7-1d1945cf8caf", "indicator--78f0270e-26d3-4732-8edb-e9c6f89c50c7", "indicator--d7df422f-3bdb-4d59-93bc-c406da702abc", "indicator--e1173dfb-6950-4634-ab35-3a6a3ff6a12d", "indicator--071808ca-51dd-4a3f-b1ee-ca8fed246999", "indicator--c5fc4f60-5884-45a0-9bf7-017bfefe1379", "indicator--cd5e04ce-5aeb-4beb-acaa-538e6cf7c11b", "indicator--be4b8056-8960-4f80-8939-f1871e8157bd", "indicator--2731e8b8-e548-4788-9072-93818567e300", "indicator--326f1fa2-f1fc-474d-aa62-e658040fe715", "indicator--5d8e0803-e8fa-4210-a61e-cb3be99229a2", "indicator--fbfe0d96-58bd-4750-94aa-e7b007c080ef", "indicator--b9c7d7ec-237c-40e0-b29a-98e6cd230693", "indicator--4891cec0-3719-4ee9-be7b-2c1b7430c64e", "indicator--84f04d3e-af1e-4ade-a6ad-d868fec2d1b5", "indicator--7ccebb35-c7e9-4393-8cfa-a10291b2f3b4", "indicator--57907b6e-90b5-44b2-8a7d-b12352bcc1e0", "indicator--e8cea602-db4f-436f-b1ec-95c56958252f", "indicator--319e31b4-e4e9-493e-aa44-901ae953c270", "indicator--e956a235-638b-4aba-8ac4-8bffe98eb6a0", "indicator--3dd12719-38ef-4432-b401-28a749ed4a95", "indicator--3842ce87-3fb0-4fa1-af50-e75c05322084", "indicator--cf9827f8-eec8-4f35-9a0a-ad7b11721fa0", "indicator--791253d7-d6fe-4511-ace2-4dcc28138804", "indicator--1f0c73d6-b9b3-4fc1-b9bb-ac045337401e", "indicator--1a30dd0f-3296-44fc-ba43-f9642131a885", "indicator--5c903bfd-93a6-44d6-8491-80d1d4ab08f2", "indicator--786f0970-513d-4dbf-9d8e-94e232b6bb1b", "indicator--e0301ac8-af43-4b9c-8f6f-125e77344fd2", "indicator--09e08ed8-d9fb-41b8-ac46-2682f064dbdd", "indicator--ccb29efb-fbe2-444b-97d4-01d728d035c7", "indicator--9a5ae2e9-143c-4e5d-a9cb-b6a4ddb3771e", "indicator--67c69977-5f78-41a7-9151-8b7ad7a0c9b5", "indicator--e418ffa2-fd55-4198-a53d-b0aac1b43c69", "indicator--3c2fe74f-c75a-46fc-822e-fae3325085a6", "indicator--928254c3-440a-4ea4-bb2e-65b7103a6895", "indicator--101330f4-a4ec-4e4b-a82d-bbc78eda899e", "indicator--39a6546a-f80b-48ac-8ba6-c4ed9806b27c", "indicator--fbef44a3-ea34-4797-a860-8a31a1d3d251", "indicator--d02a2334-6b0d-422a-b16c-7d87ab081328", "indicator--2b94fec5-2b0e-4af7-a394-34bc24103683", "indicator--78ad6d0a-84a7-4997-bd3d-d307a37ee9f0", "indicator--734939bd-92d6-441e-8dd2-06a7e89fbae8", "indicator--c14204d4-3f47-4869-a18d-21234451a6b9", "indicator--a2da2a85-7acc-42a4-b77f-f5de4d9e3a9c", "indicator--53469e53-aea1-4f30-bbee-752d97b59ebe", "indicator--2c950951-dab5-4dab-8185-9c73db69bb27", "indicator--34070f94-f98f-47ad-a7b9-e3d0b635b96a", "indicator--43ffece7-6a90-4626-83b7-c8791cc1ff7b", "indicator--9e2e206d-ca93-4b4d-a6d8-dd9ca9bf0f78", "indicator--6030fb50-476c-445a-a98b-e855ca21e03e", "indicator--88ccb99c-e509-45bc-b746-6929568ca4f8", "indicator--947ffcd8-2494-43fb-8d5f-7c1dc79f9db2", "indicator--42030595-6451-444f-92bc-b2d1b8a39d40", "indicator--e17871fd-e34a-4e8b-9ffe-aed537080b41", "indicator--cb5c3035-79c1-44ae-af5f-c25fdee7cd24", "indicator--6b11600a-0b46-43fd-97fe-dc4568651611", "indicator--7dc02b39-2a04-4876-9d3b-37a4ac735fe9", "indicator--25aea163-d565-455f-af3f-7e97d70c48f1", "indicator--43933f46-c3cb-4b4c-a12a-6b7c5af579ed", "indicator--dfcc103c-17d8-46a0-8992-f6b4d7d2a7e5", "indicator--e61dc89c-18ea-4f46-9f5b-07c47fe183a4", "indicator--e59aac1c-87c3-473d-8d94-eeb3e01fbbd0", "indicator--c2efe4c0-5a2e-4ea2-9fc1-639af08cd9c0", "indicator--533676dc-bc0c-48d6-b5f2-5384934cb9e9", "indicator--168a6acd-b244-4451-80f8-68555326e85f", "indicator--4881c6c4-f6e4-4b55-a838-3513f8f0fa01", "indicator--b50b13d8-234f-4f11-9712-13a82244d2d3", "indicator--6823691a-bf6a-4ec1-8b7d-1fb5ec71b02a", "indicator--cc205d2d-5899-4529-8a8b-2ee3a55ce350", "indicator--7bb0f1ca-d251-4591-a9dc-2a72310c3498", "indicator--e42cda3a-28b7-432e-9d9d-3844e9c7e300", "indicator--68d5fbf3-a8f1-42e4-8fab-1b2875136e0e", "indicator--86cd96d2-aca3-4fe1-acf5-b3c41eeaaa14", "indicator--7967e4e8-2ec4-4b72-952e-27b80adabab3", "indicator--12c0e060-13ac-4409-b8c2-a8bfe2c1a049", "indicator--0ad455d3-7907-43c1-8230-e4fef407f058", "indicator--14726f76-3b0e-4214-81cb-21b686883724", "indicator--59c35ac9-c0bf-4845-b425-db292fbe0013", "indicator--aaaf57b4-1114-4124-a48c-2f3f74128046", "indicator--a05e5663-9c00-44ea-a2fc-b1aaff2cd7f3", "indicator--decd6006-7ac0-4bfa-bf3f-3a4e06880099", "indicator--bbfa9457-9e72-402c-9e2f-8c59777da81c", "indicator--5538978c-b409-40e9-ba8a-5533ec89fb6a", "indicator--919949b3-bd08-40ff-b838-104486d9c13a", "indicator--21e41fc7-41cf-4aa0-b8ad-98cdea2478c7", "indicator--7280d070-95af-483c-bdfd-01b403a26742", "indicator--e1e0267c-56de-487f-b002-16efbb2136a6", "indicator--9f2b3a3d-8a22-413b-b22a-b7fe7f648c8e", "indicator--015b217b-e5af-4ac4-84fa-c9c8b28bb56c", "indicator--7d060e08-a0a8-4f17-b012-fa4f2492161f", "indicator--0c68d048-4534-42c4-bf0b-3a2714b5fbe0", "indicator--7bbfbf85-1c9a-44ce-ba3d-8b6960f2fda5", "indicator--4d15637d-f71d-4c15-81e7-7839e6b2a1df", "indicator--942b9b4e-061e-445c-97c6-887087afc8b7", "indicator--5b15554e-4d34-4fd4-983a-0aaab0e94e66", "indicator--2fe3b4c1-69b5-41e1-93ee-58058722f1da", "indicator--b552e8ab-4c6d-4442-af97-00039d661c30", "indicator--272e3bde-2842-4e7d-b418-438b4128f959", "indicator--a02f20c5-4b16-4f3d-aa01-ede888fdf131", "indicator--412eedf1-4cd5-44d9-8dbc-08b36b268123", "indicator--658f029d-d040-452d-97c0-81f1f786bb78", "indicator--776b1908-5436-4c0f-971f-1ef307f36ec5", "indicator--385b466b-41eb-4237-9410-df8da9b35566", "indicator--ad0e3f1e-7e52-443d-9a82-65a9a7445114", "indicator--b3ed0686-33a0-409d-9c23-8cd916c6e367", "indicator--8ad16f9c-7f42-44ba-bdd0-2d233cd19336", "indicator--6dc546ca-8c0a-4ed7-a86d-c751d4abb34b", "indicator--2ba4d548-16fe-452a-a790-05f89f34d9cb", "indicator--ac46d7e5-0bb2-4f10-bff9-ac1f0af383b3", "indicator--cb3c1c7b-b272-4994-8c48-d99c24219566", "indicator--20feff79-f30b-4007-a93d-1b2f57e94297", "indicator--17dccdd3-a352-4f0a-865e-1389c03c35fe", "indicator--1a3ad9d6-33f0-44fd-930a-97479c48a18e", "indicator--7153cdf1-2788-457a-b3fb-5aa8671b16e3", "indicator--9f2c5cce-f306-4146-80ef-356ce22254dd", "indicator--3b1cf860-1f16-4d36-b839-23f57b990098", "indicator--09179c51-1e5e-464e-9531-754faaa50081", "indicator--dddb7c26-b472-4bf5-979f-423e2fc066f1", "indicator--30c6390d-6c97-44eb-a93a-a0a44eb041f5", "indicator--45465020-6c2c-4eb7-be74-1e2ff1127f6f", "indicator--9faeea9f-f6a1-4d39-9055-2fd11f7c1128", "indicator--9e28d5a1-c126-489e-b685-23abd337d79b", "indicator--0f0184ed-f935-4279-88c2-fd88e9a3cbb4", "indicator--b4a5765f-1cbc-400e-b092-5d05c51a1682", "indicator--ee1ecb0d-b345-4887-9f29-67a06b3d44a5", "indicator--d16db567-f925-4f20-9568-2067a87ba867", "indicator--255b0c9e-bd92-4e06-9a07-3fb0f2af8f62", "indicator--fb5db02b-c936-4440-9f1b-614d7030127e", "indicator--1aab1832-9900-4e2f-b94b-139fe95cdd20", "indicator--8148b2f9-9e12-4ef7-90d7-bf21c4eb9b3c", "indicator--c1b7b075-c90f-4dfc-9bb8-3f9e8e09e649", "indicator--d2f46f4d-94e0-4617-9559-72a4ce6ec898", "indicator--c2ef82c9-0d28-4f3e-8fe4-34ca9c41101a", "indicator--f918deec-717d-4510-8347-fd77aefbee93", "indicator--12289303-8a58-4a83-825e-6ab7a02b7450", "indicator--a0b570c5-1fac-45d7-b038-59a94e5c7daf", "indicator--4bfb77da-c9c6-4619-b0f7-9824e6a2ab95", "indicator--51ec2c87-829e-4f5a-99fe-11754a041b86", "indicator--803e9cc1-30ea-4898-a649-b355b84e3c4b", "indicator--539d85cc-8a6a-4301-856a-265f335511c8", "indicator--9531892b-deb5-4d1d-ab5b-b839b80994a7", "indicator--896b54ee-f400-46c3-aedc-7d4d38e32d0c", "indicator--cda27908-a421-4170-8f1c-5cac46759143", "indicator--159a7bef-00f6-4e2d-9a12-593319ec2640", "indicator--7e4d14c7-29c1-43e2-a935-2a156073cc70", "indicator--99cf8633-3cf9-427d-8ac4-2a44bd248e98", "indicator--71cabfa6-875d-4801-8f36-fa113b8e833b", "indicator--b075bc8e-6736-4531-9f65-68b708fb9a09", "indicator--60fb794c-c194-4de9-bf55-9c4451ce2659", "indicator--34f15113-9543-4ff8-87db-f40775daaa79", "indicator--41006c28-c829-4ac8-bc3d-f8c7709e71cb", "indicator--8c6aade0-a181-4ce9-b789-b0fbd9b93589", "indicator--04724313-ae49-45c4-ae22-00ac059aae02", "indicator--6d3a9519-f6f2-4541-9348-7ee3a3930b97", "indicator--547a9447-cae3-40b1-8a4b-f005fcebd80f", "indicator--82346f37-f710-48ba-b411-709f8fe57f48", "indicator--b3767436-e05a-4cc8-912d-6223998ac904", "indicator--b048d071-1e31-4a88-a4b3-24bc0632cb92", "indicator--9721d245-c271-477b-9ca7-1c53b08320ab", "indicator--70d31540-39b7-4ad0-aed8-a90304af55ec", "indicator--fca94f65-88a8-4dcf-b09d-b8d4f4440eea", "indicator--ace8ca17-3f4b-4f77-b060-b7a403946419", "indicator--4909e7c4-aae1-47b1-863f-a6e93afbf403", "indicator--9656fd5a-a31c-4f2e-b8b5-fcb3d2b9c697", "indicator--8aa8e1b8-4ad9-4a0d-9ff1-50c62d6da1cf", "indicator--7122c134-71c4-487d-84cb-85651e7d232c", "indicator--e8686a7e-7d0a-487a-b0f6-9061c84b78b6", "indicator--b72f79ed-d943-46fd-be0e-358f84a024ea", "indicator--18a74fa8-672b-4504-9518-72da12d6c233", "indicator--2cfa2f11-530d-45fb-8cb7-832eacaba81c", "indicator--5a4baeaa-30b6-430e-a032-c3bfb93306e1", "indicator--fe2d0d55-3de6-465c-aec1-15250b7bde7e", "indicator--d22bd92d-dec5-4894-8d38-1e296e5dc100", "indicator--e80e9879-2dcb-4d21-9e3c-d9a500d403ea", "indicator--98b5d2b7-9e3c-4700-94a0-721521ecd465", "indicator--bf5a1cae-7f4a-46d1-b429-2e2a5165251e", "indicator--690981b4-5a34-484b-a9d7-51f3f2a189d0", "indicator--aa3a7a88-1c4b-4205-9565-0eb4ef1a46ca", "indicator--97e6bbe0-c86b-453e-814f-b3ecffc28d82", "indicator--5c3ffc09-3e82-4765-b98f-df39609cc02c", "indicator--754d0431-cf45-4520-a35f-9a3ce74b9920", "indicator--9620aaf4-75dc-4c37-ad65-f7d6d0285603", "indicator--62bc1c11-ecb2-4649-9c22-118ca869277b", "indicator--94322b18-68b1-4128-9d97-3ede55989eb6", "indicator--013b5e03-4a29-40a8-9732-412cb62340c7", "indicator--47700027-8f44-4d3a-8b6f-2898274ff794", "indicator--9e36be44-b0bd-4354-a35d-575be4bc86c3", "indicator--347665f0-9257-48d2-9d7d-67cd89f32c4d", "indicator--3c1a12ed-7f0f-4868-b931-dcfb0a4c323b", "indicator--8b1d7e6d-18a5-4c9e-907f-05c46e4ba7a1", "indicator--e6497cf7-7462-4adf-bf10-316ae37bf48c", "indicator--b7b117c8-c9d4-4799-ae7c-b20bbe3d324d", "indicator--f8b9c1ae-7441-47c7-8f00-8a37d445f1d2", "indicator--b0f2479d-0e65-4622-9f4d-570f8e2084ce", "indicator--5985f30d-356e-4cb3-aa6f-020ff1bc06e0", "indicator--e9a9605f-2991-466a-b6a9-546309906536", "indicator--e8b977e1-b198-4284-96e9-16e1834e8083", "indicator--4640cc7a-6135-4050-84df-a20d10cfeeac", "indicator--fd2be1fe-4186-4fe5-9102-c09f266817fe", "indicator--4b282d5a-5e44-4d3a-b0ff-1ab5d20ca7ff", "indicator--d231eae2-95d8-48e3-860f-47779c6662ff", "indicator--18c53813-366a-4d24-90ca-1ff67bc6c177", "indicator--ff9f3803-6030-4750-b1a1-3ef08220b8df", "indicator--503a493a-864e-4ab4-9898-85e6e30c13e5", "indicator--ea92307a-0fa5-4a42-ac9d-107feb976be2", "indicator--3927fc93-619d-454b-b0bd-49d11b83ef32", "indicator--9a71d754-fd6d-4997-afdc-4d7fec19e22b", "indicator--b9efeca7-cc25-4189-b077-160a766def27", "indicator--aa171dac-ad3c-41f3-a485-898d9ff9b8ae", "indicator--d76d1545-6f46-4e2c-9174-0bcedbfb228a", "indicator--5a385a17-3be1-48e9-ac97-8fdcdaa60049", "indicator--ad38c49d-277b-4e86-bd58-2809771f3897", "indicator--9eb833bc-faaa-4c15-838b-25ba0adccace", "indicator--dd9c7894-8324-400c-b43d-44b64ebf2256", "indicator--72e2ba02-50c2-42ec-ab9f-3a6abe39a1b4", "indicator--2dbb7666-602a-4bae-a863-280db6eab10c", "indicator--c08a9595-ab29-48f7-b395-fe0d3a1eb126", "indicator--fe671ad6-942a-4053-8cf5-8b80b5a995c3", "indicator--6c06f5b1-3fce-4392-a1cc-8ca29ad7aaa5", "indicator--fe1de2df-5b6c-43fa-8e62-3509deee8999", "indicator--71299366-3f95-42c3-99d2-8d527fcd2f88", "indicator--b241b55c-e929-4962-b463-085b2131eb08", "indicator--c53ff3c5-2b1c-478b-b867-976d57bf9f9c", "indicator--b934aa50-382b-4019-b8ae-96f2a0713bb1", "indicator--12693d44-247a-4d88-9a6d-f936b9924953", "indicator--d4c5b325-a05d-4066-bb8e-3105635bcf90", "indicator--70c32e72-e91e-4725-b336-23faf5fe2970", "indicator--afbd333b-7aea-41d2-a5b1-489ec6b8194b", "indicator--61f54ba3-66b3-414a-a09f-e879aeaf29b7", "indicator--42bd3c78-d538-4408-925a-fd907419f800", "indicator--7eff3e9a-6ee9-4eb3-8042-48b3770eb3f3", "indicator--91e1bd2e-b5b5-4b06-91d0-ebdaf8f1f3a0", "indicator--41ce3ec2-3a3d-4c19-8f87-5f394ea06926", "indicator--636781d8-e53f-4795-9b16-e50cebb49053", "indicator--5ce73c16-fd79-4142-992a-598f3b4e69f7", "indicator--f3fa87cc-9965-48f7-8c0d-e8a1a27ec46b", "indicator--cbe315e1-a53d-433d-a184-e46ce164bad2", "indicator--de838e2e-bce0-4bd6-9da8-982c5465f132", "indicator--b7f711f2-8226-4b8c-830b-380f36583e5e", "indicator--c2e6d8ec-a9b5-4a3f-9d68-300dd02a8ef2", "indicator--f1b6f2f2-bacb-470d-b685-13f4343b180c", "indicator--f6c69134-7265-4bdb-85cc-630cc6771786", "indicator--18b13041-dc4f-4779-b81e-978fbeeedaec", "indicator--4eb61d2b-d7f3-40f9-915f-0a719e89cee3", "indicator--6f8084a8-3f99-4642-91fb-37cd4faac0af", "indicator--a770248f-5a61-49d4-b292-115926220560", "indicator--ba56ca14-b5db-436c-b94f-94f38cd69357", "indicator--c5384d95-521c-472b-bcaf-c135a9ee1b71", "indicator--41e06001-1f68-4014-b167-cbd6bd59e82b", "indicator--9ca39dab-5f1e-42c0-a2ed-101098aa2b6e", "indicator--a1688ea7-419a-477b-903a-36d537d08823", "indicator--5d52077b-f9bc-4ae7-9fba-d63d8c8ab7c4", "indicator--31b4ada7-7a00-40bb-b123-897aeb77888b", "indicator--ef18451e-da0f-4ce8-acf0-0aae12bcb428", "indicator--ff90965a-0c07-459a-8b95-d5278cf117da", "indicator--93af161b-5629-475b-9519-a38814dbd248", "indicator--ea2b2146-67f4-4903-85f2-3d7b49be8ce0", "indicator--76b599b8-3694-4402-88e2-63ec8de075ee", "indicator--f568fc0d-5754-4b4f-8c54-c10da87c8d65", "indicator--2359f2d0-3c3c-44ee-bf2d-163e3adb39c9", "indicator--c9d76df3-99bf-40f8-aae8-1236045e32e6", "indicator--37e5b11d-001e-4761-9d4a-016b5e749a2a", "indicator--2551026a-c018-4c8d-b698-90f706ff6a2f", "indicator--31ab3330-61e9-4b46-83d3-13bd86d4cca6", "indicator--20cab554-141f-4226-8cf4-14a39213d0ff", "indicator--86a99813-9c2c-4dbd-9462-d4511e4b4e83", "indicator--ec69d157-0704-4e7f-90ae-e1846b7b63b3", "indicator--a31875b2-a6c6-49d4-a1e3-ad957281d95f", "indicator--4f3c94de-b353-4bca-bcbf-8c1d447eab3c", "indicator--69c9f73f-8213-4e8d-a5cd-72ab1d35573f", "indicator--846e7fb5-c1a9-4fa6-beef-5b319eae4b35", "indicator--1545434e-5751-4f39-8de1-b8a57013cc3d", "indicator--0159d706-9c7b-47e8-b7a1-70ea77d7c836", "indicator--e401ae82-e563-4c1e-b3aa-c81784bdb73f", "indicator--68a75529-294c-4c5a-b758-dea5c6a65319", "indicator--e76eb0d8-5541-4667-bb6f-b35d737be065", "indicator--4214148d-989d-4d14-af14-e1fb5a5b547f", "indicator--72278087-bff3-4012-abae-83b525276720", "indicator--838ede16-be41-401d-ba9c-33d703055e71", "indicator--0b14d406-f060-421c-b7a0-72f2994487a6", "indicator--0a1f172f-5e8a-4875-8b2a-3ff94236b11c", "indicator--2a4a31fb-4bcc-44dc-a967-5229aafd8192", "indicator--18d56474-06ac-43b3-8664-9620b3dfa468", "indicator--e0c4ac25-1368-44bc-b51d-b57cc313457b", "indicator--34af69ed-26d0-4979-96ce-61871435a6a7", "indicator--b1011f8d-1435-4c19-8a7c-4fd7cafb1507", "indicator--61a85a24-c041-48e5-b46e-72c01d53b82d", "indicator--4246c61b-470f-482f-b50f-25eb23a36ba2", "indicator--4ce6f991-5a7d-4e8f-9390-12f099b951ff", "indicator--b29f276b-f4f3-4760-97a4-f67de2cb1394", "indicator--8f14f55f-1154-4476-8e4f-c3af6ef4b7c0", "indicator--ed4c75f0-bce8-462c-9a8f-d670469992e4", "indicator--578103b4-e490-4924-8c92-444548d1951b", "indicator--4cfb913d-ba24-4ddf-ad7c-acf30b3c5751", "indicator--476f9e27-7345-4f83-8a17-388e1fc94167", "indicator--0a9efbb6-9af9-4a62-aad8-4b43be92b1bf", "indicator--e73e97c8-852d-45e2-a292-ecacbd910e5d", "indicator--9d7d137f-3b27-4dd7-994e-76014bf80b0e", "indicator--bae447fe-b4cc-4e2a-a152-bf3ed3e5443c", "indicator--b4fe5268-a4fc-442f-b9be-bb7ca5b8d1f2", "indicator--7d2b462e-1a2b-45f1-8eef-fd0ce04bd2b8", "indicator--9eddf63c-e5d1-4425-9a59-9da6675788f2", "indicator--d8afb686-e390-444f-b261-8aefb1648727", "indicator--03fefa71-918c-46ea-8eaf-5f8197f7b62a", "indicator--7a380f9c-e3f5-4758-933c-c74319fd41d4", "indicator--7191c593-eb0b-4b97-96d9-6cdbcb267a83", "indicator--3bd4658e-6451-44f8-897c-85d014e489dd", "indicator--c2445908-0c44-4910-afa7-40ebf7a07365", "indicator--14229328-ac6a-4530-bd8f-371ac6069c36", "indicator--6e9c628c-6af4-4624-8ca4-062ba4d31242", "indicator--23538205-dd8f-4e2f-a380-d625672668d5", "indicator--c529b13e-79ee-40ec-b8e9-1df732d94c77", "indicator--1fff29cc-31bb-43e7-88ee-c9534f7e1b5a", "indicator--acd8bbda-5d93-46e6-a7c5-7b847359af6b", "indicator--2f553213-14cf-4e66-9dca-71bf7b99d6d4", "indicator--76a06ac1-6bea-428b-a679-df1ff8521300", "indicator--3e6881b0-790a-42bb-9be2-a6fe76fb8687", "indicator--3c15d846-2579-44e9-b51b-7671a861ffc3", "indicator--68de937e-93c1-41f1-a112-1e2d70142e63", "indicator--68173b40-e307-46a3-930e-1de1609f2ef9", "indicator--c76688f7-fc81-44d5-a0a3-d17e67e8780b", "indicator--2825e8b2-1b15-42ac-a819-440f9210a73e", "indicator--518a5460-1cb7-4436-9671-4264d9123b6e", "indicator--b4c95fae-cf18-4f3f-87c5-cf8012893f5f", "indicator--82e833f9-126b-4884-afe6-285bf04e6897", "indicator--c57012cb-adfb-4528-9daf-e2b921a4c57b", "indicator--04d026a5-7596-4bd3-963c-8b6ca53f9251", "indicator--b6b54898-0f74-4d00-87d6-1f38742abfb0", "indicator--5e370cd9-bfdf-419a-b5c6-f1f70c4f3a63", "indicator--4e3ac632-ba14-4859-acf2-8fe12ae8875e", "indicator--7feccec2-aa32-4653-8d49-499c1ea4f495", "indicator--5ff4cacc-af80-4f8c-b602-476a41906d10", "indicator--f7fc74e8-a419-4bea-8713-4c9355825db2", "indicator--bb20d865-5221-465c-966d-e425afd25c01", "indicator--3a08edb2-0ac8-4b50-a42a-c71cbadc2dcf", "indicator--b203431a-4dee-479b-af64-a99ab4668281", "indicator--a98e07c4-9d47-45b2-aef4-6b5a04e1a537", "indicator--231fa077-044c-42da-a712-1a62f6802679", "indicator--5b100d1f-e939-4037-b6ff-3e37cd11160e", "indicator--7ab5ba1b-c854-4c5b-9b49-87deefb8a580", "indicator--ed356de9-3e63-454b-b7f8-930f31354d45", "indicator--0d3ec35d-e67b-4356-b457-17e2f777f3d7", "indicator--af0be6f0-46bd-4ee8-89be-69955e2f7482", "indicator--f4bb8dfc-3a09-4ca3-828b-1721e884477c", "indicator--8d3e5180-6e9c-49dc-a777-809110f093ba", "indicator--b6aa5e66-5b75-4218-9c18-a5c4a097a5d7", "indicator--2c643574-0a75-450d-ac43-bab7a32b6811", "indicator--ae729872-56e5-41fa-bf87-ff92cdcf0543", "indicator--37d63ad1-3a87-49de-b985-f7dac8b027cd", "indicator--e0df7cbd-9f4b-417a-9a33-472d4c6a7f7c", "indicator--78b019a8-b864-41f3-869a-47bd1d53e9f6", "indicator--e0e2e7e0-8889-4ed5-81e7-499a0c365065", "indicator--eb24864f-bd37-4bf7-af9a-36487e617e18", "indicator--46f18a3b-a9cc-4d9b-b7de-1af11b9ce3a6", "indicator--e5c6f000-4466-47d4-9f1f-c13ca1e87e09", "indicator--a06a69e4-aaac-4767-aee7-99d0e8eb2943", "indicator--46550da6-ee6e-4b5c-9348-a09a2fd38a1b", "indicator--b8dd7c90-531f-4d3f-9927-dc2263e76240", "indicator--d928ebb5-3d47-40ad-9871-f2032a8e2e33", "indicator--b6a2752d-afed-4320-88de-5250607f537f", "indicator--928c6c23-a370-4a42-8e3d-5edfb07a4914", "indicator--1b83dbc7-655d-4bec-9ddf-81e3e46ac33b", "indicator--674b3ef4-ef82-453c-8e09-c6595ef986be", "indicator--41c9c23f-9c14-4645-b5f0-c15d6f75d33c", "indicator--f9215ece-08bd-41a5-b943-a6669b45c268", "indicator--208a0552-ffed-440f-8b6b-ef8d5be5f90a", "indicator--9be54477-48b8-43ab-b449-2b6850c9a53e", "indicator--331373a9-e07b-442a-98cb-632744a023d5", "indicator--ca85d197-0456-407f-a690-6c5bdfc769ae", "indicator--7f2dc40c-90e8-4cfd-883d-900826c88cf8", "indicator--b5f5d7c9-fea4-46a6-a676-d3b4ce8ef3fa", "indicator--d1ff63a0-b211-4ee4-95ee-05726011162d", "indicator--fc9f0132-a3e8-4b58-8d02-a08357ac8460", "indicator--4a8abf8f-3ca8-47bf-8b8a-5640ddf4c084", "indicator--7180e4c4-46ce-48f7-ba88-2f0f070d15e2", "indicator--fb6f8d54-319b-4e20-bf1e-a668906a40ff", "indicator--b9e9bb25-715e-471f-9061-906d8a4cdff8", "indicator--05a68ad1-875a-480a-ad06-b87e927c07fe", "indicator--ef8613ab-3138-4ef1-99ae-3d897a11159b", "indicator--3777f0f4-3544-4a37-92ce-fea2bf7808bd", "indicator--a2b20acd-b9b7-40a6-94a1-7cd055f96b81", "indicator--d81754f5-0c4d-496e-82e3-5c7e32807f30", "indicator--e2f89808-c57b-4eeb-b163-8dd4d410c70c", "indicator--537df06c-3a92-4fe6-9d2e-3c53416fe249", "indicator--4be957ef-fae6-4c88-b01d-49109f37a30d", "indicator--6ec9f1ce-dfec-4a8a-9940-5ed240b09b92", "indicator--28b8cbbd-7f45-4c34-aa8d-746ccbf9ebd3", "indicator--53bf2342-e585-4fcb-ab5a-1418747bf761", "indicator--87838447-dd0d-44e8-9c4c-c477a36ac8c5", "indicator--c9129d2a-9f0f-40f8-aa18-fdf0c1fb55ca", "indicator--f71e5dd7-66ee-4805-bb35-9e1b30407d8a", "indicator--97882b07-2a48-45fa-acd7-b13520b1caf5", "indicator--07952723-5c53-45b5-b188-63cdeb94962a", "indicator--4891bb9a-90f3-4e99-a609-ffe7413a1680", "indicator--fd175baf-9ef9-430e-bee6-ca9865fcb0e0", "indicator--515f4e13-1205-4113-a9f0-b6b228e972ad", "indicator--d5de1ab3-bbb3-4537-a9d0-8c2c0868ac09", "indicator--2ed10870-f17d-43fa-aade-950dd0587719", "indicator--bb7a514f-c55b-452f-9a45-15989a26ac33", "indicator--a910ab30-ec5f-4176-b3ae-add18000f84b", "indicator--9f05b16d-3865-4cf8-beed-1d16b1fdbb7d", "indicator--6f254c18-f6ea-4d64-99a8-9f6c355f221f", "indicator--ac427931-48d4-45f8-8400-f4bf90269478", "indicator--8182b8c5-9ad6-4f30-85ac-a5be924e7667", "indicator--4a613ae3-f310-4974-a852-ba1222b282a6", "indicator--d196eaa6-c6d3-4a81-bedd-5673db01cd4f", "indicator--4c77f489-0235-4dfc-902d-2f641d67d94f", "indicator--3243d258-5a6c-4b0f-9457-0fe3dff08302", "indicator--c1da931d-0386-4472-8c6a-c8819f3082a4", "indicator--b39406c9-3387-4c26-84d5-cd1af872785a", "indicator--ab00f442-b9ba-45be-81eb-baf8713ef613", "indicator--934cb7fd-e5f2-429e-845c-51258d02aa8d", "indicator--273ad2d6-9b6c-444e-b8e5-f2bd161dc168", "indicator--47ba5e6f-7901-419c-9a1f-b3d94968a0d7", "indicator--3984def6-bc7d-4dbc-ac2a-486c7424eae9", "indicator--16918353-4f3c-4ab6-8e41-ca208ea12bde", "indicator--d57f16bb-1fe0-4b11-a86e-cc59376a645c", "indicator--4e7924be-f9aa-415c-a181-a1e1c73d94f3", "indicator--1487b5d4-c5df-4db8-a107-5986cb2e7819", "indicator--bc139c1b-e800-4c6b-b064-37936034a522", "indicator--0c2385d8-67e2-447f-b3fd-26f2ce909f08", "indicator--955efa4e-3fee-464c-bfe3-3066672ff6af", "indicator--1160b80d-248e-4b41-8b53-762cfaae2e25", "indicator--740404e2-ac41-4f81-93ca-5485400c65b6", "indicator--cb18746b-6d08-40d8-b23d-1045c8b4b6ef", "indicator--552ae1b2-1de1-4ef6-8623-4e5d0ae92596", "indicator--f2c57b57-5e3a-4dea-8365-ad9c70b06aa4", "indicator--c9070786-a060-4af0-b72e-6010ac7021ce", "indicator--b30ca4ae-6fb5-430c-8280-9262eaf6f89d", "indicator--740a7ef2-cc6f-41dd-b107-a72f8b541e7c", "indicator--1a6b8bc7-4d48-406d-aaa0-87a34201c73a", "indicator--ce74006e-820c-4206-9aae-218e4efb18bd", "indicator--0a6986f4-d6b5-422c-8860-9634a9ffb48a", "indicator--6621f333-41e9-41c1-8093-4bbcf3d9240c", "indicator--669b225e-2a54-4b1a-8cf6-03e9ab382205", "indicator--31e5bfd9-5d36-4a61-9966-8ae3b8b08132", "indicator--11b06374-714b-4e83-b55c-a66055ced9a3", "indicator--b4693053-6a31-49c0-848d-187d86d607c3", "indicator--1071c68f-8c86-41f9-a498-621753f0d8b1", "indicator--242a1b0b-bf9c-4ee5-9f04-d3fac05491ee", "indicator--f31f4993-7a21-4f7c-825b-9b8b8659b0e8", "indicator--01d65db6-2ff9-47fc-a355-be609d2b9838", "indicator--547f44de-378d-4acd-9872-59d98a3ae1f0", "indicator--29d949a1-e028-461d-b83f-df3ce0279be5", "indicator--86bdedb9-3887-4b78-901c-7fa6a4b23afb", "indicator--53ff8062-a3bb-424e-bd1e-ed4b10ebf1ea", "indicator--32df9cd4-5393-488c-824b-9e9a61fbc5da", "indicator--d911ccc8-4756-400a-9e02-0505a486e905", "indicator--bc079b2f-dbb8-4d37-8826-ee89741ebc66", "indicator--724c777a-b002-48e3-96e5-d86c913e81b6", "indicator--ba60ddd1-e8cb-4964-9d6d-c7a84ea7818c", "indicator--b917b758-4c9f-4272-bbda-87e741ba6a47", "indicator--a8f93a2d-92bf-4208-b987-42ffc99b1755", "indicator--97b38d63-eb36-42b3-a669-65326f9aed98", "indicator--568bf1c0-b1a7-4cdc-ba74-3857e7e9e073", "indicator--45c6c72d-9b69-463d-99df-5b86c10c7eed", "indicator--00cb689f-c0ef-487b-8aeb-52299ce38c13", "indicator--1c83748d-f3a0-46e1-b22f-d51311bd7e8f", "indicator--b722d813-51b2-4c00-8c8d-5df56ab49bf4", "indicator--28e94cbe-243e-4643-9161-883c619c1217", "indicator--0cdd5763-3d81-4196-8211-1b077d7dc084", "indicator--4286699a-dfe4-4299-bd6e-3faf33c5f8e4", "indicator--5f2a31aa-f8d5-42db-9473-4619282c46d0", "indicator--08149d0d-09cb-4893-bc99-5294b4dd1006", "indicator--604e1520-b725-4d82-a394-a60698989959", "indicator--4c195fb5-b2a4-43b9-856f-4e2406ad36b6", "indicator--6606b6c7-5078-4515-ba24-4312557362f4", "indicator--6b4588c3-3215-410b-ae5a-a02de98c6229", "indicator--ecc43297-e662-4ff6-ab03-4e3dbc21f785", "indicator--72e63ca9-3cd3-43d3-8eed-bca7bdb0aa37", "indicator--6027ff06-3b98-4fb0-87ae-103f8704c736", "indicator--67749d3a-7476-4453-83ab-e539bdafbbae", "indicator--f60a81b2-36e0-4818-aecc-d026b054c974", "indicator--63ec0b60-0432-4c78-b893-8d2f8cd5507b", "indicator--7b6c34fc-1a18-40bb-9e77-628ca43e3757", "indicator--b0fd5ba1-4d31-4bb6-b80a-b0257794066b", "indicator--efb6a1db-a234-4b9f-b2b3-bcb0f5f7326a", "indicator--53d88496-8eb0-4f50-a984-e921ea47ff99", "indicator--b87ae093-f3e2-4b22-87a0-e166dbca5d71", "indicator--e20ea75d-7cc4-4c11-95aa-26e5593a37d2", "indicator--55f0f143-19fd-4747-9b29-6fec03d02cde", "indicator--d7a6f658-fcf9-41b5-becf-7f08868a1a18", "indicator--fd058cc0-226c-4df8-9b6d-b883c44b365a", "indicator--3db2ab50-03d7-449b-b746-0a190a164a40", "indicator--7917bc96-dac7-4a59-8fcb-f3d6259595fc", "indicator--1bf68c90-aa0e-4c4b-8787-a637360e88a6", "indicator--c8a1d4a3-49f8-4d06-bd6f-5e3c85e1fe18", "indicator--169f056a-2947-46f2-9bc0-78a665bb09fa", "indicator--cf8f2dda-9665-4c0f-b84d-18503e034400", "indicator--8602fbd1-91ff-493a-9937-1c29bd86c511", "indicator--f620f7b1-479f-4910-aefb-5d4ae38d5545", "indicator--a7072126-14c4-4c49-b007-741b1c9f60d5", "indicator--96aca862-da34-446f-9654-a652d48f5f37", "indicator--28893220-7eed-41dc-b6c5-557f4e5ced0f", "indicator--098843f1-5256-41d6-babd-6f8edb3368a5", "indicator--d897083a-61e3-444d-9782-f95a7107c138", "indicator--6987f778-9033-41fb-befd-2e4e8d91b9c8", "indicator--acf9c48c-1ea9-4430-88f6-3a24d4ed94f9", "indicator--95aa812f-4c7d-462c-8930-232b9168e287", "indicator--f373b7fa-95f9-4d95-ac61-548f90d33078", "indicator--46544851-0cc5-4d6c-b9a8-38f95383c590", "indicator--0c099c53-2c46-44d7-b080-472703ecf0a5", "indicator--ba41fa96-7a85-4fda-a290-da31821c01d6", "indicator--519a9c86-38a3-4945-80b1-8c9df317ecba", "indicator--5ecc022f-4573-4d05-b11c-979f395c4fa4", "indicator--7d5f48e8-7d7d-4f11-89e7-2944654ee647", "indicator--c9359b16-9e3d-4d72-a8c6-59125cd351a5", "indicator--19ea0c9d-cd7a-47d2-a787-54af29f50287", "indicator--d480bee7-3841-4409-923f-96efb513c15b", "indicator--de5b91d9-ccee-4cb6-82da-608e0cf071dc", "indicator--d14efc13-1ce9-4230-8342-c3ef9258a4e9", "indicator--b04eb67f-394a-4b7f-82ce-081a83556313", "indicator--8dd28b91-842a-4568-a2c1-1150193a438c", "indicator--34c069f5-160a-498a-8432-7bdb4b36b83a", "indicator--1be6f6c0-35e6-4226-9828-c04a0015a5fa", "indicator--c543fb38-4d8e-4ba6-8e93-52663c20e953", "indicator--66eb4d6d-515a-4f7e-bfbf-a7d37907d977", "indicator--5639af4d-fefc-4fb0-a78f-ef52da6f4b55", "indicator--3b1dbe32-7475-498f-beb4-5399969e76f9", "indicator--31d9ddf7-fc91-4ab6-9986-794e6852d99c", "indicator--588071bd-ce8d-4ad8-ac53-a450396172c7", "indicator--5c0192e7-7a67-40ff-aeac-7936c7e8e62e", "indicator--6a36bd4c-5a74-4823-bae1-6b59a3b50135", "indicator--ede29741-b400-4d86-8e2b-7a0b2edb4676", "indicator--67f72124-6270-424b-bdbb-c1ae687f0878", "indicator--139b190f-861f-4616-bdfa-d3f3787cb4fc", "indicator--b4ea7cd0-1bdf-458a-b4a9-dc500fb4b7e7", "indicator--905dd264-5761-46f0-a823-dc4ceaa5cf23", "indicator--443296dc-7183-4ff5-9477-04d9cfb16f82", "indicator--faa5247f-ae1e-4f76-a235-b061b76b59a0", "indicator--153f6cd9-954a-45f9-9704-c1e34f63ce6f", "indicator--689aff1f-144a-4235-a425-7d851fc9ed05", "indicator--bc43cb8e-2c22-4869-bd42-3465a9f4b3d7", "indicator--db8aa139-572a-4afb-a835-993e05c3a969", "indicator--44815220-371e-4013-8d2c-980bc3bd5ac0", "indicator--14729f34-3b53-4104-b6bd-640d465b5373", "indicator--839de1ae-d290-47e5-9124-99e97d419304", "indicator--f9ae1796-6a80-4acb-a628-e3ddf9c3740a", "indicator--b8082216-649b-4e14-ab02-ac013d65540e", "indicator--04d637d1-f4c0-4d87-ac45-3271011440f3", "indicator--32d7458b-e3e1-45af-82f1-db87123095a7", "indicator--96d0c4dc-a8b5-4370-a747-ba420da3ff0c", "indicator--12b0d3e0-fb00-43de-a72e-2e7a73303949", "indicator--524c4cd3-e3ba-4f92-8003-85792994bfff", "indicator--8241461c-2890-4f80-a40d-5e2d228d00b4", "indicator--576a466c-b7f7-4f99-a1da-0c335bf92e07", "indicator--02cbeb61-36fe-4acb-a480-29bcc8d8c4d7", "indicator--c77b48ef-7c40-43bd-805d-e805472e6699", "indicator--06e86408-ac8f-43c1-81df-0725f7add99b", "indicator--10089497-c58d-40b9-841b-247e68cd52d2", "indicator--a035f481-f91d-400f-b33d-2ea88103edba", "indicator--9a8f0917-5295-47ba-bb44-adc6d6aa26e3", "indicator--198f53a7-d4fb-42c5-9bc7-5bae5a76dda9", "indicator--d1d657a9-96d1-416c-a734-5b7b507463ab", "indicator--c1dbf541-96ce-423a-97ee-79814400afd8", "indicator--5a25a509-7399-4e9c-8dd6-ff274ef675de", "indicator--9e89eeaf-4a49-4a8b-8bca-1886260dafe8", "indicator--24c01465-49bc-4526-9fbd-f16fa8f0ed8f", "indicator--94a21540-94b3-4856-b316-b00eea33cd77", "indicator--5e3f9b2c-51a4-4b12-a48e-5ab2c8f4a8f4", "indicator--9301ed0a-89f4-43b7-9a18-bb53dde7f883", "indicator--f6b69c86-2173-4e01-b3f8-f8f05cad63a9", "indicator--a8186622-b888-4902-9a7d-5e767c14def6", "indicator--0de97621-39a1-4fc5-855a-2d989d9670dd", "indicator--5fc6a70e-abdf-48b2-8e28-e6e0123ae3ec", "indicator--57a51639-969a-4eae-8237-60afcf83d7c9", "indicator--38cb9bfb-e9e3-49a0-a431-58e02776a6f8", "indicator--275f514d-8c40-4e02-9fde-ff0380444fbd", "indicator--1a175712-98f5-4cb6-a98d-382b38b8eccc", "indicator--be96637a-e226-4be0-a9df-c170e198408c", "indicator--efc3f052-9166-48fc-aca8-99a02b362860", "indicator--edbf4593-bda2-4770-b676-a29164f4c9d5", "indicator--ad69fc34-2017-4a57-ae59-f8d10a3d4d9c", "indicator--e320f108-811c-42c2-8045-2d9de3002a3d", "indicator--7afcbd41-1002-49bc-91cc-840fd88304c1", "indicator--dadd168f-5183-458c-b3f2-a17bce5268cb", "indicator--215b8bd6-a882-43b2-9847-0682367e5385", "indicator--bd337ccb-ac05-45d6-888f-0cc977ce5520", "indicator--fd7e54e3-dd33-4d72-a928-ba251e904392", "indicator--af5c0e2a-6051-4d7c-9abb-f035367b830d", "indicator--8168e89f-a308-4088-8954-72f5c7eaf7a9", "indicator--4e4f0110-7c3b-4b94-9a8c-a00aa9fd27c3", "indicator--4fe60292-89fe-481d-a5bc-d8fea047d31e", "indicator--9cf6cc46-0bc5-4f94-b306-b594f6aa8e34", "indicator--462ff395-26c4-4989-9c25-d7ff11427ccb", "indicator--16c76961-46ad-4b15-96f4-aba0ff0b1a2a", "indicator--93b40aec-e08c-4462-b13e-bd95fa9405a8", "indicator--d346c7c0-e9d8-43a3-b2cd-53e2f9e56c12", "indicator--73e9e7b1-17fa-4fa8-9334-0514843ef78f", "indicator--505da849-e5e6-4605-80e3-457dcf3b93b6", "indicator--9dab046b-fa7e-4987-8372-32253dacda20", "indicator--7bdc811e-c151-4853-b017-88bc138aeb06", "indicator--e9a3b911-2caf-42ee-8be5-e3e7cb2900cd", "indicator--1d8ba71f-dc43-4c9f-856d-4a38031affbc", "indicator--932f6f6c-2336-4066-a868-aa20262f0251", "indicator--5a215b3e-f59b-4e76-a9ab-bde52a474f82", "indicator--d987074f-a936-409f-b30b-3e61d937235d", "indicator--86a7b4b9-377d-4b54-bb4f-e45c508d5272", "indicator--32a96f9e-8e48-404b-9bd8-8bbc085bb106", "indicator--a4f65116-22ff-46e2-a471-f0688660b49f", "indicator--57f1a3b7-0856-4c41-b53a-39b7cdfa88e6", "indicator--667c5cb5-8cae-4c63-a81d-4ad519467bbc", "indicator--8173e182-06ac-4ad5-af69-4bc8a649c511", "indicator--dd7edc03-ee38-4c3e-94d4-be59bad8e847", "indicator--18f50b12-4116-4db8-91a9-d1be4c34b3b3", "indicator--0fdf07df-acd0-4b9f-94e5-3b9f7921e314", "indicator--c63a2e0e-b767-4f7f-8159-f4ae29713f4e", "indicator--90e76c85-d5e9-48ad-a774-a54b69fc5d72", "indicator--6d59e96d-5444-4cd3-a4e8-d7529368f3a9", "indicator--14cef039-24bd-4796-a616-0ff912af4ecd", "indicator--773d681d-c159-4bce-a4f7-9176a7068a07", "indicator--f0b1db00-1654-4574-bf2e-e15646077c6d", "indicator--b5e68ebd-e35e-4c93-915a-a5f5f904244b", "indicator--4b347201-0c43-4788-ab1c-f9b7b1b787ec", "indicator--591b7afe-ec2b-4024-bc34-b8ec3f7851b2", "indicator--a7678c19-7f33-4598-9496-dfcf90e61637", "indicator--e828c01c-e71d-4921-b235-ce571f872342", "indicator--045b2b3d-b575-4feb-ba4a-8bb02e29e00d", "indicator--156634ca-8a18-45aa-8522-531dcd28b6e8", "indicator--9ec1dc87-23dd-48da-ab18-c6a23c4036b3", "indicator--9eceab31-30a0-4b71-9fa2-72392a58a327", "indicator--10f7690c-b881-4c2e-9283-711ed5d1780d", "indicator--46d2ec39-1ed3-4ad4-8589-d9f39172594a", "indicator--f85a2ed4-4b05-4d1d-a1a4-85ab15496c67", "indicator--f443dbc1-b1ed-4cac-8528-0dc7e12b5ce2", "indicator--b20404e6-1a95-43a6-a6ac-5a745a18bc3e", "indicator--f56b5a2e-046f-4c10-b350-b1d92792eef0", "indicator--4eb4a556-0c36-4c8d-b233-89734f2e5df9", "indicator--86eda9af-e9a9-4b89-97aa-bfddbb1a2da5", "indicator--6b38261c-4a81-4062-bc65-b85bd8629ec0", "indicator--9af84f4e-a2f6-4c3a-89dc-7f4e31c3f220", "indicator--c822f5fd-755c-4959-98d9-30b0e9724541", "indicator--74f8663e-e297-44e4-bdf4-b9d81195e0ee", "indicator--dd41a2a6-4f12-445e-925a-35ca47663576", "indicator--e3104c4c-8e0a-42b1-9de7-ca80b56beafd", "indicator--d3419a0b-2300-46f8-980d-0e4f14f8fb91", "indicator--6d0c5b7b-29d7-4535-a9d2-fa0ec2fd57d1", "indicator--1532723a-77a9-49dd-a509-19505639d16b", "indicator--9a69183f-98f9-49f3-a369-f110911de4b6", "indicator--6f687cd9-2e5d-4ebe-abc3-00ba56aadb5e", "indicator--713b7aa6-117a-42e7-a441-08b2c86ffc0e", "indicator--d68885d5-6124-4771-9db3-20370bdff9ad", "indicator--19217266-355e-4ead-8813-041520e1f272", "indicator--e9cccb05-c871-4883-af36-5930d74b238d", "indicator--b5506198-c115-4509-a92a-cbd4f6fd8506", "indicator--7940434f-b660-4146-9577-f2ba99f4eb57", "indicator--5a83626d-9665-4f67-950a-9f6f7f5f18a3", "indicator--32c5cc95-23e3-4b74-8493-0f602c8b94be", "indicator--dbd84a8f-32bf-4dd1-81d8-d7a6deb2ad86", "indicator--ca67376d-2be2-4f0b-807a-131a75f4dec9", "indicator--a160e353-b7c9-4305-854c-c25534dc19d7", "indicator--99574651-f23c-461e-a4fd-6f9329729bfe", "indicator--5a9de151-9cf3-4424-b0b5-e5655e602e5a", "indicator--cc16a415-ff7c-4fd9-8ff7-598f5295d0b6", "indicator--0f98b414-5ebc-4b2d-943c-af0f9c5dcc1b", "indicator--1ae89b60-ec5d-443a-b0c9-0835b4399ed2", "indicator--8b3345cb-72a7-4cdd-8505-5626fc18c1e6", "indicator--5d97d4fb-e47f-49cf-8c79-4ebe750025be", "indicator--f6a2548e-60a4-4602-ae70-c6ec1e228d9a", "indicator--afd93545-7c72-4c2f-9f17-31c783e42f98", "indicator--abcf6cd8-70e3-4629-9e45-eab1c9789013", "indicator--21bd29ac-17b7-4bdc-9003-4d1fbb3c58ea", "indicator--70b18778-bfd5-48a6-aed9-f841ba9dc839", "indicator--c3289218-6923-4720-bf8e-a5ff7bc3a4e1", "indicator--3977de7d-b861-43ea-8f7c-c5b8260e4dd8", "indicator--328056ce-ece2-48d3-8a37-2f46aa7dde59", "indicator--562f3ba3-d5c6-4003-a091-c8166631b985", "indicator--5747fc29-20dc-4cb0-bf1a-67ab32859ee6", "indicator--aedf258c-1b39-43c0-bc3f-7d247eea1c1c", "indicator--ceae1920-9b2f-40b8-9439-26beeeace423", "indicator--10aa51eb-5b66-4215-89a3-b3602cb5d066", "indicator--2df1fba3-f547-476d-9d59-99e7bc13577e", "indicator--d62fa51c-70fa-456e-a990-fc936fb1d9b5", "indicator--7ac2433a-afcb-4bf7-aca9-2a7c4d76f579", "indicator--d2970b88-bc07-4095-9037-f6a4d1fed7c6", "indicator--bd6d8328-ecfa-4977-ae89-653f30c849a7", "indicator--6a069c0e-a365-4baa-b104-ec4afc2ea07d", "indicator--06f2cb6c-9865-4a81-a4d1-e024af9b8511", "indicator--59cdd5fd-3be5-4999-a29f-b800bb33d3e1", "indicator--8208a695-e5bb-4873-a5e8-e69547061653", "indicator--927418bb-2d27-4ee1-8faa-1df1dbd11bf9", "indicator--14b2331b-d3fb-471a-8f6b-3095eace6b13", "indicator--a8b3bea4-e597-4bae-a2ad-9f697bc3b5b0", "indicator--bca05e50-6b35-4210-a11b-6fe37bbed8a2", "indicator--3d54baad-fbd6-4e20-8acb-8ac340ac2a84", "indicator--52793409-09be-47d6-8280-a37a7f6399ae", "indicator--7d12d046-1406-477c-8589-7e1e190f010f", "indicator--e740ce7d-9d74-4a6c-ace4-1a9d2ff5d15e", "indicator--295c3c4c-149a-4200-bc56-3fa3467f8343", "indicator--333383e1-d48f-4457-b86e-389dc0e4dd89", "indicator--2e60688a-015b-48d8-8263-7a04729987fa", "indicator--ec703cd0-f40b-4eac-a5cb-bbc9515da350", "indicator--a5d26fd9-b5f6-494f-bb26-de6951648d8a", "indicator--7baf8a41-4328-41e5-869f-d55e82b89664", "indicator--5a514fc8-5f9d-4421-8e06-fbfebaabbffc", "indicator--858cc379-fe8a-42c6-9a02-29a68c1c5b2e", "indicator--e449d9ff-09a9-4be6-a3e3-ee97a8c10f33", "indicator--46c358c6-c497-4a5b-833c-d168330e63f8", "indicator--a8c2c5fd-8bf8-4ccc-94dd-432f62bbc647", "indicator--cd534ce1-a308-4157-a586-318345fba8e0", "indicator--83af30c8-51f9-4fef-9990-c13a81fdde0e", "indicator--bbc353d1-24b0-488a-b8d3-81871e23e91f", "indicator--9b4f726a-8ce4-4c45-9354-5d81cc46277a", "indicator--9857a040-8325-48e4-bdf7-0dc752370911", "indicator--009235bf-54fc-4647-a6e6-b4c89330976f", "indicator--e9d6136e-af95-40d7-bd37-d5d20e4f0123", "indicator--916f24e0-e95d-414c-8137-4d164901ed94", "indicator--2785b3ce-db74-4ab5-8c01-d638a5c141f7", "indicator--e5e11c37-eff4-407f-b572-302e4c4a2df6", "indicator--a5afc2c4-23b4-4b6b-bc38-1399ab3265ca", "indicator--69caa4f6-a6f0-46d7-a5fa-f5ea4718c5a4", "indicator--1486c5c7-07b4-4387-9b6b-3b29137b242b", "indicator--3cede316-5c83-462b-99a7-2b8dc5468a24", "indicator--830dcb1b-a197-4212-8e9f-2967ff1667e8", "indicator--cbaacbb9-8b88-4430-8c1d-401c240a341b", "indicator--f5ae91f4-87d7-471e-9bb4-f6af295c782c", "indicator--35869446-2bec-4212-871c-c1213f56fcfd", "indicator--40621b0f-9399-4170-a782-05238b0b1dc1", "indicator--a0f5506f-3a27-405f-9859-5879c591b486", "indicator--ae7ba816-add5-4653-90d2-05201420f1ed", "indicator--fa84742d-29bc-43d2-8545-6306f32010a1", "indicator--1c09789d-a5e7-4d52-97e8-716b55188542", "indicator--1ad9fbd9-4e72-4c82-ad10-a6740f32ba22", "indicator--98a05b8b-2bfd-4cb2-bf44-06f38c85cba0", "indicator--1462cd24-7247-4b3a-b41b-2d88daa12239", "indicator--b51f5f64-c840-4e57-bb85-a7a9a6ea8aac", "indicator--5f1d35b5-6dd9-4463-8326-5ecabdf77cc8", "indicator--749559df-cfde-4af3-9bb3-7c5bcf12f50a", "indicator--ac40feb9-db70-486b-b4ba-8a66a274ca3e", "indicator--28622dd1-4628-4371-9b14-30577a8861e1", "indicator--1d9ed832-44c2-42e3-8cf3-085150e655cc", "indicator--eafe7031-13a3-48a9-9ece-40f944c6e5fa", "indicator--a510456c-e16b-4a38-8777-5a9676d61c92", "indicator--1bbe5573-e200-420a-af68-95c9d835aed2", "indicator--59caaf01-0f88-4d5f-8967-4061b410806d", "indicator--5d04532e-de06-4b02-8568-087735472cf2", "indicator--368ed754-4384-443a-a13c-48695475cae7", "indicator--6ac9fa69-6ac8-4bed-9337-0c09e660cc87", "indicator--f6419e18-8369-427b-ade7-3187bd429c76", "indicator--a1d4b0d6-e0da-42a1-a614-e41b5c99a524", "indicator--b0a1a2d0-ff63-4598-988c-b8dad0a426c8", "indicator--2b9cc9d8-5b0f-4154-b183-46c2670b1f7f", "indicator--7c9ef8ac-8c32-48d0-a50a-e7d16b4aee26", "indicator--d875381f-c2a6-427b-bbd3-f668d956c08d", "indicator--fbafd5ea-7c07-407a-897c-43a55ca7f780", "indicator--8c630c79-f371-496d-8823-2bb704d3238c", "indicator--ef63eaaf-ac00-4c49-8a92-2b3ef6676db0", "indicator--07aa4126-ee24-480a-a0f9-567779a18bc5", "indicator--93b77887-cbd3-4024-b017-4160dbc5b9c1", "indicator--817a60ca-beab-4b99-8fa3-56e07a9519fe", "indicator--f0a58b52-16d2-4235-bc6b-ce86a09d457d", "indicator--efe80051-3640-4b59-ab9a-665ca9fc1466", "indicator--2cf427fb-95d5-432f-97f8-e192d442f478", "indicator--d8751068-71e3-4b42-8510-696764f28287", "indicator--cfdcf6a2-f670-4be5-99b8-b600ad39c732", "indicator--a970bd38-44a4-4b25-8172-e11d808d8f1c", "indicator--b7a71c24-2590-406d-89e4-e6db3d51b739", "indicator--38d58a6e-39bd-409f-8060-803da0c7a916", "indicator--89698d3b-1621-40ff-bd73-dc2e4000259d", "indicator--433421f8-c08a-4c85-b7ad-745de121c18f", "indicator--edf19591-15b5-458f-8ab9-6515cfe818b7", "indicator--22989d95-3528-4b83-a731-c6efb939cdb3", "indicator--98ffd223-a2da-41a0-8cf3-330cfbe02517", "indicator--7b43dc97-71ee-4302-8f54-3d34e82a22c3", "indicator--decfa2bb-1fd2-4d44-b0af-9ed9e602c8e6", "indicator--6095b07e-b4a0-41e6-aeca-b244d7ccf14b", "indicator--d850d211-8a3a-4f38-9cef-0bfed70711ed", "indicator--51e5001d-0bd2-438e-8af5-3e58d05612b5", "indicator--4eda4fd9-bee0-448f-9016-6d6d1a13ac45", "indicator--20a39366-8112-479a-9405-b8b848e9f10a", "indicator--1f60da05-15bd-43c9-ad75-9ebbd6f7447a", "indicator--7d0ebd8f-74b0-474e-bd91-54518f91faed", "indicator--66f59bda-ab0c-47d6-a733-d8c0a658d7d8", "indicator--b3dc0a44-d5ed-405d-8b46-98ddbc000690", "indicator--3ea93213-ccd2-474e-b054-634bf8df529f", "indicator--a7a356a4-d308-4b27-97d5-ea01d7def513", "indicator--fda04f21-c770-4ac2-8c22-6cb56607e8bb", "indicator--d584ae8b-f176-4d0b-a63c-905dad5c4624", "indicator--0ac4ad76-2a9a-445a-81f4-a23a8e2a6ab9", "indicator--759d8903-b2c4-432b-85bb-a97e929d8fbb", "indicator--af3ed648-495d-4667-abd9-12e01529b90f", "indicator--a88f46d6-1303-400f-8c3e-23b5dbbb93f6", "indicator--b7189684-bb0c-4705-87f6-89db2726125d", "indicator--3e465b43-87f0-4e4a-8bc7-de4a5cbf0eb2", "indicator--9dfed188-3f78-4811-ad0b-93cfed565cd5", "indicator--1eb41ac8-a70b-4a1a-8361-2b723d1a30aa", "indicator--ba955168-dc88-422e-951f-3d96d732a1ab", "indicator--60bc1ee0-184b-44d9-8879-bd2963077952", "indicator--cb8b7bbe-b5f8-463a-885f-bc2b17f8111d", "indicator--edddaab9-180d-4584-86a1-c62c29a05d6e", "indicator--572c2e7e-7d1b-42ea-b4c2-5551e9522389", "indicator--348bd892-f0ae-4ffd-bf8c-7e9853f2f600", "indicator--96435b6b-f16e-47b6-912a-25e3bef65244", "indicator--cc104c5f-89d5-457d-bb8b-5919cb21e4bc", "indicator--378eb994-2d4a-496d-a653-ef65a33396bf", "indicator--6fa40ead-813d-4395-9f2d-c321db81b79f", "indicator--96a2446f-e3d2-49c3-9086-464cd7c55abf", "indicator--b8767db4-68ac-49cf-98f5-5b269122f1af", "indicator--11a89ebf-ca49-45c4-bc40-d323e566625b", "indicator--51f8781d-96a0-49cb-85c0-c4fa0fc832c2", "indicator--1f83e721-0add-4ec5-89f1-e382c0366b56", "indicator--f8ff3887-aed0-4a18-81b9-6e7baa216fb2", "indicator--857f2656-4af7-440e-9fe6-a38435dcd83d", "indicator--3ccbc4b1-9563-4484-89fe-3c3e1540a5c0", "indicator--202856d3-927b-4166-a5c4-364abf53ec1e", "indicator--e8b49bb3-a2eb-4298-8acb-183741ed050d", "indicator--8003f660-0fa1-471e-add0-94348b1eec25", "indicator--0b7769cd-26d4-4637-98d8-5fbcbd5d5010", "indicator--59cd831b-1fd3-4490-809a-de726af3b6dd", "indicator--f795645f-1ba9-4bcf-8557-0518b85b01e5", "indicator--c3694c2e-ab8b-40fa-b7b9-f78e72634aef", "indicator--4b2a59ac-a559-44f6-a338-bab3821e8b10", "indicator--05a14509-c3ab-44a0-a80e-9a9d0ab3c97e", "indicator--beccad89-0f60-4fbf-890a-2391c2fdfdf8", "indicator--e1f8d501-2285-48f1-a294-42ceb627746a", "indicator--223b04d0-9c24-48f8-b8bc-142c6585450f", "indicator--873a4fed-26cf-4ae9-8f85-99f0df822e86", "indicator--0c6f17c7-712d-4bf7-9b6f-17bf6ab60c87", "indicator--cd9d81a4-280e-4c9c-86c6-5823f612a53c", "indicator--cc6dbd4b-dc07-4d21-9063-fc753efc29c6", "indicator--eb6be092-de4e-4282-b06f-f259437e5ea2", "indicator--6a16bf5f-50f6-4c1e-9cea-44d1f9962e7b", "indicator--a87361da-978d-445b-abdb-8e9cb38d1257", "indicator--c0d831c0-4cf6-4b06-a652-316f6c74dad7", "indicator--3c10dfa6-afed-43a7-a362-c7cd0f2c7bd3", "indicator--4b85e3cf-7a14-4539-b459-934ba33addbc", "indicator--41b8c1c9-4d45-463b-ba84-7c4aba5c9e04", "indicator--03784059-a6a5-4999-a846-fb3b3296d039", "indicator--e9b5e7d4-347f-4835-8817-fdc31dc84033", "indicator--790f1a95-fe45-498b-ba5f-8e0d37ab285e", "indicator--0d600c57-2c53-4ca1-b095-6cb514fd1728", "indicator--fc8dc8df-64e2-44cc-a39f-bdda37671e72", "indicator--752cbb89-fbba-4f2e-97bc-97908993fa6c", "indicator--524a3d9a-8837-4314-b020-c43f60d91bc5", "indicator--ea786cbe-457f-4e11-b4b8-bb85b016e1aa", "indicator--3df3e4a2-10b6-434f-9e71-03b1bd3a5452", "indicator--9f88319f-0291-46ef-a6a6-a8ddd424b610", "indicator--4dd97943-50ee-48f5-97e9-13de179fcfdc", "indicator--62aac93e-682b-4b0e-89a4-8f897d5a276f", "indicator--706529d2-4a3e-499b-bd36-7ddeb0186732", "indicator--7aabbf28-3664-45aa-a41b-81750e213721", "indicator--a1e8f6ca-ca24-4506-be21-fc95b4afd714", "indicator--c58a66e6-f1cb-426f-a228-39eedf4d8839", "indicator--abcdfa23-2e45-4823-bb7e-27efd99099c8", "indicator--2ba53d20-6212-4fad-8c30-af8df3c822ee", "indicator--597bc8a0-66e0-4b9d-8f5b-fb4a39b8a1ef", "indicator--6f887529-9835-41f1-a91f-598470064f0c", "indicator--5306913b-459e-4b55-88b3-cfad811a2d5a", "indicator--53c6f528-899c-4dc9-9218-587e2c02418f", "indicator--163daf5f-e680-49d6-b6ba-b3747ae39952", "indicator--7c9446d7-24a6-4d34-9bf4-b8942dbfe33f", "indicator--7ad55a04-d7ce-4032-8686-8f5024f27bb4", "indicator--dc06b1d0-2adc-48d8-9497-4a9fe1034523", "indicator--bf8d9490-6092-498d-a02c-942629d92351", "indicator--5c4e74f0-1a01-4567-b97a-02381663cd1e", "indicator--d0c88d2e-f1ca-4322-b335-90febb2a4a6c", "indicator--0bf1d606-e8b1-4a9e-b0bd-ac22dc9bbeae", "indicator--865785ef-f126-4ce2-9c6a-55b72a8d2cb7", "indicator--a0f263d6-5128-4972-9308-195661606aa3", "indicator--d9e2172e-bba4-4cd2-8b45-c5c4b23cc682", "indicator--e11001c9-c159-4073-842b-0dcb19183710", "indicator--70cf6a44-fc1d-4a04-a3f8-49f267ea8334", "indicator--934e9afd-40eb-4509-89dc-99e90733a22b", "indicator--79cea70d-9883-4aaa-b82b-cad69ba52558", "indicator--38da9387-afb4-4544-b785-76ab175ca020", "indicator--16cc6314-e762-49c2-8341-3b035c500686", "indicator--058b14ee-a891-4336-a52e-079c56d78d1b", "indicator--a8f55822-aabe-44dc-9559-6ac496e4334a", "indicator--50ff8df9-e66b-4781-b1f4-4b28c1cbd6e6", "indicator--bf876c81-4ef6-4830-a5ac-3261870e51ba", "indicator--3c9910d7-dfba-42d7-b498-ddf9a12983c1", "indicator--c80a6849-1beb-4b02-9cc7-c896863c7bff", "indicator--1ab6a866-ea41-470a-9861-18a8a3e5566c", "indicator--82281a1e-761d-4d38-84ef-fb1e8237f22d", "indicator--76d77ffa-e35f-46df-a218-2e06b44a2878", "indicator--e273bddb-7a33-43b3-917e-0cf93f6a6203", "indicator--0738fb47-f2e3-44df-8dd4-9ca8d0b2a01d", "indicator--e694bf47-230b-41f9-aa92-8e0d62748c20", "indicator--d749c415-dec3-4fc3-938a-bc9d2d87aed4", "indicator--2133cafa-c088-4a2f-99f5-2a51581a9378", "indicator--375c2858-dcfa-4445-a3ae-5947d347f3d9", "indicator--e70efd47-a862-4e23-824f-e7054e8583ec", "indicator--7f3b9cc0-a9e1-4e5b-8a42-59c972c19979", "indicator--8f9ba23a-0a6f-4506-867d-ba5a35147e20", "indicator--a9359777-30be-409f-9bd9-7aedc05a34cb", "indicator--353e7aab-9213-4612-8693-42c68841a9e3", "indicator--da6a8939-045e-4083-ba69-7dd5ab85e5a9", "indicator--15542e0a-be46-47fe-8b2b-b4c0bc191c24", "indicator--f2055077-84e7-4e59-8ae3-4ca1960b1126", "indicator--0852f555-e1cc-4165-8745-26e56d87fcaa", "indicator--c7debb10-d487-4f8e-aca2-046b8e994f6b", "indicator--bbb132bd-d8dc-4b08-9efe-8bdd247434af", "indicator--1bab735f-617c-4cf0-b055-fd2b678d3065", "indicator--9745b57a-ad7c-4849-9dd0-d02ae41a7cce", "indicator--ba0cc3bc-57cb-4817-9a28-1506722c04c6", "indicator--721b88ca-2edf-4cf2-80fa-f25a5c2f0ae0", "indicator--5a734883-26c7-4ef0-a031-9130aa7460fe", "indicator--a0ae1547-84dc-469c-8307-0353b85b9811", "indicator--eb2f5c32-93ae-4dcd-ae7e-287687e097c2", "indicator--f5ccca6a-a1f3-4ea6-b2b7-fd4b2afb399a", "indicator--a8d7e5d7-9f4b-461d-9d41-031b0a50f901", "indicator--e45b72dc-f5ec-4f92-ba2f-42fed50240fb", "indicator--3a9f0754-3c42-4c3a-822e-7259abdd32f2", "indicator--99790e95-3246-4073-a1dd-aa705d358fda", "indicator--7b0cf3f7-6171-471e-b5f4-2219f6d5ae1e", "indicator--ad624254-fdd5-436d-8ece-095420317beb", "indicator--012de241-63a4-486a-8af8-077a8af84ea2", "indicator--825c3ad5-aa10-4f65-a5d3-7c0c046a5120", "indicator--6b3c3bf6-515c-4041-9073-a7bb11ca845f", "indicator--9a35f5a1-5291-402c-94ec-7095c66a3a42", "indicator--849bf55c-f9b0-4e43-836d-8c0e6dc52ea6", "indicator--a84790b4-f83d-4981-9d72-6047641e29a7", "indicator--8dd512ac-d81a-4fe9-a4e1-e1e7d4eec727", "indicator--db074783-e04f-4f7d-b584-3b7f68667eaf", "indicator--9f5a53e3-b8f5-4f92-83e4-0ff8e620cbdf", "indicator--4fb2c3f6-ce30-4305-b2da-95f6fc6e9382", "indicator--b4f2f7f8-06f6-4bbf-95a6-5a513ebeecaf", "indicator--5dd14ba4-8c42-4431-affb-25086a934bf7", "indicator--dbd5e334-eb78-415d-83c7-e6c2e38fe7a1", "indicator--edde01e3-d427-4445-b2d5-14c65e0f8f99", "indicator--2d086e8f-4bbe-45aa-aae6-3e8d840ee9cf", "indicator--29e89b26-ddfd-4278-9c12-08c6eaf6a190", "indicator--54e5e63c-d663-4732-b101-e1c93ce6d6de", "indicator--66f12c43-4b91-4436-a69d-0903f160c190", "indicator--11bad7ca-153c-40d1-b903-32a2ba29a525", "indicator--010ffbeb-6677-468c-a26c-6a38ec4f56a4", "indicator--a13cf3ab-a951-45a8-8ba7-19bd56ab0b0b", "indicator--b159ec62-d1f9-478a-b068-1d85bb0752fb", "indicator--a230c264-eb46-456e-9dbb-5104e7240812", "indicator--b1743cf4-746d-461d-9c82-ed3290ad13cb", "indicator--59fcdd88-5d54-447e-bbc2-8ec641a28b09", "indicator--0326c91c-6e2e-47c7-8a57-7772c44ae3aa", "indicator--a39d64f3-3770-4317-ac2a-d748ed420dba", "indicator--4406520d-8c02-4eb0-9704-c851ff0e7669", "indicator--f8211c72-fe9d-43b9-8be1-49e75c4ea724", "indicator--09efe213-a9f9-418c-8af3-d8fdc67f5d54", "indicator--bb84acf6-ffea-4f63-b47b-1f29664c81e7", "indicator--53f66ba7-6805-4e90-999a-9e43eb7ba63b", "indicator--5a5a2a84-0dd1-4d05-8bb3-8f4e5dcc90f8", "indicator--95c1c748-8b67-44eb-beef-9ac60ea2a700", "indicator--dfe0aef7-f61c-45a6-b133-5668919fc302", "indicator--c2f342f0-c23f-4282-b5a4-0477c638d9cd", "indicator--d7fa0a38-d96e-4ca3-bcf4-6c242ccbe049", "indicator--8a7b8c30-d505-49b9-8dbf-b8db8d977599", "indicator--a43af524-cfed-498e-8194-fd25c68c046e", "indicator--3ef1fda5-98cd-4ecc-859e-c76ba69e3e61", "indicator--612b8cd1-5b63-452e-94e0-2befaf10f98a", "indicator--597d828c-907e-4134-a8f0-7ea2c58b82c9", "indicator--2fcc3979-9440-44ba-b23f-d718e8bef419", "indicator--a84c093a-2a4a-46ff-94f9-6330bf468609", "indicator--91550c60-4969-4d5c-9576-351df62510f1", "indicator--b1e78d2c-31e9-4acb-82cf-87f7441fe8b1", "indicator--7ccd8c3d-26f1-4f95-b0c3-81fbc4cfe028", "indicator--a6896926-ba46-4631-8451-d7f3b1b0a0d4", "indicator--696fa06a-86eb-462f-a312-b75959334c71", "indicator--43bc9dd8-909c-4896-aa88-513bb63832bb", "indicator--601735cc-888c-4cc2-88d5-fff3b5fa781d", "indicator--8dce00ec-990e-465c-93fb-880b8d0a0c99", "indicator--2faaec14-7e3b-42c7-8c0d-b926c1cf6d1d", "indicator--a49b611f-8a13-4dd5-a7f6-4be674c65a49", "indicator--e6c64c02-8c1f-45f1-99c9-53eafd772d04", "indicator--64b8b9cf-7d49-41aa-9b5d-87b92a3899d0", "indicator--4c7f4136-eade-4c07-a3e8-caa1baf9ea9f", "indicator--a1568380-153d-474b-b4e3-e868820ef26c", "indicator--1329d416-de1c-47ff-9988-bc8b507f870f", "indicator--122f5f49-5276-4d25-a993-9c2402ce438b", "indicator--e6d5613b-33e5-4bb2-b555-f949a9e36f3d", "indicator--8efa8bb7-09fc-489f-a038-2a1d0a60bfbf", "indicator--faba368c-ac16-49ed-a3a2-b15ba9be5683", "indicator--9e85af19-72fa-42a8-9f3b-742994de0c26", "indicator--62bc1124-ef46-47e4-9491-14721336f907", "indicator--f87be963-24c4-4ff6-bfe9-88be5d01ff7e", "indicator--1a8718b6-45bf-408d-989d-ff8acfa4121a", "indicator--abf990ae-3eb2-4eb2-9aae-7736bdde64be", "indicator--9f00be4f-e724-419d-8ee6-582d129e1179", "indicator--99f7c741-6ef4-48f5-b2e5-b3d86ecb8a5e", "indicator--83fe9e9e-ed81-443e-942b-f5c5b4aa520b", "indicator--00c33f01-07f9-4554-b73f-dade095b42be", "indicator--50b93dff-616c-4c0a-b735-da8dfa020fdf", "indicator--a8f48074-2f95-4ef0-b68f-2aee5ce1eb8c", "indicator--afe1bb80-417e-43f3-8212-f39e1daf8808", "indicator--0b24ba6c-3c85-4c14-9080-be8cd268d32a", "indicator--2bdc1b55-3530-4488-b6c8-33c44dc9963a", "indicator--5668eb7f-0e7b-4029-a7c4-6dcecac62b1e", "indicator--cab742e8-5d04-476a-aa9a-a7b3c3446248", "indicator--79d2eae2-3230-4639-89d5-7ebeccab3e5a", "indicator--d36d94ff-4a9b-496c-aee8-81d17eeeee8e", "indicator--d7cb5f4c-1e38-4937-ab83-d47cd4958fd6", "indicator--3e9f59b9-d828-45f2-a996-39184c3902db", "indicator--a326a5b6-e384-4cdb-9039-4fcd3541ce93", "indicator--832584cd-88e9-4500-b93e-5e9ec1f2f2ca", "indicator--568effa0-106e-4b47-a1d4-3587cda96dba", "indicator--c825262b-f7e1-4494-beae-416d391a4bc7", "indicator--4e09c64f-8e8d-4785-8426-b24c9772be70", "indicator--97c954e5-7d1b-485c-86ee-3e42666c4ee1", "indicator--e38740bd-9b7e-4cb0-8524-f3725c27e221", "indicator--ca83d9a0-1b9b-40e7-992d-63aa8eff19e6", "indicator--a7bdf8bb-89bc-4df3-b07f-61e052e9450d", "indicator--54297546-146c-477c-bacf-154bcc48d1b6", "indicator--92017f1c-dbeb-48d7-ba3e-6e5c2477c0a4", "indicator--0fe6fc06-fcaf-4b71-9e01-7579fc77c9c1", "indicator--6d551cc4-d814-446f-a63e-d1bf25951a4f", "indicator--e7a8d856-b96a-430d-a1a4-1e42464c49e0", "indicator--6e7ca690-3527-4a15-bf0d-c48673de15f0", "indicator--1dc3def8-2fb5-4847-8cf7-60b09c1ec7bd", "indicator--395b75f7-d19d-4b9e-8e43-6d420f8fedcb", "indicator--c938cc28-6689-44ba-9717-b6b2174b94ed", "indicator--ae5741a5-f45d-47e5-991b-3d34ffd37a93", "indicator--2446309e-92da-4a97-94b9-e9618578c427", "indicator--c2655c50-aeec-41cc-bb65-311abf98bc75", "indicator--2fde08c5-864c-4649-8f0d-9d13bdfb71cc", "indicator--1c86e8d8-da07-4484-9bc3-79265ef187c8", "indicator--7ed81aa9-316b-4d8d-b7e2-74f57e882b08", "indicator--665e4e8b-5dfa-49cf-90a6-3e0ee86814eb", "indicator--8157561c-ebca-442d-b499-619ca8a744de", "indicator--1886a359-2d42-4565-9c33-df6a3e439b40", "indicator--6e6d393d-4512-43a1-8e3e-1eda838baa60", "indicator--cd1d0624-6702-4000-a03f-683a6ce14e29", "indicator--891c4624-7c2e-4ecd-835f-b50197d7ef1a", "indicator--8f40e006-793a-483a-9051-8ed620e0c513", "relationship--951918fc-3e12-4aba-ae4f-944ad60f0d0f", "indicator--90763eee-17c0-417f-87b0-d6ff5f2e2fce", "indicator--f24dd5a2-b87c-4635-955c-14c139d51dd1", "indicator--c8f3341f-1350-43b0-8864-61797b80a442", "indicator--d3da57f2-74a3-43e2-869f-49cfc24145e5", "indicator--528dfff2-8f5b-4b79-b23f-dff5451de8f8", "indicator--8fdd6318-42aa-4493-a61f-bce6c219641f", "indicator--79ad93f0-fd1a-4ba7-9f30-e4c3ec68b63b", "indicator--b2d977ff-2bb8-4c07-9ab4-84351b0b2fdf", "indicator--cd813956-68f0-4d3b-a658-5cad69edf921", "indicator--cfb910e1-8835-4f62-a963-77b9894a7683", "indicator--0605f6ec-c4fd-4735-8d9a-ee38d269c16f", "indicator--2509cd42-f753-472b-917d-6e149cac9d15", "indicator--68ee9b9c-50be-463a-a19d-25a0ef40ffb1", "indicator--7b52c44c-f9c2-435d-b666-aa50ec41ab9d", "indicator--07994486-cff3-4dbb-892a-cefab3686100", "indicator--247aea7e-c7a0-4e15-b06e-6c66393a501f", "indicator--b812f687-2a64-4340-b58b-83e3334a8de6", "indicator--f712af6f-25f0-4873-8c0f-8bb735936107", "indicator--1c1b63df-8d9c-45ff-b4fc-c454b8ec2dcc", "indicator--a982b09b-14d6-492b-8476-b2b3519fb7a2", "indicator--046b1403-9ef0-4721-8632-607e1fb4f9d7", "indicator--993cbbdc-e368-415a-9d83-2d58e66f6acf", "indicator--2533f50c-0dc2-4e8b-a4f0-8f9197bbcabd", "indicator--8f8d658c-2c62-4173-90d3-e1cb15620ffa", "indicator--c26021cc-a59a-4eae-a878-9ee03b145dd6", "indicator--4b61243a-69e3-4fd1-8c8e-ec7c03e0c90e", "indicator--ad764daf-35dc-49b7-9629-4406471a2571", "indicator--76e0d0ef-0037-4496-9f97-fb5aaf0ffa57", "indicator--a54a96ad-ef4a-4843-9d36-f9566a753576", "indicator--42c03561-9587-4352-8d28-7e698d3efa34", "indicator--22b75151-3315-46d1-9442-bf15c99fe849", "indicator--23d52ea9-b8dc-487f-be59-225d4da0994d", "indicator--744231a3-3356-4822-aa6c-237cb5bdb502", "indicator--4f026f44-3120-40b0-b482-1e53b4f72f5d", "indicator--d7315433-49df-44d5-aca9-4bfd5d106bdd", "indicator--c543cfd3-ac4e-45a6-827c-6a9b7890c4a7", "indicator--bad86b19-37f9-4fb2-91e8-fac10dc83c92", "indicator--9edf3874-f122-4dab-b985-31fe118ebc0b", "indicator--f83a349e-fcc9-4e03-b69b-4c7d76055e83", "indicator--9cfc5c9c-61e6-4e1e-97e0-b37643c57dc4", "indicator--87e9a12d-7b75-4d63-83aa-18e55d2f87cf", "indicator--270ee204-aa2e-46d0-b05f-03ca2db2dd5c", "indicator--a228ea4b-20a2-4bae-88a9-04ee153e3062", "indicator--f2820ece-6d10-4957-a041-bf224cac0ae3", "indicator--36147e8d-1fa3-4e2b-b8cf-7e47cf573578", "indicator--a0266ca0-37e4-4438-a611-5216b22e87ad", "indicator--40f0db29-f78d-4e7a-bc60-0f3207277ba8", "indicator--a2727183-1cdf-4523-8968-bf6469c74b63", "indicator--a9e80be8-b6c5-4c77-acbe-27f90d51d35c", "indicator--705ed0fb-833f-421d-b024-7e1c975f67ec", "indicator--e81d77da-017a-49de-b502-43fdaf51aed9", "indicator--b7a5fce6-1e8e-46a8-baf2-3d93db78c4cb", "indicator--fbee161d-a652-4c65-967f-34f60bb07c45", "indicator--cd07d5d2-1c0e-49ea-a243-975d38f714b0", "indicator--41688968-687e-4358-87e1-7d8d7cceccfb", "indicator--791cb5d6-9310-47f5-81b0-86213ddae088", "indicator--7d42ca25-f48d-4de8-a59b-2286502516a7", "indicator--7fca149f-98d3-45e4-aa6f-7221fe9f5b3b", "indicator--f12cc943-7a2a-4f1a-a2e5-3def1ba409c8", "indicator--8028b7eb-869f-46da-a647-b3fef51b4f7a", "sighting--0f5f09e3-725d-43d4-80c2-539d39970f02", "sighting--7190cd7a-0f64-41a7-b59a-d0fc39c16502", "sighting--b104dcb7-5a53-4893-a0de-e6b8669b4741", "sighting--d673e7e9-4391-4a42-85e2-51339cdbb4f7", "sighting--99e8ae75-41d8-40ea-b3e0-7f822dcedfb5", "sighting--b6bb915f-1398-42e7-b386-8475b3cd1af4", "sighting--ff497501-bb21-49cd-9025-cd2f267b244e", "sighting--17400e94-706e-41f3-a995-f9aac75aa8e9", "sighting--e4848b4e-2581-43ba-b69d-71c14871f8cf", "sighting--e63983e5-52f9-49ad-bc63-f9078bc7d7b9", "sighting--44e973ab-899e-4ed1-b63a-fadc55fc184c", "sighting--f09d896b-6a01-43b0-afb0-8da02abdecbc", "sighting--b98d6295-3c57-4884-adf9-bd612ebe437e", "sighting--cfab29c4-9037-4689-b7c8-2db06b0b31c4", "sighting--92ff6643-5f14-4c80-8aef-a9905a7c69bd", "sighting--1570e559-46e3-4d47-bda6-d08c2d4e6275", "sighting--d0ac0648-ba59-493d-972c-7b07e45f600d", "sighting--add321d7-1c69-4cb6-8506-50273756cf8f", "sighting--559a898b-1a47-4342-aa58-54e07814212e", "sighting--b9e4b746-66e8-4778-9759-30ae723b4dd2", "sighting--b86011c1-23e5-4386-a27c-6031ada551ea", "sighting--f9301b68-8364-420c-bb28-c9b46e4cd38d", "sighting--f087fcc1-9a4b-4b26-b5c3-57740d35f674", "sighting--ef810e5e-ead5-4724-9d18-fd0ddd0aec25", "sighting--2a474a69-b686-4e3d-9792-f55824315d9f", "sighting--9bcafc95-e72e-4b80-83aa-b6361ab733bd", "sighting--6f7aa720-5748-4728-ae09-17902b068c20", "sighting--eab1664c-d90b-476b-90a2-93c5d39789a8", "sighting--0fbd8e38-a1b9-4e96-83e7-190760438c7f", "sighting--93e9f12a-451e-4e90-b80a-2807dc87ed00", "sighting--2fb3bcbe-531d-427e-9cb8-c83407569cf9", "sighting--af4aa076-b372-4457-b159-b1fb5493a9dc", "sighting--f1184e78-2914-4bc8-b9a1-2098e708cb4b", "sighting--bf408e46-589e-4774-a526-b9fcf13ca623", "sighting--76432427-b88c-4007-9f83-e5400e5b6cfc", "sighting--4840fa66-6b0e-4ad8-8572-18ff32551912", "sighting--42f2a672-bef2-456f-bc06-75132af27bba", "sighting--f6c08ad8-ca3e-46cb-95c7-8376db85cf7a", "sighting--90b78fe1-5485-49fd-a60f-5cac45525ab5", "sighting--f9b5e4dc-4b87-4c9b-ad15-07b00c4b6947", "sighting--3e01b842-2062-4163-9ff1-b1293eede632", "sighting--c618fc60-4864-4202-912c-6cbae7ebe057", "sighting--45fe05d3-476b-49d5-a402-4daf50a9e63d", "sighting--cb220fec-9825-4529-8cfd-099455dcea44", "sighting--65429e66-4393-4cb8-9b21-36dfc5c57848", "sighting--929e4d33-146f-497f-a9fe-84df4f5d72af", "sighting--3d418392-640f-4401-995b-496b243c7aa3", "sighting--3991baff-565f-408b-b0c1-bf4f663474d4", "sighting--669f57ff-d685-496b-86be-20a16d8aa889", "sighting--c3be8162-3930-411a-9359-39ebcbcd4eff", "sighting--0ce3e650-d915-49f2-8f92-6b854560b305", "sighting--8ca280ba-3761-425e-be0e-1bd334dcdf2b", "sighting--e9b80abd-77f4-4629-8ab3-eebd0e575aaa", "sighting--b1246988-9580-4424-a9e4-2ef69aa8cfd4", "sighting--4dded997-273d-4249-8916-997998ec8278", "sighting--8d4d5e83-a076-44ad-9dcb-c2525e0e61f1", "sighting--08af7a1a-d301-4bb7-a371-b20b440af324", "sighting--21107dbc-20f1-48a7-833e-cb270c4dcc6d", "sighting--288791aa-2ef5-404e-b7f1-44cc5d82f23c", "sighting--dae00fc7-85c6-446c-baf4-07be7b050372", "sighting--85d34b18-aaa9-43aa-940c-8e53f0e07a4a", "sighting--f6d1eb08-9439-4cd0-951d-f1041dfb17e2", "sighting--486d0b9c-0d04-4075-8c09-60bf8b33b305", "sighting--47aabbd9-bfa6-488e-961c-6571c8d83c50", "sighting--efe10763-79af-4eda-b605-32a978baf150", "sighting--1cff458c-2d58-44d1-8561-56ed2a55c6fd", "sighting--8f6d73b0-bbd1-4952-be47-83ac0dd7173f", "sighting--ca53cb26-e625-4a02-8328-f0ef19176f5a", "sighting--91eeb56a-8000-4e81-8e3e-bb0313884d09", "sighting--1c8f6eb7-1c9b-4563-bb91-60614ed0c004", "sighting--4ab9cd96-2366-449a-b5a6-dc6ce0089da5", "sighting--a38c177c-b260-495e-a182-5e305f963408", "sighting--35b7bd12-03b0-4987-b218-63823cc5c151", "sighting--fec08059-bfcd-4799-92d1-c213f3bedc67", "sighting--996e55ef-4f06-466c-9c32-43c29888f592", "sighting--26fa5b96-9067-4269-9173-6eb4d485b3b6", "sighting--e1b18a62-b3e7-40a4-ad1e-4730be10e18a", "sighting--b65a2fe6-6829-4a39-a814-6d0c6a99b6c5", "sighting--7645f210-8f82-4de4-89b4-b959530283f5", "sighting--d6132ee9-a0d6-4224-9f37-e79677862f09", "sighting--99823ffb-2822-4a97-8d7b-49fd260101b1", "sighting--350250aa-a712-46c8-8668-22c71f8d7186", "sighting--8855b21c-608c-4a46-9735-3aae6c37c6a5", "sighting--0d36f2e7-9fb6-41cf-87a7-1d538d3f2d65", "sighting--646e3294-267f-4ed1-8f69-7a0ab9b0b808", "sighting--255fe05f-3768-4064-8e2b-274761316b47", "sighting--2ce2a290-b656-40bf-91e8-9904a72695e1", "sighting--e411938b-31b7-4def-b640-3019abd59f1b", "sighting--7e71b4b5-9054-4565-9bc4-ca643a4f0eaf", "sighting--73aea35e-ca44-4352-8cdc-fc8d74c796bb", "sighting--bc0dbd09-088c-4e44-b157-631a768301d9", "sighting--d3f6e342-3e6a-45a8-8578-78dfb1c98608", "sighting--c1441b2b-d0a2-4477-b9c6-6358cd5330d6", "sighting--17dc62a9-c0e2-43e6-8e17-9688e6f76daa", "sighting--4b020d1c-ab6b-443f-90b5-481cd4a4ca33", "sighting--3894709b-0da3-4b9b-bf1f-59872ba12174", "sighting--8c37f017-a28f-4936-8226-69df1b1ce220", "sighting--7b7477ff-7d48-4d3d-9ad7-e258d30ce943", "sighting--33d0e04d-94aa-4d19-9d1e-303ac03e96ac", "sighting--e5623267-bfd1-43cc-bb02-6122c229ef32", "sighting--dc26f693-bc75-4641-9f05-88a49f0e1d70", "sighting--c60d22dd-c830-4e39-ad84-92c69137c24f", "sighting--20fadba1-b6f9-4ff9-8a15-c8c56bebf05b", "sighting--21e492cb-f5a6-45ba-9393-6a570fbaf8c2", "sighting--0a4b5374-42be-4769-8eb5-c8c9fd905fda", "sighting--e70864ae-5714-48de-ab4b-2180c2127cfb", "sighting--c17411e0-ef30-4b05-9a41-6d599c0ee249", "sighting--820b3bb9-a791-4448-88a3-31707547f886", "sighting--c1ba5f7b-0cec-46c5-a210-a03db33c7d0b", "sighting--31d80f52-cb77-4b16-b233-f4e6d9554fdf", "sighting--1ec3412b-dec1-4ee1-8db3-412fa8903d31", "sighting--0e49a877-a886-424d-84ef-5a60304fcc76", "sighting--c62855f8-c939-41fc-afc3-0436f3a225e6", "sighting--bc44f422-298f-49c8-be65-c7ef53186c04", "sighting--5cd68403-e67e-4ddc-8fc2-6a2f580a403a", "sighting--1e6abf17-0410-43e2-bfd4-f1525904e94c", "sighting--e7b8f390-48f8-4087-aede-6cdcd6af4b98", "sighting--ba324d0b-6eb3-4f7e-aa79-5df75d7380b2", "sighting--04fe0e1b-f687-4267-ad4c-ef4facac8957", "sighting--c0d2f415-0b5e-40cb-adf3-79113b10d314", "sighting--75b22783-61d0-4412-bd2a-411ab3462476", "sighting--6b3e5e03-41dd-437a-bfda-93ee61a42cf5", "sighting--64bff62f-0b8a-4721-a098-141ec0fce3a7", "sighting--d9a00d79-1427-46e4-a712-900ac68acbcf", "sighting--7c583684-aead-4ffd-badb-fc5a1bc33319", "sighting--df14dd3b-eb48-4b3e-8239-6b90a954fe93", "sighting--dee8eeed-faa7-4cb4-8e6e-96dd92e43811", "sighting--7ec5c757-0799-4252-8b30-ae2c1250c94c", "sighting--e9dc6dbd-f539-4c42-91c6-df98806b1973", "sighting--e2b3df2c-87d8-44ab-8f0a-59324dc2619b", "sighting--a8851f01-e439-492a-be4e-6a93420fa933", "sighting--b813b766-d8be-47c3-bab5-4870c583968b", "sighting--723f4343-d163-49c0-ab29-19f0c843b87a", "sighting--d28ed7cf-991e-4a2d-b7dd-2fedbd50be26", "sighting--312c47d7-47c3-4342-ac26-86bd5f57dff7", "sighting--e3f8c68f-6d8a-4582-9848-64bde0f579b1", "sighting--5e3b5bf5-f029-4be2-9c1d-d04ebf10f4be", "sighting--bae09126-5ef6-467a-9b8a-494fc91c80d7", "sighting--60e8b00e-9f07-48da-8414-6cd267b546c3", "sighting--55460f1a-8c7a-4e4e-af08-8d48d26087d4", "sighting--9937ccbf-52b6-4d48-a805-a246fd360e4d", "sighting--90f5be15-adb2-416f-b02f-27eacb573ab6", "sighting--334ba9fd-b04e-4c09-ace8-cb83bc21d989", "sighting--da71f080-f5cd-4695-b1e8-b03a3310c13b", "sighting--17830225-99c5-4447-8944-ea6dcd655c33", "sighting--8e9af724-63e8-4a96-b896-81a2f7e540fe", "sighting--499338f8-eedc-43eb-a3ca-e20930777b38", "sighting--beff157b-12af-4e18-b8e4-d50e402c1ece", "sighting--d2d0a9e1-7757-4b11-a1f0-eabae0d4ca9f", "sighting--9d279b38-9917-4047-a52c-03f37ef2a345", "sighting--f04e58ee-17e6-447f-b2fb-37440547083a", "sighting--18b9f3d0-1d39-4b19-af77-1d41fa95ac6b", "sighting--185398f9-0e7b-4a7a-8202-608fe496c376", "sighting--125748e5-4d4f-4f85-abdc-04a2b6ca0c52", "sighting--2360c8e7-b597-462f-89ac-f15af471d76c", "sighting--4216088a-4e3a-4bfa-818b-c0147e179121", "sighting--3f06553d-55e6-4196-8d01-5e9ec68a2dd4", "sighting--48eb22e5-5c31-457e-8a3c-47d2dfc635d0", "sighting--1708c1e0-bd2c-46e3-af6e-61b99d29e1c2", "sighting--a19ca62d-fcae-48ee-a283-04198622ad4c", "sighting--36524428-1957-46e9-99b2-6a92787c6f25", "sighting--888b5c65-42c7-44e2-bc62-ecfafd322a48", "sighting--24885b81-968f-418f-967a-b122ad2d69f0", "sighting--abe32cce-e03a-4a20-9041-ef595c8c6f28", "sighting--3abae493-a300-484b-8bb9-2d71a996fcb1", "sighting--dfacef1c-158c-4768-b886-3e98285ac588", "sighting--263bbe5a-0ef6-4dd3-8131-f6441211f729", "sighting--ebcfebc4-7972-415a-84b3-8932f3d72f80", "sighting--fa010faf-69aa-43e6-b091-770a9c2ff0d7", "sighting--dd7e5a57-9918-4339-b155-110811b50c7c", "sighting--1ac27951-486e-4ca0-964e-67e3c54fdc9d", "sighting--99732b3e-1fab-4a72-a464-c84557342d75", "sighting--70d5b8fb-2310-4603-82e3-c76c50f5a5fc", "sighting--eb44f8d8-d5a7-45ce-8243-963115f11288", "sighting--1e561cb2-24ab-459b-8db5-99d87ba013f9", "sighting--dd5d80fa-2485-4ea2-9543-ed32d044e3fe", "sighting--d53d67cb-251e-4a98-b721-010b70ae0443", "sighting--17a8b5a5-c20f-4982-91d2-6673c1810295", "sighting--85775ab9-5352-4237-b395-d5d11bbb9988", "sighting--ef9142d5-9414-456b-93ea-c2ff7b6261a1", "sighting--cd33e460-9cb3-4a8d-b0d6-7fda6701d09d", "sighting--8bcc9f50-f0f8-4519-8748-f6b5e5075550", "sighting--b8ace7fb-148a-4a2c-ac87-d632ff43744e", "sighting--dfa022de-3b5d-4e1e-b431-9c5f83bcd3d8", "sighting--10691848-3633-435c-a35a-c24236975fea", "sighting--0014347d-7952-4213-aea8-80bc0f97013e", "sighting--852437fe-108a-4f33-81ac-cad191366576", "sighting--1edc26ec-a0b7-4dfc-b50c-8c952dc7971e", "sighting--17d59c0e-be49-4e48-ad01-c118c546fa3b", "sighting--4647d9ab-1167-4bbf-9c6a-3da0ee923f7e", "sighting--f282354c-2c35-4ef5-9efa-593cd1b16fdb", "sighting--2f75da78-46cc-4ce2-8dda-0c9c9bf03799", "sighting--e1931b61-782c-4deb-9cb8-38f42d224868", "sighting--d644d06e-c05b-41e3-a3fa-32530b823a53", "sighting--bcc68a7e-2b7f-4966-9439-6d6fbf8da892", "sighting--317fa409-3979-4703-8d5e-c20b3eba788d", "sighting--fc275ef5-1b79-4f96-9f12-9c7c6d427f4e", "sighting--765856db-00f0-498c-a313-d3d68169acbb", "sighting--2e2cbe7f-a7b3-4bea-917a-073c230acf88", "sighting--e0fee3a8-6f16-4129-8afa-5259e2877f15", "sighting--89f05742-018b-4736-b556-1c341614ea18", "sighting--a309fac7-0313-4b7c-add7-729d8516b276", "sighting--93b958ef-1a3c-4bc4-8e74-9ae841cb5746", "sighting--610fc2e8-6dba-4f2c-a82c-b8f8837b9d04", "sighting--4e98b975-faec-415f-b3fd-793ce635dbfd", "sighting--f4e8547b-93eb-4ddb-8d8f-2f281fea411d", "sighting--3f08717e-49b2-4dc9-bff7-d0fe1a963cb4", "sighting--b92de0ec-1f61-4ed6-adf8-9a1ff3980805", "sighting--8502484a-c7d9-468a-9eea-7f411dfab3b1", "sighting--efcbf1ad-9c05-4808-aeba-8c8fc8aa8cd2", "sighting--579e7e0b-9d67-4957-940f-006a417058f0", "sighting--85c9f248-a9e5-4df5-b469-1121479a6e3c", "sighting--75584cbb-fdd2-4d89-8b3d-dc181e8a44fa", "sighting--4b26be8b-2148-45e8-ab8a-0b8184967e48", "sighting--3e14e17b-7c09-425a-bd93-a39ae737ade2", "sighting--cb036691-373d-4719-ba5d-c471e9856f73", "sighting--6178b4e2-3be2-4b79-9d49-d788467cfc8c", "sighting--24560d91-8203-42ec-878f-7795e56ecb14", "sighting--91329c98-7839-4c6c-989a-a68458e69a68", "sighting--f33bad37-bb9e-4718-8a17-cb8650267e12", "sighting--4d6e2023-506d-4444-99a3-178bb73895c1", "sighting--3cb093c2-8235-4eea-8e63-ee1c6f867df9", "sighting--91d8abc4-a412-419d-906e-7d23679a9f3c", "sighting--297c9093-e4cc-4a32-bb82-d74c0ff4d296", "sighting--85c26039-c06a-4e5f-9e5e-ad7a13c24b27", "sighting--40a2633b-a6e1-483a-9be9-c6e6bc3afe82", "sighting--c0f43e14-3d0d-40f2-9d7b-f14c6494b666", "sighting--57025e6f-e66b-44ae-8261-59899d018a9e", "sighting--8c096a51-bbce-4719-b978-6f1fee0ab9aa", "sighting--539589b4-c5a5-41b2-b018-9cce81d434bd", "sighting--667f95dc-8f0b-4462-8d65-188ffc6c55c0", "sighting--7025aa88-d0d9-4115-a147-119884988c18", "sighting--9cb54fe4-0162-4a48-8736-d434437ac73b", "sighting--0a7e67a6-1ee2-45cf-bd75-3f2e7956a2bc", "sighting--9212e65d-700d-4110-bff0-38ba78e277a0", "sighting--88c49006-b7ce-4fa8-817e-ba5845d2a286", "sighting--981275ad-950e-47aa-8ed9-0bc191218848", "sighting--2caf9b4c-5032-4707-8d01-2aba1cabd730", "sighting--7bbbb57c-fa8e-420d-a92b-83efa5c21885", "sighting--f389d565-3a5a-4c8d-aaf0-dd5dc96ffd84", "sighting--85194cc5-19ec-47d7-a31a-b5f30fc71cac", "sighting--c9ebc38b-267a-4cdc-8584-7c402f8f56f3", "sighting--4fd99d78-7773-4f39-a77b-c70c56c14628", "sighting--f98d2e9b-d0cc-4b1e-a74a-714cb660379b", "sighting--658e6508-0719-49c2-b77e-358284372bc0", "sighting--169e33de-5601-4546-9132-fbeb656f5eff", "sighting--a6087b12-d65f-4527-afdb-7dd2cb374060", "sighting--efddf92e-ec61-42a0-a1cc-7eac0f1a49df", "sighting--e2d5d0e2-5561-4e1f-b61c-308acf2a9c8b", "sighting--651a50ff-6d1d-4aef-9dda-8064ca408bea", "sighting--1dd3c840-7f40-4d9f-982a-f0984e9f8521", "sighting--568a37bf-00f9-4e46-a345-0d24e50df957", "sighting--c9b79751-b49f-47b8-86b0-30a2a67ba423", "sighting--ad892ef3-47b7-4d70-a47f-df653ed35e8e", "sighting--e7291ea3-b85f-4eaa-9fa4-781834b0c4f9", "sighting--87227a64-dc8f-4116-a832-f7e80a44fbdc", "sighting--1b194477-50a0-4160-a3ae-ea2aeed8bffb", "sighting--ecfbd1ad-f8c3-4551-bc25-ca1b7ce824f7", "sighting--d4dc4b6c-0ed9-490a-91bb-29f4c7d1cfe3", "sighting--b35bea80-e6c9-4456-9f23-70edaf3d7b61", "sighting--2bd243d8-b6ef-4ca8-8c83-b2ac404fe8ba", "sighting--103771c1-170e-4d28-9212-8775aaa08986", "sighting--940a1ae5-8c15-42ba-9396-358261ebe5df", "sighting--c0c21252-e983-4f49-8921-5efafc051f61", "sighting--4689e5cf-ac19-4ced-8a00-66e24656c90d", "sighting--a64172a1-55c7-42ba-94c5-97abffd432bd", "sighting--b70bd951-5772-4f6b-b520-ee76856e60d1", "sighting--c8f3636b-7730-4e4e-bd1c-0460901fc25f", "sighting--7583b16d-33bb-4335-a005-ba82604b4600", "sighting--b87cb7bc-f0f4-446e-9523-9294b4235749", "sighting--5fa230b4-2298-46e9-a156-c96c11af2ac6", "sighting--3138a5ba-ef4c-4b42-8342-4a3ae8b2756d", "sighting--ba8a5e1b-5173-4e8c-928a-b7544b4b9bcf", "sighting--4507be47-426f-4aec-8e32-4013f150f1a1", "sighting--590b4eb8-ca0e-46b9-baba-609141108eef", "sighting--cdfdbacf-b1f6-4d8b-bd2f-a0322695268a", "sighting--0e17edda-988e-4a38-9af1-8dc8c2288d5e", "sighting--2de9d10f-968a-4e3b-8ba8-64b97ea85600", "sighting--8dd5a45d-2444-4760-94a5-1e71695c6c48", "sighting--28f67f2c-8a19-4f83-a23e-3e493648e98c", "sighting--1e7c4361-0154-40a6-ab45-743017849270", "sighting--133e9633-8d36-47b6-82b1-a3ab69097c58", "sighting--6a110b55-4ad6-4b1f-8e96-568c757f5c3a", "sighting--c3a2e5e5-8558-47b6-9775-2fc9718d95a6", "sighting--bfbe6714-e780-4ca3-86e9-303a562e1396", "sighting--e397ea7a-909c-4baf-9501-b573d3e5e7d0", "sighting--31c17a08-1b34-4e23-a4cd-66710e0b25c0", "sighting--5ceb7f82-7ac7-4f5e-ad72-4137433ef638", "sighting--338b490b-0b5d-47ca-8044-549ba9efed47", "sighting--154f64e5-e433-4e95-89c9-0982668f7e7b", "sighting--9cfbbe43-ca53-4cff-9245-9e3a2c64481b", "sighting--81cae34e-f001-4430-a3a4-fe4683cf410c", "sighting--31e21387-2539-4b1c-a37d-b9e2d55f645b", "sighting--b8c52709-eec1-4b95-9023-7862bc116c91", "sighting--dacf9936-28bb-4798-b6fa-f763b733f953", "sighting--c04dee0f-a000-4c0b-8b36-6b827ad06063", "sighting--a3e37104-ca85-44cd-ab53-53af2cef50af", "sighting--92d6b639-cb05-4fef-a253-52b05fc2c399", "sighting--176c03df-5e37-4efa-ad13-5b3e58ab42f8", "sighting--15ea3fca-44fa-4163-92a4-41c159b76091", "sighting--4bba656c-c203-40f7-987d-61a26d19557d", "sighting--97246e72-7395-453d-a032-2c0b161b9dc9", "sighting--e4f15d4e-d0a3-4852-aba8-73021308befe", "sighting--33e21024-b5c4-49b3-8972-709842bf0961", "sighting--693681e9-ed02-4180-962a-b81b8b80a9a7", "sighting--355b3aa9-d631-4028-8a98-32c546d3af65", "sighting--36ee01dd-9bae-4e72-8b01-9f008fde0049", "sighting--65166fcc-775f-4dd7-91c1-b8e779c01f7f", "sighting--9a441c68-1c03-4fcc-9877-2a62f9b866be", "sighting--0b2847f6-3269-4b74-94e3-a3b813f221b2", "sighting--8ea3f034-068f-45af-be6c-ae2451ddd79c", "sighting--e704c31c-8d20-4882-85d8-abffc2cdeb3c", "sighting--4ee67744-2e3b-4eb8-a781-d90dff70b95a", "sighting--584a79f5-05b9-4a9c-b18a-cd5bbf3d0f71", "sighting--3d49747f-c912-4109-a0e5-427fe0838da9", "sighting--f8130d7c-2b82-442b-902d-d69aced3809c", "sighting--17c1a441-d8dc-4e5e-8c17-584baf45d15c", "sighting--b45d8035-d0a5-48db-ac11-3517cec52dba", "sighting--052a1718-c5c8-44d2-ad46-0b3c7266061b", "sighting--eec728ac-d769-4281-81be-f133575e4465", "sighting--96a9dc70-93fb-446b-92f6-00510b362e90", "sighting--c247ef7e-1019-459e-9624-e140198942bd", "sighting--8063a2cd-3a65-4e90-a73c-89573c1820c0", "sighting--c474d960-82ac-460b-b1ab-cb04db2901d5", "sighting--8d6675b6-dd97-435e-95fa-2e9832591b56", "sighting--24e8aa7a-cdea-42e4-8954-245689698111", "sighting--c9b4eead-f054-4be6-8a7a-39cdc374fbfc", "sighting--431801e7-3905-49bb-baac-bf9433cdd399", "sighting--7ffc7997-869b-476e-8eca-253783f863ea", "sighting--aebc4f80-c3cc-4173-b8b4-9895fbad4a4e", "sighting--b7857548-1414-43f7-9681-f18864c198f8", "sighting--f23fa0d0-d6be-485f-8535-1f12d6e8c3ca", "sighting--09caf250-df4a-4e98-886c-0a6482d9729f", "sighting--e2b38e6e-b342-41ad-84d5-5c1e33d7e67d", "sighting--d0f6cd2c-3ba9-4d6e-a681-2d5e93b4631b", "sighting--990da7a6-7349-4c0c-8038-f16651c4b460", "sighting--0dfeedf6-3924-4513-b1a4-565f2c92d382", "sighting--bab14cfc-0858-41e6-a002-e0e2647b6a4c", "sighting--ce42659d-0501-4d5b-b137-d7f070025ae8", "sighting--e47644d7-3956-4c20-9db3-d86235bb0865", "sighting--a3b49047-b91a-48ef-aba8-32bbb816baf6", "sighting--7510e09b-8f18-4560-8674-cb063a26516b", "sighting--8a74ad95-c0e2-4b97-bdff-72d2bc89ad12", "sighting--a0af2fa3-de68-4d4f-92ba-5cb75f50815b", "sighting--000dc44e-78c1-43dd-b300-3a309f6e7278", "sighting--f94293f6-0ae6-4e73-bcfd-13c8b255d16f", "sighting--af00120c-1566-45cf-90d9-3070253a5a47", "sighting--44cf2c71-ecc8-4948-9b1c-49f9a395eb23", "sighting--f3ea6ab5-4bac-4d36-b32f-897dc73d5b62", "sighting--6369a383-74a6-4e48-a607-bb8019702e6d", "sighting--0c664b73-52cf-4c9a-9da6-e050daff9dad", "sighting--0a725337-d00d-4fb6-98a1-38a71c2e6e24", "sighting--2f116dee-4c8d-4a15-be7e-36a0dc40d98d", "sighting--8de6e353-6d27-4b56-a004-a423f9b2bffc", "sighting--599c0afe-e1dd-413e-96e1-e8a7249ed29f", "sighting--3305dcdf-431d-4d29-97f6-76fc5fbf143d", "sighting--60c8b1c5-9301-4142-bfed-a9de01073f42", "sighting--99c7ccfa-46e6-4661-ad51-ff1d2c110bbf", "sighting--cfa17f52-787b-4b5e-8ead-57778deec21d", "sighting--10ca6a45-084b-42dd-a036-e94efeb91ffc", "sighting--42bdb072-9dac-4647-98c7-6ce80fa7833f", "sighting--06d5f70c-d0c7-4a1d-b0ee-f1fe3be3e7e3", "sighting--bc097702-febf-48ff-abcf-29f6843842fc", "sighting--dc5eb84b-46c1-4225-84e6-1769bc5a060b", "sighting--ae11c9de-6f01-4f3e-820f-9394eb60717c", "sighting--6b00e313-9a81-4708-9a1c-d225e8b4e5db", "sighting--be724cc0-d9ea-4bc5-bbb9-80e98fc665c0", "sighting--79ec1e38-ff90-49eb-aff6-3b5db2ac915b", "sighting--4505853f-7c7c-4596-9ebf-965136ed9a7b", "sighting--720fbcbb-0fab-4feb-a0ec-94ac72b2b4ca", "sighting--461c0e6c-e9c8-436f-bb20-c7ca0572030c", "sighting--a4fcea8d-4df6-4d89-bee6-55a64542735c", "sighting--199125d5-a59a-400d-a58b-3b7c6776926a", "sighting--c0e3f70f-4b69-4826-99ec-2f7652e78e2e", "sighting--f3316359-fe78-4044-8c72-098ecedef141", "sighting--0250dd30-c8d6-42e0-a035-ceb0f1b96405", "sighting--c09281fe-542c-406c-8b89-494d8fb32db5", "sighting--86a8245c-732f-40c6-aa7a-8c0c40fac302", "sighting--8bd0d591-6686-4af4-a9f7-7db1cefb1600", "sighting--5a3e9e62-be06-43ef-8ba4-ed2f884fe34a", "sighting--0292034b-0776-4d5b-86e0-f937a9da0601", "sighting--c7ad4748-cc65-42be-87ff-7722cc6caf9a", "sighting--b84449d7-98ef-44d5-8b34-6f3d92ce9a69", "sighting--76029a14-5d72-459d-828a-558e5b9a2725", "sighting--2cd06052-5a10-418a-898e-56d4c5db2344", "sighting--4ea3d969-a6ba-4d4f-99df-84ac38804559", "sighting--f5df03c9-3071-405b-a92e-8e6d44b17f0f", "sighting--d78431ef-6a30-4c08-b85f-1baa652ee24c", "sighting--02f121c7-5d82-43db-ab46-510bb2c90bf0", "sighting--d7a5ca67-dc3b-4845-9659-f316b020f43e", "sighting--f3afcc92-a1c5-459d-a3d3-1e3fe5ea78ef", "sighting--6afba43e-ae9c-45c6-a82e-f18644a2a06e", "sighting--0d5dfc28-2d5d-4599-848e-de814b0af411", "sighting--268638ab-eabf-44c4-b357-69a6785940d3", "sighting--431e4578-317a-4840-a9ef-a96746882bf1", "sighting--739f1a17-0842-4769-b3fc-4da83c7b2b50", "sighting--6357fcba-4d8d-4c1c-977d-d6a77aa371f6", "sighting--30656fd7-f203-46fc-858a-faca25e5f873", "sighting--028034bc-888e-42dd-87ec-71986009b2f9", "sighting--af802c2f-5393-4d7b-b937-9fed11179bb0", "sighting--a4e0bf3d-3533-4bf9-a427-2776fd8e3ad4", "sighting--9cb7f5ac-f6de-46b1-a7ab-4def4dd6dad4", "sighting--38ba2ac2-cbc8-4284-8586-2ba1b6676ba0", "sighting--4bc4b73a-0052-4a81-9caa-2662f153b38e", "sighting--92390156-76ea-4c61-8530-ba09b6d2f005", "sighting--67294e59-fe29-4fdb-a60f-16efc36b3c16", "sighting--c9d53e79-cc3f-4ae7-9f73-ea5e757f0f6e", "sighting--d0835d1d-9ca5-401f-b574-03041f0e3d49", "sighting--e956afec-3cb1-4241-a8a1-a2d3706b6945", "sighting--50077b0e-d0fe-4664-8063-1026e6967c15", "sighting--56374ffe-e559-42b9-b451-1f04050bd884", "sighting--93aaac2d-1e37-455a-87b8-9e0f41d8e890", "sighting--04d3187a-e227-41d2-a2b8-4a2348cb4e63", "sighting--7814626c-37cb-46f4-b1ea-c7ef23c1e1e3", "sighting--95448ccb-708b-450c-878c-b639f4075981", "sighting--e4c8df12-4b80-49fa-80c1-83b1dac7f5f3", "sighting--94a3266b-eb76-4226-8e9d-e4c8d2d7a408", "sighting--d6a88668-f4bd-4f08-a63d-959d5533c4e9", "sighting--68d992dc-596b-4ef5-a050-c89d7d28fc72", "sighting--9d1f2cf2-7301-464f-a65e-098c8df25131", "sighting--9cde5fc4-24ea-4ff5-a25d-024e165a729c", "sighting--29c8fe2b-d67a-46f9-8aad-66e5e1ee3e37", "sighting--44e3a8ab-db2f-4ec8-87ec-49b075c87806", "sighting--c7190e5f-e7f1-4143-9fd5-fb510c5a468d", "sighting--8baa7765-97f0-466e-84a3-df3b353281ae", "sighting--2957f7a1-52fb-4b38-a68c-1f01bace4ef6", "sighting--a814af4e-2217-402d-8a96-ac5d34ef40e5", "sighting--3a33318b-4fb3-4e10-9eb4-c6ffab4fecc5", "sighting--6b5ee695-2af8-499a-ae52-a7697c486f68", "sighting--2a9af03e-468e-48f2-9add-98dcbf780988", "sighting--19f0347e-92d2-4dfc-8673-25e9d3101308", "sighting--6e50bd46-b845-468c-b18c-d735d06b7080", "sighting--dbac7bf7-db3b-40f1-a581-edf630398682", "sighting--2c43bbf8-25da-41b4-96fe-9508b2bb6634", "sighting--78177115-43d4-4a6f-bca9-d59f619d808f", "sighting--d548f179-0378-427e-a2b9-b32dcc7a6211", "sighting--eceefe42-a6db-4924-b449-d00be777fedc", "sighting--82f9368b-73d4-41d1-aa47-536f5047fd46", "sighting--00407479-00bf-4dd6-b902-8b3387048e9c", "sighting--44bfbf0c-a29b-4026-9d24-ef5103c5aff3", "sighting--41901bff-1312-4671-9f0e-8972ce2a9deb", "sighting--72cfe2be-020f-4069-ab3c-c8f49c48f07a", "sighting--01136153-4411-4635-9359-bb3b463be7af", "sighting--f801123e-3e48-4022-bdbc-e301d63acd78", "sighting--4e379b42-4700-42d2-a34f-149e9f63fc28", "sighting--461efe6f-c62c-4d1e-b329-e50ca018d89f", "sighting--791b9aab-e2f4-411e-94c6-3b05248244ac", "sighting--24e754fc-a6dd-4c16-b608-8bb1cc4c3993", "sighting--ebc29f72-905a-4ba0-b886-e4bdbc1da79a", "sighting--65dc8a60-876a-46ad-a36b-eca5d0e8452a", "sighting--b6f88b7a-541d-4bfe-bef6-02f331ac37b9", "sighting--e6ec6fb0-6baa-48c5-be98-5036ff20317d", "sighting--f235200f-6449-47ef-a0b0-78e1e2c40d82", "sighting--1fe56fdc-41ca-461b-844d-023f213a0449", "sighting--7c800044-2568-4ee9-be95-396bb31b4848", "sighting--e8c43878-f5de-4d4d-93c0-9f8dfcc692d2", "sighting--1397cb7c-01ee-45cd-9c55-15c839fcbb22", "sighting--0fc1cbc8-5868-4fbc-b4cf-b9846dbc3825", "sighting--1eea0a83-6745-45f2-be99-6e437f8e7c02", "sighting--556344ec-ec51-4981-82db-0dc2123245d3", "sighting--ccd4b9ad-615d-412e-8519-a3f088142875", "sighting--b4c16049-0c8b-4d42-a3e2-7b342ac9add6", "sighting--072a14bb-2f4d-4544-8ba9-b7e5aca5d05a", "sighting--661a21ec-f4af-40de-8fc5-721bd985c4ea", "sighting--32503fc8-6ea4-48d2-a036-4d1c748a95ea", "sighting--3aa0080b-64bb-4555-85c9-ebf0bd9afd6c", "sighting--ef2fe0cc-f8db-465b-9759-66cc8e1cdb45", "sighting--303b0a18-a60f-4767-a346-a814abf19e91", "sighting--3b550794-5f64-4513-aa15-b20a093b8d64", "sighting--e0633375-6e78-442f-850c-112aed841d23", "sighting--a9ccdfa0-9631-4d76-a0f9-2e1dda96f59a", "sighting--ad775248-3442-4b00-8715-3bb4a4879d75", "sighting--067dc8cd-dc37-423d-a5ad-c66c0faf42e0", "sighting--7910ae80-d555-4ade-8d76-112cd9504ec9", "sighting--50ed5bb8-78da-41bd-ac59-693bff9d0716", "sighting--a413f105-d149-4abf-bf69-480f3432ea33", "sighting--a542ded4-0fee-47c9-9bfe-181e053b2509", "sighting--729d7f42-4024-4ebf-9e05-9680ee7610ca", "sighting--46587914-2dab-4fea-acf2-db0ab6316d59", "sighting--fe93e626-4b49-4009-987d-d866d0e6e951", "sighting--b9131f33-b76a-4a62-bf4a-922c8d3a547e", "sighting--e2125583-374b-4ec6-bc89-a2a37b2658fb", "sighting--9074c18b-62ac-4c25-8836-4bfa7b00db1b", "sighting--e619663a-adc4-4562-8fe8-53a5252245c2", "sighting--d05f4fd0-1c4f-462a-8af7-129054dad9d3", "sighting--9b8c114d-bb75-4ee1-b846-598327164029", "sighting--db5e89e5-7ab4-43ec-9b74-dd05d49dd7fe", "sighting--ff888394-682f-49ba-bdf1-9bfb84ed08d3", "sighting--60627c8d-ff74-4a78-b7fd-72a6bc8fa65f", "sighting--30534f6b-a811-4209-bb7c-028b21759244", "sighting--2b417427-c825-4530-84af-b733e7cfe823", "sighting--814f3da3-650d-4f15-b02f-edb27718b7d2", "sighting--a65cb51f-64c4-4357-b54b-46389b45f825", "sighting--c93f9759-9e57-4123-be06-2e426387621e", "sighting--52e75a2c-f6e0-4d8f-a9a9-46b5210eaaa8", "sighting--21048b40-980a-49e1-91e4-cef70c472114", "sighting--668aa00a-8eae-48b1-b841-ab293288d22a", "sighting--1920a8dc-93ca-492d-bfaf-f8db97e2c514", "sighting--83f67db9-f85e-49db-b076-f89ffe2dacb1", "sighting--547885e9-4944-48df-86b9-bd65cfc31810", "sighting--2c0a5c0f-a0e1-41db-98c9-b6d1eaf40341", "sighting--1743690d-5ad8-4356-8e68-403d644ecd9d", "sighting--f5c1c219-00a9-4c14-b279-853a8f8fe700", "sighting--e43294e8-821e-4aad-a498-e8d749b0b2d4", "sighting--2656bfbc-2575-49a1-b46a-a0824f1aef39", "sighting--f3df2841-f96e-4ec8-b41c-5105b4e5850a", "sighting--6872940f-80e7-49cd-ba1c-4a2065166758", "sighting--57fb6fca-d4c3-42b5-9b03-44679585c600", "sighting--fbd0a119-130c-4eb4-9427-5ee41838c199", "sighting--2f9b5368-5589-4abf-a1f4-263c463e5c75", "sighting--cdc8937f-0f2d-44f5-9a4d-df45f6beb750", "sighting--c91f2725-af10-4b48-b6ec-967bff79def6", "sighting--02e6669e-7d3b-4ee0-8e31-8e05ef872c1b", "sighting--bb9fd343-3285-40a0-b588-fa7cacfb1b96", "sighting--7fbb3402-d31d-4d5e-9bfc-74a63f7a13f5", "sighting--90fb94d3-3cae-4dd3-92f6-1c2de5d9cea3", "sighting--cff90358-0f13-4984-9b4a-c8760afc579d", "sighting--45610b8a-7aec-40c2-8135-ac0efd739f2d", "sighting--44b3dc89-1ebb-4bca-960d-4ba731c86286", "sighting--d4236a6f-1d2c-4bac-9ae9-3c1af4d9b84b", "sighting--1ef6b1c5-d974-4dc5-b0b9-5762a835a7d1", "sighting--78cd320d-b6b4-4b93-a999-0a5799939cc2", "sighting--3e46ee31-6d69-465b-9eea-2f43edf46641", "sighting--d9728eb3-c10f-4f58-acf2-2b1e5a915fc5", "sighting--b1cb81a9-7070-41e8-aad0-64e6b6826896", "sighting--72323a35-db30-4259-b8cc-6e171ea724b8", "sighting--3c6fb0e3-cc3d-4091-bcd9-cb32e2dd3d81", "sighting--32a77365-9253-46b1-b665-5bad24a43310", "sighting--d8c5a5ca-213f-438b-95c2-90fff6e460af", "sighting--e23c6d8c-d013-4928-9967-b918e59b8e7f", "sighting--2e467fc3-38fc-4660-baa6-eb07af184e4f", "sighting--b6eb0f33-3fbf-4b20-b03e-84223fec8bad", "sighting--62136675-92b0-4075-b76f-72b9b9d3c3dd", "sighting--9bc9b42c-61d6-49ce-9096-14e18dad5a25", "sighting--9744624a-1c03-4152-8940-310b49429646", "sighting--fc222921-c957-4dec-acdc-8e6b3322d212", "sighting--11dc4c3c-d32b-4d08-b179-7de7bc31a513", "sighting--eac1c839-b40a-4d16-8609-be1c3e5ada79", "sighting--7227080f-1f67-4f58-a574-810198fd8433", "sighting--33cd21ce-ab4e-4a16-9344-d1792bb89cfa", "sighting--0ad84233-49d1-4b2e-a054-213c9f5773aa", "sighting--89f3daaa-a2a9-47d8-afb2-48a80ddd3303", "sighting--ab995560-123c-4611-9f58-67f6f782840f", "sighting--f19f63b5-3f0d-40a0-8d2f-ab9f85db1283", "sighting--6892cca8-1822-42eb-a8ac-f92e329bb6ae", "sighting--228722cd-10ab-43a6-abf1-c780d0c8a3f5", "sighting--c92fb4ee-f3f2-4e60-b8fe-b17379340b26", "sighting--c654cd2b-bcdb-484a-8eef-03df8a52dba7", "sighting--3fd5fdcb-bf2b-4ce7-baa1-c0cf2706db83", "sighting--1b460e6f-bfe0-412a-ac55-a18e84e44c8f", "sighting--ddd9e250-d29e-46fa-896d-1cc93d3ccbf8", "sighting--14300d30-ad6b-4b1e-a6bb-57b9d949ae45", "sighting--526052d1-2474-4114-910c-1d6595b8fa36", "sighting--0411b85f-c4cd-41a8-9424-62eaaef45d41", "sighting--920f9269-1f61-42f8-817e-9ad20e022638", "sighting--8ba53e19-ae77-41b6-9599-fd11c9931faa", "sighting--d4e8c266-c2ed-4265-9092-89aa36ca1da8", "sighting--073096cd-fea7-4e1c-b359-89cc4d9775e8", "sighting--6d6302f0-eef7-4fed-8418-0e9b1b877610", "sighting--f9825248-64be-4487-b904-c83d67d69b6b", "sighting--55d10dde-b065-487e-a5c0-1188d04d5752", "sighting--4b6d3a6d-0a22-4066-89c3-c8da834ec858", "sighting--d983ce94-93b4-4207-9be6-0c35238d7691", "sighting--3494d478-0854-44e9-abc5-b5bc437407d4", "sighting--6f8af2e6-6710-4e4b-959f-a3d11ea6363d", "sighting--d6a738f9-3c56-4f3d-9462-3e3dd17ecbac", "sighting--eae0d6f1-0308-4be5-86dd-4a25b4311743", "sighting--01be7d16-8ec1-4e3f-bedc-a6d03d13c4be", "sighting--5aa6e979-154c-4c61-a2ce-e004058a3db2", "sighting--bb9dcdde-cb43-4d3a-b887-ed379243c06c", "sighting--7cb499dc-2fd5-4b78-ade8-0cbf8a92e77e", "sighting--f2266944-4134-45bd-a471-a7afe4158910", "sighting--b36a8ad9-adf0-49e2-9cdf-4b8eb487a145", "sighting--6d9c7f6d-4b1d-4af0-a84d-af063f4c09ed", "sighting--79c269dd-1517-4e10-a5b1-cf62cabb14bd", "sighting--a6c82307-c585-4910-b58e-b5e53e89e588", "sighting--6ff80e30-9dbe-4d20-b317-bf7966e2789e", "sighting--b979c9e5-3b6b-4e4c-8d23-1b5e32ded162", "sighting--e0616cb6-d75a-4c43-92e1-2b44835cbd3f", "sighting--a6ddbec9-e21d-49d0-876c-fdbe9be4fd00", "sighting--406b5c25-93d6-464e-a016-c05b16f474b3", "sighting--80ee221c-8788-47d8-b77b-b91c76716f3f", "sighting--07ffa751-e756-40f0-9445-4a15158e0682", "sighting--674fb241-18fb-445a-a037-f4593c1a86a2", "sighting--343babf9-25ab-4828-ae9c-de1516325263", "sighting--f310d09f-2e8c-48a6-a312-079adea634ea", "sighting--9b0a58a0-5355-4f67-91b0-f2aa777ce201", "sighting--916ea18d-226c-478d-8536-b4183118c92b", "sighting--a3cad62b-3577-4be7-adc9-514ac88beb23", "sighting--6ea48ba5-3821-4d88-ab04-2cb89ea87f4e", "sighting--28ad292a-5a41-49e5-b305-c37193158c3f", "sighting--48cb0c7c-6f8b-4f98-83f2-6394a2e86eba", "sighting--521bad4c-8602-48f9-a565-c7f28fcc9826", "sighting--5314eafe-ca52-486c-9cc3-e53d2481b666", "sighting--605f72ee-c154-476c-86fb-0d3d97ed5199", "sighting--5c808a54-e4d9-450c-9f34-26fd9270008a", "sighting--5a25aa49-7887-4552-8237-bb5e5f8f52a2", "sighting--71c014b2-bf64-4890-a1f4-d285455cbcfb", "sighting--e71e99d4-3149-425c-a37b-ecf9c63ca658", "sighting--070b30db-7ecb-4a3e-9a45-bf247ba48332", "sighting--f86f9a36-dc1a-4213-a002-c93bea0ba968", "sighting--57a61443-d9b2-462b-9e4f-b0b3f9a301aa", "sighting--6d16bdc1-37d0-4537-8afa-4449561bd81a", "sighting--ab237fd3-452d-486f-8e76-ee4a632a943b", "sighting--5bdb847a-2ee8-4b37-b8fe-f78cdf2ffd8e", "sighting--fed81062-7e14-49c5-b36b-6214bcc054d6", "sighting--f5462cd7-f67a-45c7-bd21-c8ccb00471fd", "sighting--499fc6e9-9d7b-47c9-a5d1-d8c65be16659", "sighting--a852d43b-d72a-40cf-8988-7c44e6bb95ca", "sighting--9f13654d-9552-48db-a053-b02084fdbee5", "sighting--86a9e1e9-d5b9-481e-9943-9ad41be6241f", "sighting--c38d4e63-7355-4155-993e-87421f4e7290", "sighting--7ea6e94b-2190-4612-abb0-036f558b969d", "sighting--893481cb-e486-4ba7-a5e3-b8f572250b58", "sighting--3cd69cd2-da33-43e2-91ac-b4d8e6062668", "sighting--a8613e3c-2b2c-4d5c-b58b-547f2c529f44", "sighting--ec876b85-1a3a-488f-b322-0ab983a83510", "sighting--11fcf780-cd53-44b0-a6d3-f4a5372af616", "sighting--5017e2cf-be2a-422e-90c9-ccbf09ce1eda", "sighting--13122355-dbf6-4fd4-917d-087adfb91a46", "sighting--9ed012f1-c824-4590-b6c1-828cea1ac061", "sighting--31716111-0d76-4867-906a-a196fc9db5f8", "sighting--f8199898-185c-4bee-92e2-29f61d11c919", "sighting--f8b66142-94ee-4674-9687-656cf0ce7f17", "sighting--fb029317-b9df-4641-a8b8-7239841fea34", "sighting--b97d8dfe-82ec-420a-8fc5-e774d4ef4a8e", "sighting--55fc1ff5-3c53-45f3-bcd0-ec93979942fe", "sighting--bff8fafc-57c0-46e2-af40-072a98486358", "sighting--555c0157-73ad-489a-ad8b-9c05a20ff694", "sighting--6db1b071-6d3d-470b-9a0f-808eab0c35b2", "sighting--b70753fa-120f-4d1f-a262-12e3eeae137e", "sighting--e352551f-7d3c-47b4-89c8-a99ee1ab65ab", "sighting--5a6adc06-5549-44b0-97b9-09387bf8d9c8", "sighting--54b89af0-56c9-4898-abb1-f9c9de93bb4c", "sighting--0befe171-6b3a-4ede-b851-239ee26e81d4", "sighting--ec0d1755-dc4c-4974-b487-6b1175cdea05", "sighting--bddfe487-59e7-4b20-be9e-dac80d21ee42", "sighting--97385414-289b-4ce6-8132-721624d6bb2a", "sighting--a8d34c5e-dbe3-4bd5-a567-9d2584d323fe", "sighting--2dab4229-0991-4615-9312-d523bf838f40", "sighting--0b0a07bd-f760-4d4a-8dbf-b5189a660a33", "sighting--543bf226-a323-49ba-9c89-f91a05a63b9e", "sighting--43fb8522-d7fa-4ef7-8026-3de24689d727", "sighting--87431081-d75b-434b-8f53-9f7867349507", "sighting--d84bc924-02de-429f-8e87-6c0b81e904fc", "sighting--fc299289-e303-4ce8-b0a2-d530b7a852bc", "sighting--95d509c9-60b8-406f-8cfa-815192af482d", "sighting--733ee759-bd2e-4403-abd7-3ae88819c2b5", "sighting--db8ea847-f5b0-4e5f-af84-fd2d2ea84ee2", "sighting--60508fa6-f80d-4df6-a98d-f5322856e840", "sighting--9734cfd2-c803-4eb1-8dbb-b6c9ec36a0c6", "sighting--4243a0ec-da7c-4b1c-88b6-f5a8adc313af", "sighting--fb7fa229-d783-4675-95dc-4f8a60d81963", "sighting--5ca19995-93e9-40ee-9ecf-f9736b9af241", "sighting--c513a27f-1ca9-4d9c-8ca8-f06c2d9c54ba", "sighting--8d11f196-fd50-4e9d-b7ab-3f635082353e", "sighting--5c76561d-6904-4e4b-b8d1-4864a3a27302", "sighting--8097ce1e-74e2-43e7-8cd1-215b79c0beba", "sighting--02148d54-4b95-41c3-b896-eb4f56c9c61a", "sighting--d919a96c-d1ac-478f-af1a-2d6e42c29da0", "sighting--decba579-4135-43e8-93e6-7bd4e711b400", "sighting--8f114080-e1e0-4184-93b0-a21e20e8a25c", "sighting--b6feda36-21ed-43da-a81c-bc83ea5a07ba", "sighting--4e0623f9-076f-4fe1-b47f-24d16d151bfa", "sighting--5a586275-70aa-4dc2-a6bd-bda17d9c5042", "sighting--c3e199dd-0116-41ef-b5ef-f18778278d27", "sighting--20fcedcb-4599-4674-b3e7-de1298185aa6", "sighting--2191c4db-4774-410e-b39b-a4c3b9887dd9", "sighting--d918afa1-9d07-48a9-8602-2836220c0226", "sighting--317e25cd-9c3c-46cf-8407-898493a71a60", "sighting--125f2ca3-dff6-4e4d-98b6-b949297c8604", "sighting--43a8e3af-eaab-47cf-a0e6-8f011ef61555", "sighting--598e122b-83e2-4589-a282-a458df60a333", "sighting--892df055-54a5-4e33-a9a7-91aff1f55c94", "sighting--893d4c3b-9297-4f96-8941-43105ab36056", "sighting--6f362022-d07f-465e-8efa-8458caef40ca", "sighting--f27d5152-ca3b-42de-a2be-bf8a5505dc4c", "sighting--0d1a75fb-26d3-424c-b10c-6768d3cff23f", "sighting--366a6d64-d2c1-4a4d-a1bc-1997cca59267", "sighting--643fb2b3-5f09-45bc-bbf7-2d32635265e5", "sighting--446b0c9e-799d-475e-a488-fa68f003adc0", "sighting--9f7658a6-ff17-4d8e-885f-d6b70d3e5201", "sighting--109bd2e6-cb5d-4c4a-b42c-ae4ce9af1b2d", "sighting--ae9a81c3-d04b-4159-a06e-2a081aa724a1", "sighting--bd89406a-c1da-4a5f-8b7a-93e68d060d65", "sighting--0d391e0c-8ab3-4303-97ab-c17f3a021c7b", "sighting--8aee069b-4b77-41c6-aa6a-1497794cb5a1", "sighting--727cf74b-a80f-4df6-8274-f3f76ed02aff", "sighting--e31f2ea4-d9e3-43b8-899c-521d6455b1ea", "sighting--edab2478-f2d5-48b3-9a3b-8221fb813e42", "sighting--a8a567f3-5085-4a1d-890a-1af4ffaa8a1a", "sighting--6adc680f-4722-439c-8855-b036f5f35599", "sighting--e7e2c6f4-0917-4b08-8c69-5fc957e5d92a", "sighting--87468590-a822-4b3f-9e6c-1c1273557e0f", "sighting--ff864461-065d-4eaa-b0f7-a4051ce8c779", "sighting--cc330a8f-ceb2-4f07-8b86-f67791563d5a", "sighting--5ea9153a-eea5-4f7b-8f44-b9fce51ddb67", "sighting--16e34794-d55f-4576-90ba-013bc5cd6f28", "sighting--cabe8c97-6e16-4899-a5b3-1ce4602e545b", "sighting--ec3a3a68-a04c-4a39-878f-e809884a3fda", "sighting--9683bf2d-411c-4309-9afa-eea700198047", "sighting--72fef066-e89d-403c-b0fe-053393b65117", "sighting--58414b29-a835-4eeb-97eb-1c1d6984cb68", "sighting--047cd663-0ce8-4c8b-86cb-d5cfa6af67eb", "sighting--268aabc9-8c27-4da6-b9e8-e08b17273f75", "sighting--f1c27cf7-dfe1-4914-83cc-219d80816bf9", "sighting--9a956f66-3c08-4daf-8a02-69f8dda99a50", "sighting--58c7a661-8bf6-401b-a3ec-040835f6a451", "sighting--ab164467-42d2-40f1-a577-2b3e73cded55", "sighting--975edd74-51cc-4265-9f1e-27f3f538590c", "sighting--3a69cc3e-4765-491f-905e-c02a3ecd5cf9", "sighting--50078488-dcf2-4034-84ff-81fa112f8ca0", "sighting--0bd0451b-52af-4fc9-ae65-fc4104e7b17a", "sighting--5da3521b-30e3-454d-bf69-d3cb9e0b7438", "sighting--98d29a69-cacc-4fb0-9c6a-36d0077ac852", "sighting--df80520b-6e32-4a93-8bb3-562d8054a017", "sighting--c2ea3f0c-7988-49a5-aa0f-cd1c6c6f2013", "sighting--07251316-8edf-4f69-914a-a058bf982464", "sighting--c5a1ca0b-21cb-4a22-a81c-015d0be1ec19", "sighting--efc349cc-4fed-4dfc-a5c5-b824eebbf22f", "sighting--0aacaf1b-e303-4798-ab15-2569a72a10f6", "sighting--b896c798-6c96-4160-9169-8d0ab076824a", "sighting--4b16b3cb-e66b-4722-b282-fdcb04fe60a6", "sighting--1e29c292-1ea8-4aa8-97de-92f84a9b5771", "sighting--0c0abcc1-f664-45ec-a4e6-400d95bc508a", "sighting--3bd32919-db56-4238-96fe-a2277ca3b47a", "sighting--8cbe1fde-fc6f-44ef-8132-5468fc6e2568", "sighting--533fd052-17bd-474e-b09c-dba6406df6ca", "sighting--6239947d-e513-4884-ac67-d159bbf264dc", "sighting--31ebba4c-4d21-4eb3-bbc5-c9238670109a", "sighting--e16c46ad-1287-4974-98db-9e62839da7ed", "sighting--1cc4bc04-3e47-4189-a72f-c6efc1114ef6", "sighting--97348b1a-010b-4d00-a605-95cc0c114ada", "sighting--b08dfa9c-a78a-45cd-95dd-9a852b72be83", "sighting--230d916f-3403-4746-a6f2-db8e276b73e2", "sighting--2dd09fef-121a-423b-9b06-3b86e3abb267", "sighting--531fffe6-bcf5-4fdb-ae3c-e617d4a1ca17", "sighting--33827ba4-00ca-4917-91dc-ba36e65be09e", "sighting--86f709d8-5122-4418-8d78-5a596a4917b8", "sighting--b60ef0c7-9994-4526-954c-afb5d50c2375", "sighting--e84681ee-4603-40c8-843a-18988b6e0d5b", "sighting--1b9cdff1-f284-4969-af27-a4f34a4a2973", "sighting--67bb62c7-31b8-4bfc-825c-67c1f05f2d85", "sighting--acb0561a-26df-4022-a789-d0d9fbbb05f2", "sighting--a54d5573-3d79-4e3f-9a6d-2cbb012bdcbc", "sighting--1bc79201-ae30-4f60-a637-e54927860106", "sighting--3e796f0e-d81e-46a8-9d31-4005dc27d337", "sighting--943c603c-381a-4372-8736-5df31885b4d6", "sighting--90f4f02e-c104-42d1-8382-d13f46da0050", "sighting--75c892a7-6600-46cc-b98d-b5420a7c3e29", "sighting--7240cf87-7fb4-4333-ab51-b9a85201ee82", "sighting--e7e7c3d6-81f7-4941-acda-4918fe5de7f8", "sighting--08a30ebd-9182-4a3a-a631-901c2820d7a8", "sighting--3533d887-178c-4432-9fde-337842908e85", "sighting--0faaf35d-2706-4a13-88cb-63ceaa3b87d5", "sighting--033dfddd-faac-4b68-bfb2-7f5acd1f3e1e", "sighting--7f6dbedb-3db9-42d6-9e9f-1f647c0888bc", "sighting--ba61e04f-e1e3-4bee-93ac-89e154a83854", "sighting--8e0431a6-8149-4e53-9526-4de170b7e8db", "sighting--27ec84c2-d8d3-4f1e-994c-ac93513f1187", "sighting--7aa71e37-9fbe-476b-bd60-18dfcd3d2885", "sighting--24ec70f5-7b38-4cab-8907-2f5dc5dc333f", "sighting--8d86686f-1133-4b5b-bdcf-b94ff3572897", "sighting--c734cb34-9879-4cd8-a63f-ed3f84827daa", "sighting--7318ea13-5972-467a-b25e-cb287174b1d7", "sighting--3fcbd267-b809-452a-803b-da72a9f514ab", "sighting--6f96db37-76b6-4cf5-8d5e-74b7c224d388", "sighting--0276641d-878d-4930-8e8a-25bfae27ec8a", "sighting--1ee8f4d3-0227-49cd-ac1c-4c52aeda5f9a", "sighting--7ce2e15a-5783-4f0f-b8bd-bc99702d03c0", "sighting--334a830b-7627-4e74-8705-fadc8f6e05da", "sighting--0058ac22-5582-4e69-ab4a-a8b5cf913768", "sighting--f8646d68-0532-4331-8f68-d2977727116a", "sighting--5bc05594-2da4-4aca-b262-cca44e63b462", "sighting--eb5fda29-9cdb-4441-a5c7-63d2128aed4b", "sighting--35d5d251-8d61-4a72-859c-09ac785e6537", "sighting--6a630656-4885-40e5-8d7f-d834f902feaa", "sighting--33d41c8a-248b-4454-9b4e-349e61a7eee2", "sighting--87cf6a14-3663-470b-aa36-44dbc173d280", "sighting--c0d8bfa4-c85f-4fde-b785-ac39104c9ccb", "sighting--b6a2a1a1-af03-44fe-80f9-81946cb0bc3f", "sighting--46c34c77-c887-4511-9375-845c991d7e99", "sighting--139f42bb-ce62-4dae-869b-f63bb441948c", "sighting--cb63c520-db21-4a5f-a008-9ba588d1f3d0", "sighting--35c5bc05-35a8-4b07-9198-4e07078ee04b", "sighting--cc722eb0-0782-4449-8be5-68a798638b17", "sighting--262bc744-9b50-44e7-9560-b03deca5a587", "sighting--238ad05c-555c-4f17-8255-ead2a497db60", "sighting--65b3774b-9d46-470c-b988-358073feea62", "sighting--3184c34c-4840-4f1f-ad71-04d813173622", "sighting--f7690e9d-c4df-4bbd-b233-eb21748896b8", "sighting--bb29c39b-51bd-402f-b400-b0d76546d52a", "sighting--7e6fa0ce-1a07-4b3a-8681-f396b7899831", "sighting--cedc1a73-efa9-4e3c-a332-3a1c0fab6c31", "sighting--195e6f09-f56b-41f4-afec-c1f977392d7c", "sighting--3573e0fa-45d9-49af-8fdb-3a212230792f", "sighting--9f110bbf-a164-4d90-b811-44c9990c1580", "sighting--1b815f12-4276-4e49-9217-d4fce50ce665", "sighting--7fff33d9-51ec-4ab3-98f6-495173b09ff3", "sighting--c7d56288-148b-493c-9168-efa228480309", "sighting--3dea3a5d-a720-4265-9c3c-c5d6ca16e2a5", "sighting--5055f68a-59a4-4785-a4cc-e4498b858cce", "sighting--fe16875b-f963-46bb-98f9-88a8e07f5aa0", "sighting--16f3c9e3-a5f7-44c4-bc94-bf49e89cae8a", "sighting--515f37e8-f5f1-4c8b-a7bc-96eafed78b77", "sighting--d66589c8-e59c-4845-9330-1691975ac881", "sighting--0b6a5285-de08-4e03-b851-5470be867790", "sighting--9ff57369-e3b1-4367-99f0-3bfc7861d7b7", "sighting--c6f23c1d-cfde-4f8f-b678-48f0cc04dd4c", "sighting--68422714-5a88-42ea-9676-57e6f066c25f", "sighting--5ea25ddc-1f4e-4b8f-b2a6-afd3499cd373", "sighting--64e8c57e-51f9-4675-9b74-1d6e182ca7ce", "sighting--6c291fe3-a0f4-4aca-9665-6e62973a34b9", "sighting--55521c22-b6d3-4e22-bada-e65921a4e422", "sighting--71063147-8411-40bb-b38a-d7b62a7dff22", "sighting--0c8bfd0d-9b75-47f1-8696-913603b7eb75", "sighting--2f040f86-a5db-4f6e-9ff2-ee747999ccd0", "sighting--2f2bdbf8-5cbe-446c-ba8d-6c05dc2b9589", "sighting--94a8d857-ec39-4ffd-acd7-1e544b7e16a2", "sighting--aa3da3ef-85f3-400f-9e09-2ec604f02d7c", "sighting--2a6398cd-0d82-4c04-892d-a94bd83910fe", "sighting--f9b2d31f-d7cd-46dc-a525-af1135fa81dd", "sighting--85d5b886-3fa4-4ba1-99e8-6990d2b4dee9", "sighting--2b6f41bd-c39f-4613-9359-e0c36e2557ed", "sighting--687a7c2a-aa07-4e48-82e9-93bd3d5c238f", "sighting--619b9f42-02c6-4ecf-9a89-afdaaeab8367", "sighting--ab799d7e-9384-4e51-8c21-60ae65898fa8", "sighting--9bfed1fc-6f7a-49ac-87ee-f5483267679a", "sighting--77536c32-6fb2-4405-9d8e-da4b390bd576", "sighting--5f02d814-01bc-4be7-a6ce-2a082056098a", "sighting--53c44ea0-5176-4d69-9c08-f0b3bd2be4a1", "sighting--a8d7420f-a04d-4b43-897b-974d4b411beb", "sighting--c3ed2575-a698-4464-9fb3-d952a017e39c", "sighting--254419ef-50ea-4e61-8311-c13e74ac2544", "sighting--8b3169bc-7283-45ae-a932-ba2a707f5c0e", "sighting--df7f4807-3efa-4675-b304-41ab587c9e39", "sighting--4ead4721-73c9-42c4-ae40-361145be9182", "sighting--2599e7fd-2a05-482a-b191-84e7b4a4b893", "sighting--3ffc07fe-16ff-462f-b175-4e7a09bb84ea", "sighting--cd318292-8ae0-4b82-84bc-700a7c385d4b", "sighting--878a60f1-edd0-40ac-8a3b-1f256d1d216e", "sighting--a0505bd7-7545-40ee-a273-a07d0ebb466b", "sighting--f351ff87-fde4-4c0d-afeb-08816b2a8fb5", "sighting--b423b2ee-260c-4e27-9830-f2d4f29b9318", "sighting--7a09ab52-4f35-4b0f-9ca0-70a8a282805d", "sighting--f805ad00-49dd-4666-b6b4-a741e8c506da", "sighting--a6c0ed21-12e5-424b-8417-7f6e22b1f3c1", "sighting--0a6525ba-f444-4ee1-8700-2478d6255f2d", "sighting--98161126-e556-40cd-91c2-1b038e1fb24f", "sighting--5229d51c-babd-4caa-94a4-e3abf9f38b3b", "sighting--a06506f0-4ce1-4f86-9589-234c8ef4174a", "sighting--c239f2d4-f785-4500-bdb0-7b52b3f03df9", "sighting--a60986da-aff8-4cf5-bcc6-c8d4d2ae97a1", "sighting--5abcad72-6ad0-4b50-af5c-d41bcb6fce24", "sighting--eb83829c-1e94-4f69-91ce-0cf5417bcf69", "sighting--04357738-70e6-4b35-8e4c-b87e1508ddb2", "sighting--30c8c7bb-11c0-4905-9100-e5fac3f07847", "sighting--85ccee14-4e58-48b2-a97f-575e66890728", "sighting--9bed9acb-f153-4442-9d8a-8513b71145b3", "sighting--1b3d28b5-e855-4e46-a5df-e3d8ac0e938c", "sighting--90122d61-36de-4ed6-a60c-b0932db83794", "sighting--991e4c6b-d26a-4f54-a3be-f06a98b3cd3d", "sighting--2b17f0e7-291b-4346-9e18-509d9f73598f", "sighting--d234fd26-9311-4196-9ecf-f9dff333db50", "sighting--03aebaf7-09ac-48f3-bcdb-7d1f43e6a1a1", "sighting--58416f54-30b2-4440-b132-020dcc10a543", "sighting--c982102b-0c00-4e01-b19f-5379f6152a9e", "sighting--99b290aa-434b-41fe-8d51-805f7e062b02", "sighting--186c37f7-b5ba-4887-a2ad-994b0ec4dd98", "sighting--43b42d15-9a3a-4f73-a6ee-bef74fdd3a26", "sighting--1ffe305f-4b35-494f-9dd4-d57fd7fe728c", "sighting--ee0e81f4-7b3a-4be6-9d9b-631c7be1b5e3", "sighting--fedda5c4-6697-41b9-b7e8-7b7badbf3205", "sighting--e8c3a344-3cfa-41f9-8fc1-a7413d5a9321", "sighting--62cb354d-94b8-421a-9bd4-744b4fc4a5a1", "sighting--797f12a9-06c5-4eef-aca6-7b8fffa466e1", "sighting--08ee725f-2d99-4262-aac6-2b385e1fbb9e", "sighting--97f09860-5f7a-4383-a091-9a2c35c1a3de", "sighting--ccea0459-7e61-47b2-b2f9-af54331998d4", "sighting--146fc92d-a1ab-4a4a-bf5e-2099aba9c45b", "sighting--31d0f766-40a7-4e72-b317-7275793a19e3", "sighting--a7e7663d-b9eb-44fe-aaf0-3cf07b61a167", "sighting--db3482b6-bd85-479b-86af-91a638e51f63", "sighting--e34a3880-558c-43df-80f4-c5ae082aec0c", "sighting--392b2330-9fc9-4788-9e3d-a7d186fed26c", "sighting--036f4f7b-62cb-4282-9de7-e66209140959", "sighting--92d3b608-9964-43be-922b-6d2f343fa1a3", "sighting--d64e9e61-07e8-47d7-999c-d3ee824f9d81", "sighting--c9a2d50f-0905-42b5-b224-9cb2e16e22d5", "sighting--643e7e7f-c030-42fc-8616-f25c6fc54921", "sighting--e1859e80-35e6-4969-820b-1b86ae960270", "sighting--a72bd8a6-0e5c-4165-a476-4f5c365c1d73", "sighting--07882a89-c5ed-4291-8989-5bdc85f9a02d", "sighting--46f5d5e7-bb9e-4884-bc4c-a93b3054b089", "sighting--1c05b1bb-0dcb-453c-9733-3a3d56f6c307", "sighting--b09ff8c2-fc22-45cf-95d8-e42f615ab9a9", "sighting--0d0cb41d-cf14-471e-a730-d1ba0e24b0c0", "sighting--258cce1d-bcd8-4146-a04e-2bf53905b3a9", "sighting--4c08ebe5-e1bc-4718-996f-97c66f7864cf", "sighting--05b44ff9-76ae-41ee-b838-212949312eae", "sighting--9e538e6c-1f61-4f5f-8984-9121cadb09fe", "sighting--9b9f5909-77d8-408f-8216-b5ebaf706b31", "sighting--dc2e65b5-344c-4f5d-8034-20003ca71666", "sighting--5c1c4f60-84d5-4af8-af50-3752df300245", "sighting--a1ac393c-5ff9-464a-a136-f61f876a4c0b", "sighting--253eaee7-a98a-4323-9034-fe6391d0856f", "sighting--f3f050c8-40b0-4426-b1e1-5ae42b9d33e5", "sighting--6490f40a-02ea-47e4-b17a-12e8b98788b0", "sighting--9945dd8b-6d7d-4b2b-ad9c-7780ca5c0cc8", "sighting--2df103e2-9e73-4359-a757-dea9e354605b", "sighting--063c5511-4c9d-45e1-911a-631541fd2fd9", "sighting--673a561f-4259-42fb-a539-5303515ad3f0", "sighting--8d4e1505-05a7-4213-8a2e-d516f75e2bf4", "sighting--cfac6832-08cd-45d4-aa63-960bfab74961", "sighting--9f23ba55-62f5-420c-bb20-8f4de1236842", "sighting--cf8a27c2-21e1-43ac-9bf0-5f34b56cd711", "sighting--c484a713-fcb8-42ed-b6da-4c267aaf6c85", "sighting--41467f63-eab5-4dfc-9abd-6d916a9fc73b", "sighting--b0c90461-a15b-4c29-b3a8-755c9b4c00a2", "sighting--15f5bf67-07bc-49f0-8bf7-9ce18c33e150", "sighting--80a45957-bb8a-4358-9fd2-47d7d977cd08", "sighting--dc4501ca-3fc3-4eef-b326-458c70e42af2", "sighting--8c27e0c9-3e52-433f-ad47-fbc4ef87570d", "sighting--26b5be3d-6927-4ca4-9e87-a08f08f4e773", "sighting--0857430a-bbc3-4bcd-8490-737c9955b066", "sighting--5d1dd8d4-bbd4-4f3f-b54a-e7e8ac6dc8a6", "sighting--87d34c08-c0ea-4a83-aa94-03f8ecd28a87", "sighting--cecb50be-8b71-40ef-9e72-5a71b3be0029", "sighting--76d9de3b-bbfc-4cab-82f6-fb19b7eb8f84", "sighting--f68d2e15-ea91-4345-839e-c9542b9b0aea", "sighting--6822e2f1-6937-4665-a375-0dbe6d051016", "sighting--a019a23f-fad6-4aad-8620-a02903b84f48", "sighting--927906b4-c6d5-4a58-9031-8366ed417680", "sighting--b777c190-8f42-40b0-931c-ba24e24498ae", "sighting--2a145841-21c2-4377-b428-72ff0d4ed6eb", "sighting--ec49bfae-f467-4c6f-bcc0-21ccd16ff7c8", "sighting--9cdef7f8-994f-4e71-9325-b53b873b678f", "sighting--3ffd6eef-bd88-42bb-89de-50ef6bcbea88", "sighting--afad161c-32b1-49c0-9d3a-d1258045aa5d", "sighting--d34c4d2f-7ecd-497c-bb6f-f507edec4a40", "sighting--9c83b326-70f0-4df0-8881-d6f681b024d9", "sighting--a6b19cd2-0279-48f6-b6f9-fb046a934f91", "sighting--003db7c9-8544-46bf-9825-94658fb67105", "sighting--8856cc3e-83a8-4c1b-8e13-d01e597784a2", "sighting--f61363e0-a239-4259-a2b4-3a6e8b359ec6", "sighting--171549fa-dd8c-49d5-9a5d-1f9bb7705fad", "sighting--b788806e-ca10-4a40-9863-c25a09404a34", "sighting--bf9de39a-ac65-4215-9929-4f0e77cb3ecd", "sighting--d399a78b-47d7-4557-9abf-6fc2bfa9ea51", "sighting--3c906650-8ea7-4aef-8133-f1159d2c45c9", "sighting--b838eddc-5922-4321-99aa-1a582fdf1dbd", "sighting--6ef142d0-a816-4123-a8fc-c9936e2bf38a", "sighting--b01b4d48-2f1b-4e1a-b958-51a6b90f9bf5", "sighting--3c7a9ea6-382a-4344-9e0c-2f4a848576de", "sighting--f75a10f0-bfdc-4f1a-94ea-dd6f29f6b474", "sighting--54f7eb08-8fc6-47c5-b234-883ce4ad80b4", "sighting--18508180-1b9f-457c-878b-3c39af7bbbda", "sighting--c7d818b2-5a06-4464-8a06-7a1f3a40c55f", "sighting--ede33a63-07c2-4f33-b539-7d70d8275d07", "sighting--10a82f55-96d0-4db4-b647-97d71f7573b7", "sighting--af71dec6-03ff-41e7-bf19-4210a0431bd4", "sighting--02fe6e84-aa99-4a29-a132-2734dfc44071", "sighting--77497c5e-59c7-4ede-b182-429034035627", "sighting--b7b37ad6-49bf-47ad-82ad-f9f16a1faf47", "sighting--376c94c1-3969-44db-9b2d-1f5c7528a2f6", "sighting--70218071-5c9c-4e2c-bb94-c7e0c37f1536", "sighting--f599ab8a-103d-4578-a76c-7778f0d2294e", "sighting--d6027c0c-8bc7-4d05-8f0c-80a3f0a87fa1", "sighting--27e13706-bd24-4ac1-8c21-78f221367e6c", "sighting--21e4afb2-046e-483d-a033-b7026b06f173", "sighting--bcf633bb-2c18-4019-acdc-24e82399961a", "sighting--19b932b1-d68e-4fa5-9080-4525c5e4e860", "sighting--d2dc6a25-7027-442d-95d4-693d4c611eed", "sighting--8c22b908-490e-4bd4-925f-0ea803ec93ee", "sighting--524124cc-0297-42fc-a62c-0bed6bc467f6", "sighting--a9024f1e-308e-4c4c-b24d-eed88e9341e9", "sighting--942d87a6-a650-41b9-bb5a-8d792bd7cc81", "sighting--a0c5e9b7-4a7b-447d-85ae-6e1295d790a4", "sighting--855069ec-137a-4c64-9d34-5b51bdd1f7bd", "sighting--f9e2c1a1-d125-4805-bd1a-b87769df6875", "sighting--1c95cb40-f3c0-4f28-a799-849e2ffdb4de", "sighting--269951f9-9a73-4551-93d2-93cc7d54c28c", "sighting--10e07b43-89ee-4d30-8825-1e6b33d9c7e1", "sighting--d725a316-7396-48a3-ab7e-a5cec66db65c", "sighting--eeb35d65-ab71-4dee-8a8f-7a48964a12be", "sighting--4f1f62ad-f539-4d20-a335-7d4c6f449a82", "sighting--5b84df78-7b62-4785-8255-d249d7e36f6a", "sighting--d84c3145-c1db-4798-ae2c-fa32727bd619", "sighting--c44a68b1-a037-49b6-863d-f77c229b83d6", "sighting--0a355d27-5efc-4c2b-8e3b-f6bbc08a7592", "sighting--22151b2f-1490-4fbc-852b-1f336bd7667c", "sighting--870b881a-b968-4497-bb0f-ff9c4e41b15d", "sighting--1b034a82-5d9e-4a08-9e8f-58b795156195", "sighting--c8905dcc-07bc-423e-a240-bf1ca1238573", "sighting--f9d220d7-2119-46af-ae65-b3770eac369d", "sighting--5828911b-8fed-4421-89c8-3401b56eca9e", "sighting--f20ab886-2d82-4708-8b75-78ffd6c36b7c", "sighting--7c8b5fc3-e56a-440a-946e-244122f90062", "sighting--1288ce53-1b58-4184-b647-a04f3d2cfc04", "sighting--3b598b77-ba6a-4760-9725-b7139b6a8e73", "sighting--004fd663-884e-4e31-9d70-c3ba6cc96a48", "sighting--c40dec3c-7374-45a7-ba80-8be03967169e", "sighting--c7d4e513-7203-4689-90ed-74170197944c", "sighting--f18dc443-20a2-4fbb-aed0-a9a3fcc35bbf", "sighting--b3b6a950-8383-4fb1-886d-152dfb226929", "sighting--81c7785c-3c35-4d2e-8012-f5abe71707a3", "sighting--36f4baed-e4ec-440e-957e-e9a722b96f14", "sighting--374ccbd9-f218-42a4-b8be-19e18bfc66e5", "sighting--88b3ea1a-fc87-431a-9162-c9d6916450a4", "sighting--211d892a-c307-4124-88c1-8fd2723e1206", "sighting--b18a17c5-8a28-4faf-87a9-22430d8844f8", "sighting--a9f9abda-a951-4b1b-9f43-de5f97474ab9", "sighting--aeab8124-1a0a-4494-a6cb-3b46a9b32695", "sighting--d20c551e-e1cf-48ca-a5c8-f693e11e8624", "sighting--e8cf2ded-b2f5-4ed8-b4ff-7c22416fac46", "sighting--6d3109d2-a27b-42e4-a16c-d8f3940c9985", "sighting--d29b9299-90db-442c-964c-055e9432c248", "sighting--126fedda-1dae-4c3b-9d27-ac064d60ba1b", "sighting--b12e340d-dcb5-4df7-84de-ce1bbdaba1fb", "sighting--da8b631a-5b1b-48c1-ac0d-0d9296dab137", "sighting--a132f3e2-a651-418e-946e-e488ebeed4ce", "sighting--331c6d94-72b1-4c07-aecf-cfe31ce17e63", "sighting--f350d0ae-cfbe-4b49-8e5b-6b0814b9d9e5", "sighting--8b68ef00-6aaa-46a2-8f0d-ff028fdf80cd", "sighting--e80b8c7c-0b5d-4002-bccc-1387cf37216e", "sighting--7653eba1-2f18-4861-8332-ce8422d194a8", "sighting--4f4e9462-d20d-4b4b-9b09-9a09fd64de85", "sighting--a94ad947-b1ff-45c2-8551-b79240dc4645", "sighting--4af1fa6c-7cd3-4447-8223-59334fee7a8b", "sighting--40aef43e-d37d-4a57-bce6-779fcd5a2b85", "sighting--daefca82-32b8-4e64-a152-9607d4229e4e", "sighting--fff55077-2bcf-4e3c-9322-6178a4640abb", "sighting--39ee4c86-909a-44d9-b810-9c9a17e22283", "sighting--a44c9d4a-ae53-4622-aacb-8c899fb126ff", "sighting--e5bcb2ed-e630-49fb-80d9-1f2de5b26bbe", "sighting--4228f781-8110-4ba7-b059-cfa25d983f43", "sighting--d170a083-442a-4e62-b824-c84232564277", "sighting--e1a16ddb-f8b1-4a68-872f-6c05e6def103", "sighting--4f4e039a-2191-4edf-a258-96f2d257fee1", "sighting--7dd85166-06c4-4730-8a33-654143fc8f35", "sighting--8a27f0a8-754b-4828-9fea-ec24d223ebea", "sighting--546cede4-a849-47e4-8ce3-9fb55810e25a", "sighting--a6eb7621-1cba-436d-8b5c-e3a87a99a361", "sighting--3da3c157-ad38-4a61-946b-8dd3f018e42a", "sighting--ea2a0166-d094-40d5-94a5-a9548d064fc2", "sighting--ae7dcc05-a69f-400a-a82a-f21aad245036", "sighting--d31ee6f4-a19a-4564-bfa0-767c9d3a0a43", "sighting--077fa573-03b6-4df3-a650-b64917f54acd", "sighting--ea00de94-9731-4582-9afc-d3a21df93466", "sighting--75df495e-acb3-4701-ae6c-a88fa24086f7", "sighting--9a24b3aa-4b5a-4b3b-8b93-f15f1b2873fb", "sighting--c456d749-95e7-423d-805d-971f34f9c436", "sighting--4d13c7b5-7eaf-4e84-893e-b13fd8c43ee2", "sighting--09c7592e-eed8-4667-bce5-e493086641f8", "sighting--8add0831-eb32-4014-a5af-274b0958317e", "sighting--e7f8218b-f486-4382-b19e-a47bb4a6cbf4", "sighting--bbf1227a-bb40-448d-8bd5-6da69f24a34d", "sighting--a0ecebb4-c060-4dbb-b84e-ef817fad0e14", "sighting--5f8c4e92-d440-48ff-97dd-bf9c7823cf63", "sighting--5504e75f-e6a1-441d-b38f-9605fd645faf", "sighting--44530453-b0b3-4a23-9205-18491c60fd13", "sighting--362520b8-c541-4015-91b9-a9121a131f60", "sighting--bfa1aa56-5c3e-4e0e-a45a-8ba021fc4022", "sighting--8db7f700-e433-4071-8802-b00d8a0afb07", "sighting--fb144ba2-fa82-4631-afcf-f5952ddfb5a6", "sighting--bbc4bca3-2e73-4407-860d-1e9072fc0d85", "sighting--d35ec781-8c3f-4252-b9e4-1871f8a918fc", "sighting--76903067-a395-462b-82c3-fd5271472802", "sighting--bb368c3c-7f22-48d7-aa6b-629afe67102c", "sighting--53eddce6-8675-406c-83ce-3e4d1a748fb9", "sighting--d8865297-5eda-42cf-b661-1c5b37076777", "sighting--19a24d11-e338-45aa-92bb-21705fdf21b1", "sighting--7eb91286-162e-46e0-b3c0-7366b0ae6122", "sighting--52fbe3f2-1493-4ce1-8b1a-28fca96caea0", "sighting--3fefa85f-2d2b-4f96-96c9-aeec2263d8e8", "sighting--2b043468-f666-4e62-956b-cc696506cd98", "sighting--5b8a3685-a710-42b3-8d05-5a8cd0b417f3", "sighting--4152b24e-c9af-4676-8eea-4c8d52358ccd", "sighting--7acba4ba-4491-4706-b93b-0c4209170538", "sighting--be5cfd86-5c6c-48c4-b29e-6640b1563bd8", "sighting--b2b099ce-a355-4d43-9c0b-e461923065ae", "sighting--0de96a16-a724-45be-8f82-2803110bb1f4", "sighting--002ef801-aea6-4f07-a5bd-6b7717b50a92", "sighting--f3039811-428c-49ff-9b3f-2e78c2ab1b5a", "sighting--a1f49cb6-6340-4e1c-b24f-1a18b94914f3", "sighting--093ce4d8-0c59-474a-be82-3fe14487bb06", "sighting--ee07f695-cf80-4a29-b230-cc1efafee8d9", "sighting--b5bf4582-4a96-4c6d-bfab-d05e2a1a43c4", "sighting--cb7c9e5b-b428-4093-9686-7739e4d57195", "sighting--a127ad26-bf9d-491c-a921-9baec23af22f", "sighting--c0a4644b-88c5-4c14-b81e-e028d414fb59", "sighting--b1beebbc-546d-4bd5-95a2-9e62acfbe601", "sighting--35c4b133-1051-4389-908e-f48e04b725e2", "sighting--4ba0a0f7-cff4-42a1-85b6-9c97baf06b69", "sighting--5244caf3-c58c-432d-bb6a-39ce9d2ee519", "sighting--998f22a4-3476-4ead-8598-bde2d8f2fbd2", "sighting--2f679a3a-091c-4c5a-9162-24dab84ef698", "sighting--a8c88b79-d182-4da4-a243-bae00f4bf2c5", "sighting--0520e278-0201-40ca-9e0b-2f0ad50f353a", "sighting--1c93c7da-7b50-4789-b038-247b05a4fc8a", "sighting--19dcab2c-1db0-45f6-9566-871bb9e6af0a", "sighting--e917c849-ef62-4d55-93a6-1740204fe8cb", "sighting--3c5fa616-f0ee-4929-b00c-f8d7132e98e0", "sighting--6073a5c4-c7cd-4712-9c6d-c18f6a74add3", "sighting--adb6a934-65b7-4480-8e95-e8a18228e49b", "sighting--a6770173-6b8e-46de-8606-c2d7ef578ac1", "sighting--60d790b1-12d2-487f-b5ac-67cbbfdba242", "sighting--b81b360c-bd25-4c5e-8fcc-72a92314ce7b", "sighting--50e396d8-54d3-4ece-ab4f-430771694a76", "sighting--9014e030-6962-465a-80ae-8d96cdc40a39", "sighting--97c7a1ec-5f70-482d-8445-2e5050a2d434", "sighting--8cd561fa-e80e-4372-9884-c9a3c25f7f5b", "sighting--a55ef87a-4436-4e8e-8781-5424b53c7c79", "sighting--552fabda-ddea-4477-b595-841cba2597b9", "sighting--5e64a60d-07d0-4dec-b58e-4008a7772b8a", "sighting--a6454493-9ce0-4621-9098-2251a7f9be21", "sighting--390adf68-d46d-4565-b39b-f4bbe4977865", "sighting--08a90fbe-38c7-4f83-a4e9-a45f14e739a3", "sighting--f1c4f1ab-b706-4276-bf0f-edfab9385cb4", "sighting--1713602b-a862-4b26-a424-0bc22ea843a0", "sighting--987bfd24-ad3b-4923-b24b-251c7960d369", "sighting--873eb10b-2364-42d2-91a6-04399e6b6489", "sighting--de9d8857-85c5-48e8-bd66-3dd510f0d71c", "sighting--d29eea36-0982-478d-8034-790007ec5979", "sighting--2f4edf78-af27-4dc5-83e4-ac3d29b1201d", "sighting--52f47c38-0459-4e68-9531-d1d1e3c33bda", "sighting--310ed828-4557-4629-9e92-50e3867c6130", "sighting--34977979-fbca-45e1-9411-5cad74df7bce", "sighting--e740c0e8-7a6c-41f2-bb96-4b980d2e55bb", "sighting--a1e62ba7-0493-4a4f-a799-2c614a6647c9", "sighting--83ebe265-7f15-4fd7-9ac5-e4ab36f42185", "sighting--63d10083-2df8-48cd-b158-c6f9456e6a7e", "sighting--f4326e0e-b1b9-4c11-bfcb-50b94bfdcde9", "sighting--68317548-a961-4197-a201-a19989fdcfb0", "sighting--366b29c2-c688-45c0-9c7e-470047b0d62b", "sighting--1869f858-c06b-4341-a6e2-7d855a5d71bd", "sighting--355255f7-3f62-4c5a-acf9-93149aaac26c", "sighting--b3df0e80-f58a-42de-a13f-a61431e85beb", "sighting--f7f2b231-1bc0-4a02-b6eb-ae4a97fc77fb", "sighting--851a5fe4-ea5d-46de-b4f3-ea6ea792744c", "sighting--a9ffe925-ee9a-4e7f-8787-f6127dab5b0b", "sighting--48400461-1841-4fd2-a080-c3a282689bef", "sighting--c9daf78e-55d4-45e7-96c2-fd3198fb6ea1", "sighting--d3cc8f6d-cebe-46e0-a3a6-c1361176c01e", "sighting--a6644f4f-95d5-4d15-964b-b32bbbf313f4", "sighting--0b68f19b-4679-40a9-b63d-12147d30b78d", "sighting--11d7ebfc-cf91-41c4-972a-5bf0bc050c68", "sighting--c2047d3a-83aa-4a65-8826-0e6930cab430", "sighting--049d8647-dd56-411d-8624-25892cf53396", "sighting--3f22893e-bcbf-494b-9540-e8174617504c", "sighting--97eb07d3-ff9a-4fd4-9401-a0366a4db21d", "sighting--9744a63c-5fa8-4d3b-9ae8-4b33ee710220", "sighting--112dd4d9-8ed4-4074-9a36-0b1473f22788", "sighting--1b90b347-254e-41e6-bdbd-0211614091f7", "sighting--5b784a35-65ef-4986-81b0-4b16cdfe43ff", "sighting--fa7faf94-dd92-4065-a931-0fb25d5e4ac3", "sighting--bdfbd69b-5b68-4222-a480-d2830e37d5c5", "sighting--5abf4ccc-6e68-4186-9f83-b020541a1cdd", "sighting--9243005a-3a23-4ac7-8bc1-2b21ed2f6773", "sighting--1b4097e8-6fc4-404e-8b96-fba32d42797b", "sighting--2e590c78-797b-4e9e-a558-683b607bc6f7", "sighting--57f47f21-d908-4692-84fe-e4e3939d81a9", "sighting--bb387289-c156-4b83-b9a1-8192548b7d6c", "sighting--d9189928-ee12-4fdc-8d07-99660e1fec06", "sighting--3dccd249-9e71-4b54-99cb-73fb365d51bf", "sighting--098ee188-5846-4437-bf5d-c04ad52feff5", "sighting--9bac9050-46cb-4951-b712-66f5070884e1", "sighting--08e28fca-f048-495d-9016-8fbba5d66685", "sighting--56391185-ea06-44de-83d9-b428f3b45c9d", "sighting--ecdade07-561b-4e11-b396-f90f09584134", "sighting--c7e5bd65-bab3-4017-b7a7-7e45b273f1f7", "sighting--78d5f0e7-9bb3-47ae-a3fa-e2d916a96fe6", "sighting--11068fee-a948-45c2-9c33-c902b40592b8", "sighting--be03cf9d-b719-4aca-8383-8f7475d17280", "sighting--ab19330d-18bb-4465-8bca-415c51aa5471", "sighting--d53127e3-096b-4c59-8bce-3f78a690e55c", "sighting--365fca54-0e90-43d7-bfd2-46d5300e477b", "sighting--3f4d293d-a3b2-4b3f-8767-27b9a57440e7", "sighting--aaa713a0-a98b-4c1b-8cd4-c6a45ff60976", "sighting--47054315-cf58-43f4-875b-62090de4199c", "sighting--0d2bb2bd-c05a-45d5-a7fc-9e180574e649", "sighting--a17b4e07-1cfa-4873-80fc-f25bd2fc2b8e", "sighting--da9abcf1-7d16-4d37-8797-8afa3c5584ac", "sighting--8ec1d7fb-a0e1-4254-80ca-1e830b08d629", "sighting--2d2f9110-70b2-4c88-a1e5-6cbeab7c4d0f", "sighting--35c3dd8f-00fb-479c-984e-d12bc807b505", "sighting--3d494d12-556b-49aa-91bf-f836900f77a9", "sighting--e1d4bba5-d7f6-4eb0-8b0c-4797ef33c44b", "sighting--ba818bf4-4b11-4b64-8717-ed94432a1bfd", "sighting--dd3ba922-9766-455d-bf8a-3b1258e4a2c2", "sighting--05c636ab-6d20-4980-9d3d-634cd11ecf38", "sighting--456b3522-60f0-4d85-816d-7598e315e1fe", "sighting--711897ae-7b38-4b1d-9177-34c4f8da5d28", "sighting--e95916c2-1364-411f-bf09-0ba04cadbb96", "sighting--535a15ed-1a39-4776-9551-ec1da6b42eac", "sighting--12c03f4b-3786-4f62-91cb-9b5bd8d7cdb0", "sighting--a0a1daa8-197a-4240-9adc-e4643ee0f31c", "sighting--8f0a2596-7829-4634-937d-60501362797a", "sighting--a4434020-f416-4dc6-a2f7-48ca3588f6c4", "sighting--d43ebf61-af99-4466-aff6-9888d6930e89", "sighting--ab95884f-0ac7-4349-aa3f-eae46f9aaaa8", "sighting--7d6d373d-cec8-40f5-a1de-9157d5ef0d43", "sighting--5e19e149-67b5-432e-8010-dc2843bfdf09", "sighting--e9dfef07-58e3-4246-b5c6-efd1890fd400", "sighting--f5a03ec1-8f78-45b0-a4d1-e069d125e8de", "sighting--b9da25ac-abf9-44f9-8613-7f222c64f54d", "sighting--986cdfbb-421f-4ca9-adf7-8ccf190c238a", "sighting--1366232d-be77-4cab-98e0-fc3c709b8d5f", "sighting--cb2388d2-80aa-46f7-8663-262afdc3dcf2", "sighting--832b8cbe-e995-4cb4-b770-a1e91d89eebd", "sighting--2f74f431-ba73-4d4f-b089-85c9e7cff04d", "sighting--8ce8a0f1-9e46-4963-90d0-a663ffa55ab3", "sighting--a7364b0f-29da-412a-babc-082becfc8833", "sighting--650b72de-0456-47c6-816b-aa72f4808755", "sighting--84d44783-846b-429f-bb57-e0f1f6289e46", "sighting--abfb0e85-255f-4fe4-9362-b40d3b35df38", "sighting--b06481e4-9dbe-452f-b64a-ca0c0de59a9a", "sighting--f54764d8-454c-4f21-bf4c-7a3bc5e7d375", "sighting--6ce62d3e-743b-4742-b861-69a059743e5f", "sighting--bb5bfe10-e121-4dd1-a97c-7c5dec3d66f7", "sighting--9338178c-4f92-4554-b50f-ca9e8dd5e330", "sighting--a744d64d-acd9-47c0-9976-3368d766ec36", "sighting--a46e6bb6-db7f-46ff-bac0-0d291dde9c8f", "sighting--5b70421b-b33b-4d57-9374-9d4143bb9e7b", "sighting--49d527bd-b1bb-4815-9e53-96a72ecd7459", "sighting--e5cae763-87fa-45a5-8fa5-082026212b7a", "sighting--535d85dd-e212-4f7f-8a48-c7c26c22804b", "sighting--b91686b9-9b90-4aac-922d-6feb343f385a", "sighting--60e82864-1d51-48b3-a07d-670089526f0c", "sighting--4baa3b6f-4e6e-4c0b-ace1-d41e98a30dc6", "sighting--be9034c4-43ae-486c-8ad1-3105acd62d9d", "sighting--6164bd63-80b6-432c-8e8d-a62b0c1de01a", "sighting--083a1c59-bf44-4e5c-800e-f28109072d20", "sighting--9dc01477-e376-4906-ac3f-7b861ddb1446", "sighting--5038f312-bc42-4e51-ba1c-9043f0789762", "sighting--237729fa-c250-44d0-aa07-4058deead1e3", "sighting--bd0134eb-a606-47e7-a772-65cb4bb5db70", "sighting--ecfce574-9821-4676-aeb1-b204d90e82f8", "sighting--881b60d1-71de-4405-8050-7844e8edc876", "sighting--7c5d1b39-37cc-4399-8465-432c5c5b4bc9", "sighting--3286c954-7b09-434a-bf71-c434b99673c0", "sighting--88258a06-61b4-4ea8-9666-cf9b3dfdd39d", "sighting--1a8a2298-ff12-413c-b453-387bc755c127", "sighting--3fb74500-da79-40c5-8619-a3159bbd151b", "sighting--1c41f94d-72b3-47f5-b423-6ccdcd84a328", "sighting--e6de307c-9a7b-45aa-a8a5-d6f5c792273f", "sighting--4626cb10-fd25-4ff2-bb51-2efa703da09f", "sighting--95f294e7-760f-4b6b-a674-850b0bc39b7d", "sighting--36c72125-f60a-4ef1-a347-b9915df9556b", "sighting--6fe84ec2-2848-49e3-b381-86807d026606", "sighting--3ebf562e-a2e1-4e38-a592-68749434a913", "sighting--4b5ee107-8230-4a40-b64e-3eb7939c77df", "sighting--f115970c-33b5-4fd8-a7e7-e508b6d28d3a", "sighting--a38635dd-0360-417f-a3ed-6b41a3ceb204", "sighting--d6e88eef-352a-4a90-8c10-a40147bfbb6c", "sighting--80591aa6-245d-4774-9be1-be79e569eebf", "sighting--f0f6dd5e-8f5c-4211-8907-ddf946e08452", "sighting--a7e9b4ce-4b1f-492c-9e0a-234d4f27065b", "sighting--99eda82b-ead3-4920-a085-65264d9fd642", "sighting--89aecb2a-6b8f-40c9-b429-3dc7b4ca7fd1", "sighting--32d1531d-ea02-458a-859a-e105918ceee2", "sighting--c57c8971-7c83-4892-a954-a6e56e0d18b5", "sighting--88840598-7bc3-410f-94bd-056a00df4d9e", "sighting--136fc3fc-8236-4f2b-9cff-b05786a2534d", "sighting--279aa3b6-4acc-426d-a06a-68acea7d3a79", "sighting--fa310e5c-4339-4cd3-a6d9-01518764b4d8", "sighting--dae1b4ef-9c7b-4193-a56f-7b297bfd452f", "sighting--fe4be1d0-2d8a-46a0-b5ee-cdb367923e11", "sighting--eb2736f5-5445-4e1e-9f22-de11a37e7b66", "sighting--417adec6-1c62-4425-bacc-e768fda6bd61", "sighting--ec8c930a-557d-471e-8fbe-d84b5d240998", "sighting--96f5e54e-5c75-4c0e-a061-97920c1666be", "sighting--0755bd17-f756-4e2b-89d2-b839352d640a", "sighting--c74493de-4a99-4151-9b39-93c2538f9039", "sighting--acd03eec-6cce-4bc9-8657-075ae8c76825", "sighting--937f0be8-7945-404b-b201-08fb15e8e5b9", "sighting--0f6a1b9f-fc78-4be1-b5a9-db5986feaa6e", "sighting--f7c4a646-e572-4473-bed3-7cd7a86e2233", "sighting--b6eacc71-57ec-4a4a-98e0-36a65683ec94", "sighting--7610cc03-be16-48ec-a7cb-39acbae5c671", "sighting--3b133198-6a46-4403-8e2c-2903bedb4beb", "sighting--a2548b2f-6434-4fe5-b840-bb555100cb77", "sighting--2a84eb31-9046-4e51-a7c2-8ee5265e45a5", "sighting--0d5e2dda-4c7a-4f5f-8d1a-e4c8ea258e58", "sighting--6ce1e7fb-affc-471e-b341-64acd07a1538", "sighting--9132e11c-1a5a-4945-b7f8-edadf403bc57", "sighting--3979bc7b-3dea-4c68-ac59-a9dc4d2aeac2", "sighting--3f68355c-f96a-4660-8c62-756fad9c79a2", "sighting--589e7d6c-3b6f-4d80-8935-a9d921710ddb", "sighting--64d394c7-ab92-4713-9fae-88abc2941031", "sighting--893b4d96-de1f-4bdf-97dc-3714f958af64", "sighting--2c18225c-6e28-497c-997d-e159fa14abd7", "sighting--162f229d-67a6-48d0-adb8-cc4a3786af20", "sighting--a762b4d1-4d8b-4403-b943-46134e06a99c", "sighting--421e5378-4ff1-424c-a3f8-026ea8af18c7", "sighting--9aa83ea3-1e13-4389-9566-f5ffae7747a0", "sighting--5f6fc570-2fe9-4aac-8aac-720a9dbbd8f5", "sighting--55d52d9f-3a4a-4c02-93e5-95bc3b25b0c4", "sighting--65eb8986-8b02-4b31-82ae-9ef0d16eefdf", "sighting--b9f7f3a7-589e-4f9b-889a-a853622825ac", "sighting--27bea214-1e87-4c65-9638-884c16996c92", "sighting--3672f2dd-6f8e-45ae-a804-465b690fb019", "sighting--8112458b-8156-4c8b-9d01-69ed572749de", "sighting--8bff2789-31bc-4f33-a8bd-67499fb18a38", "sighting--511c01e6-c539-4b10-a6da-8a9a8ac6c486", "sighting--407a1ef5-2606-41da-bfb2-0b029ffdfc30", "sighting--639ded5d-d8ab-4c66-9baa-98d6e0c401fc", "sighting--abeb1e1a-cac1-47c5-a23f-bc46a5a17b5a", "sighting--30492d9e-ed1b-42a9-a2e7-2aafb7d8c3bc", "sighting--656ee844-f7de-4546-9559-64ed06c3d440", "sighting--902830fd-f04f-4821-89a9-a7f1b6d2fa6a", "sighting--9a578e2e-e4ce-4daf-b0a5-ebb5d757c017", "sighting--7cbfafd1-6059-40ba-a9ce-f3579c59a4b4", "sighting--391544d5-c1a0-4333-bcea-3c1f9392158d", "sighting--0da5c510-2bac-441e-8572-f97e0af49eb0", "sighting--aba3762d-717d-4f99-9b91-8f62f63c6dca", "sighting--0972c7bd-7295-465d-bd40-e9e1fb62abab", "sighting--88438ab6-8b9b-48fd-b679-3acf7d7b853a", "sighting--9b043803-4fce-401e-883d-d79655b216e9", "sighting--6710742f-f061-4714-820c-d1a15d9acaaf", "sighting--2247b7d6-edbd-4dd5-9c93-88a6ff4142e2", "sighting--71ce18be-1e31-491a-97a4-bed4423104c2", "sighting--4596196e-910d-4e8e-be23-9d62a25ecb19", "sighting--cca6dd01-7321-4a82-b3b8-9038c8cc9fd8", "sighting--de25247f-65e3-4743-b2d4-9e32fd3fb80e", "sighting--1dc264c0-b85d-44b4-80fa-ddfe7880f6ea", "sighting--26742988-0f47-455d-ab80-5200623fbae3", "sighting--db4e2e83-a76d-49a1-9bcc-e73f6ad30155", "sighting--30095bbd-49c7-469b-ab51-c8204e42ca22", "sighting--848f817e-8c6b-431a-bc36-87dfbde3c002", "sighting--67f87a1c-da6f-42e2-983e-7a081312e302", "sighting--9199495c-acf6-4613-8f05-97058ea707c2", "sighting--e62555cf-a45b-4dde-820f-1f8bfbe2051c", "sighting--ae49f85d-4327-44f6-ad79-49021a8423a3", "sighting--d32356c8-b17c-48cc-9d08-aca38bcccd80", "sighting--a5afc59c-5095-4f98-abfd-482d3d91282c", "sighting--812e87b0-452b-41df-955c-f302496b0c66", "sighting--bcd488f6-4a4e-48c7-99e2-2ac8dec88792", "sighting--2cd6c2e6-05d6-4f32-9450-2570f8d6f4b6", "sighting--1e5cd479-7df0-4c2a-ba3f-f7454bef031b", "sighting--2601001a-7161-42e8-b78a-598f315110ba", "sighting--5da3ff5e-87b7-4022-95d3-fe1529856eea", "sighting--0dbd063a-fd6e-408f-a7e3-b2276c6aa569", "sighting--f48fd83c-f48f-4815-97e3-665b778771f6", "sighting--a4eff2e0-1774-4683-a824-f3f51ba8b939", "sighting--aa174a96-0140-4c17-857e-c903c4d65476", "sighting--196aeace-a34b-4c85-902d-caff81600976", "sighting--42baf5a8-98ee-4453-a7b3-e7eace3d3d00", "sighting--e9b72893-2376-4eb7-9db1-fe0a88193680", "sighting--c22559c2-ffe4-421f-8db8-f3d66f225805", "sighting--d3b32a34-4b7c-4b41-95d5-7ecf6c628b05", "sighting--f16c583e-fe3a-4a94-88ee-bb0131cec18c", "sighting--62c3e17c-ac18-4fe0-8d40-b0ec9c97fdfa", "sighting--36438214-6bcc-4125-a808-5285213ad300", "sighting--c7ee5fcb-9bfa-4f4c-9600-8c6d8c879dc5", "sighting--4e4ebec6-4d91-4be6-906a-a462a7dba891", "sighting--24cb36d6-b222-4f34-907f-0ea507bfeb61", "sighting--3d399697-4a37-414b-a35e-fab2074c7627", "sighting--f0bf759f-0d95-44e6-8db9-6fc48e2d433b", "sighting--806435fa-27a9-44af-a83a-d0cc25675672", "sighting--f7bac217-6e09-41aa-bff9-f88058a4e5a8", "sighting--3a33e828-3277-459f-8e1b-2b89094b8516", "sighting--0729c042-c4c0-4990-9b9c-a188961535ba", "sighting--1531a90b-523e-4daa-b411-d4ff80ed244b", "sighting--33dd9469-50b5-4c69-a52d-a56070854f10", "sighting--5678c2ab-0932-4252-bd7c-6f90a7c20f12", "sighting--f4418ea6-a824-4ec3-b1d6-1b87a9fca22f", "sighting--75e3de6f-5eb1-479e-8f39-5130c541f0ce", "sighting--f42309d6-aa7c-4390-a5e5-ead445d735e1", "sighting--50a8fcb6-3091-40a4-9502-1ae321c1af99", "sighting--57f5ad11-4db8-4e4b-a987-f02bee188a1a", "sighting--666a2428-c1af-4ac8-92a9-602e1bc30749", "sighting--c243f132-f4ac-4e4b-a985-dd07139eeeae", "sighting--7f9b4b0b-75d8-4e03-bb82-987e4e8d1ace", "sighting--157c8dac-0906-4b4a-8dc9-5282082d7bd6", "sighting--b2376c6f-f91f-447a-bd37-6e137c8c6249", "sighting--d6ae9107-35c9-4748-a23e-3f2f022255ac", "sighting--cfd5062f-f557-4947-ac66-81a9aefef2d9", "sighting--06479d53-9e7c-4342-9f00-fd3f373636a5", "sighting--1277e42f-9b77-4b13-8c46-28ecf9f10985", "sighting--65d0fd65-93be-4175-b0dc-9417f777673d", "sighting--d0729bd0-3a69-480f-b052-d35b2d9a9ee9", "sighting--48d56129-cb80-40e7-9acb-1a5e0644d30e", "sighting--ed450dcc-9600-41ec-b8d3-28d7eed27dba", "sighting--8c2c1704-b565-4dbb-a53a-7e9e5d448bd4", "sighting--1edee864-3d46-4369-bf1a-ce953c353e11", "sighting--ee78b4b3-3e8e-482d-8e8c-d8b07c4cbde0", "sighting--117de3dc-d6c8-49f4-b540-76ab5976a8b6", "sighting--fd683be7-9a8b-47cb-b318-e8935a2f187e", "sighting--7b328db3-246c-432d-815e-03c1589d8a43", "sighting--84eb74ac-4089-47ec-8f5b-10e3ee55f396", "sighting--935e8da0-aaf4-46fe-8213-8091de2d0821", "sighting--f5841739-fba9-4bc7-a8e2-13f8021760be", "sighting--c4a00c93-5805-47ba-8477-2bbe4b5001f0", "sighting--e2ea283b-a584-49e6-a570-eb4facea42f1", "sighting--8ff11cc5-fe02-4591-972d-77b36baf75da", "sighting--d2030535-f73b-40b7-89d2-1b1da0a18cc2", "sighting--199b7097-3811-478c-ab6a-422a66fb87f4", "sighting--5d675e98-53cd-4f60-913f-da1b1337a1e1", "sighting--bc225d2e-18c4-4421-be0d-b59e653e3280", "sighting--4dee1797-61a8-4e0a-a874-b3ed4e5ebba2", "sighting--173b986a-a449-4360-9585-44f8ace8f9c7", "sighting--f4e72df8-1e9d-4b78-8be6-93b982cf646c", "sighting--76d78e41-99ba-42b3-9a56-1af5c866ba14", "sighting--a09f0e15-ba6d-4366-8e69-889b13525cec", "sighting--fce7c8de-8061-495b-a23a-c9f3922b0b8d", "sighting--79f22fe8-31c3-41a9-a52a-73b3bf9a7187", "sighting--7151d854-6ed6-4e76-b066-7266afaf13a8", "sighting--b752eec1-d724-4bcb-8ea0-9c67b6939633", "sighting--13201c48-1cd5-461f-83ad-c1e1db7c01a6", "sighting--500228c5-98db-40c6-b0cb-c2a281fce347", "sighting--980a37ae-1986-4fac-8b9f-98277e939006", "sighting--a01bb722-12bb-4e8a-952a-b240a4be8ccc", "sighting--1b9f2162-3996-4795-9168-c9b88cb8eff8", "sighting--1c426786-6013-4963-80f5-eb3557393e32", "sighting--7c4e101e-803e-4779-987c-a1ed2c695e04", "sighting--06327e4d-189a-41b7-aab6-9fded7092833", "sighting--3284dd28-e225-4585-a7de-d49a0e1f8f14", "sighting--1abd928b-4e5c-4bf8-8290-40c90bca489f", "sighting--a7920df4-508c-4a6e-ac59-56e5e2a91810", "sighting--9bfadb21-c32b-4ea2-92aa-12a0c2f8d962", "sighting--d84421e0-6b89-4aeb-a875-ab91e086a248", "sighting--75584224-a4fe-4cf8-bb34-e645348a0266", "sighting--425d992c-d725-483b-91eb-f8784a736a75", "sighting--91745c66-f893-49f6-8898-de89111cf402", "sighting--04657c67-d113-429e-b2fb-46f6bf2c07ac", "sighting--8f2badb0-256c-4fc4-9ed4-905530f83b9a", "sighting--965c518a-32e6-4e7d-996f-ddf08203021a", "sighting--b9397a21-33e9-456c-97ce-2ddc69906fd3", "sighting--44ebcdae-1be9-4197-93a2-b5aa4ae4b6f8", "sighting--09b3f667-e2fc-40d0-aec9-5249c93c0377", "sighting--ef37d22a-67b2-453d-90f6-64e78f502d05", "sighting--7834855d-3586-4933-abe7-4dae6f7b99bd", "sighting--e9719ff2-8125-4b3b-bd9a-8e7cc5187894", "sighting--ca8f734b-6d10-45cd-b93f-dbb277b7bbda", "sighting--b48d574c-eac8-426c-9515-37149523c01c", "sighting--ca948790-a021-4708-9d10-7f8ad314acc1", "sighting--feeff22e-62ed-43e3-aca3-edec0a0792a5", "sighting--7c1a58da-f797-47fd-bddf-0a57018681ba", "sighting--012229b3-1abb-4c2e-8248-dc4c4fbf3424", "sighting--8f285fbf-a28a-4965-926e-964616a6d288", "sighting--2388cb64-2c73-4836-981b-c729df25691c", "sighting--6abd60b8-a2d8-4156-a60d-5d796543f5b1", "sighting--a811ff19-cf41-439a-9755-7a8bb698b416", "sighting--4dc3635e-5628-46f9-8865-84cc424048a4", "sighting--608dfecf-7841-4537-90c6-ed53c7194d5e", "sighting--b0a33126-7042-4a4c-9fd9-4e7fcac53bca", "sighting--7c3e7b1f-16fc-4c19-93f4-603b44699bfa", "sighting--df5633b1-177f-4c28-8365-619da957ab46", "sighting--e405791c-9efa-4b9c-8cb2-a1bfc09930d2", "sighting--3ce16e7a-cfa2-428b-9c94-339b8742d6bd", "sighting--6644adb4-6fcc-44bc-a408-f07422a482a4", "sighting--e530a217-09c5-4fc6-8233-c51c73b331c4", "sighting--eefc922e-055d-4d31-b5a8-3ac8461bb681", "sighting--5f3c6eb9-7842-4983-9e09-6025caf86897", "sighting--6e679d7c-8de3-483d-b319-0433a0a580f2", "sighting--476c4004-9632-4907-805e-79bcbf5a2f1f", "sighting--de3e508e-a7f6-4e59-9cd9-d91eac502c21", "sighting--20a2a0b8-8721-431a-bc3e-d89da6770083", "sighting--f21a46a7-3b85-4db4-a2ee-3a029c7ef1f2", "sighting--2793a602-979c-4c3d-9ddb-78f9736d667f", "sighting--206dd823-cb36-4b08-858a-b319e975ec35", "sighting--9e98c22e-9a74-4e2b-b680-66a34d49122e", "sighting--4d13ff4e-c790-4ce1-81b8-e01db0570104", "sighting--d6d355ce-e3a1-4b85-a7bb-e6828d8e5538", "sighting--a86fdf49-8ae9-4516-a009-34c3e7a1c525", "sighting--6a1f1c84-7cc5-4ef6-8037-36bbd53f2d65", "sighting--16317d78-3a3f-45ed-bfe6-87eff1bf5010", "sighting--7536105f-b550-4269-9918-29464f8b7c71", "sighting--f6082540-2722-4e1f-b7e2-3653e58fa4e4", "sighting--18f36cff-218f-4883-9096-c53180c4b7ce", "sighting--602c8f93-0ef4-4779-a5f1-d68f16b916ab", "sighting--11b93da9-db1d-405b-a393-dd9b33eb023f", "sighting--b19cd66c-e34c-4b76-ac0a-64b1ead12f13", "sighting--a4c37352-58a8-43b9-8942-faa47939a405", "sighting--927952bf-e30b-4b36-972d-f0a786e938f6", "sighting--f9504f0e-4080-409a-8c6a-fb1068e841eb", "sighting--1e6ecbff-87f9-4876-ad33-248b3beacb4c", "sighting--55af6874-f1f9-49f2-a7d8-58fcaab647e5", "sighting--aa10eee1-6e1f-4169-9800-d86fae2a120a", "sighting--0f0d2760-3339-4bf4-b8e1-6af8f3568fb0", "sighting--2e854d71-9154-40bf-8893-01fb560428eb", "sighting--beb4bcd5-8465-44b5-9a66-a53193c8c21a", "sighting--5407d1e3-3828-4118-b4b9-7c460843ce49", "sighting--f22f2292-0d81-4335-a7c3-4d2bac57f646", "sighting--a9ac0c2e-b915-485c-96c1-d2da15b1a4da", "sighting--e11201ca-3a38-487e-909c-604eaf45ba28", "sighting--e3a0f9c2-146a-4b58-bf5b-c672ece22c23", "sighting--598bcaf8-ddb5-4683-bb5e-cb9aa366f631", "sighting--d2bbcad5-2015-43f5-a5ff-24c1def2966c", "sighting--88446672-051b-4c65-a99c-c41e8ac83587", "sighting--01c42707-5051-479b-8e70-de4960f00759", "sighting--59ae9f2c-678a-4e17-9c9a-37f47d7a20a0", "sighting--00038c22-5aee-43b6-90aa-813f3644666d", "sighting--230eb017-5e56-4580-85fc-df4572c57759", "sighting--a2eff36a-ee97-481f-b826-d2b9d14881d3", "sighting--f61dfb67-810f-48ec-a402-4df9e9c936f2", "sighting--c6bcd59f-2499-4ca5-b9f4-3e525f8ce146", "sighting--b072f8ca-27c3-4e11-8929-351d7440dade", "sighting--e49986d7-03a5-489d-8598-e08753f538e5", "sighting--d9dd121e-3927-4ae3-9b87-272c82ba2d68", "sighting--3134ca69-4b1e-4593-8bdc-172375ac6b54", "sighting--f5800139-fee5-4ffc-bdf6-7fc9ea3bacb1", "sighting--0a3a9670-ba0d-49b7-a2db-e3a07ddeda45", "sighting--9815de2a-09aa-4b9f-9b53-c697d193bb8c", "sighting--8cbb189c-6650-4f88-8c8c-00ab492a38ab", "sighting--0fa34d99-63f8-4750-8bda-fce9626d57f5", "sighting--d57ecebf-5cab-487f-af4c-0cf516a82cc0", "sighting--55b476ca-a564-47b6-bf02-eb66e6898568", "sighting--76a63899-85e0-4bdb-a500-1815ef86ede3", "sighting--8420b804-befd-4e90-a9e8-88beb607d1e5", "sighting--9b23464d-144a-4094-b501-9fb2bdc3af33", "sighting--c86d677c-6c6c-46c3-8c5b-abe5bb8719e1", "sighting--9393c381-292c-4809-b732-4ea926d17b16", "sighting--dab02cec-6fd1-4e57-9a57-f989764b75eb", "sighting--ed3628aa-6f15-4168-9929-5ce069c0f3f8", "sighting--4b22a483-fadd-421d-aaa1-041d777b416f", "sighting--8cf1639e-6c4a-4d04-b61f-f087ee728051", "sighting--253849b5-dbe7-4cef-8daf-513e0a57c542", "sighting--47b7c989-9fe1-4ea8-a7ca-ba9489d4a66b", "sighting--968ee119-2432-42f6-a999-118ee2b9d1ad", "sighting--a49c77bf-d6a5-4206-afdd-a008d4bafd19", "sighting--474aad80-2650-45f1-a7aa-c5432d2d8eda", "sighting--a9501d77-7b43-419a-bdb0-e013fe8dd6b7", "sighting--2556daba-ed70-477f-afe9-aec17a4b3e07", "sighting--438b3efb-2309-42ef-97d3-ab17fceb331e", "sighting--d17a1068-bb54-41f5-826d-7e7b3a12a281", "sighting--921de548-2c06-41d3-a496-b3c5250e9356", "sighting--e69be415-6aef-43bd-85e5-e80b156f5927", "sighting--2b123853-2fdc-4ec7-98a2-fbd6162e9828", "sighting--086faa01-5978-46d3-8b60-052d62285d68", "sighting--da932092-0894-4723-80c3-b7060e8b7b57", "sighting--10234c2f-a781-4b61-a1df-e819f1f908f0", "sighting--a49a136f-ded0-4049-b233-23eb113eaf82", "sighting--60001863-9859-4c5f-99c1-876267249605", "sighting--fd0ca23c-a434-478f-988c-3f3273bb784a", "sighting--f62a91ce-6efe-47f4-b5c9-e553d4a29da2", "sighting--195ffeb3-71f7-4f6e-b893-85a17d6ab6a2", "sighting--74e166c1-dfb3-41cb-ba89-6519a7da4f46", "sighting--055ba03f-6cd1-4ddb-a5d8-35e51a61626a", "sighting--a66264fe-dfec-42d1-8c00-15ad8d188c19", "sighting--08e71932-e9f8-4286-b89c-e6f2368117e2", "sighting--85b5b64d-0ed7-49dd-9c94-2e9f68c37858", "sighting--283fc413-25cf-4a31-ae85-5737f8006eb7", "sighting--2c558e0c-1588-4a80-a1f4-75766171a7ac", "sighting--b764fc69-b510-400c-8ab8-77acef8a234c", "sighting--cbd1eebb-6625-455e-a8e0-c08d7e11f87b", "sighting--a33db566-6613-4ee8-a15d-d88501ff1fb5", "sighting--40fda7fd-eadd-492f-b066-aa0ad61744d9", "sighting--da8db957-c5cc-4bc5-acfa-3f594dc5bbd5", "sighting--490b60ab-b841-4edb-b39c-8e4ffd4fc5f2", "sighting--3428a5fc-06ad-4acf-8042-97563e8f57a7", "sighting--ddb8264a-f19d-4ace-9426-db8e47c44368", "sighting--894a56b1-3a58-4a9c-972f-0856d9b92686", "sighting--8ca14676-f02e-4d19-bff7-f7971236fccb", "sighting--11eee198-2558-4e4f-bb33-a80db50d3b06", "sighting--5a7d7071-2df8-4ff8-bf6b-2698b2bb8589", "sighting--35be3134-bf53-481b-a6b0-4e950c1c2532", "sighting--5a86a543-ecd5-4a06-8973-47bc7edb443c", "sighting--81c1bc88-5ee7-4578-9c1e-30883ed37e64", "sighting--aa12420c-8beb-435d-9726-5ec2b20f6442", "sighting--1a113dc1-bbc2-46e3-9add-84a3f0fba01a", "sighting--6f7140ec-fd86-4974-bc5c-a2f7e9cb1db3", "sighting--4cfcd324-e961-4f9c-83ac-4b789aff1b16", "sighting--f027c3f4-b5b7-4418-816f-352700a23a68", "sighting--06ab50c1-5c27-491e-855c-48c158f64ccc", "sighting--8f31a535-7814-4c1e-acb6-c0196556867a", "sighting--db561cea-aac6-45b2-84c1-fab4009d03b7", "sighting--1c4bd4ed-acfe-4aac-ae18-0e084bf454da", "sighting--819e90a5-1fd0-45a9-b93d-fa2facbaa166", "sighting--4e798ce9-64b8-448d-aa1e-c976b8bfd4a3", "sighting--45ab9eb8-1792-4925-805d-21e0296a4dd8", "sighting--fce5c23f-cee8-4261-a645-929bb8aff207", "sighting--a0e0db40-c22b-4a7f-be51-ec3bcb7f545c", "sighting--7bbcffd8-7dfb-4e0c-8b84-47824f55eef2", "sighting--27bcc854-323e-4940-8d4d-b408f96f285c", "sighting--d7329783-8566-436c-8f87-6246a2e574c5", "sighting--58c0f2a0-e679-4c74-a47e-b6a81d5898e3", "sighting--a3142ae3-ed1f-45d9-9629-eb09ce7484b4", "sighting--591162af-7a15-4915-8b8b-2a20e4e5267e", "sighting--9d4c22a3-1819-4ef6-8824-2516a6068f27", "sighting--f8dd0b41-9cdc-4e5c-97de-1513e7edcbab", "sighting--8507d7ef-7a96-4486-a2da-465eedcf8e37", "sighting--73ee20ef-3e99-48b9-a222-0b02489cf7f6", "sighting--66c15832-4e67-4c33-ab7c-2db05d6c402b", "sighting--1a32bcc5-1063-437f-b33e-9fc5fd6316f0", "sighting--86c54700-4298-4e51-825a-23d95391c4f7", "sighting--8050cea0-ff24-4e1a-973f-9a93dd47b269", "sighting--54ffa21d-dfad-40db-a729-f80c14a6b683", "sighting--fbd22692-53c1-4383-bfc9-efd0d741e2b2", "sighting--87c20f3e-9c9c-4991-afbc-10345d1934fe", "sighting--2e5411b3-4177-406c-ae90-e0f04eadfb72", "sighting--34d6b567-ed56-4087-997b-47f37efd50f7", "sighting--b900528b-cd1d-4cd4-8a25-f611ecd2678f", "sighting--6599671b-de3c-4a4e-84af-b40f85a072c2", "sighting--35b10f94-2aba-455b-9b1c-837ed556544b", "sighting--cd421c14-f190-4383-8bbc-243b564d922c", "sighting--25480816-3d41-4afa-b292-2ea5524efef6", "sighting--27a9ec7a-0315-432a-a31c-8c4d98aef20e", "sighting--909203b1-6f54-4cba-863a-2a949468fd7b", "sighting--db8d73dc-7849-4ab8-b93b-b9721cbba9e6", "sighting--bf1bf926-d858-4cee-9993-6626c9450183", "sighting--ef3556f1-10aa-42c6-bc38-e93e16a46fe7", "sighting--cadaf572-55cb-4841-82a5-eaefc4ff3e75", "sighting--cbdfd39a-a64d-4a6f-871b-539d00c0f875", "sighting--f1b9c6ec-10d9-4667-9012-cb8376421bf9", "sighting--8ab0681e-cff9-48ea-bc8b-678bb5d41aed", "sighting--c54f4bf2-0c32-488d-88d2-5c45ad64ccfa", "sighting--71cb8a9d-575b-4d14-a045-949d1687ee06", "sighting--e65a4abd-6098-44c9-baaa-05cd2ca5d9f8", "sighting--5a074d7d-8e96-40e7-a062-e0ad64c84112", "sighting--3c4b6d77-2cd6-41a0-83bb-315911331624", "sighting--4428d03a-1d7e-4d90-9ba1-495aac8e01eb", "sighting--5f59a08e-abd7-4612-8957-83105c5f830f", "sighting--dc948033-f718-4e23-af5b-a049216bb9d8", "sighting--cc89bfd7-e27c-48b4-a883-b1a63ad8241c", "sighting--967f8695-c68e-4d6e-84d5-458c42a43de5", "sighting--09316a6f-40e2-4c6e-80a9-e5621dbdcc28", "sighting--e17dfe76-88b4-4247-bdbf-64315c692a2c", "sighting--580b7f1e-fb21-41de-a71c-0f279ff3c86d", "sighting--f207ecb7-3f5f-4a2c-b287-f9c14a075de6", "sighting--0be89e54-3cad-498f-bb6f-cf43036ad22b", "sighting--89e5530d-c17e-44de-92e8-e0e12bc61d8c", "sighting--368c86f3-8cd4-428b-9d83-fbe14a0011d3", "sighting--14718c89-e934-4d10-a26d-70b583a9d866", "sighting--66edabd8-25a8-4396-be90-7bcea59b6052", "sighting--ebde44ae-4f5e-4690-bf3c-6576f6cb1445", "sighting--2e44db9f-1ac4-4ed8-be6b-30819479038b", "sighting--25e8db85-39b4-4fdd-9b3d-efb261f61981", "sighting--6f4a0ca2-2a87-421e-8bb0-70367781becd", "sighting--3682e1f3-978a-460e-9312-fdb04b67b308", "sighting--9a56f1ee-6e9a-4d54-9234-83b6d9c8d43e", "sighting--e180f0e7-10b0-4cf9-9d20-3681bf858edc", "sighting--caeba1d1-89d9-4e0b-865c-60bdd89835bc", "sighting--da2887f9-7800-4faf-8000-e73358ea3398", "sighting--b5433cd5-036b-4562-b698-9a1a39a34915", "sighting--31f69391-9b0e-4c24-97da-c2b9a27b4bf3", "sighting--9e99a1df-bbad-4ba6-9bbd-afeb1b3c2154", "sighting--8ae4f9ac-a1b1-42a8-909e-7dd8f5b1d3c4", "sighting--1caf56a9-35c9-4d72-ad62-9d256da42d94", "sighting--a8ab3937-4992-45e1-9213-cec6f620473d", "sighting--6af8c6ea-1633-4db8-a2a4-3e23bf82a255", "sighting--394164da-0c09-4100-b187-1d100aa51dee", "sighting--6f56478d-edd7-46c0-bbdc-fbee2908ba26", "sighting--20546df9-1be5-4be0-955b-f8469b630377", "sighting--c48253a8-b469-49ae-830e-f0cb3a65ff01", "sighting--fe1863a5-97f3-4851-bd6e-741633e9e93f", "sighting--1929d5a3-f595-4392-bf20-810399db4752", "sighting--8664acda-15c0-4aba-b818-ec2bb8d49a84", "sighting--d52a3afa-c8f9-4374-bb3f-abb03f9a5ff4", "sighting--33184adc-b69f-4c28-9d6f-4fe6b7f8dbc6", "sighting--bd274b80-0109-4a54-94e7-a81944f001f2", "sighting--b5abf9db-43df-45a0-b07a-8643ada2b616", "sighting--73ebd1d7-671c-4151-a763-4f6217cc3b15", "sighting--984dc62f-d60f-4439-bc90-67518e4cd81d", "sighting--7f4c68a1-4b37-48f1-a5c8-ae07f7cadc04", "sighting--4a5058ba-0174-48a5-81b5-762e66de693c", "sighting--4e190986-5611-4941-92e9-7ba28efb5b09", "sighting--93f8ddb3-e09f-4e77-a1fd-531b2de97876", "sighting--2adbc31d-120c-44dc-b2fd-ba93c0017b34", "sighting--099b53cc-cfd8-452f-88fb-8221e71cc568", "sighting--87a3c319-f83d-409c-adb3-7dc98806d277", "sighting--52534f5f-ce8a-4c62-b64f-c7aecda974c5", "sighting--51407b9e-a03f-4211-895a-33eee50fb139", "sighting--e298670b-f375-48b5-ae5c-39258d0a4e9b", "sighting--3bf4dcc1-2b60-4b73-8a3a-870c62792aa6", "sighting--f19a92af-a62e-4f2f-80a1-6b0c2443da8e", "sighting--4074bea7-2240-4ea2-829a-4fb1c28c4ebc", "sighting--5ead2b19-4773-49f0-9f1a-b36faae09212", "sighting--b4f9b43c-3a7e-41ce-a530-7452d102d11d", "sighting--ccbb0116-bd2d-4912-9237-f8e35b40121a", "sighting--51186ff0-022c-4d5e-8147-b5e87e1b0986", "sighting--b5b671b5-b831-487c-b05d-1d0703b10d49", "sighting--6aae1ec6-0c37-49f3-86b7-ce09c1cccbc1", "sighting--1eecaa42-39c6-4b3b-ae35-23886a8af5a5", "sighting--053fbe2a-994e-46e2-abb2-77e31376a74b", "sighting--d02cb5a5-4d33-4b8e-9c1d-6aa3a50bc8a0", "sighting--baac07de-e6c7-4b4a-81ba-db873c7effc7", "sighting--e04712ee-3f00-4869-957b-07ed5b628c08", "sighting--33994e2a-9f48-49e9-9fca-b0ce3971603f", "sighting--24563978-0704-4077-8391-5fb987412a0b", "sighting--7b7b1ff1-a0d8-48b1-8b72-3a38bac83586", "sighting--49b2e3dd-ae3b-4c2b-989d-f2b43fb8bff8", "sighting--15ade51f-e6a9-4bb7-bff3-c8aa906b01b5", "sighting--79c5d209-fcc1-4738-8114-40bf503c7bb9", "sighting--777efbb0-fbea-4c95-8d86-f8a016e167e3", "sighting--b072b4d7-3230-474c-aaf5-a3c1d4509bd8", "sighting--56f6390f-177e-4d9c-a557-974e8221e763", "sighting--0e3219c7-05ca-47cc-bb4b-7fc18133aed7", "sighting--14aeb798-6696-4683-9e8d-21e8819617e0", "sighting--a7636721-a592-4912-becc-82cf117d2084", "sighting--c5e8a383-617d-49aa-89e8-47e6aaa54695", "sighting--9969c659-fc54-4a12-9519-cc73bfbc4062", "sighting--9725dc99-a31e-4520-9bcf-b7b3055ebe65", "sighting--72b7ca7c-31ed-4220-8c4a-828f513831f4", "sighting--57001431-a411-4fd0-ba7f-7d1fcda39a45", "sighting--08c5fe38-3968-450f-864d-b7df5a56e725", "sighting--6e26908d-962b-41c5-8886-bc7f23aa3342", "sighting--fc05c8c3-b353-4c9e-95c0-2ef983eef5b3", "sighting--03d3ca77-f732-45e7-8de5-4b46c9780c94", "sighting--46fc0076-ad53-4a2b-a613-bd9846ba136e", "sighting--26c37350-0121-4470-b722-296c56099241", "sighting--2bd4e414-6ad2-4f59-aac6-65e4b3a7eafc", "sighting--04d0b179-f681-490b-b08d-65505083399c", "sighting--161a4534-30c7-41af-b651-4b09fa2d77c3", "sighting--1dd7c877-3b76-4f30-92c9-0b6ff75e13e6", "sighting--9392fbfd-865c-4fc6-a574-5667b3124ae0", "sighting--51c6b66b-616a-4f60-8e99-4abee60c960f", "sighting--c32774ca-181e-4a88-89cf-5529133f0821", "sighting--3fe8b6d9-4425-4698-b397-61ead6851202", "sighting--d29ef78f-d843-4379-a4d8-6ccd614f744e", "sighting--6b699d8f-b3f3-4fb1-84a5-1f81935ef626", "sighting--96b194a4-61a3-44c6-b571-b86b303c6c51", "sighting--b4c06cbb-38ec-4a42-b9bd-b18d7d274620", "sighting--ba0f15a3-9f76-4fee-84f5-a0743ea0e300", "sighting--ab29be0f-af97-47d0-bbc9-0d2baab9efe9", "sighting--24c65ab1-351f-4ae1-970d-fcc19a8ce84d", "sighting--793db11e-aaf1-4521-a5fc-7c2ddabead16", "sighting--50f3c263-cf8c-4bcd-bd31-df9410776ca0", "sighting--7cca342b-d705-4c4f-ae38-cab600e4205f", "sighting--ac31cd2e-854a-4e49-bd26-75eee64b9272", "sighting--2f60fe3c-372b-42df-a4a1-a56579add566", "sighting--d10e4348-3b6a-4b5a-a868-f6f1898aa335", "sighting--dbd29e24-5dc1-4ef7-8a39-062fd8c8da71", "sighting--c98506a3-398c-4d7b-bbe8-524b2ab3c3b7", "sighting--f40eecf7-c4c5-4701-ab7c-2b55f58dbaec", "sighting--d1313886-595a-4be4-8d33-51ccdf3c9277", "sighting--235d2d44-0643-4cdb-af9d-becc0b3b3bd0", "sighting--09a6da24-cc89-49c2-9074-8a3366d064b2", "sighting--a7d209c1-5a31-4555-935d-a970806523ce", "sighting--50cb5a16-cb6b-47f6-b7b7-feec55a383cd", "sighting--54a907ac-a074-4307-bb91-6c77e643169f", "sighting--1fd5f622-7b50-4f3c-973a-c656729d5c7e", "sighting--e3cd4eb9-fbe7-4bdc-84bb-99d514a4ead6", "sighting--3136ac00-39f6-43a4-a21a-01b7f295a45a", "sighting--724605e1-c868-4c2f-8e1e-b8277d6604b1", "sighting--1d6e84ad-4670-4b0a-9fc6-23073c10e7a9", "sighting--69ffe2f0-cb9c-46fe-b2e3-840cccddfb15", "sighting--44e20a2a-2515-4c6e-9047-3c4849c2824a", "sighting--b073f60d-b637-4bac-b4fd-385f27d88c17", "sighting--62191750-3dd4-4786-90cc-a447038aeaa5", "sighting--fa4f24de-9f40-4d58-a7da-547d5d309a8b", "sighting--7ce23c07-1423-4579-aec0-c8818e5ea109", "sighting--5b5e70a2-7f83-4b33-9862-e17cf9b3ccc9", "sighting--f49578ab-2ee6-4c1e-8b0a-215898290b6d", "sighting--2b12ecba-2767-42e2-87df-c91ebe74f935", "sighting--cb0c85ec-81f1-4e50-9b04-c7e110910fd4", "sighting--a70b0b71-71ad-46e4-bc30-7612c997022e", "sighting--0a174281-5cf0-4fd7-8672-5263a6e4cfee", "sighting--cff05e2e-85bb-4efe-941a-c495f2a46f65", "sighting--002dc7af-f5ba-488e-95d1-220f071cee65", "sighting--2f152c5d-4a6a-4011-996c-224530f21579", "sighting--a0d0a935-e7b2-47be-abf0-a654d3f213a5", "sighting--538551ce-0aa2-4f03-a9f5-acc911b60fd4", "sighting--921c8983-a3e4-4ef4-b7f5-003b87667867", "sighting--0eeccf80-7a26-45bf-a699-db56ce03ea99", "sighting--5d3403ff-71ef-42db-885f-81bc8ee00af6", "sighting--1c2f9488-5047-4c84-8f8f-4aabcc97b42e", "sighting--92e9257b-31f5-470c-8b45-210c92652237", "sighting--36178645-fe7a-40a0-82cf-1c7f3ce732a9", "sighting--1640f186-374e-462c-b3db-779e2e39e927", "sighting--aacd0bff-268b-450a-85c3-b8c96ca82087", "sighting--f92cb692-b3e9-4dda-99c2-0ac6de9796ce", "sighting--5871e4be-3f43-419a-b71f-b786d6683902", "sighting--1187a6b8-f887-4262-99ec-e797fb5cc53b", "sighting--1f33a407-ebdd-4a1c-bc0a-99b2350d93c7", "sighting--51bcb250-7711-49be-b5f3-630926cfecb8", "sighting--6ecef959-e35e-4a52-8e8f-ed4f85b96e6b", "sighting--d111f5fc-d06b-4970-89df-7b6827f0ea94", "sighting--312ae473-8562-46e9-ab29-703deb2fa5a2", "sighting--52c3140c-b579-4bd4-837f-cf1730cab7d0", "sighting--82941d69-44eb-4869-8ea7-53153ec18e61", "sighting--ced550ea-b069-4eb4-b73e-07fd5d7c6e9d", "sighting--34988963-67df-4e31-9fd8-f890c8e183aa", "sighting--08fb92ef-582a-42a6-854b-1eabde80f671", "sighting--e0e21a87-a5af-49b6-ba5f-672f716e2ef8", "sighting--a9f708e0-67cc-43b1-8167-1f2d8873d4db", "sighting--d593e251-de36-495d-b1bf-71cc4cf053dd", "sighting--1059006f-da57-438c-914a-59d6b3f1014e", "sighting--53d05761-b43b-4d35-9ec3-7c99eb78ebc1", "sighting--9dadc416-2cdd-4b51-a2b7-ad2962988097", "sighting--762cc0b1-81ac-4840-84b2-ae2c0c642893", "sighting--eacaf68c-3cc1-4c93-8526-d276db8d1b7f", "sighting--2c903c65-4dab-4881-9a0c-675c69e3f201", "sighting--3cc497f4-4fc0-44fa-abd3-e791847e2d3a", "sighting--65b44e58-ca4b-49a1-b229-d327d42a7f7f", "sighting--59836f71-16ff-4355-bd8d-5d8c2e964949", "sighting--ffabc4d2-bfb3-455b-8314-08a9b86f4adc", "sighting--a7949cb4-9552-494f-8841-cf7fb609c7bc", "sighting--7380a9da-3915-4779-a81c-9c8c88bba3fc", "sighting--12a5086b-0dea-484a-bc09-8f5cfbcc7383", "sighting--c0234bb6-0255-4dcf-83d3-f766667bc4ab", "sighting--38be12cd-4706-47f2-a58e-c7b3287f7425", "sighting--2abb25e1-d468-4584-838e-4f963abb56c5", "sighting--7f00390a-eec6-4343-af08-7a0716d22f22", "sighting--f1f8bc4f-570b-4563-a954-b14deebc491d", "sighting--d2a952d4-580a-4f71-9509-42257c2f803b", "sighting--4c72bb5d-9965-4c83-b885-e75fe478a201", "sighting--a666d0ed-ff44-4685-af3f-3f1deccf3aa5", "sighting--daccddba-f2df-45a8-ac7c-c60873bb56c8", "sighting--b5614c7a-5ffa-403c-8841-a891c6421532", "sighting--3ec59b46-a7aa-4ed2-8812-34b04a70d62c", "sighting--61519888-78b5-4c35-bb33-2f94a63b980e", "sighting--ef60ee89-0a72-4151-8622-52c6ad88fb6e", "sighting--db7d927c-66c6-4211-8ed4-9874ecc2854f", "sighting--cd90f55d-e21b-4851-9359-95ecc3cc3003", "sighting--780f155b-7a1b-4727-8478-5b4f49ed9965", "sighting--d0248c59-047b-4f40-9523-5bbd3894bfe8", "sighting--5902afcf-4046-44b9-93b0-9deb900c69c9", "sighting--ad2cee19-edc8-46a9-b721-6ec49439fc35", "sighting--d6effbc5-3b9e-4317-9277-110f63577671", "sighting--bb7409ca-3db1-4247-9ddd-e22886a003c0", "sighting--3f85a705-2772-4452-8672-5db350db33e8", "sighting--bf2dfa90-da1c-4de8-8a64-aa92daa02b0d", "sighting--b8756e0f-bf05-4cb3-acb1-8e64a58c74a9", "sighting--ad3d5bb2-7b7e-41e7-92d8-5a309f440b6c", "sighting--f83d72d2-d8e9-4e92-9aaa-10d7e7501b2e", "sighting--93187205-aba6-4a21-b0d4-010fc14e376e", "sighting--e88bcda2-d1d3-469c-900c-7fac57b53535", "sighting--9e4e41c2-4c4c-4e32-ba4f-391538ca7c3d", "sighting--1c09ef44-ac54-4ec0-9de7-68e941e8fb6d", "sighting--20b3cc57-b640-4814-b21c-cb542bbb26b6", "sighting--e4cbb909-e0db-4053-92a8-774c713b69f9", "sighting--65552ad3-cff5-4c24-84cc-15d271f9a021", "sighting--228951ce-9277-46b4-b946-254dadbcd6f9", "sighting--dc6052a6-a55c-47d0-ab29-0f46607a64a3", "sighting--1d8ba876-ee26-44d1-8056-0279425caa63", "sighting--cbc3af19-9f72-462c-a714-ae8c08874139", "sighting--77972fe1-45c0-4007-994b-006a21f91995", "sighting--82e73f5c-d074-43bf-828c-136e7df49921", "sighting--c03ffddc-96b0-4c9f-9e7e-3412dbdccaf0", "sighting--3dd00132-8bf9-4e06-9859-4f45213ebb55", "sighting--ed0eb4c2-ba02-4448-9632-298aa2f75308", "sighting--65201329-d8d7-4578-84c6-64301ed0864d", "sighting--a783a08d-a708-4d1b-aa3a-663eef20de3a", "sighting--a4712fc1-0641-4fae-bdfe-43930721e8bf", "sighting--46f67cbc-0a3d-474f-8258-4f11942a4670", "sighting--8bb6661c-e352-4e50-9272-df8b3d80e6bc", "sighting--2cb39238-7ffe-4710-9f47-e8c2978f143d", "sighting--0380cd39-8aa3-457e-827d-9375756370c3", "sighting--b70ca7fa-bf4a-461c-ae43-286bcff7940c", "sighting--fd01b8cd-8ed7-4fcf-8f19-579fb634fd91", "sighting--5aa20c85-6b6d-45ff-a195-085dc773067f", "sighting--3658f8db-2ee9-48cd-b8f9-63d3744688e3", "sighting--933c6612-ddc4-4191-82d7-7ba5069702e1", "sighting--1bb6aa63-cd70-4a3e-87ab-aa4039ecabd4", "sighting--9a25b70d-677f-4595-8720-2155e0d568a7", "sighting--50619312-3362-40fe-a988-ffdf205cf08b", "sighting--b832ddf6-5922-4014-9dd9-6de1862f3a8d", "sighting--a9d8f0e0-7108-44a2-b696-a4304c18d354", "sighting--630f84ac-2b75-491e-a000-921ecab01b5f", "sighting--4cc6a235-78c3-4f2e-ba4f-0b6110d1f1d7", "sighting--eb275593-ad58-4542-97c2-a4f8e551960f", "sighting--a35d9a0d-07b2-4114-b81f-819a5796780d", "sighting--4d96fe43-ea81-4a71-af03-47087f96d54d", "sighting--ec1f1ea2-5e63-4fa4-b4b8-6fda422df667", "sighting--385807a8-7131-4bab-9c8e-81c74734f4ae", "sighting--ed3e2512-9e54-4f64-af41-82ffa9956f3b", "sighting--b7d888ac-53d1-4215-93ad-68a6f01b86ad", "sighting--a7ef2fd2-0e4c-43de-9b45-68ff164c9b54", "sighting--8186f9c0-63c8-4c46-b71e-44b91a731363", "sighting--95a2caf4-f269-416d-bb06-a26f09d76c89", "sighting--2f12eb96-78c8-4b2a-97a4-8f57df13acd1", "sighting--eacb9ea1-8827-443a-b02b-56d9a15b7cb9", "sighting--a5d52015-7cde-4cd8-84a9-8306f249d1e7", "sighting--aad5998f-db1d-4507-9d3e-9999fb969c78", "sighting--2f2411db-b222-46b3-a52d-722ca511edac", "sighting--09b525ec-d7b5-4e5e-9f1c-12e270d5bc3c", "sighting--e7549fa9-7926-4b09-81d4-55b31cc10f42", "sighting--5f110dfa-7e00-441d-9b4e-ccceabb50e1f", "sighting--64b5a3f0-02ac-499e-b8df-16a5f56eefcb", "sighting--a35bdf65-8137-44a9-bf66-d2b52d0a79f7", "sighting--3f36957d-99e9-4e98-8119-b72cab1e227a", "sighting--6b3e0c8a-3cc2-498d-a2c1-c25979dc96d6", "sighting--6200266d-fb01-465f-8349-fa57eb60c84f", "sighting--b0a4c1e3-e79f-4bb9-9a25-be9183fda3dd", "sighting--39b4872f-430f-430c-b8ef-cfac8a2f4738", "sighting--766b7ac6-5fb2-4d27-a2b2-915ce7b50208", "sighting--0943472f-3001-4b2c-8d13-ef9b69c05b46", "sighting--4786735d-bc58-4648-9bea-c641b6e8b141", "sighting--b4e58219-f340-426b-80a2-9642cc1f89fb", "sighting--dc534d20-2728-4c12-9c6f-28a80b205ae2", "sighting--58946994-c5e5-4ede-8164-a3ba2e8b857f", "sighting--cbc38fb1-39d2-4ce3-ad3d-5210464e7d10", "sighting--d2b7d7a9-784c-4ad3-973d-7cfbf2c0d70f", "sighting--83a21d83-9ccd-4a59-9b67-270af20d0724", "sighting--09307582-87c1-4835-a5cb-169977f75aa9", "sighting--a003660e-c4b5-4a20-97e8-f1fc0028731d", "sighting--24b4b926-8ec1-4bf0-84c2-9afb37ccd691", "sighting--e058589f-60b1-4c8d-b947-e54dc05523f0", "sighting--68289895-6f51-4b9e-9860-656ee8f1f9a9", "sighting--2243ba07-ebf9-4296-87b8-a1cfb431fd39", "sighting--0cceacef-46af-4c3a-b23e-13c570df6f46", "sighting--4591b005-9b18-4139-98b7-7ca5f79a4431", "sighting--34003a2e-57e8-48e8-89c7-3e08110ab82c", "sighting--3920ff87-bae4-4698-8689-8cfb8ecac505", "sighting--39fa758a-672d-459a-b53f-a9e59b47a08d", "sighting--2b5162ed-da2b-43f6-a33f-76c6326357bd", "sighting--512ace62-68d9-4ad4-b62b-b3e10b35e0c7", "sighting--961a7b69-84c9-446f-94aa-dd4ec6dec3b9", "sighting--20395a73-c946-4f8c-bb49-a8e66c1ac63e", "sighting--017dcf64-44c1-41ac-b634-39391f5018e9", "sighting--6aea9ad8-8d8a-4c19-a246-fb36a46caa4b", "sighting--42ee87bd-862e-419c-8e98-b09de5f4bc9d", "sighting--8a47a33e-d300-4b20-9856-487f76799ae0", "sighting--93c1e804-a825-4eed-b02d-933e2ae67ddd", "sighting--a57dde2d-5389-4094-a984-2f617d9ecf10", "sighting--a747e1db-e564-4e91-ae36-bef1d8ac5ed8", "sighting--d049a4d5-7767-4440-bcd3-0b3f7668a188", "sighting--a30a765f-8794-4d0f-a40c-f34402dc6a18", "sighting--c979fae7-606b-4443-8328-3926d31bcbc3", "sighting--854d7f0f-642e-4b64-8952-f0e2208e4218", "sighting--78837ba2-860f-4067-bd9b-5ef1a4344fc0", "sighting--7044be47-4665-476e-999d-b08768a3702d", "sighting--d7dcdc41-f60a-488f-95e9-ee8c8c21397b", "sighting--fd80e7ab-b0bb-4b2c-97f9-20e56f0c7557", "sighting--634ff4c6-d289-478a-9bc8-7950e88230f2", "sighting--9f049fd3-228f-49eb-9d2d-9228bec8e306", "sighting--052bbee9-6435-4c79-8199-3b5b7fb151a9", "sighting--1d106236-738e-48e0-85f6-20390876264b", "sighting--1547820c-26f7-4a23-9500-da4d1d93cd40", "sighting--5bc12331-6f67-4572-be16-4d7a968cb218", "sighting--f23bf81f-8e48-4714-a8b6-ebe0667b0b72", "sighting--bab44d66-48e9-4eb1-aae2-4711d2c3d7e9", "sighting--70f1aab8-0c91-4060-94ea-a87a86e5dcf9", "sighting--acabfe31-137e-46c7-8fe6-be872ce95c2b", "sighting--fab31877-73be-447d-9d5d-a65a09f4b38f", "sighting--cf458238-e8d9-4f23-b32d-1279fdb30d9a", "sighting--c6aae58e-237f-4408-b5b5-5ac8add44a85", "sighting--fcae77ae-2886-4937-b2a5-1c1eaf513fcc", "sighting--f70595e5-64bc-429a-a903-39903ca2db18", "sighting--f8bfd4fb-6f77-4a5a-8488-d85369dff946", "sighting--071babc4-e905-4aaf-a4dd-6908629244cc", "sighting--4eb2fafb-b98f-4cdb-9df1-139b69757f42", "sighting--058966f5-dafe-44ff-a39a-08210cdf1ea6", "sighting--34c3812d-8046-4f4c-87f3-9b481e473f29", "sighting--7eb38925-d487-4e5b-bc34-2c1bdec536da", "sighting--a3f3b9af-0a57-4628-948d-e98bd4401e4b", "sighting--24fee034-fcc2-4c17-b85e-151977434679", "sighting--313bac3b-5252-40b4-80ae-fee89c87a01a", "sighting--836499cd-49c9-42a8-b1b6-3daa33a9a403", "sighting--dff84eb6-5a9c-4d2e-bfe7-e7da69443438", "sighting--91294e3c-a1ea-444b-8bd4-4fbe9b9ca6a8", "sighting--0dd6540a-ebec-44b8-be64-1493b49072cb", "sighting--9756bc23-9afe-4314-8632-80611815ab5d", "sighting--a953ac13-4e90-4829-8d80-09fc1b1730b8", "sighting--78076204-f2c7-4843-b5f7-adfd49ab340f", "sighting--bddbc70f-0af6-4db9-88e0-80179bfcc2b6", "sighting--17e8ba4c-7931-4385-b2b4-970dd71dd75a", "sighting--f341da20-5f03-419f-af2b-2b873136b62a", "sighting--a6dfdef0-0520-4bc5-9556-42f47755085c", "sighting--8274bd4a-ba9f-46ad-ad6a-c48b647b5d7d", "sighting--7f68e1dd-b318-4ea1-9b17-9c6e0acab635", "sighting--a8fbcde4-6ef1-495f-851f-592f3b536586", "sighting--4d3aa0ff-3f67-49fb-9eb1-7c37963daa34", "sighting--2e5e4b9c-dde5-4b19-afce-f97258795f27", "sighting--8f92a141-3370-4b5b-8005-5fa5c3e59df8", "sighting--a606fcff-ec15-46d8-a333-1ac4096c53c5", "sighting--de9eaafb-b388-4266-9327-977f76d19511", "sighting--33d51580-61c1-4add-8e13-092d74a9d52e", "sighting--13ef4fca-6584-445e-bcfa-6c3465b4f7e4", "sighting--a20620dd-628d-4ee5-9ab2-cdbe8a3667e4", "sighting--08e3a484-f030-4793-85b7-e8b4ac3d224a", "sighting--9c8606b3-aebb-4975-a844-4ab2d37a4542", "sighting--aed2feed-31f6-4d8b-8baa-2937a81c8d8b", "sighting--115b1369-ca9f-4925-944a-e69be4ce25c4", "sighting--7f61e76c-c3d7-4604-a534-d6eedecc5cdb", "sighting--11c0a715-3079-421c-abf4-a3774c21a2b6", "sighting--5954d1b8-0278-44a5-9007-966218b3ac96", "sighting--e62ce157-5801-4836-93ba-fd27e519975f", "sighting--da2f6c09-5526-4223-8b6a-397a7feb8690", "sighting--c6653ebb-be95-42f4-a997-af8b11b96df6", "sighting--fe18e8d4-4fd4-4e32-a9b9-cd1bb6ec500d", "sighting--1ce649bf-86f1-47e1-88d0-c5130aa0761e", "sighting--b9929fbf-bf75-440b-b104-c5a9337a085c", "sighting--5ad9461d-3db8-4da1-b7f3-168037ea5f90", "sighting--1dcc2660-ce58-45a6-b92f-f144b3b4f8fc", "sighting--54faaa38-db8a-4023-bbe6-b990b390aa51", "sighting--6b82d5ee-e4d8-40f1-9ed8-7d84a5966703", "sighting--b91f0c0b-aee2-4eef-b159-34ae17a1af4b", "sighting--36fc29f5-d405-45aa-b119-6d3b642a385e", "sighting--d5daeefe-e6a8-4176-974f-7bf302c645e1", "sighting--bbc6b9d3-b8d5-4166-b3ac-caffd5d1d8fe", "sighting--89f9fcc1-8cd7-429e-b978-8ccdad3e060c", "sighting--1b4888e4-91b9-4ab6-9145-14eb772dc84d", "sighting--b8642fe2-b63f-472f-9964-e5c545cc37f6", "sighting--0f417883-a16e-4082-8243-f4ae22c87377", "sighting--37c2d9bd-fa6b-4c4c-980a-dbade3fc3677", "sighting--46401b34-82f9-48d8-a19f-a4e18d8c3b7b", "sighting--d01fb1c4-3e99-462c-95cd-8da59c93e701", "sighting--ab53cd0d-55b1-468a-89bb-8beac25d7c05", "sighting--dceed11e-7bb0-4bbe-b5b9-feef008467fa", "sighting--afe0fa22-511f-4fcf-93d1-0b94a997f0a2", "sighting--a6111e0e-72de-470e-ab99-2c2321a2963e", "sighting--5f5ef021-5213-45b3-8a81-db21be9bed75", "sighting--3f1ade12-6d85-4824-9c9c-ce010b1b6cf1", "sighting--ea4775e0-3476-4ce6-9717-338d9fed21ff", "sighting--21fe8d35-a919-4609-a1e5-29656d8173a5", "sighting--a8e8b372-bf6a-4ca1-b8af-3f23e1f9e789", "sighting--5236a14d-0cd7-40db-a5d8-9d8c564370e4", "sighting--401a8cc3-7d35-4e73-bcb9-0448da43ef72", "sighting--4ee840e2-74a8-4660-b886-a87cca6c4d68", "sighting--563f57f6-3ca4-48d5-9465-3bd4d6b8f044", "sighting--061a397d-ca6d-4d21-9580-bcc9882cf904", "sighting--551eab97-67da-4c18-a197-b947b13901e5", "sighting--ce023986-a4ed-4030-b029-3f124fb00473", "sighting--aa72a3ee-054d-42fd-a2ca-d8d1010fd9f2", "sighting--b32e1227-de3d-4adb-91b7-8e4646ef89e9", "sighting--b174699e-83fb-414d-9dc9-d62405df3282", "sighting--acc11f83-6448-46fc-b852-05d2f369dfe5", "sighting--8394bca5-493d-4d57-8168-ba92313ff838", "sighting--b017732c-42d1-47f0-ab52-f94397cf1942", "sighting--dd1b56a8-7e6e-418b-89aa-f48c2a654955", "sighting--b71ddc25-bc9a-4d66-bd65-a6ca218ec7ce", "sighting--8a141019-9aae-4f93-b7bb-66846d12fc3f", "sighting--50a33d7d-7734-4ac4-b2da-0f5cb7c66d4c", "sighting--dbfd6363-3a5e-4150-a056-e0f1a46edd29", "sighting--82af2c48-a8a8-4602-bc77-23b5bb4feb86", "sighting--26d36050-833a-448e-8cb2-655de8e348cd", "sighting--18372379-6da4-46b9-b0c6-96e80aca225d", "sighting--06163b06-c2e2-412f-9121-00a2735b0e7c", "sighting--92e03fff-cdb0-4405-bd0d-e9bc200b7f8d", "sighting--cba7b899-485b-478f-8bf5-23c6690a5857", "sighting--d555a2c1-f22e-4f87-8ec0-51d76dd62d51", "sighting--da6857b0-b2f2-4205-89d8-94e7f75c07ad", "sighting--cab7bdab-64bb-4882-a3d7-6cbeac7fba09", "sighting--9fbb9ae2-a880-417e-afe7-dcec1353cc06", "sighting--f82dd1cc-2e3b-43a8-ac9a-049c95793031", "sighting--7d3c63b4-594e-4fc0-9640-10945edb32de", "sighting--bfadc637-e680-4c0f-9e61-1762435b6c1d", "sighting--41805840-a326-43a9-8a18-38597e35fc6c", "sighting--97128a58-0c17-4c09-809f-3316b4c66aed", "sighting--ebcb835c-f1ff-49f1-b765-0d0262230b9f", "sighting--52eff998-a878-401c-91f8-7790a2e6e846", "sighting--95913cc9-2f1f-4531-b334-76412880ff78", "sighting--e41b9538-426d-4d2c-a333-4f9940ac9896", "sighting--1669cc97-1a46-441b-b020-636c99cce1ed", "sighting--a32995d9-2c02-4f08-86cc-9cf40710ac83", "sighting--76b4d08a-c7bd-4f22-ab23-181240a98172", "sighting--caebb30c-20be-4de5-9b01-092337ae0447", "sighting--a2c4c1b7-9131-4b7c-b713-66f8e54d6ba0", "sighting--9017b15e-ebfe-421b-8968-65c406962f09", "sighting--26986985-1284-4d18-84e5-184946ca1aac", "sighting--c845747a-a7fe-4cb6-85cd-a11bcb2b13ba", "sighting--ef14a46d-3f9a-4c2e-90f1-4ed6879d84bb", "sighting--f7530d60-7243-472f-b6c9-a1fa11c31665", "sighting--fccc094a-0d03-4813-b241-bad415b8bff1", "sighting--29256db6-1e87-4f31-806d-4fe083867c6b", "sighting--0a761a8f-26eb-4139-b595-81096fc7cbeb", "sighting--a6605ae4-fcdd-485c-8e08-3177e51c86c5", "sighting--8d3e7e07-1860-4941-b66f-d6cd1df3d974", "sighting--48508e21-e851-4486-945e-e991dc66ff7b", "sighting--2a5fcaae-7f8d-49b6-b8ac-688a44c5c947", "sighting--8433282a-ce40-4bc2-86da-69a96508b70c", "sighting--0d56a621-2202-443c-88ee-de9999122103", "sighting--49b433c0-7619-44e1-b9e2-051de82231de", "sighting--7abd06ca-2f56-4d7f-8482-4ba59e35d006", "sighting--da311f4a-c5e5-4d32-bbb7-18499128d7d8", "sighting--83fd7135-62da-4ffb-9563-08809eb11e0a", "sighting--e34d3a56-a927-4f46-9612-2cdac899ca07", "sighting--1a86476b-a209-4e1f-bfad-1e402db7ae40", "sighting--eb129886-7a43-4718-8113-c27b2d6ab531", "sighting--23163751-c932-4afc-9225-be612f8f6804", "sighting--53fc8715-fd5d-4a41-b973-ad287d458a87", "sighting--80701423-9e69-456c-b98d-c9461da886b8", "sighting--8f6fe979-919f-40f8-bbf2-e8634ecc8cf2", "sighting--f3095c75-4fe9-4424-aca3-4a6ab98f6523", "sighting--586ce26a-47fc-410c-ad87-85d42702c3dc", "sighting--c59f93f3-1597-4ccd-8bdb-086de44d8043", "sighting--369dff40-09f5-4e8e-93fd-c610b84b7f26", "sighting--7e94117b-e34c-4ec7-8ec5-1b9f0591bcc1", "sighting--2b7d70ce-ae78-4195-8125-08c1fe38ae27", "sighting--170aaa55-1199-4ca7-8a2d-7f8dbce77b40", "sighting--3c6bc0f5-ea5c-4946-bbe2-89e5451b23ef", "sighting--12d60bb3-6186-4d25-9e03-8d11d13987bc", "sighting--26fd4cc5-2d5a-42a3-bdc8-a742c35e2798", "sighting--643b338e-9b21-4e12-8de2-72aa43e88f6c", "sighting--2a50454d-119c-458a-b0de-a395dc8d6bcf", "sighting--79177238-07e4-4212-8d61-24f08e343ef1", "sighting--001667e2-78f9-495c-9bc5-1fc970951d16", "sighting--e136d645-8acf-4b40-9ec7-f137782b6331", "sighting--35363cef-25dc-4615-b826-7b71f66a0fb3", "sighting--606f9a84-4257-40e4-a765-f9ebcbe6e8ee", "sighting--108e645c-0dd5-4001-b7a6-d172489e8704", "sighting--dd5affad-81bd-405b-9250-49ff8dc48207", "sighting--7d4085a7-05ce-4777-9c91-cb0e32aab1c8", "sighting--bad967a0-9bb4-4189-8ae2-ada58958a2be", "sighting--ef489574-056f-40ac-b746-2b581330b1e2", "sighting--d1ec980d-a5c1-42f4-8db7-bbde79a65a91", "sighting--fd4e9841-a485-4610-b25f-cd091eca736d", "sighting--f5cb167c-2dcf-49b2-8d00-f991b59e5fb5", "sighting--09601edc-bb62-4faf-afa3-08657cea34a8", "sighting--85b11b40-a177-45c9-b92b-08a424da2f79", "sighting--873cbc6e-937e-4093-bee5-36d314137cd6", "sighting--81ecfaee-7786-426c-93cb-1c40bfd780bf", "sighting--d93f0e1b-23f8-44de-b03a-65c4d5a77c85", "sighting--659f0066-a2ab-4380-97a6-e26a6f9aa7e8", "sighting--e3cbcc90-1c06-498d-bc13-39edf334a9ea", "sighting--5018969f-46fb-4968-8651-65f22bd5b7ba", "sighting--18b37470-e9e1-477a-9574-45c0296046c7", "sighting--40fdec55-a386-4943-adce-f11e5efd80f7", "sighting--a96b6337-2763-43e8-a84e-d606f247996e", "sighting--6f664d61-eb65-4de0-aa43-f41dd53c3b9c", "sighting--230b763e-f16c-44ea-ac37-1b8d8a10cd87", "sighting--cae00efe-3fec-41a1-811f-35353b33d9e1", "sighting--3b193f4a-3877-4898-9299-7aeaa16e1669", "sighting--c01ea53b-8370-41cb-a4c3-c8d474deb4ee", "sighting--ce48b1d1-8d87-48a9-9344-26a34f07cc79", "sighting--f591e499-eabb-4b43-853e-507da5ea619e", "sighting--ae1f08f6-622f-4bf6-9f04-fec32b88ed95", "sighting--92cf745e-a4f9-48e3-ae33-9188aab28bbe", "sighting--2e2e68b5-4fe9-4c0d-800f-0970bc54f428", "sighting--f67c4262-121e-4479-afa2-872c1626c7a0", "sighting--ae2a8ed4-4f4d-41fc-93a4-17dd1d3989c7", "sighting--c703d7db-38c3-4a8b-9be3-87c0525d3eba", "sighting--979e1695-5f1e-4602-a3ba-f005ae63c19b", "sighting--3d3e4759-8d83-4b4f-8292-a82f3ae2c03c", "sighting--795df456-5daf-49b1-8562-01c7a7cf6836", "sighting--21e0a1a2-c788-48b2-a2e3-0624082e4385", "sighting--bf49f0ae-c3bb-4648-9f48-90e3d8b1e61c", "sighting--1f0c2a69-46af-4f33-a91f-c1bae930f738", "sighting--803be6c1-58f4-4c4a-b9ed-cd6aedaf184a", "sighting--2b0788ca-afc4-48fb-8dbd-b1d1561faf74", "sighting--27e6412f-9eb4-4da4-83bb-7678653b5120", "sighting--b24cdeb5-e3e0-4c76-abfc-25d2f13faf37", "sighting--35a829b8-d1af-4f2c-a4d4-32912d7ed4dc", "sighting--5b89c1ae-ba5c-4b01-9b7d-fb6558a59165", "sighting--a7724660-0fac-4e08-8388-eebd973ee598", "sighting--9905b320-e942-4fc4-8cc5-d8351b88444f", "sighting--2afc165d-fa5e-4dd2-b4b0-1e10744436e2", "sighting--7c0f2aaf-a4c4-42c1-bd7d-f4abf8b069d9", "sighting--3fda7a8d-2ea6-460e-ab89-3492f4277252", "sighting--c79038c1-1ebf-407a-99be-d78e0ad1013d", "sighting--a4aa355b-a79e-43db-a98c-51d446e2f1c0", "sighting--fffe4489-e0a8-4c6f-b223-35fa0ee1a084", "sighting--4c8c8cb1-b631-4898-a318-6718903fb3d1", "sighting--cdae69fe-e706-4a3e-bcc1-ecf0b7df1115", "sighting--668d025b-91a3-4bba-b4b7-1d3883d2c86c", "sighting--d3cab3a4-fc6b-40d3-bbe3-5346344e50be", "sighting--a12c7a02-560e-4fc9-ac28-e5178bb04804", "sighting--7d09e741-983a-47f3-be35-132e4fe15e27", "sighting--682c57ff-bfa6-4f1b-a418-06af92c22f90", "sighting--16e03d97-cedc-4955-bea9-263498983165", "sighting--f73c6ec9-2e6e-44d8-8a0c-3ffadfa51b4c", "sighting--0207e121-cec8-465b-bf91-87a7955f44ed", "sighting--a5b08e4e-7a24-47f1-bcb5-09b90740d466", "sighting--9a53d544-f47b-4ac2-be8b-e422038de6b5", "sighting--4f5a0948-7f90-4e2d-9ff5-a2e94f54cb36", "sighting--38b8c282-40c7-4fb3-8bcc-b4534fb29fe1", "sighting--3bb324d5-9c9b-4f43-a4af-16d8bfa53456", "sighting--4f600b44-de98-4277-983c-fc5ebc5bcc1e", "sighting--ebdac8b8-0469-42fc-a62e-82e168b8620d", "sighting--8c7d50f3-1194-4185-98d8-e1b7e29820b0", "sighting--ff976da9-5077-42d9-a63c-caf89e1dcbba", "sighting--fa941959-74a3-4ec8-b7d5-1dfc6e63821f", "sighting--e29eb2d4-fefd-40c5-88d7-080c51c0883a", "sighting--a897c8bf-351a-49eb-be8c-21467dfdddd3", "sighting--50cf76da-3425-4bc9-a63f-31a3bdec3f57", "sighting--2ee4e16b-1b32-4c45-b417-3554d5daf152", "sighting--25363a12-6a6f-4644-a8c2-89fdaf5adaf3", "sighting--4ec74917-ddc0-40ec-93fd-92df9731329f", "sighting--efcbfce1-bbd7-4c7f-8c4f-4b1ec2717cb9", "sighting--fb07f103-490f-4132-b559-d461995c1333", "sighting--3325ecfd-c55e-4f52-83de-49fb183d9466", "sighting--fa2ebbf7-2d2b-402a-a5d6-b46463695d9c", "sighting--af0bef0e-8b64-4eee-991b-055f587b2ee6", "sighting--574271a0-9b08-4970-a884-5d3d621d10ea", "sighting--e82e8263-4fd5-4b53-a785-247a264c851f", "sighting--64d6b67d-1039-47b0-ae68-9dc6412a49c3", "sighting--d44cea5e-6263-4e92-bb98-469acb798e5f", "sighting--187e7dec-5086-4601-a906-a13876e39462", "sighting--02d2401c-dc6b-4f6b-aa6b-242b4e3f2c15", "sighting--567c18a8-7a64-4495-8c15-7b04eebb0d3f", "sighting--80ff6ce7-a283-4615-8a7a-8441dbd27991", "sighting--dd6ca7dc-c182-49f5-9ee5-10571b024a6c", "sighting--cc264da7-63c5-4b82-abea-ad4eab26a59f", "sighting--534e6da2-f8db-4382-8f1c-63b3c5270735", "sighting--2088f813-158e-407b-ae2f-f9a6d0f3813b", "sighting--14c417c0-483e-4194-ab3f-b393d4126674", "sighting--89109266-b126-45f4-a3b8-6d58874835ac", "sighting--d19609f3-8c10-4f13-b682-db42432a5c08", "sighting--9f42fe2e-d87f-49cf-becb-26fda898dba3", "sighting--f565e5b4-144f-42dd-9491-b3511a98407a", "sighting--5ec3d113-e3d2-4497-9efc-615289a2114e", "sighting--b2e5cc24-e2e8-472b-8b44-bb9918a03fdc", "sighting--b39ad82a-cd49-4141-9c9c-80b2782195cb", "sighting--5507dc73-5102-4c1a-b2fc-79fb8fb66dbc", "sighting--db077b49-57ea-4ecd-af0a-effa1b4996f3", "sighting--da5e9eff-b567-4f17-9943-04a9e762e594", "sighting--5c08bfca-a678-43bb-8ff6-46843f295c02", "sighting--f967fc8e-99c7-4ae8-a02b-edd1ff0aaae1", "sighting--1d53407b-31d0-4707-a08f-41f6fa23facd", "sighting--e8ec6b9b-0615-4474-8110-75043db78a6d", "sighting--033a323d-b457-4f75-8272-918252ca3866", "sighting--38eb09b9-7605-4034-9318-6e85cc3d439f", "sighting--2b73e62d-7886-4ede-a413-893337d04a1d", "sighting--f8ebfb67-6fb5-4c14-9db6-5016261670c0", "sighting--7422b71f-9948-428f-bbc8-5e53d783ebdc", "sighting--0dfc7903-ebce-406f-b3b4-77bb439c09d9", "sighting--ea70abcc-fc2b-4eb7-846c-3ad8426d25fc", "sighting--ec5c3f41-ecb5-4bbf-84df-57a2cfd498ce", "sighting--4ef54048-a03d-4dd7-abb4-3f3b69771b60", "sighting--f49bb490-e343-4da1-9388-ffed941a15ac", "sighting--b9fcbddd-08d6-40d1-a419-bb294b18a8ac", "sighting--5ae4d3cc-0361-4819-8578-77c88204799c", "sighting--faf705ec-ebec-43b2-8d2d-3d894aa7cf1c", "sighting--b9b91af5-b704-4557-9d39-1d9d5c91ac97", "sighting--18c7dc2a-3eeb-4e7d-a012-f57dc3de7f87", "sighting--281d501b-7b1f-4625-ba67-dbd7249d844f", "sighting--7c353735-d258-4724-925f-53f9f30dd13c", "sighting--5f9a0938-4a90-4622-8e8b-dfa2c5b91632", "sighting--9fae4493-3e38-4221-ab4b-b133c7287e4e", "sighting--1dd1b9f1-a5e6-44e4-b34a-b697d42888dd", "sighting--fa0f49e9-9f38-4fbf-851c-2dd3300d7895", "sighting--24d0de61-753f-490a-a57b-95a9cc249af4", "sighting--5ad42910-6f03-4fa1-8ceb-bc1d69b6aae5", "sighting--ac48d4c9-ba42-44b6-8f61-07112ceee633", "sighting--49afe72d-dad4-40ec-95fe-d92234b65ad4", "sighting--eeec379c-b07d-406a-8bc4-4ef233342ef1", "sighting--26f425c1-b5dd-440c-886a-ac1177813c41", "sighting--ef70fbe1-0fa9-4589-ad8b-bd29147d0e91", "sighting--12815efe-8a6c-429b-a9a2-32e6b497162e", "sighting--0d79c5bf-9bee-4226-aef9-bd04594670d1", "sighting--87baa753-0d8a-4736-a1dd-afd08413b022", "sighting--3c17b3f6-277c-4f01-8b56-0a2021211197", "sighting--5f494d50-1efa-412d-9a5f-6d8a57a63802", "sighting--dd71863e-6ebc-4d4f-a653-210da75118e6", "sighting--9b0514f3-08c0-4c20-9b20-e39a1e6b8d88", "sighting--832d252d-ba6d-48d8-8993-91fe47ce7283", "sighting--a622ad8f-84be-478e-983e-4ded309b497a", "sighting--15111656-0294-4add-93d9-bfb4c2830c02", "sighting--781f8ed6-80ff-4fbb-9e39-e1cecea85305", "sighting--1f44c92d-9502-4dbc-bc98-1295ee3baac6", "sighting--32cd17c7-8c49-419a-b732-0406b724371b", "sighting--3c94e8da-f733-408a-ba57-1203b201946a", "sighting--75f2b877-85a3-4980-8968-91eb9f6668c0", "sighting--6bcd9009-633d-4927-a274-f7d63c0f3dba", "sighting--86530109-48b6-420f-b30d-3af0486d054f", "sighting--80c278eb-060f-4b90-b276-1512eebaf526", "sighting--d81db889-d62b-4b9b-8969-0b51ec1be084", "sighting--06a0bfc5-b412-4c8a-a44c-161497bb9eac", "sighting--b8a2ef13-b2a7-42c3-a6e6-4e398be6315c", "sighting--304461ae-47a5-4350-81f4-4d9200b4ead6", "sighting--60618a67-e416-4948-ada4-25761f78e264", "sighting--92979fae-dcb6-491b-95a7-1465500985a9", "sighting--a35e5c99-b305-45fb-8b15-80d9bc5d549a", "sighting--b2f4fc9c-414e-4154-b107-9722a34103d7", "sighting--8f682422-a7f8-4344-ab70-335ec7b822ab", "sighting--2ee24ce4-5be0-4b58-becf-0f7ee8d9dead", "sighting--258b0e88-9940-40f7-85da-bb8404d313f5", "sighting--d3e1f1ea-456e-44b7-896f-1598613c8ac2", "sighting--7f3553fb-9341-451c-aae9-7a8d71d9ada2", "sighting--147da2b0-5516-4030-a067-8c0958c6ba61", "sighting--0b232fb1-b68d-43e2-b63c-167f6b42529f", "sighting--dafcee06-dad4-4547-9895-be65ee0ff865", "sighting--3e383f42-2ee4-4f4e-acf7-9f39e6fc05cf", "sighting--debfb39f-ea6c-4f7e-8c20-1443b1215cf3", "sighting--573b33ec-2039-4bd2-a5b5-f63fa738cc2b", "sighting--de986427-1998-4a89-b6e4-862fe2666b22", "sighting--e541544f-739a-419c-9716-012087df5e66", "sighting--758dd0c2-2a57-4b42-837b-048f2cf64b52", "sighting--5e2dd671-196c-48aa-ae6a-6eacf8a46caf", "sighting--ad791c40-1221-4493-8658-7e0c2223cdd0", "sighting--4d0953c1-7755-4a76-b9d6-c1f902fa60f5", "sighting--f521139b-39f6-4c82-8cb1-1d12f470401a", "sighting--23c27fe4-dc45-48f7-a572-16c78509ffb4", "sighting--752dcf49-e910-48d8-907f-b52b6803c7b4", "sighting--7d818dec-f2ba-42b0-8fc0-8e66ef3f5988", "sighting--c431381e-bacd-4b96-9e78-2484e9bb1479", "sighting--b4b030af-85fc-4b1f-a73a-10bb6c58ca79", "sighting--21e5bf34-8c92-4a02-a871-959c45710a5e", "sighting--acb88aef-7134-47d8-9def-68cd4b0750a2", "sighting--f381933b-bd8f-4bf6-9bfc-704f63d008d2", "sighting--4a2ebff6-9e20-4a08-9557-a6e9cef6dce6", "sighting--8bda873d-f7a7-4df7-b153-898690f29902", "sighting--0d589a2a-e1de-444b-a061-e2f0430b70ee", "sighting--e89386ef-abfc-4df8-beab-fbe62cfbc4cf", "sighting--3eff867c-e812-4a3a-b501-fbc382dca373", "sighting--441e4227-1e5c-4c6b-b63e-6ca643f3561c", "sighting--57f91205-5ec3-4dee-a395-036de5870f69", "sighting--0a10466e-e651-40fe-a205-5b61c3c1dde9", "sighting--08831938-8551-4b4c-b830-6f926b6f99a2", "sighting--cfdb4742-ec0f-4742-a0bd-9055f3218f97", "sighting--f235ac30-dab1-4b50-8a43-2293aecb20be", "sighting--dcd67392-aea0-4561-a9f4-01261cc3910f", "sighting--67fde501-a697-42b3-9f0f-6b402133b90a", "sighting--ea553bfb-d035-4beb-9e73-91c028dd7f2e", "sighting--a0fee3ca-92a2-4ba9-95f6-df974a15654b", "sighting--4004f73d-1b23-425a-bc87-75fa02987706", "sighting--8b4be3a7-ce50-41ac-a2df-19181076e35f", "sighting--e53c5b02-9055-438a-b1b7-9bfc8b68bdfd", "sighting--891a9be4-a7e1-402a-9d55-3c6e6b27ff03", "sighting--9a66937e-b127-4139-a149-e9941ef397cd", "sighting--2ac3d388-72ae-469d-9c23-29c85beee7ae", "sighting--b6857f14-dcc3-4417-9435-f0a73f5aeebe", "sighting--b1951dfe-772f-41cb-a718-56cb153c0808", "sighting--53969334-36ee-4184-bbb4-4c355437a4df", "sighting--70298509-f11b-4a52-8920-693fdf0f40d4", "sighting--5a56afe2-5267-4c18-84c1-14f41b6b5886", "sighting--deb297c8-e015-4e5c-bb92-310e8aeda81a", "sighting--25074e5d-47e6-4929-8da6-8fd7141d10a1", "sighting--cb828f77-8c08-41e3-a9a7-a2df21d3c2cf", "sighting--f257cc72-1322-4b5d-9b46-5f7d79142284", "sighting--0bf100a7-9e28-4388-882a-1675694ea32d", "sighting--a691e06b-9764-46a0-8575-8e629d877bd8", "sighting--bb36de9b-79ee-42d5-a2be-f6e14fdfa07f", "sighting--49f3613b-7b73-49a5-93d0-7150a66256cf", "sighting--ddf05fbc-6e23-4d91-b4aa-f140148347bb", "sighting--afa5c968-7fc8-406d-8f52-207e6c157e2a", "sighting--129ee6c1-0707-4674-894b-e63f90aa86e2", "sighting--7288e32e-eb55-4585-b17e-a7b7444b290e", "sighting--7696d117-a550-4112-b531-1821d348c49d", "sighting--7f2a0266-5be1-4819-ad8f-dfab17d94db1", "sighting--8ef7965d-0866-428c-b88a-5cb2d422f994", "sighting--937303ff-e025-4b50-96de-7c9dce7e4426", "sighting--1e9d32d2-19f5-453c-bfa0-b0ae3ec36121", "sighting--596cb551-cba6-40c2-8c08-88939d531f59", "sighting--ad2e5f15-e7fc-4662-807c-866ac96888cd", "sighting--1322f60b-d937-4944-bcdb-8ed53fea8fab", "sighting--ef024185-4ba8-40c4-982f-b77ecd2e1d1d", "sighting--19e00e73-ef2a-47f2-87ea-be3655fdc73b", "sighting--82bdbb17-7c20-402d-aa0c-af2699b02a3b", "sighting--dee08549-d453-441f-b418-e2d7b0ac246c", "sighting--ade26728-d4db-423e-8d0a-8367dd3f768a", "sighting--f13b311e-3dd1-4ae7-a95f-03efddb24c88", "sighting--5b5bcbae-cec6-45bb-bd4f-34ae8f9301bc", "sighting--8e368e39-e9f2-41fa-96fe-26d8f900af47", "sighting--2d8fb400-4b27-41a1-a2b9-20ee1c2863d6", "sighting--5f225aff-422e-42b7-9d5d-07adb7e14d8e", "sighting--0987af02-52e0-4066-adce-f04957283c9c", "sighting--667e5eea-bfae-4446-bca5-62d8668883dc", "sighting--f121afea-c0c5-4a2a-beb2-fef17ebc6ed2", "sighting--2fb2f385-36f9-4688-ac70-5b58a272fb7b", "sighting--5a6c70a0-59fa-4e40-bac8-b4b6ef89348d", "sighting--73daa24e-6e53-45c5-ad14-d550fbbc7c88", "sighting--7ca2e73d-2b4b-4493-8fdf-2eb8b21fc4ab", "sighting--ef641240-57ad-4409-8973-9fb1e990b654", "sighting--5779c900-4002-496e-8b30-c6dc26bc62f4", "sighting--3caf613b-34a4-41ae-90f8-c22192850063", "sighting--6d8482e8-c898-41c0-982e-762ae1036b0f", "sighting--540c9ae8-6d67-4ccd-8f38-2df532218d22", "sighting--5d2a74e4-602d-4fb3-b082-e0605366827d", "sighting--ee31b23f-646f-4ba2-ab12-54e1fc175ea6", "sighting--3482a0bd-bf0f-40d2-9a6c-fdd3d9f39f71", "sighting--ba037a7a-f0e5-493a-882f-2db52ed76253", "sighting--9c1d79d4-5615-4502-88df-c954acd181e1", "sighting--fed81c28-d124-45e3-8e14-18b516c20d32", "sighting--bea6a532-2b66-47cf-98db-cbca76210939", "sighting--4cb5f407-e935-448e-b78d-f6a71c623396", "sighting--00e4c50a-df19-4587-92dd-1023fd0d3ded", "sighting--babd9201-8c93-4683-ad77-1d8fb729f82e", "sighting--839ec4d4-84ff-490e-9ae2-d2be10579690", "sighting--d93cd844-633d-497e-932f-a8a41099de5f", "sighting--d79e2c2f-8996-4e64-80ea-fbe6d79abf5c", "sighting--a3f822ee-d2ff-4cee-8d39-5d2918f364cb", "sighting--cc39b7fe-b544-4040-a13f-c1d40ea32459", "sighting--2ea04ad1-d371-4a36-8b8a-47fad4b7807c", "sighting--1b0d31f7-2d72-4ad2-9793-1e9f1723a106", "sighting--a5fe6c16-9dd5-4930-ac4c-bab5e34e48f4", "sighting--fd7ef67f-b45f-4415-b8f4-56afcca6c188", "sighting--038f8fb9-9df2-4d1f-ac79-e1b847a3a793", "sighting--d4a22c5c-59e0-4a81-9f85-4114574472bc", "sighting--eed3e0c5-026f-41d2-8f71-a548677dd255", "sighting--bc652257-1053-4166-ade0-8f4c771dc279", "sighting--0f51a7ba-a253-4fc3-b72a-5640fa55ef91", "sighting--db59344b-90b6-4259-a980-c4a4dba59f42", "sighting--0fe8fcd2-32d9-4a49-a6c0-8ebd70c986ae", "sighting--7dc82ad8-576f-45e8-8b47-b3d6d9416967", "sighting--f333be5d-56c7-4cb2-9da6-79d853264b71", "sighting--9a898d17-cc00-4d2f-b37f-b6cdb86a49be", "sighting--7586bca3-045f-4e0e-a670-bd7c38290aef", "sighting--d46d5209-8900-4809-b862-ac39317a3b08", "sighting--11f0f25e-7a6f-415f-94f2-a45927d34ceb", "sighting--92074420-e3d8-4be4-a944-635fbed5d980", "sighting--ed3a06c7-a583-4c28-90bb-c1d0fd3f234f", "sighting--26ce3516-98ca-422b-bf31-8d3336c562ad", "sighting--b1a629cf-5449-4e58-9579-f3231089fc46", "sighting--b514d272-3d77-4ab0-ab1b-09de1b6e6939", "sighting--a3312845-08c6-4951-b30b-3115db2cfadf", "sighting--07b40795-eef2-4dc7-b1df-b30e657629d1", "sighting--63cee73c-fbff-442a-a772-f8096cff655d", "sighting--f672b57b-09b6-47cd-bb66-402f57592d9c", "sighting--1ed667cb-dee3-4320-a218-8ed8e1e1ecd9", "sighting--f7569184-a48e-4408-ac71-8791efdfd524", "sighting--b20bcf47-dd3d-4d1c-9b4e-1ebddfa998d3", "sighting--0f7691f5-cbd1-4e8c-bf95-d99448ecae3f", "sighting--7c2240dc-79a0-43b3-9cb4-0882e486a06e", "sighting--4b200b17-dbaa-4554-a216-4bc84983bdcf", "sighting--95b7edd7-ef46-493d-a554-c56925340d58", "sighting--09167e52-66d2-4c82-91af-78740a798681", "sighting--697f693f-66a7-4fc0-b471-ad2af92aed40", "sighting--9e248de1-7f4e-45c6-a6d5-82ced17a4021", "sighting--33ad5311-2051-49ea-a67c-6bee11b2a6fe", "sighting--8a3eb30c-7b6d-468b-b538-f72496db1ee2", "sighting--f7ad414d-04d2-4dba-ad0a-ab21c546ffaa", "sighting--4777e701-73b6-4e6c-91ef-5d5ff3d6af05", "sighting--a128bccc-3713-4679-97c3-514ac0fabbd2", "sighting--37137e0c-a2c5-400c-b187-49f590de3a47", "sighting--426b1322-92fa-4396-9b11-5875b4bd5496", "sighting--36221ef8-9f78-4fbb-96de-20c8b3c42c25", "sighting--b385e977-9738-42bb-bd10-f7e4567cd951", "sighting--31d9d19d-0a3a-4d59-a129-6ca32d481edc", "sighting--e56a5bd0-ec1a-4c9f-9701-e9c6004062df", "sighting--6d279239-eac9-4852-8cd5-ad5b21217c4e", "sighting--f26b89d9-0a19-4f1f-9622-f36fb44a4352", "sighting--d718e027-db1e-4daf-8a5a-06eea5e2ce44", "sighting--bd6e46b6-7d84-4bf4-b9ea-9bdb0c3d9c48", "sighting--04804f22-b62c-49e9-b525-70cb8ca088c5", "sighting--067b31a6-3670-4ed7-a1e7-0e5d45909290", "sighting--374fcdd3-d31c-4200-b288-6f68265ef4fd", "sighting--98aa0d4e-c77d-418f-9573-dc6d38649300", "sighting--0be758ed-50d5-4e41-ae52-5f2219bc5a70", "sighting--7cef4928-5c8a-4778-948e-a85e373f1f2c", "sighting--2f9b7a52-16ad-4b2b-a7fe-1c9c3e99981d", "sighting--32e6d7bb-a2c9-48d9-b479-ba5b7e70162c", "sighting--ed5aaf2e-8e0a-4476-a02e-1c93caef84fa", "sighting--bc860e97-a7c4-4a73-9f6a-bf36587c77e9", "sighting--3fea127a-e529-4561-80f0-c41184172e37", "sighting--6f49b801-2e2d-4ef1-b7bd-af66952dcf30", "sighting--fe32f187-e921-42f8-811e-c38cdd9cc713", "sighting--1cb6a8f4-60f4-4685-90a0-0e721d5afd0a", "sighting--ae71548d-2514-4b27-99bc-8a0414c49a70", "sighting--702ed44e-6a57-4a4c-bfff-a24d65c78917", "sighting--a7fffdb5-b063-49d9-8a3f-bc4a3d969f2e", "sighting--542414ad-4b28-44f8-bb23-702d8edb38a3", "sighting--926876c9-b78e-4256-916b-661582311c15", "sighting--08ff5913-94b6-4b39-b066-c332f219aeb5", "sighting--087d8d58-9f37-44c9-b8ef-62dbe0a14346", "sighting--e3a7eafc-6cd1-47c1-819e-ae1a5e86d575", "sighting--073e22f2-7545-488d-955b-b494cc07e151", "sighting--58bae41e-0168-4645-8b9b-7696b03bd2e3", "sighting--adef7752-51b0-445c-a9e3-3c144186ee93", "sighting--1153e5d2-5204-4258-8650-e8e75ea2ec26", "sighting--11c13a3b-46e2-427f-bd60-b43e824f9727", "sighting--fed81705-dbc5-4d60-a12a-3fed2fb02fa6", "sighting--ad79d4a6-253b-4963-971d-601c9df3d06b", "sighting--fcb893f7-0b2a-4cd7-82e0-c7cef7c2cb3a", "sighting--512e9535-2645-4485-bfdf-ba2552f60a98", "sighting--d27967e7-45a5-49a9-bdec-fdf6822a4636", "sighting--4f27574b-cfc3-4044-afc2-e717b3712e73", "sighting--5e54737a-4ae6-4921-a009-3af2e2924510", "sighting--20dd1577-3c35-4bb1-bb29-011e075b2a3e", "sighting--7ddb72ac-3881-4cc6-a8ed-f1975e0c0c44", "sighting--cdc39f4f-36eb-4857-bf41-64231deda932", "sighting--3ec66a05-b448-4d26-8912-fb25e5d24817", "sighting--923f5551-4e39-46c7-a223-4b55cc5b3afc", "sighting--3f3e3736-68b7-429f-81f7-b92bcbdf85ce", "sighting--5d0c135a-2f01-4bf0-baba-0945077f67bc", "sighting--fe64a18f-c01d-419a-9a20-593c8697ebef", "sighting--8968b586-9866-4f65-87af-196889a15272", "sighting--85a2b2a2-e4b5-4202-a91d-90e1f9206b40", "sighting--f6ab56a1-929f-4481-9ac1-06a701206312", "sighting--e0cd537c-0dcb-4979-bbc7-1fa013ebf14c", "sighting--0716d76c-f31a-4a78-a78a-8239fc444b97", "sighting--f6763407-fe0b-4862-91fc-84fac532b414", "sighting--6970c00e-d6e0-41bd-a1db-a145087d0268", "sighting--fc05b6b4-9a31-4674-866c-6d0132cdab53", "sighting--04add09e-29d2-44b9-b314-89f7ae2c1b3e", "sighting--0ff355ed-f38f-42e7-8d5e-24aabd322cbe", "sighting--81d2d722-f688-40e0-b46c-58ca0740da97", "sighting--c5cb13b1-e1ab-4ecc-a26b-45c7d17790a0", "sighting--e170bf55-8c40-4104-bb76-4154bf2b6cf0", "sighting--ad929871-954d-4833-b4c3-56a334bc3d3e", "sighting--735a028d-2be2-4fc3-a322-6e3b93c2f926", "sighting--5eb7a53a-2b34-434d-a5f2-db0f82d71727", "sighting--7e9488eb-c656-4574-98d1-b8e771cb5393", "sighting--c1021eb7-ee17-48f4-875d-85eccb56e645", "sighting--0e72f8f1-c8a9-4313-8aa1-a7cb65288480", "sighting--c8a8703d-81f9-49a9-9c61-65599b9b9abe", "sighting--55e93833-abc4-48ce-9b47-6ee862971508", "sighting--2c54601d-14d5-41a1-a2bd-bfc52732ff7f", "sighting--7dd2a58b-1f23-4bd6-8393-10e1937335ab", "sighting--fde54bc5-bf35-456c-ab59-a0bbe8531305", "sighting--7583f682-f2a8-48eb-8ba1-4d9e3ffdd264", "sighting--c73e54ab-2da0-4f38-a1e4-039e80975f13", "sighting--1f7d905e-a7f1-41cc-ac63-15fcfcd672e6", "sighting--b308b4be-27d4-4425-a5d3-7122fa8b6446", "sighting--4365e0a4-b0e7-40cb-a8e5-bcedb8b420c5", "sighting--77a081ec-8359-4b9b-bf42-7f3111af28a0", "sighting--b4f14400-c704-4ca0-8a56-2a20c7ce90e6", "sighting--407a6541-fd4b-4de8-aaf6-7237e373f537", "sighting--cc83ba0c-63ad-404a-91a0-a7b51e70cdf8", "sighting--7bf0d3a0-6c3a-4dac-ba30-2fb032cca461", "sighting--f8d7508a-ed11-48be-960c-800c13efc74b", "sighting--c23aa349-7e1e-499a-8006-2e048155e4c7", "sighting--8dd9f306-cd56-4155-b75d-361abc9313ca", "sighting--cd099acd-6a58-40db-bb72-4ce76d7750d6", "sighting--609af2e8-9c84-4546-9ad7-60ab1176c9cc", "sighting--7076d0c1-702d-47eb-b940-ed90b9dfb188", "sighting--71eeee59-f6d6-4e06-a1d2-7c273dff148e", "sighting--3c72afb6-5bd7-41fe-a72e-4e066029ac29", "sighting--03a9d46c-b4a5-4689-ad0d-a96c376e9f34", "sighting--0875c962-8326-450e-9d58-98cf69b3b187", "sighting--7f9dae9f-6f94-4da3-bd64-b66ddad5ce34", "sighting--8d18ffb4-f6d7-4a01-9505-8267dde9b069", "sighting--ea936e41-6fa0-4bde-9057-48ee71cfce40", "sighting--bdd3bc5f-1dfb-48b9-8bc0-d823d814f94b", "sighting--252415be-797f-41be-9047-e72cfbb3f743", "sighting--ba47723d-5210-4bca-be82-22a86340cc2d", "sighting--fa800f19-bdc0-461c-8dcd-e1a2d99495e0", "sighting--0f9ee115-ecae-429b-a06b-0b31ac4bb789", "sighting--b8ae84b6-0c89-41d7-9d69-f51f52102be0", "sighting--1a130526-0450-49ea-bb9a-15b1a3405783", "sighting--cf939701-0596-4a6f-bad8-bf9c15828e86", "sighting--02565d4c-9218-4fab-8a73-6f4ec085012b", "sighting--ef7b6d59-e1fc-4895-a097-392bead6220b", "sighting--de6418c1-b447-4f6c-b8f3-72cc2b1e869e", "sighting--b18838e4-1cdb-4d35-9388-20c84a6ef1af", "sighting--23476877-cfb8-494a-8d91-f8298771b4b6", "sighting--a63cf93a-6d60-44f7-9a05-b2cf88365c29", "sighting--3b3cd557-f27e-49b7-a89c-5f9a6bf178ae", "sighting--ad014bab-d5b5-4847-8148-1c545043026c", "sighting--b4ee5106-dfc8-493a-8a70-5106c15fb9ef", "sighting--d404d098-e104-4696-9e8c-93b46d3c49ff", "sighting--75d205c0-c463-4bab-83ac-bf50cdedfda0", "sighting--e8211968-eaa2-4975-9699-406eb92546ae", "sighting--5cd37839-808e-4c54-8a8d-f6783d463711", "sighting--f811391a-918c-4b50-b4ba-4535056e806a", "sighting--e1c73d70-0773-42c1-9d93-2038dd74bbf3", "sighting--4d765f14-c31c-4b29-85af-f7a5ecb21e67", "sighting--fb59c1c5-a709-47e0-95de-b632e9ada279", "sighting--7e06c23f-af29-433e-b02e-39508a9a6747", "sighting--0858a795-43e3-41df-9687-e87b8da08307", "sighting--87e8ff0d-4057-4794-85f2-75b6714c51e3", "sighting--08c50a05-3da4-4f12-a017-652efcda45bf", "sighting--4b315522-bf80-4673-8d56-afe112d05449", "sighting--e72b4358-be86-4839-9f3f-10bd3c1b950b", "sighting--d84c02ec-7399-4916-932f-49e7ec4bb975", "sighting--1159c55a-bdb9-47e9-812f-1284aeac9e09", "sighting--215ec12c-2924-40b2-a0c0-54b93a392384", "sighting--8b8837c8-867e-45cb-a283-8188bedbecc5", "sighting--01def8ed-ca19-4aab-9fcf-f86f1c1bcb80", "sighting--3c26b667-4d0a-4444-af19-9c37ac0b9b49", "sighting--30fe791f-c892-423b-a025-76ddde31e864", "sighting--ca6b293f-52f5-4f23-8e95-056bed1791b3", "sighting--8ebf6c67-324a-44fd-8296-9e13b26bcdf2", "sighting--c059a1a3-5345-49d6-bbe2-0350151489bb", "sighting--8a6f8948-bb76-485e-a890-315c04abde55", "sighting--c8d4f78a-2220-4234-9c68-e9b6264e9c4a", "sighting--a1515e09-fa29-4efa-8268-403c18edd371", "sighting--5f7cd703-72e1-4f39-b322-9c0e70cdf6bc", "sighting--a989404e-0392-4e54-8201-363fb6bbb277", "sighting--aac0a237-a413-4553-be39-0fe0f0af493f", "sighting--ac8b0592-4619-46b9-870e-ec367332a54f", "sighting--9e47bada-ed7e-432c-8d11-01f26f855999", "sighting--cc47cbf2-f168-4297-97c2-053b6596b152", "sighting--2659123f-f5e0-48b4-80cc-1edef3b603cc", "sighting--79d91e36-a121-47a4-a1dd-5c3abfa1a3c4", "sighting--1018b81f-0251-4d69-8b41-e9dbda5735c4", "sighting--f29b3be6-0628-49a1-be48-ebf94e2828c8", "sighting--a99c56fd-8ecf-45e4-b84d-8d9dccacc784", "sighting--852a891b-ddcb-4db2-971f-267c4a803609", "sighting--44d8b5dc-a34f-4e2c-8fbf-019a542224af", "sighting--639a2283-fc67-462e-819a-57e66111a244", "sighting--f2998c9a-10fa-4ea1-805b-589e240875a2", "sighting--07cd77e7-102a-4eb5-adc7-91febdf2c428", "sighting--a6b94e2f-f2cb-472c-8943-adb2de5a14bf", "sighting--9264d206-28c0-4272-a5a2-af9b7e91d93b", "sighting--be94341a-bde9-4fb2-b348-652979b31981", "sighting--c5b84c5f-955f-4972-bc56-b443c7b5fe94", "sighting--8d6c004e-d381-4cd8-bd76-7e87115099fc", "sighting--40fc4728-0262-4a30-8bb1-3a6cc82ecd39", "sighting--d3c8eb60-cb0f-4212-8afe-fc521929f652", "sighting--8378c0bf-5f11-46ca-9af0-dd397d5bc5c8", "sighting--246bb40d-aa74-4a30-95d0-23c6ed5521c6", "sighting--5c916c32-353c-4d54-b079-8576475b068d", "sighting--49ac36be-e2db-413d-8db3-df013e788266", "sighting--cfdda012-c0f0-4762-ad5b-bb25efe75641", "sighting--f6621cd0-c00b-4272-b32b-1693d6381238", "sighting--e93362e1-a902-4867-a2f7-5d5e36857abf", "sighting--030ccffc-f3f9-4f22-af91-6212ca2438f4", "sighting--d4437f0b-87c1-48a7-8f49-82b9658c422b", "sighting--1b3d1557-8521-4ff3-b4bc-2de0332a7f10", "sighting--83f96261-b792-4bc2-a6bf-2490a8c44e54", "sighting--80b60d5b-5a54-4d0d-ba54-3dd6d4310d6e", "sighting--a7c49ac4-adf8-4a02-9039-b69cadb7d41f", "sighting--594140d3-0cb3-40c7-b0e3-7c60ccc8b94f", "sighting--ad42c435-a470-4ef0-b3ab-11e4756b9e93", "sighting--09b9994e-c493-4bd9-b87f-f4372104dba7", "sighting--617bb1b1-ed93-452f-806c-e615b67083a3", "sighting--17d77043-2710-41fa-8058-6ae39192ebd8", "sighting--ed7f7e79-00c3-415c-8493-ac8c86b9f8b2", "sighting--b287457c-667a-45a6-a3fa-c223002b46d6", "sighting--88b613e5-9e97-4914-8ed2-de4076c3336a", "sighting--5e91c604-69be-43c4-90c9-59df2cb963c8", "sighting--c4a0dc10-885c-4b5b-82fd-21a4085c3ec2", "sighting--754d12fb-2ef6-4e02-860b-0c21aaf6e891", "sighting--1bc23f0f-c5ba-4849-983c-138ae05dffe8", "sighting--c488bf71-3b82-4d26-9ac1-61ea2f3a9a4a", "sighting--9a15b1b6-3dba-4f7e-8f6d-519209f59593", "sighting--35591831-5556-4d8b-a410-067d958e4e86", "sighting--86a69024-b7d0-4513-89d9-e663bfc75d0b", "sighting--898c9f3f-a140-4d27-86d1-efc37c4ac6fe", "sighting--01b5f6f2-2ebc-4871-95bf-314f6412ab9e", "sighting--0c444864-067a-4a64-9dd2-6cac39eccd61", "sighting--985dea59-e33b-4da7-94dc-1df87fa143ad", "sighting--6a0f61d5-8a2f-4d2a-ac64-1379769c6bae", "sighting--d974006c-0249-4982-a976-8808a614bdfc", "sighting--368fac86-9d55-4058-97eb-20f6d40c1088", "sighting--d25bee3c-deb3-4cb6-b86c-9c39a7f72a12", "sighting--5d621efa-4199-4046-80a3-1556cd287bed", "sighting--6f0443bd-e8d8-434b-b465-4b8414a55791", "sighting--7a2cab07-577d-42c7-86c8-2606851a0471", "sighting--9128cb5a-8c56-4e75-b2ed-f14052db2014", "sighting--47cd55a2-3cba-49cd-beed-0264be561d3a", "sighting--3199ec3b-09d2-4367-93d1-013698f0df3a", "sighting--a82b8e66-cb2e-4297-944a-a9df5bcff980", "sighting--7d6e9ea0-191c-4d20-8f36-73f08be1897f", "sighting--2b9734f7-1058-4fd3-85fe-7addd1135365", "sighting--3671003b-9412-4bc1-ae1d-3b7f3e4ace11", "sighting--4a112e38-51f6-4eee-8cf0-b57e3515d3bc", "sighting--e604e4ed-d538-44ec-a800-16a6bb27dcdd", "sighting--9d24f322-0548-462a-a7fb-daa5ecc998a6", "sighting--106a233c-9d37-4620-9388-7ce7838b5dfa", "sighting--e58b0726-4e21-47aa-8601-9a49c01ec803", "sighting--b4b8cb6e-5633-4e5d-9e91-f0416fa01172", "sighting--1f0694e1-3ffe-44ad-a98c-ea13803b4c87", "sighting--a021937c-429b-4f4a-aef9-226f7b5c7711", "sighting--4597e96e-efff-4f60-a4f4-95c8de49d5da", "sighting--76e4dbd5-a515-4da7-9e77-3af0771a056f", "sighting--4bbedfe5-86e9-4e53-b93a-51b182862f6e", "sighting--8a92d7c5-ad20-4be1-942a-29cd39723c00", "sighting--4b9f1897-27be-410d-9467-e73f0412adb0", "sighting--fa3a4195-4a65-4e97-8c47-78de5405c743", "sighting--e3758ca8-458b-4d5f-9827-8c660876ffc5", "sighting--ea4a6b20-0e4e-48d0-bf04-b1f0140576d6", "sighting--be51b84e-fa80-417a-b1e0-78bb36ee3aa9", "sighting--6ca64ded-5254-4159-acc3-16aa0ebd10f3", "sighting--12859598-af23-4246-8582-524d52516c1e", "sighting--64c8c64a-8bb8-44a3-ada1-454b022dc4c8", "sighting--243ecf72-7ced-4f0e-9fc7-abeeb70a77a0", "sighting--3344148f-9acd-427b-8afe-932ce1379809", "sighting--fd22b6b5-b18e-44db-9146-b3ac44ceb4f1", "sighting--7ba2140b-c66b-4d4b-a6f1-8da398b089f1", "sighting--2b78e765-9c94-4a93-b42b-a627037acc7c", "sighting--346c511f-04bb-427c-a5e7-bc87a9595f65", "sighting--56a6276d-7a33-496d-974a-b8c7326e732c", "sighting--87e66453-26b1-4ea6-9015-76684d53dda3", "sighting--44120952-2402-4391-b746-05564ea6428c", "sighting--621fe943-9a8a-497e-832b-f88e18198873", "sighting--3cba9b4c-3e95-43de-a6d4-819623707278", "sighting--9b206e51-f2df-440b-b0ce-24758379e8f1", "sighting--f6a5d52b-7eaf-492b-9dc9-1f72bef7df29", "sighting--08a7289e-bef6-44df-bfb4-fdea5a66fdda", "sighting--66f10c4e-c429-4ed7-9dd9-7d0eaee5d250", "sighting--34c4b850-cad9-4fae-930d-78328934b86e", "sighting--3c21e9b0-ebe2-435b-b25e-98d44e5dee3a", "sighting--d23bfec9-f849-4d33-9705-4c60182f54de", "sighting--d96e0149-2834-47f9-95a1-904fb0c99d55", "sighting--ab37842b-51a4-4ec3-ae44-d6167a56f040", "sighting--5e52ff51-a3e1-4df4-b723-091f6df08613", "sighting--0a739dee-44b9-4165-994d-be07d523d4bb", "sighting--9357204e-20a2-4d0b-aa39-946eb3e1db83", "sighting--2b330406-e21d-4be5-863e-7a89561604cd", "sighting--d4c15db9-21eb-487e-8771-0508b863ac11", "sighting--8e628b9f-634a-4880-ba6f-beac78689ef4", "sighting--1ab36456-4551-456c-aedb-08d5ff2a3a47", "sighting--c6ac8b52-ea06-4366-b8c7-8f4b7eb249cf", "sighting--31e19590-0cb9-4592-aead-25f6cef04cb2", "sighting--3cecc125-5c5d-4aa8-a3f1-83d480050ec3", "sighting--5267df3e-3701-4046-934d-ce4a80722299", "sighting--aca2e11d-f936-46b4-954f-23b70bfede6b", "sighting--d1d146e5-8890-452c-ad63-fd88e8e01b56", "sighting--58562a6c-e586-4435-9780-7390d8da3fcc", "sighting--718899e5-d600-4594-9907-5f046d10747c", "sighting--926a29bc-a962-457e-8fec-bb6796cff47c", "sighting--6a339e24-565c-47b2-ad5a-1c5c910486bd", "sighting--4cb04afb-b4db-4ee8-9bf3-0e25efbb441b", "sighting--14ddfe11-8110-45b1-8334-f29e6cbffec2", "sighting--6b6a3862-136d-4c3f-8ac3-28fc553d3852", "sighting--96247b78-ee34-4b3a-b013-d7a7c16ded2e", "sighting--41c7f0b3-b93d-4a26-bbd4-9fac4d080058", "sighting--b82251c0-c19e-4eab-8851-a8465558170c", "sighting--077f721c-70fa-442d-857c-dd4d8bd4b429", "sighting--dea5410b-48a2-4469-9d8b-b13f2efb7e3f", "sighting--7dde90e3-8104-48ae-80ef-08136ce3fe8a", "sighting--70688f80-9ff8-4627-8d20-ac42190a4bea", "sighting--18cb1e16-34b1-4295-b503-42a822c04f8d", "sighting--aee8d8d5-268d-4f6e-baa6-05cb18082de1", "sighting--43b7bc89-dc8b-4e1e-9946-769412a4fd1d", "sighting--323a4014-a7f0-4954-8255-4477e7873ba4", "sighting--fd429ba2-05db-40e0-9802-d6b0874b65e1", "sighting--1d944f0e-5fb5-447e-b8f5-24b761c9cad8", "sighting--a7806eaa-067f-4a1b-bbfa-560ec6c7749f", "sighting--3ef8f797-48ee-47a5-b76d-cf78018531d4", "sighting--542abbd6-da96-4b13-af49-9b71f6a674f6", "sighting--9821df3f-50ea-4974-9281-89a04f3ba79c", "sighting--b184081d-6d7b-44f8-a19e-d25408ad59e1", "sighting--4d19af77-60b7-40e4-b05e-30de9f21a03b", "sighting--1cddd1b2-48db-4afa-9c04-8eeda958f60d", "sighting--bd5ac742-222b-4d23-82da-2d668697c620", "sighting--9267dfe0-df0a-4137-8320-c008b91d239c", "sighting--4098eb4e-2484-4616-a8d4-caf66d5b8cc1", "sighting--ca9c55b8-c220-42ad-b5f6-e04caf6bcd13", "sighting--fe7703e9-56a9-4184-96d6-f15eab62cceb", "sighting--71c0f230-bc8b-4a0a-ad9c-54ba2e574eaf", "sighting--79087115-1f77-42d0-9968-f0d6f8aff2fd", "sighting--636ff4ad-4af3-4281-b3cc-794322d2cd23", "sighting--34bfc5e5-fbce-4774-9a07-9d31b744cad2", "sighting--3734a211-4e91-4fc8-a287-462f10ebb480", "sighting--211177b7-c044-4a36-8414-b63937115b8c", "sighting--8eff20a2-245a-455f-a492-0b1e1c6ffc60", "sighting--9fe43676-55ef-49d9-b2f1-b1524724453c", "sighting--b5cd4fd5-188b-4fbb-9d01-0a98d709c200", "sighting--6f0801b7-8f3d-4274-838a-cc586494e7c2", "sighting--4dceb379-b82e-432f-b987-a7492b04c7bc", "sighting--a0540a2c-82aa-482a-a889-4a3c59933700", "sighting--65db3b27-c8ff-4b73-abc5-54b78ed79597", "sighting--0a9eccd8-3c34-41c8-8d2b-08eff83c84d8", "sighting--65269a54-9b08-4a7d-96a3-32d34135fc13", "sighting--25716cab-7d75-46b1-8b82-4350cf545d71", "sighting--8ba6cec7-2efa-4fa0-b8a2-6fd4bef16cbd", "sighting--0b1c6ab5-de0b-4a60-8caa-eefe86d962cb", "sighting--4a615ee7-ffa0-449b-979f-ecc320170c98", "sighting--cf8489a6-0987-497e-b32e-dd13ba33b5d9", "sighting--7dbe279c-9f64-46b6-9788-80efd1b176b4", "sighting--0e3b9ffe-04ad-44ab-805e-6d899a8e505a", "sighting--6fe20e3a-797b-4d4b-8cf0-831c352f5009", "sighting--68b7387b-79ff-43ab-a86d-601a14e404ca", "sighting--a5935f75-b83b-4493-8fc7-b0a72cd96630", "sighting--bd87d1f1-56f4-441b-876c-78de10c9c7f5", "sighting--cd4f739f-f3e6-4628-a2cf-264c65899fca", "sighting--d941fe06-4ea5-4b84-a797-43de2906506a", "sighting--320831c0-a89b-4071-8628-c0c94515838e", "sighting--80a1f06c-1cb9-4b0d-96cd-6d0be3d67a32", "sighting--1c852b6d-16a2-4b9e-af95-f10863d89221", "sighting--1c9e73c2-89f9-43dd-8574-eed32991c425", "sighting--e47909b0-2fe0-43ba-91c6-4b64f8fd4f77", "sighting--8417d928-1f85-4659-82f4-6740c479d9ef", "sighting--86bfce9c-9cb3-4670-bd9a-029c1931396e", "sighting--59217efe-ae23-450b-808c-a77cb9d2a5a4", "sighting--4a930732-34c0-4bcf-9ea2-fd7f29454ae6", "sighting--89598410-3e69-48c1-b6b7-83c79b9d6a73", "sighting--1d743d91-210c-4c54-8ae9-15464774703c", "sighting--47bb8997-434f-4e81-89fa-23482bf38ff4", "sighting--aa29c23a-e8b5-475d-9106-59f98ac916f8", "sighting--416b9167-d37a-4cf1-92da-a539645926ed", "sighting--d615b39e-55f9-4b44-b429-b48c04ab393f", "sighting--cb6b3854-0e11-4637-ba56-e103444623e8", "sighting--cc0c247b-2b9d-4cb7-9c0b-464f8656b868", "sighting--88251cc1-987b-4553-9ea3-2dc4534dc10f", "sighting--f3e64b6d-f1a2-400f-b809-fdecf0fb2083", "sighting--c6ebb308-4098-4d5c-a46f-1c7ac6e7517f", "sighting--3781a392-0efe-4f33-a8fd-3606c20a2b9e", "sighting--970b0016-d671-4d45-b4c6-ae929333deda", "sighting--fc063c14-155c-4185-9ef8-d5f98e83da91", "sighting--95a62822-912b-4d49-8802-ed69f433109a", "sighting--19d18c54-a955-4903-a3c7-b1d8cb50e42c", "sighting--a2354f51-902f-4c51-af25-cfc159f1c159", "sighting--f080e60e-f16d-4687-9436-cc2aa3ed2b36", "sighting--c453703c-d968-4db1-b7d9-7e20b3cf698a", "sighting--9ad79b57-27d5-42fe-8b1e-a7c53d3e7205", "sighting--c1db92d3-d87d-4c73-880f-372ebb6212cc", "sighting--7166a6ec-201d-4741-b56f-2c0ba4c75e95", "sighting--4c409161-f4a3-4ae9-9a05-1ecd82a5a0a7", "sighting--b8668cbb-05ff-4548-94e5-fe04678a25b6", "sighting--f957aa68-76e0-4c1d-a6e5-8f4edc1697b5", "sighting--5293fdea-3a87-4baf-8710-03b35c34913c", "sighting--5d0c378d-3512-402b-8d53-ba6be50907fe", "sighting--d17cc63b-0904-4b23-8711-feb1355484aa", "sighting--900b066b-a7f2-462f-b4fd-d2ef739fbf58", "sighting--98b2ea00-6f88-452c-9747-db8ea94f669b", "sighting--9ed1defa-bfc1-4374-886d-8870cd909fe6", "sighting--82c63089-a090-48d1-bd1d-0f4f05c6ebc6", "sighting--23e12e13-53d0-4bfd-b328-74166db717a6", "sighting--3518671d-bfb4-4319-991a-ce0de317dbc8", "sighting--d5ac0915-8c4c-4de4-b2d7-5adad7e4fcd7", "sighting--c2ece7f7-8c97-4eff-b772-b5a8d67ab096", "sighting--35405a3a-2699-42ff-b482-1892c812d33b", "sighting--1046f3db-9038-485a-84fc-70127e1dd109", "sighting--c3f472c9-5511-488c-a034-96b2b3337670", "sighting--38efa858-48ac-4f73-9e28-1a6648c38a57", "sighting--6aba10a7-c133-40ed-bfea-095495019981", "sighting--3f34561d-a1e7-43c1-8960-13e4a4dacd25", "sighting--eb12cb2b-978f-493a-9965-12fb184b03fb", "sighting--a2515766-2d72-4271-a7ea-2b76139ca690", "sighting--de1eaf66-80ed-475c-b8d9-8f5b2398c529", "sighting--2df6d4fe-b72b-411d-8322-ac57b95f0320", "sighting--89b85080-3218-40ab-9bcf-429f98db6ed6", "sighting--9caafb0b-e8c7-48d0-a453-3389ddd8c4db", "sighting--1dcf9d4c-b4a3-4416-a0f4-eb833995f277", "sighting--6b93d51a-2ba3-4a56-ad0a-e7d73340d4d3", "sighting--3d9f1cf7-f515-46db-ae22-389f97153811", "sighting--17451555-23c2-48a8-85c0-04079a4a0263", "sighting--44c37193-9f3e-4dd0-9e84-583bdce64ae8", "sighting--2d587c80-5c53-44e7-89d2-dd06390de80d", "sighting--9c5f87d2-0f4c-4ddd-8dc5-de51797e0d63", "sighting--0e0175e1-94fb-4e79-83b2-386e19537f13", "sighting--807df0bb-54ea-4b89-b26e-8f63b76dea46", "sighting--0e8e0cfb-7a64-40b0-aeca-28439fbb1de2", "sighting--ccea4322-d0bd-4595-9ebe-a7fe4ee95201", "sighting--6f39687b-3a8b-463e-b547-2b40389287aa", "sighting--1a4dfb3d-bfa9-4ed5-b40d-bcb41adec68b", "sighting--f220b2d8-bb14-43f2-82e5-7772b957ab48", "sighting--f248b4c1-a9a8-4e17-aa18-1b27075eaf3b", "sighting--43d8338f-3bfa-4bf4-b3a3-ce9c47f4cc28", "sighting--b96de1fa-8c0f-4828-b486-e2c93ba10fa6", "sighting--87e5b33b-17e3-4aa9-ab84-a1358cec9e82", "sighting--083a8ab9-05c2-40c6-8fd4-f49e83c5a353", "sighting--ee27569e-939b-4b56-8201-16d1d94eba51", "sighting--a52bca58-d0b1-4416-84b3-9e69f6df8a73", "sighting--82abc5ef-9ba5-46c9-8a79-f7d222bb39b2", "sighting--8183000b-dafa-4b5a-bdd6-6d514122fce4", "sighting--ad3557c8-19e6-4709-8e0e-a5ed2d4574c9", "sighting--b1dff93d-dcb6-4035-ad62-cffb8bb50a42", "sighting--df56a9cb-434f-4abd-a80c-1d1a2a8b66ad", "sighting--a79b8585-540d-4fa2-a82b-109136f4f827", "sighting--9f2809d9-c291-41a4-b8e6-2f38e93aecfe", "sighting--1c03c235-8259-4642-a1ea-6e35b5226c58", "sighting--eb9e825e-5538-4f9f-b8ea-7d010f145add", "sighting--fd4117aa-888e-4a52-b1b8-10165ec12dbf", "sighting--2b231cd4-7514-46aa-82c2-71f81ab39a0b", "sighting--fe5fe431-84c8-40db-bfec-a236b75a226e", "sighting--ddf96fa8-899b-4a8f-b348-2f7ca02b6a30", "sighting--336d28b4-43b1-4889-a23c-5fbfd2d97e5c", "sighting--9d1d5bd1-4aa3-441c-b2ac-c18136122394", "sighting--a523d20e-1c22-41a5-96cb-ef65c77e5ea9", "sighting--523c277e-d884-4a0d-b66e-1a83967c6e44", "sighting--7124540d-a5d6-4d8b-9f7a-f6b1332f69e4", "sighting--2dbe7cc8-8d9f-4498-b32f-ab9ac1ef000e", "sighting--f0c0d59d-0c22-4580-a929-ca993e91427b", "sighting--344522a6-03b8-4979-b209-7efb69e4f048", "sighting--0d884b4b-29da-404a-9f8f-024edccdf5ca", "sighting--e395446e-aa28-4b9b-ae5e-7574f514ef9e", "sighting--a7d184ca-a0a8-41f5-adb0-8adbcf2b9731", "sighting--23c08fbb-0ec1-4760-a356-849fca0a418f", "sighting--4690f746-14a5-45a3-8915-bbfb1d55ac30", "sighting--c1d873e1-e80e-4afd-97ca-bb650996a578", "sighting--fa1e8298-473e-4739-b9ab-e0eb12834a0a", "sighting--c8b9071c-d13d-4852-820d-f5ef6751f407", "sighting--887bcd7d-f94b-4b72-8671-e52ea53a1843", "sighting--7fa71369-4eff-4678-857e-caa8241bda84", "sighting--2c1fc603-1257-41b2-a0a4-d742363a9283", "sighting--6301a826-0f87-4ba2-952d-be9c23ac3e82", "sighting--3c246a6e-eeb9-4501-9d05-5279d890e8ad", "sighting--5396959d-c64a-4b57-ab38-cac3b9966848", "sighting--753619b5-a7e3-40e0-9243-710e0f1f798b", "sighting--24523962-96eb-407a-86b0-65208e5aaa49", "sighting--8a81fccf-e220-46ca-bbce-6a04134db2ee", "sighting--bc282a4c-2bc6-484f-97fc-81d7c7a27645", "sighting--f8438ab1-4e43-4084-8537-4867ad86d40b", "sighting--249a8c83-9852-4eac-a45a-7ec85efc7677", "sighting--f5920197-d383-4b27-9e40-e459a62b2539", "sighting--b0ed60f1-6c38-4ea2-b877-23f148b3056e", "sighting--6af0e7a4-4090-4c90-afa1-a4a745a972f3", "sighting--9f7e7d98-2d07-4260-8cb0-58c64f2a8817", "sighting--ada8cef7-382d-4d40-8b32-2d8d39e57ea7", "sighting--f59d8d41-288c-4531-bd10-59ac217208a9", "sighting--03c8e5a5-d099-440a-acf5-1383f1d0c2c2", "sighting--9df6285e-79e4-49b7-81c4-0b5f7fd05a6e", "sighting--7e2e03fb-b5c8-49ae-93a1-cfe8b9872a01", "sighting--8a861344-de8e-4bcd-a57d-fdaf30fe5365", "sighting--b4f431de-51a5-4a2c-95e0-4864761b4911", "sighting--2cae0212-a768-438e-944e-2c99f6f59ded", "sighting--2f6e9047-c5af-46cc-b5e7-f9b4868c06d8", "sighting--9a67a383-0340-41ec-b7f2-edea256d3df5", "sighting--d1722afb-55fd-4235-a954-26093c7b6727", "sighting--ddb5e521-cd32-4d46-b3d1-27e6ce4c451c", "sighting--0a09233e-0403-4988-9a0d-974b2092c4c0", "sighting--0ed63a13-500e-4030-b393-067a18f1ef82", "sighting--4c191748-f137-4fe7-9988-f94cd58d50e0", "sighting--58bc8e30-4500-490c-bbd5-918559eb6985", "sighting--6c463a15-745e-45a4-81c2-7c64a9bd1dce", "sighting--85aa688e-171b-4d0f-9549-4e1ef86d3e4d", "sighting--63b70f62-4cc9-4e80-be37-9f64a4096256", "sighting--2591ea9f-cbd9-4d00-b3f7-14fc789f2f1e", "sighting--7c287a6f-7f00-499a-a615-4cbc2ed125ec", "sighting--5cecbb10-f935-425a-b114-88aaf55d7ce0", "sighting--79d025e8-7039-42f4-8110-38d0cb1e2cdb", "sighting--f9d7c55f-52ac-4799-9355-9b0cd86b8d5f", "sighting--c7a95341-6af2-40a5-a1ab-1a84c7ce7c42", "sighting--13a51cb8-c2ca-4cf4-80d7-fdcd5634b44d", "sighting--2c995931-63a3-4a95-bf5a-97db42130c06", "sighting--7215ad7c-dedf-44cb-a64f-b898841b668c", "sighting--c0a8dc77-78c2-44ea-a33c-ce27e9efebfa", "sighting--08267b77-1aa0-4b46-ad45-5f91ee7b3e44", "sighting--d163e6bc-e68f-4dfa-82a8-5aff4a927689", "sighting--c54d57d9-3648-47b9-8a11-25d1f897ad3f", "sighting--8e2778cc-9b58-45fb-8077-22376d3c693d", "sighting--0294518b-e1c8-4b2d-8c8c-94af9cf0bbb9", "sighting--7e20208a-3c83-4beb-adfc-5c6a2e4c64b2", "sighting--b08f8e26-9dd6-44b9-8210-37e4490169f9", "sighting--77cb940b-136e-4c72-8052-fc5732ebbd15", "sighting--4279714d-0475-49a2-ae47-0cea3ff7aff9", "sighting--bb205db5-1f41-4991-b3d3-06b23f9fea2d", "sighting--a0bb0f84-85bc-4356-9137-5cec9b86bca9", "sighting--4a3a5900-e948-45e0-9c76-1fd7ee4200d8", "sighting--c52a53d1-e84f-4706-8d80-720441ca00f1", "sighting--ac4c7c5b-eb86-439b-b71b-d125cd71620c", "sighting--e5e88ea2-8410-4883-bc7c-c9856bbd9b09", "sighting--65d25595-fc0e-492a-a35a-478c18be2a4d", "sighting--ac515189-d8a4-4449-908e-0bdc1f6464f4", "sighting--a4b89a80-f68f-4b3c-92ef-0c1ccda082e4", "sighting--d56437a6-038c-4223-8b98-feae47549a76", "sighting--ddbdf3bd-5440-4250-859d-a8c7db5341f7", "sighting--6a169244-a861-4c2b-a7f8-e1dc53d01d51", "sighting--a5c43602-31a5-4374-9fcd-063b8975d7cb", "sighting--f7412c44-f0cd-472d-83e8-5159a1d41a40", "sighting--c4eebd94-d917-4576-a4f9-cc01c4218a43", "sighting--e82994ec-059e-4e5b-8cf7-cb881760a8fb", "sighting--095fa2f6-a4d0-4726-b152-70c770b4428b", "sighting--b2564138-d28f-4ad2-9f4b-d13df91ec8db", "sighting--dea0cfe0-a409-42b8-8e53-7c8c8e7a13d0", "sighting--11707ac4-46b8-4a85-a2db-52c2606c3a91", "sighting--db2cf15e-1765-4684-ad0d-5935d6a7cc01", "sighting--fe1ade6a-3c5f-486d-8572-bb129ffcca25", "sighting--95fe5c8a-aa97-40c1-a840-13ebb3dbaf36", "sighting--97e3f0ff-563d-471b-816b-04b446c23035", "sighting--236ef4c5-5be6-41c8-9be7-265ff3a82c1f", "sighting--61a3a017-2dad-49e6-b954-1a566574ebf3", "sighting--8e1d055a-aac3-4e74-9083-dfa7dcdb67af", "sighting--95009795-28a2-4903-8236-4b7ccffef96f", "sighting--0d4e0b4f-afeb-4537-acaf-6e48c7e5a3aa", "sighting--d06ce124-16e9-4308-aa17-1031aa12ca3a", "sighting--24dc28d0-8e9d-48e9-be00-38203a91e230", "sighting--e06af3e4-6024-40dd-9c82-fb9c48f8894c", "sighting--2b6d98d6-fdcd-4ea1-b69e-f4f3ab8bfd73", "sighting--ae6e54a6-61d6-4400-9b42-97403125a758", "sighting--ae3af9c0-9508-47aa-8eb7-6086aa57ede1", "sighting--ea895b3f-83a5-418b-b57e-2d8656f94839", "sighting--ef97a701-0cb4-4edd-91e4-e9f9051a5884", "sighting--f208ac3e-e7c3-4b0d-964d-2ba3fb9f5f7c", "sighting--844cf9c5-d1e9-4db3-9111-1a277e148339", "sighting--d39228a7-258b-4bf7-874b-2285d1ee015b", "sighting--9c98539f-6826-4072-80f3-6ee181ddf642", "sighting--a582693b-cb65-498d-b1bb-6f7a711c11ac", "sighting--5da9b88d-662f-475f-82a6-7d52fd5b8f75", "sighting--38e9a5b0-25d3-4cca-a2db-d2ea9da63e00", "sighting--ea54dc09-8aac-401a-b40d-220524ceb885", "sighting--dee61b49-1c61-4d5d-9b50-4bbaa827e267", "sighting--96734a2f-f82c-4468-b49e-4471b1eeac24", "sighting--ef0863c1-7289-4265-a859-104439fa8fbd", "sighting--9ef35615-5f4d-4894-b4cd-088cc216e814", "sighting--e7611b8c-0176-4ffd-af5b-871428160dcb", "sighting--032f9d5a-663c-4237-8174-0304dfc419c6", "sighting--210b000d-4ce6-49bd-8184-778c31497b99", "sighting--c8d3fb34-b05d-4f08-a812-66a1e7b21746", "sighting--99c8ef13-1960-4275-a41e-c76bdcd5df60", "sighting--fe006087-72d0-472d-b6a6-fdc176b15664", "sighting--c9b535ab-27b8-43bc-967a-19e766fd505b", "sighting--d576c4cc-1ac0-48ab-828c-221493abda64", "sighting--238d67c0-cde7-48aa-ba28-b07797b205ae", "sighting--eaab2b21-0a93-4760-98ad-aed20e44bfd5", "sighting--0b030dc7-b1d8-4aee-ac97-de6fc7446897", "sighting--e083db15-6e9a-40d5-bf15-2c04d0c297d4", "sighting--61078fb3-7cc5-4d96-9c4f-80f4537da3a6", "sighting--09a461b9-fb97-4766-9106-6d199194611a", "sighting--02ad1b74-03de-4c63-8dce-214ed1c40b2d", "sighting--918c640c-aba8-4090-9cad-9111bde22050", "sighting--feebe645-5d02-4578-a6aa-1f7ff5912783", "sighting--42316c37-d62c-4da3-b13a-7321a80e7261", "sighting--e740c98f-7eeb-4748-82d0-173140416c15", "sighting--241ab4b3-3195-4da8-8586-765e34a65e42", "sighting--a45a2793-e709-4d40-a4fa-229c6d3c4413", "sighting--6c2ada14-2c7c-4cac-b47d-e91dc9bd2796", "sighting--914e9bf4-af61-4066-a629-588a6efc32d7", "sighting--e45ee549-7620-4a7f-827e-88bfa81c78c8", "sighting--871bde06-bb7b-4283-ac42-e61da15392b5", "sighting--a6c16ee4-efbb-4ae7-a8ba-4cba316632fe", "sighting--e0ec1a8c-e4d5-4411-b079-7b0870ea58d8", "sighting--1a122a93-62bf-4284-8e4c-fce436b7bda7", "sighting--11ebbe33-3ac5-4f91-8bb4-aeab905b75fa", "sighting--4241ea19-f519-4318-9c0f-67ac0a584fc9", "sighting--4e3a333c-b85d-425e-824c-274deed3f717", "sighting--f35b5be3-7046-4ae3-a0b3-bd75e5c54366", "sighting--68105fad-55e8-43d1-a64a-5059ed324c98", "sighting--535e1088-5ec8-46c0-aa89-36fcc36b9004", "sighting--6790af4b-0a8f-4d2b-8518-c075d95ffe53", "sighting--ce544b1a-85ea-410b-9f0e-7953476f0030", "sighting--7658da0f-7493-4ae4-9a19-da3c2be68615", "sighting--3604e52e-cff9-4020-b032-4ff4f1760ab4", "sighting--16d1d608-61b0-41f1-ab3e-98a3e617967a", "sighting--2ffd9387-672b-4af8-b981-faea2c49dd17", "sighting--5f09f157-2a6d-42e0-9e6e-75ba57692efa", "sighting--7cc78c1b-6028-47ae-8b79-25cc540638f3", "sighting--1a2b572d-ae80-4a2d-a15f-e604276d262a", "sighting--daedc643-4194-4e8a-b001-27931463c276", "sighting--2d4f0344-772f-4a56-8083-fa5f04e0ed65", "sighting--38ce0a9f-3126-40da-bd21-f7b724b4a681", "sighting--90c8cae2-cf70-45dc-b2e4-77f0b165a337", "sighting--91504b5b-363c-4cc7-a0b6-2341e33c2be2", "sighting--828238af-a588-4719-a34d-db64babb88b4", "sighting--d4e55870-3a2b-4a7c-b4d0-8704c701dcb8", "sighting--4159a867-bf72-4e31-a2f7-61fd1f40f8c3", "sighting--4fb58d93-f9d2-4aa1-9802-48d6a52f5cf2", "sighting--8dd260b8-a700-4419-a76f-a3d9f281142d", "sighting--1c991b52-6c5c-4ad3-a037-80ef4eae3c8d", "sighting--301a59c3-6907-44f6-9904-a04007e7f762", "sighting--6f51028e-9e35-4205-bc91-cc33942f50b0", "sighting--be10b574-c954-4244-91dc-f340c482f991", "sighting--c1af2519-5e27-478c-905a-a3f204f3fd5b", "sighting--751bce93-d2d3-4bcd-ad54-f2d8e86125ff", "sighting--335033f0-2b62-4243-a31a-2053a49d1bc6", "sighting--fc6f8b76-2e68-4141-8567-3ead4ec8f677", "sighting--ebe825e3-335f-418e-9e5b-df73a4b49b3f", "sighting--dcbedd17-b21a-4a21-b181-8a9209d44b6c", "sighting--bf61f34a-5299-4d2a-a302-a5a5d4f4e133", "sighting--69b3b418-035f-4789-8281-72f818d8508a", "sighting--42dcb750-733d-476e-9e55-a36dbf1a1a3b", "sighting--511abf55-490a-4bcc-8ed1-339209b8659d", "sighting--e52e73ba-97cb-47be-b3de-62c23a5ca628", "sighting--206a725e-cd0d-408e-9d15-fce03f8bec72", "sighting--86976a26-554a-42af-86ef-897e2777080c", "sighting--4925aa80-8841-4a42-86c6-693bbcb00aea", "sighting--83181f31-1f06-4dab-8c24-d722bfcc4209", "sighting--da907ded-33fd-4724-8c77-1c5375de80c8", "sighting--3f12c191-859f-4223-a88e-1d0e0dbccc07", "sighting--50fd9176-c5ef-4bbd-b114-546ae3707724", "sighting--6eb86bc9-1a6a-4391-922a-1b658671d50a", "sighting--e8a36248-8e2e-4d28-a1d2-3f7063c0b400", "sighting--6193a966-b42f-4d2b-9de1-49b0cacc7f74", "sighting--67d5fc19-1226-48eb-9584-403d3b0b24ce", "sighting--7abb4801-2410-4cad-a6aa-d4e82841d781", "sighting--ba0bdd1d-9b72-41f6-ab69-c722e154fe8d", "sighting--dd293884-1c1d-42db-b239-eb3dda22acd3", "sighting--4a7f8d8b-b9c4-4b55-92a3-1331e3eda498", "sighting--1407d291-e003-4c15-b1e5-97962da90110", "sighting--239d773e-4829-47a4-81f9-24713e388141", "sighting--4bea525a-17b4-4fdd-aac4-94b5e26272e3", "sighting--f4869e2a-04b7-4ade-9fa4-417b97274995", "sighting--412d0927-c9d2-482c-a641-ffba4b6e66e7", "sighting--2d0b6b14-b237-4880-8c16-d9f06d0b3faf", "sighting--f2e001e1-eb84-464b-bbf5-da902562e1fd", "sighting--25011b8e-2771-4d62-8d74-abaa0da35352", "sighting--285e9840-1051-46ed-85ca-ead91df7d5b4", "sighting--ce2a5caa-7b64-4d1b-95d5-08f332f86243", "sighting--633dd7cf-821d-4584-8dbb-6abfd454b7d5", "sighting--9ede99d3-9175-44a2-b221-2f46ee7edc57", "sighting--e8e30f04-3ab8-4b60-8bf6-61be5a4a57f8", "sighting--f85bb585-f957-4959-b085-a33008db453f", "sighting--76afab7d-0466-4920-ba55-1b10d08d2f5c", "sighting--a29e2059-5636-40c8-a06e-abb4b6f7f264", "sighting--b74dda9a-f599-480e-8809-a229b14ea0b1", "sighting--bf776bc0-d81c-4d5e-bab9-a0ebbf56e9c9", "sighting--0c52b821-e26f-4dc4-b2b5-a6a516fc1e07", "sighting--2a673c9b-1455-4ade-8a16-25535421e333", "sighting--adcbd2b1-86b3-41a8-a712-c93b662fd5ee", "sighting--d3a01ccc-5d91-49ad-b1a7-99c3b4d3e496", "sighting--e7190d11-1c0a-4338-95f4-e794a23592dd", "sighting--bb7fcaaa-03a1-4490-a98f-d2758fc2a6e5", "sighting--c76c6620-1248-4aea-ab89-55236821120b", "sighting--f950900e-66c8-4053-a1a1-fa8fbb09dd3a", "sighting--a38ca674-3d21-46f0-abe8-7481b61750dc", "sighting--90640744-0f62-4876-8252-02ec057d1a1b", "sighting--b5d51833-7368-4699-9a1e-f4e434d8b44d", "sighting--546bdf2d-b080-431e-a737-863a91565bd5", "sighting--8ab8767f-b191-45e4-9fe8-ce1cf4753afb", "sighting--f456a10a-bfaa-4e69-96fc-762fc7fd08d6", "sighting--234998fd-72c0-4be9-bb4d-4d1dec44e177", "sighting--dd906ce5-19aa-4131-bae9-090b43188b26", "sighting--d8e7b084-7c8d-4a15-be42-ab5894527987", "sighting--1fa74efb-30c6-46b9-a8b7-d7aa5a76a049", "sighting--530fc1d6-5fc6-420e-ac4d-dacac18bc78a", "sighting--c124a750-812b-42d1-b0f5-df5c58ad7aeb", "sighting--053f1337-1ec1-4baf-aa1a-890809b4dbbb", "sighting--c7bbe3d5-ef57-44c3-8dac-74446cc773c2", "sighting--c992d739-f47e-4ea8-b03f-6ce24966d5f9", "sighting--4c7bb3cc-7fb1-4a29-927b-aca58d5c8527", "sighting--c4941406-94c5-4d60-91b0-c0d479134861", "sighting--f4ca05da-2792-4c5b-9635-15edc8b37729", "sighting--ff91d106-97c5-4e2e-864e-8f6c48d1ce37", "sighting--a7e9b6e9-cda5-4d9a-9c4b-db6f1bd79829", "sighting--0f00edcc-0f66-442f-b952-4346c41e6b7f", "sighting--e995a329-4513-437b-8c82-91d8b0a6be9d", "sighting--d5293fcc-6d4a-4d90-84c0-8f59fc36f3d5", "sighting--970ef591-d91d-4145-87cc-49ce79f2ce76", "sighting--34d4dc48-429e-4ff8-a143-311a0f1aca57", "sighting--af4c111b-0dfb-4478-a662-8a7072b90f5c", "sighting--f223474c-8670-4c85-9739-baede8de4c7a", "sighting--ecf846cd-2e36-48ed-9b2c-a291d165877b", "sighting--53aacbdb-2123-4295-8064-16ae94f4e153", "sighting--16514e9b-a9c9-41b1-b1a5-24905c664d98", "sighting--0dd28fa3-45e8-4dc2-a1ee-fd2331583a19", "sighting--31a7703c-bd65-482d-a373-a0b778b56e05", "sighting--0f252ad7-bcac-4f9e-9882-7e0ff5a730c9", "sighting--aeb0424f-c521-461c-a6e1-1a130a67e762", "sighting--e9a4bcb9-655c-43bf-b4e6-cee9fae6c86d", "sighting--b4eaffbd-8473-45fd-9e8f-6ab53aa8560f", "sighting--79cde974-c3c9-4aa8-8696-a8f5c27d71d2", "sighting--faef57b5-2a87-4539-b5c9-4659f59dc103", "sighting--4d807ebf-0f0a-4dda-8494-c8ae5c6babad", "sighting--707766b2-59a4-4876-b705-eb175d8d5832", "sighting--9eb81f6b-0c80-41a3-bc54-3c6a7e98a40b", "sighting--38ce47bc-9cfb-4564-bd2c-6e0130f706d2", "sighting--fef4941b-a066-4b21-8ef2-cd3378b6fcb5", "sighting--b76b6930-5bd4-4a71-8ba7-3d551d78492b", "sighting--58a8facf-2cac-4730-bf58-a7b44f68caf6", "sighting--cafde3f6-c642-458c-abd4-802d8f567863", "sighting--0ead5925-23de-423a-a883-077b98d40847", "sighting--abfcae29-a5db-4aae-b58e-fd62f2275a69", "sighting--cdf1fecd-dcef-41f5-b106-f114b311d6c3", "sighting--89bc55a1-cfe4-467a-9504-8f6ffe8739b1", "sighting--36ca64f4-8945-4537-9b28-74639343b2f8", "sighting--17a6a378-8c33-4b9b-908e-c5948bf663f4", "sighting--dbd4f880-f3a8-4a6d-8af8-2ac2e35c491c", "sighting--2d313637-9b26-4771-a4a7-bd871def149b", "sighting--346ebb54-f29a-4f7d-853e-35a807552ffe", "sighting--58a3b66e-d72e-421b-8a4c-a207dd226100", "sighting--8cb04131-7cb6-4747-ac88-c6f1b0ee3d2d", "sighting--61618a59-e953-4cc3-ad84-e0e1dde6efa5", "sighting--a3edab74-5df6-4d15-9fa3-ed3c68aecee5", "sighting--a1f6dbbd-5837-40d5-9c06-f633c6fad728", "sighting--619ae696-b1e9-4e9a-a4b1-d86ad8cec4d2", "sighting--71d0722f-7b04-4c81-bbac-d58add26ddcb", "sighting--6b38322e-5656-4ab2-adc5-7148b5be18e9", "sighting--5abcc23a-9199-4f00-949f-8afc6b87c0e1", "sighting--a0607925-da22-426d-bb32-c204714c3059", "sighting--134ed602-4cf6-4e23-9f7f-3a69fcff0d51", "sighting--7f54e2e6-bbc2-4b70-8d6a-9306420ecd7f", "sighting--dd62403c-0ab0-49bb-a845-6389ded5a068", "sighting--9c55e7b8-6576-443e-a1ea-5b6382a65c46", "sighting--bd8bb4f7-7d5f-4334-8e35-55a7eca876c6", "sighting--bd550509-2601-4a08-b64f-9ac5d82fc0ea", "sighting--c27422cc-3d76-4d47-b318-09b141a8a439", "sighting--cac201ac-6266-40af-a5e9-a98abb512c3d", "sighting--5e37d92e-d08a-42b4-b241-5e1f19eb5ef7", "sighting--75c4dcfb-7aec-47cc-a452-41b9f40b5d87", "sighting--f6de607f-ec86-4853-a7d5-9973c074cc07", "sighting--b3777bc0-c04c-41f3-9af1-92a2a00e3da5", "sighting--98d9968a-5ab3-4beb-8edb-68ba18bca87f", "sighting--0e747baa-4d0e-4789-a5ba-e6fae6e94d1e", "sighting--a6dd0e93-7bbd-4fc5-8202-4aff8dda2cbe", "sighting--a4250b75-dd47-417a-9306-893be75523ee", "sighting--7fa5ca7d-2a29-4169-bc93-8fc34b0ba5e6", "sighting--77b2c8d6-b308-46d9-a91d-9f7243b0578b", "sighting--81470f61-eb9b-4875-a5fe-5275f2251432", "sighting--a42057a7-94e3-46ca-b6ce-f5103069750a", "sighting--9c85eee3-eabe-453c-8095-5ea9c0e3afcf", "sighting--c7c97ab6-3a4b-4017-9f14-55eb38e53f4b", "sighting--aec81dbc-ea6c-4534-88d9-5dff6cabf4e3", "sighting--73c2292a-db32-4893-9091-95e0b7596953", "sighting--8ee6f6c6-2efd-4f44-b178-d855047f2b3a", "sighting--8ca4650d-b46a-4ed1-88d2-3f24641540b9", "sighting--847ddc1e-522e-4121-b107-0ace2dca74bb", "sighting--0c5d1fd5-0723-4868-a499-8dc1cca95a60", "sighting--ae4b84a8-11d3-4170-a3a2-cddb6f586c38", "sighting--347a7663-c5a9-443f-9fd1-1e5f6f130895", "sighting--6cf17270-1b9d-4250-8793-5f84cd7cdbd0", "sighting--d811951d-8576-4904-a235-ace2965e9bf9", "sighting--0dc72f71-9616-4517-8333-cde279449457", "sighting--73cc3890-f52d-4768-b505-abefee4a097c", "sighting--d4f5e756-500c-4926-9dbf-1b20355e8fca", "sighting--c3f2e1e5-6b66-43e6-86cd-2b8fb29e50ce", "sighting--5ba5bcf2-e014-4908-8467-ed10be58908c", "sighting--d86f3594-9a44-41cc-956c-52750217209c", "sighting--d13864d2-9b82-4b91-b0bf-0dbcd0604d06", "sighting--4c3992c5-cbd0-449f-b39d-e3d6904ecfd1", "sighting--47187fb2-b3bd-45dc-a2ab-c6043bcc1605", "sighting--ace10350-b696-4db3-acca-0167307cc1b6", "sighting--349e981b-4684-4a3b-843a-46e399451af1", "sighting--9fd8b1f8-9e78-4550-b3b7-55dd1e492d33", "sighting--74cad810-24fa-4f8f-a64a-94f5d10c0290", "sighting--d33db551-3666-43a7-95c0-285f299eb7f4", "sighting--f0af968d-cb93-4621-8207-12f09360324c", "sighting--c42ee730-acef-46a6-b894-1513ddff0b8c", "sighting--52972a31-c97d-4631-8456-36e0371329ee", "sighting--f92a195c-03a1-4c9f-9a92-e1c089ba561a", "sighting--91c05907-2ba9-4675-adc9-3aad2f826dfe", "sighting--10bc0d3b-9d55-4d6c-9725-e8d3b1b459ce", "sighting--a4a6b649-6699-4202-b795-1874779aa6aa", "sighting--15499104-67e1-4efb-94ca-cb2274dc2eb7", "sighting--b3df652c-bb0c-4a01-97d4-29041f74a55b", "sighting--6a5d1280-6dcd-4a0b-ae69-9cf728fa5e93", "sighting--7ac2dead-303a-497e-8729-df71929267d8", "sighting--1df213b1-a42c-49a7-98d3-0366b33c7caa", "sighting--ffb3a30f-8679-4e3a-8398-2a7cfdddbd45", "sighting--6bcd031e-8e4c-4353-bace-0ac8c7d32047", "sighting--1b02e027-4f4a-4809-a529-19d1f3b3eb17", "sighting--33002d82-d39b-4437-845a-e404d6aba819", "sighting--bee592df-04a4-4dd2-8998-296135a27292", "sighting--75a0c0f9-1766-49ea-9b5d-09bd866f253c", "sighting--03a387a1-f486-40c6-960f-985b5ffc2d45", "sighting--0ea3d218-e9da-4ac5-a271-ce040e2217c5", "sighting--40685e85-82c3-49f2-b11f-0f762825c9fc", "sighting--46e219fc-48a8-41fa-bb38-6cbc99d5b193", "sighting--edd70cca-093d-4886-9908-422372074ba6", "sighting--22bd7e5c-cb4c-48f2-b2bc-ddf7dfac5d08", "sighting--bc805b72-739a-4665-8e7b-6a6fc35edf84", "sighting--2103f478-5382-4e99-bb28-96fa3c693ba1", "sighting--245799d7-450e-4dbb-a709-419f88a2c2da", "sighting--f9de339f-f87f-4092-b183-8432761d2b88", "sighting--2dc30790-743d-4534-af83-4731d0915fec", "sighting--1b8152be-422c-42a9-aef3-6ed153258610", "sighting--5d5ddd7f-b99d-442f-8eeb-9e293b94870d", "sighting--874f57dd-682e-4775-a01c-e3e08af08a82", "sighting--aeb43882-3912-4943-b22d-6f61d7870a12", "sighting--ae73987d-8acb-435c-b918-b3e37e201d92", "sighting--92c25921-ea90-4c21-a530-9d25a874cd9a", "sighting--c82fd5aa-3dec-452d-a485-0d15091b4d98", "sighting--9d73edf9-3c38-4eac-87f9-aa69fb4fc70c", "sighting--6e6a6d01-111f-487a-bfb5-ca99b0e27a30", "sighting--4a4698ef-d07a-4f8e-b3b3-0627c6f9ddf1", "sighting--b2017515-1d7a-49bb-87c9-bcf768b51f31", "sighting--fbd08cfb-df40-4ed6-ad5a-3b6f562ba2b6", "sighting--a7337d40-b469-44ba-87d2-6b4c24a6edd4", "sighting--dc921811-ded5-4d39-9b7c-a5e20ec48946", "sighting--92f3fb7e-a817-4e44-b142-6e3054a7bc33", "sighting--462cfa21-3f11-4454-91b9-3fbfc69c9e61", "sighting--836e89b5-2c0e-4339-992e-9f46a7d22974", "sighting--40c9665d-38ee-458f-abb7-4f79bf1446e8", "sighting--07bf9c41-8355-4289-a9da-5088a06488ba", "sighting--068e0ece-75ea-4bef-9418-39efed79efbc", "sighting--7a98d37d-954d-4833-8999-7f94e3798251", "sighting--b8bd6350-125e-46b5-b958-b677aa0c32ee", "sighting--ce61ad5d-a3b6-415e-9393-e2ca9b0bb8cd", "sighting--bd415a71-2e4b-4a07-ab09-ed8324bc9322", "sighting--99648d6d-15c3-41b9-a221-f27a4bde498b", "sighting--6fc589cd-3fa9-4f71-9f84-72b65619cde9", "sighting--05ae9426-9dea-41d6-a8c8-426f127263bc", "sighting--f3f1d5d5-9eda-464b-a013-012ba0e5dce4", "sighting--466ce8a6-a364-4f46-bb3e-11108df2e556", "sighting--464fb513-575c-48b7-82dc-d211c12692e6", "sighting--db001df4-04a3-4fe3-9223-f0ba5d4c4f4c", "sighting--9f9a5e66-02c6-4c0e-a291-d62a2e0e5b36", "sighting--12a0f456-0015-48e6-a72b-00165968344b", "sighting--479bee91-6a17-4cad-8ead-d537a95be73d", "sighting--ed94bb73-8575-4c92-89be-fa132a087ffb", "sighting--0f754204-0a92-4a6f-b329-7909fba95075", "sighting--437628b6-b078-4bad-b222-2adbd296779c", "sighting--e5d3cd49-2e6a-49c2-82e6-fcf6486146ff", "sighting--ebcc0552-0938-4e20-92f7-87abacb43d53", "sighting--09f16806-bcc5-47c6-bbf6-97dc3c635698", "sighting--ccd5f9a1-58a0-4b68-b95f-c517ee6239a8", "sighting--e35eef1f-c584-44d9-a3c3-9446366231cb", "sighting--46a2419f-a35a-4274-a801-07f11ac2041d", "sighting--28c67e52-54d2-448d-a0d1-6571165ca36a", "sighting--627e89b2-3a92-48dd-927e-7a6e0cc0bbde", "sighting--d9fdf107-7629-4f14-9aa5-1219ef7ebdf7", "sighting--28859c38-5da8-4493-9242-e21d7c5e42fc", "sighting--bb2895cd-8abb-4e59-bbc9-8c5c10ae7851", "sighting--c663ee66-c92f-4d83-8ee1-8f63ba0467d4", "sighting--f8669c11-6b52-4d95-9467-fc3731440034", "sighting--01d64ba3-e4e9-4d9f-a5a2-85a98c802201", "sighting--5b7c55ac-de85-472d-9898-2ef0b82469fe", "sighting--a6f07676-4481-44c4-a2c6-139ea289d0ee", "sighting--0d58aeb5-3b78-4cb7-971b-818eb0fd1ee7", "sighting--c842f6f2-cc0f-4f18-af1c-24ef7c9568b1", "sighting--bc7dde6e-16f2-4b01-928c-a804672e9b96", "sighting--08e602f0-aea5-48d7-8ae9-af13210491d8", "sighting--bd4f1987-bcbf-4af3-97f5-4f94bcab7f5b", "sighting--8a4fa849-163b-4ce6-9534-87db882568d8", "sighting--70a7b4fd-6fd1-4cb6-a8b7-459e7f432de0", "sighting--91bcb5b1-a09f-497c-816a-3e758b614b2d", "sighting--1bde839c-dafd-4388-a2aa-1c36bc72b570", "sighting--ec268732-d8a4-42bd-9810-c518f2d7612b", "sighting--01f25591-c52b-45a1-8c4c-b73450980408", "sighting--f78fe081-2de3-48d0-8cc4-fda895399907", "sighting--bfdc22af-afa9-4d95-bdd1-1a28cf7e2b72", "sighting--f9ae3adb-433c-4df4-99bd-b1b2661a5966", "sighting--01fefb25-a2b0-4a9a-b855-3f100b0a1ea0", "sighting--c2ea31c9-cff2-47a0-83c7-b7eb4012ff15", "sighting--ed483dfe-e299-444d-adad-c1033e8cdfd9", "sighting--276fc193-46b0-42cd-b187-29aeec66520b", "sighting--f30c2492-c252-4706-b8a8-d21e8c5c51ba", "sighting--0ab63028-bbf9-40c6-ac7e-6c7dd533205e", "sighting--d51e39e3-07e1-4fec-817d-05eedf0eacef", "sighting--039974db-9738-4ba7-9706-811130a6d28b", "sighting--e2b13f28-418f-4d93-a3cf-6dcbb9aefc06", "sighting--9bbc77c8-8c96-4125-a372-9cdb2062f856", "sighting--1ae45c79-30da-4560-a728-c436f54d12b8", "sighting--be3699fb-e67c-4ff8-ad14-006f706b4d37", "sighting--c4456b9f-71a3-4d77-b3e8-cb5006ca745c", "sighting--69f6a2b5-a637-4f23-9b05-ac02e3bd31f2", "sighting--4585022d-0edd-4da0-967e-ed8aacd98332", "sighting--f6e7be10-065d-4093-911c-c4653ad9c663", "sighting--2e079928-04ca-446f-9456-4faeb38e4677", "sighting--90eff704-1fc1-4520-af3b-49c6efde1607", "sighting--e6ed9eb9-8a2e-4ec9-8d79-6bf665493303", "sighting--1e8b7060-24cd-4fde-89e9-befd0a4c3f80", "sighting--9ac9ac0a-7466-4e5f-af97-d9c361f1c614", "sighting--1cb828f5-c54c-44cc-bf65-69d36f17d037", "sighting--3644aa98-7fc3-4b15-a578-1d30fc4c1333", "sighting--6c193739-48e7-4d6b-9ebf-622b09ac4d24", "sighting--3374466d-403b-4177-b09c-8e7b720d7b2f", "sighting--1134130e-bf80-4937-afed-cdcb3f5bd2f2", "sighting--7d1cb0ef-270f-4026-b281-7a161c8963d1", "sighting--46529751-8db5-4341-8b81-5a9d2cfc6822", "sighting--60b4b6f1-d664-446a-aab9-6ac25dbfc4aa", "sighting--441c3dcf-ec04-4831-9b77-4e6e933f9efb", "sighting--84960dcf-d25d-460d-974d-3b175ad5105f", "sighting--0a9263df-bced-4c0b-93ea-4a63b2dd26eb", "sighting--80702be5-c660-4851-9838-578df38c2458", "sighting--7248a3d4-04fa-408c-bbf3-841b1d5ce9b7", "sighting--66a311ec-a306-4d7c-8152-73a4928ca431", "sighting--deb19bd3-0aa4-44d5-af89-e7b1d68b28f4", "sighting--91350b01-cbfc-4c81-9690-51f4bdf9ff75", "sighting--6cdef3ff-1bab-4171-bfee-41dcb9d22495", "sighting--000c2b9c-da73-4109-b020-14a0b6a88a78", "sighting--b708aa62-efc4-48e0-ad93-ec0b3be476a4", "sighting--483646d4-74bc-4f2e-a1c3-0cbc335ecfa1", "sighting--7ce51f86-9cf7-4a9c-93cf-08877d08cc11", "sighting--ece9fe3d-1510-4233-99c6-967e373f7e93", "sighting--eb34d655-2995-4e55-8eba-256aadc61edc", "sighting--d3d7de8d-c188-4ddf-a408-b2f7d74ebfb9", "sighting--a2773e82-5acb-4967-844f-7dcc5ccc8d42", "sighting--16cd36ce-2eb7-4d1a-80b9-6fe5be99ead9", "sighting--e78fe9fc-a741-40a0-96e0-398a4838c7d1", "sighting--9e421105-ce7d-4e84-9cd2-e31e0f4a9fde", "sighting--f80c36df-4c49-4e62-9720-3285f4ef84ab", "sighting--723fd14a-e405-4d2a-8c1a-f7fee89efbd2", "sighting--f1a5cc1c-d449-4f05-94d3-aaa5ad5e7e77", "sighting--f99b7396-cc92-4279-a85b-c2d2efa1c335", "sighting--4a27c12a-537c-4840-a464-12fac4fee38b", "sighting--59f9ffb0-8f8c-414c-a550-fe8bb32f74c6", "sighting--9d7ad992-8bba-44d1-81f8-9dc271c8ea32", "sighting--8d1e2d3d-741c-497f-a4a6-d188cd219a9e", "sighting--123a53bd-6026-4c4c-bda6-ae71a72e55ab", "sighting--79c7dad4-673f-4e75-a897-2892946fdc3d", "sighting--5a96a6f9-79ea-4bf6-b929-d2067ed98475", "sighting--70b4e202-0d67-4c21-add8-e35d2cd00239", "sighting--c9240fbc-494c-4b7c-8b92-9da3fd1b903b", "sighting--8041d57c-7953-4e8b-839d-10dd6a45fc30", "sighting--54b3e4c8-0466-46ae-93e6-e1059b38f4af", "sighting--edce4628-fb71-469a-85a1-cdd9347dca5e", "sighting--afb20bc4-5db7-4ff4-987c-cc33d5ad1492", "sighting--9b598463-b3b8-4049-880a-fcd22ce83452", "sighting--dece49ee-4808-4d3d-b85b-0bab4498aa7a", "sighting--c1f59140-c751-4c49-b7c7-bf7230852dcd", "sighting--0bfe86b4-04ac-43c5-bc41-ab1704acee60", "sighting--f3421463-3106-430b-a7f1-81351f0f0f25", "sighting--1d929049-1fae-4de5-a625-b64db987026c", "sighting--f48c1cf3-5bbf-4e66-a084-35626b473d42", "sighting--9ff95468-b4fa-4a73-bde6-8d2dd0e2d062", "sighting--c53144c0-3b6c-4781-b035-b859f8e80a0c", "sighting--8728290e-d7eb-4605-8959-f0daa11156f5", "sighting--ac990719-deac-4555-8bee-2ba6743834b8", "sighting--2210b2b1-2e94-401b-9fa3-5cc025d45da2", "sighting--20ed8676-0222-4111-9797-603cd83f8e54", "sighting--5e2eb4d5-3c9e-4867-aa8d-48527ae62755", "sighting--98699eb2-4d3e-49ec-9dcd-e426191743aa", "sighting--e489539e-0bc1-4997-a19b-0d18db675f6a", "sighting--88d171ce-dee4-4710-b81f-337adb1361f9", "sighting--e36c030a-9f91-48db-8ed6-d5b20a0ace30", "sighting--0d2bd966-8865-4f9b-a049-1228527a6e9e", "sighting--08953b54-ee15-41c4-ba23-6e770dd40d2c", "sighting--afbf2ac5-253b-46e5-b0e1-49e838daa245", "sighting--98fec43c-85a9-4e00-81f6-f00205a8b511", "sighting--b64f2108-b5f7-4424-b0df-3bdfa6ad645f", "sighting--40cbd786-116f-4098-8fa6-10d90ce65e73", "sighting--1f1d1cc1-6cf4-4a88-83a5-017023381f56", "sighting--db4cbb04-bda0-4ea5-b251-d5b27b2b6739", "sighting--c96c337b-8886-40c8-8011-c5cce1bed46a", "sighting--27796d3c-96b6-4f6f-97ae-b71c841d6b9e", "sighting--844d740e-5ac0-458f-83d8-e960a105fd47", "sighting--726e3ac3-61f0-4960-858b-615d53097d51", "sighting--7cf2de53-8b48-4ed3-aa24-4a5c1624621c", "sighting--dcb4dc87-da10-4601-a06e-17bd9a569850", "sighting--6e922d58-bd8f-4f7d-b9bb-ada3e0147854", "sighting--c8c723ac-4ff4-4ab0-bb16-f439d939e327", "sighting--7581134c-ba50-4feb-b887-adeee7a6285f", "sighting--8c33e602-488e-489f-bb53-999000c62c19", "sighting--7eb86f5b-b29b-4f62-8e54-c88237560ef8", "sighting--afbbf125-c0ee-4601-a715-eaeced713695", "sighting--62c98493-aff4-4992-8e2a-8379cf085771", "sighting--f0874367-0eae-4847-b9ff-061e9ece632b", "sighting--f142a071-c95c-4cf2-ab50-5d5a5440171e", "sighting--8fd8868b-cccd-4909-9702-9d5c240cd36f", "sighting--c6635ef0-86d9-4a27-965f-86eafbf07b00", "sighting--76f0ad26-6729-435f-8553-3114391d0c20", "sighting--4eaf16ee-081c-4005-bb96-e7abd5b2dcf6", "sighting--826bfd20-1cf8-46d2-8269-301ed91bdbec", "sighting--358dee90-2300-449d-81d2-84133b1c0e3e", "sighting--5a59fd6d-3702-41e3-ae06-cb611bc54cb3", "sighting--158ad4eb-5de2-4037-a2cc-27581dccead4", "sighting--0c2d00f3-9360-441e-b274-de9717d1f23c", "sighting--a3fd9c8e-cdc6-4723-afdc-646579bf3de9", "sighting--796c037b-182f-4f8e-9cc6-5e172bf01a9f", "sighting--62b468c8-b7b2-4097-bf33-b578394d0d7d", "sighting--27cf6823-8c39-4fe7-88f9-f1c951e0f0a7", "sighting--a9c7353d-da70-45e6-ab16-155507524812", "sighting--7bd2268f-3c01-48fa-8ddd-ea2ab235d7bb", "sighting--25f6f504-72b7-404f-948d-c17ee7efe789", "sighting--a175cfe1-2c92-4e21-9cfc-398366cf9072", "sighting--95de49d7-2ef6-4576-bf88-a83fc75747f8", "sighting--2a5649f5-cd41-4078-ba3c-dfb01327c4f5", "sighting--c38e87f1-5436-44a4-bd21-d9bb21573bab", "sighting--0d7d2827-79f2-40bc-8f70-d1ec47ea42dd", "sighting--a4aa4d39-e8e0-4af1-b27c-6964153fc068", "sighting--df70ba1b-2e4a-4389-9170-98f63f56d33e", "sighting--555040b8-9528-4789-94c3-9b20d11a7ab5", "sighting--229f925f-7b91-475a-bb7c-5c9d80bf1951", "sighting--80a04cd0-12cb-4650-a7dc-50ca8a3f3387", "sighting--adfdb2c9-76be-464a-bc81-20dd28e154d9", "sighting--68ad35f1-6b70-43c1-ad4e-2f494b860afb", "sighting--35e778b8-d4f8-481e-a189-ad2852363a6b", "sighting--6a1bfae7-3c3c-485e-88cb-57d3205d994b", "sighting--a6886443-6365-47f3-907a-5194532d33f8", "sighting--ae760626-834b-4895-a9c0-e28eec5ccbcc", "sighting--4c742351-7a16-4051-99f2-e23efdc16d26", "sighting--64d0ebc6-4554-4d05-95e0-a531f184ca69", "sighting--7e557027-ff6e-4769-aefc-960d8c55db4b", "sighting--71394332-4437-4424-9450-1bfd20ee1cd0", "sighting--138692ba-4936-4bd3-95b8-36493d718627", "sighting--eb35fc9b-1e80-4004-b303-79601cb0236a", "sighting--52cbd934-bc86-4176-b08d-823c2b9462f0", "sighting--f4bbeadd-b50c-4eb1-b9f7-44b0f0d87831", "sighting--a19394f0-0659-49e0-8386-ee647a56c29d", "sighting--63035375-3a76-4ffb-bb54-fcbb973b8b83", "sighting--7abf2789-38df-4f9d-9a5b-121c5b965f7a", "sighting--b3c9deba-d8bd-4ad6-9057-e6be4fdd2ee2", "sighting--b1963ef4-c471-47b1-8ebf-484d7c5721fa", "sighting--ac257636-5c12-4bd7-b8f9-df9d0988bfd9", "sighting--a42968e7-581a-4ebc-ae87-57a519ff181a", "sighting--da022767-675e-4a98-8a1e-5bcbefae9c6d", "sighting--785942be-dd8f-434e-846b-ee7cd2bd52b0", "sighting--50c536cd-8857-43f2-a1e1-b9d9ba4dfbf1", "sighting--33768add-083b-44b4-8e06-27089870b101", "sighting--a07c5c5e-d57a-4166-90de-98ffa11f334f", "sighting--d4937ee5-a528-4b80-b372-42214b892fa6", "sighting--41412345-e439-4baf-96e5-a6497b2602d3", "sighting--9133682f-5307-42eb-a5e8-bc01eaff7c76", "sighting--09cd4f77-f682-4001-8513-16990266bf74", "sighting--a772373a-145f-44f6-9692-7ca6b7a33177", "sighting--109983cb-244d-47fb-9d82-153fd7ed34b3", "sighting--d917e68e-d025-4364-afdc-b0ab2a75f56f", "sighting--8f3a0873-f31d-4a67-a76e-9512402f2fa8", "sighting--3cddc89a-c5d1-44de-ae9e-e835ce94f2cf", "sighting--bcedc3fa-fa2e-4b55-8466-66342df48c51", "sighting--f5d038ef-8b96-4738-933e-927920ec36e2", "sighting--141d51f2-5980-4b3d-8739-ffb5ee98b772", "sighting--14259a83-c249-4bae-859d-601a1e53aa14", "sighting--b3decf02-d06a-47a2-b5b0-e71b1dd918fd", "sighting--33208217-5bb8-463b-a8f0-04517224f9b2", "sighting--1b62afdb-a5c1-4210-b9a8-f196a9751fe8", "sighting--96297313-bcbd-4361-921f-875f459f2a36", "sighting--4cec3dea-8f4f-4481-913b-2f5fa5906cc8", "sighting--929bf762-7c7f-4f07-b79a-d54b7ac7b3ce", "sighting--17ff0a71-b61c-42fe-9f53-2b641d7ee3cf", "sighting--1be0103a-cea8-441b-af73-0a489ab5bdee", "sighting--94930f49-8c30-4202-bafe-cec953931334", "sighting--8ffb4d09-3e2f-403f-9eb1-b56150f0ce16", "sighting--160498ee-5814-4c1d-b9e8-8b5666602ed0", "sighting--9246d322-fab6-4c28-b505-cd2ad37b6111", "sighting--dd79c249-5773-48bf-8755-b08a5dd6648a", "sighting--c7850882-87cf-46de-b858-69f6aa0c915e", "sighting--3ea9f4d0-4829-4216-941e-b404facd878d", "sighting--6b9484e8-ff2e-4f48-bafd-50f1da915679", "sighting--01778b7b-892a-44af-99b4-702a24ad2c20", "sighting--e3297b96-127a-4b68-9182-e9944e521dd4", "sighting--0fdc0ca3-35ea-4fbf-8d34-a987b54aaef0", "sighting--d35ac417-2d33-43e5-abcf-8775895956a1", "sighting--61f258e2-b3f9-4df1-a27c-8a691792cc27", "sighting--02f5c755-a1ec-4b7c-8c6f-0599005511e4", "sighting--78606acf-f618-424c-99ae-375eb00a5e1e", "sighting--f4f99dfb-6b3e-4f96-b0cb-5e7656886a58", "sighting--e78c6cb2-3183-4922-bfb0-441c2682851b", "sighting--8a1abfc6-bc0f-47bf-94b5-86a980ec9f02", "sighting--4d3f3ad1-c925-4127-bc2a-ce462e7f9111", "sighting--c1d31976-79d4-499f-94ec-599e77ba436b", "sighting--510336ea-fd78-4dbc-adb8-bafdcb8108f1", "sighting--aac49411-e30c-4fb0-8ce7-49a66570abb0", "sighting--e23b730a-a3c5-4602-b28a-aea6395ad48e", "sighting--ca7e2ad8-84c0-4310-be43-1e4a168fd9e1", "sighting--a1c14805-bfa6-4db6-ac15-09a9ed238e90", "sighting--69b5b261-334b-4f4d-a073-045ce58edcd8", "sighting--af89d6e6-9ec7-43b0-bfc8-a7185aa9584d", "sighting--6d2a1bd4-c73e-448f-b9a4-cae58e8a17c7", "sighting--8a177d19-5911-4af2-95b8-88098fa3f26b", "sighting--9f58688d-97a7-44e7-af28-23b1d1aac5cd", "sighting--2d3070bc-d883-4244-8fa5-0f4f51cf2597", "sighting--fc2a0480-cf39-4d03-8440-94e4d239864e", "sighting--61db8876-f006-4175-bc44-616d50cf4a54", "sighting--135f8386-a42b-46aa-a1c2-66097f13e950", "sighting--28e4a3e6-c4d1-4498-af94-9c4d5cb658f4", "sighting--a7dc2bf4-ee4c-4955-8aa6-3e3e0656cff4", "sighting--fc931d24-b16d-43e9-96a0-e1316102b015", "sighting--7370bfe7-950d-4c62-a926-770af07a7ef3", "sighting--4c49affe-8ace-4ead-884c-5653576b3f4c", "sighting--34f70d76-af8e-4fce-b5d1-04bf45af2b17", "sighting--9f1bcc47-cb8a-4851-b54c-10657f0ef1ab", "sighting--f3ceb4d0-4b86-4fd0-98e7-0f92bb9748f5", "sighting--da724d0f-4b8b-40a4-8589-e37dc066f967", "sighting--66f0d376-8060-4568-a618-c2d2dce02c4e", "sighting--611eb347-5985-4e20-9561-2d904f3c4d83", "sighting--d1e3d305-0dab-42d2-910c-ef44889355df", "sighting--b3ba9ca7-5496-4fe3-b4a2-10fb0a065162", "sighting--7cd5512f-a094-4ee3-983c-be8da0a2a323", "sighting--112cabb7-84d2-4563-af59-9d308689f213", "sighting--6975ee41-a3b5-48b1-a8ed-e87d3089d5b7", "sighting--536993e7-16e6-4538-b175-f2b99ee5198c", "sighting--37fcfd67-cffe-4bf5-9d58-cf9b8b3f4202", "sighting--0e90a6de-7761-4c7c-81d9-0bb528e78a9b", "sighting--e0199c07-3953-486e-b724-c9fd1b6406e1", "sighting--27a1875e-e6f9-4476-81da-e16150178b3f", "sighting--69e63b9b-a9ad-4a0e-b639-15c25066bf86", "sighting--d7584dc5-cf78-4bc8-b5ac-15f212662268", "sighting--a6bbc0ac-97bb-468b-bdaa-debf6066146d", "sighting--5dffaf24-e7e5-4164-8bf7-949cdc2bf7e3", "sighting--74f86903-3faf-40d7-a385-f7daca0d8820", "sighting--641de10d-dc6c-4da7-96b6-98e916ed0752", "sighting--8346e989-2277-442a-a430-8df5f021a478", "sighting--dd22025b-c93a-4661-a08c-ce77c0167c4b", "sighting--48bf04f1-6e7c-4471-8efb-49ce790cc001", "sighting--f09ccd62-c890-44a8-b702-c2f2680099dd", "sighting--5c1ab4b2-7f71-4027-acd2-f9d89cce320e", "sighting--74468e64-ee17-4209-85fd-234b86e25dba", "sighting--a5d1519f-a42e-4896-b035-dc3b392ef22e", "sighting--b96331e8-c4bc-4eee-aab2-46a910db7045", "sighting--96b92b65-5522-4de9-88f9-a7dfc369eee6", "sighting--5a005c99-ea86-49ac-bf75-acd4203c2275", "sighting--534f6888-e3c8-42c6-8e6f-377419791df4", "sighting--4c491c3e-c0a6-47a5-8e8b-dcd91e54e9ca", "sighting--09f4afb3-c4eb-4bfb-8948-41ebdfc90188", "sighting--ff3ea0a5-e772-461a-b093-3c79c4b4739c", "sighting--e24179b4-2d83-4542-9aa9-96649c3e61ae", "sighting--854c43b4-0059-4fbf-bc68-68a35ff436e4", "sighting--1c480e69-87fd-4c90-af21-17e6c2fba63b", "sighting--625f84fd-b925-43f9-8f95-587c90a5f315", "sighting--2dba86d1-c8b2-41b2-980c-f4e2f7d6cad8", "sighting--7b2f093a-cbdd-4be6-b014-747cf5b57cca", "sighting--59b1e0c8-dbb1-41fe-afdd-ec2a112292de", "sighting--8174b848-d0aa-4094-a415-f683467c86dc", "sighting--b8042ee9-8462-47a6-9756-9d7199ba3b39", "sighting--6bd1d17d-1afe-46c2-8227-9518a1ae813e", "sighting--3d1bcd2b-d8f7-4364-bbc9-692535b67d6e", "sighting--1945fbcf-eb20-4467-9786-cc827e549293", "sighting--cabbac25-6618-4915-959b-d3d427134115", "sighting--3f970318-bbc6-4ce0-bccc-aaabeb2202ce", "sighting--bcd1a054-585d-489b-9683-595a1d85ebef", "sighting--23db7874-cc9e-4035-b94e-4a363eb60dcd", "sighting--a1e0daa9-b0ef-40e4-92b2-50726776f8de", "sighting--e50c536e-269b-4df1-ae89-c2a1e6a8e3c3", "sighting--4bb14af2-f41a-46f8-ac06-7c39fdea9b5b", "sighting--966dc8a0-7251-4b64-b0e4-3f6f4aac7bae", "sighting--c907c2ad-ed72-452b-9737-fe9d9a652291", "sighting--7a1d7c64-53ff-4397-9095-5cf0734767c5", "sighting--8de31e43-e9cf-4406-bde4-8602730db34a", "sighting--7e714264-d334-4405-adf8-46d4234e5e35", "sighting--00945071-6195-4373-a430-38b91d0b8cb3", "sighting--7ac331ab-2914-4d83-9052-d2a4439cce25", "sighting--0347acce-1878-477c-965d-21ff2a744a0d", "sighting--e385c719-18d2-4dc4-8932-e269ddf6d511", "sighting--ac81c488-0224-47be-9c02-d316fe79356e", "sighting--047807df-0f18-4286-b61a-e5dee6c1bf00", "sighting--80c4e604-cd94-436c-b45a-17e25a17c8a5", "sighting--e2db9bab-a8c6-4951-88cf-1a1d19e9b816", "sighting--68b25c95-3ac0-4dac-b997-2306c385958f", "sighting--27f6261c-d1e9-4df8-8daf-4c870a1e8009", "sighting--6c682826-d82f-4d63-88f1-f69b40e68675", "sighting--e6b53517-c7fb-4250-ad53-1deff339ef7e", "sighting--03acd655-a9f3-4eed-8083-c4fded95b6a1", "sighting--f03a5429-b981-4372-93cf-fd7662cfa9bf", "sighting--9c938aca-c2d8-4e8b-bf9f-2cb42a78dcc2", "sighting--2a878073-2e11-4ecb-8a61-1223a003adeb", "sighting--67e88817-ceb2-418b-b484-f664071b2ae2", "sighting--99075849-a6e4-4101-9209-9ae0598ef0f5", "sighting--aef050ca-5334-4473-842e-3fc626a1ecad", "sighting--ac586aca-8fba-4023-9cd1-a60dd864a844", "sighting--740cad77-0323-406f-a5d6-a1c733d3e6a1", "sighting--773d623d-e2e9-426b-919b-c3e5aceab1b4", "sighting--3dd5c413-d8a8-4ec4-a9d4-87e4a0c8ca9c", "sighting--b78c5e4c-c103-469c-991e-3f75c1d21b7c", "sighting--37a9502e-db51-454d-9ef5-299d31bed4bf", "sighting--1e1c3041-a12f-4c56-92c6-e9c0c4cd651b", "sighting--b0382edd-89a5-4441-bd8c-02dbbf74df7d", "sighting--57df5a64-6012-4331-abd2-04dbfbdf84fe", "sighting--1bca6fa3-d0d4-419e-beee-4453d29164fe", "sighting--4d2ca037-0610-4a49-a760-0d19e9585f73", "sighting--154db6df-abb0-421c-b1ea-da99f94dc0ae", "sighting--0f890186-a969-485d-933b-87778ebbf9c0", "sighting--66694086-9e09-43a2-b2f4-2075144e22a4", "sighting--947ef3cb-0dbf-49e4-a2ef-ee168ce4a283", "sighting--419f7eb4-48fe-49b4-bcb4-7f611201f22c", "sighting--4cd5cd8e-99f4-4f5b-8294-3b45788b1bd2", "sighting--3eaffcc5-f2cc-458a-a8a4-64ce5009f560", "sighting--f1931c39-acdc-4f5f-9c4e-e83de7ef790e", "sighting--102e5bd6-a529-41fb-8e34-898fc7591188", "sighting--e8005d3b-697d-4925-8327-bfabe5d4ee2b", "sighting--e3c462b6-ad96-4e21-83fc-e95a4e881ba3", "sighting--a6605ecf-145c-4325-a60e-0dbe0e48007b", "sighting--7984968c-f465-422f-acae-6c0e8ba9d552", "sighting--9fea1634-5e52-4808-8a60-1ebe43ec124a", "sighting--9a7d5c5a-1197-4eb0-97b1-688ef910d833", "sighting--bebde734-6656-4a4d-b5f9-d1d04451d939", "sighting--cab890a6-e83b-4ed2-8ad3-cd17e13cb1de", "sighting--95b665e5-e35d-4715-8b69-542669bd794f", "sighting--86d5c6f8-92b7-4b12-a1e4-aa51ac313719", "sighting--eed2ceb7-713d-496a-b61f-e3c0c837d5d0", "sighting--1a78f415-a388-42d4-8ea6-c114d4be55a9", "sighting--bd1a3982-e173-4674-9ab2-865512716fd0", "sighting--bc04cb9a-3dba-49bc-894e-3f5b3ef50a6d", "sighting--9f530fa9-6bf7-4308-8050-9c0f97dee17b", "sighting--984de15e-428f-4279-9e02-402d2ebd6370", "sighting--6285f4b7-8a8e-4cd6-a356-54e87886d12b", "sighting--c7fae669-7073-45e2-89bb-683bec97de4e", "sighting--2b7f5daf-f200-47b3-a0be-9b90fe46a1fd", "sighting--9b7d8f21-6dcb-4832-93cb-2d3de227e53a", "sighting--d3ecfeb1-8589-4d29-af73-a71cadbc2b66", "sighting--ed519721-d59b-4970-8e7b-2652de1c8177", "sighting--acf2b1fe-45cd-4708-bb6e-3033ed065038", "sighting--c0f48dd4-e5a0-4f53-b844-5e50923df4d9", "sighting--7b7b18a2-6430-4a74-a5ca-b59d1dc794a2", "sighting--6a9e3a8c-4b4a-4309-9087-7d858ea20035", "sighting--29e4cbaf-48a3-403f-9e53-e4166ebac35d", "sighting--1fe44439-c798-412d-bab8-7314ececa4af", "sighting--105d4504-81cb-4499-9239-2e6ca743c1fa", "sighting--8156654a-a3eb-42d8-9ea4-60e51e962daf", "sighting--96721e5d-35b0-4eed-bfbe-b9ca75e33c45", "sighting--28b5dd4e-18d1-4389-8921-5148fd1a89b4", "sighting--1502a4cb-01b1-4d82-82b8-bdedcb9202de", "sighting--8be9f070-c700-4d62-b6b6-2011b68f0200", "sighting--29744c3c-e1cb-4055-90b1-aef59ed0078f", "sighting--2fc3703b-8d35-489d-b0dc-2e3aaaa113b7", "sighting--0d28f73b-9aa0-4ed1-97bc-629f2b6a3bda", "sighting--c73eb70b-eaba-46a3-a66c-be0838a879bb", "sighting--f6bf0a56-7c1b-4028-8ac0-6103c1bf4e6a", "sighting--eea3fe71-7d15-4391-92fc-3507c6065ffe", "sighting--260a7a22-4653-4cc1-993c-1eaa5d2253c4", "sighting--f8b91d3c-f772-4f75-a7f5-78388f59748e", "sighting--cd46357b-cfe3-47a7-8708-3c59fdaf9c04", "sighting--056ac3bf-7a59-4e81-9be3-39bf3a231288", "sighting--81f237b6-e892-43ac-a8c4-8ffa7cd32eae", "sighting--2d4f295c-895b-4833-ac65-3302feb37240", "sighting--81cd8f51-2fc0-4a2f-a32f-c0efb7eb3a42", "sighting--8925efc4-838b-4419-b05a-699eabb8464e", "sighting--b997ae31-acc7-483b-94de-f5dec11f6abd", "sighting--f85bb4ba-0d3a-4366-a1d1-654464351398", "sighting--e74e8205-21ff-4b91-b32d-3da4bdbfb28b", "sighting--22903af2-7007-4a2e-a46c-51440e4095ab", "sighting--5bdf4ce7-e507-4bfb-82fb-a7f99f9b078d", "sighting--5995643f-dd7b-45e7-a822-52653557619d", "sighting--ac361d63-5b99-4948-bb1c-30c215cd476d", "sighting--430e3523-19cb-4778-a98a-93074cf366a2", "sighting--a98de9b9-22d9-44ca-b773-c3bbb6cb6410", "sighting--8ec175cf-4169-4914-9b80-070800f539bf", "sighting--c20c95ff-d536-4bcd-a1ce-044b6db6400f", "sighting--ac936e0d-9da5-4854-84ff-54f0ab46ae4f", "sighting--c2c25895-9311-4f6c-9e7a-d6d3e60a6c52", "sighting--e67e0253-492a-4a76-87a9-f40203fc3fbe", "sighting--6c8b51a8-0f9d-453b-84f2-de5bb40050d4", "sighting--685204c7-8caa-48bf-a439-aa07ed4d4536", "sighting--e46918b2-b2f3-41b5-9405-c577bf5ce3d6", "sighting--a70c543e-2500-4f24-8749-34fdcb15ba96", "sighting--206f2a17-6e79-4b0e-aea6-072fff035403", "sighting--af03e902-795f-443f-b0f1-828b27546eab", "sighting--ba4d333c-af52-4098-961e-e2edcb6093ed", "sighting--e0cf9368-c287-402b-a28b-17662e25a61a", "sighting--7669ade4-f5fc-4483-9ed4-10b8269ac78b", "sighting--ee284db5-552b-46b4-ae8e-27f8cc779e39", "sighting--fc37cc8c-79f2-4db3-9814-fe2692159ac5", "sighting--6cd95393-1787-45c2-9da4-03fabd02e4da", "sighting--3e351ea0-7a11-44c5-be3e-934a746ff195", "sighting--3baaf351-3745-4e8b-b4ce-d44ade125b24", "sighting--5355838b-3277-4f55-bdd2-63271c6bf373", "sighting--a5461ea6-672e-467a-84b1-f5ad5ff4098f", "sighting--d6b5e68f-c0f4-4412-8998-bfd425168a77", "sighting--0ccba744-cdef-4852-9514-1c0371aba6f3", "sighting--be5e2cbc-0cbc-4c2c-9a2f-830623c5f9b0", "sighting--11ccc481-24a6-46eb-99de-9bb202e2d8c3", "sighting--8a9eed35-6206-40c0-9136-750e39302587", "sighting--f882bf41-5a2d-42b5-a9eb-51601a113a45", "sighting--0f2c4bc4-481e-4433-a7ec-8660d07146ca", "sighting--b51f2c8d-9d3c-4efb-ab36-f3c27c3c3f80", "sighting--2066808b-642a-4d18-a1ce-67a17c238fe5", "sighting--1ee5acee-dafc-45da-bdb4-15b0cb6a0ca8", "sighting--6aded1a6-3ec4-41ee-ba9f-28fd3c9f8a19", "sighting--87a9705f-2db2-4f75-bace-f605e1e1395f", "sighting--b1d2d67f-79d0-4724-adb1-0b96ce782c06", "sighting--6a049bcb-81da-4728-85cc-b84002b4f804", "sighting--5bd2956a-0d8c-46df-ac20-b6257a9e99ce", "sighting--cbd90313-a2fe-42df-a1b7-ef3a14f6cf98", "sighting--8a47445d-49ea-4108-9866-4970ef861c2f", "sighting--53e357a3-8922-4e27-9f86-878863af620e", "sighting--7a6b73b4-8de2-4343-a6ff-5aa2efc0be3c", "sighting--a12f24b9-a003-4f74-affb-4a30adeab604", "sighting--650dfe46-dc25-4743-8dfb-7e96d0156f57", "sighting--f6d79651-1736-4daf-92d5-6ab07acf4dbb", "sighting--681d52a9-f104-4cdc-acd0-3ad2b3112571", "sighting--bac9d0cd-1d4e-4083-9d6d-3bf4185fa9ba", "sighting--ce3a53b5-cd7f-4d19-bdd3-b5e6a5a876b2", "sighting--546d6f70-ecc8-46c4-a971-02f825a1d9cf", "sighting--6334a93e-fd19-407a-bb12-25a3e32a3ebf", "sighting--6c2c318a-e37c-4143-bb3a-98f6a33913ff", "sighting--482ce069-d0eb-4b90-8001-32f09a4c1add", "sighting--7a386406-7858-43fc-9d5c-a68366ee40c2", "sighting--47680e5b-63e3-4b13-b318-17ce6eb9f11c", "sighting--162c1aed-6558-455a-bb63-f1e051e38a5f", "sighting--b9b61152-f263-4f40-a205-a52c9ff0656d", "sighting--5b9e84a4-98dd-47d3-8713-768619bb890f", "sighting--4ae40a74-5e8e-48d0-b0cc-c5e3e7257ab3", "sighting--a8eed877-51ea-4264-8b38-a8dd48ff9a4f", "sighting--326e3106-8684-4ddc-bc75-d92b238cdac4", "sighting--8f458f46-2b3f-4aa2-a3ab-634c8108e6ad", "sighting--075218b6-45a0-4097-bf6c-99bddaa17088", "sighting--3a827be3-be97-4543-8a6c-969b665ec63f", "sighting--f253e11d-7908-4b1f-945e-0b01fe35a1b9", "sighting--bef27510-f0d1-4335-a2a0-2f149df55052", "sighting--142526dd-8ed4-4c1f-b9b7-761f6d4dea94", "sighting--e7d88ce3-3039-4996-9e13-af2aea825905", "sighting--560c3874-d540-401e-8851-5aee4e021c83", "sighting--4962c0f2-127e-473f-9773-25a9066932b8", "sighting--ff500d90-c874-40f4-9cd6-c8edbccd809a", "sighting--a881c4d7-93ac-4863-a8ed-a7b69fe97236", "sighting--c478e9ab-c20e-4d06-a15d-c5e265841a60", "sighting--576f55da-5567-4a1e-841d-c132b8081a97", "sighting--f89300dd-8a7b-4dd0-8f44-d6f63f3a4ebd", "sighting--2de17874-7710-4538-b1df-765e4fa5e5b1", "sighting--797cc53c-29bb-4967-af02-6804cf604dad", "sighting--1f0fe1e9-67c4-42c3-b338-032b105d7fe2", "sighting--5fd81010-15bc-4518-8e3f-6471074c5c65", "sighting--35ff3b2b-22eb-47a9-9780-66235f0ee1c3", "sighting--e0f978fd-0889-44a6-bc69-bde18d192b98", "sighting--907ff02f-7a06-4099-8565-cf32f69b260f", "sighting--20fa341e-eb6b-47b7-9c9e-c7c2119e3e92", "sighting--638b3df4-5ef0-4c43-b4f2-6f6174594081", "sighting--a02bc07c-0ad6-46d8-95d7-88f84e89869b", "sighting--7fd0b9e2-fab0-4092-af27-d2de8ddbc43a", "sighting--aabb553d-1791-458c-b283-7cf9c6f200c0", "sighting--096dab17-bdfe-443a-b7b8-d1228ef18949", "sighting--2ee3afbf-b296-4722-bffa-4b8dc2192406", "sighting--85b49af8-f41e-4052-a4bf-afcd376fb64a", "sighting--a9c50891-84cf-44c2-96d8-ba1f71f863de", "sighting--a297923a-56f9-46eb-a073-ea78697acb4b", "sighting--27d9832c-86a5-4ef3-a1a0-707f838ad88d", "sighting--37a517ec-1a0b-4e06-9b47-eff066347958", "sighting--f947f336-b994-4460-9664-da824c6682a0", "sighting--f6233400-3980-4b91-a101-3f5c1ab85d7e", "sighting--fd1e9c05-8b3c-40cc-87a7-c58085e0a7f2", "sighting--30f5d0da-8820-4f03-a1f9-634002def50f", "sighting--eb1b2bc6-2434-4784-aaa1-e1e405b9f67f", "sighting--1d32718a-1b05-40f5-9591-f4029dba6a99", "sighting--069db1fb-6025-4cba-ab25-a84954ada651", "sighting--34313528-7089-41f1-936f-0c86b2fcb4b2", "sighting--883b5da4-907c-4380-863a-225a33cd6110", "sighting--9c38f4ed-0217-438f-8ff5-6a8e96ebb897", "sighting--904f59a9-255f-4032-a924-6c7c14883f89", "sighting--787f84ec-2d93-4388-b7d8-d06bdb64d8db", "sighting--ededea72-0ddb-41c5-9852-b2309b281bd2", "sighting--6e2c6f70-6362-48e1-886a-d926039b3e2a", "sighting--e4c34484-7577-429e-b5a7-a3e5cb0dcaec", "sighting--d7cc4b0c-ea2b-4cf6-a3fe-58cc1e6dfa68", "sighting--f6712d6f-10fb-4864-84d5-49cd88bcdeac", "sighting--45562687-c426-4d1e-973f-08d35c90939c", "sighting--c8a29f0c-8f11-4560-bbe8-b1698e38b439", "sighting--291cb2f5-e22a-4a66-ad72-f88145d2b2d7", "sighting--acf9d7a9-2443-48a5-9d6a-509d15518ee7", "sighting--b684c9f6-13c1-4e02-97d7-b47e73eef4d9", "sighting--e111342c-464c-424b-944c-ed16d05a0927", "sighting--f90a737c-d5f3-4772-bffb-d17bf078463c", "sighting--aec401c0-4da1-4726-a967-165a93cadef3", "sighting--7dba85c6-dc80-44ab-8b4b-e27119751cc1", "sighting--2578f757-f3f8-40d2-bd9e-af42430072b4", "sighting--06d25e32-c659-4a02-b4dd-1ba1a884e843", "sighting--b6209477-1278-459b-ae9d-49e30f7526bb", "sighting--271d1fce-34e1-42dc-b07a-71321221c1e6", "sighting--a9f377bb-464a-44c5-828c-e999ce4c4bf4", "sighting--69b18f42-4a0b-4736-ad25-3676d5815701", "sighting--4bdad9bf-45a1-48b6-a417-b6cb1724b715", "sighting--ab6e2787-1d61-49e9-b75d-84ca8704fa44", "sighting--4718f033-0af3-41ac-9b02-d8b28186cab7", "sighting--2444718e-8d0a-4653-8e8b-1953baf7a7ac", "sighting--28aead88-346e-4abb-b60e-b58b0150488c", "sighting--4036298d-239b-4ce4-ba2f-75b17d89c7e5", "sighting--7f88a5e8-33ba-4468-8ee5-65dcc5ef240b", "sighting--ad817fa4-6e77-4fa1-bb7d-a6a859e8fbbf", "sighting--eecd30cd-af55-4965-bff7-5c72ac2b75cf", "sighting--745d73c1-32ec-4050-ae3a-e5ace00f984e", "sighting--fc7c1785-25cf-49d7-a184-7da2a32a59f8", "sighting--a5c63cb1-5742-4586-80bd-617e29b2acd8", "sighting--5383e702-5006-43b9-8d38-c1357b73166e", "sighting--da3c69d6-011b-4892-97c1-e307b57aa297", "sighting--75dbb332-0a23-4748-80a9-b4e9194435bf", "sighting--5432d3a4-e637-40aa-83ab-09c554f98854", "sighting--830fa047-ca19-4fce-b7cf-148b2a6539a5", "sighting--07f4ba58-1bdd-4354-adf5-165287521caa", "sighting--c80ad09b-b7b4-41a6-8b01-013e530a203c", "sighting--1a76a7e8-a7e1-4b75-9896-3528f9d1fc4c", "sighting--48d52c22-5ee2-495b-b4aa-57bd026dcf50", "sighting--00435da6-a70b-4213-9e6f-2c5244958c44", "sighting--1f99dd44-3c1d-4665-8b9d-9719cf6b5754", "sighting--ef2110f3-e83f-4768-a336-a2f9ea7a869b", "sighting--0b43dc0c-2bcd-4f42-8200-8605ed877c02", "sighting--8114ea1f-3397-434c-86a4-c475eeb1e1f8", "sighting--275b47f7-c034-4373-9fa8-c6f6485f3146", "sighting--4404b4ae-5f05-4fdb-b791-d523d4a6b94f", "sighting--1893a964-1725-4b90-b767-f3221aa6251c", "sighting--1069eba5-4f4c-459a-af3e-149c5916c44b", "sighting--d5b70d29-67d4-4831-ac0c-0f9da0881830", "sighting--4b2d75b7-a58c-4958-b29b-adbffc320d37", "sighting--eeff1645-2966-4580-9ba2-e54429d23903", "sighting--a4fb8cd0-1754-4130-b4c3-66d2be4fb327", "sighting--751616c9-3226-42ee-b549-10f6ea15ec5c", "sighting--83fed7a0-694e-477e-8783-f37a34c7a1bb", "sighting--76ef95fa-422f-46b8-bfc6-a6124dc1b8b0", "sighting--1f004125-2e13-44dd-a598-5ed8cdd14c8f", "sighting--ab3b9cf8-855a-46c4-abbb-c2e5f5c84a5b", "sighting--5da1a70d-9427-4325-8316-b315989972cb", "sighting--a7c40428-13e0-4bbe-ac6c-5cba0df3f1b8", "sighting--07758461-7c17-4527-a36e-9407cc387e12", "sighting--7da183da-428a-49b3-ab7a-4901f10f3862", "sighting--a1c17df9-937a-4e7b-ab8e-380d0dbd84ad", "sighting--18cb05f4-8a6a-445a-96b2-bde9315051d9", "sighting--f96bdde1-986f-48c3-81ac-f0f6ae811ab7", "sighting--9e7417b9-53d8-42f5-b600-3a3c9798b9e6", "sighting--a916a960-5efc-4d7e-83c9-f5b79527f00f", "sighting--ef2761b9-0903-447d-8247-5ee042dac106", "sighting--f6dcd541-974c-4fbd-b8c8-8ff39d8ddd64", "sighting--13816193-9dbf-4f50-b5d7-6663734fc4ad", "sighting--05c9f2ca-4ff7-4042-93d3-8eb0af2682a1", "sighting--da9b950b-e693-4870-a17e-fec7ba96260f", "sighting--669dab67-1f2e-453e-94ba-ed28247ac5d8", "sighting--901c48e4-aa80-4edd-bae0-597d8d9c33b3", "sighting--f9338138-dcb0-405d-be45-ab8afdc7a937", "sighting--77b5247a-1db2-4f76-ab3f-ca8821adfc29", "sighting--83c29fa7-b89c-4acf-82cb-88d4c3c4c8c3", "sighting--c218e871-983d-40f3-8f47-fd3e93016906", "sighting--2f900d16-5230-40c3-a107-907545c676ab", "sighting--773063b5-3349-4b61-b6ce-38f84107c2c1", "sighting--fc8de8b9-f1cb-4f9a-9a11-bbb2b5c25a19", "sighting--3c0d6bb1-9e34-4b7d-99b2-237690747b74", "sighting--8d119150-57ad-42d7-a9e1-cd94900cdb1a", "sighting--f7f93508-ae4c-4547-9886-b6d1a518229e", "sighting--95a47d35-d95e-43f0-b67e-30254c33eb6c", "sighting--22c579e5-b3d1-4a00-8570-ba9c94aaf64a", "sighting--84f32110-1ad3-4cc4-9e90-3170b2985c9e", "sighting--a696d756-d0d4-4123-9885-200f4fb0d8e8", "sighting--613b8abc-0cde-4590-b9d0-3911fae7d40a", "sighting--7afe91b3-ecd4-4641-8e4f-6cfc49c795b4", "sighting--71bd39f5-b6ae-40ac-9ec2-aabb24afbef6", "sighting--3d1ba3f8-fac1-47a2-b4c1-04a772ac51ff", "sighting--729a4ed0-def0-4e67-a35d-f2e2b7d017e0", "sighting--4f34be8d-0161-4b2b-8c1e-cc36093bf85d", "sighting--3505676c-4600-4c99-9463-8d489a720f72", "sighting--5e8a07e6-7030-4b2d-9675-75aa59ff3e1d", "sighting--2c815132-e588-4a92-ae39-3b15c9939ce5", "sighting--709fd8e8-698d-492a-adaf-eb0262e8a973", "sighting--38df98cb-9a01-428e-bdcd-3e0ed161ada0", "sighting--ca7e4ae7-239f-4cc7-9524-adb47a305a46", "sighting--c0f7c1c0-645d-4d01-a622-c3f9a6e7a24d", "sighting--76181178-bf77-4e03-a446-86f0c56e083a", "sighting--9ccc04e4-1a49-4995-9ba6-8349578ce83b", "sighting--9e422f42-794d-43bb-8dc4-09a139daf560", "sighting--9a67e344-35c7-4a0d-9cf9-4fffb6f02dc1", "sighting--13b6d19f-6e6f-4e85-afe2-7ddeb6e1934b", "sighting--1bf10eeb-a2bd-4433-a793-dd8791a45e1c", "sighting--b219adf9-7712-4f55-8a8e-8f734579e875", "sighting--a3be6c8c-bd3d-46e6-aa02-abde9017bfc6", "sighting--dc3295a3-a48d-44ef-a942-40466489d87a", "sighting--2d336129-5794-44eb-8558-77b56071ef63", "sighting--4ab97da1-2d3f-4099-b2f7-8d3ae1449122", "sighting--87c32030-8f83-4b2a-9be4-06aef08641ff", "sighting--78f997d7-e13f-4d1d-b375-c3e7f1798138", "sighting--6e21b0b4-124c-414e-8271-6aff2db3d623", "sighting--9d80587a-be8b-4055-bac4-5335e832de27", "sighting--4759f542-a471-4fdb-8094-f150ccbc9868", "sighting--feb15287-639a-4d5c-914f-2ebc04e99191", "sighting--aef17cf4-c9b4-4174-8f14-cbd3001733f7", "sighting--bd5b3fe8-ac26-41bf-83ce-65cb11c1a915", "sighting--8ac541be-b7d4-4db2-b557-7b8eee6ad464", "sighting--1d639def-4d41-4389-9c83-066f95ab4ab3", "sighting--62f5a0a7-cb27-4a56-a1bf-b4d47e797577", "sighting--453324dd-b48c-4440-94d1-c438eccf5898", "sighting--488b81d7-4ed3-43ab-b044-27051e6c265f", "sighting--e70ec85c-adb9-4c8d-aaad-8086641b8fe2", "sighting--ff472874-ead6-4e2d-923e-3c258be2acd8", "sighting--de883065-d63b-47a1-a0cf-328a1d0e7c1c", "sighting--94ed9369-2e5c-450e-a5e8-7e28cf8601b0", "sighting--bf555dd3-a698-42df-a30e-2679906d6710", "sighting--59b2870e-b811-4695-8081-6de331cb4300", "sighting--c9ab6d33-3292-4b04-83cf-903a111c7bb3", "sighting--8e495b04-fa86-4233-add2-78ca5974dc31", "sighting--6d35252a-1818-4398-9f77-9825b658fa83", "sighting--d27e1ee3-68ae-49c8-a7ca-872afc228116", "sighting--78747394-c10c-476f-86d3-ff3e6c7963a3", "sighting--dbfbf7f5-f792-4a8d-9509-022457b4bab9", "sighting--0a15b720-4263-4de9-a179-69ae8046b7f0", "sighting--65080e50-111d-43ae-9068-0cf5de90bef3", "sighting--2a02c449-f1fb-48fa-8277-6046813f8c0c", "sighting--8d4f86e3-8f37-4e7a-ba9f-e142c9fb0901", "sighting--3ee79472-4dbf-42c1-b3bb-63e9340a8c7d", "sighting--9a749667-49b3-4286-a642-abbd9e604f10", "sighting--c05e8f1d-3784-4517-bc0e-28c10295eb1c", "sighting--41c4350e-a449-402b-95d2-e8d1b6869204", "sighting--d7001b62-b063-4296-80ab-09bf9bf9a87c", "sighting--b88f0c06-42d8-48e3-ad76-ef0fa93d756a", "sighting--a579fb73-6f32-407e-82f5-a5d2748e4f4e", "sighting--eaf9fb9f-02a5-42c2-805e-ec86f95ea227", "sighting--89905379-a806-4f7b-b89c-912de79ccd95", "sighting--332460b6-709d-4fce-a9f9-b5401d3a68a2", "sighting--c90feeb5-5373-4f44-b78b-6c4c3763e84d", "sighting--8cf6fbbb-8566-4a80-a059-f927580037e2", "sighting--0cae154f-676e-4350-83af-70c50ca8fb3f", "sighting--7127610d-8f8d-46e5-840f-290755792661", "sighting--668ccf64-33f4-4fc7-a300-6d5d145ddbb8", "sighting--7ff6cf19-0447-46cf-8c42-7f8aa8dad8c6", "sighting--547bc64b-f90a-479b-9a83-25a6234c83b2", "sighting--9c9db04a-f8b6-4640-a36f-1789f9189971", "sighting--da1fa4fb-2589-4b42-ab58-395d87f12236", "sighting--e9f67d7a-946d-4240-ab27-068f892b8f4e", "sighting--c162836e-bd98-47e7-8ea5-693b7ca29382", "sighting--37559a7b-6609-41e5-91c9-f74cebc6aea8", "sighting--117f3dd8-5509-422b-81d0-b8e5f71d0fe6", "sighting--1b9a1689-0ba6-44b5-8606-410636aa251b", "sighting--18938a95-eec5-40cf-9a02-7c6e8721e417", "sighting--1154bfd8-45e8-4de0-adad-cc04161a78bb", "sighting--48d53da4-7302-4372-808f-6f0c36f4b2aa", "sighting--2e4f3046-32e9-43fe-b6b9-30d8ba5c7155", "sighting--5117114e-b4f3-4af0-bcef-96c23ba59bc2", "sighting--2dcae8b4-72bb-4413-97ac-303664e154e5", "sighting--00152f56-c82d-454c-a746-028cad5a27e8", "sighting--38cfc6b6-688f-446e-8a72-d16680df1cbb", "sighting--7ab8ec36-e5db-462d-a863-78d659878708", "sighting--553ece25-329f-4f47-928b-91570c2697a4", "sighting--be04d7d6-cd54-43c0-b4fd-0c7914339ab2", "sighting--1131b859-cc98-48b3-845d-667ca893c352", "sighting--d8dae45e-df70-4bae-aa4c-e94fabdee2ef", "sighting--fc2c85ef-93d7-49f4-93d1-af5954d410c6", "sighting--90fc134f-b5ee-46cc-98c2-e68fb3acd938", "sighting--750259a0-4ac4-4c0f-8d7d-9ed5ab65f2d2", "sighting--27da1820-98ad-4f91-94a7-14c5fc5c3e51", "sighting--50f5042e-ebb5-4b5c-981e-98fbde92ba80", "sighting--b5df3cf9-ecf0-4d93-ba67-3af268461229", "sighting--6c316cae-a80b-444b-b964-a0d61dc1e2ca", "sighting--44751bc5-9e6f-4e5e-9f61-c06e8fd3b1c2", "sighting--a2ab3200-4ea2-4abd-ac4e-4613e8022c98", "sighting--9183af51-c300-4261-b4b6-f1f83120a7cb", "sighting--85c69344-bc43-4198-912a-2381c7280961", "sighting--ba8a982f-cc0e-4e98-84d8-fe8e3068b2d4", "sighting--0f62f83b-84d0-40cb-9f36-164cf5eee9e0", "sighting--164e4c8d-2295-4042-8c34-c3a25bfbd9a6", "sighting--6f4f4869-14e1-4b60-a1b1-acc9d5a27cc8", "sighting--22f2d50e-2eef-4998-b819-660d33f8352e", "sighting--0e2932c6-45e2-41cc-b90f-554abf9e43ae", "sighting--fdc7bb7b-38ba-43b1-bbbc-ce3a92dcceb3", "sighting--844cdff5-2bd7-4317-9440-52ec42174fe4", "sighting--51c15e24-32ae-4e89-addb-274264855eb1", "sighting--54461a71-9b66-429c-88cc-1f1030c5e66c", "sighting--2f2745e6-b4ac-4b80-b90b-61a6723f17e2", "sighting--7115771e-21c8-4383-8a14-5264af80bde6", "sighting--108600bc-f4fd-4912-b5b1-fe92e1a476c5", "sighting--5ea9e124-8f9e-4dab-9977-b51cc7417a08", "sighting--490b4501-cde5-4361-8b2a-0cd0d575b12e", "sighting--91141e5f-226e-4421-992b-3dde1131d440", "sighting--eb5f97f5-7933-4f52-958a-65fac1d2cebc", "sighting--52872580-7038-4a72-a360-05da1c950d71", "sighting--5c45c8d6-4df6-4cd7-97c9-a47cfa4b919a", "sighting--c6c9c870-f677-4d93-a972-0adde4005252", "sighting--2cc1d23d-0649-456d-8f8a-cc3a1ae9347e", "sighting--39e61648-5244-474f-a397-bb50a3ff6740", "sighting--4ce283f2-b8fd-4381-bc6d-fa1668d15d50", "sighting--f534a6a1-b260-4ac1-8eb9-d81396f7c235", "sighting--87ac9ef8-db9b-482e-9f09-8d81cc9bfcf3", "sighting--b4e7e378-e088-4dd4-8d61-8804ba027b3e", "sighting--878f86fb-93f5-4421-a383-351dfb8ed6e4", "sighting--fe9cdc18-8850-4afd-a0cf-8cf20b4cfb05", "sighting--02d55e6f-d7b8-42e7-b14c-a8d95ad2a1c6", "sighting--82c12f33-b366-4e9a-8cf3-c8935ca41904", "sighting--93af8643-650c-4a3e-9f10-c10d776412ed", "sighting--d17930c3-0c60-46cd-b42d-5ac3b0e5aa30", "sighting--164eb4ed-04d7-4ecc-afb1-389765269082", "sighting--23cb2f9b-6cb1-4201-8365-2cf66365635c", "sighting--5465f212-5c85-4120-9a4c-df85e99e65af", "sighting--c94c16da-cb36-4f15-8271-2746f4dd07f3", "sighting--747cc425-227a-48d2-bd16-35ed6b071ebf", "sighting--22896342-d68a-4eba-aac9-808d05d41ed4", "sighting--94b2edca-3f95-456e-b349-a0cf31eb7a09", "sighting--d7326bfe-ae01-4f65-ae52-73bc36bb70da", "sighting--98222eb2-f558-45b8-b7fb-54d89558eeaa", "sighting--41f3c172-346c-4800-ba03-4c951335000d", "sighting--f36257ca-6430-48e5-b58c-84072805ae73", "sighting--e2849e51-401b-4a37-bc5f-019e1e7858d3", "sighting--b4dad214-0d8a-466b-9008-ec15b18b3255", "sighting--af196863-940a-4276-8a1e-411eb7cdd229", "sighting--bd123e91-54db-4168-8b1e-7b6bbfcf53aa", "sighting--7656f908-188a-4de8-8d72-70907277254c", "sighting--5973d8b6-1213-49cc-a4d3-5d90d49bf8ea", "sighting--cbf75cce-a2d9-4dda-b3c8-60848c250ff6", "sighting--b2fc4f21-d31f-4917-81c7-f4693305d780", "sighting--9aabced4-24e2-4225-975c-28c82912682b", "sighting--b35bc8e2-2cb9-4d5b-9f2f-aa4da22cb427", "sighting--3653beef-de51-4fff-9769-a140b415c702", "sighting--64f3e6f4-ca95-4456-94cc-06a022b8d48e", "sighting--036ac141-c3b3-4f39-b5c9-66c3bc48188e", "sighting--f1566d7a-cf87-4fc5-982e-df42db324f08", "sighting--e93acd3d-f22d-4c80-bf21-0a1e49423009", "sighting--6feb2ff3-56ee-485e-9e1e-24c1f7ac3e96", "sighting--6a54d268-04cc-48e5-926c-0af2f75c3c87", "sighting--88ae5986-545f-49ad-abb8-9888672273cf", "sighting--9baaeaff-b985-47b9-bbd9-889380fffffc", "sighting--5927b994-67ba-45ce-9d18-86ddf2346bf4", "sighting--4505ccc5-1d7e-463d-9051-d1d4b4ff87d2", "sighting--10ecf834-9f77-42d7-8f93-e7361f486714", "sighting--f4d59114-b1e8-4eec-8a50-4e3a65c4d314", "sighting--4762d572-3df5-4120-ac2d-b1b5af2efa2e", "sighting--697820bc-e1a4-4c4f-9890-35b313d4a20d", "sighting--99f2f61f-f449-4a84-868d-d0afc451b42e", "sighting--2a2ff3cd-e18d-43bd-b940-107a7060a89f", "sighting--9f3e2d39-a126-432a-9cf7-722dedf49c1a", "sighting--6c57e7ad-116c-42d2-8570-e65c67206cb0", "sighting--7b87d86c-0fa1-4029-b800-1139d1b0dd2d", "sighting--2f345ec9-acfd-4160-b043-f45378e13f20", "sighting--12bebf73-3001-423e-bec1-72874f874980", "sighting--1b98776b-edee-4433-b429-0f5389ef349d", "sighting--c0522da9-a8db-4bed-800a-69bd9b7af73b", "sighting--593c4d24-b7c8-4bab-bf36-acbb46db17ea", "sighting--db563ca9-1274-4bac-bea9-fa063783edcc", "sighting--7355149f-db43-4137-a386-26f0babdb707", "sighting--263d05a1-7d65-4a28-941a-933c3e082ee8", "sighting--6bc6dd85-e155-4ca9-b557-d34ac3d5abfd", "sighting--cc254b68-00da-4de4-b41f-6f2c9788bd38", "sighting--fc2d470b-0581-4586-81da-afd72f0af6b3", "sighting--a5faaada-c95c-43a0-b7ee-56858ac10ab6", "sighting--b05c433a-e302-494c-9d8d-d0030d4974c6", "sighting--cc3d06db-0e1c-446d-803f-be13ec4bd435", "sighting--eb8780d9-a067-4f56-a189-4e720188fef3", "sighting--6cc6310e-d336-4389-b115-255675e298d9", "sighting--27ab7539-054d-420a-bcff-09ffdd0d45f3", "sighting--94c13c0e-ee99-440a-8e9e-7fb6ad4c7463", "sighting--62798001-2d6f-400c-91b8-3e9652ac2f5a", "sighting--9982ebd3-cf5b-4678-a2d8-c3bdd252183d", "sighting--40835280-8166-424a-8ce7-813e47ee906e", "sighting--512bc49f-f63a-4ab2-8471-ba573bd3d867", "sighting--77ee42a8-2623-4dd6-9636-e65ca173e2a7", "sighting--c7f0727c-0c46-4f04-918d-ccfc1df78ad0", "sighting--b5e23fb9-0e52-4901-815a-20b661c4f3ff", "sighting--57b6203e-584d-4dd9-b08b-e6b464f4267c", "sighting--725f531e-464e-440f-844a-e8650cfdefae", "sighting--0239bc9c-76d5-43bf-b735-9cdd000c9e48", "sighting--fef3d9fe-a35a-464d-bf1c-a31add810c35", "sighting--2a0db113-9524-499d-9b91-dbaee33fb57a", "sighting--61b269bd-23b2-476a-bdb7-3801e4a16d39", "sighting--9312f42c-0d35-4212-87f3-c162c52cc0f0", "sighting--1dcdcdc0-96ac-4b0f-905a-3f187745823e", "sighting--28a25e27-99cd-4af1-8299-925409ce786c", "sighting--7b390fb0-4b40-4b41-8e69-05c27c969f09", "sighting--5bf70296-2e97-4c4b-be38-8f40ccbf8846", "sighting--6b5ae2db-c21b-446a-b8d1-dd3fd50aa3c4", "sighting--fbd91c43-0118-4b84-89ce-7a50f120f7af", "sighting--8fdb276d-d795-4597-a47e-d2121946f3e2", "sighting--baae3535-190a-43df-9d9b-b5b0264e584b", "sighting--75633833-fe2b-497e-bf2e-6dd3a245b884", "sighting--66c0190d-1c88-4dd8-aca0-11c2b0231ad3", "sighting--3bfb08cc-d46f-42ac-9495-a7b87fe69141", "sighting--60d7305e-96d2-49c7-8872-8e92123e1f08", "sighting--f864c35a-7340-4729-a884-4e51d63cf2dc", "sighting--5eab9ba9-9996-41be-a262-3f285a4596f3", "sighting--b2cb984a-79cb-4e2c-b56b-b252068f39e7", "sighting--2c8947fb-eb24-41db-acab-5b4af23e014d", "sighting--6b0f441d-2a30-4ee4-91d6-4341d4ee5c54", "sighting--f7087370-3215-41f3-93d5-242d1f82d6f5", "sighting--838522b4-069c-449e-9c12-8030575c0817", "sighting--78c27add-153f-4bba-adc4-c701c5caecb0", "sighting--2f646518-c042-4243-a656-887e2921008a", "sighting--bf9f34fa-a821-44f0-8805-4b0c9ccc22d2", "sighting--64e0220f-d4b4-4436-aad5-54fc924db1b4", "sighting--c8dfdb50-3ff6-4f76-ab0d-894edab3afaa", "sighting--707d64bd-bbfe-4068-be39-e6e77569f34f", "sighting--114227bd-e7a9-4383-ac01-caf67dfe4a34", "sighting--0ec83866-a6ab-4653-bbb6-e0809ba136bf", "sighting--01a1d4f2-fb6c-4d87-a8b5-74c6e12a8cbf", "sighting--55f209ce-6d0d-4df1-b46e-8e6c27656b3d", "sighting--70824de0-48c0-4900-a36c-ea90b232c70a", "sighting--bb041886-d196-47a8-91c7-8f3114682336", "sighting--a79f7d78-240d-46b8-a553-2498ef70f7a6", "sighting--3e97ab07-2890-4f19-a133-67e2edd7cf3c", "sighting--6769b696-f2db-4027-bb72-f05f2b97a89b", "sighting--0bbf680b-c420-4d8f-825f-8e621e365973", "sighting--2bc1bceb-6ac8-4400-8d97-12858047eccb", "sighting--90f68e86-818e-4af8-b447-b0342ce7ea8f", "sighting--631d0e00-822a-4738-b8d0-d01bf6cae221", "sighting--cea4bc41-b7f4-43da-9101-d299e1174d37", "sighting--2855cfbd-5633-49b2-a6a9-5565e4a40043", "sighting--ad4b7af2-77f2-4738-8533-780a6c30ccf4", "sighting--dfb5c657-5743-4e34-a5f8-7e1146fee6f5", "sighting--e03090e2-ebe6-4539-828c-aa53ffdd9887", "sighting--3720b60d-d8f3-4768-b16d-621efcacafc3", "sighting--3269800e-3503-4a13-8111-aa4c73da2497", "sighting--db4e463a-fa43-48e1-94c8-f7f78c7db297", "sighting--9cece75f-409e-40ba-9875-e60147e36a47", "sighting--0bd60b51-b381-4d9f-820d-46813b0001d1", "sighting--0671dc45-8081-4228-a28c-5af8239e305b", "sighting--f5deef7e-990a-4be3-b484-cc4ed93ce9af", "sighting--e9e30416-f1c7-4dac-90d4-d79f55e3494c", "sighting--9ab62c45-2721-44ee-8a04-277721b38101", "sighting--88d38c2a-77af-4a4d-b0e8-58d815da60cb", "sighting--59f436af-60a8-4526-99e1-4204a1af6dd4", "sighting--3bbb9a44-fc27-4784-9b15-cd922a735eab", "sighting--bf55f1ff-2020-413a-9c35-e36ac13ad204", "sighting--d14de39e-70f1-4129-8bcd-b55b0f457c2c", "sighting--7a8c448c-1409-4288-bfd9-a346770c5cb1", "sighting--745f1bd7-ac72-4574-bd88-206d277e5a78", "sighting--906aa422-c393-47cc-aa7a-600b58adc384", "sighting--2faf7376-5226-46f7-91c4-b0516c461d88", "sighting--45e24802-c5ab-4e22-86cb-a83964645700", "sighting--64f62612-8330-4960-992a-b66561b703b8", "sighting--5428477e-8750-4dd5-b68c-b47eef991d67", "sighting--69fc604f-d4fd-44a6-a4aa-4771ed4ca672", "sighting--df64cf25-e8c2-487a-bf1b-97a3fd8b4543", "sighting--32354904-1cd4-4ce0-8155-70ec5a3256d0", "sighting--e6d3eaa7-a78e-4b5b-b66c-cc1dc575dd07", "sighting--e90eaf6a-3eca-4032-9d9c-616f8c68fc7b", "sighting--3277bbe5-c262-4460-9351-be07af39cc11", "sighting--a2a750ef-ce49-4095-8b42-ee06ae49e150", "sighting--35c4e139-a53c-43bf-9547-a2a92c4a7a16", "sighting--70d2df4d-847e-4656-a956-363cad240585", "sighting--7a879e5f-0621-4295-b3d9-32defcd47c73", "sighting--880071e4-7c5f-4bb8-8c79-17924667abf2", "sighting--723b584a-8dbd-4325-84d4-dd34a3ff5d55", "sighting--637cb826-5019-445e-bb7c-d28407a1b2f6", "sighting--664ad3b5-6816-4ab5-95c2-a19746167e28", "sighting--fef62d2a-d90f-4181-891b-9b42b6877390", "sighting--13fd92c3-df1b-4a1f-a665-2a0ea5d279e0", "sighting--a168bada-0fa6-4639-84b0-cac985863c4e", "sighting--7e70a00a-bde9-4309-a405-53f733380b4d", "sighting--80a849a3-df8a-4fd2-bdcd-22774c0c4466", "sighting--57d8013d-b86a-46fa-a06c-a15005fa5ae4", "sighting--83bba36b-7863-428e-8427-ba4124cc9373", "sighting--839d3935-8ce1-42ba-80e5-e6aa2dfed66b", "sighting--72b07955-e36f-45fe-b3bd-43f04fba760e", "sighting--e93d5db1-d774-4a74-ba1c-b2021e1a5286", "sighting--cb9e759e-b5db-4748-9148-3538e196a22a", "sighting--6b44b1a0-8030-4882-934d-332a1d1f7b65", "sighting--7fd0da9f-dd56-4ccc-a7a9-760404a74bee", "sighting--eb1f72c5-55aa-4c5c-9225-aa9624aa690a", "sighting--2bd96d91-acc7-4a20-be9a-d5f4eefb9fc5", "sighting--685c5492-ef68-42b6-b102-4edf668a55bd", "sighting--a21de0ae-a564-496c-b3c1-2f8cd45ead35", "sighting--5f03ec95-49c2-4288-9f83-5d89a4c627d5", "sighting--2f8d39a2-1197-444a-ba2d-6dd4ceb7b64c", "sighting--afb04580-3c87-42d7-96b7-67a91a72cce4", "sighting--b9c24883-ab2a-4f08-b0b7-0f5e193e468c", "sighting--d72402e4-4cab-4ff1-92ea-881b48fe0385", "sighting--e23eb444-4efe-48b5-bf52-a80fd8608d41", "sighting--4754fe1d-e734-4547-bc61-c461119b486c", "sighting--35b208a7-f92e-4572-ab87-3b3b87f35fc3", "sighting--9be3bcec-5606-49a3-819e-70a1ea0c96e3", "sighting--9e65c64a-089e-4a40-a358-a501328edb5f", "sighting--7db50400-6af8-491f-ae97-29a4569d6203", "sighting--667ac671-5ba5-49e5-9a0a-6e6da7d0eee3", "sighting--3a06bd3a-bd33-4d42-a532-b832433e7ca6", "sighting--6aa46938-7c1e-4a26-bf9e-5f2d5540fc9a", "sighting--921a7a04-547b-4aeb-a136-e3a6e091f3b6", "sighting--906eacfb-1f05-43fa-bae3-1a9ba4b43a09", "sighting--76468102-366b-40ea-ae1b-72f3cc5b0b81", "sighting--cbc8f933-a54e-4b18-960a-940dc3af9010", "sighting--d199cfb1-4ed5-43e1-812d-60732059a16b", "sighting--0ea88cad-9399-4bae-9443-447702db50e6", "sighting--3136461d-feea-46c8-8c8e-6f34e4b6c6ae", "sighting--27ac7c83-8659-410d-a4fd-9199e13f4b12", "sighting--4f444793-5b70-432f-98da-90b0d7457bc6", "sighting--7e8dc272-ea49-4159-a573-074521482045", "sighting--2d993a08-ecba-4f6f-8de2-25bf75cc14dd", "sighting--e8f7b347-85a6-4673-8cc3-e4217c2bfa74", "sighting--063325f2-5a03-46b2-8cc6-f8171a61db6e", "sighting--c326a963-7e22-4c60-a27f-b55b23753e79", "sighting--327bb42a-1925-47ca-8441-c424d9bcbc54", "sighting--0ff87424-4901-418b-9ead-dd77ffce0199", "sighting--3604067d-6aea-48df-8e24-282e9cd5febe", "sighting--d3ac9b53-a540-48b0-98a0-e31d140288b9", "sighting--84c14710-d9e4-4da5-b8cb-60a1c13d3d28", "sighting--250e9fe6-012f-4626-9232-31d80d1dfcc4", "sighting--1ee2ffd9-e080-4554-b210-22ed0bbe9436", "sighting--b6e6a628-d3ec-4e61-a8e2-e5fce065324a", "sighting--0e219f28-5b64-4d5c-a25a-46dbf0a31beb", "sighting--2331ab37-4594-4615-b4ae-91d96a9a2c0d", "sighting--999b873d-0861-439a-bb13-bbf9f9c97127", "sighting--7f4a92a8-13ee-45d4-9cc1-3fd4bc9172f9", "sighting--9da9d5fa-14f1-4471-93cf-0d8a1c45dc61", "sighting--33ce9c35-cfa3-4d3f-a5cf-74b5b2a91236", "sighting--d97b9f73-1e4c-47ce-8496-1aecdb007b87", "sighting--e47efecb-c457-45a4-83f1-bb261d2c93ef", "sighting--daccf1a6-d94c-49ae-a5f8-e5d52d107cbb", "sighting--38dae82f-a2ae-4f50-8419-43122dfad2aa", "sighting--a2824b70-7600-4886-b465-5ac9b24cfdbf", "sighting--24143a23-9f8d-49d0-9132-f9314cb12a48", "sighting--20273a33-d867-4dcb-80e1-9a100167ef4a", "sighting--35d58eb3-1229-4087-8a4a-1c99cbac0b79", "sighting--d2d79ef3-4421-4a3f-9714-da62a74ba870", "sighting--e5dc4d6a-e963-438a-a759-da3e61687f57", "sighting--6a9b923c-7f96-4dc9-b02e-fc7bb5af9e11", "sighting--40abe5bc-062b-4606-a1c9-de0c116aa233", "sighting--0eeed87c-d337-4115-9bdc-87bfa1ff1f65", "sighting--d8a035f1-232d-45f8-aeed-7090b22b8069", "sighting--77512fef-92fe-45ac-913d-0fdf6ca0aa90", "sighting--a8c6c237-9506-4914-a344-7f8514aec2ee", "sighting--e8174f87-79a6-489d-8291-e27a7887eca6", "sighting--0bb39a9b-8ccb-44a7-876b-cdae92c169e3", "sighting--7ebf7c7e-da4a-4287-abe1-bd1062296e36", "sighting--8608c378-5b02-45c7-8b0b-bd3ae00680b1", "sighting--c184d90c-6f9b-402d-b2f5-d462f35cd848", "sighting--609a3f16-33f9-4489-83f7-d8017be5c7c9", "sighting--1fc2e046-bde0-45ec-9890-329e86db201e", "sighting--2adb90aa-0b63-4479-be5d-5fc9586ac52b", "sighting--bda87369-78cb-46a9-b01c-2b40d888dfd9", "sighting--f7fc0ff1-a15c-46fe-a02a-248a7f71aadc", "sighting--19e8455a-2c0d-4367-92bc-1147330e5ac2", "sighting--98b8633b-a01b-435f-af87-92cbadbbf184", "sighting--a7e472ea-9c0c-4f28-8622-54fd2de613f2", "sighting--5d12620a-e328-4804-959e-3765bc3f9a2f", "sighting--27419a81-8cc4-4fe8-953d-c733f2ae19e6", "sighting--c1da0c95-b315-4d59-b818-2198247f6fed", "sighting--5eee01e4-5eb7-4e62-86e4-8186ad3c62c5", "sighting--37039249-cfd7-4f42-9ec5-027c7e578b8d", "sighting--6cabdbea-c78d-447f-83bb-1b38baaf8237", "sighting--5ba30516-79e0-4dde-94d8-f54a08da1403", "sighting--9035cc0c-faab-4968-9a5b-970b1eff026c", "sighting--66e9c7c1-d9c2-4f9f-a92f-4e559e5b3418", "sighting--4d114b82-aa78-4682-b8fd-c6c3f743e625", "sighting--e0b82baa-ceed-4e66-8610-b65ec7938836", "sighting--e9bc446d-8e37-46ed-ac9e-7936c7d5c0c6", "sighting--fc87115e-f58d-494d-9bf6-84c894dfdf9a", "sighting--9c9abc85-46dc-4d13-a586-1d6dfbe33295", "sighting--8c1b3311-0c1b-4e2b-8d6a-55a3863bc9fc", "sighting--35ffbe5e-af22-47a3-9f27-44721062b75a", "sighting--d2cb4226-dd8c-4554-88dc-b52e48f1cb68", "sighting--15aa63df-3fe7-4e2c-8f9c-08357d27b8d1", "sighting--6d7ba8ac-0804-4010-be8c-8ba775aaafd0", "sighting--1e763560-ad40-40aa-a74e-79c47ba6f372", "sighting--6daa99d6-279b-449f-a681-1a9c49e137c5", "sighting--17ef05cb-c8f5-46de-83ff-1e82447889f3", "sighting--7b2c8b6e-1f79-4461-b594-bb61f520a3c2", "sighting--5406ae49-12d4-492f-9a4b-8bd4b6be4649", "sighting--34e0f75f-aa94-49d7-9ef6-e2cb1d1edbea", "sighting--2b05dccb-4247-4aa8-9e01-c1b051ac39b8", "sighting--7ad9a2bd-949c-4b94-9581-1942ee703424", "sighting--6ce894f5-16c2-45d9-8313-6500b8296dfa", "sighting--38f2d6ec-9e75-4e43-b9a0-6d3f8adbda20", "sighting--ad2c1db3-b6d1-47e2-840f-0b04dd33f22a", "sighting--a6c29c34-d97a-4aec-81e3-034d38d1bb4f", "sighting--6bdcc17e-16a8-4a22-a295-c80e8297362a", "sighting--9bd5e75f-7ed5-4213-a445-f00e617ea580", "sighting--3b5660db-c5a9-45c0-808d-8c655474c42f", "sighting--50301903-3fb5-400a-88d9-3676025f615a", "sighting--95efbd91-a91e-4e7a-8563-67f7ab0b8634", "sighting--b28f4b65-3f19-45d9-8b03-949374538dd9", "sighting--698466c9-c459-4135-aca5-9ba3b506e8e0", "sighting--86dc816b-048e-4125-a270-7fad42f9442d", "sighting--92f63576-5657-4af8-9617-576daaecd4d4", "sighting--e43938e4-8fe9-454e-867c-46d6d735ba38", "sighting--7dfd7344-f9a2-4bc9-b85b-6814d7b32455", "sighting--51615a51-dd2f-4a0d-9b41-de1c0ffdb977", "sighting--9198e3a4-f774-4d09-a2d9-fa3201f83eca", "sighting--ec95526c-269c-4a9c-9999-e4223d14f54e", "sighting--47e845b9-89c6-4938-a1b8-6b02d3fd2608", "sighting--93fa674c-0095-4f6e-9fb9-5620cb1e5e94", "sighting--86b8447c-77fb-4831-a3cb-c2fbfe55ecc0", "sighting--8b01e999-b85e-4429-b708-03a50214eba3", "sighting--5c08e95b-8be9-40d7-9e62-4fe36de3457a", "sighting--457157ba-f72a-4897-8400-7939f95543c9", "sighting--f41af946-f28c-4306-86a4-ec356ae18266", "sighting--46e97c02-97ea-41ae-9d70-95e437b37c38", "sighting--32ff92cb-01ab-486d-9f64-035c719103e5", "sighting--ea965eba-6696-4025-b7e4-b6d017a60751", "sighting--f9338aec-a752-4449-9ac4-dd97450ae321", "sighting--0eb7bd12-4ec5-480e-bae8-79f7909be7c9", "sighting--a1a3912f-3494-4664-925e-d72dcc4b443e", "sighting--e53c2e67-c037-48bc-a529-89e64d0498a3", "sighting--837bfbd0-3e89-42cc-990b-808de9ccff29", "sighting--e448dbf3-3860-4cba-953a-b601064235f1", "sighting--a91a4d89-19fe-4048-a59e-9aef322efcc0", "sighting--ba33efa0-f0f4-4265-8157-4816155f338a", "sighting--b58fd129-d268-44b4-ba52-741547f72865", "sighting--45cdc343-a3dc-4f84-836a-aafa16b032ed", "sighting--87e0b90d-3328-483c-b434-e93bc299318c", "sighting--809144a0-b27b-400f-9f96-11b06fb8affd", "sighting--9ab59d13-b70c-4918-9520-2de4a3341fcb", "sighting--725bd2c2-2c89-4a9f-801a-1859ba67b52c", "sighting--8abe5913-f68f-40fe-a213-9dda53e6b12f", "sighting--43e92e40-cd42-464d-b030-e9df12efc57d", "sighting--b1144e80-e495-4adc-8b52-4b4af8ca7f14", "sighting--8938718b-3369-44b6-8138-d6bcbeb80817", "sighting--a69f39d8-7cbf-4a51-8bfd-394b2969097d", "sighting--e153a6c5-f64e-4486-bf1b-e32ea4c476d1", "sighting--4b9cdc56-3067-4f8b-9591-0d2e2dc79743", "sighting--5d384903-5b1b-4546-8fb0-4fd53ac8b257", "sighting--c091b2cb-71e7-46c1-b2a4-3200919ca083", "sighting--822d9476-1190-424e-b0af-174c099a2b5e", "sighting--4c7edece-bb14-4a6c-b47d-6e603b1bcdb4", "sighting--add76ba9-5875-4be0-ba6d-a0a853f3b635", "sighting--3226674a-5fb1-4133-bf8e-d7cda7eeb240", "sighting--5fbbf4d6-543a-4a04-8e27-f9a0a04aba8c", "sighting--3a708c34-9224-41d1-9fe8-38d2d944847d", "sighting--8a93ad20-2cb3-46fd-bb9a-fe0d73e2abaa", "sighting--d2092ba8-04f6-4e80-86e7-5090550f2317", "sighting--bf4f3b8e-e029-4f6a-a580-868f5cb6b6bf", "sighting--d3f1dc0a-91da-48e3-81ba-9a2706353996", "sighting--efb42771-eaf4-499a-9fb1-9b635e86281f", "sighting--e2a99a1b-fefc-4db6-9d78-39a4188c7089", "sighting--d69c3db8-e293-4e18-a692-e2e8dcdef486", "sighting--f491b041-28dc-4ee0-8261-70c7e98815bc", "sighting--64fc69b3-4fa4-4fe0-8fbb-e9b10d12ce71", "sighting--a6fe9253-e550-4ab3-98da-b4acec7e4bc2", "sighting--eefbb4c9-2781-4ba7-90bf-42663c5e6fe8", "sighting--70fc6179-f25f-40e0-ad4d-6ec3d57428d5", "sighting--9c00456a-564d-45b5-992f-5d1def3e8eb6", "sighting--cd72a580-54de-437b-9a48-6a68145d6ded", "sighting--c3acb05d-6292-47da-9c7c-99e4b677f229", "sighting--48c375f7-4d43-4bb1-a7e5-fda0cb034ee0", "sighting--b60ae7e9-707c-4d06-9530-0039f7215c78", "sighting--b0df4e13-b580-41fe-a982-cd9e816ca3bf", "sighting--46fd2f66-5d27-41bf-b71e-a3dbf310e382", "sighting--871a3737-b566-4ecb-a6af-e4a2efaa87ac", "sighting--cf53e0c9-240a-4938-a806-6b18ebf42b4d", "sighting--9d185b85-ef5e-49ad-9ed8-cd644acc1418", "sighting--87d1bcf5-c9ee-470e-b6e9-50b88cdbce1d", "sighting--3e82f0d8-cc49-4622-aacb-5c365d28b8bf", "sighting--a48d92ae-463c-4c1c-9e76-142681a8ed61", "sighting--975733a6-6fe2-4617-a2a4-96bdb8ba9edb", "sighting--12d0690b-d8b0-4a13-be16-95d9316c3a71", "sighting--0c4b9009-f9a2-4b6f-9f3a-506c557ded55", "sighting--f036afed-0b06-4eff-92e2-3b8bc6867a64", "sighting--dd4728fe-4008-4ffb-80d2-3cacd68fb3d3", "sighting--5da1fa21-925d-46d9-931e-d6cb3eeb8340", "sighting--731901cd-a2e5-46f9-8b03-b735fdf96098", "sighting--0e81bd0b-81f6-4757-874d-bc742bb41345", "sighting--0185ea93-cb26-4891-a0bb-259f63d227f2", "sighting--d4750e25-0a00-444e-bdc6-e7a55c65e2d7", "sighting--219d0aa3-de55-4e9f-bdbd-7555a7f62e67", "sighting--5e3b9517-89ad-4411-967e-5854eef78dda", "sighting--afff0ac2-1e90-453b-a1b7-c997a70b43cc", "sighting--020928ac-289e-4f8e-9629-c2a68098dfb7", "sighting--6c52a4d0-91ca-4f05-b612-afe4d2564b35", "sighting--de0b2915-66f5-479e-b5c9-42a542c12366", "sighting--e45e6c8e-aae7-45b6-86b9-4dc41e58377a", "sighting--ede04d65-4a09-4386-a13c-bcd48b671be1", "sighting--7b0c5b85-cd3f-41b4-82b5-f5d467e6a4de", "sighting--f62c39db-7d6c-4db6-8d7c-c2fb52e87219", "sighting--6a18e9a2-aadd-47f3-b67e-e7c0dc065eec", "sighting--8b1a5cdc-71bd-4a09-b15f-62de8c6b9c53", "sighting--7c466df2-883a-4d82-9b4e-a6b1e006d365", "sighting--92577442-83ad-4ad0-a808-85705eb74039", "sighting--2f173a70-edcc-4bdc-a067-7a76f70b19b7", "sighting--2cfe18f8-0668-474a-af87-a0b9c12e9bae", "sighting--210c43dc-1531-4a8e-bcf3-520a6f18a8fb", "sighting--96947601-e9c7-4416-b91d-284f44562a9f", "sighting--4e2ab908-f01f-4b9f-820c-12c43adc5c74", "sighting--1c8b3546-e0ed-44d8-a4ce-96a2a662d3bc", "sighting--124a575b-bd26-4d06-a36b-47ae8ee330ec", "sighting--af0a1912-dc3f-4431-a4cc-f590fa6e3f68", "sighting--7481d0d3-11f7-4cd8-a72e-3a045b0f2a0b", "sighting--ad59d8e0-02ce-4ea0-aa1a-694a6dc82815", "sighting--9f080a9b-ec15-418b-a4a7-4d36021a114c", "sighting--79263ea1-4cd9-400a-8c5b-cea60289ef88", "sighting--934364c7-5470-4121-9bc6-1243efb8f635", "sighting--a8f37806-f3cb-475c-80d0-7ed076508fee", "sighting--2cc5d9f6-a56b-4dca-bd62-854078fab525", "sighting--9dee5e06-5a19-47c7-a10d-7bc2657b822d", "sighting--8c8bb460-2bfd-4648-a738-53b306e512e5", "sighting--88d2b34a-835b-44c8-9576-5748381cf65c", "sighting--ffe07599-3c6f-4d80-83ad-97f00ddd1a21", "sighting--195cb166-a084-4ee6-b543-e19f39692877", "sighting--268d2e39-62be-41e0-818b-939a19f0a239", "sighting--291bde63-c218-4497-9472-c67fda368343", "sighting--d4d1d719-9180-41e1-8dce-8cc62f8e14f7", "sighting--f7618aff-9c71-4b91-9633-3130a713a687", "sighting--2a821e8f-03d0-47f6-90d3-73310ef4c321", "sighting--cf99cdad-0244-4408-8d13-b13d16fe9164", "sighting--e4374d92-6ec2-48c1-9cf9-9ba424319f9b", "sighting--f12c2b85-68e4-4e66-96ea-d87b5ef296bb", "sighting--7b90805c-a110-4dee-9c54-e3f308df09b3", "sighting--81722654-1837-41dd-ac89-e321b80dbe22", "sighting--c593d4f4-9be7-43e9-9f9c-7770f21a2539", "sighting--03793f2e-5908-4e50-b059-57de789af860", "sighting--60212251-fa1d-49e4-afe7-4d676bd01ada", "sighting--758b6c53-63c7-4819-9980-87dcb6fb6b6b", "sighting--ac6da734-3f03-4163-b16a-afe6760c1836", "sighting--fb8750af-4fb6-489d-9d50-80d77ac3a8b9", "sighting--ed6d73a3-57c6-4dcd-9680-47c3be173921", "sighting--82cf330a-16da-4c73-b8bc-986f21363179", "sighting--9fcfbe5d-e9f2-401f-94de-9a9f70d96242", "sighting--ae14e99d-9c31-426e-9ae0-ae7e2c37f8e4", "sighting--b42611e3-8569-444b-bd60-49949f061b48", "sighting--b7ada913-894e-481b-bda6-56b834c5b513", "sighting--eff03557-9970-4285-8956-666900137b97", "sighting--7ff53aee-e5da-40ee-ab82-7e572e455ed8", "sighting--b8712e93-587e-4afe-8a09-9f80f18a83b9", "sighting--a51bbb70-e519-48a9-b7c7-5a6dc68b7438", "sighting--611ece2b-189e-4b51-83ce-3bd4b57dd8e1", "sighting--1ac34bf1-3630-44c0-a25a-d62356a7e229", "sighting--dfc03ae0-b473-4dd6-a1a8-e912ada7dfc9", "sighting--31b367a3-637a-44f3-b4a7-2dd8c17e2912", "sighting--e1be8313-2569-4d78-b0e6-3eb7aa0ecffe", "sighting--4c27e768-6ec5-4fbb-8fc6-7d718cbc44e9", "sighting--19879092-6088-4d13-a042-6a876d565b48", "sighting--962ea535-3152-40e0-8a74-e9d9e6de4cc0", "sighting--4faf4992-d243-4ce1-93ed-1aba32dccf54", "sighting--f69e754c-640f-41ec-804f-8858ec8db90b", "sighting--f3c52ed5-442d-4d57-aafa-1a47a92b9c08", "sighting--010d5a59-85d3-4096-af82-af9068572ef8", "sighting--9b1c494e-74c6-48e4-a167-2c8d244826d5", "sighting--8932da4b-4543-4bb1-ada7-e5bf8f520880", "sighting--ef24adbe-14ba-43b8-8cec-177f7f28baec", "sighting--047dc128-e0ff-48c9-8604-96c90babf8d9", "sighting--1026fb82-37cb-410c-b299-b8e43f1da49b", "sighting--683c6c20-c407-48a3-8db7-fce11ed01992", "sighting--7f0aaf1f-cab3-4c39-813b-f2749d354e2a", "sighting--616662f4-979b-4b6b-90da-9dc1a91dc350", "sighting--b8d1843c-3a15-4256-99c2-d75e2c24cb4b", "sighting--22440148-c43f-4106-8743-dc93abe755da", "sighting--13c4ee66-cc10-4ce0-b09e-5ae96ea3353a", "sighting--56fcc469-595c-4b5e-9c02-b985a3f79934", "sighting--9b592ab0-bdcb-44c8-85e2-152bdf70156a", "sighting--0b8cc47f-a53c-4c35-bd1d-0bdcf9677f94", "sighting--21b28239-a227-4a7a-8e26-b6acf9a08fe3", "sighting--27fa2b59-bd68-49d8-b8ba-4a07866ce161", "sighting--bc8c816b-966c-4a8a-a814-932258c22389", "sighting--b6cb9193-ec4e-47b5-ba03-701279520832", "sighting--dc9dd560-43c1-412c-9dd2-54eae597a56f", "sighting--c5cae967-b721-4bd2-9331-e2ac7fcba689", "sighting--2ab8cba5-8cd0-428b-ad01-fe92dc75a665", "sighting--0134842a-a894-4cc0-8454-cbfb40c8263b", "sighting--fd6f2109-f8fa-436d-88bd-77fcdc967745", "sighting--38bba474-0603-41f8-8e1b-3485b3e34c79", "sighting--16d643fb-a54e-4adc-ab8f-e22515e7f890", "sighting--cea3a3c5-1e2e-404e-8e0f-071eed6b9ea0", "sighting--037b4219-8bda-4528-902b-64b9a3aef108", "sighting--c7f5fb20-7b34-4c0a-9ed5-74d8bb400cb0", "sighting--fe03066b-9e77-43d8-9f8f-667e080f71eb", "sighting--64245ed1-7ff9-41ca-8c9a-1d9780b11304", "sighting--44906274-62c7-4857-b73f-649826acdeb4", "sighting--a17ece18-4dd5-4041-b61a-9030faaf789d", "sighting--a424364c-d7b1-408d-b58c-3e8e9c6dbfb9", "sighting--9e47025d-5190-4579-91db-f9b89492c8c9", "sighting--cea11e0c-a1b9-4633-82e4-5952c3c09202", "sighting--6e0358d2-b39d-4d05-95d6-2cf0918e8fe7", "sighting--dd03b2ae-a537-4eb0-a351-9d77c0a4e388", "sighting--a92e46b3-0d4c-4f2a-8589-e35e50c46b59", "sighting--c18c2636-3946-40de-a190-f602d67bbc6a", "sighting--e7c3c08a-ca79-4bea-96cb-86f7a2ea0e6a", "sighting--a74b626a-a468-43c8-9b37-374873f06f72", "sighting--ad5638b5-fcdd-4cb8-8f8d-a8a939f7c516", "sighting--1d84c17e-145e-477a-b55f-119fa282c21f", "sighting--e202c35a-387c-443c-89e8-4e4b6be24378", "sighting--8197baa5-5478-4eb8-8588-c20130eebdc7", "sighting--968c7263-61a6-4a2c-8020-3b2933620562", "sighting--d9fe4131-5421-4aec-92f2-d047ba42903e", "sighting--afc16dad-55cc-4837-9a91-373c92195d42", "sighting--f9f52f03-669b-4ad3-8f7f-cb264a715763", "sighting--aa0e811d-4398-4864-b56c-350b831b4bd0", "sighting--3132218a-0a37-4a3a-8ae3-ffe07cb45bb1", "sighting--9fc71589-dbaa-4eeb-b125-d0f036fcdb8a", "sighting--324f8ec2-b98e-4093-8051-22db8c9a9f1b", "sighting--976af387-6478-457f-9ba8-93f85e2415d1", "sighting--1e90cddc-0484-4c46-980e-3b080f493ac7", "sighting--e87da371-1d22-4514-91e0-0348b847c1b2", "sighting--87adb759-bf78-4887-bf37-a74a314ad5b1", "sighting--76b8d6b4-22d1-4bfc-8f3e-1e1c1b4fbb14", "sighting--e3336350-82dd-4c78-b793-8b9dfc59f82a", "sighting--5e9be387-93e4-4181-8236-601c6298b01a", "sighting--47c578d3-56ff-49d4-ac6e-5a81706213cb", "sighting--5e24f116-7498-409e-bd0f-54536d239d29", "sighting--07bc8173-2cfa-4408-bbcf-1eb91531f941", "sighting--2fcd4a40-43cc-42bf-b9d0-0ecd80537958", "sighting--b125b387-3251-4f9e-9c82-b1fd8a0c0d2b", "sighting--ad878c59-a349-43c5-a578-160f3f533d50", "sighting--d6d76f58-8c07-4395-a928-fa7958da8a47", "sighting--640d2f46-b3ae-4f55-9919-12df28b36b33", "sighting--a3884cd1-bbd6-48f7-9eef-5574324872d3", "sighting--6bf67df8-6be7-4e61-8d79-efa19ef82312", "sighting--6102f2af-c5e8-4852-a957-4c427cd5e698", "sighting--d2ddc1b6-99bd-44eb-9203-9b338a1d99a1", "sighting--f7634d8d-c146-407e-a0fb-73744d333169", "sighting--edb86a3e-5ff2-4064-92c6-1633485ddc62", "sighting--c304cc70-06e8-459d-97a1-e3d9f83b64f6", "sighting--e618b43d-1d28-49d0-9c1e-40191aa8c45c", "sighting--1aba0c29-cd12-429d-96db-8f5b31134d3e", "sighting--dab19290-bc61-4f6a-a910-0a965adcbfbb", "sighting--c0bce3b5-4f76-490d-9fd2-1502ffc9fccf", "sighting--2ca0e1d1-7cda-4ce5-97ef-fe8bcd796538", "sighting--60f47045-591b-4ddf-8f7b-b3b6c0be3811", "sighting--7fdb245a-5d05-4c59-9673-96b93b60cec6", "sighting--d4b1df1f-8f91-43cb-a168-0536e54c522f", "sighting--dc1e399b-45b6-4b5f-9f3d-6bf8ea5191bd", "sighting--5b9e00e9-5bee-46c5-8948-665919598d50", "sighting--62faa238-cf21-4fcd-b963-f400c3ede835", "sighting--a209ff36-aaa2-470a-afdf-fdca7311b8b3", "sighting--2c599463-d057-4494-837c-f26cb70c350e", "sighting--c8f5b208-e8fb-45bd-8790-2112edd83afb", "sighting--8c2dc267-0307-4137-a9ed-1f324e0044db", "sighting--6792fda3-eafc-403a-b64e-7371b0998603", "sighting--2a312c51-cd1b-445c-a0b0-15265b9d7d62", "sighting--d8e08334-3a26-41ed-aa28-d643e5f34257", "sighting--b602a443-fe24-4c15-ba2b-9bd49d42852f", "sighting--b95aab0b-ef41-4c97-a8e4-37515d07a960", "sighting--a084bf0e-92cc-4fc6-b268-00804518cce6", "sighting--aac8cd2f-ccd2-449f-9279-de9a5407e7b5", "sighting--cdab36df-4f5b-454e-9604-905fd6f598a0", "sighting--94ef2616-36c4-4b79-b46d-530da424b980", "sighting--10532e8e-8fa4-4b72-ba7d-254642f081f4", "sighting--ef548943-9d4f-494f-95f9-b24545263b58", "sighting--36f6fcbe-2def-47b0-8ce6-246b33cb40b1", "sighting--69abba85-9cc3-4b01-92b9-f3772fdf6fbd", "sighting--210edf9e-ebd6-45b7-b58c-8a08981c0b0d", "sighting--8886f2b0-aa99-4458-a80a-98f66d84ddf5", "sighting--81008773-7791-4400-ad68-11afe73a04c5", "sighting--01d9ead5-93a4-4669-9855-c1d55caacce7", "sighting--507345bf-5ad5-4d81-9ece-b453cc3ddf1d", "sighting--c242bae0-89c9-446a-81b2-2d6258c56bbb", "sighting--87d79cdd-dc18-48a4-8983-8e2ebf9e231f", "sighting--1f1d6882-5588-4481-8746-069e3154b958", "sighting--568c1493-a290-45d0-b32a-78c613361f0b", "sighting--0beb63be-b75f-4ae8-a1cd-d520060258c1", "sighting--f24fe1e3-b42a-4987-b02d-b8814ec30f8f", "sighting--77184454-f4c1-4b9b-b78f-e601ebec95cb", "sighting--0ce263df-ff23-474c-be8c-f8a37bd4bae2", "sighting--fa1e5fbf-b7d5-4df7-99a6-d3bdb676bafa", "sighting--17248174-0518-4e3b-9121-6f2b4de38128", "sighting--d3bb2db8-d0a9-4f25-a7cd-22ee7c5812c5", "sighting--33eb9d4b-5c03-4a0b-b6a8-3ad86d755596", "sighting--0b8f4f87-7087-4f5f-8702-61dcf64fe68b", "sighting--7dcfc96a-6e16-41e7-baf6-890603b80822", "sighting--b4af61e4-07cb-42e5-bbed-2dc3152ca307", "sighting--e89f89ba-1914-4d6d-b168-a505250a8e28", "sighting--82ffbf90-ee5b-49a7-a242-6f160dad68de", "sighting--82592b3c-cc7e-442d-86c8-d24abb28bab6", "sighting--3312d78c-32f2-4115-ab6d-1bb9cf793f3a", "sighting--7c0fdcf2-ac79-4ed4-b5ca-27348a17b20f", "sighting--571a3d0a-7e24-4d2c-8f8c-ec31ac2b8333", "sighting--3834e869-30b1-4a9f-b37e-d6daef18cbc4", "sighting--f0ebcfe5-754f-4962-8e95-fa1a2ce03423", "sighting--84830050-294d-40b0-8d14-03bdc4c43fe6", "sighting--0284b2c6-e2ff-4203-9e7a-a1dfe34416f3", "sighting--5fccc7c1-f56a-48a7-b3b8-b1269ab29e82", "sighting--063a9ad8-0537-4689-ae64-c6797e5240aa", "sighting--3adfee27-7a9b-477f-8944-40ef67ea93f4", "sighting--4e30d9ca-11f0-4bf7-85c1-37030a999856", "sighting--357cddd8-7c53-4fa4-ad7c-44afa5a1b177", "sighting--763914f1-219e-4ff1-b72a-878858589d3a", "sighting--d8e1b80f-3e35-4465-b469-82ab50e33feb", "sighting--fb1b94a2-a930-457a-a862-1d42b6079327", "sighting--2e7c21ce-750f-4016-b308-00574dd2b167", "sighting--50e9dd9b-961d-4586-bc40-d2672f438f6d", "sighting--99619795-9ced-4aea-ae88-b9487b1aab46", "sighting--303cefd5-a32e-4c94-b3c3-654f95321bdb", "sighting--7941d65c-7cdb-4284-93b1-6fd3f3b1addb", "sighting--20407801-6cbc-4518-8b67-3d7fbc2ccfd3", "sighting--0b4298a0-21b3-40f2-8969-2725c92ab1b8", "sighting--28898918-77c0-4823-9146-65171df0e2cb", "sighting--88bbab87-4f79-4d4a-910c-2501caa24db3", "sighting--8fd0c3b8-8d35-43ca-a152-190eb089e38a", "sighting--1736a216-0827-4c1a-b3a7-dd1c1b9fa81b", "sighting--2535a72a-eac8-482f-8ce1-9ab606e3fdbf", "sighting--be960f67-ba30-4ff7-9dc8-16a0765dc838", "sighting--a3298436-b6b0-499b-a7b4-e211a2bf38bb", "sighting--08b3d3e0-70fe-458e-b652-009f90a130b9", "sighting--ade8f5e5-2c99-4ba7-a2e0-d5b7f2cb5bcc", "sighting--625330a4-230e-4681-ab06-2d3a320f7772", "sighting--cde9bd1b-9bec-4718-a71e-e8d492da6eb0", "sighting--1f61bfbd-ef23-449e-b01c-ac2a1c81175d", "sighting--2227978e-a7d1-43f1-86cd-d799927c1973", "sighting--09e43bb6-f945-4efd-a3df-5267cc891bfd", "sighting--2db55991-2248-475e-b42d-192decc13660", "sighting--04cec3ea-8fc9-4a51-b5b5-15c7e0882aa9", "sighting--d3fd9420-ce84-4a41-a666-168ba3dd12b5", "sighting--cc83e52c-2b1f-42bc-89ce-513f41b6dd55", "sighting--6dec593b-b84c-439a-9060-f51b9c639de1", "sighting--3a3238c8-d139-42bd-8778-ed0637f4dd42", "sighting--a5e43109-bd29-49c3-b2ca-7be544de0650", "sighting--abf31f60-dc2a-4f38-99c6-50c12db83680", "sighting--080edc8a-e9f6-4e0e-b579-91fc44cc694a", "sighting--c6e09006-ccdf-4cc9-8b8f-190c1fde268c", "sighting--fe35f652-956c-498b-86ed-1773e8ba64b0", "sighting--e9d98955-f4cf-4904-83ea-9857a151f243", "sighting--66b744de-a40b-4340-a206-58e3e7c6ac02", "sighting--c5ca98ff-61b3-4233-9f8e-2ccceb825a0a", "sighting--a4a29593-943d-40ba-bde7-3bf2ba1b0acc", "sighting--00172780-3c2f-407b-8d1c-74dfedfd4ac0", "sighting--e577521f-5ae0-41fd-824e-9d96e63ab2c6", "sighting--1526dbbe-aa1c-4ffc-bd64-0316b9823759", "sighting--83246838-bb2c-4895-aa2e-40917360147f", "sighting--727eb2f2-57f2-4ba6-8c32-a16bff60fb08", "sighting--a8e9a276-9f49-4776-9483-c60c85b2f1b1", "sighting--14356c3d-b0cf-41d9-9aba-eb85934ccb31", "sighting--5796b1d8-357f-49a1-bb93-9bae6aa313d9", "sighting--d394d0e6-abaa-4260-b9ca-a7bf9f379231", "sighting--17284d5c-2b5d-4505-87f0-ca42b68f7c1d", "sighting--6365a80c-8cec-4d43-9342-f1dba5a99343", "sighting--ed5611fc-d7ed-4abf-905e-1aa12a924bf9", "sighting--e4010247-7023-4c62-8d6f-fcef344d2313", "sighting--9f6510a4-e615-48b0-bac7-53a4b059ef6f", "sighting--f5d8fde4-26df-4894-b86c-1226380b4005", "sighting--daaae87e-2131-498a-80e6-88c18edf56cb", "sighting--3e774265-e074-4445-8a84-3d5154baea56", "sighting--e0cfced3-4bcd-430e-8a52-37ed0cb2c605", "sighting--299e1bef-1f33-484a-af21-2657649f58fc", "sighting--4bb4c77f-0ded-49e7-9fa5-9d3c8bbab37b", "sighting--8a889657-81b5-4ee9-acd1-5770f5c7d5de", "sighting--f9cb64e6-29b2-4d1d-9d31-8d1ae2f6b34e", "sighting--87002d5f-42f8-494d-b968-ba98433f134a", "sighting--531481e7-ffc0-4f8f-ab4c-0e27970a5532", "sighting--f0fb92fd-4f53-433a-a1f6-be330dd4e976", "sighting--203feed8-5c7b-4b0d-817b-0fb3a1204df1", "sighting--489b2383-2865-40b3-a759-02baf24bbc6a", "sighting--09bc1c67-7f2b-485e-bbf5-681ce5cbff25", "sighting--b00be2f2-19d1-47af-88d1-cfce4b23817b", "sighting--30d44b1a-14d2-449a-8c65-f96073a3a0fe", "sighting--495b975b-c3f8-42f4-ace5-e22c637b7d8d", "sighting--dac8bd31-382e-4d1d-839b-683f8e8eb60e", "sighting--dc94873f-9bbb-414c-a580-b1fd6a6a5546", "sighting--bc74fc31-f36a-4833-accb-8d9cda0356d7", "sighting--28114deb-0e1f-4d7b-b073-d2321878b44b", "sighting--4445dc55-2866-492e-93f3-9c995551f57e", "sighting--742d7bd2-8071-443a-b76a-11e319b1fc31", "sighting--671bf561-0955-4770-99e2-cd527152e580", "sighting--998e6e5a-61eb-4cac-8493-55da2f5498ff", "sighting--73ab554c-102d-4004-8f9b-23827a419ee3", "sighting--eed19d17-e1ee-4cd8-9dd0-a65ba91b9bec", "sighting--d09bd23a-33ac-4e11-9227-405a6661063f", "sighting--d91e45fd-d1b7-4597-996e-f6999e3980cc", "sighting--f3156fd6-75ad-40ec-bbd5-9d7e72dad9b4", "sighting--49d7ae32-c41b-4b47-90b4-0d9b555924a6", "sighting--f0a923c9-e788-48c7-8c99-c7fe38056595", "sighting--0111ecb3-efe2-4e45-8647-eccec4932261", "sighting--55814df6-b014-4064-ad92-eed27a21172f", "sighting--4c232afa-1349-447a-b56e-ef19ae63610c", "sighting--bd85c7c7-a357-4243-b87e-dbb6347fb955", "sighting--ca33b2fe-fd37-484e-ab33-2d6446e803f0", "sighting--b70ae0ec-59d4-4524-b6f7-8d9702b0581e", "sighting--04642c08-ff3a-43c7-aed5-8a2d3e8f7be7", "sighting--375169f5-6e1f-47af-825e-e2b705774149", "sighting--e9b15f52-0d0d-4f25-bc5b-eac3bdc2e0fa", "sighting--1d2854e7-83c2-4b71-b47b-2ed9acacf346", "sighting--34a3b702-395c-42a1-b49f-339070d1aaf5", "sighting--5851307d-588d-4f99-9a1f-954188836ef2", "sighting--0c40a580-87b6-488a-9511-28e653faf309", "sighting--8fed272d-16ac-4351-a6b7-8c342a9b65b5", "sighting--3017826c-8044-419e-aee2-73592b7fc834", "sighting--edaa6da0-ef20-4648-b7d1-31ab2023031e", "sighting--24ee9d68-5342-43d2-8e0b-04516c9a3316", "sighting--e2076b36-0548-4649-8c07-f64e0e13c565", "sighting--d92cb2a6-107e-4a07-88da-57e002d4b7e8", "sighting--62397ac2-6520-4188-9f96-4a10619ba56a", "sighting--eece9489-ca89-4fb2-81e4-0837fc669715", "sighting--94be8bc9-01ad-441c-9431-3f3012d01854", "sighting--1dce917c-7a57-43c9-b49e-a0d7a11e00c9", "sighting--6550f0a4-ab55-436c-88ed-e6f4c7b2c488", "sighting--b2e5a05f-a62d-44b1-8ee8-5027849b0655", "sighting--6241d949-944b-43ae-8ac2-da068a818f38", "sighting--f8dc9c6c-83fa-4609-91c5-936e02122990", "sighting--ca1be500-e148-46ce-8dcd-9af3377f3701", "sighting--fc1e2930-6979-45f8-b2bc-bf1ea6dbb7ab", "sighting--9395bd59-b1f7-4364-8aeb-c83e0469d5c1", "sighting--a50ec9ee-846c-4c92-aa7d-56cbeb06099f", "sighting--450dd87c-12bd-4203-8aca-f103c24d20da", "sighting--959bda51-c782-4cd1-b297-09390ed6afd9", "sighting--dafadc6e-07e9-4869-91fe-206c6acb0244", "sighting--1cebd18c-f77f-4fdd-a643-620459ece6e0", "sighting--8f3e88d0-2b0e-427c-b28b-439deb93b490", "sighting--3eec5b3d-0a96-4943-98a2-bad1e791d1b8", "sighting--4590254d-192d-4b7a-bb7d-aa4425be9db0", "sighting--2bea5aef-f11f-4796-92cb-f1a0b56cd5d3", "sighting--0d44ed09-a67e-4310-afee-d2c54de9bc64", "sighting--5c0b4a3b-ba36-47ef-b205-5cd3ef96a936", "sighting--1c1b6306-793c-4291-b4e6-57c8a1b6ec18", "sighting--c8b2fa26-d00b-41b9-90bc-1cfabb177c98", "sighting--182b7935-deaa-4f6f-8bc5-25f33343981e", "sighting--ba174f2c-393a-4184-915c-4fc28eb49db2", "sighting--5bf73dbb-aa4e-4700-82d3-a0daf40900cb", "sighting--b89e4875-5e4c-4de8-ab78-74530e4e489b", "sighting--d98b7dcb-7458-4ad6-a7f9-1f5b0cbcc03b", "sighting--ae984e0b-e66d-4402-b7d0-545cd8bf0084", "sighting--3e871db1-eafc-4ae8-a272-42fcdabc1997", "sighting--d11d55e5-5994-40be-a343-b99f5b2adeb2", "sighting--812938dc-152e-4967-8279-a827ac16f0f5", "sighting--006407dc-c277-4a1a-a891-88883f3f08c8", "sighting--c14e6426-0460-435e-b883-92c7b2263f18", "sighting--a705520e-31a8-4e50-a877-5891974a178b", "sighting--fabd6abb-2e67-4c42-b5d6-8337149a1758", "sighting--e1713f28-aae5-4f85-b93f-c1e8814870d2", "sighting--5d7a82bd-0bce-4ddc-8f0d-48f16a1a3139", "sighting--486b9ec5-2be7-4bea-9155-b31284d9f362", "sighting--c3d1d8e0-419e-4f46-88e3-fb2729658774", "sighting--ae129ad5-e9b9-4603-aa4a-a0872beb0ee8", "sighting--255d2367-ae8b-4762-9eb6-8df0ad242a5b", "sighting--43ab599d-2ecd-4141-9257-75b82064910a", "sighting--809e0f72-0f06-406a-80ec-67fc85d0ecbc", "sighting--e0d80356-fb56-4514-9f66-fe975b5b329c", "sighting--66bd889d-489f-4d37-94e6-ef8fdaf434f6", "sighting--1fb55b09-5664-48c0-97fe-d8a2ab3a90b5", "sighting--53708bd5-f1fb-44dc-9d13-2954c2d7762a", "sighting--b0d3513a-c72a-4cb7-b70a-cd379d676955", "sighting--5126c566-5f0d-4ab9-a447-b9f5bb775aad", "sighting--3a904593-6636-43e1-8aeb-0d4b34b5f084", "sighting--0cd31158-001b-4cdf-ad3f-6a1a42839d2c", "sighting--80823830-503b-4da5-b41b-b407dd21d5cc", "sighting--3e7b5ee6-e692-4023-a4f3-bd56530fccb1", "sighting--3eab4bdf-1e93-4621-8e55-7b2db772c4fb", "sighting--184987df-9c11-4ae9-a7dd-162a71d784be", "sighting--84c29890-f9cb-4e38-bc04-674fd3b00ea5", "sighting--69f1b971-b569-45fb-bc97-cd9577541380", "sighting--d4c7685f-abee-4406-bb8e-dcaa561a2baa", "sighting--e3c0e9a2-ab63-40ec-b062-79e7b5233edf", "sighting--ba991ad1-ca7b-4987-a643-ff1dc2ced28c", "sighting--5bfeb23b-e1f9-42f8-b985-f48666a8f030", "sighting--fd31f225-a433-4b74-a025-2a2fed57325c", "sighting--d229bad5-d088-4876-8803-b24b14f6e28b", "sighting--08764784-6223-47e8-be81-32c75df11ee1", "sighting--df2fb2a6-98d4-4abb-943f-4afb6dac68c2", "sighting--93a61a61-edeb-41f0-91c6-381fbf4da60e", "sighting--49c2bd3f-8a2c-4b28-bb93-9ac21b8f58c8", "sighting--04deef2d-cf75-43a7-9ad6-e06e85e91fcc", "sighting--5e1a071e-0499-439f-815b-3b42e2823c2d", "sighting--950f64d9-4071-4a24-8ad6-cd74e8d41ba7", "sighting--6a166fce-bdd9-4f1a-b655-0841140ae8af", "sighting--47373c87-347e-4e31-b8bc-1d18eabd5251", "sighting--d4db1caf-c8fb-4db8-b44b-8d71b710dbab", "sighting--288504a4-fe67-492f-9c0a-edc9e807a695", "sighting--6e8b3695-7731-46c8-b676-4f360d4f2b8a", "sighting--b148ba3d-1da5-4374-b5ac-2d18fd7517b4", "sighting--75dbf45b-2e87-45e2-b17c-3d70c2a51ea7", "sighting--86e1b865-d83a-44f4-8a4c-510d108e4a9b", "sighting--5f557ec3-2cae-494d-8abd-01f608c9d39f", "sighting--7af7a5cc-7871-42ff-ae71-2ff3a601148d", "sighting--025ecbe3-0ca4-40a9-a8f2-4adbccbd9264", "sighting--41b38f6f-d32e-49a3-99f8-ec739fa3fc75", "sighting--dc65825f-0f61-45a2-8229-e7a7c6798aec", "sighting--4efe4540-2aed-4776-87e4-7f53e064c39d", "sighting--23d5c220-2ed3-4756-91a3-1006475f943b", "sighting--58cdeb93-67f1-4f72-b23f-8ca73e0effbe", "sighting--02ff92ad-b3f1-40e8-8f84-f423cb66161a", "sighting--4013314f-df87-4f7f-a706-934f1e23f948", "sighting--82ef34a3-90ae-4d8f-9f53-28d27a70d348", "sighting--af3344a5-a948-4093-9968-172533505a16", "sighting--7922f22f-7eed-41b9-a6a9-dda866ee95f4", "sighting--9b5ee0a5-5ce3-48da-b0dc-3dae3e7aae37", "sighting--3f05e548-47a5-47f8-8cc3-dde272eab844", "sighting--f3bab3e7-ccd4-45eb-bbdf-efa5a8005ccb", "sighting--23ce53d7-1573-40b2-be97-a1743551efd1", "sighting--0687a009-67aa-40d2-8445-fa57d2ad760e", "sighting--40b0cd63-1f1e-4116-af18-a18b1e4e75cf", "sighting--e08f069a-c749-4401-a6b7-070151af04ac", "sighting--603aea9c-aa43-4c14-8916-3d350fb092a7", "sighting--04b4bfdb-6ff2-4d3b-a101-08898a261b20", "sighting--f95551e6-a546-4270-b731-ff769abe12d1", "sighting--59ea4839-ac02-4d52-a330-e85c9fe9578e", "sighting--c863a343-dacc-4723-86e9-e99df7bf3efa", "sighting--7039d50a-ed8f-4821-8180-1063be28d11d", "sighting--d61b68e5-47c3-4a48-a800-7e12b5e50b4a", "sighting--52954398-9746-49a0-8191-474fe90ed257", "sighting--061ad717-ee91-4581-9b25-3ef0ab66ef6f", "sighting--c7d3371d-c54c-40b6-bc58-596e49078a93", "sighting--1d251ca7-f719-4a22-a8ca-2bb53de2f8ed", "sighting--87e3e437-e9fd-4b13-99bc-08952bb2030e", "sighting--ced1ef51-cfa7-44a0-9c51-f4b1d368f0a5", "sighting--b935fd09-47fe-46b5-b98c-f012b7dff60f", "sighting--7536609e-335c-4100-8a49-e6fbc73a6a40", "sighting--39ace8f0-3892-4ee4-9b84-84d656c0387c", "sighting--6422afce-eed9-4462-b6bb-ffbcf16519dc", "sighting--438c2f51-ba57-482b-8284-93c79559ce43", "sighting--edee7c56-65ac-42f0-988b-14c438da010c", "sighting--eb607b14-2559-4bab-a799-1f08b4af6877", "sighting--ebbaff6c-01e2-4d3d-97a9-58c1c0528be8", "sighting--7896b34c-7fee-4ea9-8900-1b8e58536345", "sighting--b46b331e-b950-4f03-8d25-df34448eb554", "sighting--2527670b-1bd0-4205-9ec3-60bb3353909d", "sighting--8cc56061-b5b8-42ea-bc92-0358a9278495", "sighting--1a5e5785-4ee4-47e8-881a-7d11563dcfdb", "sighting--80d1efa5-101c-43da-9eff-80deb1ffa8cd", "sighting--4141cee0-957c-4797-a579-1670a4c7a143", "sighting--2d4eb00d-247f-49c2-b04f-cefe46f73b7c", "sighting--30e945ae-56af-4f3b-9c27-8df0ea7d6a40", "sighting--3cb3e3c6-edbe-413d-a893-6c4c9a7898cb", "sighting--fb356376-91f8-4a13-984a-ee4673fbabaf", "sighting--902512ba-b21c-435d-bc73-cebda2f744ea", "sighting--d019fe41-332c-44fb-a4d1-b123b83ca9d2", "sighting--91086199-f5b7-448d-9e84-ddb3c71e549a", "sighting--6a356f5a-9a55-4cd8-a6cf-5b00beb60d59", "sighting--af6458fa-16a6-419e-bfbd-499b00fb76c6", "sighting--6017529d-244b-42c5-b27e-0e648a98f00f", "sighting--fa4a27ac-d73a-4b09-983c-3989983af652", "sighting--fb9edf00-c652-4c2a-80b5-e19f125a9de4", "sighting--aa387335-c3f3-4465-a95b-ed36f68c4acf", "sighting--f1de0d0a-328b-4600-bd0b-91f78e011c13", "sighting--48f090ad-b6a0-4a74-a885-6be1705c3760", "sighting--a6fa66e0-a831-4562-a585-978edcf2e084", "sighting--40bc1091-0aa6-407e-bcd9-42f84b26c917", "sighting--1809e5d3-75d3-4437-bc89-7705aff72c68", "sighting--845ed570-7186-48ca-b184-3057775b62f3", "sighting--4894ead8-62da-44b3-98f2-7ef5698cad5e", "sighting--f1b4a430-2dac-4139-9178-66888f4edb25", "sighting--906578df-d218-4d10-85e5-97d0025de0c6", "sighting--bfd09e34-eb3f-4d1a-b988-8de38bd354ad", "sighting--76911d92-9cc3-49a2-81b6-e4f3ecca8dda", "sighting--118093a7-3b4c-4922-b3f4-71352fd5dcfa", "sighting--822f8c47-ab33-4d2c-a6bb-0e05c3dd296b", "sighting--7a744e91-0543-49ba-b09b-0272ab9dc097", "sighting--70ec0bf2-ec2a-4305-9375-75f2406a2056", "sighting--1f71f14d-7819-43a6-9a37-97eeee2e4bcb", "sighting--00e6ba18-07f6-4a03-bd8c-2f6fad7cc965", "sighting--6e23793b-5eda-4578-8644-4d7093ccbe3a", "sighting--a34f8dab-91e5-4eb5-b555-3e387f9ce28c", "sighting--48789fa5-8cba-48f8-b076-04aa6af4909f", "sighting--5b1ffbe6-04cd-493d-8e65-e6857a594c53", "sighting--cb372eb9-d6df-4f41-aa95-682b3ed4242f", "sighting--ae492963-f6a0-4c5b-9916-90ac95a95755", "sighting--3f5d0aa4-7a95-4eed-86b3-3e1aff74612a", "sighting--68ba9973-fbed-448c-9db9-855d26c8d2f7", "sighting--d1a3af3f-7d97-4b02-a8f1-765ca63a8ee7", "sighting--c3c0aee8-5a09-462d-9d4d-57f74c0351d4", "sighting--b9e019ca-c4eb-4682-97aa-5e5f74131394", "sighting--e8e90e50-ab97-440a-a65b-0fdde15cc8bf", "sighting--8a6fa7b7-eda7-49c7-92b7-8da197b16ec6", "sighting--ecb30ab5-e972-4aac-92ae-b0dc784568a4", "sighting--6bf9cdfa-68ec-49ab-bc8e-87902378c724", "sighting--a279ab96-93ba-4def-8ea5-d0254fda9df5", "sighting--b3ed5e7e-9de8-44c1-ae32-845ac9eb4ac5", "sighting--016906a6-5386-4b5b-9097-807468cd3e96", "sighting--46c9b1da-011a-4f49-99e8-fb60735266cc", "sighting--83253d2c-183d-4691-ad73-f849da8917df", "sighting--e6291333-2f3d-418e-9515-f3b51843ce37", "sighting--4869bf22-ffba-4095-a773-d78cb5f09e45", "sighting--3e467e52-cdbd-4ce5-9a59-db134b3425be", "sighting--7c4f67e3-6eb6-4c83-b522-7da83c323910", "sighting--961a8897-81db-41ba-a7f2-170a01dad5ba", "sighting--408af02d-db1b-405c-8542-ebafe4e43855", "sighting--99dd0355-2a75-4192-b49b-bb3f23da2f02", "sighting--80705fa8-cf20-45d5-bb26-5585c5d35a40", "sighting--8eb1d984-03cd-49bb-bb8a-0a0f9d69105d", "sighting--49fb685c-8e1e-4042-a0e9-c862035b2b3d", "sighting--1b38a3ea-91d0-4c14-ad93-5363bbdeb639", "sighting--d14d67f6-6164-44e5-a794-8ba433257faf", "sighting--c296084b-0a96-4abd-a88c-ed6a22d49c99", "sighting--ae3d2a93-b380-481f-9438-10ece92dbff9", "sighting--c0c8eb30-ae9f-4a46-9707-abebf94881f9", "sighting--b52e5298-7368-48f3-ba96-e1af8a45b181", "sighting--1a70e326-5085-423f-a33f-c0a42c21f269", "sighting--0b80fe01-34fe-4fa2-a8cf-338aeefc0a2b", "sighting--fe66aff0-0ce0-44b1-8937-e26fa9623933", "sighting--75250bd3-9c26-4560-a938-4c02dcc76305", "sighting--2ffcb5b8-0798-4727-990f-60ec1facb3d1", "sighting--939b5eb8-7be6-4a46-8351-74d1f87c7602", "sighting--a4276137-6ba6-47cf-a66c-09e88598b67f", "sighting--2a51b2e0-1a4b-49d3-b9e8-65792c964db7", "sighting--8c3d1e5d-ee73-4c67-a8e8-e4aa82aae1ca", "sighting--d5cdd5b5-8a9f-4cf0-b770-fcf93fe4a7dc", "sighting--ceff43b6-7ff2-4ef8-8b8f-7d23549285d0", "sighting--059f3230-013e-420a-8e30-0e97d4b9afb7", "sighting--b8f81809-ae8a-45b2-9cb3-cc4fa9f31202", "sighting--4d26c88d-0f07-4553-9bf2-ef20c30cbcb9", "sighting--731931df-3a85-4b6f-9005-719cb4a555b9", "sighting--9e222153-6790-42eb-ab20-1525d53d88fb", "sighting--87b6552b-caf7-48da-a815-bcc71f2f1f28", "sighting--871f449f-be8c-4fbb-a7ec-1eb24a399bcd", "sighting--cce81a09-d295-4895-8289-715fe3f82e4b", "sighting--b5a132e1-e3a2-40a4-afbe-41aed1314a7f", "sighting--a732db67-7602-46b8-a048-9e9f226127ab", "sighting--bace9233-b6d8-4439-af62-e4c9f685ce3c", "sighting--f7985358-9eaa-4f69-aa88-ab1284c7be8d", "sighting--9d0151bb-ac1c-4443-9a30-18d8d413c520", "sighting--42323a06-16bd-42b8-ac64-bf59b285f4ed", "sighting--922bd49f-00bb-403d-8ac1-5824e1992612", "sighting--400a6a8d-e7f0-4ade-aac4-078f0f7c82e5", "sighting--744e3d32-862b-498c-812f-c49a2c40b5ac", "sighting--39fb5515-f0b1-437a-bfee-0e471dd9e34a", "sighting--9a35f836-675f-47a7-a4c8-61555bf886c5", "sighting--8cc7cc5f-7409-4307-ada6-054eeca7395f", "sighting--cf3cbaa5-7dd8-43f2-bca0-5f9201c8e203", "sighting--bece5041-2181-4b5d-8d05-62df4b5b1fee", "sighting--6c344936-e1a1-4050-8035-c2d78315ae1d", "sighting--3412b7c7-059b-43eb-92d8-1b7bbf810f2e", "sighting--16e06398-fb90-4cde-a4c6-70abc32474fb", "sighting--97531a83-91c2-4c43-8568-2addc85585d4", "sighting--69f6c72c-d961-4bd6-9055-e59f40eded5b", "sighting--a121f2c6-e600-4cba-96dd-f4ce98e58fd1", "sighting--113e8786-7626-419e-a704-56856ca732d0", "sighting--ce25486b-cae2-4de6-a3a8-09ceb38ce593", "sighting--ddad6b6a-9ae7-489b-9424-bdbfc7e30d59", "sighting--10e90025-191b-47ac-bf27-a35275146089", "sighting--50374651-ed8e-4fd1-ba71-6f8b725ce10c", "sighting--9b927196-ae2b-4ed1-bb06-32070509ddaa", "sighting--694f0f44-d5db-4e9e-b6c0-7ff60dfacd89", "sighting--06ccdf4c-bbce-4381-97bd-8ee480e2072a", "sighting--d51b97ec-b21e-48a0-8610-87ce5a45decd", "sighting--fb80f659-e1cc-4f70-9be7-0d8f81746788", "sighting--a10ced4c-a5ad-4a24-86e2-b5d6b33f76e7", "sighting--08a949df-d086-4d64-b3a5-0b55b7807f8c", "sighting--ec63c9f5-2e5b-4a22-9e78-33e141b0af4b", "sighting--bb9a61ce-8bcd-449c-9657-00ce33fc0301", "sighting--1fa28c91-e8e4-421a-8e20-d42ed17a00da", "sighting--fd6e9c82-a901-43ae-a335-bf8bbbe2a867", "sighting--b54e9b55-a6b6-4b6f-8944-b3a51067beca", "sighting--ebc50bda-74ff-4d70-850a-329138cc0afa", "sighting--ee5af989-e9e1-47da-93e4-027d0cfb9c42", "sighting--ebac45da-53d1-4cc1-9322-2072509f54b0", "sighting--ae456a1a-227a-495f-b6ad-e3d15cfdcf0f", "sighting--9d1ceec4-185e-4bd1-85c8-5980619e6b3c", "sighting--36b76fd3-04a3-4213-a716-81fe73420acb", "sighting--d1b5734e-e3ce-490f-893b-05d65ace7960", "sighting--b17f4e14-9134-4a0b-8b54-5d643e142a27", "sighting--e65e0f45-8bbf-46c6-9cdd-49214941d321", "sighting--ae90b068-1f8a-4f32-b472-0c67b298f070", "sighting--95ad525a-1ff1-4dc3-9f73-f93ade9da71c", "sighting--0450cf9d-65a8-4824-a9ae-861ee871d14e", "sighting--d28fe1b6-dc83-48b0-b57c-347acfa7c31c", "sighting--47e1e46b-ccbb-4165-813d-7c66fe1e1085", "sighting--d33e720c-0954-49fe-8eeb-63d3bb153056", "sighting--60edb353-dc13-4f03-8f96-5e8a57c19d50", "sighting--8abe0b4e-4352-47b5-9b10-b76c4e464e0d", "sighting--f7d02c1d-dce4-4376-8c2b-e7e91f38e8ad", "sighting--2c68ed97-7d6b-490d-abc4-a09085d6d50e", "sighting--3e101f0b-e9e7-4adb-adc7-5304e0148afc", "sighting--bcc4ae47-68e8-4b91-b215-d53eaeae109d", "sighting--5483c28f-9714-4bc1-9948-5a5523b1b328", "sighting--c2f766f4-d3d4-46bb-bed5-0d1ad5ae654e", "sighting--1ebda9a4-50b4-48a9-af45-7a2586d6e088", "sighting--308450ca-6fb2-4ab4-99e9-f298c995d156", "sighting--d7b95586-d882-4185-af23-abdb593d110a", "sighting--90408471-88ca-4104-bbd5-f318e4c11e1b", "sighting--e2264bf4-fcdf-41f4-9bef-4517c330566f", "sighting--4140e497-1b22-41d0-9139-e0e772cce106", "sighting--50cea19a-e5ce-4e72-948b-babc4459faac", "sighting--763c3a8c-5f00-4f54-a165-e9f97f7bce31", "sighting--6261a835-61c8-49e5-a769-d67e8f10d0ef", "sighting--af112178-0164-4d72-a7d8-f88c704be48c", "sighting--4feee556-4174-4be7-97bc-c0edbb7fb96b", "sighting--a243d45b-721b-4e24-b8df-5bf3e846d059", "sighting--59c0cacd-83f7-4ed1-bf49-7de1d8a93f52", "sighting--35f4db6d-b70f-41f6-803c-38241f6b9a6d", "sighting--0d571a87-83e0-4b15-9d6f-84d61a5f192a", "sighting--a787fe14-a929-4eb1-99c2-e23382939c6e", "sighting--012163a1-bbdd-4b50-8b63-84280ac615ed", "sighting--9a64a588-843c-4d69-b59c-d52ada343143", "sighting--333fbe40-7892-4ae0-bee6-4c62ace2a075", "sighting--bcb8d84c-8f54-400d-811d-ca0384dd162d", "sighting--448c1f57-ea76-4388-a7c2-50b32e36926c", "sighting--059e1fa3-00f0-4062-8bbd-a7bbcf7ac7dc", "sighting--4cd3e9b9-13c9-4b22-88e8-0ca61fa2d17c", "sighting--8e6201e2-a06c-4b03-9156-44517047f671", "sighting--62bc85ab-5089-409d-ab73-0f25b1af408d", "sighting--93d3b438-c2bf-4df1-a088-7de9f407d3e4", "sighting--8e0602e0-985c-4c2b-9eeb-13c713004f05", "sighting--ec8c6d7a-9510-43be-a101-47ac1e95cf08", "sighting--11cefa29-6a6c-426c-8995-0fa1af7b2de6", "sighting--b0a43e07-bab7-4b78-978c-0b7d3d9a5ba3", "sighting--b15a7a73-3251-4863-9257-9790c5f96485", "sighting--be642894-e213-4cb2-af32-f8ab48d86625", "sighting--6edd31d7-bdca-4aa6-9d11-ff2b787652ac", "sighting--c646a0ee-0736-4b09-ac01-2c1b3fcac8c5", "sighting--77be1c4f-ba1e-4544-9e5f-2b2628ff67e3", "sighting--d82e7d88-42da-46df-bc21-c7acc02066fd", "sighting--039056db-096e-4119-a764-8d2089005321", "sighting--c0a1fa90-bc00-40d5-9998-b354af6e6977", "sighting--fe7c5a6d-96bc-4500-8f49-0884f4b0fd7d", "sighting--dfad6129-5cc9-4c65-b022-a9f9d1ce04bd", "sighting--415d57f6-db92-4757-a190-5ae98fa0e30a", "sighting--a07f982e-4041-44c4-90f6-8c6f24400e6e", "sighting--cd78de7e-c1f2-4f88-9de0-c1c8cf833ea4", "sighting--3569507f-0020-4c14-b8af-f905612cd6e6", "sighting--5cb110bf-46ca-4eda-af5d-3a5bb81d4a9c", "sighting--bc37a2b5-a6d9-49e4-a963-dff6a5fc83f2", "sighting--768f47c8-0754-4337-8e87-a1498ce50717", "sighting--05a74de6-b8d8-47af-96e4-b2c7c3016fb1", "sighting--ad95c84c-6614-428e-b5c0-6614a2f7c99c", "sighting--cffce25f-e463-49ee-8945-f8faafe2fc52", "sighting--bdde4637-31ac-4c98-b758-ae588f7ad4d7", "sighting--0552d0af-4a81-4547-bd97-fa096220c998", "sighting--0440fbdf-a35a-4285-b4f6-9289ae1e7298", "sighting--61d8eb22-c6b4-4a0d-b60f-449e3784ce31", "sighting--4f9af3a0-4abf-46b6-82d1-46eb7736c577", "sighting--4ecdd767-735c-4cef-91f0-b670936c58ed", "sighting--800027d7-af4c-4f8d-a13e-71a4095a45e1", "sighting--9c5738d3-ef78-4f9a-a17d-0c14e8bbfda2", "sighting--85e8110c-389c-4513-ad8d-f4db1757cd1b", "sighting--3d161b18-ff2d-4178-9480-eb669aaa800d", "sighting--3e037a5a-e168-47e4-80f9-09c9c31aef12", "sighting--c76a4fe4-9101-4d44-accf-5d6557dddf65", "sighting--05b1b4f2-306c-40da-9852-d50064325913", "sighting--24083c5a-1f0b-4158-8e93-1c7bdf13dee5", "sighting--881a63a7-c1d4-42f7-9bb4-ea5759dd03c6", "sighting--316f079b-89b4-493b-8001-cff918af6204", "sighting--ec395f7e-48e4-4e10-8f2d-a55c03884db5", "sighting--2416b9d5-39e8-424e-9901-2186390f7ea8", "sighting--8d7e9c7d-4d75-41a4-a59b-b88dd93647ce", "sighting--531e06e4-fdc4-48fc-96e9-02b4b145c8f3", "sighting--7c7d9a91-a928-422b-984d-0208b158a16a", "sighting--660861a8-15b9-49a2-a68a-74aa11efa360", "sighting--86497ae6-d3fc-4ffd-a8e0-9ca82713d5c7", "sighting--d5e38137-4755-47b0-9e9a-14b454483e26", "sighting--e9d203c2-9e26-4c1f-8bf2-676dfbf7196a", "sighting--a733920a-0700-4118-a81a-0851bfafe106", "sighting--fe22bf6d-9428-4618-9986-439b332a6c93", "sighting--6799e5a5-9192-469f-b125-a834bf616ee6", "sighting--d9b48419-c948-464e-8db3-3a594c732de7", "sighting--995b282f-5611-4856-9d51-b0d99cf73fba", "sighting--7f08e7ce-30fc-48ad-afcb-99535fe6f80e", "sighting--e6b22888-501d-4e32-bba0-1d3f43a49529", "sighting--ab2559dc-7098-4812-b9a0-ab90fafcfd29", "sighting--2e4d7906-8b33-45f0-9986-dc4950163aaa", "sighting--a46786c9-5eff-4a13-850f-41d214375283", "sighting--169ff21e-3877-4626-ae16-6b86da5628f8", "sighting--62db353e-5003-4b46-bd10-2ac1032a3658", "sighting--38bd4604-61e5-4e50-b216-b36cc3321043", "sighting--a6a51e52-9155-4196-b63f-e449416c770d", "sighting--07777531-320b-4033-879c-409db98c11a9", "sighting--5e48c783-b9a5-4ad8-a74f-f6b28389d6d2", "sighting--d068373b-c95a-47cc-b232-7e15b875b3aa", "sighting--aab6255a-f441-4d67-b416-c51ed41854a7", "sighting--e87a6b4f-b798-4037-b2eb-fc158a71d533", "sighting--a03f4da5-defd-4be8-9e96-6523921de0a4", "sighting--730fb184-186a-4c81-8a8a-97b350dacad6", "sighting--18c48988-4d4f-4144-9308-6e9712a98d5c", "sighting--38888fae-a10c-41bb-af3c-233e08168402", "sighting--ebc07418-2755-4378-a45b-a938b84c0e9a", "sighting--23d7222f-01b0-4731-8a76-3016d0f2602f", "sighting--a60cf257-1373-4455-a370-37a2206b8cc6", "sighting--504392c1-b401-4faa-aba9-7f5f8733dcb3", "sighting--1c357ddc-73ed-41c5-8edd-720c62c3e571", "sighting--d6536960-bd02-4004-8437-62b64f72d00f", "sighting--b5255a15-deeb-42b5-833d-6b1ed6ab04f6", "sighting--99833ce7-0635-42d4-8b2e-2b68407593f1", "sighting--7536d77f-1802-42bd-be11-d969c6ff226d", "sighting--44fdb281-864a-4b1b-a211-fc6e01024082", "sighting--11607e26-9696-4a53-b792-1c675009d880", "sighting--6a231a0d-2569-41bd-bdb9-ca7b95e02d3a", "sighting--ceeb2261-578c-4530-8080-42d9116e23a2", "sighting--99694357-5ffe-4f3d-8d73-8b7269173516", "sighting--8cd26862-0fb0-4d8e-8332-fa6f070417a7", "sighting--cfa96869-dab0-4817-83ce-debb7cab1b4a", "sighting--4af6df7c-8a3f-46c1-8aa4-9d8ef0bf61be", "sighting--57c79bfa-97ef-4633-99a4-c7e435ef985b", "sighting--f2db5785-5e3f-4586-9b5e-40181434d374", "sighting--c4e6002d-7d88-4d06-8d9a-b318cc326935", "sighting--86c8c3d9-59a6-4480-89cb-32ff0200eb67", "sighting--ce8489b8-c940-4a34-9b31-b40e118b3bba", "sighting--9e233c77-d0fc-4af0-8570-650008028cc6", "sighting--fbe8d2e5-f0f3-4208-b14f-5f16b7e6ab9b", "sighting--2b138b9c-4cb2-4bfd-a8dc-6cbc8031504c", "sighting--aade9631-7c1c-4052-b254-330d3a7249da", "sighting--49b20960-5942-437a-85e0-c91496efeb8f", "sighting--914de2f8-b49a-4e34-a9c8-c91b5cfde832", "sighting--fae205ef-a9e9-40e9-b8a6-7b6b4a87debf", "sighting--efa109ae-777b-4c43-b21c-08532ca8d827", "sighting--4aaebb3c-bc81-4221-8f72-89197918ed83", "sighting--fb2ae2b6-7853-4292-9374-fd544dce0a6d", "sighting--f5c93381-5dab-4d77-9971-9ca02abcb5e9", "sighting--e51c2363-e86a-44dc-95ab-98700af2d6ea", "sighting--cfa0539d-10db-4077-9a5c-7fee7147f733", "sighting--f3f5c3e4-b362-4bc5-a705-8fbb26c69460", "sighting--39f4a84d-be37-4eef-8e5c-1a01c5ef1016", "sighting--357c7c85-568d-4c76-945e-3a3d24ade5ae", "sighting--92e9e389-27a1-44c5-afb0-bff535ac72a1", "sighting--ea120129-961b-4f82-9189-0ba4d263081f", "sighting--68a07d0f-9711-421d-9e3e-917695886588", "sighting--0c3053c1-c9c2-48cf-9cec-4bf89234d011", "sighting--4abd7dce-9ea6-4a6c-87ed-a3b5d741f979", "sighting--d4240952-c678-4c23-a188-94acdd4be1e8", "sighting--5fa5f1fb-0f62-45ac-9e14-063f6d6812fb", "sighting--6ab24c07-49d0-4b4f-80b6-3fd6f0285aaf", "sighting--b5487b0e-de61-4d44-b984-3913c83d838d", "sighting--54cad0e4-a5df-4edd-a6e2-cdb8d9e83812", "sighting--8c84f2f9-243b-41b4-9a5c-908b32c3e2ef", "sighting--a3fa60fd-687a-4347-9a56-e2c38ab4dc87", "sighting--cff89ad2-bcf4-4a7e-97e4-2310b79690dc", "sighting--9e2bd6cd-67c3-4cd0-9f69-e6df6afe8728", "sighting--759b41e1-c9a4-4055-82fe-0c333bed2859", "sighting--cb86ac6e-44a4-4207-bb2b-7ca8249c7613", "sighting--e550f0e3-d5a9-4e0e-9c42-ebf56bcb2fec", "sighting--a9f6f624-8040-4c45-9db4-8932a840aa02", "sighting--af9b9237-c025-4945-aba3-e37dd3fffba6", "sighting--4316aa03-47ed-4211-aa13-f2c2221d49ec", "sighting--68763b4f-9ead-4dce-89e7-8eb7cf74f02c", "sighting--f1fcf9e7-f3e6-45da-9716-c902ba7b178c", "sighting--df73e9a1-6589-41fe-8692-cc76a9a218cf", "sighting--c489cd06-cf82-4481-932c-354b026b5b00", "sighting--bf93461c-b358-41d9-8534-c3f81dc8b37e", "sighting--c95c1dd8-f6fc-4b21-a1e2-bee39b6506cd", "sighting--69c44cb7-02df-42d2-be2a-e59ae6bfb856", "sighting--94625ef6-493e-44be-a783-f061179d54dc", "sighting--74fdbdeb-8ba1-441c-bb0e-8b883421a29b", "sighting--9d48d6e6-4030-4631-add9-dcc07906aa69", "sighting--7026de8d-7c51-48ea-a0ed-78419ea5b67b", "sighting--0be6ab82-203d-492b-a064-58577468037b", "sighting--094289ab-8c86-4d3a-a454-55fb75c97ba5", "sighting--18b74b26-54eb-4d3f-af14-2d09d22d7e14", "sighting--6d706c8f-2f7b-4492-a7b3-a581c3600b82", "sighting--41df4220-893c-4122-872f-d5a9300f89e8", "sighting--68252013-d2c9-4dca-a17c-64576f211ffc", "sighting--b3be1437-fd1e-42bf-9cfa-c6787c449cae", "sighting--19b83d2c-2837-4a1a-a1c2-9e560ffe1a87", "sighting--f3cdaea1-a4ed-48c5-9c46-9449fd100c14", "sighting--49e08b6b-a1c0-4cd9-be91-65bc7f92c2ac", "sighting--07bd34b7-521b-425d-a72a-0449fee2275d", "sighting--bd4e4be8-53d8-4f45-afe9-c86160cb7091", "sighting--90c8b101-4c72-4e53-902c-c7fca4b4707f", "sighting--873f55c3-416d-4a6e-b967-482c377f99f5", "sighting--c203eb2a-e494-4f44-80b8-6bfe2ddb22da", "sighting--f316c307-bb67-4f7d-bc36-49b05e2b3d7a", "sighting--853a898d-bf58-403b-9b83-b4fda161833f", "sighting--bd1497ec-cf3b-4993-9940-4543162bf929", "sighting--7b178689-761d-4619-9e20-8d8c28bc38a1", "sighting--20bb50da-cb0c-469d-8a06-892bb2d9ecff", "sighting--e4f76838-bef2-48e9-8c45-6f784fa706c8", "sighting--1a95a046-52b4-4c7a-8725-b54b97734b2a", "sighting--d49d5f79-94d8-47f6-90a3-e50d9fd07e4f", "sighting--39e6c629-3829-4647-be47-ac87e8948c02", "sighting--5eaea5a7-a6d1-47a1-b7ca-1823949f4bac", "sighting--37866a3a-46b8-484c-b041-fcaea925d89e", "sighting--17698c1f-0854-458e-9b74-fa4e6193a547", "sighting--66bcb992-e8d1-4a72-ac9f-d7efd4b1d645", "sighting--4d4d93c8-cbfc-47b2-8253-e9418699ba20", "sighting--065b1439-2940-4673-9161-72f0f756994b", "sighting--c8358674-f26f-47fe-a646-da72c823b64c", "sighting--7b10ec74-3182-40f1-ac18-03ae09658cc8", "sighting--039da86e-05d2-4073-a32d-b85188c752cf", "sighting--14d74636-db11-441f-87d3-90c606b25ae3", "sighting--817476bc-8e38-43b4-930f-4b32f68d6a00", "sighting--c7d7a595-9091-4d5a-aca3-d138d79ee031", "sighting--94464c06-c2d5-44bc-91eb-bcb62ffa2620", "sighting--4aa52ea4-04a8-4635-8b55-2acf19c6aef4", "sighting--0f1ead87-ea7f-4b39-b371-86628c36b86c", "sighting--24b40e1d-6af6-44da-91a8-5c077d558330", "sighting--a0db46eb-22e0-43eb-bf77-7b63fe0d2d9f", "sighting--4e71b0da-a23e-4f45-88fa-b27ab9b71e61", "sighting--6c97b651-75ae-4a61-adeb-6da6dacbf74b", "sighting--3136b969-954d-40b0-9062-59c079bfd4d4", "sighting--39b285b2-dfa6-4e2f-bb0b-269932abb59d", "sighting--dbd532d6-ad38-43a4-aecd-0d8fefbbac3a", "sighting--3275fb25-ac8d-441a-8f69-da21994fdb9b", "sighting--be604e0c-eba5-459a-b116-ba953cc577d3", "sighting--329477ea-2ccc-4871-92cb-a754758a82fc", "sighting--49a81af2-4197-4897-84eb-7d2d9c1f5b7a", "sighting--f8673c8c-fb67-4240-be81-b5a295badd3c", "sighting--4c431848-99fa-49be-85f4-47b5df956cd1", "sighting--decaa10a-2e7d-4d8f-adba-cbe543fe30f7", "sighting--1835fd93-9e61-42f7-849e-217b1abc2b73", "sighting--20cc2cef-9b58-44be-b238-3f74cc31315f", "sighting--caee4100-3783-43be-8edd-27b6c0a400fc", "sighting--b940c9b7-9f4e-42ef-b11a-487b9fcec1fb", "sighting--3731119e-a51b-4b6f-a7f7-7540d825ebce", "sighting--3be8c33d-f3d5-4eed-8627-f12c1ba4b35b", "sighting--21d97c12-f823-430f-b001-5d8a9cf91311", "sighting--ff2aa02f-2c6c-41f1-8383-24c03c09aa0c", "sighting--fbf62b1c-5195-4ff3-a0bb-78e41b488b62", "sighting--5324f837-6059-48a4-a2ef-523735f39c70", "sighting--337d5550-5790-436d-99b9-33b0c3fe0aac", "sighting--a0a7df91-4159-4961-baa4-cd0f2e204755", "sighting--ecb44c2b-0082-40af-931f-b6025f67843e", "sighting--7b777ecd-daa8-43c8-ac1f-8dff7bc78deb", "sighting--ea3b2e47-1caf-475c-bc0d-9bb20049256f", "sighting--1e499383-6356-42a6-9db5-8925ddf4c282", "sighting--e7b078ed-e3d1-45a2-a7c7-95ae4e29695d", "sighting--2725e1e9-805a-4ae9-b796-66c3cd4f968c", "sighting--4ea38a66-cf7d-4c6e-a9a3-13db58e9f082", "sighting--c3533e5e-b530-4aef-8ba4-81354cdca955", "sighting--31f6bd1c-a9fa-4e5e-a858-10394a78df37", "sighting--f6f29966-2957-48d0-9eab-03876d730b38", "sighting--bb5d5778-e77f-4785-bb57-f43ab92c4863", "sighting--05374cbc-8da7-4eda-ab91-38e831c4077b", "sighting--b213917d-4abb-4cf4-881d-7c5bcca7ca4d", "sighting--99d5e6e9-bb0f-4771-af40-62c85b33128b", "sighting--a569d39b-75d3-4fd5-a4e8-e883b5e96cc5", "sighting--e3edee63-f28b-4453-b4ac-afc1f759bf16", "sighting--87964ffe-f479-4dc9-b452-2f91287c456b", "sighting--8c1be0d3-7ee6-45ed-ba83-206141a89073", "sighting--c563aea2-1ba2-4974-9f52-46548b0da726", "sighting--a1c8a972-beb1-414f-801d-8e2a955ce60c", "sighting--c5d7bdb5-561f-461c-8b6b-97a04d759cc1", "sighting--2dfd0fec-8890-4f57-84ed-12a3936d243e", "sighting--13569895-33fd-4e7b-a6bd-b661294eb8ab", "sighting--9e0bb209-b3c1-49ae-b4c1-c12e6114d7ad", "sighting--43f79932-7130-4b17-960d-110f25579fb4", "sighting--ce210641-654b-4e19-a4f9-6aad9c24b719", "sighting--7f981828-9cfd-4062-935a-6c22d72a9348", "sighting--c3019b74-6aae-4aa0-8e6b-0e400562b755", "sighting--af44b677-5d26-4ae4-9796-df83796265da", "sighting--fde55167-426f-4ad3-b935-c358c6c29e77", "sighting--af4e6d58-547f-4f20-ba48-f227660025ed", "sighting--82dacd0a-823b-4959-87ca-872189bd38b8", "sighting--a315cdd5-4073-4406-8ccc-197a4f981596", "sighting--bb053874-8b99-4cb7-acfe-77ae7328ba43", "sighting--48f89ce7-9838-4327-b507-496d96c101ae", "sighting--ab7ca957-3504-429f-b45b-ae764ae0114b", "sighting--6d4c0df2-0ba4-4922-a75a-674a943987d9", "sighting--faf0b633-f0f9-4a6b-bb7d-cf2dd97fedb9", "sighting--93fe18f8-b489-49ab-9bd0-141bc18db02a", "sighting--a44cc7a0-4686-447c-9675-73265edc6be2", "sighting--cd694b2d-b84b-4454-9610-2c11dcae03d8", "sighting--2b0de47c-af95-46e8-9a65-697ffd44e620", "sighting--7f534ba3-8d71-4136-bbac-822fba5f33db", "sighting--d455f386-c131-4959-961f-4a08cede3101", "sighting--e3fe4bfa-dde6-4ed4-884c-a8719438c61a", "sighting--77ef5d74-8894-4cb5-a765-d7ae2bc93fdf", "sighting--26807874-c038-4ca3-96c2-56d1a02a9586", "sighting--cc62fca3-06bb-47c0-ad59-29ae760b2efb", "sighting--e6ecf0c7-721f-4e2f-99ed-728975805547", "sighting--b5e9be45-8b4d-4c29-a129-7e18e48f9bc8", "sighting--c6c7ce12-8c72-4bd9-8fcd-310910b2283a", "sighting--4a1bf5cb-7ddf-4828-8617-c59b3a15ec3a", "sighting--18b18254-7af5-4f06-9825-e906c5e7bbab", "sighting--4c698030-0626-42aa-b9cd-489b568abc36", "sighting--894428fd-c3c2-4a08-a729-c015a1c4057e", "sighting--7b5d7cb8-6f50-403e-8b9e-2c072310338a", "sighting--0ea3540a-7251-4466-aa42-dcf568b73ba9", "sighting--3a56ded0-077b-427e-9a0d-b192c5a76089", "sighting--9fdbe115-b253-4ed4-baac-42c1e43032fb", "sighting--ba660113-667a-4244-b88a-b2ed1a611ea4", "sighting--eaea5961-0948-43c3-ae67-f8df4412fea5", "sighting--1a9f8d80-3874-45f2-b85f-277d505ba194", "sighting--96a7168f-84d9-4954-babe-b3dc35f8255c", "sighting--eb87fa19-ceac-427a-8435-9bbdcb71864a", "sighting--7c9bdf32-5049-4e20-9a67-81c9102fd9c6", "sighting--ffeeed45-19a0-43d3-973a-704a4bc86878", "sighting--d7976546-2990-410a-8695-72a94b5ef2e6", "sighting--4bf43c2a-164c-4823-9b1e-012d4bde43cf", "sighting--8e12568b-68fb-4253-900f-96c5e1043cbf", "sighting--17d3e689-2b77-4212-a06b-d0fd5e13422e", "sighting--47ef8dd0-13fd-4710-95ec-5900818fb544", "sighting--05671742-95c8-4689-bf22-19b4349ea989", "sighting--df69b1e2-23f2-47a5-8561-832d32227a78", "sighting--f1a7e290-bea5-4354-8a3a-10879647e677", "sighting--de3335d1-d885-4934-8e65-d68cda029f3f", "sighting--6cf991f8-0f78-42d7-a73d-f5f70a5a3fd7", "sighting--8bbc30ca-b748-4daf-96e4-a1196c4b4f26", "sighting--72c44597-57b2-4295-b256-5bbf5332a3cc", "sighting--c1b1934f-20b5-4681-99af-952483a9984a", "sighting--ca256e02-9361-4897-802f-fc2142e99c97", "sighting--72cab232-a8c9-40fd-8006-fa8276e41110", "sighting--f933e075-5853-4efe-9395-824874cabb42", "sighting--d0487ae2-865e-4de6-b415-e833e34faa50", "sighting--a6350c66-5e94-4fda-811e-5668cb4d9c5c", "sighting--305ed690-6577-4597-89d6-20c996877e6e", "sighting--1f567fe4-2ef9-401b-993f-372fdd32161c", "sighting--ee32c44a-0f73-466a-ad27-457c4f1bdb8d", "sighting--676a54d1-5db7-4e29-b661-d236b265b946", "sighting--cb97b8e3-0635-47c9-9804-10907c361787", "sighting--cd615cc2-69a8-4058-9575-bb7753ab4804", "sighting--79654998-5d76-42d4-b26e-f034c6511a72", "sighting--8f773e02-212c-404a-8aa6-ffc9572cc3ca", "sighting--5dfa68d2-26f1-4d49-8af3-5f6cffc046bb", "sighting--1c879d07-de93-40a4-aefd-4adad9f57710", "sighting--055c13a3-4cf6-40cc-92e2-dab238d2325f", "sighting--649b0587-8396-4df9-9770-74780ef35110", "sighting--c3340dec-fa22-4b7f-a978-91a81b57b170", "sighting--ac10700c-c9be-4e0c-b39b-f1a95e5563f4", "sighting--587f62d1-298a-47bd-af24-7722d31c22c3", "sighting--a5b1f05b-f995-4244-b17c-3eca0d479ebe", "sighting--5bcbc6a1-5d52-4fa3-b8c9-2708e89a95c8", "sighting--2912ac80-adda-4c44-aa43-dafd8227e195", "sighting--03158d5b-7481-4419-94b2-ceb54f848ce5", "sighting--723af58f-6d48-4de9-ac14-ae39fc16969a", "sighting--3553fe75-4144-4ddd-be41-c9e384df221d", "sighting--01ce615c-d67f-4cce-acd6-57893d7f13f6", "sighting--76d31214-19bc-422e-9381-97fa23aa58c0", "sighting--beb45ac4-eb7b-4ddc-98a0-487e01f3c975", "sighting--904aecf6-d02e-4d15-a3be-fd36f7e37bcb", "sighting--1372f699-2002-4894-af48-22724b76d64f", "sighting--679d7c57-0275-45a9-8e23-a0b180d8b857", "sighting--1556b061-7b4c-422d-ac84-9d90f8c7c845", "sighting--61d2a265-6f96-40de-862c-6afe23b0e6e9", "sighting--9244948b-43e5-4c62-b0ba-cdced1eabd0d", "sighting--7ccf873c-9b26-469f-a230-17cb18722694", "sighting--18f39f56-2a5f-4635-b121-1f398e0e5736", "sighting--3d4f6bce-a11f-416b-9655-4bf25ada627f", "sighting--ed54df36-4911-4401-a660-dd6b36127bb1", "sighting--88961953-be83-43fe-887f-ec48587ce016", "sighting--01bd1e50-fc46-40ab-8c91-af9757b2e292", "sighting--c96fea1c-8dca-4d05-b7a2-d4afd59e36a5", "sighting--f95b2f35-8e87-4b27-9b67-16b4bdb39338", "sighting--0393ab32-f11f-40c7-b79a-16d93722b2c4", "sighting--c2cff72d-8b76-4f00-b02a-951cd41eb16f", "sighting--cc19d961-ce0d-4da5-acfe-433974780332", "sighting--658d4142-190f-457a-8ff3-910933513748", "sighting--ea76c663-a1a0-46cf-8285-dfedd5f12e8a", "sighting--06cde802-b57e-40e2-9525-42a179952547", "sighting--0fca1faf-2021-41c5-aa10-cb9beb98914a", "sighting--dd2a2a63-36a8-4176-9e35-59800e9969e6", "sighting--e6f26bf7-ab92-41c0-85e1-0e20963aaa33", "sighting--85e18873-0a87-4726-a84c-a674b24dd79b", "sighting--b524cf08-6b2c-4403-8c6e-ba6d852b76a5", "sighting--76625b34-8133-4015-8bd7-428b51671350", "sighting--824e0987-0dca-4bfe-9ff9-bf35127f360c", "sighting--d7d0dc13-2152-42ea-a4f4-4bf88ea4c0e3", "sighting--9488a90e-e09a-44c9-aee0-b59fbb01e99b", "sighting--8abac067-aa40-4aa2-b3a5-9791e96279a9", "sighting--af23e510-0fca-484f-9012-e5b09f003842", "sighting--10b3d9a1-5a6d-4953-b228-faa350537ab1", "sighting--4b7ff4c5-d395-425a-b043-2692d653859b", "sighting--a1fbba95-259b-4b00-bc34-ec5a5fbafc29", "sighting--c9dc90c4-adf4-44c0-b8ac-59171379dba9", "sighting--a2f72817-7c66-4efc-b9c8-e49846112ec3", "sighting--d8fc225c-7571-4325-a61d-586518b7c44a", "sighting--cd1cd5d4-1972-4b81-aa58-d5f47fb06df7", "sighting--cf892f15-681f-45d6-b6f5-b53236333b81", "sighting--025c804c-e8bc-45cb-bad6-f2361be95e9c", "sighting--b16fed53-a5a3-4503-80ea-6382e334773a", "sighting--09e154fa-a650-4153-81a4-bb9878f52202", "sighting--769e89c6-da56-4c3d-ae46-fccd10827d52", "sighting--dd823714-dd06-4e1f-9b06-8cffa8dc7ce8", "sighting--4827a8e6-6fcb-4bb8-ad9f-7d416293cd05", "sighting--972ec5b4-fca3-460a-81af-47208a358b3b", "sighting--5a16266e-34be-4084-8fa0-6d9b75c3970e", "sighting--aa0e3c66-f4c1-4516-8f24-07d00182e7ba", "sighting--524a3067-d15f-46e2-912c-cd54f2071b3e", "sighting--2f089ff9-04f0-4f99-b3da-5296e8b52aaf", "sighting--8e839f24-9bdf-445c-8c4d-572389b4f25c", "sighting--c2e8917d-53d2-41d0-a162-69f64a20b730", "sighting--5913e3ab-6484-47e6-b50b-81a0794e7063", "sighting--b5060eae-28cb-4ba6-8baa-4fa118a2f906", "sighting--51fad251-ea48-4e34-951c-2856a893b870", "sighting--2eba1c18-28a6-4110-851c-4ad288381250", "sighting--1d5071c4-85e2-430d-ada2-b20fffdb678b", "sighting--e1162805-419c-4f05-9d49-d21cdc5f742f", "sighting--2200536a-d8c0-4d0a-947b-74fddd4c5724", "sighting--eeebb71f-54d3-457d-b4ab-e24abfeb3f40", "sighting--39b94175-d6b5-44cf-ba0f-f7363a4b5fb7", "sighting--025b61f7-ae41-439b-afa2-3ca5feaa7929", "sighting--e751caed-4017-410f-81cc-482cf79b9a47", "sighting--d1cb8be8-cb79-45cc-9891-70018e7eefec", "sighting--3254102f-560e-493f-b83b-7342c6a50508", "sighting--baef4e28-36ea-4777-925f-2ee003b1559f", "sighting--22e0375f-621e-4475-b9d0-a98a34124856", "sighting--6068875b-2b25-4313-9065-296dbee5b0c7", "sighting--1f00bb14-420f-4c15-b52f-ad36054b411c", "sighting--eaf3ceee-522e-465a-a578-cbb11b470b49", "sighting--14167e3f-9d56-4b92-817f-ab8c00c4b6ba", "sighting--9d6f4302-1bbd-4392-95bb-c04eb1d6bc52", "sighting--a5375a22-1921-41be-9ac2-78a4a2eb2d09", "sighting--9d5fe0ab-607d-45dc-b158-16128e04aa43", "sighting--66154bbd-265d-4658-bf30-9a966befdd1b", "sighting--1cae663c-9ad4-41d4-b792-4f178f2619dd", "sighting--55c39513-26d4-423c-8907-eff84818e617", "sighting--0585aefb-0125-4d18-a346-3dcd34ac2210", "sighting--5d2ff6a8-83d6-4589-9caf-d29f1f72fb61", "sighting--309773df-1cd2-47f7-b28f-19d53e58f2ea", "sighting--b4b001a5-f0ca-465a-9a1b-5bc35083d8fa", "sighting--d55a777b-a3a4-4fbd-85cc-37b9eb3425bc", "sighting--661fc681-ca7b-442e-ac6c-c44e2cb54e00", "sighting--254c4ea6-0eb2-4317-82a7-99088ec71b3f", "sighting--52c30809-1cc4-4bc5-98ce-9581b09828e2", "sighting--e0cf71fb-7b71-4c68-892d-b467779e1cbd", "sighting--4b0ce2e1-be39-4957-a674-a94bb6145d7d", "sighting--ca39ea95-74d5-4549-8960-0ac1aa1aae95", "sighting--e7ab82f8-9256-45e6-9ba1-84d22cfd1d2f", "sighting--7cf5f35e-c44f-427a-9f6c-09a40fbdcc31", "sighting--25e4d6e2-8844-43ad-95fb-00568000cf17", "sighting--f9a1d1af-bef1-4a55-a7bf-6bb89986dc92", "sighting--731bf102-83c1-444a-ba86-262441d12010", "sighting--9d89eaf1-c8ee-43a2-bb7e-c0d3e4aa1fbf", "sighting--7ceaf534-e939-4bb7-83bf-921cdf8bf0b1", "sighting--a81ad81c-9d81-42b6-8a5e-410fca130857", "sighting--a90e7ab7-4fb1-4525-99bc-966dab34836d", "sighting--3fa728cc-c69c-48ef-83aa-cca26edb19dd", "sighting--8f1d0a88-19ab-44a2-9746-bd1c1f978a72", "sighting--2d698919-5fbd-446d-80a1-cb5779a884f5", "sighting--03cca4df-4c43-4778-b8db-d5248466fd8a", "sighting--806923b0-de40-4824-85b2-9b73ffae8109", "sighting--e1586999-b9f6-407d-8024-45668e84e6fd", "sighting--aa96c43a-4bf3-4c77-86ac-dac679cea439", "sighting--9f4a5728-cf1b-4892-98af-157fd37c1864", "sighting--2b63f6a1-9145-469b-a80b-08af9483a251", "sighting--6ee70417-61b7-4828-8e6b-98416aefd3a1", "sighting--69412215-a2a3-4551-840b-17b52d7caa78", "sighting--b3269d3a-af5c-400f-9a2c-885c265b4f8a", "sighting--c1290197-11e2-4318-b94b-ebd1d7e19b30", "sighting--546d9b3c-932f-4ddc-bb0e-1cbb06079e6d", "sighting--da70748d-9463-413f-a2cd-6c2c25803eeb", "sighting--aeb9e246-3a10-427c-aaa9-3bb6d8d09ca6", "sighting--5c51856c-0f3d-401c-881f-681930b55d43", "sighting--2fc0da73-9aed-404e-9834-633b7ca282c0", "sighting--17fbccd1-c8f0-4f0f-80f5-267d6a9fa99a", "sighting--e9ba6a37-7541-419c-8e9d-f51ca7bcdf25", "sighting--3728c41d-aee2-43e3-85c4-e51f0a921b61", "sighting--0047f392-0edb-4575-bcbd-2897c26b8e50", "sighting--dd573e47-7f75-4934-86cd-be0771209b52", "sighting--a31aff1a-f008-4317-a859-77db199f161b", "sighting--3b83d934-385f-4e46-999f-f058f6640347", "sighting--39432f80-f9fa-4f02-901f-7027d8938b7f", "sighting--4a52b3b4-e762-4331-945d-17d2687ae4ea", "sighting--cea29476-2b40-4038-b82b-5fe64786f4f3", "sighting--7d6b135a-0ab8-4fa6-9ea1-49d956378a57", "sighting--9c441225-5e87-46e2-80bb-c51da5528203", "sighting--2efc3086-2258-41cc-a7a5-cf5c156b0137", "sighting--d8491728-d00b-43c8-897b-aa71f390a791", "sighting--b8d64dc2-ea21-424b-a131-dd1395ffeb21", "sighting--509b956a-994e-4fa0-8130-c2a87384bb64", "sighting--0220afc7-6e38-410d-b778-6a6e4111ff01", "sighting--e39001a8-6e55-4782-8551-01f583497faa", "sighting--2b0633a5-54a2-49ad-acb2-a7b7d0eeabd3", "sighting--d44bc0a8-27ad-4dc4-8c23-f7a2a91a4c8d", "sighting--ada6a729-49df-47fe-9bf2-867862eb8431", "sighting--dd06b0ff-37ee-4ee6-9d85-2b2ed8ae616c", "sighting--a86a8f0d-3235-4bf8-8732-6e5252f27a40", "sighting--c85be336-2f8d-4c97-8dec-b517e12b589a", "sighting--aebce5f4-937a-45bc-b672-5061a7aa84c8", "sighting--349907f3-cd46-478f-b38d-3d9afc07ae2d", "sighting--760ac119-e01d-4791-861d-24330fc8ea3a", "sighting--71281c06-4a1d-45b4-ac5b-2380e6c3280a", "sighting--b5c2f738-dab1-41d7-9ee0-81c530e471a0", "sighting--de974019-b951-416e-91e0-da75691e2365", "sighting--d7be505d-6fd1-458a-9eac-b1fdd1e6434e", "sighting--16259517-a65a-4679-869e-ab99c10751f6", "sighting--89d38c61-ebff-48f8-b3d6-e9b9088de34b", "sighting--91757925-5ebf-4eaf-8a56-6d2e6a761c34", "sighting--58fc06ba-a922-494f-919a-356ae09352ac", "sighting--f83250ec-143c-4f5b-9049-a093c6851e85", "sighting--b0034ec3-2921-42bc-bd0b-a1083be12ca2", "sighting--c073f186-1bc4-44d1-8949-2245758c220e", "sighting--1481a9dc-f2e3-4a1b-93c7-26270de1a92c", "sighting--056ce84c-4f7c-4ccf-809a-c631d7f8f41e", "sighting--ef6a778e-4333-48e7-9773-6a0d93df6376", "sighting--a2fc4e06-85b7-4d02-975c-5fcf56eec6a9", "sighting--c6187250-a738-4934-94f0-7e693376138e", "sighting--79586232-9342-4cf0-9814-24df32a89d80", "sighting--5d3645e9-f0d6-4f8e-8f34-693adcd56cc4", "sighting--0c6445b6-7bdb-4f01-ac3e-c67a85cca4ee", "sighting--62922043-5f9f-4829-979c-12fbb8636b63", "sighting--0fcbe446-2204-4bdb-ba0a-3a7a1baf8a6e", "sighting--dc90ef97-294d-4479-9c4b-8e98d2be9173", "sighting--595b2d22-c269-406c-9519-0740ea717e6b", "sighting--77804d8e-52b9-4580-99a8-913469e46228", "sighting--c05c7554-4b92-4cac-aad7-bf41af337642", "sighting--444ec886-49d4-4882-81ab-6c6a4be8fdae", "sighting--7b936965-6ce2-4ef5-b53e-3ce77275acbe", "sighting--ddd67778-ffe3-4291-8365-40ab318a5a65", "sighting--eed783eb-5220-43c3-b8e7-2ff07be127ec", "sighting--800de7f9-abdd-49fe-8e32-703654a36916", "sighting--c9d9d72a-4639-4df3-8944-95ef0b532402", "sighting--774bb888-cc65-4383-97c4-3ca4e1b51da7", "sighting--34092132-bc44-434d-a31e-0bea73179072", "sighting--14c26b37-947a-4763-ac24-d7cc712d5d6f", "sighting--923b1802-8e66-4948-bde0-3286765d5b26", "sighting--2d3ed5f2-6ee5-4d91-9b7f-7dc9f4873ed4", "sighting--9e57fdb1-1e1c-4416-b2e9-25c5068032e4", "sighting--eac8d48a-5be2-4665-8266-1d935bfe7dff", "sighting--a7447dbc-ee88-44ad-93dc-58299adfe02e", "sighting--ec08a7e6-c64f-445d-ba88-7bdb360aaa8c", "sighting--0e7e4329-7cf5-4566-93a3-3807ea40ebcb", "sighting--566afcf2-9ae9-4699-9221-d7d314ee5400", "sighting--2cbbffb7-f969-4139-a6a2-b6f5d0e73fc4", "sighting--ec964d86-394f-42d2-bb8d-9cdbd73a5c57", "sighting--531996da-8c6a-473b-ab7c-b4a7a3c751ad", "sighting--464fb832-a240-4eb2-b58e-81c3b3bf72b0", "sighting--f3a36b3d-661e-4f4c-bc99-fc5eff6738be", "sighting--14dbe9ee-69f8-4dd1-8538-1180c1b8e7b9", "sighting--4ee07ecd-1d84-4329-9c6b-72e1526a7105", "sighting--06a48e4b-f6e7-48f5-aac0-e34a6f1584c1", "sighting--e3fe58ad-ddc2-4304-b709-125609f082a3", "sighting--c87e80a0-e6ae-44f2-a03c-2fbaedcd2931", "sighting--ed6f68ea-0eaf-4618-8be5-74533340bf3b", "sighting--2284a9f7-6501-4ea0-96f9-ad06fefebb23", "sighting--50dbde44-dec2-46a7-a194-dc0ef9cd28a6", "sighting--4b863dfc-44a3-4c55-af2c-de9b40464537", "sighting--d23a5e48-db55-4b1a-90d8-764d8bdb3187", "sighting--7cdbaa90-82eb-447e-ab8f-5f2ae4c9ebc2", "sighting--6d3b5cb9-15fe-4e53-80ee-5b2ec7d45018", "sighting--be68e6c2-5a5b-4b08-9ca6-4dc08407365f", "sighting--134bc13b-1fd9-4fbe-bfff-44ed20e62e35", "sighting--cf0afccc-f332-41a6-af8c-80cf0b7b5044", "sighting--c15f854f-a246-4a03-bfe4-0b6c539c08e3", "sighting--6d585e09-db30-48ef-9724-2fcced04dbf2", "sighting--c327331e-9a05-4ed0-8505-0287aa80a628", "sighting--9ec2dae7-c496-4bd2-8220-f50eb806bbd1", "sighting--48fb02d5-0a03-438d-94b4-bf4d45d08d57", "sighting--4841d880-66a4-41e6-a6f8-77a7f05a0251", "sighting--a704e36f-f355-4342-8f2f-d0f07e03ec4e", "sighting--d776bec1-c0e4-4c82-af4c-8cb24b6740ec", "sighting--0d165b7c-72e7-4d2b-a2d3-d90d752add49", "sighting--0ed26e7a-abdd-4ab9-9b6b-6861e0a6f137", "sighting--5ed5108f-e34b-4267-abcf-407c19a74890", "sighting--b1efc579-c8bb-4490-a683-30a5039d7b43", "sighting--7e0fc208-c91d-43f4-b921-f548e0013a2e", "sighting--dca51714-7db4-46fd-b4b2-7ad40fcbdb2a", "sighting--6041834d-8658-4ca8-ae21-05b1f2d06cc6", "sighting--9c98203a-76d3-4035-8332-2245ca087480", "sighting--8cd27bc0-2a14-4207-9bc7-4876f247cc6b", "sighting--7a35a470-4b8d-41e1-bcf1-868546c63e22", "sighting--57011023-775e-4e98-a9ac-c1257af461f6", "sighting--808c31f4-ab67-4ba2-986a-4718f1013280", "sighting--4ca5639c-9a29-45a1-a91f-1ef4dc4092e3", "sighting--3582b20f-53c7-46d4-b6af-e67150d79640", "sighting--13ae04e9-e7e3-425f-be89-d572dcc2c9f5", "sighting--c6c9c65e-5416-4d98-8712-0898cf5b29c3", "sighting--4de13b16-bf3c-4e40-940e-fca889c3162e", "sighting--d4919fac-1c63-4e9d-be29-c6f4459d2fd5", "sighting--6514449b-0080-4fd9-96f9-e7c09acf9a82", "sighting--c39683c4-99fd-4081-8c25-4d9b36c8958c", "sighting--897b75dc-e823-42d1-96b6-a13b71dfe876", "sighting--12d69d64-deb8-4ebd-bc6a-58c0e207e05b", "sighting--00d58944-c373-456b-aad2-53c9386104af", "sighting--e9fc9ca5-bbe8-447f-995e-b3b286e5022f", "sighting--a20da774-61dc-4e09-be2a-b49423ffb9c2", "sighting--228623c1-898d-4523-a35d-fb81c73a3872", "sighting--a8f32a2a-5142-4e9a-8054-6f6b2376450c", "sighting--6c9ad092-09cd-43e3-8213-f526c4a114a0", "sighting--fb1fc874-1e1f-4518-8704-bd97cab6ebf4", "sighting--7cfe9b29-ab33-48b7-b6c5-6fc6691ea3b1", "sighting--05558dc3-f790-4cc8-89ad-b41c8c60440c", "sighting--ffacd4e2-8bfd-43d7-a8f5-df78c5478d65", "sighting--e3cfa82b-e306-4663-a5b6-859f27c3ba11", "sighting--f326d2bb-7b13-4f58-af15-2292a2ae7877", "sighting--e7062ffb-9d4e-4523-9532-3b97f6790bca", "sighting--acb961e3-51c8-4313-a794-f81b7d82272a", "sighting--a494b125-28cd-4cb1-a46e-ef21f9579628", "sighting--0b930ede-0e08-4450-b419-9dd67cb78e3a", "sighting--35a40bc3-07b3-4f1c-b747-2a3de164dc2b", "sighting--3ebcacd4-23fc-4db0-a9a0-f9fb60d06b2b", "sighting--9f58a0b9-beb0-4f83-9f25-da1509a33f7f", "sighting--4208036e-e453-41f3-aae8-6e3d7c5ff716", "sighting--6011431d-8af1-46d7-9d32-59fefb0ae2dc", "sighting--d4a853e2-7f34-4774-9fb7-58b50893e844", "sighting--b15396b4-ce08-4205-ae70-1da0d7b10fa0", "sighting--91c8fde0-744e-4152-9c08-50c320964c80", "sighting--77dcde20-7018-4c20-94dc-5fe5ab1458c9", "sighting--f568d1c3-827d-4ed6-97e8-46d029f285f9", "sighting--3d5852b1-0db9-4bbb-9b82-efe92766c4d9", "sighting--f6d42f5b-7aab-4725-b75b-abbe90c5616e", "sighting--f6d26170-c762-4bad-809e-352483fbda6f", "sighting--680be170-6ac4-4591-936e-0e3c2665ea6f", "sighting--c75df995-7fd1-41ec-9413-871574c6980d", "sighting--0f4517e0-8c79-43d3-beea-6bfb44e52a0d", "sighting--9f01741b-976a-49b0-a4b3-52c6be706c8f", "sighting--adb395f8-ce0a-4161-8c57-847f2d7885ef", "sighting--6dc02797-15e3-4ad6-b0da-0787561b77b8", "sighting--34581eee-58d0-4bc0-a02c-761518e10c55", "sighting--aed494f9-f89e-43c7-ad96-72110a4c2be7", "sighting--6c853760-8a0d-415b-b384-7f48f5222176", "sighting--fcf1311f-d05e-4ac7-b52a-bf3c3791978f", "sighting--371a9ce2-c70f-490d-afd3-5e352aa09998", "sighting--71f5f45c-2680-4897-9f09-205ac3fbb2ff", "sighting--85706da8-6490-4375-962d-a947cbad4bbe", "sighting--42442978-943a-43c5-93c0-9af3656025f1", "sighting--1d80ab7e-09bb-40ad-96ea-bf229a45910c", "sighting--3d8d6b1a-2412-4861-a012-fbc3665cdac3", "sighting--716bd1d4-c1b4-4dce-a10c-a6fa6497b4b8", "sighting--6ba3edf9-40e0-4ef0-ba8f-dffa3df631ad", "sighting--2793c39e-7495-4a1e-8c1e-0712487832a0", "sighting--30524a31-ab62-4b5b-8dfe-2d6098b2d6c1", "sighting--6071a30f-57a9-4634-9388-efaa05421f62", "sighting--6f8d550d-dc23-442f-985f-69fe4bccdbfb", "sighting--2b0246b1-065f-48fc-a669-e892dfe670c4", "sighting--6f0bddaa-6983-4fb1-be13-72042d0585c7", "sighting--3ba68c4b-2b91-4149-967f-4981108b71e0", "sighting--3219b280-e926-4ca5-a380-156ce25cb059", "sighting--e15645a0-9a47-4fc9-b7d6-ddc8c284a160", "sighting--45a289f8-cf2f-4c50-aab3-6c222a7d5e77", "sighting--b731b189-bce7-40d5-b420-4bf854205ca1", "sighting--54f520c7-35ab-4272-a60c-a4a00525343a", "sighting--40463165-28b0-4431-9eb0-023386be2cdd", "sighting--0f55699e-6058-411e-ad03-7577e786586c", "sighting--345b9082-0bdf-4b07-8f74-d45d3f70550f", "sighting--07fa841c-0c24-40b2-93f6-1f24446305f8", "sighting--ae64a55d-ab99-4f9c-904f-c81b98729662", "sighting--c17de07c-32f4-4678-bf3f-c1e775c709c2", "sighting--1d098903-4ebf-47ce-bac0-7cd2082f6feb", "sighting--9bce8870-13b5-4034-9b74-a8eaa4b8901b", "sighting--128612b4-ed24-49d3-a022-78b54208dfc9", "sighting--8e256109-85cb-49ca-98ab-5718a117ae77", "sighting--56ee7cc1-926d-4356-a95e-523e95eaedf7", "sighting--ad76a309-4707-46f6-b2bc-0830cd794c83", "sighting--92312347-6d86-407d-8c98-5c87bc2c49a0", "sighting--f0e97470-d05c-4e4e-b73d-2fb04ce0669d", "sighting--3bdebc5e-2700-4229-9302-bc46a7a0cc54", "sighting--fc899403-09cd-4141-b057-1b95c8ebe550", "sighting--54862f4c-3098-4821-b6df-7cc9f3e2ea96", "sighting--7c055d69-7b36-4441-a3cc-330957872d42", "sighting--a0d652dd-b74c-423a-a4a6-e495e2efcbf8", "sighting--bd4e1e1b-78c0-4df1-8291-367d8c7a0ee4", "sighting--1c3a116a-d97d-4bf9-9c5e-40b6c793cf4b", "sighting--cf95d78e-99e8-4598-a40e-f6d7e99d5158", "sighting--93657003-31c4-4161-b48c-b5cb54cc546e", "sighting--e11ea6fc-586f-493b-ac1b-f0c0ccbd9e07", "sighting--94eac318-100f-4f6a-bb40-4be839faf5ba", "sighting--51164e76-6ce9-4eb2-8af3-c1cb3664eb76", "sighting--8854c84c-8c16-41a1-a3e1-47d2a7bccb0d", "sighting--9bf761dc-54f5-4ab5-b961-d4b3b1ffc07c", "sighting--e4628ff9-a5e5-41e3-b158-bf0aca6d8481", "sighting--45e1568b-3e86-4b9d-b94d-70c55e757e87", "sighting--43af0603-7df9-4d67-8618-3a78e47fc1ea", "sighting--844415b9-13e3-46aa-a7f3-f76d4300d535", "sighting--dcd6509b-018c-4da9-900b-aaa51139301d", "sighting--7d2a3076-825f-4d76-b2b8-a12e6958781e", "sighting--d8a36386-0898-4d34-8795-99d1263ec4ce", "sighting--e17f9425-721c-4d1b-b0e8-764490561c1f", "sighting--ea12a329-a6a0-4234-89b1-dcd92713ffe8", "sighting--0362eecd-b947-4eb8-a072-f81ec2dcc3de", "sighting--7f1b828f-0ef5-46f6-a8c7-3c2af357a649", "sighting--ac4f6a2a-8c61-45e3-9aff-f8eba549df71", "sighting--ba7cb82b-c9fe-4dc9-a490-c92328112487", "sighting--cd1038cc-0ac4-45f9-a672-f0417d59d577", "sighting--c8f5e1f1-8473-47a9-93f5-5dd31e2cd38b", "sighting--c70a3626-e33b-46c6-b315-57ee2b4f0cf6", "sighting--400a429f-b01e-40f9-8650-c6729a51967a", "sighting--832c1a17-89cc-4ae6-9b1e-ef9333caaa5c", "sighting--f6164590-708e-4f0a-b977-c4e62d9570a9", "sighting--f7d86232-aac2-4712-8e72-ffd8ac60bf5d", "sighting--143d2efc-de85-47cf-ba40-f0c158b26faf", "sighting--f4e8cb75-c3ad-4ebe-b5da-b61d055b43e3", "sighting--cfc36ebb-dbb2-4d90-bb37-3af8f000d301", "sighting--fd7e5512-7834-4734-8d72-ed59e93776d8", "sighting--d8d6251d-4d88-42d2-bd4c-14a6f8bde597", "sighting--8d3459b7-3f0d-4107-9f16-adbd08599302", "sighting--fb46d673-560c-4dfa-9f0f-400f8f40cb54", "sighting--6d6eab8c-7f82-4ef2-bf69-7130c71ff9c9", "sighting--765acf26-4fa3-435d-bf69-ab21c626a01d", "sighting--e9904c28-f3ae-49d5-8a89-b8a1ff4c52db", "sighting--f1a5cfb9-182f-4c08-9b08-eafefe595f9e", "sighting--ecd58cce-e3d5-47d2-8106-318f95deb449", "sighting--d770cbd3-e05d-4aae-8283-47719d96d78c", "sighting--a32a86ac-08cc-42e8-9a73-5157e0a3e90b", "sighting--c27fcfb5-a6e1-4b27-8e99-ddca06d56157", "sighting--bfa636d2-3e14-41b9-91f0-0515ebe40c68", "sighting--d2912d4c-d40c-4582-9550-1b9898ba90ff", "sighting--2c27f46d-ac55-4a71-b695-54a92e2f4982", "sighting--fa61151a-8514-4af1-9073-935b88c068bc", "sighting--00191194-1ab8-4561-8cd0-a08797360e1e", "sighting--434c21e0-6293-404f-a751-7f4cc1ae513e", "sighting--ad06bac8-2efb-47b7-b3f5-35d55df43867", "sighting--b5156d96-f711-4397-a4bc-e4ce0991c868", "sighting--9d532b5c-98d3-495b-a953-1d7216be4939", "sighting--0ecbe542-3c08-4986-8884-b908ddfb2d62", "sighting--9001631b-f710-4747-a830-e3133158a44e", "sighting--d63b30e2-4d60-4481-beff-4bb14da7f606", "sighting--3acb2f03-d754-4c87-b7ff-33c0e8035b51", "sighting--17b573cc-e25a-4dc5-ae90-d2128619bc6a", "sighting--5f665046-72f1-4a79-a004-117944ebdb12", "sighting--ff42709b-7e19-4298-aa02-7fea81cd8bf1", "sighting--30c4bc76-5645-4778-afca-98af504ca7c9", "sighting--fb2c4e15-11c7-4503-a7e5-0df82a31cd9c", "sighting--d99b4931-df6a-4887-a7ab-fad30f74b101", "sighting--638076d8-e6a4-4d8c-afd6-6e4f3a9b70cc", "sighting--3c5957ad-7dd0-47d1-833a-270e13dc14ed", "sighting--b0fcbbf2-917f-457d-bd8a-e267ab49f71d", "sighting--683d70d3-2ad3-4f94-9120-3a05416fb08c", "sighting--b54d8045-e5e2-4dc1-b0a6-4402033c2641", "sighting--8c1c0a68-b5ce-4936-9bbd-24fa23b12362", "sighting--aecfbdcf-72da-448e-8726-3a9a3f248fe7", "sighting--34a680de-e2be-4b71-bce4-88391c22dd57", "sighting--8525d627-68c6-40a8-8938-9aa58b3f9a25", "sighting--47f55853-8a52-44da-9693-c279542bd3af", "sighting--4f3b93c3-757b-4561-a0d4-432906e47ebc", "sighting--44ad8f60-76a7-45d6-85b2-2fd0becc4b5c", "sighting--b7cb551a-70ea-4b80-ace4-bfd270a462db", "sighting--3e8f5806-99d4-4882-9e79-03eab7b031fe", "sighting--28cc3a27-15e8-49e2-ac3a-62cecff4793d", "sighting--f4cf70ec-3500-448d-9d44-52d0d9442155", "sighting--25e2a15d-2ef7-41e0-8e13-75e6a2945dc2", "sighting--b91b17d7-9f32-45cc-9c4d-2c1aa87f210f", "sighting--1a83d6bb-f9bc-434f-8a46-2c5dccb290fb", "sighting--09828ab6-aa31-4353-a6ee-b7786cd41f1d", "sighting--36bbc463-486c-446e-9961-ad70c8822ec4", "sighting--301f9e58-d53a-4804-9c64-df73bab217ef", "sighting--32353104-38f4-4f63-8f24-258261e4e6f2", "sighting--39ae2643-ca18-4a92-97a4-d672ce8bc0d5", "sighting--3ea5575e-bf70-4a06-b895-6bdfef805798", "sighting--0eca522c-8ad8-46fc-ab43-0a94256249a1", "sighting--fdddf34b-8738-494a-bb64-0cc762d4aef4", "sighting--5980f22a-7b2f-48a9-8971-0c45acc9182e", "sighting--86e14c49-0324-4026-a0ba-4e9eb779ea64", "sighting--242681d0-d6b9-4a43-88d4-03f77340efd9", "sighting--312f92d5-bcff-4e3e-a3c7-5c10812411e9", "sighting--680fbe93-a437-4130-bbec-c7125d076eda", "sighting--eefed1b1-6ab8-4b52-994c-fc57fa59f1f5", "sighting--a22443eb-6c8b-4ea8-87f8-b635d74b4369", "sighting--e0bf1543-8d87-445f-9d59-29006e8e1a31", "sighting--83c31ecb-4d1d-44ff-95db-5bf0ef4761a9", "sighting--4d77d83b-418d-4aab-9508-da2770cdc5cd", "sighting--8e34db82-51d4-4068-b705-37192ffc8caa", "sighting--eec36df7-3f1b-4896-bd6b-6574e6dd59c7", "sighting--baf51554-ea75-494e-8bd4-c3ec12cef31c", "sighting--a7fa994f-7689-46e1-a0c8-81aab7bfba97", "sighting--72e67b82-c099-4f35-98ed-c38881875e67", "sighting--a440509e-eedc-42bf-a4d6-9ed97d4449e5", "sighting--ae2eb7bf-3361-4f4e-bbbb-776139336ed8", "sighting--ad3d3902-a5ae-43ea-a676-74d093e5a63b", "sighting--011820f8-1c77-4104-b138-3417cecd198d", "sighting--05b0f7f3-881b-4744-a10b-dfbe49ee18e8", "sighting--97329dec-dc13-4ce3-8026-30733ddd107d", "sighting--8689a360-8ea2-4c4a-a54c-f2d922669a37", "sighting--b51bc045-ca80-4b7e-b3a3-7b695bcde14f", "sighting--2a60f96a-4fd6-4db5-bfcb-c66f11d66e45", "sighting--58d26008-c381-430e-929f-62f327874ada", "sighting--dc5c3c8d-ca0b-40e6-bdfb-153400ffff99", "sighting--c5f4c65b-9b40-49ef-9133-e7710f69b815", "sighting--c245bbd8-d1b8-4763-a69d-37c31b041aa7", "sighting--7b6686e6-0d2e-402d-bf43-c8a1c8101663", "sighting--aae09117-0c42-4381-8614-e32254cbdc23", "sighting--bd0d862f-e22b-48d5-bb05-9907e5008770", "sighting--cddb74b4-1426-4926-a109-637fe2131f97", "sighting--5bce9883-c589-4ab4-a053-c0e15ee2c172", "sighting--603a114a-506e-4fbc-b870-2d2c3e52ce83", "sighting--8ef8bc85-5931-42cc-8d32-a102fd427417", "sighting--d6bb0d41-1879-476d-a5e5-998181adadfd", "sighting--0198dff3-fdb3-4fdc-bed5-c431c24ac920", "sighting--ff76c9e9-455e-4e31-a739-441466942dd5", "sighting--b782cbce-c0b2-41f1-a057-b7b0b60e1a55", "sighting--aa60e1cf-4aa2-43e6-a052-3978331b603e", "sighting--431ca696-1b49-4359-ad96-02bd62d07b18", "sighting--1fb720df-9fed-4fc6-8da5-dc2ad417c532", "sighting--e5621af9-3d43-4345-b8df-1e8cb4afbda8", "sighting--8e1a64ca-2cbe-4151-b047-da8161ef38e3", "sighting--34a8bdb8-3a5d-4c25-bd85-d8f522aaf80e", "sighting--9ce1512d-e73b-456b-b4eb-ce438e4a2ae3", "sighting--514cce8a-a7c5-4ee6-8c9e-ba11c3c82d0e", "sighting--96797f0d-9cfa-4be9-abe7-ec18eeea3b92", "sighting--6ca739c2-0154-4d43-8edf-889429d9df28", "sighting--5c6e5e34-8ca2-45fa-8d88-623d0d6a3dfe", "sighting--b4e3e9f5-068a-4049-9d0f-355a3950740c", "sighting--39290d05-bbd0-41c0-b5d6-038511981a46", "sighting--c6edacba-225e-42e1-b1b9-7dff4349ac5c", "sighting--d6054a24-7395-4a52-9e33-2d21642d4b33", "sighting--1e0eec18-9498-4cd0-9ce4-22f43679d644", "sighting--118904e3-5ae1-49c9-a5d5-a0640858e4e5", "sighting--1dd9eb10-167f-4869-9404-1c2c75c5b01f", "sighting--1ce9d1fc-ea23-4597-9aee-78249c8b3ccb", "sighting--8eb26944-1ed4-48d5-8c3d-e23681035299", "sighting--3bfeaad7-445d-4035-9b8d-a8c0066993f9", "sighting--96a2acdc-ebb8-4619-a57c-4350bee0c300", "sighting--97c7de25-3c91-48ab-84f0-718c5adac08c", "sighting--f6fb67b9-cd75-4c18-8ae9-51fde1878bee", "sighting--02c285ca-39da-46e4-9c3c-5abffba5a1c6", "sighting--0fccf090-911c-4267-9179-93fb27e86a3a", "sighting--a06654cc-8db8-4a0a-8738-c21d1bd89038", "sighting--864334dc-a64b-4ae4-a0fd-4a2d1c7c5e7e", "sighting--9d5e343d-4b51-4902-b5c1-24b1375a52ea", "sighting--b4887e70-8343-463a-a1a2-31cd6ed9835d", "sighting--7c3e5ae1-a19b-4e7e-a302-f10ddc39b8fc", "sighting--cf864a68-88bc-46cb-bbcf-6e5e25bbc6e0", "sighting--6e041603-41f8-4afa-a807-470466d7dbcd", "sighting--aff2875a-54f4-4132-9caf-f638d76e5e84", "sighting--30f7997c-a65b-4580-a3f0-d4b84ac4f34b", "sighting--7232f050-6240-496f-8540-574934a49529", "sighting--bd6cbdf7-1a97-47c4-b9b5-270b3434f156", "sighting--bbadb160-729f-4296-939e-c12672d68556", "sighting--69c0bd65-9ad7-4fe2-8dd4-d442018b8fd9", "sighting--e597144c-9d35-419a-b784-a6fb69a2d5ea", "sighting--0efff8fe-4efe-40dc-9c32-b4ae45f4a379", "sighting--5525f136-9042-41ff-8f4f-81f0dcf410aa", "sighting--742239f0-c696-4563-b872-714b25006b12", "sighting--250eb778-86ae-4df8-a4e5-21d62249d173", "sighting--74822f88-06d1-4db3-8057-8d4627405b28", "sighting--097481e5-4dfa-4892-aa72-b7de7b63604e", "sighting--4cae3c26-164a-4f74-a1e3-09fde1886072", "sighting--79efffb8-e6e1-4d9a-9bdc-54976999e19e", "sighting--39610169-292b-4e7f-b800-de0e2f768479", "sighting--88acd533-cc90-4e21-a2ab-a066e33d09a8", "sighting--3e8159de-a95a-4a9d-a4f7-9bb3bcb6c0c2", "sighting--0677b0d6-dbb3-4b51-aef6-2bb34bf8e86a", "sighting--15da047f-164d-4e27-bc0d-7896c3ae5658", "sighting--880a9266-97ae-4e08-8b49-36853fb4d3df", "sighting--e778da6f-93b5-4f9a-85b3-8a89767fc072", "sighting--7223b52f-ceec-48a3-9e08-dbba9f2f83d2", "sighting--06d1e59e-b8f3-4b9c-9037-28de275bae82", "sighting--dda6e149-3cb0-41a1-8e32-c1b43fd21fe8", "sighting--6f629c9c-0cb9-4926-ae7a-6f27590fa067", "sighting--eea21609-22a0-4307-972d-35a3a387d916", "sighting--df6f3099-cb8b-4695-8deb-5f3c5a6d7ddf", "sighting--0453b820-a3a2-4220-a785-e0b8d0b35090", "sighting--8030e0f9-e576-4b9c-9436-067aa8480044", "sighting--7a59a96e-ab13-435b-9795-cf1023564c85", "sighting--7ba098c4-94d8-4066-8637-7cf86e1832e0", "sighting--4fbdde3a-4069-4194-b66f-1cec3e4e1b90", "sighting--08b27b04-db46-4d87-b7e0-02b97a19a01c", "sighting--20d6d6d3-5a19-4481-a380-19c9e397df0e", "sighting--484543c0-d089-4cb0-80b5-4a3579072ad8", "sighting--343df8a6-4013-4bc6-9393-91d7da5d2459", "sighting--ecafe1d2-1a6c-4c9d-84f8-dd0c6d02608f", "sighting--05576428-6457-45a8-b383-adeff206454b", "sighting--3c2acbf5-7bd4-4ccf-9531-abeef200c7fc", "sighting--d45cdd5b-0623-41a7-89a0-d7393c447c65", "sighting--4955ff1f-bfbc-4ca6-9ffb-304ec7e34161", "sighting--cca2e618-0e9d-40eb-95fe-dc3de349b4ba", "sighting--4cd94e7c-ffe7-4d98-b516-c5d3c4ebd53f", "sighting--08103a3d-7fc6-457a-9462-e0aae5d8a935", "sighting--5ea4523d-9b2f-43b5-aa6a-fbdefc22ad70", "sighting--75c872b5-1e06-46bb-8485-8ba7a7a591b0", "sighting--783a9a0d-b621-41c1-a515-c2ca95b1713a", "sighting--e3c39601-d503-47da-ad60-61246d3d7e89", "sighting--36cda4e6-51b8-4989-8a13-e27587905c17", "sighting--56b12154-f21a-4be5-bd3a-97875f6c97ca", "sighting--f33bbd4a-9f60-4b7f-942f-843c1dd78dca", "sighting--2ebd4197-a0b0-420f-bc6e-0bca339b2653", "sighting--0b34fe42-501c-4a85-8fd5-764d811dc6b4", "sighting--43f99805-e8fc-456e-97bc-ee899b807f72", "sighting--079c025c-44fa-44a3-a314-a1ca78a362ec", "sighting--9cab59ff-ef42-4806-8daf-1ad8c17a47fc", "sighting--d1eaa26f-dbf1-463c-8b1a-ab40758ba245", "sighting--399197fd-b4a8-4452-afcd-f26e59056699", "sighting--8d89b1ba-b3ff-4f8a-9321-bac67f4d741a", "sighting--ff67c229-d6dd-4929-ae0f-6fa2baf51c66", "sighting--5b1f305b-f1db-4bc2-ad95-08c33e07e4d8", "sighting--7d320871-01cc-4f67-97b6-b329a29c33f9", "sighting--72715a67-a85b-45b6-8bf7-6de59fe59a0a", "sighting--331a01a1-0897-4989-9f39-10f1a8e024f9", "sighting--ec144ae3-d111-4378-8c6d-30339c9eee0e", "sighting--1fb64875-8805-4210-8e1b-2dcb795e6e0b", "sighting--601baea8-4a70-4f10-be69-59877dd496b2", "sighting--6de44194-aaa1-4b9e-adc9-2a9c7428f913", "sighting--3a00129c-e067-4848-94f7-996ceb430520", "sighting--1a955b62-a7d7-4b64-9ffe-e50d68d7e9b0", "sighting--71fb0382-954b-4ba8-b24f-9ca4d49c2e9a", "sighting--587648fb-696c-4322-98b6-abb15b09b346", "sighting--3292f984-cf03-42d8-b91a-3daefbd2093e", "sighting--ea434a8e-430f-4cba-b30b-168b47a16ce9", "sighting--5dce510b-cb7f-447b-9f09-3dbcb127f3e5", "sighting--5bd15c99-23c0-497b-b938-e9868ec11123", "sighting--e2034573-fc51-4ccb-ae0a-1c07edfd0f73", "sighting--ae28676e-ac3c-488c-8108-cdb411b49b2f", "sighting--d47fcd9f-5e08-43f1-a88a-3aa94820a5cc", "sighting--cef59ed3-5955-4831-a611-c906b033e0eb", "sighting--4c9c5e55-6d91-4905-ad94-e4e2988d84a9", "sighting--a88c576d-f519-4cd6-89f7-766cb72d2b7e", "sighting--057bbe0a-09a8-4a13-8214-d2b64ef5fcc8", "sighting--d47a2b9b-f553-4a1f-aa05-5f9dfeb1f249", "sighting--5046f783-cc4a-4985-b763-c3c10bae8ea9", "sighting--45d72c99-0d4d-4003-8176-457965541a6a", "sighting--858865e6-a0bd-4eb5-8961-c5c501360b4d", "sighting--13fa3b54-9229-493c-a17d-977596e4ee7b", "sighting--a6aa9ab6-87f5-4c19-b01f-2c9afb7eba45", "sighting--f088b80a-d532-426e-9e72-e7ccc1459cc4", "sighting--655cea43-fe84-4e46-86d5-c85d36493e12", "sighting--51bb0af4-8303-4ba0-898c-d135ef9c8f1c", "sighting--42a9b159-bf2e-400c-ac7c-527f4ca6c960", "sighting--0e59b98e-e500-4c93-bc89-4d3c0f7f67e0", "sighting--a2aa6161-e421-4aa9-8cf0-be3edba757a3", "sighting--69261d6f-5147-4f84-9977-36bcbc8e4338", "sighting--e009dac1-231e-4671-adcd-7a057cfa2655", "sighting--6277e930-868e-4b0f-bfd8-6a9b96b6297e", "sighting--71ebc0e7-8ad6-47af-ad33-32558d484055", "sighting--67e42f0c-60de-4000-89ea-ee0db5c7632d", "sighting--4accf7bd-a098-4fd7-b5c8-e5894eec5356", "sighting--b9953bbf-9c46-4483-ab27-2f29c941d777", "sighting--b8b593b5-9f0b-4464-baec-22feb24c8929", "sighting--1f5d7f14-859a-4446-afe9-72f356074c20", "sighting--e23bf9fb-be41-41cb-a622-fce580f2abd4", "sighting--7330b340-0e95-47cc-9111-17b73593fe9b", "sighting--0b14be35-ed41-4bb3-a836-901065d9f617", "sighting--6181d469-637b-4d35-a149-1bd4334913a0", "sighting--cf7b31f9-4020-485f-9217-fe663d6ef504", "sighting--9bfb8910-5272-4f3b-8167-24c2c9b9ff24", "sighting--bb0c02f6-5f74-4428-af56-2847ae85f5b6", "sighting--4af6ee86-f963-4802-9f22-4454e31ca0be", "sighting--dd203614-48b3-43cb-8ebe-ee85ffce5bb4", "sighting--fadc458e-8b24-46d3-91ab-d238060100ad", "sighting--04a11919-ad28-4d6a-be08-1d982cc641f9", "sighting--a38e03c6-2811-4793-9c32-caf3609287c8", "sighting--01ed99f4-f805-44b3-94e6-e58a840329b6", "sighting--907423d9-ff2f-4433-9b3c-7a4ae9836f8e", "sighting--cbf11dcf-e8da-405c-a784-5048cb44bbac", "sighting--199e8d3e-d110-4e10-b1f6-10d6fd5d1143", "sighting--8887d305-c5e6-45ba-881d-de5f0b871354", "sighting--2017fd88-7da6-44d6-86a5-34793a6df357", "sighting--59a58e51-18b1-406c-a9c6-9dacc2500236", "sighting--4c2b1940-91b1-4b82-8e5f-cc02aaf738f0", "sighting--2d09cb4e-2b02-4c77-926a-6a05ed853568", "sighting--9d506bcc-8dd2-4649-8c52-daea78968042", "sighting--e90b129b-cc9e-4d5a-8d9e-d472177849e6", "sighting--0e871fec-568e-4549-a839-4f2e1f031483", "sighting--3a7722fc-7573-4879-bc2b-695a335870e6", "sighting--df1096e2-7973-411f-b037-75e023401d53", "sighting--ecb109b2-ce21-4582-a1d4-26155c9b7db2", "sighting--f835d61a-5505-4432-85f6-447169fc5b26", "sighting--144f9c65-182c-42e4-9221-d9ce8725eb0a", "sighting--8c01d91a-ddfe-4b5a-b77c-bc25a55075b0", "sighting--e63e0bfa-d966-4d3b-b725-34a48cbdcd9d", "sighting--0a4f89bf-5d47-4fb1-8301-a2c73ac3f4e5", "sighting--2d48e692-ebb7-4e3e-89dc-4580427db918", "sighting--61ec5c7e-6224-4a17-bde0-80a622935ef6", "sighting--f3c10ecf-abe5-462a-89f4-8eb95091ece6", "sighting--a19dd61b-3ec1-462c-8253-2c6293e7efd5", "sighting--c36e7592-de0f-4eaf-9495-e93e54d425eb", "sighting--66f6ee97-465a-4161-b299-2495692e4b59", "sighting--79003df7-0b1c-4b09-88f6-dce7725838ab", "sighting--d205c5e9-b17a-438a-95a6-dd76ec4357d3", "sighting--67e17b08-84d8-4520-b928-49576a27519a", "sighting--86909491-0ff1-480b-8f08-6f0ba1730a85", "sighting--8527e3f6-dee4-4024-b582-ad91a1fafd5a", "sighting--fb63ee69-f267-4fef-aecf-91cd94a47856", "sighting--e4feeeae-5988-41d8-bb34-818c92ad8f1b", "sighting--e4f632b7-275a-47ea-a4fe-1b2e89c4f56d", "sighting--632d1255-f72e-4cff-a2a1-2a0719ba8d74", "sighting--a738276d-6f3a-4ba8-a960-f927774568d7", "sighting--d421a128-b876-413a-a26f-f49e4f169713", "sighting--bc18eecd-dae8-4ef7-ad45-1ba972e93ea5", "sighting--85368978-0601-4fd5-86d0-309d3f43f51f", "sighting--e6b591f1-9b9f-45dd-b19b-f92c064a3e2e", "sighting--1aa8d02b-d13b-4b86-90f2-275abeb94b1b", "sighting--1dd4c1f6-c541-46da-934a-0355d2d765f7", "sighting--239e9788-1165-42bc-97ec-ede078d80633", "sighting--a481186b-847b-434a-a5bc-af4816874ab8", "sighting--13346acc-f975-4823-b8ec-c474abbc108d", "sighting--31b3f152-bf51-4b66-9473-a371bdfaf83d", "sighting--5f6781ac-96a5-483d-bb64-24b0c14f550f", "sighting--b2f856a8-01ec-4d99-881f-e9b1e6e32470", "sighting--691294d8-9f8c-487d-9045-8f596ff4d8d0", "sighting--5521737b-1de7-4c3e-a39d-df9ee6bbbb7a", "sighting--957a83da-2569-40a1-8ea3-43949a110d01", "sighting--f12606c8-88a2-487a-82a3-24cda2c485ec", "sighting--2bbc16cf-03ac-4a56-b04b-6d716e725df1", "sighting--0f03ab88-1a41-4ff5-8bda-37b33e4ea346", "sighting--3f540393-e808-42de-a9cb-186f72a697ad", "sighting--55e9a7ac-bbd6-4134-8267-819a1ee6bd97", "sighting--f1c79519-f9dd-444d-b8f9-94d5e95ddafc", "sighting--a1841439-4401-4124-ad6b-6f4985fea718", "sighting--63ad61ac-a9a4-4664-86eb-c064b9c4cec9", "sighting--1da9524c-fcb8-4b54-b397-0d6ecede8fcf", "sighting--64792079-0241-4ba1-b6c1-d23613004af8", "sighting--9c9b348c-93d0-48ac-a832-49fe4c3fbf75", "sighting--093e0648-a412-492b-948f-aa48f86f531c", "sighting--a68ed415-cb24-483a-95df-3984eec2fc54", "sighting--01bfa0c3-1e81-4f73-a52b-ff500e1f6f8d", "sighting--5fd8f232-2978-41f3-8886-679daea2bb5e", "sighting--2b24d468-c396-4bdb-9131-6672fc81ea85", "sighting--7bc3eadd-5967-4ab0-ba17-30ddb778e039", "sighting--d5665095-de77-4da3-910c-c05a91b7b9e5", "sighting--e67a04c1-8bd3-4fe8-a76a-344e43bcf9fa", "sighting--73259706-9283-425e-8688-04af02ed860d", "sighting--ca155207-dc5a-4346-b208-774e80b1830b", "sighting--d8be7622-d459-47b7-b5d1-c29a18e646b4", "sighting--9d6000ce-e93b-450b-8025-71e809fdfc77", "sighting--0e32c557-cd62-4cdd-822a-964247daa8be", "sighting--01ee4fdb-6306-4978-b91f-b1c7fc985cbc", "sighting--96a30275-e0c7-44e9-8d20-d46433a3f28e", "sighting--aa86b751-d9c5-423a-9afd-d76e1ef405e5", "sighting--0f1fd6e7-d298-4a70-a75b-85532eb71db1", "sighting--62e31e50-2b2d-4e1e-a75f-7bf53ef4239a", "sighting--b06386a3-9fdf-4b63-b73f-e4e707709dd9", "sighting--9b1b677f-b875-4dc9-b774-dfe498d11001", "sighting--89d9b4fd-e2d7-4701-a8c0-b33174f05770", "sighting--4395b124-189c-48b2-b65a-a9015d8c82b1", "sighting--353faf0d-0d73-47e7-a3e8-8b239659e6ff", "sighting--5c26148d-7094-4c5a-a055-bb1cb1959c73", "sighting--5c80150b-7a77-4e88-af71-db2c45d0aba4", "sighting--0a0ee7d6-a605-4ef4-91c7-c57bff8904ac", "sighting--d5210427-7915-4aad-8afb-1c01335cc739", "sighting--e5a05b1e-823f-4e72-807d-87d0ee7ba0e6", "sighting--94faab03-751d-4c90-a118-6f9c7a2bd1e6", "sighting--715bb808-ccfe-48fd-9244-ad50ef65445d", "sighting--8be07101-dc5b-4c5a-b057-010665151791", "sighting--e8917d16-e946-4494-b582-09c907a800b3", "sighting--c5055f48-477c-4c46-b6ba-7e2ab9cb153e", "sighting--bc0863bc-b56c-47b2-834c-5ca1c4bee74b", "sighting--099af6f6-2c1b-4cf8-bee7-72d22ae91c56", "sighting--6f483dcc-990e-45dd-be82-4d1355687ef0", "sighting--c80091a1-6e5f-40d1-a0da-4caaa871417b", "sighting--d8f5b345-f1ce-4147-8180-63f4933e2fa6", "sighting--661b9a0a-2bbc-4dee-a7ae-40ef80f52dd3", "sighting--28e74722-eb75-4789-8393-4e1176ddc340", "sighting--b9115994-c1d0-490a-b707-166ba6e402e7", "sighting--627f51ea-7794-43f5-a053-12cfc5e50537", "sighting--14053e78-aa15-4c21-9f40-1113910d05fd", "sighting--8f7eef8b-b28d-4890-9d89-78799d5a8c00", "sighting--ee343fe0-ed38-4768-8e81-42686dc73f16", "sighting--46e557f8-ef6d-42bf-a365-bfd94e97c1ee", "sighting--62a596ae-695f-4479-a6e4-ba853d69ea7d", "sighting--3ad8b038-c54d-4f4b-97a0-a6ddc06f7d96", "sighting--661a0a63-041e-4909-b3f8-53086901e5cf", "sighting--bb8f1d38-8095-4a80-ace7-ea85c7c5907e", "sighting--a25b853a-a03e-4d3c-8a26-63ebec3bdf6a", "sighting--0dc8cbf9-166b-4dca-a0a3-c19abe93c3d5", "sighting--ae51a265-c0c8-46c8-987c-b5b91c7e9cf0", "sighting--7a128e03-f4eb-4582-8058-3d8ffa43cfdc", "sighting--2d443bc6-76fd-4607-88fa-b421852b14b7", "sighting--edb5356b-c2dc-42bd-a8e0-e14da3b570e5", "sighting--99bb8150-0ad9-4a8a-a905-b460c6b25934", "sighting--6bffede5-a93e-4c9f-8a4e-d9ec18dacc1d", "sighting--ec4b9dae-3459-4470-ae5c-939c0795a6cf", "sighting--d23338e2-463e-4727-93be-f878380f82c9", "sighting--14e103f5-dc75-4fd2-be19-23d3f34bb441", "sighting--f5f8f273-04a8-4340-bd8a-5907b8f65aa0", "sighting--bab0e790-a4c8-47a0-910e-c7e97fd37c4b", "sighting--e2522583-3907-4c44-9b18-2aadcec6983b", "sighting--832d1ad7-abd3-47a0-8572-d135bed87826", "sighting--c8d9cdef-0f3c-4b11-a28a-3b64f7261495", "sighting--49f4e2b0-c8ec-46af-8fb1-5d7386fbd046", "sighting--392e1f35-82b6-4150-b51e-d6fa54db0b91", "sighting--9c52dec1-c89e-41d8-b84f-ff5a96fb23ac", "sighting--c7c8a803-e8d0-4cd9-a773-20d1eaa43be3", "sighting--a1ea0283-7f9f-4da6-9d63-7094e4d5f420", "sighting--a3c55055-ecfe-4e85-a05d-34006f915fb3", "sighting--b605541f-307f-4376-8f2e-422abfb87567", "sighting--d077d127-861e-4653-89bb-728761a3285d", "sighting--3238d3ca-6383-4093-8332-db005b70a0dc", "sighting--85508fd7-e09b-471d-8e99-09d22232e0ab", "sighting--adbdb6ef-744d-41bd-84c2-00eb31f113f1", "sighting--018bc9be-c140-4461-867a-d1e8db0e2cfa", "sighting--9ad5197a-b96f-4153-af00-e747d59c251e", "sighting--a89bf764-4b80-4d97-b556-29e044b21e7d", "sighting--4d37bf44-0bf1-4603-919b-43eb6190b968", "sighting--cca5278e-e6ab-4f49-a99e-89aca20811a2", "sighting--a6d0e091-d7af-4ef1-ad2a-56b696423a5f", "sighting--dd8e294a-3a1a-41ea-91db-fc585dee5177", "sighting--092b466b-b835-41ca-bc07-6b5264b3e255", "sighting--ca64c318-d9b4-4b39-8d09-c5eaa3c39e92", "sighting--66509bf5-b68d-4139-8c36-5891ed15ec67", "sighting--3dcabb73-3cd6-4b9e-886b-6c55f52f46b5", "sighting--9deda5e2-3499-4997-9d6d-2a4e670be7d6", "sighting--fe1ebb1b-665c-49d7-bb58-20acb8808196", "sighting--e55d6e19-fdfa-4b20-9686-6f39970b921b", "sighting--6aae13f0-8289-45cf-80af-56ebd9650ce0", "sighting--7ad000ec-dacc-4313-9fb0-2dce945909d5", "sighting--5affcd94-3d45-47dc-93e8-9aa31cf7622b", "sighting--764f255c-6497-437a-b78b-c4a87fc9545e", "sighting--eb59ce70-4ece-46c3-bd61-8900d90cfbe5", "sighting--9b52bc20-cb61-46eb-8c4d-738fde5a59ff", "sighting--e11412de-c25a-4858-8f74-da5b53ee6d2e", "sighting--50deb045-b824-4d6d-a259-558b87d02ee4", "sighting--668cf33e-9664-4b88-b8b3-786727ed7c70", "sighting--91c58691-c98e-46d5-a46d-62126ac76dfa", "sighting--6913a975-375d-4441-a2d5-538e70bf2468", "sighting--3015fcd7-e198-4d3d-a36f-d7697aead5f0", "sighting--09a728cb-1a95-4a58-beea-8a2375d33d06", "sighting--a993274a-95df-4c5d-b35f-777a435d0084", "sighting--5c10838c-4c6c-4b0b-bc4d-abe738026b48", "sighting--42005a8e-b01a-4324-b49b-735dc71008f3", "sighting--1f63cc8e-6eca-4d4b-b500-03d197bc1127", "sighting--b94bfa14-d037-4e06-999d-4e57ef266fcf", "sighting--cd12b2d7-87fd-45f3-9fc7-f3316ab126ed", "sighting--3bc2624b-613c-4270-8ae3-2f945ade9228", "sighting--a26aeabc-f274-4b0a-a90d-78eb2282c819", "sighting--4fa4f322-f4e6-4470-863c-a78cdaafcdff", "sighting--7fbfeb72-00b0-410e-962b-22cfdb2ec754", "sighting--be8c3c1c-b615-49a1-84fc-4fc6033e7a87", "sighting--cbdccac1-4129-4ec1-b786-70d33515cd9e", "sighting--89333c1e-c720-42a6-983d-efb29aeec43e", "sighting--957e2566-7359-4bcd-8761-fcb2cf7425f9", "sighting--8e9eeecf-7b87-4100-b76e-dfee26176855", "sighting--9200d6cc-706c-489e-a413-9ae48e094cc7", "sighting--7a966165-b092-4282-b569-f83dd094ac6c", "sighting--46a38e4e-df6c-458f-911d-8475dfd4d8db", "sighting--f1f4c205-e69d-44d6-85a6-3e147b40ecfd", "sighting--207c96f1-a71b-47ad-afea-85ce07f9a9eb", "sighting--4efc4936-1274-4d34-94a8-539e201992a0", "sighting--233f2fca-e65f-4ae6-9eb8-a4b57a5ee7ad", "sighting--26202517-6a0b-4c56-b46a-f87fbe7854e5", "sighting--ccb47d04-0791-40b5-8e9b-43f3bdc82450", "sighting--2b6badf3-4b60-4050-bd38-7568a15069b6", "sighting--6c1b3435-db3e-4ad3-a03a-9bbe22fe05a0", "sighting--c47a5764-d895-416f-b573-cd584db1f8c9", "sighting--6b4b1ce8-b99b-4002-9d46-48efbbb09f62", "sighting--9cc77036-f4c5-415b-983b-037b51d367c3", "sighting--366c6925-380f-4b45-b0c4-3e7a65e30ff6", "sighting--3029e007-73c7-400d-9712-1b48d319b57a", "sighting--da8db571-4f6b-492b-aaab-84f77e7ed67a", "sighting--bdc979f3-16a1-4038-a13e-34d98e1bb11b", "sighting--3ff4c275-edd4-4966-a09e-09c21fb8e7c0", "sighting--06417358-2110-41af-88fd-a243850ae7af", "sighting--6db383a9-b10e-4487-9e3b-a813a41f2a11", "sighting--11bc54e6-ee74-4dd7-bcec-1e3dc0892532", "sighting--72a98c3f-b82a-41ae-8069-aa52ab4214b6", "sighting--d91b2782-c67e-4fb4-ae2c-1cb4204326d0", "sighting--d4896631-1e2d-4e3a-b373-7caa48b7d0e3", "sighting--2063f5ba-eb5a-42de-a7e8-d426756073aa", "sighting--299db521-ea1f-4840-b467-df8cf75ad7e8", "sighting--0ac04d87-fd85-4f6d-884e-190cd0b620f6", "sighting--2d9d7e8e-979a-40d0-b19c-aeda19476b21", "sighting--49afc7b3-5eac-4d39-805f-2fec399ede75", "sighting--9f2dcdb4-a5a5-427b-9269-952f77cd80d2", "sighting--9d97e0fe-2125-4983-8518-ce0eafeb49cd", "sighting--e6f991f5-aed5-4176-a235-318fe861dfa9", "sighting--efbf619a-569d-4a07-bda5-204fb498de9c", "sighting--f5e78ec9-b768-4b4c-8d85-e1a258c937b5", "sighting--cd5f0796-64ea-4d28-bf96-5f95ba5a442d", "sighting--6a63c303-b11f-45d6-bfa5-fd29baa4cb18", "sighting--46e4dedc-4f91-4247-9ced-4abe2d31b1ed", "sighting--638d176e-0a5a-427e-baa6-ad38a87a9ab6", "sighting--45474924-2e7d-4efc-8a26-0fbc170f1266", "sighting--8f953b30-3b0f-4982-a17d-9f62780f9011", "sighting--91f0dd3c-5481-4b82-80e1-1c141f09ac52", "sighting--b968d799-8594-4839-ac8c-875febe8c3a6", "sighting--db7eaa1c-e76d-4bfb-a7eb-cd23a06aa623", "sighting--ef6824c8-6411-47db-b812-305314b05dbb", "sighting--809e525b-54f3-4e07-a418-9e3c8e0006d3", "sighting--18dff552-db21-429f-94d7-3536ebeb7e0f", "sighting--0cc8a9d8-441c-4a78-903d-fcc6dfa22500", "sighting--45f2afd3-b3c6-49ca-a64a-7e839beddf2f", "sighting--e7a4e29b-2bf1-4c9e-ba32-ab9a9a322c08", "sighting--7d886758-7dff-4bf5-b8bf-8dad7d71721d", "sighting--1b554c99-739e-4c44-83b8-5fd6db789405", "sighting--9934279a-972f-48fe-ad3a-5e48e83ab537", "sighting--7356be25-f4c2-45dc-a4f6-087c5b6e0d34", "sighting--dc178bff-fae9-4cde-b43f-a42c30d08b70", "sighting--fd6de921-0213-4565-9ab6-2adb4647ab3f", "sighting--4a9973b4-df10-40e6-95e3-aa475cd8e722", "sighting--1c6c8ec6-b725-4bf7-a117-041077788e97", "sighting--fb3203cf-05b3-45bc-956f-ef31878b6786", "sighting--e6a73199-f12c-4409-8405-cc85626ff927", "sighting--f3ae6ddc-0c3b-4264-a67f-5d7eee39ecc0", "sighting--d32b553c-f036-4231-bfdc-6a97ed759780", "sighting--31400291-3f1c-4a68-98e5-4dd8a9f37afd", "sighting--c5d1af51-6ab7-4135-b5ff-ba11646dbc18", "sighting--8322a270-31e8-4fd6-a66c-bb73c48f3779", "sighting--db27e5f9-e2aa-4a9b-8b72-aa4e13fd1bd8", "sighting--78d73f41-e208-4ac7-8e9a-6d3319ec3ddf", "sighting--3cdbdd0a-7d62-439c-aeaf-aba6a0c1aed1", "sighting--021671d9-c02e-4c25-b307-8435dbc360b1", "sighting--054b10b3-02f9-45c2-8e7f-8e6ddd8541ae", "sighting--30396ee5-1114-41ba-aefd-ece4622c6ea6", "sighting--130c673c-c548-4a6c-ab71-5dbad7ba5167", "sighting--3cba6269-e308-4d36-b8e5-4472b321543a", "sighting--c7976949-519b-4458-80ef-24a5bd868fc8", "sighting--8cbbe706-3314-47be-b0ff-d98b9647590a", "sighting--f8615cda-247d-4bb1-b55c-20fcd680b5ae", "sighting--aef553e6-aac5-4966-af94-33348d7c17d3", "sighting--4649c81e-be6a-43d0-aa5c-159360e72b81", "sighting--280fd00f-771b-4946-9d06-4fa8ca1c2d4c", "sighting--4e50883d-4447-4e8f-aab4-ae68624feced", "sighting--bd77ea3b-e22a-41d5-995d-ebfb73f69ab0", "sighting--d52da2b6-d7bb-4ebd-902a-d9f6a25c4a5c", "sighting--e8fe0565-9a2e-492c-abda-5c3c66f76e24", "sighting--f0d504f2-7f44-43bc-bfa5-a97d9232665c", "sighting--e5e7566a-7eae-4f3b-8e2a-b92a9deceae6", "sighting--3b71d0b0-aa1c-429a-81c2-83189d8074f5", "sighting--6f2cde77-5e95-49e2-82e9-82c833663c93", "sighting--5e05f0eb-5c94-4339-8610-800e2bdd2688", "sighting--89eb8926-772d-4351-a8de-697a5d25b42e", "sighting--e6f8bb30-b041-4447-80cc-6d1524166394", "sighting--36ef05de-b6a9-4933-964a-3ac32f65b5eb", "sighting--f71e786c-60ed-4cbd-a496-f248ae258d7d", "sighting--45dda329-52da-4e55-9f63-5856c9faf69f", "sighting--3487f310-bd44-4bce-b38a-7b25ed053d80", "sighting--8e34cdf9-6022-4ee9-8cf7-539521865977", "sighting--45bacc33-cdc2-4d43-9fb4-db43584ee7ec", "sighting--d9d079f5-8763-4d1d-9b71-85533ae217d2", "sighting--34794be1-1e1c-416c-b579-31b27cc9add1", "sighting--0f70b8a6-e44e-4cab-9c07-6354bebb6100", "sighting--e8235653-3bd8-430b-9db4-f9f81fbdecc1", "sighting--c3d9b95c-bb97-4c82-99c2-cb3d38be33a8", "sighting--cadbf46b-8ad1-46fc-8724-b5433975e24a", "sighting--fe03d952-ab65-4c99-842e-30c1ae239a33", "sighting--d394eb6a-5306-47b8-a20c-ced8b60b50b8", "sighting--707e79ab-bbfa-4cf4-957e-b9c133adb4e1", "sighting--055381cc-aec5-41c2-b185-0bd8bf094075", "sighting--2ac151b9-0275-4620-9c53-3e6be5c72a93", "sighting--c91e8e85-722a-4563-b349-7c662d944f50", "sighting--95be6ee4-667f-42c5-b35c-b3f5eac1f5e4", "sighting--518ec784-10c9-4373-901b-b9eadd18253f", "sighting--9a290660-de3a-4ea3-b783-f555c0dfc682", "sighting--70daba11-2047-471f-93c1-6c92f826ccb1", "sighting--0980413d-b417-472a-a039-b12f09e79bcf", "sighting--61a9a9fd-8818-445f-bf1b-350f748ffd6f", "sighting--8b8adf72-39ea-4b9e-a1fe-0c54ff407fb8", "sighting--38af4283-ce5d-41f1-a5e3-0f5549d9ad92", "sighting--cb308fce-6b5e-43d2-bc33-8077f2a9e5cb", "sighting--452adc4a-6c03-4c1c-8a30-424f296ea5b9", "sighting--99fb6fe5-2d38-4e19-85fa-94fcbeff0b00", "sighting--ecdeea2e-472b-45a3-b0fe-37beac5ddba8", "sighting--c3c8343c-1f55-4c54-8a69-7446dd3cf215", "sighting--e5f42c97-2327-4467-814d-9800baa1dac0", "sighting--90cf2e5b-d2c2-4d50-a5a4-53b3f2566cd8", "sighting--92f569cb-d30b-4adb-94f3-32390f045238", "sighting--7ab758ab-402f-4658-9dd1-c6a10cc4ceaf", "sighting--01681a62-232b-46d7-afc1-a01d6f047192", "sighting--fead02b7-d350-49a2-85bb-d95a397e5af7", "sighting--ec7f498b-ee22-49eb-a745-6124e3c49013", "sighting--0909452b-067a-4d3e-addf-6646f302439e", "sighting--19aebadd-2925-4039-8ec6-a7590d4a66cb", "sighting--2f3b5e9f-4842-4eae-89fc-eafd69e1168b", "sighting--70b63582-152a-45d6-9ae5-69880a34b6bd", "sighting--68bd622b-a4a6-4826-bea0-e3dac40c2608", "sighting--2731b1ae-2332-4bd5-8960-3bb2246d878d", "sighting--85a9b81b-b56e-4545-9e4a-7ec5ab3997c7", "sighting--dd8c5968-2e70-492a-b445-2e7b5fd0fbce", "sighting--34430410-07e4-4ddb-a817-02c0c4174038", "sighting--c0294c6d-b516-4147-b7ce-6b2108d70d15", "sighting--0434a761-b8f6-4388-89c9-6b03c72f53ce", "sighting--5199c0be-ff5e-421d-859d-007334f4b2dd", "sighting--34fd168d-969c-4480-8ea3-c99e521f087c", "sighting--f51b63b6-6108-4d65-bb82-af8f53fa5a4b", "sighting--7b31a8d0-b120-45fd-b34c-45fca88fca1e", "sighting--e42df6da-abd9-4c8b-98e4-db0f5582c96a", "sighting--b4e45e76-5f29-46fb-9016-39bf37c95917", "sighting--a34be4c3-1b57-478c-8114-af14f68be131", "sighting--a085fac9-5005-4d53-9bba-0675e1587337", "sighting--5daac5d3-3719-47ed-a455-803237d26933", "sighting--57497462-d728-4f2d-b227-870626a9c0fd", "sighting--45762708-5c06-4c02-9576-7690628f5d50", "sighting--07f53f90-7eb3-479e-88bb-54d977de9e41", "sighting--f6834200-ba59-4ba3-bafe-fbc01286db2c", "sighting--c8a88ad8-2e39-42aa-9922-6ce8a3703d8c", "sighting--b11d2f5b-4458-4bb8-bfc9-322ab753ea9c", "sighting--a7ced126-8e91-4ca8-b2ec-2f2860d6cb26", "sighting--3a05bc55-6657-4701-9bda-ac93932dbebf", "sighting--583d667a-09e0-4de5-a64d-2cc4424ef856", "sighting--d8bbd930-7d16-4245-9d5c-475dc270bc6b", "sighting--bbdc1efc-c1a7-4882-bcd6-fe7bba7c3e40", "sighting--73a9d892-1708-42f9-b5b8-11334830ee7a", "sighting--12398466-0c51-409c-a660-1fff1e75ef43", "sighting--b5b8b0ff-02bb-4d43-95ce-4b5ba66c6db2", "sighting--4fd9e13e-ec7d-44fa-8036-a31805378302", "sighting--fd921801-0bf7-4320-95d2-9fc7f440d44a", "sighting--a3a2549e-d653-41b8-bf74-c596e1fdcec9", "sighting--cc0c6754-becc-46e2-8b1d-1b102e84f3cc", "sighting--d4f1bca1-90a5-42a7-86ed-8ea93a117f50", "sighting--e6a86052-de14-44b6-9b20-6482284dabd0", "sighting--34075d86-f06c-499b-826b-cf473874a219", "sighting--2ce65652-85ab-42f0-b230-2bcbf864c109", "sighting--fe9f1ce8-beab-40e0-8869-1d69f9b6d400", "sighting--d776fd23-6e97-4d24-a0ca-3ea2b0af0219", "sighting--76394f40-a21f-4158-9589-df816ba9e800", "sighting--0adcf945-5666-4b60-bd3d-7366488a1283", "sighting--bcbc49b4-bc35-4049-a154-447da0a1f0a1", "sighting--49f703c1-01a7-4ea9-bb41-008e60affa04", "sighting--f3796b14-a207-4a0c-a3e1-5e8e9d21358f", "sighting--9cb68083-0153-4e5b-9143-cfdb4aacff64", "sighting--07473dd0-e834-42c7-9ea8-ce0dae8e9694", "sighting--f5190d34-2e47-4f3a-be99-63c83332fc9e", "sighting--83071a73-e9da-4d16-8f20-92ee13ee8738", "sighting--9cd5fd2e-3872-4302-bacd-feead84395e5", "sighting--5bbe138a-7b33-490e-a948-6ee2fbec91a7", "sighting--6a2f55df-cb1d-4d30-acb8-a1afcd9926a9", "sighting--5439cf09-dbbc-45fe-9c19-4a0fcbe7e108", "sighting--bf4d1a0e-4ed6-48eb-861f-0d7d7a0a4b36", "sighting--e03dbb84-db99-43c7-b6e6-a52338f09568", "sighting--5e1154bf-eca7-44d6-b854-68a40cde2b4f", "sighting--14d696c0-dd5e-4d93-8eee-59e83a26d73a", "sighting--110cd20b-aa9e-4c5c-b912-dd60967aec83", "sighting--10244926-4490-4e4a-9548-81287a33eb70", "sighting--f42e1cec-9168-4101-9001-257762f2b2f4", "sighting--2b3b4a28-7db2-4f38-857f-a5ae7ad19f93", "sighting--6295d4e8-383f-4120-b316-4dbd7b228167", "sighting--319a2b2e-e9e5-4e54-b7cb-b206a57c569b", "sighting--527ac10f-a34c-498f-87df-9a0e0f5faf8d", "sighting--cd8dfa5d-979c-4054-82b2-c6918b380f0a", "sighting--07ac659a-f93b-48d0-a930-bdcd3991da81", "sighting--7702132c-0e7c-4ab6-b4c0-738542e3994e", "sighting--55dc790d-ce2b-41d4-a618-d7383ce23870", "sighting--2cbcfc9d-504d-431b-8644-ba9cb7aa6c32", "sighting--1e1944a6-7e34-4082-911f-43a2f6defae3", "sighting--d22e4333-9ce9-4af5-8f85-2d937c5ce3f3", "sighting--1077efe3-4126-4519-ba25-ffcd5d4c3695", "sighting--4da49db3-d8b4-4779-83f5-29374867f413", "sighting--d09497e3-ede5-4e98-b759-c20f7da47c3f", "sighting--53f16589-cd49-4cf5-a6f5-68fec12ee9bd", "sighting--8bc2eeb5-59ee-4cc5-9772-4f892826d570", "sighting--99dc5d23-4869-4bdb-91e8-f72a4596598c", "sighting--e6ce4987-263b-4912-9491-48d9d5af4d6a", "sighting--3918cbb2-a5bd-45be-86f4-f8b9b0478249", "sighting--69dd0fdc-1b8a-4cda-a8ca-215a013e2a2b", "sighting--d8ff1624-5bc3-4d1e-8d31-a966ebed5a79", "sighting--3c75ba38-eebd-4b56-9a58-a8393e0bbc85", "sighting--48cbcd6d-d217-4965-8aec-d6ed5b5517ca", "sighting--518b736f-3fea-48b1-b919-9aec5f31b391", "sighting--f9384fd3-ab63-4be4-ba91-90c93790df8e", "sighting--c6771a12-cd0f-4e1f-88fe-df714a4baa72", "sighting--5e0f00e5-04da-4f46-b359-13c6afda6fb4", "sighting--f2f8cebe-00c1-4e10-815a-350c023d5262", "sighting--4fac7a6d-7a58-4b07-9c66-3d70d849c6a3", "sighting--8a944e02-b10e-47d4-ab29-220d5c06cfdb", "sighting--75418f38-6aeb-440e-a6ca-f9379ea75929", "sighting--b78b651d-30bb-4205-bc57-54265bff5f8a", "sighting--3178444e-a413-4af4-8c71-b31ac9bca1aa", "sighting--845fc35b-0c07-485e-9f31-35c9a34105b2", "sighting--8af7cba5-dbbd-40bb-9b6b-9f352ca05324", "sighting--7fed0da4-fc75-4c5d-979d-ba5619fad2e2", "sighting--b1a6d399-9eee-4251-ba09-048fd52db0cd", "sighting--c9edfeea-03f4-49ce-b00b-f23ac47a4c18", "sighting--a37dd670-e27e-4f14-81ae-e76d83623473", "sighting--a4d67553-8a9b-45a8-b597-f53c42b1a952", "sighting--95564087-deac-4e70-afbd-bbeec98ea693", "sighting--245aea32-8a13-4bba-91eb-8ea5f5680802", "sighting--2fec9801-dfdf-42ad-91ce-259fb43df35c", "sighting--32c26887-adee-41e7-b3b5-8d89695f3072", "sighting--d0705e89-4ac5-497a-953d-e395e7eb3b9f", "sighting--c0870064-3013-4a56-b51d-21daed2ca0e0", "sighting--9ea9268e-9fec-4a48-89e8-7119f9562a29", "sighting--279dfbcb-8997-41da-8a53-7e69a85a922e", "sighting--9ca149ae-4541-422a-a82d-e15347a21f84", "sighting--8a850411-891a-4db0-8edb-3523f8dbab41", "sighting--3bc461db-1e3a-495c-925d-e621e0aca419", "sighting--392a53eb-b544-44ae-b27e-8e5dceb741c6", "sighting--5b03487d-d587-4253-84f3-212f3cbb7648", "sighting--907c218f-b882-4c4f-949c-7ab9c888212d", "sighting--83e0675c-6bb1-4626-a0dc-46edb6dfb883", "sighting--bfe055ed-995f-475d-9ef7-d5a9b427373c", "sighting--734422d4-a137-4879-8b3b-e95fe29c6880", "sighting--1ee8c8a0-45df-4847-ae5f-4809fa7db847", "sighting--fc3d7ad5-34ae-41b1-92f7-ded73bb36489", "sighting--e09563cc-8094-4c81-950d-efef1a212973", "sighting--05e85763-b767-4c6b-9f65-f04ce8511c63", "sighting--9aa14a60-f956-43b4-a36a-eab8290d8f8d", "sighting--7df78cc0-ef14-4287-abf1-56a53d7e7e9e", "sighting--22486cc5-5425-46d6-b514-f63e2527cb6a", "sighting--2bc12d44-320d-4f44-a0f8-bf72502fde29", "sighting--bb61db89-6fbb-40fc-83c9-f3b9ae2798a4", "sighting--1814bc50-c603-4863-975e-cd0ca4e92978", "sighting--788864e4-05bf-42c9-8ee6-75b4e6d87da8", "sighting--ff19bba3-5f2a-4691-9774-a57a4016012b", "sighting--51496a69-c3fd-4c08-807c-08680da90637", "sighting--d4711111-4e79-4bce-a8a2-e7951d78b83d", "sighting--fc8450a4-5c52-477c-843a-3117c24728cd", "sighting--147ed3ee-e565-49dc-a5bf-3ba9385d5f37", "sighting--263e47a2-d6bb-47a4-bd03-2e83affaee36", "sighting--031eb73c-e077-4b78-a41f-4ebe9c2a5340", "sighting--b2664852-b526-4fac-bd3b-011e16e06611", "sighting--b0242551-725f-42b1-a130-b2f812239e77", "sighting--e9905449-9d69-439d-8763-997f24909c7b", "sighting--acfb9bd3-0e6c-49be-a1cf-026a5dc925cf", "sighting--4c232063-3e82-4f10-a95c-f2ccee19e014", "sighting--3cefd2a8-f424-4f9b-ab3d-c47e7d65c5ac", "sighting--29085080-9aed-4759-aa5e-abf145cf6736", "sighting--a5323724-5a53-4996-8179-0b2e87dcf4b4", "sighting--c010774e-532c-43a2-8f50-c9ac1f721aae", "sighting--a42f8b22-a423-4fae-9f98-f1fa824f8268", "sighting--2b591eb2-20f1-4551-b262-eff3f318ad3f", "sighting--117f9d36-e372-4eb2-b9a2-8f3aeb7a1b1e", "sighting--0da1a8d6-bacc-42ed-8418-393b6529199f", "sighting--ee4d41e1-2445-4429-9800-7ceedc202c85", "sighting--3ad292b7-85b3-4f1e-bfc5-27cfd3cea0a9", "sighting--0f0561fd-53a2-4f53-b09b-583171c652c8", "sighting--461a4c46-e7a7-4ac1-b92a-ef46ee6c51c3", "sighting--2c91325c-8fe2-492e-b0cf-3231602d032c", "sighting--47f15566-16dc-4192-ac82-7f4da1b83f4e", "sighting--313ffed6-0630-44b1-a167-8b0070d49a13", "sighting--6e246cb9-c867-497f-a634-6d64b00d0a83", "sighting--01701bb8-280c-4d6e-893c-69f67f4fe4eb", "sighting--a21a8d34-b9c8-4ae5-b9aa-1f2964bb4fe5", "sighting--aef6525c-f0d5-4854-9594-90d0f1bae1bd", "sighting--3be34a48-a628-4f66-bb44-49ca9fab87b0", "sighting--becf7f17-0068-4c13-ab76-bae4c260da7f", "sighting--89241a3c-1517-45a5-8b3a-ab617fc24eca", "sighting--edbedbe0-ac8c-47f9-a95d-a22aa359d5d1", "sighting--13c9384b-40f2-4430-9fb9-c5ef540f99e5", "sighting--1873ef23-58d0-45ac-bfe3-6cb234918d45", "sighting--7b85f48a-e33a-4f25-a869-e616562332ec", "sighting--aec38df7-b003-4847-befe-89418fd08464", "sighting--d172fe0d-c2c0-423a-82b3-d928af579e84", "sighting--08289c51-eac8-4ce1-9dc8-0d4502b381aa", "sighting--dd2589ee-612f-43d1-8426-4bea41d702de", "sighting--5a4dba1c-d8b6-42db-a498-b69324b9b905", "sighting--27d5d66e-681b-4c5e-b1c9-4e9fa0c8563a", "sighting--a0ec0009-2b78-47f6-a30e-b87c3fe34d11", "sighting--8da06a18-2e25-461c-b627-cdc71db8a4af", "sighting--6b3a2f2c-dcb3-4726-83bd-08cf183824c2", "sighting--9a0658d4-7ddc-44b2-af0a-16504009aa5e", "sighting--a2d10638-2894-465e-84da-de37b08b6fb4", "sighting--1821a911-87ea-4fd8-9d16-7ce99711c41e", "sighting--f9aeda75-c11b-4a8e-b4cf-2dfaea7a6fa0", "sighting--d9b0e487-f78d-4668-84f3-7301875f5bb0", "sighting--bd08d7b1-1b21-4e77-ac69-392a84fa85fa", "sighting--1cbcc8c5-9da8-4e45-9d0c-87578ca99570", "sighting--aba36b0e-d5ac-4240-8114-4adc0490c400", "sighting--08de5347-80a8-4145-9bec-e327cdea3935", "sighting--3a093c4d-c813-46af-bde8-f41398f3bfa3", "sighting--14a804d8-05c6-42cd-8266-3a3399c472e9", "sighting--1e37ebd3-8557-43fb-a0cd-fc584593c126", "sighting--a61fc6c6-b5a5-419d-894f-502ace5224db", "sighting--806ad6b0-aca5-4c10-8463-c4abd69be0e0", "sighting--332815b0-c078-4575-bdbf-bbbb2937f011", "sighting--bb75d247-3a2b-4946-8eff-fabe7388bc23", "sighting--da54360f-355b-4b3d-aaf5-c87e5006f10e", "sighting--77fbcdeb-4b4c-457b-a205-4bdd486f9f1f", "sighting--67774b39-4916-46b4-9473-070f5414a5a4", "sighting--6796d6d4-df63-4bf8-864c-6c0ad7e572ca", "sighting--1b7ba5a3-a1fb-4c0e-9b59-a7f588d60a10", "sighting--a4357ba6-a49c-4cd3-8d0f-4008663ddb9f", "sighting--9854ce34-26fc-416b-9e84-04153f929049", "sighting--020b1199-15df-470a-bed8-55b507c872d1", "sighting--b5067393-c160-49bf-9647-38a0b533cde3", "sighting--e3c80615-4698-4707-9089-31f8497b7bb0", "sighting--a18a12cb-f6c5-474d-9749-08bd21ea620c", "sighting--cc818f8a-63c1-48d0-bd8b-c517b4144ddd", "sighting--ffa3a91f-b431-4e7e-95bd-fc5129243d07", "sighting--3d84e90f-989f-4ed7-a435-1aa575768d3c", "sighting--753cc7b2-1d15-496d-b88a-cfe6dc621cff", "sighting--a3c93f28-6b98-4d1c-bbf0-437307b1a30f", "sighting--521cf3c9-9f20-4695-bae3-5160ef9ea7d2", "sighting--781fa1d6-10cc-4672-b5f3-b390a3ede320", "sighting--91e7fc05-cb71-4282-be57-e94078000b64", "sighting--870390db-74c6-4593-969f-0eabc38f4091", "sighting--90d73811-408c-4f2d-a5dd-13d8a864dc8e", "sighting--c37043c6-86fa-4677-9784-9865942d3f27", "sighting--dd3d9fed-d490-4d1c-a836-0e393283ee6f", "sighting--59559118-9de4-4cc3-ba62-bfd59dcf40ff", "sighting--5cbdd3c8-4d59-451c-9181-28760bd3f61a", "sighting--95fbc4f6-9bee-4598-a1a3-677e6b4d66b2", "sighting--d7da01d7-7e07-4c56-9a1e-b407b59fffb4", "sighting--66cbb9f7-c225-4118-8b6c-09cdc274f6d8", "sighting--25e255de-7d92-475d-aab7-9955f897d2e8", "sighting--e6d67eaa-a371-429a-9523-81852ff22c4f", "sighting--7f24f03b-5df1-42ae-bb4f-6f3963f94b63", "sighting--aa92f948-fb5f-426e-8bbc-6e8d9c66470b", "sighting--3890b7f9-e41e-4d3f-90e1-4af60e711865", "sighting--01c4a7c0-7e0a-46f4-a7d2-09dd71ff0aee", "sighting--453cb0d7-bd88-44c5-90c1-62bca7016a13", "sighting--cb251cbc-80fb-4e49-930a-63ced7d3b837", "sighting--a8f3e8a9-8e38-48aa-8bd1-b7195c56eb49", "sighting--38b15c97-4ea8-4b26-b912-480f0ccd2154", "sighting--bd58c761-3b6f-47c0-b67c-105d68fac40c", "sighting--748c03b4-2b44-4f69-a7fc-ef468bb5e019", "sighting--09d9afb6-1fda-41f1-a419-5b9d8f7648a1", "sighting--21f2dc25-85e5-46a0-bc24-97bca5bd6541", "sighting--62e5ab45-488f-456b-bd85-5fbac1d0494f", "sighting--22696dcf-4202-4bb8-94d1-dcecc2abb655", "sighting--a2d876ac-915f-49bc-834e-52465889bae3", "sighting--183b61ea-e72c-4f4b-bda6-4684e2354fd1", "sighting--fcf61dc6-08c4-4877-9bc7-637ca6e5b6ac", "sighting--72e4dca9-58dd-41c5-a831-d301a67d0fc9", "sighting--e8af6dd8-97f6-46e7-b7b2-fe06d619d1df", "sighting--bd549c32-3fc1-451c-9a3b-eb34b95b82c9", "sighting--8030de06-5126-4d24-972b-ad013cd200ee", "sighting--b6735baf-cc72-4ff4-8297-0f097b0e597f", "sighting--2dcbcf19-3100-4f55-ae67-34e59cbba160", "sighting--2f423e1f-dd27-4895-a501-59acc2d2f3f1", "sighting--6730d98a-f538-4f1c-9611-1e420358cd57", "sighting--2717310f-538f-4d5e-9a53-bde923acd421", "sighting--7347a476-5dba-4231-81fd-652a27d4dcb2", "sighting--77a9cc95-cdda-4edd-b2f9-c4469ba89ed0", "sighting--7d6bc32a-b6de-4819-8f50-d319aaf3baf9", "sighting--bcb920e5-903b-473d-9307-6cd9c4d49b08", "sighting--69284d2b-9592-4690-a442-1320aeff224b", "sighting--c5e6d3c2-2ccc-4518-8fff-627495e8d041", "sighting--00e63999-cb69-49fe-8d44-be2b32bfa375", "sighting--143ee7e8-8bd3-4bd2-8898-e7067f032c5a", "sighting--65f6d4aa-3eda-4290-ae7a-eb1746dfc556", "sighting--bfdc9b1f-9dd3-44a3-985a-e92125aa17d1", "sighting--fc641c85-b76c-4ae5-bba6-db51f499cb4f", "sighting--804a1ff7-9871-4257-88a4-c791ef2d0bc9", "sighting--a46e252e-be1f-421e-96ed-ecbc2f8dfdaf", "sighting--ffff147a-731c-4e64-98d9-8f118a8f8d62", "sighting--4cd3da17-ad49-45d2-bf1e-7f76c047bb6f", "sighting--ced208e6-347e-42d7-8d3b-26b2e565fedd", "sighting--270e1935-10be-4b41-ae60-5b43213d955e", "sighting--5c9aaab3-8d0b-48f4-9ac7-99cc31d9beb4", "sighting--19dc098a-27c9-47ce-a82b-b9edab7dde76", "sighting--1c69b2a4-e07b-463a-b166-2b384a5e7c6f", "sighting--9a99a323-681f-4747-a6fe-a1802c3dd143", "sighting--f6f0dc89-6ff9-4afe-abed-12c6a493adfc", "sighting--0618c3a2-940c-4c70-b816-4ed924e50e7b", "sighting--75bcb551-5595-46f6-9f5c-b364832552fa", "sighting--b2003971-ba8a-47d8-b06f-7420b66bb932", "sighting--3af11015-717e-4131-9380-acb1c76fc8b7", "sighting--84ec1885-7fa5-433f-95d7-b821f100186b", "sighting--1bc61dc4-88fb-4250-ad18-1d92e420de53", "sighting--1e6c03ff-ad07-423b-ad84-ba9f7beab34e", "sighting--280ad863-fa38-4d9f-8abb-143b97c3edf5", "sighting--df0c84f1-6ef3-4a09-b191-6c41434c7ac6", "sighting--95175891-f63f-40f8-b83c-52fe7724a0c1", "sighting--53b5a5df-0719-47f5-b41e-0346d3655ff8", "sighting--214127fc-10fe-4905-9dc5-5096bdc87f88", "sighting--b28d53cb-2130-47d4-af47-4ad4c6a5a237", "sighting--9a140260-4557-498c-86b9-1878ca38406c", "sighting--aef08a59-e38d-4c5c-b861-655b366aa2fb", "sighting--8a228a1d-df69-45a4-9952-ed09f2ffc3a6", "sighting--5a570dfd-8dd4-42d6-8301-373df73c597f", "sighting--cf1e41c3-a593-45db-ab1c-cc2a3531f9b6", "sighting--3df9312c-7029-4294-8a9c-e053e6712931", "sighting--9196ac6c-a5a7-443d-998d-14d994937b34", "sighting--b43af40f-cd8e-4e81-b352-9b2b6e213477", "sighting--7c58d881-6e82-4971-8b2e-9a48a51c224e", "sighting--cac48840-263e-4e14-a8e1-6dca823fdf87", "sighting--75e95100-b0b8-4946-9ac2-aedb5eefa479", "sighting--2e11413d-0955-4ec8-8f88-2df90156d539", "sighting--06186ce6-b932-4757-bcd4-21d1850b3926", "sighting--83f925d7-7a1d-4728-a188-3b211e5fb481", "sighting--b4e08ecf-5d07-4fef-80e0-600bb4a3fd9d", "sighting--743c6bc4-af32-47d5-9e42-12923c94f0bf", "sighting--fadde2f0-b811-4bc9-8ef5-fc32d0e273d5", "sighting--14d2bacc-5e4e-451b-9389-938a496ff6bd", "sighting--b30c8156-d0af-4025-a6d5-bcb23ee1e953", "sighting--86cfe15c-d841-4951-ad05-d8da1898630d", "sighting--0ab121b0-714c-4a2a-9d46-33204fd5f2d5", "sighting--3b9deb3b-89cf-474f-9817-ed6edf395010", "sighting--901d62c9-34c8-4613-a18e-a8f6a2e58cdc", "sighting--b7997f9e-3be2-433f-9414-239cc1892513", "sighting--1ca47dc4-4aa7-4829-b1a6-0fb72c8bf397", "sighting--4e9afb47-26ea-4539-a60e-de605547067f", "sighting--3ae51066-4605-4e06-ba6c-ef4cd578f550", "sighting--d3753285-9c18-4f3f-a333-1972561f14f3", "sighting--760d5512-a49a-4797-8edb-7f4acb79d7f3", "sighting--81ba20d1-ca0f-4b2e-bd82-9f7e7010c013", "sighting--82453512-ea9e-45d1-a796-7d5efd2fe148", "sighting--eb816c3b-e95b-49e3-b374-1e7d390d511d", "sighting--ea52d3f8-9bd7-4d3f-a5ec-ad6af812c958", "sighting--17826c66-d163-43b0-a98b-bc0ea2b3f269", "sighting--d56ad194-f19e-4cdd-90b0-ad419670ff0a", "sighting--913c4257-d243-48a5-9302-9d1b82bcfe09", "sighting--0d1ffc6c-13fa-458d-a0dc-a4a33a876a6f", "sighting--f7e04508-dbe8-4940-8131-4f917df64d33", "sighting--a5274197-ec71-4500-adce-28c81bc6965d", "sighting--5ee3f7a9-96ca-4093-aca2-cecc344bd997", "sighting--bc7f3d0b-e7a5-4d7c-ac43-a11cd9ab2267", "sighting--e0c7c16f-9d23-41e2-a1e3-88247fc4dc5b", "sighting--9cffe5d2-4b50-4073-9f9b-c73a71415894", "sighting--248a6e01-08ae-4f57-adcf-0f526222160c", "sighting--4477c474-1fe8-4fc9-80a0-5611ad867501", "sighting--075fd858-1da7-473f-91d2-3afe752d0428", "sighting--8e2587ce-9af9-42db-9fe1-f5d9829a26c4", "sighting--e47ba895-8b80-4834-98e0-46fd81f4e59b", "sighting--87b3a950-6bcb-4c3d-8030-4cc5ff78d4f2", "sighting--d1a8798b-b825-4f35-9ac1-a1fef88d364f", "sighting--8c64dd3b-b3ec-4093-8627-a2df40d275c2", "sighting--f171ffc6-212b-462b-8a84-c7fa17df8489", "sighting--849f2295-ba8b-4694-a73f-a8d499a849c6", "sighting--272a566e-db3c-4edc-b1fd-1d963693797c", "sighting--88222973-169d-4119-9932-cb8aeb5c9404", "sighting--6d70b6b0-af8b-4204-aa13-30aa340d7be7", "sighting--4c5900bb-4b20-4dae-9e42-68b9527e2cd4", "sighting--8237cdad-097b-4f18-b14d-bd8a152f7fcf", "sighting--9acaadfd-972b-437f-a8a0-272c920f0c89", "sighting--9a1bbd65-c6c5-4930-a614-f29db2711588", "sighting--f462a531-0e85-4d5c-ac54-9e33da93fa84", "sighting--ec952e40-ee5f-4115-be98-d358f86cd651", "sighting--33f583be-9f7a-41f3-b614-b1cf71399dd5", "sighting--adbfd5a0-147f-4355-874c-e8761e1bd6ce", "sighting--d2bd1da9-589c-4408-b8bf-605ff01ed193", "sighting--d078f7fc-4e2e-44c6-94ac-1dc371fbbb4f", "sighting--c95b493b-07e2-4a9b-be34-cf96a5271c0b", "sighting--df7c724b-4774-47a4-8c55-a8037935ae82", "sighting--7f30c6d2-26bd-488e-a95f-e6f4052d15ed", "sighting--ae2f603a-2895-4c8e-a3c1-2d46bd67a79b", "sighting--1eb3747c-b889-4266-b4bf-54336008b198", "sighting--6006b5cc-ec6e-471c-b08b-104c30e9973c", "sighting--2e6a48b4-6f22-4469-a09d-da3d138458c2", "sighting--07bb325e-aece-4650-99e9-c168574e2225", "sighting--77e05804-560e-4a8e-8310-a55c57b30c6c", "sighting--ea910a7b-4ac1-4b6d-b141-6ca660f6d05f", "sighting--566a7474-8a71-47d5-a66b-b3136fa0a08a", "sighting--476e2ed8-b83f-42d9-9df3-0871151f0110", "sighting--12d9cddd-f79f-4555-bc2c-896f4f90e818", "sighting--a705e505-9ba3-419c-8bbc-1684355bb05d", "sighting--5aafef43-4e1e-41b8-b314-12c5f53ee387", "sighting--54202cf5-f305-4d8a-a81f-abc76ea4d3a0", "sighting--58bc4ed3-eee1-46ab-815d-79e3d306742f", "sighting--a887d5cb-e269-430a-9a55-5726472dfd31", "sighting--6c1d7863-000e-422a-bacf-7bb7432406f0", "sighting--9daced5f-8128-4ef7-94de-b77f22668431", "sighting--69073f69-4e24-4e21-b2e4-78541c902a04", "sighting--369d08c7-39ba-4393-a1ba-0a464117e0f2", "sighting--ea97bd3b-fc7e-4889-83a8-221d311bd316", "sighting--e3f40c97-d2ed-43c6-88f8-caedbe9c7706", "sighting--d771cd5d-12aa-4722-adb8-1ca6b2640630", "sighting--3bfd8d62-5474-4c4e-8e36-1a7c13577557", "sighting--5a92221a-5618-43ed-8358-7973b6f10bef", "sighting--9d0a2043-89ad-47e9-8599-799936ba2ae9", "sighting--cd5e933c-70a3-4122-8f31-00dbbe1bae12", "sighting--a973ec6e-6a1c-446e-8e84-4ed58d2e8a29", "sighting--a3ddc7ba-ff19-4891-bcf4-3d86405b21d7", "sighting--7981a520-6917-4f61-a1b2-ebbf568ce81a", "sighting--cae1c7a3-b8cb-4fb3-8b33-e118d80f03ff", "sighting--c5909110-698d-4eb5-90d2-fe4a1745e739", "sighting--97f3456a-c4ac-466f-bc30-28e6570bcbd0", "sighting--c0589365-4a2c-4c5e-951d-11c0edf10035", "sighting--77bbe98e-bcce-482f-acb4-488c3120ee5c", "sighting--aa773605-8ca4-4515-93dd-e1026fdcba4f", "sighting--ff21e7e7-83e8-4edf-8c52-b976fc4bf1f1", "sighting--04ea6cb2-4423-4c2a-8d9a-39931640d3c8", "sighting--a6061db8-02eb-4deb-82ac-13fc19ecf923", "sighting--afe444c3-a0c6-4a6b-816f-e682e94efeaa", "sighting--328a91b4-df42-4f68-87ec-392640816c80", "sighting--4e39d18f-4c40-4cd5-b209-2bf4cfa83848", "sighting--005654e0-2efe-4ec3-8509-705902618091", "sighting--f9c3904e-5794-48ad-9061-b0eb729a795c", "sighting--b8576367-fcca-44e9-a767-53eb2e376a21", "sighting--9e02b688-c587-45b8-9b3c-a7715aa6f763", "sighting--d3f5bd20-1a23-40d8-abc0-d9576b37b9ea", "sighting--3d7219e4-e515-4983-85c0-bf0f0f91092e", "sighting--9439c784-a0a8-4eae-b24d-e97c831eba9f", "sighting--1e54580f-4611-4c1e-b44c-f8670ff9029c", "sighting--797640e4-38b2-4016-94d2-ed12873565ef", "sighting--c250db8f-6dec-4f2c-bae6-2eed36e17f1c", "sighting--33a46aac-73e3-464f-b2ae-3fafc73f8111", "sighting--68606251-2186-40cf-baf0-958718f33468", "sighting--bd7250f0-5bd6-4b43-b5c6-f9d0d120bb0f", "sighting--adaddf79-9e1e-4f41-ae14-a2380a4b71d8", "sighting--b51038c9-e818-4c51-a324-3f9da5a37ce8", "sighting--2f3f0316-b691-4a0f-bc5b-0331c1989be8", "sighting--a433f73c-bb7e-4570-a3c2-f190fde101e6", "sighting--199bed64-dc6e-4d36-adce-2bdab8efcea3", "sighting--2cfe76e0-c229-46d9-8f65-6e78a59a6c41", "sighting--28c3a37b-272b-488b-b861-3cb76d1947a8", "sighting--bf7cd95f-1d71-4fab-a834-9a9a2b84a545", "sighting--f011759b-9be7-4832-8cfb-f93e701b0ae9", "sighting--7a5ea573-ab3f-4c8a-887d-fd190e907af0", "sighting--ada44ee6-e216-4833-b8ae-f79c7ee85f1d", "sighting--ac75e84a-87ea-4755-b2ef-fc5bf32d19fe", "sighting--5a441936-df1d-4f36-a0cf-db46f23bfacf", "sighting--86f24ea6-d5e9-4574-8bcf-d96af4ca6872", "sighting--c18530a8-b478-4acc-b43e-ffd0dfd7350e", "sighting--85e9d2cd-c1fc-404f-8c39-56fb1ae6d3df", "sighting--3e93f5ed-9033-4e33-ba6d-03b3f56a454a", "sighting--22851197-4b9d-4ac0-b941-f57b4d03f6a9", "sighting--6ee6cfac-4ed2-45b9-a37e-9c55be32af11", "sighting--841edc8c-b509-4e98-8ca1-406d1fcc18aa", "sighting--f488c817-0498-47d9-bd36-e0427f1e16b0", "sighting--0f0d2cbb-3933-466b-883d-034f85171b99", "sighting--c9353b52-10ec-482b-93ca-6ec697022db4", "sighting--95981d3e-6ed3-4bc3-a836-a102019d0fe1", "sighting--a95d95e6-5431-4083-adbc-b353d041e6a9", "sighting--8babee99-369a-41b8-b5d7-085de6d486ae", "sighting--ccc0f9c1-b10d-443d-9e47-1a7ab3fc81c2", "sighting--8951b824-0cc5-42b7-8dbf-ea2ddd0b739e", "sighting--4471e9eb-ba44-4b53-bb39-5d99403651e9", "sighting--3ef763af-93b9-4fde-9277-bb88e509e959", "sighting--9507ea81-6ea4-4503-944b-dc0915a76724", "sighting--d5d43b5c-50b2-4ad1-9577-f7776e843dd3", "sighting--fb023407-4c2a-4173-8cd0-3aa697f4c4fc", "sighting--e1b47512-fbfe-4e65-a0da-7eebb38391fb", "sighting--cc362270-3256-4ff5-ad21-489563123a56", "sighting--65cb146e-aae4-4e85-ab20-a542961d9a9b", "sighting--832db1ce-4675-4a35-af59-84188fbd982d", "sighting--af8c3721-1fac-4557-9ba8-9890d1ca00b6", "sighting--96b76a1e-0c00-4cb1-90f5-8b205317ce05", "sighting--171c3f81-2866-46f2-9ac1-b2aee7dedff5", "sighting--1786583e-5ef5-46db-bf09-cafdda98bdaa", "sighting--08ae2024-1d77-4c41-b3e4-b9e78f75a118", "sighting--03283c69-8c10-4fe6-9d57-2e03b7e8147b", "sighting--2a3704dd-9475-4960-b263-e7da26b3e817", "sighting--0f2c9a15-71cc-48ab-a6b7-24c335d8516d", "sighting--9e1fe92c-38f8-4ed0-bacc-8448163e6457", "sighting--ff04f5f7-7703-4170-8184-b1f0a8fafd09", "sighting--451718d1-7ead-4fe1-bfc9-f68faa63d8ed", "sighting--57c44afc-04b6-4568-99ac-b11658a0c5a3", "sighting--f51fa2e6-feea-4e12-9efa-ef1a5bb0ed2a", "sighting--18d88d0a-410a-44d3-a28d-af6009feda5f", "sighting--4f7a9192-2deb-4fac-985a-d0092dd62032", "sighting--f778966d-dc8e-460a-ab71-24f875716134", "sighting--adbf45dd-6793-4913-b1bf-d5850f37f4b2", "sighting--9e2b12ad-d8aa-4f22-bfb2-f2aef59fa5ba", "sighting--4a9e9487-f5f1-4a98-aa0a-717a95dbbec5", "sighting--097f929d-9e49-403b-8507-8e82cfbf4d4b", "sighting--d4f35585-4bd9-438d-87f6-ae930fa4e4e2", "sighting--707c37d6-f5c5-4d3e-9337-8da0c61c39dd", "sighting--73f699e9-97d7-4c6d-9a6f-949cc9d4b609", "sighting--f50a6e62-907c-4974-bcbc-23d6bd7fc1c0", "sighting--0d4d587f-dca6-4727-8f4d-789f7ffc6b8e", "sighting--a5a1b3a4-9644-4263-95be-4ed62fbab500", "sighting--82b4ff98-38d8-4a6f-a136-6f457aec1089", "sighting--457722e1-6977-4908-9981-e00331476dc1", "sighting--12a919c5-a4ec-4a40-b9e4-d319ac3529ff", "sighting--e1403c94-dc87-4144-ab64-9ffded4dc706", "sighting--f729fb76-42c5-4049-8ad7-b3a08da86280", "sighting--2d48aa46-9b05-42c6-9d2f-bf6d5c792ea7", "sighting--92d017a9-aa26-4acb-91bd-5fb37d1032ff", "sighting--f32d13c5-bc1f-4ee4-8461-b84f5fc84227", "sighting--ec28be18-837b-48c7-9b7f-fb957a51ceee", "sighting--7433e61d-c17f-4e41-aac9-866a3219f663", "sighting--6b5a5114-75e8-44b9-8e45-7e7ce52fe21f", "sighting--2b8e51df-2708-4155-a872-ba8fdcf0c621", "sighting--ff0fb64c-4b77-44f5-8b6a-18394639e985", "sighting--aa29bb48-3fb8-4bcc-b943-6dcf9b4b9e3a", "sighting--3e556153-4101-4242-b88b-b91438f30481", "sighting--f1f1f570-3ce7-4d41-b782-83dfa20d3d32", "sighting--33485a7d-3b61-4db3-82a6-c8575c8aadf8", "sighting--1fb4f57f-673c-47a0-80c9-904a86a173de", "sighting--c75d32c7-c479-44d7-a3d0-6378fb0449ab", "sighting--1a5ffe3a-f923-4cf7-b857-baaf89ea5eb6", "sighting--52ba718e-89d8-4371-a454-e9b99aed15d2", "sighting--8afc6e64-775a-49bc-84e7-c02d48861f24", "sighting--fb6ac635-4bbe-46bf-a87f-bc1f6f69223e", "sighting--f03a388f-4620-4a1a-9997-5fcd41648b37", "sighting--e3255fce-fa84-4495-892b-e2c30de811aa", "sighting--9c68ebde-3c2d-4097-b636-0b2848bc30eb", "sighting--a39f4100-99c7-4f72-aabc-d445e6f0354c", "sighting--237f4afe-3cdc-448b-b07e-d3663cf3d1ae", "sighting--ce513fd9-9523-4640-a932-8247bed082cb", "sighting--c091b814-6495-4364-a141-7b32007514ed", "sighting--66e69a43-32f9-4c73-869b-07c90dedf01a", "sighting--a597719f-2dc5-4898-9f7d-5839e81000d5", "sighting--a2b50b4a-956d-46ed-827b-480993c0f8f7", "sighting--99106a93-acba-4be2-8316-ec85e49360a1", "sighting--7e7a677a-33f9-48d7-ad72-5e3bb7bc9a67", "sighting--25f24951-d4c3-4b3d-9007-1b451390a6a9", "sighting--b912916a-e9d2-4129-a2f9-5e9053bb0894", "sighting--a8a4e002-7320-4ddd-a7ca-e064d732ffa1", "sighting--fb3f38bd-94b9-4db9-95f9-b2252712f0b6", "sighting--7c36fdda-8f67-4ff9-80a2-f835cfd9c147", "sighting--a5c4335f-42b3-4a1e-89eb-706fbc3981e8", "sighting--529c741e-0fe3-4b0c-b21b-3b1b373836cc", "sighting--565f48ef-4d27-481d-8945-01004cb65fc8", "sighting--1b3cafb9-34ae-47b7-af5a-f72cc215ff6f", "sighting--1adc4bbc-fa95-4779-a188-7cc1f386dbbc", "sighting--f67751ce-94c5-4ae2-bbab-b373d891d471", "sighting--b2bc4c19-eb2c-4f15-a70f-cabd877c43d9", "sighting--aa4d7f73-21e6-4de3-a389-5937001a71e7", "sighting--cfdf6953-d9d9-4ddb-a5e8-1b540670e59e", "sighting--fc5f40ac-e514-4c0a-8ba7-fa4b7924993b", "sighting--032bf4f0-0f65-4257-92d4-1817420571ac", "sighting--aea466e7-66a5-4989-9ae9-35d8addb7f35", "sighting--cdc2bc47-53eb-424c-aae3-befb1819c77d", "sighting--8b47b849-aa33-4317-a3bf-becb71669a6d", "sighting--514ae5fd-e1d5-423c-9853-156beb3a011a", "sighting--c76f7249-8292-43f5-9b2a-02357dc0d9e4", "sighting--d06c4e19-52f1-4ee2-9e0d-21c3ca7543c7", "sighting--f903a0fe-7b6e-4f4d-85c5-58b4e951578c", "sighting--4f19b722-e2e1-48d7-aa96-afdaf71fa8ad", "sighting--219d0a07-0cd2-4fb9-a257-f91f4e5b52e5", "sighting--1e61c10a-ea5d-42e7-8e82-2a16767d8b62", "sighting--063a46b8-d53f-40da-9bc6-89e71a156f83", "sighting--127df206-b94d-4a33-818f-97bfc6313ac6", "sighting--517a241a-0f52-44cd-bcc2-a562bff1777e", "sighting--e51553ec-e27c-4b95-8768-bc73a639bf05", "sighting--ddba04d4-d1ed-4a2e-bbac-dac021532b66", "sighting--b4211810-5ff3-41d8-a750-357bda6f9989", "sighting--26a92656-27b6-4888-98a8-f5e16b27e4e5", "sighting--eb5e115b-a9da-4bce-a81b-abc77f2ad5f9", "sighting--7a432a2b-004c-493d-aecd-5a28087d67ad", "sighting--119a28bf-ba52-4c8d-9370-d0c0fbeba816", "sighting--bc0462c0-3fa6-43d3-981c-c4b90069687e", "sighting--3ae7c772-c84b-4506-958c-fd9a12258579", "sighting--1b62d3aa-b9c5-42dc-9bed-cb695695b3c5", "sighting--bf8b5cad-4c37-4de3-a087-869b54abafcb", "sighting--9a0130ce-09d7-4d21-b1c1-dea3ef085553", "sighting--c441f679-6bf1-476a-9674-3d4436434c28", "sighting--c1d7dc14-e596-45bc-abdd-a7649adbeb5f", "sighting--83b6f031-b79a-4ed8-bd37-2dd2ba3d47af", "sighting--1f90e909-ac48-4b94-89c5-2d6f357c8469", "sighting--357ade1e-8e1d-42eb-8afb-e7d935d6a92c", "sighting--2bfb60e4-4fdb-4f3a-9b72-693cfb9500c4", "sighting--6f21bd77-b1e6-45e4-a1c5-d093c01ed451", "sighting--8f074772-c828-4d8a-a7d0-a00426116f24", "sighting--e917007e-b6df-40fe-818d-a42095e6048a", "sighting--3a90aa1c-716b-482e-8c4d-4778f5eb9ffc", "sighting--5fe76808-58a8-470f-96ab-ab18021f488d", "sighting--ea62406b-e0ad-4c7e-8be8-fbbc69e11b66", "sighting--0ce6ce55-1033-4869-b2ed-27fc350bff5e", "sighting--243cfa66-ed4e-439f-a37e-93b64af29f4b", "sighting--2c15a89c-67f8-4a47-96e2-87204bc9f2d4", "sighting--d05bfe6e-29f1-41ed-bd8e-8fb91bae2659", "sighting--73767de9-04c9-467a-ab3d-be86e0c3db4a", "sighting--5e6392fe-34f4-420b-b70c-d29c087a98c0", "sighting--b4d691fd-9bdb-4ac2-8213-a9e42b96a372", "sighting--23517fea-5fd0-472a-88fa-896a674812d1", "sighting--bf8baea2-e2f1-483d-a7a7-ab1a00cefdb5", "sighting--d0a06a1b-8096-49a1-98f1-0c9c9896db93", "sighting--06a2e2bf-f698-4e44-a34c-fb2274f89724", "sighting--0e90f5c8-3611-4add-8f6d-b7c237b50d90", "sighting--d61dd278-34b7-4ea4-bd95-fedd1ccceea9", "sighting--ebae8c9e-1175-4deb-a1be-c9d181677590", "sighting--d3886969-105f-4275-828d-6d85eac9c9b2", "sighting--165a2c32-4a6d-4a9b-9ddc-efa154f3685f", "sighting--b6589907-77cf-4939-b4bb-ca6e48bbb1d5", "sighting--0398ff1c-6c27-4614-85ba-d77a530b7534", "sighting--daa18c49-9947-43c0-9caf-73bce1cace19", "sighting--f84d1b29-eccc-4121-857f-3ccdcd5bd174", "sighting--328b52e5-06a3-4281-9ada-e89da85886cb", "sighting--a723d0be-d433-4954-a482-79593ee70c13", "sighting--44d88461-12c8-49b6-8029-f07033446fae", "sighting--04720d3c-cf0b-48aa-8aec-07bdbfe837e5", "sighting--74ca3111-b1ed-455a-9daf-5681bc5fcf9b", "sighting--0490cfab-930a-4583-afdd-91bb8074b643", "sighting--df68a558-367e-41e6-a720-c7c086b529f4", "sighting--99396901-0c1b-41fc-8471-9f015f40c465", "sighting--344850e7-7a27-4132-851c-3578544ebb41", "sighting--79f7d19a-73f7-4533-b0a2-1cf277617133", "sighting--c3c3380f-258c-4bfb-a23e-7747e6b9d54b", "sighting--7c94c38a-fc9d-4390-8a05-86b42f93384f", "sighting--a67a9656-952b-4891-ab5d-295c0d563749", "sighting--bec536d3-01a3-474a-aa9d-ae36ad73cb29", "sighting--c05bedfe-32a3-45c1-b2f9-1a897684f6cf", "sighting--0061dc5c-c270-4019-bb19-45f73168b0c7", "sighting--a53bf025-893c-4dcc-b37e-238f05e5cb0c", "sighting--e70019c9-3d9d-490c-9d47-af6ec0b861f7", "sighting--2350c3c5-7caa-4df1-81f4-0b0026c20a40", "sighting--f7857a96-bdad-4f6d-8940-8e61b7ce7154", "sighting--81553ce7-0904-4fda-a52b-805dfdb502e3", "sighting--42cb0a7a-8483-4355-8883-f9b0dde07c35", "sighting--997be1fd-7d3f-4f5a-a7e7-e23290a21d06", "sighting--fec2a6b9-bc43-488c-a8c5-07718b46409e", "sighting--78af1acb-cf12-4bad-b8d6-cde11b8eeb0d", "sighting--576e364b-1b7d-4853-9df2-fa0bc3bfc094", "sighting--36af52f5-6e4d-40cf-b1e3-020aa2a141b2", "sighting--ded8dcd2-dfad-4b86-8c56-788b075be88f", "sighting--05efb804-5388-48df-b203-8da11503c1b8", "sighting--88907456-e19f-4a71-bf23-1ed3f9322abf", "sighting--24a2be97-d23e-421e-b2d5-c9c9b8123ea8", "sighting--c69a8261-ce0a-4099-8ba4-8341ce747056", "sighting--d7527d65-4f09-4301-b417-17bc77686ee5", "sighting--62034a00-12ad-4660-93f1-120d65c41673", "sighting--1a1682e6-8425-41f1-90e4-118b80b834cf", "sighting--3ee0cedb-da6e-4412-a3c1-3c05c45d6b80", "sighting--6fbb90eb-a53e-4b92-a6ca-5c00507bce26", "sighting--14f97ed2-5c0a-4fdd-b58a-e5c154039180", "sighting--bd8933f9-06b6-4041-b53f-188563377989", "sighting--6c13fe22-09eb-47c0-981e-6617b77b0bc4", "sighting--d6274d21-6886-4ecb-89df-09076a9fee01", "sighting--d8cff962-118b-481d-ae97-d238f7041ad3", "sighting--606f25d6-8eff-48ee-ae90-9ede4ed9bac3", "sighting--44a5b246-51ca-488e-9fee-9b446e60fc71", "sighting--406f8cac-4471-42d2-97a7-0454a579c601", "sighting--86e73526-2f79-49f5-8f7c-4b131316510a", "sighting--cccb9195-c71b-43d6-982b-941e68cfed16", "sighting--d5a932ba-3d2d-407d-a8dc-98bce6709602", "sighting--80918c73-83c5-4e26-aa11-43043532326e", "sighting--54641a19-48ca-470c-9a58-ab1388655d31", "sighting--635b28b7-40d9-4c58-9fb6-a3e2e26695d2", "sighting--16d36728-fadf-42b0-a0f6-bd2aa0a2cd87", "sighting--47a23204-488b-4814-bb13-ee514a7389f5", "sighting--1a55c888-6f49-4dbb-b432-31ccbb9679ea", "sighting--317f2c65-1e71-41c2-af22-4a2d6ed6ef57", "sighting--fe21bdda-c901-4fe2-a7ac-cd28e13bf42e", "sighting--9480f732-d10f-46b6-ba18-f972635c310c", "sighting--d171cfad-f46a-4b1d-bdb4-1304a31c6e41", "sighting--b4671ad7-be2e-44ec-b3ab-29fd60c49367", "sighting--cd43e293-87bf-4df4-b00b-2c8b15122dd1", "sighting--5c513c6c-532a-40f6-ac4d-f12450250113", "sighting--f84356dc-0ca5-4f24-83f5-d242942ac30c", "sighting--1687cc36-30be-479a-9d27-7fb88bec6eb5", "sighting--a66e4df5-1757-40dc-a50e-5a4527c41c42", "sighting--3b7f6d42-e3dd-4f6b-88f5-ebe5e1e20b4d", "sighting--f9b1fc08-d6bf-4364-9a7b-5f751bbefe89", "sighting--2a780822-e4fa-4ca9-b575-339e59c31477", "sighting--53c14602-b0e6-4797-9fd2-18b405adb266", "sighting--c822d059-3c73-4653-bbc1-1aaf52edbd26", "sighting--52b88052-d00b-4635-906b-80970d1e49a6", "sighting--149c376f-a383-4068-8df7-6dcb0f0dcc59", "sighting--5f1fd3ff-b3ee-4229-8203-3c24002d53b2", "sighting--3725ad28-c6aa-4aac-9316-72295cc8430f", "sighting--ecf9e5d9-4f74-494d-a9a0-ddda4393b091", "sighting--a91236c3-bb65-49c4-bd94-e6a0c0a1d820", "sighting--6396051c-76be-40eb-9546-648ab8020d6c", "sighting--0f35ecc5-aa25-454b-a472-84bd7bb255e2", "sighting--5556e66a-9c04-4e4d-925d-2d9e00e5b4db", "sighting--ff9f7f19-1097-40f7-86fa-fcc331de51b4", "sighting--8355045b-515e-4847-b7f4-91a23c96fa95", "sighting--28455031-12a4-40c7-aaf5-201c14397cf8", "sighting--b7ba3458-ddff-4788-be9c-57cb6802c9db", "sighting--a8f350c0-ce3c-4720-a6a7-8d959529c07e", "sighting--6441a946-beeb-4507-913e-3217836ba8b9", "sighting--fec1b768-383c-4665-88df-fe5acf652d51", "sighting--0aee796d-311b-4439-9c23-66fe5c8930ff", "sighting--9039d38a-7998-49bb-a53e-ed6b3a3593ce", "sighting--d4b4dc0a-cb38-43af-9fc9-b8af10476b62", "sighting--96f5ddc7-df95-4688-b53c-91007d976d72", "sighting--6e35c146-1943-4926-90ed-2d15298f5daa", "sighting--6b48a1ff-3e5f-46c7-ac62-49ae4ceea545", "sighting--7b54f0d2-d4ce-4a56-ac79-f43d07b99037", "sighting--80a34980-967c-40ee-b787-cb48528d9c4f", "sighting--fe5d7300-4be4-4e40-88d0-8026b78fa21c", "sighting--fa0767b2-f7c5-40f0-9b26-7ce3aa7bffcd", "sighting--96596725-f6eb-4048-9050-50e231c3b7b2", "sighting--4cd88b7e-b61d-46e2-bdc5-e36a6fa89108", "sighting--58a24f4a-a667-470a-b746-10a5b416e2ae", "sighting--fa18157b-3e3e-4648-b444-84cd9e4ad942", "sighting--6316fcf5-d296-49d0-be9e-8d20b641563c", "sighting--1bf8f8f8-5b87-4185-8bd3-15aea21db599", "sighting--3c58c433-7156-4196-a8a8-23b6cd5d1d24", "sighting--5145d798-87e5-48d4-8e0c-02141712d90a", "sighting--1f5c30ff-9a9c-4f00-96a3-97ac46674356", "sighting--2a68dee9-5fe6-4be2-8276-6ba60b326d9f", "sighting--50442329-2b6d-4e12-94f8-716ca9c682e0", "sighting--f8e1600e-8214-4579-8064-318ad82390c6", "sighting--b4b321e3-f867-44b9-a503-b3f499d902e0", "sighting--92241f34-e91c-499a-a34b-298c360885b5", "sighting--f9e67b84-d652-4a43-984d-3a6cdb5f7177", "sighting--45049d65-bdb0-43d3-90b4-fb6257c6fc82", "sighting--1274b54e-c3b5-404a-9a8c-3b8b3d6a8b37", "sighting--2c28c013-8e26-4f7e-ae7d-cc3124a6d05d", "sighting--52221ba8-7bd4-4d08-8149-8b8d8d36d63b", "sighting--b44f9530-4092-4965-9b5a-ce2e42c9d38f", "sighting--e155697c-ca04-48a6-8dc0-de69e47f812a", "sighting--2be1f4a1-adbe-4a01-b425-bdc9ab602c5b", "sighting--517496aa-0a35-4b4b-9ed8-966e830fbfd0", "sighting--57d2ff97-9dbb-4b6c-8d8e-ceb060b6b356", "sighting--666b662f-6284-4093-9ccf-14d5731c45f2", "sighting--27a253b0-7c3c-4295-a83b-1b997f497319", "sighting--46697256-c269-47a8-9e6a-7cd9090ed8ff", "sighting--20cb435a-9700-44a3-9b31-ae74e1afd517", "sighting--fd82ff58-5ef2-4a43-966d-32aeb4fa23c6", "sighting--5fee709d-ffdb-42a4-bcf9-56e303303ad3", "sighting--fbe2dd60-9c28-45e5-9857-d4c5724e279f", "sighting--34d6bd1c-e33b-4dcd-9bf6-e1b99a0ad3a3", "sighting--560b452a-a71c-4cab-b4ba-b27307306464", "sighting--dc649eaa-02ab-4021-af72-430c66138c41", "sighting--b535b92f-ed33-4d73-a936-acbecf84b6ff", "sighting--89c4a2b2-7802-491a-9f2e-b644c4d22f6e", "sighting--ebe324eb-1c97-4228-b1cb-9b94cad53be8", "sighting--bba30244-608f-4b7f-b4b8-f5eeb83bdb5d", "sighting--dee6a6fd-5463-430f-831d-3489b627d6ea", "sighting--a16cc81e-3d8a-4046-9341-b4dffd2e3732", "sighting--6a952b7b-61fa-43e8-9c31-e9cc13d2d080", "sighting--4613aaa8-9cb4-4f91-b932-c54239d3c9a1", "sighting--9c6fd54c-a3fa-450d-a757-dd706f3c7945", "sighting--40a4d856-e628-47df-97d4-fd79a274689d", "sighting--1a3ede5b-83be-4994-8abf-3ab36df0817f", "sighting--eba29f99-d215-4319-aba6-6464827a6383", "sighting--22fc171f-452a-4ab7-81af-0c1f82b62293", "sighting--4a62d424-bf84-449b-9661-5eb24b34af70", "sighting--e7e3bdf5-4155-466b-9464-a9d7df80f9be", "sighting--308e2152-6c79-4834-8300-b805c791c1f0", "sighting--1e695bc0-959c-47a8-8696-be34000fb7ea", "sighting--c639af73-1121-4e51-b00b-dbb7b08f6905", "sighting--ad9223d8-c9dc-455e-9413-cf0048684d00", "sighting--7f05656f-ceae-4394-98c6-e97150753447", "sighting--d9c807d0-90ca-40ab-b117-1429dfe5c059", "sighting--9e620428-51da-478a-b8cf-fc36eefd74bb", "sighting--575bebff-4b03-4239-bdec-072571e2ea1f", "sighting--99f4cd1b-4f1e-4fe0-9817-7202630d21e6", "sighting--c8b0051c-6de9-4fe8-b12a-76b292a5f0bf", "sighting--e60960a4-f1f5-46db-b51f-5e52a8e7b4f0", "sighting--a9693550-a2e3-4498-90d2-6fb8767969b8", "sighting--c63bf5c0-fcae-4a9c-a281-70536dc1b60d", "sighting--257fa8e8-2d15-4ec8-b891-a710d9268344", "sighting--1a207277-289a-45b1-be2a-3e0b2e7db494", "sighting--32402038-079a-48a1-8e1c-f35534c99dd9", "sighting--829f382b-6d93-436f-b291-be145f67842c", "sighting--e0dd6bbb-ade6-4b0d-b871-f77cecac5de9", "sighting--073dabde-7a52-4b16-b3f6-d91807ffdb74", "sighting--b807b0c5-8f13-460e-854c-274d24950635", "sighting--fa8af586-6aed-45b3-876d-a8ef40e41a55", "sighting--f39a8007-8093-4f0c-b9be-75ac3761268c", "sighting--021cc2d9-88c3-4964-8636-f69ec60afd1f", "sighting--aa3c6269-6ade-456d-930b-019a06543bf6", "sighting--54235d1c-4585-4c49-ac39-8481d6151f3d", "sighting--9c3d7575-de1b-4d32-a29d-23734c3caa2a", "sighting--d47b35dd-9cae-4816-84ca-fd19e09f6eec", "sighting--a5941b84-fc56-4881-a4ed-4edb2ae8c471", "sighting--afc31368-d3e4-499c-bf21-276b317aa4a2", "sighting--9bbb7bb5-1525-4710-93d1-16d5e02064b7", "sighting--d9f65151-f2d8-4dcc-bd53-c4c089a8cb21", "sighting--2e820680-6ecc-4eed-93e1-9a8a675b1e76", "sighting--5e49714f-612a-4720-a78a-9e708e9b5bb0", "sighting--4e78d406-22d1-42ab-8a8e-4fd21c6b9d54", "sighting--7bfa7b8c-e562-4b8f-a265-82e4d3a5a245", "sighting--260e7ad2-a76e-4939-b55f-8f08604fadd8", "sighting--98a42a7c-50fb-4383-be87-0b047357d9ff", "sighting--bca79b4a-5464-49de-8488-68bd66150cbd", "sighting--2203844e-75d7-4e0d-b935-7ff340fd8638", "sighting--eb9bebfe-8c0d-4982-a7ea-8e1ad75cef30", "sighting--e7ab6384-3c06-41c9-a86f-4c98fbb1f0e6", "sighting--745a9c17-bec1-4dc0-970b-09c3f0fd032b", "sighting--b9f67611-27ea-4c5c-9cab-f1ec68eaa4dc", "sighting--da679b75-d4ba-493c-9a9b-b680572a1aed", "sighting--e76a05e4-3dde-49f5-826f-79cd44326afb", "sighting--88d38d42-615e-4940-a899-942acb9add20", "sighting--d75a8891-2f20-436b-8296-8ff85d4160fc", "sighting--34555426-4dae-4722-a0d1-19e4beb46582", "sighting--a83d19af-5232-471f-a999-655b408d65d9", "sighting--b6b75d37-c047-44bb-8c9d-e6fa41f1f9a9", "sighting--22288dcf-8f02-460b-83dd-c07b87bd017b", "sighting--a234f0ee-e4d7-43d3-af91-1cb1a1f0d820", "sighting--2054bddb-f066-43e2-b570-25a494ffa7e0", "sighting--c90fa16c-a1ea-4db6-9611-a92693282d65", "sighting--0a6edca1-5842-48e2-bf67-1701f9afd379", "sighting--888a5716-0a23-4ed8-8e6a-43c7a174fa84", "sighting--6d380f3f-2d82-47bc-b1e4-7495cdca5ad2", "sighting--d46ad92d-e0c2-4e16-8af2-21cdce4c6108", "sighting--da741f14-511a-4c63-889f-8b0948569da1", "sighting--290b07d0-1c0e-48f6-894a-62e7dfc6854c", "sighting--78d673ae-9b5a-4041-b234-0e2e365398fa", "sighting--588f6002-5bfd-41d4-b7c6-497623382f8d", "sighting--c9488f9f-7dd0-489e-98bd-239f08d2e711", "sighting--7ced02e1-990d-4972-aeb3-9865b39224f2", "sighting--cc65cf9f-7448-453d-9433-0afe2b832f4e", "sighting--1ee1de4d-2fc9-4bac-81b8-91a95becfd84", "sighting--f8dbc125-d660-43a5-825b-9814ae805594", "sighting--74f10cff-1fa5-4bf0-bc15-ae8e65df6344", "sighting--03789a26-4abd-485d-b3fd-1d8fb2722afe", "sighting--1e147c18-b189-4d7c-8c12-8e947164fdf8", "sighting--91e2c135-20b3-40ea-a591-03853e3451b8", "sighting--a6da5bf1-c9ab-406b-90f4-455b499e1afc", "sighting--0b8f0ac6-f480-432a-8d61-62f38da3030d", "sighting--30345ae4-bf47-441d-8430-7621ad7f3d45", "sighting--58a0c627-5d3c-45ae-8915-af12a1270291", "sighting--4c299d68-7342-47be-b4bd-0c5ac5d12b0d", "sighting--80f5e64c-a5a3-41af-b094-063db8f02d4d", "sighting--787b209b-3e0f-4206-908f-8bff102dd767", "sighting--858edea4-6c6f-4411-873a-4a269762aa7b", "sighting--6530eef7-c90f-415d-b534-e2d7349989b7", "sighting--af39558f-b02b-49c2-8651-2f9a36c95cbb", "sighting--0e817a7e-53ee-4b6b-9e42-e838e580b4db", "sighting--fa20b4f5-8376-4459-bb4c-03e9a264de2b", "sighting--d1401edc-725b-4735-bde4-476ed1b06cf2", "sighting--cb9156f9-05aa-468b-9a92-55a76a38ec38", "sighting--94814084-16de-4854-ab73-eccda1e8cd4d", "sighting--800238d9-af4f-4853-8670-9e9bae1cc3de", "sighting--0dcd2202-2e7d-4d3f-b950-2491b17b8216", "sighting--9c4312aa-64df-4484-a3a0-dfbbf7f92f7f", "sighting--70158774-657d-4ba9-9009-12bdca5b0592", "sighting--2967dff5-4f57-4480-afa1-0b73bb9986b9", "sighting--4393ed9a-2651-4d67-8ca0-839ddb92b686", "sighting--573acc21-9ee9-4dac-92ff-8c62d1ef0f7b", "sighting--2cd76cad-91d0-4fc5-875d-892a908cc75f", "sighting--146f602a-1c65-4911-a86c-874dc7c9a8e5", "sighting--c29f16e3-885d-41e1-8349-fefd59c7b348", "sighting--0e23029f-526d-4c8b-8d1f-e6f5c2b35d16", "sighting--f271592e-7556-402e-bd3c-4ca98139eb16", "sighting--c2dc4934-3213-4410-a7b0-5193a4caf827", "sighting--5bd6902f-efb5-4096-ab6c-875597ab02d0", "sighting--d65229df-ebf6-4eea-83aa-0802217e0faf", "sighting--9c24aca1-8a88-47fb-9d44-d7317fb8773e", "sighting--4f343873-03f8-48b7-bb2e-4ab08073866a", "sighting--6e9814bd-fb96-45f8-a881-fc7a72555e53", "sighting--e0bbcfda-fc0f-46af-8c95-55a7cb6878f0", "sighting--3c73ab67-dba7-49c3-b961-27dbeb02b409", "sighting--175011dc-31d3-4a53-bbb8-d847ae1d554a", "sighting--2130968f-e223-4417-8ad9-bf7643fe5edd", "sighting--f0238670-41be-4874-ae63-71dd4baaa440", "sighting--7c9405b3-f817-44b4-a6d9-9f3357c1f950", "sighting--c5450783-611f-4b15-a306-ce4562374e89", "sighting--bbe4bd48-d577-47b0-986b-11e44700595f", "sighting--c335ba45-46a6-4d6a-bd28-26045d5df882", "sighting--93036de3-f9e8-465a-a9cc-0d7b718e0141", "sighting--a4f2a689-aafa-4d69-936d-0444693d7a4f", "sighting--8ca79148-0f38-4edd-aa69-a89153447846", "sighting--c581ce8f-6a0a-4a18-b54a-628311307c24", "sighting--901722af-b5cd-4557-98f3-4d047d5c83e3", "sighting--94f00cf9-132f-4cd9-9323-c31218eb65c4", "sighting--55a1c96c-7699-49e2-b1d4-586f909714cf", "sighting--e3043daf-2c86-4d90-a619-b9ecd9d43047", "sighting--5264afac-18fc-430b-b12f-fc3af39aa043", "sighting--6870f745-85ca-498e-89be-e6a9233200e8", "sighting--e85e66e1-c7e3-456a-a97e-0fd5ddf23b9a", "sighting--0de84b69-e068-4b9d-8633-bd086a368f64", "sighting--3fb4549a-6600-4c03-a678-52d918146028", "sighting--ff113310-32f6-4aad-b5e3-6ccec17832b7", "sighting--6d66b54f-c90e-4adc-af77-a028e1fbea94", "sighting--29d4dc10-b83e-4948-8329-057e51555696", "sighting--d6fe7e82-b310-4b5f-bf2b-d1badb7422e6", "sighting--7300a4e0-d78a-49f8-85ac-2b97d953a169", "sighting--2c6a4fb0-be7c-46f8-9bd9-c5af72f5fbea", "sighting--2ae4aa5e-5a9c-4ae8-a5ef-1dfde28b3c2b", "sighting--813dfbe3-b9f3-4955-aa77-7733a66818cf", "sighting--5adc5554-e545-4484-9566-85f649a38206", "sighting--b9362c53-b339-4680-9a0b-b67f89c1deb0", "sighting--00368ef7-92aa-4670-b36a-592f599e1f87", "sighting--efa6b90c-fe7b-42b9-ad18-7a3c158bf759", "sighting--9317847c-a14f-431e-8025-ba256633f203", "sighting--d9ea98e9-04e4-41ca-82ee-6457223f76fc", "sighting--7aa1e853-35cd-494e-98bf-d31b9db0f411", "sighting--69b86adf-1b0e-432a-ae84-e23f7bf8454d", "sighting--1e292d21-2c6e-49a3-9aeb-8c3d39be81bf", "sighting--7cd0bc2c-ad92-4113-93cb-9b00f95725ac", "sighting--976195ac-26be-458d-bce8-3c843e168fa7", "sighting--0de12159-b02c-4b5e-852f-13d0827c55a0", "sighting--0d5e498c-189b-4d20-9d3d-d881313999db", "sighting--e3ac4317-ffaf-4e6a-bb06-9cdd98cf2bf4", "sighting--6b0009d7-1bff-4068-a93d-8abd2df54c71", "sighting--1e111920-ee16-43e3-980f-12663771d8e0", "sighting--dca71582-6da0-45fd-8c51-b7947217c35c", "sighting--bb36de8a-96f5-4d06-b066-0a63c012bfd6", "sighting--e9245897-5369-41b6-ad81-664939315c3d", "sighting--9ff1b237-d745-475b-992f-297296320e0f", "sighting--bacc581f-4432-4368-bd84-e8fc77378f72", "sighting--5d6ff32b-8a9b-4e69-a9fe-68b9ce8d8622", "sighting--aedfc601-a5d2-4874-8514-9ed6454f9b74", "sighting--1412b837-6558-43c4-a548-2731457346d6", "sighting--4093fc3c-403d-4675-afbe-94836c4ee25d", "sighting--2b5677b8-82fe-4e50-9f3e-b038df6841f7", "sighting--efe939e8-fdbb-420f-aedd-aa0580f76681", "sighting--d689798f-2783-428b-91d5-0c56cfe24133", "sighting--82990725-d7af-408f-9d4b-4a7df66fbf7c", "sighting--2db77d49-51d9-48d9-a17d-2ab2504f5a32", "sighting--9a94e8cb-8013-47d1-a812-89e0e1e0f610", "sighting--23950849-084d-4978-8f42-6e33330a2c37", "sighting--e604b590-d8b7-49ad-b968-0178d71196bd", "sighting--69e714d9-a211-4e24-adf8-427f2078e94c", "sighting--3e623352-3d8b-434d-b576-a146714418df", "sighting--4b5fc5c0-a8b7-4003-810b-e3b050150b0b", "sighting--69f1149a-1a8f-4826-8191-4c7cfdbf6302", "sighting--5726babb-9cc6-4673-b3c4-de02a99d0f3c", "sighting--3f9970e1-3798-4b4f-9ea6-a6e79dc177de", "sighting--17649ae1-1e10-45ab-a2e7-3577eed4ffba", "sighting--6492e391-fdb9-4a72-85d3-fdcb6df038af", "sighting--1a411ce9-bdc2-40ce-8c6a-bfb7f0ebc69d", "sighting--ee418b6b-8c85-41e3-a563-91c7416ef720", "sighting--4524a727-bc54-4722-af55-6e31c9512150", "sighting--b26981ac-b508-4097-8173-2c8ff3b40f08", "sighting--e114be15-6f0e-40b1-95a4-7985de2453ef", "sighting--e3b8027b-40a6-4815-9826-70fd71b9a6c4", "sighting--e5440b2b-67fd-498f-80eb-ec9bb2170cd0", "sighting--0a37c6c2-3d26-4315-849e-d9c5fdb78770", "sighting--ad6099f9-528c-4bad-a02e-08c9e666376e", "sighting--db5ee3fe-4e32-412a-9045-df8b7ea6eba9", "sighting--5d10a86a-4aee-4ea0-bc9d-aecd6f010eb2", "sighting--8a07bc83-e9c1-4e08-9d01-df7764b70394", "sighting--dc742a07-2399-41d8-bfc4-60da6bef4ad0", "sighting--8985e4e7-e39a-48f8-bf7a-7a37d22b3816", "sighting--450bae52-8b29-4016-97e4-bd653ff9661f", "sighting--aa1c4725-2b70-47fa-9f85-d96abaf45b03", "sighting--5ddd3f72-a404-4e06-b7c6-0c27e7fea6fa", "sighting--dd32583e-f092-451a-82a2-d06e8dfb2442", "sighting--dcd863c8-d2fc-408a-8b9a-700159bd34bf", "sighting--3fec299e-375d-492a-8870-3d8f48a462d7", "sighting--6e589e7f-fa3c-4f8f-b01f-7d9a36722868", "sighting--c803bb94-d168-4a08-825a-d9746cc17fcf", "sighting--2397bbe7-4bf8-4ac2-b33f-a3bb67b3da2c", "sighting--9c30e6d0-a208-4cdd-8d83-202a2e5f1633", "sighting--4c791200-39d7-4fc5-923a-6c3f14f24774", "sighting--365ec0ec-9ef0-4438-a2a2-efd7e6a9ac30", "sighting--a53dacf7-b9f9-445b-8f53-97185a4b86b5", "sighting--2f95f249-84d2-40c3-8320-957fe36f4a6e", "sighting--c3eada7a-3719-49bd-bdab-384fa6f79d35", "sighting--8dbade30-b4ff-4e2d-b5b5-6bfaeb10144b", "sighting--81498717-8a42-4011-ac16-61bf0d4956a3", "sighting--0208909c-f174-4803-986e-3dc29c1cf09d", "sighting--b1b05209-62c8-4798-a3a0-a3f2217927e2", "sighting--16b9cdc1-f68a-4ade-9f18-27e0d6edf8e5", "sighting--2c8adb08-e5fa-4622-ab2c-f97d93db9bba", "sighting--61aa8676-342c-4692-850d-e250642112a7", "sighting--cf864e53-7c4d-4f0c-999b-1c6de3e49c60", "sighting--e0f55efd-4ed3-4e37-a72f-f27d3d95f8ee", "sighting--1c3138f9-477f-46b3-90c9-2336a6fa0d42", "sighting--d530114d-16ec-4379-9f17-fabd897e44ed", "sighting--a0eb2106-e8ed-4783-88a0-470985541d2b", "sighting--c60cf00b-7606-48a4-b31f-9a24af26eeb1", "sighting--9d6eacce-4449-427a-a5bc-174633ba6973", "sighting--c8f36293-b90d-4476-b373-3a1d37c09c89", "sighting--04bba4a9-7086-4daa-ad4a-a358700bb88c", "sighting--cc7ab8c4-5359-4dbd-a1ac-353787ae6b33", "sighting--8e90d421-912a-4229-a4ee-dc2343571f57", "sighting--43f2e7fb-8ca5-4d68-81dc-5461d2d4e91f", "sighting--29af02e5-8224-419b-b8a6-d324da1be5c3", "sighting--4aae10e1-09c6-4134-bfea-f458ef59e798", "sighting--b44cd2c2-227a-43ae-b9fd-401aa2026f3e", "sighting--c4963764-9aca-4f43-8345-78f9846abe78", "sighting--18efc0f6-6918-4795-bbfd-cfaaa4aa4419", "sighting--592aafef-a6aa-418e-b108-68dc60fbc37e", "sighting--c1dfa21f-57f1-45a0-9636-c3a7d1674d10", "sighting--afba43ef-ae36-4c46-8cea-b35c25317de7", "sighting--8847e7db-2f86-4ad4-abac-6ff159987bf7", "sighting--a71baa11-e0cb-4ccd-b127-223a7bfdb977", "sighting--b66810d3-56b1-46c8-909d-db8249f05a53", "sighting--3ceacf36-3309-4e05-9a02-de995f9f33c5", "sighting--f1394bdf-c50d-44a1-9754-3cd134a2f727", "sighting--ef965816-6cb5-4de3-9ef2-facdd81109ae", "sighting--6d1f8391-bb3c-4603-b092-a009cd1cc0c5", "sighting--6e92540f-eabd-4cef-bb09-6bd8c244d7dc", "sighting--2a2e978d-80df-407c-8c1e-71762e5a5ed6", "sighting--a2c19153-e43a-48eb-ae06-9478e7dfb286", "sighting--7d22c1e7-3f8b-49ee-8e20-199b69cfe559", "sighting--f7cef9f5-4fab-48eb-be6a-e6de363260a4", "sighting--439b77d7-566b-45db-a894-6e370292490f", "sighting--12d56498-59f0-4a7d-8c51-ce8372991fdc", "sighting--737b7bc7-2743-44d1-a0c5-9363e2b048b2", "sighting--d8c07c1d-6fce-4676-b3e4-e75bfcefcaa5", "sighting--7e49167e-8310-44be-8e0d-7d62c7d47b71", "sighting--91c126fe-8908-4749-8f66-daedc4770809", "sighting--4e98d4e0-5877-4034-89e5-a0305d27d87f", "sighting--40fbbbed-5bbc-485c-9a85-45379efa66ec", "sighting--8f85d69e-1ca1-48f2-a64c-2bbafcce0fc0", "sighting--e8b141b3-66f8-4a2f-90de-9f571ee90855", "sighting--a13a15ad-3103-43c8-ac05-9e96f1affd7f", "sighting--b5934f87-7113-402d-a776-7c4b3645fb40", "sighting--607cddc0-35be-477f-b6a6-3528ad4fbd67", "sighting--cf38ceb8-59f8-4704-be31-4fb59ebee21e", "sighting--3e200067-f47b-4305-abe9-cb6e9171e575", "sighting--7eef65c0-4d91-499a-a698-7e6bce5577ef", "sighting--1cf8cbfc-ddf1-43e9-914d-c477fc20876c", "sighting--0794ec2b-0ba8-4e00-a04b-bb1fd4b3c662", "sighting--636b7b6e-ed70-4d51-8c60-646ba0480877", "sighting--7ccbf577-2642-421f-bc7a-0b35735055bf", "sighting--5894659e-4441-4bb2-b85b-f1a97262e857", "sighting--db88d597-b087-4d71-8686-0add12d87658", "sighting--dc8fb7a5-7668-482f-b565-bf169f293473", "sighting--aaa81cca-1ed2-44f7-a637-b310292afb80", "sighting--7f09e67d-2920-4904-ae8b-0b576ed2be81", "sighting--86daf8b0-3bd4-4768-aef6-6b6b9ea223b6", "sighting--e5fc789f-5a03-4101-9984-c2618d40b5db", "sighting--a2a1d7c4-379e-4b83-a340-3844dcb2a466", "sighting--88cf7aa1-f520-4af6-9ee2-c2755df4c4d9", "sighting--e9926338-2e09-41c5-a908-683e350a6154", "sighting--2e519f15-652c-4a46-9a48-14a70e27349c", "sighting--9c269d6a-eeea-483e-b812-61e812e04c15", "sighting--31ba0a4d-3c13-44c4-a3dd-1fb36ed75a3a", "sighting--18d785dc-2118-408e-9deb-55cfaa47a92b", "sighting--ee22c116-c5fb-4f6d-9114-b67f6946be9a", "sighting--75caf881-578e-4e84-a6f2-990698a64653", "sighting--a3c1d2bb-d69e-48e7-beac-79c7e64972be", "sighting--5deb375a-8386-45ac-ba8b-bb2ed2decd2b", "sighting--588c1068-d495-4f5a-812d-e44841e9eb4d", "sighting--e51f3ed7-d4d9-4f32-9eec-5e7dd4efe25c", "sighting--c422d66c-f75e-462c-b86a-eccd41c1eee1", "sighting--1139a1e6-f9fd-4591-b5c4-c32a916dad66", "sighting--58cd8699-332e-407f-adc1-6c40d2dbc825", "sighting--8edec831-15c1-403c-9b7b-b7de1684c130", "sighting--9e6b766e-8fb0-4226-9722-936f624bd8ea", "sighting--ef078ee2-69f8-45e4-80b8-06a19dcd6d89", "sighting--597980d6-2cec-4913-adcb-c3bfb3ad3932", "sighting--b48cac87-4b0a-42d5-a2c1-0a74d16e6e95", "sighting--49bbf0dd-f4dd-419d-a9bb-38af8e831e77", "sighting--04484fdf-fcf1-4c63-81cd-616a6ce07bc6", "sighting--59515f55-915d-4daf-97c8-642c97c0ee41", "sighting--b04196f6-67ad-4b62-a2e5-50f06ae793c2", "sighting--a453ebf9-d594-4ad4-b7a8-1864409bf43b", "sighting--80bc4134-d44a-4626-a4af-31429473a910", "sighting--fc791ad8-bb66-46d1-aacc-3b4a1af5898b", "sighting--471c8ba6-c07b-4810-b04c-737ce1826b49", "sighting--2cd3c810-e18c-4903-97ba-ad60a916c72d", "sighting--a541a905-65fc-4762-9efd-ed5f83d00d9a", "sighting--49ff74ed-1af3-49e9-9a5b-f7778eff74f6", "sighting--ec909925-deec-4d84-8d30-7da223cce98e", "sighting--a2d85912-28fe-4cf1-bdd5-5e382338e81a", "sighting--2262a9d6-20aa-4ee5-a8d5-d9b5e7c033d8", "sighting--756224ce-c6db-4d47-8487-2e2f9d8a8e75", "sighting--d815ad62-3a93-4caf-9093-e77d82c58728", "sighting--8c1f747d-0542-4331-aeda-25777a8b6aaf", "sighting--e8efb9fa-8d1a-4959-9398-fa2ddfaa80f4", "sighting--e359f808-f84f-4975-9a32-0ba544ae8868", "sighting--4b6f7095-37ec-40fd-8f70-9f2b1aa8f247", "sighting--9114b4b1-5a45-4b2d-a8f3-e568016551d5", "sighting--f62c20cf-3b63-4abb-bbba-c4d0512105a1", "sighting--53657703-cc49-48af-beb8-6d84ff956467", "sighting--327a93f5-5dcc-4bf4-adbe-81fa394b09a8", "sighting--9b903c4c-1a8e-4d20-b1c2-7159a3b0ca95", "sighting--824ec620-3b3e-42d0-b6ef-18b58657008f", "sighting--fd8f4b24-a2db-49f6-b707-7b0ba65ef5db", "sighting--acc7e303-4775-4202-9919-58034d98fbc9", "sighting--85bbe071-3d24-4802-95dd-a26801c466e6", "sighting--752beb14-8efc-4de5-9d5f-f696cc86e364", "sighting--efeb3e16-cd8f-409f-a8f9-c2defbd5b5f8", "sighting--bdf9f3b3-842e-4421-bbf9-bb836891e316", "sighting--8a092f2b-0e3f-4c38-864f-31864a5304a4", "sighting--8d5de7f9-3354-4d09-82f2-fc66cb4d8994", "sighting--b0877fb0-4d63-445b-92db-24c424f6235b", "sighting--a68ec7ba-3eb2-4395-bd98-3fdf8abe37da", "sighting--b29b539e-899b-4d04-b840-10614e2066e4", "sighting--18c0d377-71a5-4d6a-a0e9-8741a0161831", "sighting--19b6d042-72ce-47a0-b85c-83b0c410d68d", "sighting--1329c447-2e26-4d53-ab4a-20c408a81d10", "sighting--842fca90-e1b5-486c-95bb-24652d676e63", "sighting--f0bdcb8b-22a5-4b6f-85f8-d7c265bf6447", "sighting--6ce8dbb6-e9f7-4376-863f-a7b336bdee11", "sighting--2d45b8e1-84b4-40f7-930a-90979a22fe76", "sighting--48345692-6237-4fb9-a8a7-0cfc1f41c72a", "sighting--3acbaf37-8d18-46e1-9750-de7ec548cc83", "sighting--d6b7992a-b05c-40ef-ab06-3a5ec2c73f03", "sighting--1518c100-e2f2-431e-bc38-5933f8e5ffe7", "sighting--ed267072-bf69-4535-96e8-203307a4ae1a", "sighting--510bc9f9-a11a-4cf6-8b63-5063c15ee7fd", "sighting--07af9f5f-ef18-42e2-ab33-1bd69679d124", "sighting--5c324632-3586-4f00-bbc0-bc9722e04d0e", "sighting--405e215d-3400-4495-989c-f848e524613a", "sighting--9fbadaf3-8086-4e1f-8aef-11f917067623", "sighting--aceb37d2-5419-4c9b-a841-abd7cb55828b", "sighting--e452f5bc-5791-475b-846b-caeff8b8bd0f", "sighting--23c0d708-d2fe-44d6-8a8f-0feafb195f4b", "sighting--80291ced-4fd7-4371-9445-ce1e783a1331", "sighting--f1e66850-8e9e-4073-9ac1-b4ab4b674841", "sighting--4fec9b22-a234-42bc-9c0f-29c4c6961031", "sighting--cd69c40d-71e1-4974-8096-8aac176a48fa", "sighting--1f4c246c-0658-441a-bfd3-36df2d2d1a02", "sighting--8a5fffff-3c64-4aa3-8a81-52d35bc83bd9", "sighting--19162ca8-ba66-42cc-9ca8-1f1493cf43a3", "sighting--64a155f0-6c73-47d9-a978-ce0c0661dd72", "sighting--e01b5792-6ae8-40e4-80f7-07c94341e5b3", "sighting--3dc2ca05-ef5b-401e-a63d-21565121a5b4", "sighting--c908a0d0-8970-4e5b-b416-7c5ef114a207", "sighting--838b4832-8e20-421d-b9db-e28ab2f6f0a1", "sighting--dcf3d889-d94d-4329-ac2b-01fe844c0387", "sighting--81596f05-1de4-49ac-925d-b456c20499b5", "sighting--6288399c-54c9-48e7-90ab-5b0e6e2b49ce", "sighting--dc8f7555-0c1d-4fb2-a413-a20d66b23173", "sighting--ce084c25-ba23-4fd7-87cb-fb54b9d4fb1f", "sighting--4d2d889c-f5b1-460d-b657-e5a48c195e1e", "sighting--ab192d2d-f924-43b3-9677-646919f2686a", "sighting--0d262f3a-ebfb-458a-be7b-358d0ad9bd85", "sighting--652e3ae6-3378-4417-b0a7-051bf1ff2b51", "sighting--879ed27e-4573-47dc-b632-ee017ccc0f12", "sighting--be134bbb-c713-4b20-874b-e8d7fe70b9d8", "sighting--44caeac8-9564-473a-a131-b4cc7a43b175", "sighting--e0242d40-b030-4708-8410-5dd4c39dc299", "sighting--c80fea35-deac-4e95-bf51-88114c2661b1", "sighting--fe0f14e3-531e-43e7-85c0-23f45ce625c8", "sighting--16328fad-3923-4e96-8154-be7437e31a3a", "sighting--151d9f18-99d5-4586-9c70-66381023d00b", "sighting--cb7459ff-980c-4068-96c2-c021d5ceab37", "sighting--003fba74-ff73-4bc4-9e70-e8f10865894d", "sighting--d7d6db68-2976-4eee-8435-0ee2d0f30f94", "sighting--39605561-853e-4804-9255-0e5eed82ec07", "sighting--d9150129-f5fc-4746-9e86-6fb7372c8ec5", "sighting--1ee0ce1f-2135-444c-9e8d-6c31e3f9e7cb", "sighting--305b1cbf-e2dc-47c9-8ca9-15015d2f8f5e", "sighting--fade0707-3ca9-428f-980e-fd3e044ebfdb", "sighting--94f4f7f1-8936-4318-a1fa-ac4095d0a7cb", "sighting--e8d00116-0185-49cd-85ac-ae9ecceba821", "sighting--5fc40110-89e3-48df-a827-213cd9b5fded", "sighting--469f7f7a-74ff-4fd5-9fa3-962e3efb54f3", "sighting--7de53013-6230-40b4-b8ba-58b8f73c992b", "sighting--7e025f69-3dc0-4100-8b40-3a1d1e616bbc", "sighting--ca57d0c0-a162-4195-bb63-0e6fedbeb8bb", "sighting--408fd95d-dddc-48df-9004-b0c2d2fe16fa", "sighting--961b345b-ab25-41cd-9cd9-d21f925f2aa7", "sighting--5e8658bd-3a35-499b-8fe1-c4c83061d3ab", "sighting--1121bbae-1cd3-4da3-8a33-8e8281bc6f9d", "sighting--87fc452d-bcdf-4b84-bd14-153d6b467ce2", "sighting--e2f92d9c-4068-42de-8109-b68ea7b577d3", "sighting--881aa104-a45a-4e3b-8111-a07c84da6c29", "sighting--4e0cde6c-4aeb-42ee-8da7-27d015f5203c", "sighting--2c286b6d-7bf1-4755-9583-f6532cc2d72e", "sighting--2b4fb593-b33f-4d6a-a54d-f9a70aabf17e", "sighting--65c136de-67c3-4e32-ba88-b0f651204f81", "sighting--a1751598-7d1e-4a25-98fc-3241221debfc", "sighting--19416116-cbfa-4d2d-bbbd-8b6a038e235a", "sighting--ba3aec10-3534-45b1-9bd3-013843c5b7d7", "sighting--a415b58f-1fb9-416b-965a-8de46b9ee0f3", "sighting--0d7be86b-014b-4868-bfcf-253e24ccd5ef", "sighting--e067113e-f03a-4466-85cb-04c37d5e6258", "sighting--4d57283c-0494-470e-8113-fcfc52069105", "sighting--03863439-8382-4fde-bd51-96a64111bf9a", "sighting--6127c590-d708-4208-bc9e-a73a0a27b693", "sighting--532fd985-e021-4a32-920e-a8e5f7cace62", "sighting--d8ee3c5f-c3df-45cc-b64d-817630f98f13", "sighting--954c4d99-c667-406f-8ba7-95dfea7cba79", "sighting--62a53b18-3704-4d5d-a049-e8f93636d5d7", "sighting--4548691a-b9e7-4b66-8f6c-b535fa5c5331", "sighting--285ee9ae-6401-42ff-a1a6-5a95dcc3d782", "sighting--7205db1b-fcb0-4a5c-9c9f-c4aaae3e639c", "sighting--75884c34-cfc0-4f91-b6e9-2a58a8710d1a", "sighting--967b652e-1ad9-462d-a0a5-96ef10b93e39", "sighting--f89f699f-072f-4e48-b015-6bf7f1e06cd6", "sighting--177f7715-b0d4-473e-90b3-e302fcd0ce79", "sighting--8597f8d7-f72f-4c77-aed2-fec05b7589c7", "sighting--d7b1aa26-8d77-4b8f-bdcc-0661306548af", "sighting--8c7455db-27d0-4f2c-b34d-9e14df0c5e90", "sighting--8dc07571-d739-4fab-aa3c-b22e2847a9b7", "sighting--b7048af1-cac5-431e-85d6-1e874627a6ff", "sighting--6c55135d-b4cf-47b4-b35b-cde8fc91d0ca", "sighting--b6d5d2d2-fcd1-4eac-81da-2fcaf2b68829", "sighting--130fd8a9-3b35-4945-829c-11682b33a1a7", "sighting--97de45d5-2866-4bd4-a673-9b1b56a4d415", "sighting--b9b42ef2-49fd-48ad-a623-8e714a7d3549", "sighting--9e7673e9-b89b-4bc8-a0de-f8f6311d9982", "sighting--70cd312f-5fb7-43be-aaa9-051a2ab77c7f", "sighting--405083a4-4d55-47d9-bb1d-2b287169871f", "sighting--2c0e59bf-8660-4fd6-a370-c096aaaff59f", "sighting--9a978e57-8fc0-48e2-91a7-5ba944c59f50", "sighting--63cd60de-ac2c-41b7-8ca0-6e3c901fb9ce", "sighting--7bfcdd93-fe3b-40e2-876d-d69d6169bd43", "sighting--a2a6fcd8-1cba-4e2e-9876-d4ee97c80fb1", "sighting--6727eb8a-2fb9-474e-a4c1-11df5f548283", "sighting--b0bc9606-6c13-449b-a8d9-e31d9f24fbb9", "sighting--a413d442-f154-4785-8d63-ef8644960a51", "sighting--6c6dfb36-9bc7-44e5-8237-2ff50f48edbd", "sighting--5d57c9fc-eb3e-4c75-9070-b8309a4fa44c", "sighting--3454eb9c-f48e-4882-846d-732ca906e602", "sighting--a44089a7-ee00-4f0b-bdd4-a985b37cc9a7", "sighting--18238a61-3253-4b8d-b632-90c826f5f09c", "sighting--ae61bbe0-8121-4878-8fce-0a5c2de2e36b", "sighting--5f549dac-f44f-4ea6-83d2-00208e2c9cc0", "sighting--a292a60a-f1a1-4d52-9700-e6c00fe0db6a", "sighting--77ac0c49-0eaa-40b0-aa38-e2ac140f1c97", "sighting--dd33e5a3-a902-4c6f-83db-b8c1a0b5cf77", "sighting--f2de8e63-3ea6-49f9-9bf4-426f391187c8", "sighting--27ed6739-20c7-46d6-8492-ac68c823954f", "sighting--0aa80694-0634-46dc-ba69-302f6f950593", "sighting--ae4d0c73-27b4-4dac-af52-4d0442db60b6", "sighting--625a6aad-5bff-47e4-bf29-1e2a59ab1817", "sighting--984181fd-60c2-4560-9c06-f4fea64d61ac", "sighting--9b90cef9-91c1-4cd3-8b2b-4b295c9d1e56", "sighting--ba401118-541e-4f5a-b2ca-57a0b9ae10c8", "sighting--f1bff834-846e-4c0f-99cf-28845a8f1462", "sighting--f8e3472f-85a6-4c08-a6d4-b94c6c5c716c", "sighting--f8383676-024f-46a7-961d-debf7cfd318b", "sighting--ea31949a-d64c-4f05-9248-47f8c949cd57", "sighting--4d68829f-ffe7-463c-a42e-b1a75159c630", "sighting--b6fbeddf-76b0-4ae7-bdf9-5f062406de00", "sighting--eaef4ad2-59b2-42ae-9500-b78bbd8cca66", "sighting--443eaab8-4878-42b4-9fb1-f851a2fcc41a", "sighting--14dc5c10-17ba-47cc-8e13-5139e71186b9", "sighting--6971f82a-5fb7-4b60-a624-a08d5424490d", "sighting--cc9a1979-68d8-440b-9170-3ddac9350092", "sighting--902176eb-7b1c-4e8e-9cec-415a77e0f24f", "sighting--90970682-0e42-4b25-9d28-e44d701cff95", "sighting--65c8e290-baad-4211-b071-ecc35a0970e9", "sighting--51af2a69-a10e-4803-9dd7-717bc0f36ca9", "sighting--1c712106-b65f-4573-b858-872c423dd222", "sighting--89941fd2-c632-4987-b464-004cb149e396", "sighting--f03ddf79-ec84-4f6b-b5e9-ab40dca342ac", "sighting--9120c5b1-0283-47b5-bae3-2b58700ac57c", "sighting--e93a6bd0-8cf9-4d25-acf0-fa8f18439c61", "sighting--4605d3dc-3922-4c44-bd52-b20a4ad80d44", "sighting--87fc799a-cff9-45c9-acc3-2060af6d16b6", "sighting--f7ee0a43-2f93-4d0f-a326-9c80433b2386", "sighting--20e807bd-922a-4eb6-9e8c-0f7ffacac66b", "sighting--118528d1-d34f-4125-b13d-33f6b538acc6", "sighting--2a31fd24-4b56-4a7f-a017-88ed5ca27202", "sighting--a01555e1-d650-483d-882c-36753118b5ba", "sighting--d0742f86-afb3-43e0-b470-2bac76f1d93e", "sighting--0db1d610-ab46-41c7-acf1-26979017af4d", "sighting--7b77ee9f-7e1b-463a-b53a-7d508fde57fa", "sighting--7663caec-a5fd-4f9c-b82a-249c575535ea", "sighting--0cd10c02-7e65-4f00-afd3-4c7aca903206", "sighting--e04f817c-5752-49c5-ab8e-0e0ef4a859b6", "sighting--00f9c4b9-4c88-4f93-bac1-63c3f0af42fb", "sighting--33e8a5a3-ab35-406f-9c5c-f36e36d1c196", "sighting--20f46a0c-deac-40af-9264-b87902fefc2b", "sighting--6ace9cf4-4aed-46ef-9d3e-a0a8539c7dca", "sighting--cb56211b-c727-463c-9715-c9d299fd7b34", "sighting--f4bf915e-c2d8-4211-ae8e-bb532cd71179", "sighting--62d50484-7eae-4e1f-ab66-9a15a3c020d7", "sighting--7ef75629-7104-4422-accb-829972267fdc", "sighting--ee5b39b1-1754-4ec4-a333-2cc372884f82", "sighting--0935773e-a6e5-4377-be93-8efba2845fbc", "sighting--e8d69709-c053-4a63-a8e2-ff598635fdde", "sighting--64d90c54-ad42-442a-8baf-633ff96ce4cf", "sighting--af693bc4-d2df-402f-bacc-63412fb60b60", "sighting--ec04d7c7-0eff-4167-a527-988f092a5d74", "sighting--08363d06-6962-4f2d-9c11-308202cc4451", "sighting--487f276a-fd0a-407f-967b-542cf6373f74", "sighting--dd6c7127-c737-40c2-b298-c955ad1b155a", "sighting--bfc0015c-403d-47e3-bb8e-04afa321b11a", "sighting--18cbfc94-b199-4375-bda1-53efac4f4784", "sighting--c155c37e-8ae5-42d8-8ff4-83e853dce5c4", "sighting--08c13c81-87f3-43f7-8662-15a40ba641e3", "sighting--a17494ce-9262-4471-8463-3b82d71ded70", "sighting--3298ba1e-512d-46bf-aba0-52c9a6705e73", "sighting--6b354b7b-5fba-42b9-95a1-5d77802e68c1", "sighting--07c2640e-6d4d-483d-9352-327118149d50", "sighting--9ad115cc-5cf9-428b-bfb8-71e6b8ed9f62", "sighting--e1d3477f-cee9-4c01-ad43-9af76cf65260", "sighting--227b7254-072e-4b74-a057-6f795d5b8c40", "sighting--5124d0d1-0e70-4a57-a719-5af6c6320c71", "sighting--458b449c-0b56-44b8-a17e-aa790f30265c", "sighting--af267709-eb7c-4e84-b8dc-3c6bae413cce", "sighting--8d4fe9e8-4240-4034-a1dd-9910a7de528f", "sighting--e9056cfe-7dfa-4365-b9b6-dd53e202431a", "sighting--8c4828db-2390-4773-8eab-8dfd4a1cb684", "sighting--f6923139-f101-4754-94a1-615ab585e5de", "sighting--d1b1aa90-3d4f-4e1b-b900-4e48c232b3c7", "sighting--067a9c20-bd26-4931-854b-536db273f86d", "sighting--49c61927-7a81-411e-a64f-8bcc373e56d5", "sighting--b8b3c5da-fc6f-4022-9dc5-6e68df03b98c", "sighting--de8dec2d-7eb3-4fdc-ba57-b7850c575aad", "sighting--30253642-1a23-4174-89a8-fad6195d7597", "sighting--9925c21c-3323-408e-939a-7a3ab3922e16", "sighting--7324e3ea-2e46-4589-8ced-e6e4c0bf63e5", "sighting--c603012d-ee33-43b4-8984-4d292ed376c5", "sighting--fe4b4c75-e9a5-4a02-ab94-523fb3c4213c", "sighting--647034f9-1bc1-4e5f-99e6-9ba7d141031a", "sighting--7b7920d5-a7f6-4806-9a41-f3ba4e977f42", "sighting--c52c57b6-5b8f-4ff0-93ea-f03727d8eb7b", "sighting--92f35655-d2d0-4a58-8acb-d8e73ea7cdc8", "sighting--b443b96d-f4b9-4625-a885-ea2273166641", "sighting--b4e3d44b-f97e-428f-b845-aad15dc4e8b2", "sighting--c7f551e9-671c-434b-99a8-58f8a506fe03", "sighting--12981c73-f868-4dab-83ff-17458c106781", "sighting--43e70745-33f7-4cd0-b596-62d046e3bea1", "sighting--86549859-8a7a-426f-b76e-9c433d1eebe5", "sighting--2b9f1d31-7447-48a0-8e7f-851fb8ee8248", "sighting--eca3e9f0-8c7a-42f5-b036-4c5c25654e02", "sighting--64542033-6343-4e01-9e76-527c97a30b4e", "sighting--5fbe8b73-4d33-450e-a9c6-70fbd9d0ede0", "sighting--765ad3dd-9858-4c66-874a-6c041f74f1e5", "sighting--55a4fb60-116d-418e-bd57-ee7ad4f6bed4", "sighting--6742928c-c37b-4bdd-a973-c88f02f128af", "sighting--45a2fdd4-34f9-4a4c-a757-ce0e5b0df6f6", "sighting--3b27af36-5f92-4a8c-97ba-5a78c2926606", "sighting--d862149c-0101-443e-bc24-baad366de956", "sighting--b8b7831f-dc17-46e0-86e2-fbb8fe723853", "sighting--b42276aa-efd2-4262-8607-01ea2a351fe3", "sighting--0aca0a16-c875-4aa1-a749-7e7e71a4f976", "sighting--842399b4-9729-4d40-8e27-e6466676b507", "sighting--86cfb2ff-ad87-4327-8629-7a7d57a35d3a", "sighting--6a9213ba-6fe0-4115-b4e1-849904e47b40", "sighting--d043b30e-064e-4579-8068-83a1aae4370f", "sighting--47d8d43c-1d05-4bc5-bcfc-e6b9a9be73e1", "sighting--67696cd7-67e4-426a-93a9-796203ab8cdf", "sighting--b4079514-ec73-4242-9500-d68dc2f2c105", "sighting--1c6cd394-c498-4885-8ab2-4b0fae6ecefc", "sighting--dfc5fb3d-6524-45d1-95ea-2c49aea6ca2b", "sighting--dbc92546-158c-4792-9fbc-6040258bd128", "sighting--e6fd389f-a409-4dcb-b53d-eb89e75a63ee", "sighting--2e8206db-3d37-4dbd-abed-b93236008ca6", "sighting--296f3c8a-ccab-4de7-8c3a-e27c52ab91ea", "sighting--e236d88b-8beb-47a7-ae8d-5e70fc250dfe", "sighting--7e0417ac-8f8a-4e81-b0b4-41d7fba807cd", "sighting--a44fe471-38fa-4d83-8755-bb6cabb930fe", "sighting--ea55a1f2-99b9-4266-a268-7973eb002586", "sighting--4be3352b-155c-41aa-abf4-f6b7257b1a81", "sighting--0fec6038-5ec9-4ea6-8280-fd0ca6ee8acf", "sighting--1c088b9b-0097-4ad7-b79e-c1ea6dd7a0c8", "sighting--431f3c85-53a5-4dc4-aa1f-5f08c59c9437", "sighting--61094d8d-42a0-4591-93c7-6b7cb8ea50b4", "sighting--20f6c3af-683c-4a5a-9241-d9b216862d88", "sighting--a8570344-2b2f-4e0b-b340-1666ad41fcbb", "sighting--a30aa3fd-4e68-4ac8-a328-c507c6e94856", "sighting--ce795f78-7166-4080-b9c7-4ca09de292e7", "sighting--23891f61-2e7d-4136-b491-b6a19f210877", "sighting--598b0208-87f0-4ab4-be30-2c33ef3152dd", "sighting--5ebcbac9-49a6-4161-8e83-364dd53a5336", "sighting--81732151-579c-428d-96f5-933f0cc5c090", "sighting--64cbef90-ff7c-4704-a589-fb688b56cb4b", "sighting--ec7a572b-ec8a-41e6-bb35-d8ed575a3210", "sighting--fc8b8ae3-3e5f-4790-bed5-0360b01a6889", "sighting--bda77b96-a424-4604-99b9-442ab528d620", "sighting--ae379721-786a-4eeb-869a-62f64195e64d", "sighting--57ce393a-99ef-4f95-9e5c-209eae4982c2", "sighting--14e8fc7e-6c62-4e80-8b22-3827a64ed18b", "sighting--48e9cfc0-b354-493a-8694-982dca382463", "sighting--9c9798c8-b4be-4b2d-8aa2-32951065f432", "sighting--f9429884-0d54-4c66-8d6a-2052a24d1b7a", "sighting--030c9eb7-8849-4fdc-8f2a-59b1419a7077", "sighting--b935fbc1-63cf-4cab-8b84-2018be9649b9", "sighting--79ba59cb-dd33-4a00-993e-5d9007c34755", "sighting--e818ed4c-91df-4efa-af59-ba8959ff7dd3", "sighting--c0471af8-2ccf-455e-a677-b4ccae49c44b", "sighting--3ace8b40-2bae-4d44-879b-3ce51ff358b0", "sighting--801dbd2d-1460-40f3-8dc1-a4f23337110d", "sighting--94003586-bfea-4e9a-b319-733526945448", "sighting--b8ff54cc-bb5b-4cfd-9c58-d244c5b68c4a", "sighting--c346aa4f-a2e3-424a-a079-dec048046756", "sighting--13ed6641-1fea-45e9-b01e-1ab1904c7ddc", "sighting--7a8616b9-b395-4944-8872-979cd141a328", "sighting--d5d34d76-40d5-40f9-9453-5cc484d145f3", "sighting--c50af58b-d17e-4121-9bd8-bb6b32a7589d", "sighting--478ce19b-7060-49a6-a8ec-8b0924f07dee", "sighting--f522d5e5-ec61-48a4-b16f-8bf947911d3d", "sighting--1c101152-c39b-48a4-b45f-3437773230f6", "sighting--47dacb03-dc74-44ae-99a5-d7f8443e7160", "sighting--197236e0-8919-484b-8616-78e6e274719c", "sighting--cd6adf7f-ec0f-4b18-a2a2-37b8e33f7ae4", "sighting--799d4e77-ebde-416b-a2b5-e2a9e4a24d2c", "sighting--f1cdb523-84e2-4a14-bfe9-7c6e06d9abb3", "sighting--9ff7f935-36a8-4374-a81e-b26f103ed147", "sighting--4247e1de-8165-47b2-9c7d-571d087f0d55", "sighting--df2d9fc0-ce46-4101-99f5-59c1f3e490a3", "sighting--dcff9889-2bb8-49a1-b21d-5076ad6f3d3f", "sighting--0efe8a23-8611-437c-a173-a440d05c851a", "sighting--9372033a-d512-497a-94b8-62064001f99e", "sighting--d9ec1964-dfa6-4db4-a5c8-69c27bf5cd5a", "sighting--6f9a19aa-cb20-4c3f-b65e-dfda72f1fbc2", "sighting--562c0130-3638-4b66-9702-ccaa6eefe1d7", "sighting--14e1389e-16d9-4a99-8ece-722db69acb8d", "sighting--2a4e6c9d-40f1-46da-b454-a4a0b9f95b6e", "sighting--3099f807-7aaf-46fe-9dfd-c587465ad37b", "sighting--ebfc0a45-ac50-45b1-8ea0-ef0b79be3519", "sighting--04b9bf23-8722-4adf-982f-7df677dd80a4", "sighting--ef45462a-6a31-46d9-8166-789d08a224a5", "sighting--1dffcfa5-1fb9-424e-b59b-0f85a10ac338", "sighting--f9bf7bcd-0dd5-4fef-a08c-d1ea46948836", "sighting--46cb2896-c683-4163-90db-a6a516f45583", "sighting--83e490c5-354e-4d58-9ac5-f83e616ac368", "sighting--3532dc99-04d3-4ed5-b20d-3760faf015a6", "sighting--07b205f6-a8c9-46a8-8ed3-525ae67b1b3a", "sighting--c1bbb8d4-5696-4495-835f-a553b4ca47a9", "sighting--6b965d2c-e0af-4b80-b031-3f4378a92a02", "sighting--41db1917-21e6-4571-878f-53c8d5d37eae", "sighting--367cfb78-61de-454c-a57a-895ff9e4cb65", "sighting--ad3cc2ba-3d3b-499f-ba7a-0c915ca0bc4d", "sighting--7521a48a-1d4d-44fc-bc37-761a7cd286c4", "sighting--02e8942f-ce78-44fa-85eb-d244945b4090", "sighting--a1bbe5c9-6dc5-46d8-8daf-8f6fcdf4e71c", "sighting--a3a08ae0-7069-4da4-b6a8-ee3ed7cb97ef", "sighting--86557865-a663-47c8-a3ef-8998eebdcbf3", "sighting--58675cd8-4ced-48f8-8a88-1b0fd181f796", "sighting--474b33cd-c12a-44da-b591-51a444bc3b9a", "sighting--c944eb35-3d8f-49c9-93f6-ec8b16fca087", "sighting--4811dfff-9c68-476a-a687-b4b5f8f797cb", "sighting--8aa08370-3b73-4163-a955-d4f877fbd27c", "sighting--122bee81-49a0-48c9-89b9-bde99528aac8", "sighting--50fa8baf-1dd2-4ac3-882b-5889c7aadbbd", "sighting--e28e2d85-e0f4-4454-9fb8-19cfe1fe769d", "sighting--a158afa9-4f4c-46e6-835a-c531c0fbb653", "sighting--c45978d0-0eff-427f-9c6c-e0aa849716b9", "sighting--afe61c09-dabb-462f-badf-904d141fed6f", "sighting--07e4c7fa-65ec-4068-9ac9-e3d92d549e87", "sighting--d0162b2c-3329-4ac4-ad8e-788563ff10d1", "sighting--dd8c599e-60e8-48a5-a819-8e1c42afc559", "sighting--855260cf-4ead-4f76-8329-b3b56160f927", "sighting--e1c92376-5a56-4232-a4a6-e048a1383bc2", "sighting--67666a21-5f69-424d-9b64-1cef4fa0f2d5", "sighting--abd54c4d-dcd4-44fb-816d-a692ce967fa9", "sighting--6075615c-9e2f-4343-a572-587ed345f89e", "sighting--993de8d9-59da-4291-9b0b-5a2744eb3c7a", "sighting--455151bc-3442-4590-9b6f-2365f7d821c8", "sighting--4efe5107-3a2f-4939-a327-95cac39a2525", "sighting--90f2e2cb-b14a-4ff5-a90a-11c36629f17e", "sighting--26cb4ef7-8031-4d63-a400-14ee5dc48e2c", "sighting--0904ce3a-958a-4776-8eef-b96a76548d3d", "sighting--2ea896c6-b356-4ac4-b0d6-c689c728a25f", "sighting--996965ec-a65c-4e5f-b85f-e917ef28fdcc", "sighting--1b377087-3999-4755-a23c-3f2e6b6e7602", "sighting--008de5a9-e600-44bf-84d3-a67c228f944a", "sighting--7eb7490f-4718-4eeb-bc75-86c4b4f90af7", "sighting--cf0706fa-b877-4cdf-80bb-80b09ad07cda", "sighting--0d0fd5f8-3b0a-4f03-ac59-43dac1234ddd", "sighting--ff465e32-b6f2-4866-88b1-28e24fc48b82", "sighting--57a3f8c4-d56f-4fa4-92cc-8afd1808f89e", "sighting--b6b80a69-047f-4026-8f02-7f4f827214c4", "sighting--1c776cf9-7fc2-4b98-aed7-6bd233157bd6", "sighting--7090e651-655d-4504-8c55-cfbd1a8ea09b", "sighting--4ba66aa6-5464-4d8f-93e7-c2103f81aaea", "sighting--9f745b82-feaf-412a-a8ee-6d3b7e6e2aff", "sighting--78ad71ff-8eb1-493a-a903-75556ddd0792", "sighting--2554e0e9-8426-4ce5-98a5-e796be8ddaad", "sighting--c9bf9d00-b3e7-4d39-9def-374cdc48de72", "sighting--ea9aebbf-501f-43ed-9dc8-367e9c2b0825", "sighting--fe4fa220-4520-480d-ad33-c69cc1e918ae", "sighting--49838598-2c17-4e55-8034-65f1017cddff", "sighting--56ad2e23-0cf5-4fc5-9c36-b032af7d2e6e", "sighting--b0a0cfb8-b9f2-48a6-ba82-065984c34014", "sighting--6a8feaff-aced-466c-9edc-d74ad71167e1", "sighting--38538185-922d-4963-ac28-df4056503882", "sighting--5cba6203-429c-4991-a431-7521fc0108ba", "sighting--27f248c6-ec51-4068-b3c2-82965794e2ee", "sighting--06ecf35c-40ba-405e-a7eb-b9561c5eeb7a", "sighting--201562f7-010f-4ce0-b68e-724537151a12", "sighting--a8bb7866-ed26-4f77-a138-cb680ec349fd", "sighting--201d2c54-dca8-431e-8714-68e658b1fb63", "sighting--6d158359-67f0-4a41-a6b0-86c41d286efa", "sighting--60e4b978-c567-4b98-b35f-05c0b8a80f46", "sighting--af37e9bb-9de2-4b00-b776-9e78d67f8cdd", "sighting--a7a9b8bc-3339-4a44-b464-f522c3713d89", "sighting--f690b471-2ad4-46d6-a77d-f61867b72f5e", "sighting--ff4a0633-2686-43e1-84ae-9a7d0f6f5da4", "sighting--c8d04adf-977b-49f8-a5be-6b39cd85a3da", "sighting--9b6578d7-e578-48d8-82bb-e5a37cffc973", "sighting--1b6fab38-f4ba-4fce-9b7a-2f7b39713012", "sighting--2d39195f-b4d7-473b-b3d6-d3a5ae52cf69", "sighting--6a7617ee-5b91-4526-bed9-d10f5ec9b780", "sighting--641fa574-7834-49b3-bef0-004b3d417e45", "sighting--a9c40b8a-41a3-464e-8f7b-84d435a3a802", "sighting--938fe47f-ff0e-4a1d-b374-29ae32e88c9d", "sighting--21c0c345-53ab-4171-97c8-4ec01ede874d", "sighting--4fc8854c-5649-4016-9aca-36ba09d1ca6d", "sighting--e063c5b0-e265-4896-ab14-be0bb4e900c3", "sighting--9ef33dc3-5d7a-453a-a766-4901b81ba952", "sighting--3a5cbcd3-72a5-4fdb-90a6-386d989e2581", "sighting--fdac77d9-0d75-4ed3-bada-557d4fbe3eac", "sighting--df267951-5070-4840-8a05-059f322fbacb", "sighting--21e83767-e2f2-4ec4-be68-740b279d7c87", "sighting--df5f622d-fa14-463a-8195-d5dccde7dd5e", "sighting--0ca6b607-0259-4852-a6c0-fb8ee0f5f89a", "sighting--64f98159-85ee-4a66-a169-f0c3efaaf755", "sighting--2a077f82-3aa3-4381-a7cb-3bdde4a78539", "sighting--1e1161f4-3f10-4802-9ab7-bbae7c868218", "sighting--4c67edbc-2d2c-4270-b8a4-7d8123ffab02", "sighting--b07e9022-8d0a-4728-8883-b080a7baa89c", "sighting--fb682211-cc34-412e-a4ac-bdc3f2fa47ea", "sighting--a5d95768-9608-47fc-9e0b-4301b3c2fef0", "sighting--f701b017-a675-4315-8c46-e4bd06d4ea32", "sighting--fe488663-cff7-41fa-9170-92cbdbbf0856", "sighting--82775090-e115-4543-a4c1-c75713514255", "sighting--5f82d6b3-8eb2-4e22-bfeb-4ddf4c65102b", "sighting--1a47bb74-27b3-4330-be1a-28e860ae4017", "sighting--cf44bcc4-f86c-4507-bab2-6e849cd2ed3a", "sighting--f0148326-b0af-4df9-a920-67718dde03b0", "sighting--d6dd67be-6b8c-422c-9b10-56678e50bdf0", "sighting--ad828dfb-4662-4b4f-b5cd-1c272fb326b4", "sighting--ba563cc3-4902-4d87-a6c9-41324af0e806", "sighting--6adb935c-a0e3-4a61-aff1-c4ca370b207b", "sighting--78dcdb9b-d675-4ceb-9c93-2c4e8a75c10c", "sighting--fdd05a87-9b57-4eb3-8ee8-ca7ca0c9ba30", "sighting--170ba19e-41cb-4a59-a19a-0aedd316ac0a", "sighting--499c871d-d5ab-4d24-b61c-c8193afe6623", "sighting--4b3fd04a-c146-47ee-b150-288566ced30c", "sighting--bbaa9d41-5f6d-45e1-8f60-c2943d030669", "sighting--e6a78953-8915-410f-a794-a6b58d6337a2", "sighting--6ce2c711-bfa4-4d9f-a973-39c1cd9433bb", "sighting--b46609e0-27d4-402d-b944-e601896f5875", "sighting--692a4788-74fc-45b6-ad01-2308c5429f44", "sighting--175e8dac-0a9e-4dcd-8510-29a53108dd51", "sighting--072c64bc-dab8-4de4-ba17-6acfff7d79a1", "sighting--2e591583-00dd-431c-8538-35a8720e6118", "sighting--3c3ce666-83e4-449b-8369-697abb2728da", "sighting--d0690213-13be-4cd1-8de8-f42ad2135cf9", "sighting--37a3530c-e90e-4e54-aa69-44d62e0cdd80", "sighting--c1301a07-11e9-41f4-abf6-65db71b1e7e1", "sighting--5528c58f-efa6-45d4-8d25-3683dc446ed8", "sighting--1fef50c5-5d72-44a8-b636-1f16bad39b42", "sighting--2713b8f0-b4dc-41f4-9a04-c47eab2df89f", "sighting--a85d0021-4d6d-41e6-b793-b3b1acebfb91", "sighting--fe842ee9-c048-44de-8fc5-d4eb0c6a338f", "sighting--bee56aa2-a096-41f8-953d-86cfd8151e92", "sighting--ca05930c-e4d4-452c-a698-35b237215583", "sighting--969e5ced-bb43-4ad2-a2cc-c93c5867ea24", "sighting--f8fdae71-2f32-4554-ad67-0fe1866d1b0e", "sighting--cfd8c5c7-b8b6-428f-98eb-46c2974196ae", "sighting--7086f57e-5438-46a3-8a4f-cd86a6f6dd2f", "sighting--21604da9-184b-40c4-8749-e14e16a65634", "sighting--9ba4fc07-4974-4ccc-9bba-0a37d0e6c96c", "sighting--a76f8c9c-95f6-4cbf-8b0d-1c24063d3a68", "sighting--513292d6-57d8-42dd-acb0-0ea8e166525a", "sighting--404cb38a-f7dd-42f3-9d18-dc4d8f8681aa", "sighting--bdece29c-4fa9-4068-a2ff-81c074e2208a", "sighting--70e92e63-10a2-49c2-8aa7-9cc01a7f89df", "sighting--000c1077-715e-46c7-8ef2-d812819a23f1", "sighting--ab9a884f-bed4-47f1-b504-e9b58cc91836", "sighting--3b3e7c35-46da-4731-a32d-ec981af7c7c8", "sighting--1ebafc61-e50c-42dd-a03a-d3526a16e6be", "sighting--588c5490-21d9-4654-956c-9b9b0c8407ae", "sighting--3f6d097d-a938-46b8-b39d-83b3f72630c6", "sighting--10ee2024-ce8d-4c6f-ae5b-127b1f10ed32", "sighting--35063766-2e43-400c-bbd8-771ad13556a9", "sighting--b801cc14-0f1a-4bad-b785-27a679b7a3d2", "sighting--dacbcbc7-5f57-40d1-836a-8e042b989a1b", "sighting--e68c23f4-528c-46a9-86d4-beb55c89734c", "sighting--87911299-7618-4990-9c34-86483531f37a", "sighting--adc17551-62ee-4db7-ba4b-236d407be32f", "sighting--f4e35cea-da7b-45eb-9434-017e703004ce", "sighting--204f0540-21a1-4b6c-adb2-1aeb49d7bc01", "sighting--fee2569d-3c8e-448e-be34-9e0cf695770d", "sighting--f22b5096-e452-466d-bdec-cb58bd62d503", "sighting--26244cf9-efa3-4655-9816-d77a8ad0c0c5", "sighting--1a7b6742-1262-437b-a094-38fd9ecd6d2e", "sighting--59fcdf8b-77bb-432d-979f-88cd809ef36e", "sighting--4ad000c3-945d-439e-a390-ac632c3596d0", "sighting--3cb2e97f-c831-46ba-8565-24876e91533c", "sighting--ad0b49eb-c472-4119-8627-a62807e51371", "sighting--57c3bdd3-cf4d-4f6d-8b1b-a78fa6f821bf", "sighting--d9c1cfb8-f113-4bcd-b317-228708393638", "sighting--df4ae768-ed07-43a7-b0d2-7dafb8364207", "sighting--6e7993fb-cc89-47d5-9dbf-d33a03376c11", "sighting--2f172964-26b5-4981-bdc8-de63eba31456", "sighting--749d7517-09a3-40a4-8dc5-5ceec7d36d99", "sighting--cd4cd058-1465-4b4d-8e1a-b0f82fd445c1", "sighting--346da59e-cf9c-4817-a53b-e0f5f9f8a7d9", "sighting--5f29f97c-772b-404f-94b0-75c3ebfcb91a", "sighting--e84ab670-253d-46ea-90e3-ea6f21caefc4", "sighting--ca2ea138-865e-4757-8a59-5b86674f827c", "sighting--dbd27110-eb87-43f1-b920-c1ac5a27b90f", "sighting--31e54a2d-a124-43c5-8ff4-ce2314a128b9", "sighting--53a0f8b8-6b05-41e1-ab9b-42f3b6dd2a7a", "sighting--3d6de113-040b-46c2-8f46-c828fff956eb", "sighting--ce038562-2951-452a-9935-5add368a0358", "sighting--d6cff17f-a357-4e28-a626-15841784ef70", "sighting--e3efa878-c2ec-41e6-bd4e-c929086585c9", "sighting--d439eebc-cb86-40c0-bb17-fcf1bef108f7", "sighting--4dd7a5cc-d53b-4dbd-91da-0622354ec8a0", "sighting--6a0b7381-3ef7-4f52-be0d-bb1428b43f05", "sighting--a880b0bc-e2ee-4bf3-8648-a314c4bee311", "sighting--17aaf77e-bd63-4157-acaf-10696760e50c", "sighting--3ed74742-7767-472f-8311-fb6522f0fe9f", "sighting--2e10d8c9-04d0-4a0a-89ea-d9c814cf3447", "sighting--724e4601-8f37-439b-9904-a986071aaa55", "sighting--effcf6cd-2018-4d00-b01e-85e388611637", "sighting--bf5b481e-404a-4520-b8c3-b268f361183c", "sighting--6bd872d0-34a3-4407-8fce-7154f4994420", "sighting--949c0517-06ee-4794-a210-7520c28d7fbb", "sighting--43f732d5-001b-4e5e-9733-37d6f1f12906", "sighting--533d76fe-bfed-47b4-a01c-a57b070d9359", "sighting--e247db4a-649e-4e14-babe-c5fa9ba89e45", "sighting--5e835594-be5b-48f6-9955-6c58c61e588c", "sighting--8cb0f59e-a314-474d-9ddd-5bb2089a367b", "sighting--4c21b976-0251-493e-a4d6-4f14b753cc5b", "sighting--2c3eac59-53cc-4043-9dba-488194469fdd", "sighting--d0dedb4c-5224-49b4-b713-9f37380adbfe", "sighting--91185044-7653-4514-8de2-8fe2c21f51ff", "sighting--da7c94e6-5402-40b5-80e8-a2a453e942b2", "sighting--40352307-2930-4ceb-8a0f-c80fdfb20195", "sighting--c1570ddb-65de-4235-8236-c40fdfe26823", "sighting--9b19f420-9455-43c8-a799-1e520e3793bb", "sighting--0abfe434-d7d7-40b3-8944-bf434cabd579", "sighting--79ca6272-7f90-45e7-867c-21f2a2f7d609", "sighting--e8bf5bd6-fc25-4fcd-bbde-1ec0bd2099fd", "sighting--fbf65e4e-b76a-4c3a-8c00-afcc68000d0f", "sighting--2eafd8c3-6e92-482c-8d58-6a56a680c576", "sighting--18e4aaf7-fade-410d-845b-24d38efdcec9", "sighting--6bb23b63-1b85-42f4-b795-6d8b3724b2d6", "sighting--f56b059c-b4bb-4deb-baee-853c695a4e99", "sighting--dd3ad715-b101-4a90-8b67-15a0d6964b19", "sighting--0835cf27-b8f4-4936-864b-bca9aac7d16c", "sighting--cf33346c-c2cc-457e-828d-b1d445de7843", "sighting--0d372ee7-d592-40eb-9cfe-8adba50b084f", "sighting--3ac47e19-9802-447e-8b0d-6ebb5898c0fd", "sighting--3c22429b-4f40-4c3c-8d5d-a7b1c0c4dd0e", "sighting--e2b9198c-125f-4ab1-89fd-df187d913bca", "sighting--20d55607-7fa0-494e-b324-f3d39dd8745c", "sighting--94e7c128-5c76-4e75-9e69-cc03e938ed72", "sighting--3263c0c8-d773-469c-9bfd-266f4525cf83", "sighting--df4bd16c-efbf-4289-9b74-b6d77e83c0d1", "sighting--239cda24-e9ed-44df-b61c-75c51e644b5f", "sighting--e03f9a36-df95-4b34-aced-650fa0c30300", "sighting--6c4a7216-2b8e-4485-b479-13b81a099b61", "sighting--b46c9730-b24f-4604-bec0-67d82279f712", "sighting--fabef657-2a91-4990-9d5c-1b6b41c32bf5", "sighting--e0ff3926-92a9-43e5-a4d0-8898b7812d74", "sighting--5f04e908-acec-48a5-ac5f-3920a3a8bb16", "sighting--bdaa6ba3-3ca8-42b8-a922-05bf39d01fbc", "sighting--be30123a-8b6a-42a0-90e7-3cf50cdcbfeb", "sighting--4f794523-dec7-4c72-8958-b091edd8617a", "sighting--3e1922ea-7c43-473e-812b-3d115ef0543f", "sighting--bc742521-4679-492b-9362-40c81fde4612", "sighting--49575d03-045b-4a64-b2ff-be39362cf195", "sighting--d09c9639-f95d-4a38-b26e-ba769ebab3ae", "sighting--da1eb9a3-6f89-4bf7-b78b-3a779451d13c", "sighting--e39c2db7-9ee9-4c00-a1b1-9592d2c08874", "sighting--228b7911-628b-420d-bba2-79c838f20482", "sighting--c9fcecca-904c-488e-af9b-2105bab4d4fe", "sighting--50872745-9c29-4960-989e-b3fc58949e2d", "sighting--52d582fc-dca7-4d68-ba8b-51e765535d5f", "sighting--169b2eb8-1894-4363-99df-e229c6c50e7a", "sighting--38db74b8-1cce-4a96-ba8f-43c248635161", "sighting--c5b17943-c337-4f87-98ab-fb8d6664ae4d", "sighting--f27ee944-3288-4de8-8ad2-ccf1c67baf68", "sighting--e4f97db3-e616-4b32-ba5b-a047cd09cec9", "sighting--f2cf2f06-f19b-4b2d-8bb8-457f7603d555", "sighting--485dbfc3-562c-4418-8ae0-0b93ccd8f943", "sighting--b75a7672-e01a-4f8d-82dd-5a4175c301d7", "sighting--a6015ea1-5c09-4ed7-beec-1b752d54e029", "sighting--9bd39724-b233-4e67-b28b-8b44d95f7d1e", "sighting--82a0ee9b-e9bf-46a6-97bf-d61d5fe6107d", "sighting--6a541c29-4393-4fb1-bef3-cb063a082171", "sighting--c24577fa-62b4-4554-a095-388a5e53df19", "sighting--705be0b4-8f74-49b2-98b5-c9897d68f416", "sighting--316fe364-d681-455b-8251-a16a816e9290", "sighting--877035f8-1f1e-47fb-988c-bd04b8ffa3c2", "sighting--93cc3742-888b-4dcb-8905-d0ea48afd66a", "sighting--eac0e156-cc04-4b34-95bf-f82d77676c1d", "sighting--1decf79d-0825-4c0b-a163-704c9e9c894e", "sighting--e4b089fe-c412-42e6-a691-a99e4a94627f", "sighting--d059254a-290d-43dc-9983-cee2e2804890", "sighting--e5fdedbc-e1fe-43c9-b3ff-3856b574b392", "sighting--a90f5d2f-3093-401f-9e39-654f7044e59c", "sighting--9abbba6b-11cc-4260-863f-e491835438d3", "sighting--01719331-1bf2-46c2-971a-9570785845bc", "sighting--6db7b879-a8e8-44d7-8f5b-233ab23a7e4e", "sighting--7aa69884-78e0-4e06-af45-0f11c3cf89b9", "sighting--b5fef0ae-4d8f-455c-9621-ddab72debdff", "sighting--e68a63c7-e3f7-40f9-9df6-bbbb40749ece", "sighting--e6932989-f7ba-458f-9383-be2d78409e4b", "sighting--82e207c5-61a9-4f95-9fb2-aa79daa547e1", "sighting--9158e29e-4543-4253-a70d-8eb32fecc6a8", "sighting--47b983c8-7a35-4961-a1fa-f4fccca35ef7", "sighting--0e8fca5a-f0ec-432a-9c69-f262f86a0dbc", "sighting--8f38ddc7-8064-459e-a15d-86d823fcd54f", "sighting--b824681e-19f9-4171-b73d-4046cb983993", "sighting--d8b9a98b-9b2b-4628-bd9a-59dae525802c", "sighting--4daba052-6a7b-44e2-affc-abcabc92be90", "sighting--8c2f6a0b-f4fd-4429-8bfb-17c525bd4c39", "sighting--7776f5bb-c3d9-4cc8-ad52-4406f735c63f", "sighting--b59ec4a3-380f-41d4-a0f8-a1dcce98679f", "sighting--d4ede482-1a00-4e8e-b1dd-e31581665582", "sighting--9bcf3896-e55c-4bbb-9420-c3972e37e7a5", "sighting--bf21d205-3185-4ec6-8849-9abe10abbb56", "sighting--f3f55a48-2fb5-40f7-96b9-7b66540eab65", "sighting--d15701db-b0c8-4ad0-8301-562316d25235", "sighting--08bc14ca-217d-42fe-bf15-ae362be49fc7", "sighting--9dc9fb62-357f-4e05-bbbd-adf3ea4afa7c", "sighting--9d1389bb-7d3f-4fbf-9acc-33d6ac349b81", "sighting--541c6348-1fdf-4a63-be3c-95e463f14424", "sighting--d1235e24-a816-4557-941b-5eff93c9f1d1", "sighting--9d064d76-411d-4a92-9796-6a9e1a1c8e09", "sighting--af3afd20-e37d-4edb-a5f9-518184f3cc1c", "sighting--f3b60a4a-4c6b-4c3b-aca9-efe525101080", "sighting--2076b2e2-87f3-40eb-80e8-1d24923b673e", "sighting--956e92b4-6134-45aa-b193-61a7bed144ee", "sighting--dc4e43b2-4f7b-406a-bdc5-bc1d023c5587", "sighting--526bbc15-63e5-47e1-bd16-6db289a4da47", "sighting--57b30f90-ad0e-441d-a01a-7b4df8fb0c4e", "sighting--ba445982-1c3e-45ff-b37d-f2ed9aaa7dcb", "sighting--9998147d-33fa-4dbc-8b66-d454871a8779", "sighting--f2c4ce01-bec6-42d2-a685-42e594b1f253", "sighting--2edd90c0-9490-46a1-b1c1-065312d01085", "sighting--41b356fe-c3b4-4286-adc9-5b44b42e3ea6", "sighting--c1726689-8858-4790-a25a-a96ce03a0d37", "sighting--cc3d26c0-9877-42b8-9088-376e09549de5", "sighting--1a3ca344-c44c-40e3-ac2f-23191cbdfa8b", "sighting--71160124-6846-4fda-88ae-b411baa26153", "sighting--922bef18-117c-4a9c-9473-c9b0237ffc2f", "sighting--5b8b15c3-5c3d-4148-b0e5-c72f41cac183", "sighting--dcfcfef8-b72e-4491-9641-01c0f90e2af2", "sighting--3a67dc7e-466a-4a2e-8a71-aeba1390ed60", "sighting--b77ff150-371b-44cd-8913-164b86ddca34", "sighting--45979ff1-5d57-4f88-874f-d50f1aa9e29d", "sighting--1cded253-519f-4eb4-a5f1-58a12eaaae49", "sighting--f0545d17-cb02-4a31-9ceb-2d4c11e37f20", "sighting--ef4ece0d-363e-41dc-b2f2-00831de10d71", "sighting--2cc097ad-3502-4ed0-aef9-225059a64d00", "sighting--49c6420f-6c7e-4797-96fe-fd483d6bc644", "sighting--6dbb7927-29ce-4591-b6d4-850ef4946e90", "sighting--839f9c67-32d2-4573-bfd6-0c3d9186506c", "sighting--14d3ac21-fc2e-4c79-9a93-929a4a7826b5", "sighting--3db1a298-b317-4833-be47-0920a19435e8", "sighting--2367a902-c899-4eaf-8c69-83096b3d6c2c", "sighting--8139c273-1da9-434c-802b-50f758c3d2e9", "sighting--d386afb5-e321-4c87-9303-d8da13315153", "sighting--ce6059ed-8b7d-4a3c-8d3e-57cc95895439", "sighting--f97d5579-6ade-4aad-ab3c-f2c7248d30ee", "sighting--37657d2c-38d2-48d5-9c8a-9b53043630a2", "sighting--42210f4c-02a7-46ba-a1ba-99a8995faab3", "sighting--457d813a-f822-4d30-9796-57db58f8d5f2", "sighting--3f832e83-1672-47ce-ab6f-458a3a1e3497", "sighting--4fd58f87-70ac-4956-b605-4217dae518d5", "sighting--409c8a00-c84d-4fc5-905b-29cff69dc8ca", "sighting--750ea22e-e539-4cd5-8a2b-dc2399cb7a11", "sighting--a01ba903-8349-44fc-b939-f74a86654745", "sighting--f7e4d8ae-b328-4d0b-8c9c-69c1e7c71876", "sighting--bc6f9299-9bdc-4a96-af52-d511f9be2a41", "sighting--c6fa760a-0a19-4d1a-ae67-13c500b75236", "sighting--82f5bee3-8398-4594-93dd-229128d20653", "sighting--3ae0e774-3e9c-4f44-ad2c-b5325160d677", "sighting--d01209f0-3309-477c-9e7c-c512b50c1b6d", "sighting--80aa261b-9816-4dc0-8cdb-a657ed8355d3", "sighting--f27d6b8b-c541-4bc5-ae79-7a90d7c2b4f4", "sighting--026bd351-e861-4388-bb39-80a688083ccf", "sighting--a330d730-890c-4f8a-b2d7-366b17f587ee", "sighting--9588c459-a011-4c71-bf00-d6537e3d5751", "sighting--6beb6f22-eead-45c2-994b-f1695a322651", "sighting--3b871b7f-e020-4657-bb84-9e84f523b372", "sighting--2ad70705-fdf4-466b-abc6-e994c2d75c46", "sighting--bc9ec8d8-dc3b-43b0-9d3e-4ac4ef41be19", "sighting--4379df6c-017e-4a78-93b5-633fd4d39d72", "sighting--dcd4d2b9-ab71-4399-b53d-865ba1f4a1a2", "sighting--b38dfffa-26d1-42c6-869c-1963ced91f1d", "sighting--91a4a68b-cd3c-4752-b0f0-839a1c4a2634", "sighting--76e7b329-bced-4e6e-8abc-47fdeec0daf5", "sighting--e87b376f-5a27-4313-ace3-96ca44971104", "sighting--d4fe6d46-a826-44c1-a70e-97bf64a4c0b6", "sighting--ca206dec-edd5-4cf5-9850-74d4c6ca39d7", "sighting--2ad177fb-32d0-4d83-b511-7bc21ee372da", "sighting--c9a0406e-c573-41b2-b163-03427b37bc0e", "sighting--5bcc295a-775a-41fa-b29e-90d5ea6906b5", "sighting--c5cea38f-14be-4cf4-b327-01cd232a3738", "sighting--95b10dc1-227c-4e74-87fb-843bb995a4e4", "sighting--8033e8f5-f270-4495-ab8f-6c29f0431374", "sighting--c703e0a2-210b-429c-9219-6b9ebb2abb65", "sighting--6b749e4a-8d1a-4ecb-912d-ec9d3034cf93", "sighting--7bc73182-a85f-41c9-ac9b-39554edeb6f7", "sighting--5ccb47f5-b178-4862-b2b0-39bb22897a12", "sighting--1c9814ce-807a-4d17-b4fd-d8e7115c038f", "sighting--056d048f-44b9-42a7-9d44-8194792bfddb", "sighting--ceb7a09d-dd81-4d6b-86af-c3aba699478b", "sighting--75745dd5-ecb8-40fc-ba69-dd78fa88d140", "sighting--1c809601-c3f7-4c2b-921d-9e62551168a5", "sighting--6df7af51-56ae-4063-964d-818d490eac83", "sighting--b91af4a9-caa6-4e56-ab86-6a7b0c91cba2", "sighting--b53647bb-6b28-42ad-b444-4a24da9c5a02", "sighting--f66ecfd3-8ab0-4157-83c1-12763e81eed4", "sighting--4618fe16-b9f8-4663-b940-bccd4c0371cc", "sighting--29481c77-67c1-4f90-9f0b-cb462af6d682", "sighting--e761b4aa-6aa2-486c-b195-36a702568dfe", "sighting--9513ec39-7e67-47b6-9faa-57b754fbf069", "sighting--b5b25a81-93bc-42b7-8559-7cb4b9a27c92", "sighting--8ba4693b-3217-4f8d-b9d4-a5cd530fa4f4", "sighting--9e5ebaa4-ee5e-4287-b3fc-09ec0d929729", "sighting--9e8ed9c6-3f51-4252-add1-0792470921cd", "sighting--ad1d14da-bc59-46e8-bd8a-72c4419d211f", "sighting--bdbba9d1-172e-4ca9-b30e-5b18b8dba008", "sighting--1d30ef9e-5c71-4630-82b9-71988b59768f", "sighting--aef9a24c-817c-40b6-b81e-d03b970caeea", "sighting--22d3a442-7b67-47a2-afc3-2ad7e3cc4810", "sighting--6ea32747-5fb9-4950-9c57-8e367d136df5", "sighting--c9e7a240-fa88-408e-9994-8717f8aebefd", "sighting--b78c4230-afef-4945-9ef3-d5d43c0869f2", "sighting--ab4ed016-ec54-4a10-9d88-757f45d30b3a", "sighting--7b9d49d4-120d-49c4-83a2-871617024d07", "sighting--86fcdcf6-11c7-4a1d-bc86-c6b94f7acc8e", "sighting--4c277ef2-247e-47a8-bf3e-981a70f63fca", "sighting--73f3ad78-6544-4258-8ee5-6e93f715cbcb", "sighting--0e758344-4660-4e25-9215-0e40983cbef6", "sighting--56a7d8ca-c392-40ae-bf21-7a3d01f0d70b", "sighting--7af46332-0961-4dd8-8726-030cdbcd8875", "sighting--4901afd3-f785-4c93-8ef0-ee2dc310d54e", "sighting--426bde12-969c-4a0a-909e-5e5cb3f20500", "sighting--d84b7797-5059-4e3d-a8f7-1d12cfe08500", "sighting--4cc4d09b-8cd9-4584-aeb0-f37d6dd6e7e3", "sighting--087d697b-e2a1-4f65-ad3e-e24af874e8da", "sighting--d7652e6c-a827-43d1-97a5-e4d32a35496b", "sighting--fdaf587a-1602-4899-b57f-a3f8d39a057f", "sighting--f95e8fd0-0ced-4ec6-b86b-37e3b7392a1d", "sighting--d818fca4-b527-4ec1-b792-05a82179a6fd", "sighting--90869afd-6546-4049-a881-a579fd3628f0", "sighting--bf6aab46-1df3-41a8-9f40-6f0949f9e076", "sighting--8267f4db-e0b4-46c6-883c-f61708736939", "sighting--c83bd20c-4a25-4b0e-a3f9-5a31be706afa", "sighting--91d8be33-1d84-458c-bfc2-af736fc07ab4", "sighting--111fa672-74f5-4318-a289-94df2bed9b7a", "sighting--3fad00d0-4bc2-4bad-9acb-607417df9583", "sighting--d0d36eb8-d71d-466e-a814-4da1dffeca50", "sighting--81ecc69e-2bc0-48e2-91a1-643a1aebcc7c", "sighting--6f0e5ebe-b032-4522-ae1f-5f9671a5796e", "sighting--244e4055-b36a-46cd-8402-b8861502d53a", "sighting--f26d1f51-3774-48cc-8d74-0f7c447245ca", "sighting--b142d1c9-be07-4087-b1fb-9a0c905f6895", "sighting--88eab633-d62d-4c7d-9d1c-6cf42c7018d0", "sighting--e3c7f024-6ab9-4b46-afdc-6aa428eed806", "sighting--5798ae68-2e9b-4aac-ac9d-6a4e5f1f3de4", "sighting--7d609085-79f3-4047-98c4-4810965af777", "sighting--c4bb93e9-6576-4ab0-84e8-6d6eac240389", "sighting--4515e207-7cc0-4d11-ae66-11c950bf784f", "sighting--cb6dc462-af97-4f96-bff9-abbc6285e7c0", "sighting--5ec94f93-c3fb-4c28-93d1-bdd4934765a1", "sighting--0c8cef39-33f1-47fb-b672-84f673817c2a", "sighting--63ad1f33-6c2c-435f-a52a-342564390fec", "sighting--be8af56a-0234-410f-9bc7-af33a6520b72", "sighting--5e631bd5-da65-4556-95e9-e9a5716effe3", "sighting--12b4f504-f956-496d-ab8b-786ff9cb5300", "sighting--c4945c4b-620c-4d77-b583-c9eb9c3fc5d8", "sighting--b22ec2a4-c853-4689-a523-03e04dcf9d8c", "sighting--ed88bf31-245f-4dcc-9511-b4fdc8914c3f", "sighting--3b61507a-cc84-4e27-ad3e-a6c6452b9ad2", "sighting--38cdfdbe-8bae-4d98-aedc-4e6e5a3415b3", "sighting--394e4b82-1fff-4f0d-9089-2c83d0a74a54", "sighting--34968e05-c5b7-4f1f-8d27-e4be789b5051", "sighting--bbd5e25a-36ad-4b7f-a9e7-851f5ab4bf67", "sighting--ab7af608-c56f-4c50-a991-0f589098de6e", "sighting--7f26d422-dd5d-476e-8796-85b9eccef8a5", "sighting--cd7cabe9-0079-4063-bf69-3ebef9dcc5bc", "sighting--590bbdb1-c6b9-412a-943f-0d23b49a6e13", "sighting--8e13880c-259c-4746-9e72-3d94b76359f9", "sighting--73dd792f-9d29-41a6-b491-4eed2ccdb281", "sighting--ad181dc1-4728-4f6c-9ab1-ba99b37d21e8", "sighting--b0cfba6e-0223-4ba7-a874-0b3ddf7f361c", "sighting--c32b39af-3868-4b6a-84cc-24568403b9ca", "sighting--cb52d703-5240-41b8-b64e-28f67a36dd3f", "sighting--5b801a99-8bf8-4982-961e-b9ff0dafc901", "sighting--10ad2d0c-0677-4d2f-a2aa-e4e632a51ba1", "sighting--cd407ca3-5d96-4124-91ed-51cc5c2884d4", "sighting--bb5d9266-b008-4aa8-b5ea-e7869a4729c9", "sighting--b6bf0a42-dce9-430b-94d7-4d5f5509f453", "sighting--855a9893-0a76-4691-aa42-f649e984571c", "sighting--b6f339b1-bda0-4159-9673-7c69917a34c9", "sighting--3d042e38-a7f9-48e8-955d-f88e8ad7f555", "sighting--8f6f8f8a-eb6a-4e08-b0c8-701db748c6e2", "sighting--acbd8a2c-0914-489c-beb8-8004d6fff46d", "sighting--2dd2ee52-2fe8-421c-82a8-a8a554bcc9fc", "sighting--d9282715-c2cd-4984-8541-4b58b03644c6", "sighting--ebb4b261-286c-4bae-807a-76c7a0c7e34c", "sighting--56050c1e-9fad-4f9d-8073-90407e7539e8", "sighting--69b0cf5a-77ce-4b46-8537-4ca7414ba282", "sighting--a1db15ae-212d-4703-9926-15493ea69a79", "sighting--3bbcd17a-8e89-4941-9d32-abece5231efc", "sighting--f6de9962-b8fe-4758-8782-0e0e135e21d4", "sighting--4de8da8d-d76d-4717-8007-f0523b7a16ff", "sighting--9723105b-a21b-4e4e-807b-77b769152916", "sighting--b792a7ad-974f-4be0-b677-dba4ba1a9d80", "sighting--379cf8c1-d82a-424c-b21c-89b005bf6e38", "sighting--0e078e61-4fdd-498f-9aeb-10178a2430ae", "sighting--4046add3-a544-43be-bbff-7d46a59e770d", "sighting--22cb22f0-3c0d-4636-9430-8f2e3aafe94e", "sighting--94660cdc-9fe2-4395-9725-9c0c901e36f7", "sighting--58509c91-71bc-44e2-af70-0ee9138747dd", "sighting--f8431c8a-cc53-4252-a370-c478e3cfda14", "sighting--cca82804-36c4-4303-8f86-13e821acf626", "sighting--8566ccba-261e-4c2c-9127-74024200b2bb", "sighting--be473ef4-6f5e-4471-940e-b7126525a630", "sighting--f13e5d01-6bc9-4635-9f78-96aeb5cd04f1", "sighting--839724bb-03f5-4183-8e7d-b92dcfdf0371", "sighting--92263991-030f-4abc-88cb-01d0214978b7", "sighting--ad349cff-906a-4a82-a188-7e4f084b62a9", "sighting--cd3522b7-442d-44af-8a76-c3aebf0097ed", "sighting--e7a9470b-16be-44cf-b18a-0692ceeb6d44", "sighting--157de901-4954-4a9f-8d00-a160cdbd3d0b", "sighting--94529fe7-cb9d-41e1-b9b1-3807fbb93d4e", "sighting--1dad2172-7e82-4a63-99ab-119c1df2a00a", "sighting--52bdd04e-553c-44a6-ba17-103bd6ce4137", "sighting--eea6409c-2a91-42fd-a1c4-2cc620616b5f", "sighting--b2ff653e-9a80-45da-b2b9-4b399a6f8882", "sighting--c2c10945-4fdd-49be-b771-ab91cbc7f896", "sighting--666e175a-3e07-4281-9c5e-3a21258b78fe", "sighting--7166cc96-cbc7-438e-878b-f9e73db21d44", "sighting--7ecaab5f-18a9-41b5-a4a1-ba96bda91ab7", "sighting--8017bfa1-c0a5-433a-8d0b-0db9d0f4c2a3", "sighting--47884638-86c9-4755-9f22-d60b33054308", "sighting--387904a9-707f-47b4-a607-2e740bf2c8ce", "sighting--0d14177a-0871-4bca-88e6-825efca6b9c4", "sighting--d56b06e3-2303-4960-86d3-f1dc5561af46", "sighting--758e976e-8948-43a2-9b89-07b95ce1b67a", "sighting--9bcd4751-7647-4f26-9e4a-26c4ef32e713", "sighting--b46045d3-1ba1-4c16-8b06-96635f4a09a8", "sighting--af5750b1-ee19-4dc7-95ce-85b0b5ab83c0", "sighting--cfe09aaa-e0c9-4f43-9e15-0b1c696e7635", "sighting--34ab19c4-c435-4a80-a68c-9783f8be1337", "sighting--6b5cda43-60de-4bcb-9f0d-75bf47c3378e", "sighting--b2b74322-468f-4e43-8f48-d9f832ab6b8b", "sighting--649eb59c-0aa6-4651-8cce-34cb86c22174", "sighting--3249e520-c0af-4eb9-826b-a50fd7f9cda7", "sighting--439d7f02-5556-4832-9963-020332ab7185", "sighting--c27b40de-c439-4cbe-9465-f579426ac806", "sighting--9e1963fb-bd31-4ba0-9c11-886de1831f71", "sighting--b2ff786f-1b13-41ee-98de-7439c4754ddc", "sighting--30e8e234-5559-440a-96f4-baec127f9571", "sighting--7d2d2690-c3db-4051-8105-dcba23bea130", "sighting--a586c55f-61b7-493c-936f-edaa07ea0924", "sighting--4d5d4013-5a90-42ef-8540-22a361732648", "sighting--8469a20c-32c0-4d30-a0d6-134b8de8b77c", "sighting--5acdea44-b9ca-401e-8490-957553a0af6a", "sighting--dec37ab6-54d6-498a-b0ef-713f5c4e99b1", "sighting--4176a026-3001-4cee-9b87-395c78c83cf4", "sighting--ab36344d-7aa4-4901-a200-d31f1ab2a93d", "sighting--2d51593e-2559-4eab-9e47-0e5f832c4708", "sighting--23958af6-e832-458a-bc62-e9f27d0c94b4", "sighting--b533fc8c-f099-4cc9-b2df-3ca99615a4fb", "sighting--76bd6358-818f-4e55-ae90-514554bef10c", "sighting--4706c47b-aff1-47c0-8bfb-1ccf8dba68af", "sighting--58469723-4991-45d3-934e-e199613ddbbe", "sighting--a31dc38c-be8e-458b-a194-fbcdc9dc0aee", "sighting--9bdd33fd-6705-4fae-a1ef-ca61fdb3d0e3", "sighting--4eecbe19-9624-412b-8412-25a2417f38c5", "sighting--5d108e34-2f4d-4f20-a37c-7b8c064c5ceb", "sighting--97408c85-6380-4d0a-99b2-f1764504cb1f", "sighting--e569f91a-10fe-404b-bb37-59ad699e8e4e", "sighting--c9bca8f9-3c52-4330-8a56-e43111712ad3", "sighting--5833e260-d2f8-4fbb-a3ee-4503054e7024", "sighting--4ec92f75-8fa2-4adb-ba5a-b13d5de76020", "sighting--b51d715f-93d6-4015-805b-062fd83c5130", "sighting--73c0b39c-58e4-43a1-bd37-dfdcb94e6bc8", "sighting--edb34d2b-6e32-4e79-aa69-e46cd8dceb72", "sighting--ec9d831e-73ca-4d8a-aa21-f99fb7bea7ea", "sighting--3cdb4d4d-e4eb-48e7-985c-622ca7f628f4", "sighting--8049a334-1aac-4239-a35b-1f8028c6de55", "sighting--42f00f43-9aee-4be5-a843-bae86a738601", "sighting--5703566a-2284-4710-b054-342200f246f6", "sighting--8c074b0a-ab09-4f0c-a01f-735e2deecacc", "sighting--c5927e00-651e-4c6f-8bc0-cd93d573765b", "sighting--5acc82eb-536c-43af-a77f-8a040e9efa38", "sighting--255909e1-3ecf-442f-98fe-dd432c4365d9", "sighting--171d85c3-ea4c-4bc9-936f-c7c4c4d5d5d1", "sighting--3fa600dd-f08e-44e4-9c7e-88c6acb78384", "sighting--7066c9e2-4bfe-4408-9a60-8eb88525a15e", "sighting--0cce19c5-6d89-4d3e-8939-3461ac1c39d3", "sighting--800d48f6-ff3a-4bde-8ebb-f1397c3e2ff4", "sighting--c80e154e-8ea9-4a72-bf74-5ebe6e277f3b", "sighting--0bfcbd47-d40e-48c1-8fe3-20af2e913778", "sighting--9dd7a62f-41a0-4586-b261-30b00e659bf4", "sighting--e88e461a-6ccb-40ce-a382-7f0a2b0db7f8", "sighting--1099b3c1-b914-49ee-ae95-a4f7afd2dc3f", "sighting--8fb95093-7b9a-473d-9242-513c050c894d", "sighting--7eee89a4-6c8f-43d0-ba73-9e864107cbff", "sighting--a88ae1ea-9675-4ddb-b1c9-9f66f4a7e693", "sighting--36c70c0c-168a-4cb3-b053-f211a2ea95d5", "sighting--1714235c-4d26-4ba1-916c-4331f9f5b47f", "sighting--0428018d-1d2a-4ded-94d2-d9176b963a78", "sighting--d71447d4-f0e4-4241-9c60-24d5cd771464", "sighting--d1017fc9-28fa-4d33-ae81-f7a2807c42ef", "sighting--d166ba19-a2ae-4234-864b-eca13ba0c6ba", "sighting--dabf2214-09b9-4eff-894b-0ada1fbd242e", "sighting--27d7f87a-fc1b-425c-80ec-7dd66406d2fd", "sighting--d37f43bd-3bab-4b29-9b8e-53f9ccd7b4b5", "sighting--bff9aba7-33f4-418c-a1e0-f73c28b3fd60", "sighting--b511cd1c-cbec-4d4e-a313-89c87971611d", "sighting--4cd5fa71-aaae-46bc-828a-a9a12597b306", "sighting--f7fb66b2-11ff-4d83-91f1-9ff8adae02f6", "sighting--b8d2c0af-ff88-4a0c-82c4-25418b192201", "sighting--e1a787d4-c11c-467b-ba27-2f2d1ec3e88c", "sighting--12c9f341-7492-4408-bf4e-75843d5ba594", "sighting--81721d93-25a5-4a31-a633-e9d98ef5778e", "sighting--58593cf9-939c-40e5-98e3-8630776685e3", "sighting--5bf07fcf-246f-4e44-a3fd-29ac8d7f23de", "sighting--24c7eab2-178b-4c75-9fdb-f1e6f184062b", "sighting--0b14d152-0e60-4be3-ae96-11ddd531cc70", "sighting--0f6f9e43-5bae-4890-859b-c2739570d3f0", "sighting--42236af3-a806-4241-997e-d854181b8498", "sighting--2e17ed5f-3564-48fb-88cd-dd3c50792ed5", "sighting--b06c0fba-5411-4172-bd91-a1832add69db", "sighting--9a5da3c0-2ed2-4878-b515-773e08f88958", "sighting--28a56f77-c644-45a2-9362-21db04a09bc7", "sighting--3eaf2990-6c20-4aec-9097-043a25092f26", "sighting--9814bd11-d8f3-466c-8176-781ed3143e4d", "sighting--81501a32-d7f8-437d-af6d-95ac5da56cfa", "sighting--edaa80fe-dd28-45b7-9d8f-5a3a1b64efd0", "sighting--3b0fb892-a40a-4d38-893c-83ec59ec5b31", "sighting--28e55b0a-2212-4fe3-8286-2041c6b111c5", "sighting--bd4c8d85-fcee-45f6-b4f5-cbc5dfa486e2", "sighting--c053b8f1-e9d2-4bf6-a295-654396dc9e1a", "sighting--e00d3ad9-0f39-450f-af20-89bc87c913a0", "sighting--5c69a284-0c2b-44b8-8f69-e4d9080ea1ae", "sighting--cbc8850d-c9ce-46e4-aaa5-fa9356391400", "sighting--b61499b6-18f8-4f10-88c1-bc38fa7d6cd8", "sighting--45840bf9-7859-45a8-8378-74774b8bd507", "sighting--b62fe9e7-58f6-4186-babc-b02ff0993b6b", "sighting--04dbc3c8-5c12-42bb-95dc-7bb53ee04aaa", "sighting--a8174b70-45a3-4389-ac06-a094020e2376", "sighting--03a9d98d-fa3f-4885-92cc-9665deb3f8ba", "sighting--4550a091-3a54-4e76-ab14-24d23badcd71", "sighting--e99593ef-5de9-434f-b460-e4799f78ea6a", "sighting--ea19c05e-ed49-4a05-8eb9-1813671693fe", "sighting--9a2a74bc-814f-4031-b85b-19257641a9e9", "sighting--f28b0cb8-2d64-452f-87e2-3e07fccbfb5d", "sighting--96af3893-0ded-4db2-950f-77259d00d953", "sighting--554a7f90-e04a-4dbe-91e7-1dace398fee8", "sighting--5748f2a8-57a4-4f48-baed-c293de368da1", "sighting--e7c56a1d-1b97-4a61-9a3e-21c5a8cacdef", "sighting--b4b4d4b1-244a-46d2-aa66-e08a44ef1229", "sighting--44bfcdcb-c285-4043-9011-ef0cf1e1304d", "sighting--25b34489-54b2-4c3e-8328-956199d4296c", "sighting--eb18a22d-4961-4ab9-9d97-8c3751005066", "sighting--a1fba76a-f14b-495b-884d-37a2d9066210", "sighting--2fdba91a-b934-42d3-adcf-140463bb1858", "sighting--5b7d5b9c-b5e8-4ddb-a4f5-bbd0fa45e846", "sighting--3565d739-3114-454e-a0d6-c8842298f215", "sighting--e54e97b5-e45c-4a8f-af6c-f48db1a691a9", "sighting--e038e4a8-2d9b-41b1-8256-7d17235d6b4c", "sighting--6901d53b-b229-4fb9-b659-dc771a37152d", "sighting--d86a2018-5973-482b-9e87-208f80d11340", "sighting--8f760009-713f-4357-b65b-3a2e3ae55316", "sighting--736b34fd-da45-492e-9348-b0b166d999c0", "sighting--772cf0af-bd8d-4879-8878-fdee16127a78", "sighting--a65511f4-c5e3-4081-9620-6c4bdc79f547", "sighting--5e95c828-a365-4fea-8edf-6e10411f1480", "sighting--e843df77-859f-4c70-998b-58ebacc1351f", "sighting--72ef0f7c-41cd-48b1-ae54-018976e570e0", "sighting--ab84fa91-0655-493d-9709-4156bbbcce2b", "sighting--b465d056-ae91-4807-9065-75515bad031d", "sighting--124c54eb-8e4e-40b4-b087-00e15bbd49eb", "sighting--0d2140c1-a8b2-4486-83fb-4570528a491d", "sighting--a5d1b84f-0ac2-4a4c-bf60-cfdf20e03fff", "sighting--f3ae029d-fd9a-4003-a198-db31b0f53d36", "sighting--d880a862-c6b4-400f-840c-49a05dc94664", "sighting--af0ca505-b545-49b1-b6d4-20f3615616db", "sighting--ad8fe7dd-50b3-4f26-ac97-093ca827e1ba", "sighting--25ed5d38-f45d-4d8b-9440-6bca9455803b", "sighting--8e12a7ce-e794-4c57-970f-50e1436c9a32", "sighting--2104157f-cf38-41b0-999c-f564619aef23", "sighting--c45894d2-6170-4766-9674-e5dea8b52536", "sighting--ff65d123-4a8e-4883-a601-a5598f2ebb4c", "sighting--7a431856-7011-4e8c-86eb-d5f33bfefb50", "sighting--0c090c10-97bf-4728-a763-810fe0d50b51", "sighting--f7a194b1-8352-4f5c-b055-0db4370d92bf", "sighting--1dd652ad-a9b8-4555-b28c-56b0a143ac07", "sighting--67d85bb2-d95c-40f5-84aa-1edc52eaad97", "sighting--5bcdc8b8-862a-46d6-a6a0-470e23dfa3d8", "sighting--5d09c8c1-02f6-4b25-9bc4-29e1e28a918d", "sighting--4f74b397-c0f8-473b-af12-6196335cc3d5", "sighting--ced88396-7e29-4656-ae32-41344d164a16", "sighting--68d2f66a-5326-4d8c-ac15-36bae1857986", "sighting--e60611ec-9d3e-4115-a1ac-7f2d9c28c886", "sighting--708e79a6-7b2a-4dc9-8bf2-605f644eb9cd", "sighting--8e0c5479-2aa4-439d-ace6-9e27eda7ac59", "sighting--2b4ee920-04ab-498c-a215-85bedeabf277", "sighting--91a60490-f9db-4401-8656-179571a248dd", "sighting--2674f733-0662-49b0-bb11-8dce5712bd0e", "sighting--022bc320-ea83-4321-80ad-c2de273f51c8", "sighting--38d9b006-b81c-40a4-9d1f-c24fe001f89b", "sighting--e96ee079-dcf1-4dbb-aaaf-a9c8737e487c", "sighting--5d6d98ef-ad86-4f95-9d4a-b2110ef93fae", "sighting--77a29c0c-13d0-4a63-b739-6986696ac086", "sighting--c7944d2f-2d42-473a-abdd-28b0ddfa9ae2", "sighting--9715f721-a65e-4b94-a246-48739042f2ae", "sighting--c9f3ff19-6f25-4260-ac66-1b11114f6264", "sighting--6a7791eb-d211-4bf5-a9ed-2cc0bde9bf41", "sighting--8a4bec76-846e-40aa-b0cc-8b735a2c7b2c", "sighting--98d77f56-7833-4c22-86ec-6431b2accc2e", "sighting--6e6c825d-ef6e-40ed-801a-de98ea0126f0", "sighting--d9618d9b-938d-41af-b283-e078943973df", "sighting--99e78691-ed3f-4859-9872-78ba10299c12", "sighting--147695c5-709f-4edc-932e-724b1abcc60e", "sighting--d2ff24b3-9989-4242-927f-48f6afa39760", "sighting--b1dc7acd-10ed-4792-a3f3-6823f18ffbff", "sighting--f2a69178-efbb-446a-8598-1d25e4cf1164", "sighting--6d025b44-888b-4de2-ae50-f44f89cc4d6e", "sighting--e6489f1a-0659-4922-96bf-3b9df16a40af", "sighting--9dbed41e-e5d9-4c8b-a0d9-616100188640", "sighting--867919c4-f90c-431e-8c8a-059fab2b679a", "sighting--74b933cb-8a37-4e83-bf0b-d83fda1eb8ee", "sighting--a7672d2a-fac9-427c-bee0-30c36e814edd", "sighting--dad05ca3-bae4-4c88-909e-6fd51d081ea7", "sighting--c4fe594d-fff4-44c9-aa06-bdda25cd1ab7", "sighting--9a272a84-a84d-41e2-905d-187e32d1865e", "sighting--7a258871-afd1-4efc-94bd-6a52cf265c04", "sighting--ffaf1a0c-27b5-4431-a2b7-2cd48eaafc7d", "sighting--9e429456-bf76-40a0-a324-065ced428dab", "sighting--1c5decfa-23b8-435f-8218-738faa1e1fd7", "sighting--977cb673-9c01-43ad-a264-061030a2f327", "sighting--22fe3fd1-b78f-460e-88cb-8aa77ac00423", "sighting--06e30d11-c488-433a-9b4d-2d2446df4cd6", "sighting--b5a5def1-a39a-47d7-9b9e-2b343d4727d7", "sighting--95b7dc69-9b76-4f29-864d-7949fe3b5f14", "sighting--637e8fed-3488-4f16-b90d-ae3273198bf1", "sighting--04afb386-f4a5-424d-966d-634ffb20b1c2", "sighting--680c1aeb-6e0b-404d-b5ec-e5715333194e", "sighting--24f20657-c8e6-4544-ac02-d4aa5eb89ac1", "sighting--06cae5b8-0aa2-4992-b31e-27f263265148", "sighting--86ecc9dd-6571-4484-beb2-d1f31d9b5373", "sighting--f7245832-fe2b-4e61-86f8-0f12f9c2f76b", "sighting--d98cd2e4-1d22-45fb-a329-0dda0a3588c3", "sighting--a0d90245-64df-4b4d-a9fd-912ef4c56a91", "sighting--0c5e5e36-b0f1-4bc3-acbf-7758f0444447", "sighting--6edb791b-2d5b-424c-b441-30d257333124", "sighting--ade9562c-6060-419b-bc30-ae5b33b31811", "sighting--8a79f933-b207-4e58-837c-df80534c9be9", "sighting--448ff15b-5679-46e5-91ee-ac0fd13ecdb2", "sighting--154fa8da-151f-4858-8b0c-38123a1d14e0", "sighting--98ffaa5e-20a4-4c7a-bfb6-7f63d996e91a", "sighting--f6770a22-e538-415d-904c-108716fd83f0", "sighting--a364cec2-ec63-4235-962a-3bbae1428b3f", "sighting--bb085f78-e788-45f1-a30d-c214e0475ab8", "sighting--bf1d759f-11cc-4f7e-9ea0-8c5616dafe03", "sighting--1563b1ac-5dfa-4bec-be03-d0936dc06cb6", "sighting--68ac9886-a490-4b7f-a971-5ae98808153a", "sighting--0ea7717d-e03f-4df1-82f0-80c705e183fe", "sighting--7e7c1357-a001-41a7-9912-45c84a47d3fd", "sighting--e28d04fb-1c8f-4df9-9925-3ab68bd112eb", "sighting--71541722-f1db-4952-b885-236ba1239303", "sighting--594c64ba-4929-4501-83b7-1d22bafb5ccb", "sighting--b4cffc49-4fad-4e1a-88b0-d5f8e02e8ac8", "sighting--79e6c6bb-77dc-4cbf-aab5-0d4a27d0a489", "sighting--9c36864a-c866-434b-b7fe-62316e7f2249", "sighting--66a128f0-d315-4a7f-a6fe-008f68e4eba5", "sighting--7cbedaa1-b88f-40a6-bf7c-d67ae98eb556", "sighting--26643d07-3c1b-40ef-9a0c-19ddf267923a", "sighting--b2a37e8a-c3b1-4d82-8fde-3fe266d6519e", "sighting--c7331906-53e8-48e4-a01f-03621f06658e", "sighting--36822b1b-af1e-4aeb-b17d-5ef2dc1ccd14", "sighting--00a2a2e2-8e5e-4726-97d2-0e77f4fb40d5", "sighting--4c6dcfa5-9a72-4f08-b125-520056e3255d", "sighting--c693028c-c22a-42c4-822f-51da1b21f0f0", "sighting--788e2bec-d729-407e-977f-bfe7e1bababa", "sighting--514c7757-ac56-4bfd-9c2e-c687a792949a", "sighting--4cf054f2-482f-40b6-a5ae-97d97c806d9e", "sighting--c4c3762a-539f-40d3-a828-2b63cc2dc578", "sighting--73411618-8333-406f-a460-10d8af1e0cea", "sighting--1bfa1c1b-b744-4b36-9484-44f1fbb03ee3", "sighting--3d86eb21-739c-4dbb-91bc-68c135948961", "sighting--524d73ec-cb60-4686-b765-e38c313f70d9", "sighting--7525bdc4-ced0-4eae-a0f7-9a6fd169ca9b", "sighting--dba767f1-7ca0-4809-b41e-db409b6b29ff", "sighting--bdf3f2f2-44ed-4159-ab44-ff4ccd94a7df", "sighting--6603bc6f-ef3d-40ff-801d-1fec92fbe802", "sighting--71bd4989-2076-4fb9-84e4-3c1347b98d91", "sighting--2b43d0d7-9590-4ee1-9775-d3d592e695eb", "sighting--859b62ec-ae4c-40b7-b2a1-f66c6bd0c41f", "sighting--a37eea83-a143-4aa3-bbee-81160304e547", "sighting--2b0c6973-e353-4aac-93e3-bc689f8f476a", "sighting--b7052aca-24b8-4209-b6a2-dff3642b7f91", "sighting--a34e8f8b-2529-48c0-ab08-30a58544f4d2", "sighting--e299b167-2513-47f2-a3ba-000cf519da5d", "sighting--85a3dbf4-00f2-4f88-bb40-873faa464e2f", "sighting--4afc1361-8616-44d9-bfc3-bc9993259b22", "sighting--f4e685d2-1bfc-4fd3-9993-7a7d8a5299af", "sighting--54f6b59e-b18b-468d-8f7b-3cf87db96afa", "sighting--75ec8275-c474-4692-ac70-56e11bd3182d", "sighting--66a0f259-0f5e-4373-98cb-625b98631058", "sighting--08334661-a97e-41db-a46d-4f1d8f72ecbc", "sighting--d2a89555-a73a-4d12-9ce6-f81cc5277d8e", "sighting--13a7d081-b062-4b63-bbfb-93cb3c6b1cc0", "sighting--9f86292b-6079-4719-99f7-af432e8edddb", "sighting--d08fb763-a5aa-49f3-9050-c622c8c6dd70", "sighting--1d8031ea-dfc6-4387-8021-0929cec1ed9f", "sighting--15921219-05fb-4a4b-9417-d10813c2508c", "sighting--a12d71c1-e68b-44c3-88a3-7b597525b7b3", "sighting--b0be0d74-f918-42a1-85c4-f988ad343699", "sighting--c7dbc926-ebd9-4398-a559-2a6774de829b", "sighting--dbe1a8de-c949-4dac-95f3-9d6af0c7179c", "sighting--6789c80d-58c2-406b-9814-af90310eeb2f", "sighting--bd288a94-9e48-47ee-b5bd-f1f0029c3ff9", "sighting--de746252-d434-4817-a7a3-4702dd8dc321", "sighting--bc5f57fd-459b-4202-8628-4fe9ec1e0c90", "sighting--c93f514e-98d5-4b8c-9834-f49ffc4dd96b", "sighting--9375d912-0bdb-4711-8537-7c1eeab6a149", "sighting--eae9ccf1-10fe-4a9e-9dae-c2b1cbd495ca", "sighting--62c1f44b-839a-485e-986e-499d812bc2c8", "sighting--43891313-b40e-485b-a9ee-5a390f942d03", "sighting--98b0d868-4776-4b73-a45a-046cec67ce3d", "sighting--67ec570b-374d-428e-92af-80ce9b803b69", "sighting--e35cd723-d93b-4fde-8ac1-27c8c7bdd52f", "sighting--c627d9b8-a41e-4a47-bda1-de9bc74ff8da", "sighting--3bc470e1-72f2-426a-9a71-2b79a1011e1e", "sighting--25232413-8525-4d66-b31b-b1deef828a76", "sighting--71cbf576-4b9a-4558-a70d-212609068de8", "sighting--c54bc81a-8329-4b47-a534-2e94cbd41dac", "sighting--51bd33d7-a147-4e27-8001-96f02ebe3f7b", "sighting--02d3566f-1928-44d0-bd4c-23b63bbefcad", "sighting--96188bcf-7519-4659-859f-ce67f4add552", "sighting--ba8c1acc-0ed1-4c19-8474-af7d3b6f48f2", "sighting--598cb2fd-1b17-41e5-8d30-f819409cbfd4", "sighting--57bae3a1-e07a-41e3-9122-32792e3723ad", "sighting--9d4aed7c-9ee4-4418-967f-66c3d9b1e60e", "sighting--80031e42-94de-49af-af65-331f5f528f28", "sighting--a09450b1-dc60-4301-9d9e-8dd778e3374f", "sighting--f93a19b4-f671-4e4f-a948-72347890d79f", "sighting--0d26cede-437d-48ef-bab0-ef8723414057", "sighting--803aa7c8-7984-411c-88c3-e423bc3c3d91", "sighting--8e320605-edc4-4f19-abbe-e8a4fc77a7ac", "sighting--c20a70dc-2547-458b-8e19-80f0bd9914a4", "sighting--805a3162-b594-4f52-ade6-13c8da731a86", "sighting--be123a7d-2ab4-4ba7-91b7-44b36ecab360", "sighting--1811cffd-029b-446f-be85-4df02767c5c0", "sighting--6e3d21f6-340b-4751-b646-6fec8fcf3adf", "sighting--e985c31c-9e0b-432f-9fc6-cbf6f14b0a95", "sighting--d0ee83b7-7809-4130-abf6-5bb6e75c0d29", "sighting--3c235461-a1d8-4310-8ac1-0058c47709ac", "sighting--03b1ba8a-1f72-482e-a197-32adbacda117", "sighting--fe5d6b8b-57ed-46b3-b0b7-541335058ff5", "sighting--79693560-a8f4-434b-a818-370dac9a29a7", "sighting--948fe8e4-5212-4155-9552-95937b1176a3", "sighting--2fc07428-1526-4fe9-a77e-8b7997491837", "sighting--da2e3af4-73cf-4fc0-9dc0-22a71a65b2b9", "sighting--07d6205d-83e4-4919-b47e-a21318695363", "sighting--d1399f3d-1d69-417c-a49a-16f056473339", "sighting--f458be4a-d77a-40ae-a823-adbd7ac00925", "sighting--73845737-69ae-4506-b863-b74aeb5d65cc", "sighting--a761b5e0-3070-41bb-9176-12a3fbb0a0ab", "sighting--b88e5dd0-d094-4cb3-ad5b-505b090ef257", "sighting--8d96b64d-da01-421a-b7dc-80e6278f27fd", "sighting--45719fa1-9efc-43f0-b863-29290a5d79a8", "sighting--03bb28be-4809-4df2-bd44-0d0fed618aea", "sighting--ae350f20-c7cd-4ad1-81be-a223e79d2c02", "sighting--b157579d-1f36-43e7-b53a-ea061ac878bb", "sighting--8ce7eb00-622b-4a9b-b39e-babc05606de2", "sighting--12f900d6-8398-42e1-9982-d3404b6dcf21", "sighting--63c0643a-bc17-4f50-b166-8a4e92663101", "sighting--be1bece2-9c87-4f77-8c20-a319dc89f84d", "sighting--43d3ada0-f863-4a00-b707-c45b7f53815d", "sighting--093c36e9-b5c3-481c-bc55-ddc21c954227", "sighting--8d7f44f2-8ecf-499c-9ade-b9932f2e554b", "sighting--9af1ad32-8425-4057-b0df-cb59e44481e1", "sighting--32b3eead-787f-48fe-98dc-402eb8b4962b", "sighting--ec8bdbbb-8b60-40d9-a472-cf6f9095f5d3", "sighting--2bb8643f-9b2f-49c5-9222-a72909f45155", "sighting--3f9c7a81-972d-4c39-bdca-46e976f066de", "sighting--ff620f27-b5db-46c6-9326-111b55a4d65f", "sighting--8fe42c75-d2ae-4eef-b26a-38390156587e", "sighting--f2abfb49-9fac-4a13-af04-b68b23d86b11", "sighting--ca39c166-5ba9-4a0f-a4ec-a46d24b1244c", "sighting--c024900b-a293-42c9-a05e-acc93b14fba2", "sighting--4df7b740-f2f4-4f75-8bd2-b67109729d19", "sighting--09b9623b-c891-43af-93c6-93bfeb8b7da0", "sighting--a935d0c0-35fe-4b71-a36f-d6340458785d", "sighting--af263e7c-b0b2-49bb-8f5a-ddc11169db6c", "sighting--8c4067f1-16c6-454c-a8d8-2e0e9f68785b", "sighting--90c99490-a096-4567-8f05-b9db4e47ea66", "sighting--23f23b7d-57f7-4dda-8b23-a3a1ce2f3222", "sighting--5c02996f-4b5d-4d1c-97b9-9fe73b96750f", "sighting--ebbb54a5-d475-404c-98cd-ad074b9c9fb8", "sighting--e31de806-b3bb-46b2-bbf7-5377f9244f52", "sighting--4e481421-0d37-4795-b904-11432e071a02", "sighting--84f493ab-ad22-428a-963e-c141502ec82d", "sighting--621e7686-f84b-4e16-b81d-8babe235b7b9", "sighting--c82d3654-baf2-47ea-a8b0-09bc798abd22", "sighting--90acab74-c919-45ea-b76a-31be547e8f63", "sighting--0fb27059-dbc9-4b2d-b7d2-527ae5673348", "sighting--c32fb7f0-8ba3-4229-a7a2-4e3957189e40", "sighting--3c2ced92-8777-4a10-a37c-39733ffbc7d7", "sighting--65ef0beb-7b42-4a75-ac53-71fffbafcc53", "sighting--0c544473-372a-4dc3-9cab-49cf62edf799", "sighting--74e2a34d-9f3c-4c0b-b134-61ffef194680", "sighting--715d801d-e579-41c3-8977-6bcc1fc31a4f", "sighting--e09cd2ca-8608-42b2-9f78-8b1cb8abdd1e", "sighting--64e1b6ef-1d54-4c6b-b1b8-e3cbfcf89e0f", "sighting--044ef7b5-4c0a-4039-9785-2d8a36b323ce", "sighting--314612ac-e5c3-4abc-9118-21c7cccfc2e2", "sighting--6fac8d55-7dbc-4a18-99a9-6eeb65094c9e", "sighting--4d466263-933f-4ff4-99dc-fddf174a106c", "sighting--ed638d17-b1d6-453b-a6c5-99ce1cbfcc49", "sighting--2eee4d54-31de-46f5-8234-338296364fe8", "sighting--a2eb9a01-6969-4fe6-9af5-6fbac5686d05", "sighting--1c68d4db-0d8d-43d9-8dac-a39e7d143292", "sighting--1d0a9971-e959-4773-8359-39187a334a69", "sighting--8549112d-cbcf-4cd9-a00c-8dc23427b24e", "sighting--20c457dc-d215-4c0a-a175-962240159d26", "sighting--fc22a382-87f7-4838-8993-3a68092792f5", "sighting--fc187b07-6829-4991-9fca-3acdaee685e8", "sighting--8b723567-8c01-40b8-9fe3-6341f4db606c", "sighting--63fa36f5-0c9d-4e28-aea3-11c8b427f5ea", "sighting--2976bcd3-f249-46ca-a995-f70eafde7513", "sighting--261bd64c-5c4b-4df7-b042-0145071d9bf6", "sighting--30f9191c-cefa-422e-85eb-d40a1455a068", "sighting--d8160519-b8cf-41fc-b42c-8ab00ff8b8fc", "sighting--382b2ff1-91c4-49e1-8c2a-1cf009839fde", "sighting--f78f7646-4b0b-46d6-adc2-7698f731afb2", "sighting--f80ef607-0d4c-4318-b4c3-d7c85aa893b6", "sighting--41de8e3c-a2ea-4a53-9fa1-93a47dff2777", "sighting--0e995f9d-59fa-4fe5-858c-3b1eece14aa4", "sighting--bec553bc-385c-4596-b7c2-72fd2fdd7522", "sighting--ed460d9c-c45c-42e1-902d-2c76d9c04681", "sighting--cab7bec5-cbfc-4ac1-8ee1-6041b5c2daa4", "sighting--790b2273-5309-4ea2-ba08-3da269820b59", "sighting--7dd4d1a7-bc19-426f-82dc-64d1cccc48c6", "sighting--6c88d10f-1280-4907-b3a2-519139af7051", "sighting--55193e3c-994f-4d96-948a-737f8e2b81f3", "sighting--82bda97b-8af0-40ce-89b9-45cedab156a4", "sighting--4737954a-6031-4b75-a3ce-d93534203314", "sighting--f0cf7fd3-90ba-4dd5-9f3f-5e96720ee72c", "sighting--d155bea1-1f02-4e18-927e-c96256b484be", "sighting--b2503b2d-f927-4df7-b9b4-2a139f8a653e", "sighting--a42e58b4-f087-4425-82d5-3d983b8dd2fc", "sighting--aac76c17-6536-46c5-9e0e-86948149308d", "sighting--eea61655-1343-4246-ac6e-5d2e8378dbf4", "sighting--21767264-1b7b-4ac9-ad90-345f3b6fe7f8", "sighting--96bc5ead-f6d9-4ebe-9f36-ffafb4c3cf71", "sighting--bf36355c-441b-4326-b959-c49821795623", "sighting--bef77378-bf24-4658-9e1d-4a52da643c42", "sighting--53f910f9-e167-43be-a7d8-840f8f6fad8b", "sighting--0ac3c26c-b81a-4c66-9a44-138d1c68b14b", "sighting--67b41d67-41fa-491f-931e-2123035873a4", "sighting--271c74f7-bd1f-4989-865e-88d5cadcba7b", "sighting--50ab7367-0da0-4ccd-8088-543ba8379b30", "sighting--5e51e654-fc12-4901-848e-735332224287", "sighting--5c0e8aa8-5070-4ced-8e96-9c739b41c807", "sighting--7b4d463a-ba13-4197-8d62-801425509332", "sighting--5fc469ac-c720-4478-bd79-cd7593bbfbb5", "sighting--240f2be7-92c5-48d7-b7a9-bf3515d0e024", "sighting--2d0ef117-83e0-45e0-9155-c92b252c1967", "sighting--aec28fdc-27c0-417b-9e02-f79beed780a3", "sighting--336ad57c-5558-481e-9ffa-037724f25d9c", "sighting--b34a9524-f4f9-48b1-9b82-ae8a84e48181", "sighting--4dfc55aa-266f-438f-87a8-eebcedc78705", "sighting--72ee218d-e71f-4397-9779-1951c35fe460", "sighting--5af7096e-beba-48bf-a972-5b9528edaf8b", "sighting--5ff4e441-4f8c-4be4-925f-4ac6b1104466", "sighting--e0c728ce-258e-4995-a3df-942471b3e0fe", "sighting--d7ccabf6-9d53-4609-8cff-1caecad721c6", "sighting--23f3d106-fbf9-4736-91ca-8f466faeba39", "sighting--c1a8c032-febd-41d3-a61b-625ebf226426", "sighting--b5e0b849-fcb3-46e9-8e8a-ee548e52da7c", "sighting--f45aa8dc-298e-4daf-aa6d-a4ac47e584ba", "sighting--109b516b-30dc-4b90-aa1c-7457714b9d5e", "sighting--549f1eed-ebd6-4a44-87bd-ada4d76619c1", "sighting--c5d378ba-c0c5-4d22-8e02-0f9b0fefd4ef", "sighting--79e8f936-2c6a-4dcc-a859-406688491d80", "sighting--5c98ec87-a8b3-4ff8-997f-f111251cf833", "sighting--30fb0f15-9cc9-4942-9aa1-f85b097cfc00", "sighting--6ca405b3-1278-4ffc-a8fe-073609a0f7cb", "sighting--55ce306a-65ca-436b-923b-144ae87f7a00", "sighting--3268ce50-882a-40af-a28f-11c65147f33d", "sighting--ae192d51-ec8a-4996-95da-ca1b984bb1e2", "sighting--ee6d5253-573e-4c11-98ae-cd674b1eed71", "sighting--96d8c046-2283-4885-af22-76c30ffbc05e", "sighting--3f925963-96c9-4eca-924d-fc1c6ccc349e", "sighting--2564ec8f-4c37-41ad-b840-6efd7e8824c9", "sighting--dfa92862-b5de-462e-bf6f-707be70e026b", "sighting--1e746e76-75ff-4fa2-a517-efe6f053723a", "sighting--2bbeadcf-188d-4f41-9471-56534926f38b", "sighting--8d355a38-a57c-413d-abfd-16c994409596", "sighting--fd9a21c4-78f3-4e10-81b1-a8017e48ea81", "sighting--ab69f987-bf47-4822-b05b-1f09595c70fe", "sighting--19fc76e3-2ce3-4692-9966-e32369306006", "sighting--4f39f9b9-b20a-460a-b28c-73647dc9dc1e", "sighting--5ccc0695-3342-451b-bb56-8db0e8a40277", "sighting--f5853eff-7e80-4d13-a99a-95c42c67fa49", "sighting--6e673f91-a8c3-41a6-b60c-4fd86280f3df", "sighting--1b4c1d49-ea58-4ccb-919a-540a56d9acb7", "sighting--577311bc-d409-4cc8-a79d-c3f2bd990a04", "sighting--aa015889-a878-436b-aab9-3f86e7584aa0", "sighting--7f92b6a6-bb0f-43b0-b63a-53837e3a6c47", "sighting--7e0ac53c-e751-4519-b710-76de8ac9f152", "sighting--b3dc07c8-0ec5-417a-a764-ef24d9672c4b", "sighting--7807bd9d-e752-4e6a-b37d-1dcb71ef7551", "sighting--914fb22c-491f-4215-9bad-d4234b919d89", "sighting--3bdd8bfe-cfd5-4471-a1ff-b6fff2ee606b", "sighting--8dac7f23-ec7f-4cbc-b39b-f02c57575ad0", "sighting--ae799757-5e4e-46f8-aa08-eb10a771e154", "sighting--a2f37ba6-65e5-4f05-aa8d-b5805fbf3488", "sighting--ee4a36a5-66ff-4710-a4ba-ed3576018733", "sighting--07158cb4-882e-4762-bd66-2fc5531e305e", "sighting--3dec89af-6930-434c-9d36-38a6c606bfef", "sighting--e9665ce5-9ccf-48b1-9d27-3559d75c6c8c", "sighting--0ffbac9b-b79a-4add-a27b-1e0c282a1280", "sighting--5c87d1ba-33dc-48f7-a244-0a28e39e77fb", "sighting--634e3131-f779-4e2a-b94f-a3c96e086768", "sighting--c5cd22a4-1e16-49f6-ac64-ffbeba57bda4", "sighting--dfb9280c-3b47-4b36-8b1b-129fbfc9a990", "sighting--4ef474b2-2220-400e-aa36-9cc1c6ce9171", "sighting--63f7b979-d99f-40ab-8ac7-a7c0aa41ae76", "sighting--bba76a61-417b-4fd3-a1ed-880415fabd7a", "sighting--f0fd66c4-3c3b-4047-824f-96cd76608f59", "sighting--33723120-f1f3-4380-b03b-3057961b7ceb", "sighting--8b689d41-f3f5-4540-aba1-f071b8b0d7ad", "sighting--0b2828fc-1221-4ff6-8d03-1fafde092d42", "sighting--fb1e11bb-9975-4c1a-af90-bd150347bd9f", "sighting--b0c50eac-04b4-4a95-b365-faeb11d312fe", "sighting--8ba9076f-350a-4476-8b44-ab6abcdf4b57", "sighting--782dab36-7c30-4acb-b6bc-daf3c32cb9d5", "sighting--fca88717-a02a-4fc9-a7ab-860c9788d364", "sighting--da795262-6f87-4125-88c3-c1ef9b84420c", "sighting--b38ba1d8-62ed-40ac-bd24-4afdee04336c", "sighting--a7d08440-342c-4b03-8e00-be8501a639b8", "sighting--d3311b2c-5d01-4da0-9908-7312e8183b9e", "sighting--4c43186a-684e-4f21-958a-68de5fa78fdc", "sighting--843c3fd5-22b0-4c24-a37d-b136922e2fb4", "sighting--829c5d12-6cf1-4d54-a18c-b90e57b32f31", "sighting--c28fab88-ba3d-404d-8404-820d2ac150c4", "sighting--6f5bb64b-ba6a-4337-ab0e-5c035f83678f", "sighting--a7de262c-5a78-4b0f-870e-a802c0eb00f6", "sighting--60ed6d10-960c-4072-aced-d4f999f98b7c", "sighting--332824a9-3c94-4323-858f-b261807c7ac7", "sighting--1e4c173d-8725-453b-a528-0b9f795df998", "sighting--f80f93e7-de23-4f6c-9d7f-c60363a231a3", "sighting--a46dbb8c-e9db-4850-9fd3-923a607dbf4f", "sighting--f8108d19-c530-4b2d-945e-3566875ce27a", "sighting--6b50a308-7fe6-4e0b-b4ac-0daef1c1eee6", "sighting--43b574fc-949f-43c5-b573-17ea3b973e9a", "sighting--842706a2-c42c-4071-9c23-2e62dce355e1", "sighting--1637d089-bc63-45ff-a6b6-ef8af205d907", "sighting--7d158a64-9f37-4470-bad3-97207728bf6e", "sighting--82a5e59b-bfa9-4e4f-8b6d-084243bcbd57", "sighting--56fdf3c6-f998-45c1-9099-2b2ec3a67913", "sighting--8ff2ff90-56a4-48c5-8cab-55e45fbd6286", "sighting--50b3301e-3ac9-49b2-afa5-50d3518f611c", "sighting--3a302a92-570c-45e2-87d5-95b6d2a772b7", "sighting--71a96cd9-8652-4f42-85ff-f572a2d7686b", "sighting--e2f40047-cd5d-4d5a-bfe2-a323af8a3443", "sighting--fcd15451-73c7-42ab-8998-57a824d3007d", "sighting--8dbe52fb-1d26-4e7e-bd97-c781929b714a", "sighting--ee152963-8cbb-41fc-88d4-3a6c4ee155bf", "sighting--8bb7c2b2-d5bc-4643-99ad-2c733f0f67e5", "sighting--94a1b805-6b5b-4436-b745-402d3db4b900", "sighting--dcf39f54-fa69-4660-9594-6ceb721f724e", "sighting--1a0d2489-d70e-4930-89a1-faf3e1fb8a0f", "sighting--72a82c28-8958-49b0-be41-8844476c9f39", "sighting--3061466a-b094-4ece-8595-adb9c86177b5", "sighting--b7615155-4e33-425d-888c-df3e783f7e6f", "sighting--8791fffe-51f4-4cbb-9c22-a57c448c6d39", "sighting--d3c85022-0913-4c81-954f-767814d6b89a", "sighting--8f25e08d-cd1f-48d8-a952-e89bb01103fa", "sighting--1b78df13-2209-4979-946b-34b779cc2654", "sighting--33afe7af-a9a4-423d-8b73-b044e91a60da", "sighting--46ad579c-86da-47b7-a504-53089ce84993", "sighting--4efe71fe-de55-419a-ac28-76ba788cea93", "sighting--9a177fc7-0c9f-475b-b17a-3a6d7c591f68", "sighting--e24cf3d3-f6a2-41a5-9f0b-723a67871550", "sighting--6106c628-a922-4425-ade1-97b6f2f37eb5", "sighting--4b13aea0-5380-4273-ba8b-606a3c6900ca", "sighting--991a2ebf-6673-4043-9d6f-af29cf058b85", "sighting--5073e661-5398-462d-b173-b7bb21ff371f", "sighting--2a6f2c5f-437d-401a-893c-f9568b2aada0", "sighting--b8d1669a-b9ba-4148-ae6f-2f07a3345ac2", "sighting--498cf276-e6ed-434d-9593-c1906f727140", "sighting--a7eed350-9fdc-4d20-b123-f5f92c1f2073", "sighting--cff3626b-eae2-412d-84c5-38c6430a38d0", "sighting--48f1beb5-5c76-4148-ab99-3ddc83f4d6dd", "sighting--ef6174b7-ba6d-40cb-bef3-8640f3062261", "sighting--73cf3652-223d-409c-b403-32b924a4b19e", "sighting--8006cd1f-9c53-4d08-8955-839ff88ca2fa", "sighting--16d24b66-99d6-4ac2-835a-4b30f7e182b0", "sighting--e30e47cf-473a-4eb5-bd15-740d2a3752c5", "sighting--40119353-7749-4f7d-821c-658914df5e4c", "sighting--970b8522-101a-454e-b8e5-445057c5ed12", "sighting--0215b044-8cfb-4e1b-a2b2-9de9aaab71f0", "sighting--580be348-934c-4fbc-8a11-62885b3841e8", "sighting--f224e72a-aa87-49b1-8b93-2196651ff686", "sighting--bf232615-3526-44fe-9d62-f7ca2b22a898", "sighting--a0466893-681b-4104-adaf-d738edf5151f", "sighting--5ec188ca-b4f1-48cc-9751-829e6d082017", "sighting--2a9ca1ba-3918-45bf-95e5-7be64b919b81", "sighting--1e9b001c-138d-4b82-8b1f-95ca9795094d", "sighting--305724ea-90c3-4f36-a403-38ad7ec4076c", "sighting--a3f27c81-c8cf-47b5-9ad0-190947f2a6ad", "sighting--66a94c9a-91f5-4d11-bd7e-3752aaa92407", "sighting--6ed0c0a2-dce9-4f08-ade7-78f7f79134f7", "sighting--17242ae3-d41a-47c6-8cad-1faf6e29a37e", "sighting--21276780-808a-4956-bcf4-2b9e6aa29706", "sighting--9d696271-8afd-4119-a6d7-4674ec51dce3", "sighting--2abebaf3-be33-4907-8030-d4465d75ed7a", "sighting--f87d6973-16e1-41f4-89fd-c0eaee1459d6", "sighting--4dd22f81-f03b-4398-aaab-62d1a64975fd", "sighting--9ccd8eba-58be-4715-8b1a-423372ca9e81", "sighting--934760d1-d1ce-4f70-9eb9-e6d4f6000e43", "sighting--71125d86-16e7-4255-97f5-e2d2e1fa480d", "sighting--e1049265-01a9-44fe-8419-86ff6c105730", "sighting--0bd69b42-b711-4a8e-8ba9-f49f93ff1cd3", "sighting--a4fe4b5f-5db2-44f3-a170-927577f553f4", "sighting--e03f9f0f-4522-4694-919f-4fab86d05ba2", "sighting--0e20b7fa-85d6-4372-aeba-0316b8bf34c0", "sighting--642cab0d-92a2-4614-a1b4-405c3c92bfa7", "sighting--c49b5943-ed1d-43b2-9600-347713fbad29", "sighting--8b26b0f3-25cc-4930-bcbe-72fc9d3b9b3e", "sighting--f4290581-de22-4b3a-9d31-86b457d93923", "sighting--b2fb608b-7597-4b1c-95ce-6ccc1dee3b8f", "sighting--212227e4-8eed-4808-813b-ca0425896db3", "sighting--15f87f2f-3b29-4e19-99ef-28b8176f518f", "sighting--527e8a8f-835b-4ad1-9b82-37a7b1632a4f", "sighting--add580a2-7f91-450a-aaa8-e89c5181b276", "sighting--e265b303-5de8-43ad-b317-480278e82a3c", "sighting--8ff0c108-e86b-4d67-bc38-f16bd2083695", "sighting--dc0be1a7-c236-4b49-9c53-1bc74db5e87d", "sighting--9f4b1b43-4add-4a58-86ea-aab172b14d8d", "sighting--6df8f40d-4eab-461e-9260-237030dd1367", "sighting--7bfada23-a7df-4208-85b1-1d5deeb4f253", "sighting--26f21459-bae6-4533-beb8-10706409d71a", "sighting--58404b4b-5213-4bcd-96c2-432a34303c15", "sighting--7f5a2708-33e8-4245-b68a-b3ba60beefce", "sighting--c73e963d-162b-46d5-9f37-9864db3faffb", "sighting--978225d2-6cb5-4d13-a637-ce86afa41724", "sighting--ea17aaf6-6cb1-42fe-9269-2a752282ce13", "sighting--51a8cf9c-8c8f-47fb-a587-959452c19b5a", "sighting--ee11718a-dfe4-4aab-be93-0a6609d6230d", "sighting--da3f0a61-1dfa-485e-a189-65613fec8fff", "sighting--179f4a68-c7dd-42c7-8d28-25e77a869bb6", "sighting--58bca1f6-3600-44be-b313-e7a15dab7230", "sighting--b8a7ce78-6064-4362-b5c8-b50314563ce4", "sighting--f94c4032-970a-4d04-a910-3d1963e014fe", "sighting--59b707b4-2778-4580-84db-3c68334700ef", "sighting--92c820f9-c19f-4a70-9864-12e4410793b4", "sighting--3713cbdf-6093-4c22-bdb5-4fc21bd95fad", "sighting--e173fc9c-ac23-4cb8-be90-d31288ee83b2", "sighting--6827cf83-6437-46e4-abb5-8c85eb3ef37b", "sighting--67409391-9725-4db4-b799-336cf85e4780", "sighting--9982ba14-dda3-4c67-b79d-ea03be878be9", "sighting--41c1eede-982a-444f-9df8-799815cfd9e6", "sighting--6a528b89-ddf6-4757-811e-e8a49fd333d6", "sighting--40bad386-98b9-42cd-8cf3-83ce22363ef2", "sighting--ad585639-4c18-4038-bec5-0c2c233d9e8c", "sighting--0e0af7f9-f77e-4e50-93ff-d624eb60a6d2", "sighting--0a4df053-a0f9-4ad6-a214-541e8a43257a", "sighting--738ad6d6-5002-48a5-9704-4337aa4934a2", "sighting--1bdd60d9-627d-4d5d-95a3-fbfb47da65ee", "sighting--62ec25f0-5495-4a49-b5f5-771dcca0ef8a", "sighting--bdd26fd9-4ebb-4cfe-b9c1-377e141a221b", "sighting--1238d3fb-1aaa-4fd0-bfcc-2b93cd60c780", "sighting--c5cc3206-690b-48f1-b82d-8570742d8579", "sighting--4deca94e-4389-4428-84d7-886a2f724ac9", "sighting--229c6c47-e9cd-4d99-a37d-81ed3fd5d4be", "sighting--2d55db19-2b21-4f5f-8bff-b83535a462f3", "sighting--3b956701-9541-4a6c-a77d-6b1c7c49c47f", "sighting--fcec21b3-db33-4336-a10e-9b57e8a3b117", "sighting--774f7943-0992-4c0b-90db-3ba4212bf2ce", "sighting--bed28499-2078-497c-b139-bd530c61033e", "sighting--d98ff7cf-6347-4ae8-aa5c-4a9d3745c8ef", "sighting--f9ba2cc6-2df8-458d-8ba4-b5811a3b797c", "sighting--f6abfc69-36d5-479b-882b-7c922d2d8227", "sighting--f2fb269b-c048-455d-a6dd-54b80141f7b5", "sighting--8b6857cc-21a8-4989-ad8e-b7fdbe8f1999", "sighting--a45581d5-930a-474a-b677-6efcd660b58c", "sighting--53844996-328a-45b9-bcd3-5473d85666c5", "sighting--8e206782-e810-4489-9dd5-cb909a835a45", "sighting--bf7cf349-3583-401c-9f12-6f86aca23fdc", "sighting--84fef853-c377-4657-936a-d3838626e003", "sighting--814a427c-db20-4f7c-99e5-3daa995ee611", "sighting--79f9e167-4145-4e78-88be-d824b137000f", "sighting--29277f74-4da6-4791-8567-5a620bec35ad", "sighting--7014466b-e1d3-4ba6-86d8-92d7d6c1a7e9", "sighting--f722c31d-e53c-44a6-9bdc-64967c3fc3cf", "sighting--d6589241-102c-405d-810f-abdd3fa2483b", "sighting--62bc6b01-8446-491c-8c01-4cedf79df994", "sighting--00ba1093-18bc-475b-81e7-e2f29e423f66", "sighting--d4a4fe09-dc62-455b-9812-4fafc3860135", "sighting--1ea18877-58cd-48a2-a123-d70b9e2a5fc0", "sighting--3347efdc-ec46-4f00-99e3-47d957568c72", "sighting--e3f1cd5c-ca69-438c-88e7-c992debb2938", "sighting--ba6b35f9-6696-4bd9-8d29-85d4e7eaf1b6", "sighting--0ec7b451-49ab-47ab-ab44-1bb575ccd242", "sighting--ba640a14-9fa1-4b66-8d55-159fddb0e4ad", "sighting--bfca06ae-2f75-46ee-9636-1bacf608e327", "sighting--a26d15e0-5a5f-48a0-adda-36fc2f8f10a6", "sighting--5bf38561-f4a3-4796-931b-98cfb26de100", "sighting--91328b42-09da-4d83-8ad4-1db19db852a6", "sighting--a1dacdc2-3a75-4680-81d4-b189c756c596", "sighting--9f00a310-617e-40fe-b6d3-1a9de328b37d", "sighting--f18d2fbf-c0c8-41f0-889f-fd17402def0a", "sighting--aa7785f5-7c00-4ce0-8c35-2fe66807001e", "sighting--07f3495f-4884-4968-b252-298b3ef937c7", "sighting--91ff8583-3c16-4f38-a391-11ef32a113a8", "sighting--c3184b4a-2fe3-41c2-98de-19a4d9440230", "sighting--e6b61d40-fb4a-4dfd-a873-fcd655d90a96", "sighting--322a0dc8-3c65-4344-b3ec-f2ec6fe8e5af", "sighting--050b5cb6-dcde-4093-a8ce-aa158edf923f", "sighting--0993bddf-e97d-45c2-9b7a-3859423fb5d2", "sighting--501b548f-b567-4258-ace3-ea17ab9a252d", "sighting--2a908d3f-1216-4be0-b672-7ada8e87025f", "sighting--ab8d320f-b5b8-4e6e-9184-d2634d4661d0", "sighting--187e118e-7507-4cf4-8b47-c7c7d8c27be1", "sighting--7fb02ab7-9b89-4363-bece-c53e72d97b10", "sighting--e4be80c5-7400-443b-a899-9eda842b2e90", "sighting--ba4df7bf-dc3d-4adb-8c3b-e59f304ea59b", "sighting--127754e5-1129-4381-9eb9-174490c411c5", "sighting--9dbd4b17-76ab-4588-b77b-0e6aee978cf7", "sighting--7aed8127-b88e-4de2-a151-407a8a6392ac", "sighting--df848a02-8b98-42d2-ac92-11017cfb5e75", "sighting--0286b3f2-6d95-4c1b-b572-ef2db7d0d836", "sighting--1cd52530-b39a-4cc4-b209-b8334994dd72", "sighting--7de90050-cecf-4de5-86ff-91f66fd3d6d8", "sighting--3e631ffe-4a5b-49b4-ba63-be9af6ee4a12", "sighting--83a879c7-72dc-4555-bf8c-864afb354311", "sighting--cce3f78a-e5d8-4ff3-a20e-fefa9843822e", "sighting--a204659d-ba85-48ab-a1dc-3561a6a8cd15", "sighting--6592549a-c283-485f-a059-245f1cc5e88a", "sighting--d120f30e-4ec5-424d-ae01-2761c55c3852", "sighting--764f0e63-b91c-40c3-b78c-6034aa19af17", "sighting--edd30f0d-eb00-4b2e-b71a-3a378dd47770", "sighting--cacac494-bffb-4971-802f-4b664b70f830", "sighting--ecf61778-7b8b-4267-a8db-f9a88f4d6428", "sighting--7d444f02-a020-4e97-8ecc-e2d9dce7f847", "sighting--444870b2-ddb3-49cf-8f68-a5404d0e5a91", "sighting--75b633bb-05de-4d88-a322-17b1f7b76886", "sighting--033d18a0-8725-4cca-b9db-91f01ed5744f", "sighting--71416710-f8f3-45cc-abe8-dc83aaaddd50", "sighting--7d1e70c7-1e3b-482a-a207-e2ab70c80dd1", "sighting--101595dd-efaa-4670-b883-91b121901a0b", "sighting--cce182ff-c59a-49a6-ad31-f1e6da2ba99e", "sighting--8c7bffe1-2252-4679-8f4e-8bae614aed36", "sighting--39dc6086-463c-486a-9743-15c21ee57dd2", "sighting--da3505c0-ec73-488e-b767-c81dcd65442b", "sighting--ff2c480a-6ff5-410e-bda7-593ab9e8b59a", "sighting--32fe69ca-96fc-43c1-952a-780489ead96b", "sighting--80f04602-43cb-4e13-a773-629ed6050849", "sighting--b991b449-8e1f-487c-a693-5992a3621696", "sighting--9698fdfa-3f59-46fe-8423-1ce8e58449b0", "sighting--f65a5b4c-111f-49ad-b996-e7e461df4e7d", "sighting--49016d6f-eda5-43b7-ae65-a2a93c48e200", "sighting--a906949b-9621-42df-9027-c65f132fb033", "sighting--d47cba00-0582-49fd-bd3f-4f836d700997", "sighting--fd939d38-0289-4821-a200-7ce987f83c87", "sighting--cb3fa73f-f421-48a8-bd8f-f85e3a2484f3", "sighting--74fecf5b-2944-4097-b565-6355ac13a935", "sighting--02871f1a-4c80-4aa0-8260-016ec1670dcf", "sighting--01248b88-138b-4d4d-ae54-19c7e088bc07", "sighting--7889fb00-9625-4370-97e5-5d8b01b86f34", "sighting--93eaa6fe-dfb6-442d-878b-bcb04f5473c1", "sighting--21707840-8cfa-4c5b-84f9-323d3b4d3b68", "sighting--6523cb7d-2c80-4f59-9698-0433a0959395", "sighting--7b3d02b8-4eb3-427b-94ee-b956b9776845", "sighting--25421449-575a-46b0-aa9c-1a168b0a562c", "sighting--7e784773-7f4d-4729-af92-2fa8b45b8344", "sighting--79877615-8b97-40ba-af3e-c507dee59983", "sighting--24017cbe-d17d-48c2-8497-f65f4bda07e0", "sighting--00275723-1935-4a22-bea0-db05be29b4d5", "sighting--adba3993-09c3-40c5-b712-b797506d45f7", "sighting--be9a4805-8a2e-4e70-9ea7-01178dd2a009", "sighting--2025ae63-9e8d-4bb7-82f5-93a8ba3756d7", "sighting--823e816e-01ba-4478-a304-218ba39e1719", "sighting--fc17d114-cbac-4bdb-84ec-979345417f66", "sighting--11590575-843c-4e95-9c01-17bcbfb7cb33", "sighting--817cd3ca-87db-4c3f-a903-9b542d6f23ed", "sighting--32652082-3718-4907-bdd4-c88849292eaf", "sighting--6b02e1dd-d51e-4c70-9f7f-1061051787b8", "sighting--57bf15ae-9901-4cec-a23b-482349009d1b", "sighting--141420e3-305c-4b0d-a4bf-526524ad2563", "sighting--be16fa25-8a8d-49aa-ac13-a1682b99093b", "sighting--4d0d03b6-597f-402b-88da-19958253e4e0", "sighting--eff5fb50-51cc-4087-ba5a-d10892441c47", "sighting--491e90b2-39f8-4ae2-9950-66ca61f7e25a", "sighting--36f94619-16d4-4f02-85e7-ffa3cd2180bf", "sighting--89143428-fd7d-4726-90e6-dfaf59b1e986", "sighting--e07ff70f-a150-409f-96f1-2add0685e61a", "sighting--ed54d159-2ca7-4f3a-88dd-1a82baacf1b4", "sighting--4d445e50-90f9-4c26-91da-150201d6ea50", "sighting--73fb117b-705f-4799-aa10-5a27bfbabc1a", "sighting--394d76c8-5d35-4998-a736-12abf93b85e8", "sighting--6232dbcf-0739-4f55-97d9-c0101be5732b", "sighting--e2d957a6-290f-4020-bd24-d373947f2dc5", "sighting--c1d8aaa5-725e-484b-8a3d-15b4d9537d21", "sighting--2b9c69b4-1bf3-49a0-8d2d-e81e00b5569c", "sighting--ffccaee0-f626-4bd9-a0cf-b299f3c6c306", "sighting--0fe7be12-b3b5-436e-9e74-1d9ae20036ac", "sighting--d11c36ca-6086-4eed-9d9d-1a7e7a7fd874", "sighting--3119fe84-5082-4762-932f-af796d4e07d2", "sighting--c00eadf4-b716-493f-9356-c12dbe339644", "sighting--d219c5f8-3d26-4ab3-94b3-072c0818856c", "sighting--837a90d0-d69f-4e55-851a-7c6c81134d73", "sighting--06de03b9-97c9-4b4b-a8bb-0e51b4fb5b24", "sighting--7fd54237-228f-4446-9dd7-bb5d4a42faaf", "sighting--994d0a6d-7bda-4bf6-9495-a93221f3ae20", "sighting--6b6592dc-e805-4759-a8f7-7caf60ffb7bd", "sighting--2c3e2327-fe5d-4fcf-a1b2-ef5ecb50ac4f", "sighting--da234382-1d1e-498c-911d-906ec70c6e08", "sighting--d793cca4-53a0-4572-aad9-df143f96bdfd", "sighting--6a3754f9-63c2-4ec5-8af6-5220a73cfb00", "sighting--f1f62e98-054c-43b8-8f21-b3b2cacb1e60", "sighting--a454e785-5c28-4080-9633-7176f9180948", "sighting--da7b7c6a-f6d7-48ba-aa33-023a8988c51d", "sighting--5748a019-16fa-429b-81f8-5ec3907d0cf0", "sighting--3d350abc-c0b2-472f-a8c4-38371ffbaf55", "sighting--e0514e3e-c2e4-43b4-bb42-5f9082a5c269", "sighting--72821a3e-480d-40a5-9208-8dcfa5fc5ee4", "sighting--0913aa38-fa0b-4d36-9229-bb7cf0775ae6", "sighting--c1407a8a-a8d9-4f3e-ac64-479c967e7699", "sighting--9b344748-8336-47f2-8fbd-9e5386bb8e0b", "sighting--d2a374fd-fe77-473f-8fd6-aa5876124275", "sighting--2d28abfa-425d-4a5b-912b-987b824a9317", "sighting--ebfe56b8-ebc9-4fb1-89d4-ce5554308b9e", "sighting--813b54a0-023f-44b2-97d8-7573ebeb6376", "sighting--a9fd617a-540f-4880-a703-9c26e95d41f9", "sighting--29f044d3-4b6d-44ee-ad84-d224e6f87937", "sighting--ee0b3069-b599-4bb4-a332-996651292e84", "sighting--13f0cac5-abd6-491d-8260-94f7538b66a1", "sighting--3166c1d7-d89f-421a-bca2-5ca9b0da52d3", "sighting--312dd675-7ed2-420b-a153-aa4564f29081", "sighting--995d8226-3d0d-4f9a-8a80-de3cbff6578e", "sighting--0f05e83c-8e16-4616-96de-5c1f238af4ab", "sighting--74b8019b-c601-4636-a212-f50258aeed84", "sighting--5f40a205-f5ec-4b67-b6aa-37f1765ec7e4", "sighting--080d0b7f-17be-40d5-bdc1-8717a2949be3", "sighting--55b32f6b-b352-4cff-a9a2-8561d2de8a02", "sighting--aa26d4a2-df86-4b90-9649-deb2529aa795", "sighting--05fe53e3-70d3-4c46-be06-342037c6338b", "sighting--4c79d10d-f5ba-48b0-8b03-79237ee89b00", "sighting--16211a3b-c45e-4a80-9f88-27c112f6638a", "sighting--b864ab02-8abd-4730-afdc-c6db9270d973", "sighting--5065ed42-2b14-4185-8a99-97d6db66f34c", "sighting--b5314d9f-aceb-418b-b588-80b0b40316db", "sighting--ed079a60-d97a-4b3d-ac72-0615f72cee56", "sighting--651a3a51-5eb5-4a2f-a519-4fa517c7628b", "sighting--b680ea14-5224-4909-903b-fd1a6f7caaa5", "sighting--432289b3-5bcf-4e84-8afb-62c3dcf87c87", "sighting--314cb58c-fe2c-4b11-8359-bb57d04f400b", "sighting--657eb6e7-03b5-4c1e-a58e-10762f66286d", "sighting--a43736c2-cf6a-42ff-8037-e0b6e135362f", "sighting--5b5c3432-ca37-47ea-a2df-d4cc61ca61a5", "sighting--da2b4ba1-eeb3-4a84-b232-db1d89fc742d", "sighting--856ad7be-67f0-4c7b-b3d5-473ec08bca6f", "sighting--b2fd616e-2541-4232-8881-b3e54bed5d4b", "sighting--20c9b1cc-426f-491c-8f71-2a970d5c34dc", "sighting--10609581-6507-49d0-a146-c3e129e7ec4b", "sighting--abc42467-d684-4fc5-b39c-77a7bcd00a89", "sighting--b7e3bf72-581b-4c86-96d1-b80d02645670", "sighting--737ceea8-56a9-4a1e-8b74-509fb38e79b3", "sighting--19b5e5e0-1a41-4525-8bef-3a50f9d6899e", "sighting--7c756805-fa05-4c3c-aa09-8b7dbaf996be", "sighting--15ea8a05-1de2-4f26-b061-cedddbf4e6de", "sighting--7ac94659-c548-4bbc-a42d-f40ea1e09a3f", "sighting--1ad052fc-2ef5-4e10-8aa9-47c63fa35998", "sighting--564f02b7-6467-44ff-aaf5-73878bd712f8", "sighting--de4e84a7-bbfc-4dc4-a1fa-771a5162e2c6", "sighting--75306140-ea52-4fd6-98ba-3ebc67929082", "sighting--9a131325-9232-495f-91cc-b617f72c74f6", "sighting--7bd8996a-ad63-4614-9ca8-6145347e6754", "sighting--e58b5b9a-dcaf-43c3-88ea-5ead8977ab0f", "sighting--741b2b8e-996b-412a-8fcc-6bd3b949c7bd", "sighting--c2f53fd1-e2f1-4700-8029-c7e76920c3aa", "sighting--c5da1903-32b1-4ea3-9111-601f12f12bd9", "sighting--73396642-f372-44f3-a39e-13c486457f0f", "sighting--ce81f79b-3c7b-4bdb-a45d-85cbe8dadd3f", "sighting--4a120099-109a-40c2-bd5d-f3b880293425", "sighting--82815904-26bb-4a38-87ad-69ffa16b8159", "sighting--0e54159c-a292-4b35-834e-2b71c27c6800", "sighting--2602ba63-46f5-4845-9efc-80cb6032c19f", "sighting--d32c78f3-fb2a-44de-a4f0-470fb916704f", "sighting--ab3c8e16-1fcd-4036-9995-c097b54aa6a5", "sighting--458f545f-3c68-49f6-97ef-a18dc72fba93", "sighting--d0ad56fe-4385-4b53-83dd-fe98888e7cba", "sighting--c25c9b78-ea3b-4183-b1dd-9d1a7ae954e7", "sighting--a76aad8e-0f2e-475e-af78-9341b118d371", "sighting--59a2c534-cdc2-481c-acb0-dc6a18c4d8eb", "sighting--bed10346-2aae-4ce0-a231-85007677bdf2", "sighting--ec1cdb05-0342-4c8f-a226-1f647486b0f4", "sighting--e5c600f2-d665-47fd-9788-cd008ef2b9a9", "sighting--801996e9-78d4-499d-9158-211a4b73e412", "sighting--e913c231-3a9a-455f-aeeb-36cbe301ea1d", "sighting--b9997352-41e9-41d9-8d92-f71f926988c4", "sighting--c5bd6d59-e3c7-4218-89d6-02181de2b629", "sighting--33f7fa65-96d7-4186-9a89-3e0f20afa7e2", "sighting--b397db15-deac-4476-b558-dcbe6da6c6c6", "sighting--5d9f22b7-e8ab-4544-860e-0416a2de2322", "sighting--c237be4d-6eef-43e2-be59-6acfabbf0c3d", "sighting--fea264f0-0d96-427a-8063-715483910ccd", "sighting--fe8f96ef-b1b8-4aca-92dc-746412aa6528", "sighting--acd66239-ec30-4169-bd9f-76863acab14b", "sighting--deb2e1b6-d935-4c9a-9248-6c1f3561580b", "sighting--dd61b77b-8fb9-4560-9033-2d9f2a55dbff", "sighting--e2a3535e-e4f2-4b3f-a512-2a370c4e6ae3", "sighting--0d4de55b-40a4-413d-a3cd-23d440c877e6", "sighting--8054782e-f45c-452b-ab6a-094b9658c64c", "sighting--59b79847-1832-4abe-9da2-39219e9e78ec", "sighting--57220546-4995-4087-8624-c4591d8b677d", "sighting--70b1653c-3ffd-430b-8451-637721cd009d", "sighting--cd8ce13b-7663-48a2-87c8-d8966dedc3bb", "sighting--60c789c7-ef5a-463c-b96f-efb2b3ce39ed", "sighting--665efc74-06da-4d89-8dcc-6b34b3adae34", "sighting--8f33e0ce-3ac9-4597-9c95-4a9c32852977", "sighting--23a092de-9ef6-4ccb-849d-3bc78f1fffec", "sighting--a429d37c-cb36-4838-8e99-d78888aa6a18", "sighting--de22fd80-cd95-447d-b1a1-21d35a649d46", "sighting--0eb81916-b14e-4c2e-bb6e-598a598cee90", "sighting--f165cbd7-3f7c-44de-a25f-a5effe50c4c5", "sighting--4b05fc5a-810b-4088-b5bb-ef7bd9d20105", "sighting--af238d05-9be0-4af3-97eb-f5413eb1479c", "sighting--da19d9c3-6ca5-49b1-936a-a9f7d427b7c5", "sighting--9daea664-0753-434a-a6f6-16b3a1b57baf", "sighting--5435d3c2-b576-4714-abb8-ef5ca499cbe4", "sighting--26eed2df-61a8-4269-bb48-79f09d8ced72", "sighting--e1aa9ee7-2da1-4a53-aead-db57823d2932", "sighting--84000950-480a-447f-836f-899f9e826f20", "sighting--73c913d8-a10c-46bc-8b7a-40d99c8a6d88", "sighting--ec2c67b4-3c1a-49ba-8fcd-eb49b6f2c756", "sighting--fe314741-14ee-4904-b86a-d492fd1954e6", "sighting--c35927f2-007b-4069-a531-e53d17a68692", "sighting--93a89d13-1e5b-4fc1-adc8-0e3bf0ecbda5", "sighting--70ccfd4e-fff1-459d-af40-c00b5b82911c", "sighting--bed5649f-7378-4a0e-83a3-705f412990d8", "sighting--acde92ca-081e-478f-87d0-c4caef807122", "sighting--451ccf62-8c63-4aa5-ad51-d26b9d022d96", "sighting--8fcaffca-e10d-4855-99c7-a1ccfcdc6226", "sighting--436f12d2-88ca-4dcc-b965-63c23a85d5d0", "sighting--2a90d2fd-49c2-4ad5-8abd-a6555edb4d8d", "sighting--56c4d13a-3c70-4b86-a5ad-74fe623dec5a", "sighting--84f6a934-61d4-42ca-9332-1946cd593d10", "sighting--90ae17bb-aa70-4913-abf7-60ba9cc07f20", "sighting--1b848d30-424a-4583-a517-1b0c1835e968", "sighting--56d9e899-1325-4b01-87eb-3627b230f3db", "sighting--d5266d71-af11-44e7-876a-58f940af71c1", "sighting--0ba1bfa3-0464-4caf-95dd-a31eeceb4046", "sighting--1b4d96d9-af2e-44e4-b575-cda7cd9682d6", "sighting--64ab4fd2-7aa8-4a8d-bddd-dc4ec0549223", "sighting--1821a27e-5d8e-401a-8cff-7226e9130300", "sighting--39ab9eef-dd6d-4fe5-bd2c-5bb78632cbe5", "sighting--a6ad255d-db7c-46b4-adcc-6349b207239f", "sighting--18434a7f-fe56-46dc-a65a-32e71c7f7448", "sighting--d2b16846-db25-480b-bb3b-113f7be77cd5", "sighting--ad22b876-c20f-47dd-a6fa-b56857c3f720", "sighting--0f77c6fb-7429-4e38-9c25-e8d52ddadd7c", "sighting--58614e34-4770-456f-9528-16abb08698ca", "sighting--748894ab-63ff-4fea-938f-90a8f07a2d1d", "sighting--9427b08a-c9e1-47c9-9a5a-f31f4f53f98c", "sighting--c3495219-69b6-42a4-a586-2828599a9d16", "sighting--4939de3b-8aef-4275-9667-1c27774aa87f", "sighting--33bd77ca-1f47-4171-8f84-de4495c3e6d2", "sighting--a22c64d6-d159-41f6-8940-c1a6d39d6f21", "sighting--baf47472-3bfb-47be-9e85-b4307a720251", "sighting--20582095-c0c4-419c-be7a-bb7edbd4f298", "sighting--31fb2502-5a5f-4b87-925b-368aca9950b2", "sighting--86842637-a69c-4eae-8b44-ad24c92d3f9f", "sighting--985e229e-2daa-458d-9124-de7323421089", "sighting--095bc92d-1089-410c-bd57-515c42f0cd01", "sighting--8b60e5db-8146-40bd-9c0f-0e36e43905fb", "sighting--d054bde9-49e8-4064-a3f2-0f0e16bf6b5a", "sighting--1e04e5da-197c-4eef-b50f-5a33dadfa3c8", "sighting--f1368a8c-04fe-491e-8269-5e4cc6601eed", "sighting--adfb2eff-92e4-45e3-9c92-7e279c263b76", "sighting--908f73f9-7fef-4a0e-a2f2-2cc06cdb040a", "sighting--83f25b45-81d7-4841-84ba-746bacd6a7d9", "sighting--477242b4-b1ca-402a-af67-fd1ecc8f04e0", "sighting--8d5c4904-5e51-47c0-8871-f3bdd76ff07f", "sighting--cc744bfc-f662-4c1e-81ea-a8fab932b34b", "sighting--5d7be7f7-94ec-4c5c-bb36-562715918670", "sighting--c0002127-d208-46ab-a34e-5363644d685e", "sighting--f5bc923e-3cb0-4138-8bc0-e9fcb9155d43", "sighting--26c38d5a-894c-481d-9ea4-353134b5c7c6", "sighting--2fd55cd2-e209-4137-ba0f-84a58c02280c", "sighting--51f367ad-c62d-41be-9b54-68ad5ac35c85", "sighting--8f7cebb5-1d88-4ab2-9088-3b6caf1df4f6", "sighting--d6d9cbe0-1079-4075-9927-42abe4140113", "sighting--8fda1b7e-95c2-406e-b619-db1d362cd6a4", "sighting--ae53356d-7e5c-4f2b-b2fa-88d7e2bb9e20", "sighting--65d2e988-3c67-4b71-b0e3-1ffb01c22b3f", "sighting--f95bc6da-c060-4cfd-a6b7-200842fb583c", "sighting--fde44a79-5f1e-4d96-82d3-efe03b8419c9", "sighting--bb977325-2e7b-4012-82fe-a1b13d1514e9", "sighting--f4e085c6-b89f-4a78-ad8e-0f12272e37a9", "sighting--47a52aab-6ff3-491e-bf3b-f55900da8a1d", "sighting--2802d5c0-5e62-4360-a5b6-cca8bed7a1e9", "sighting--555c0a49-a0be-4ab6-b683-f4696ed0fe64", "sighting--2cf15681-e483-43ba-9f02-cb9b1e7f4053", "sighting--d0248285-2f60-4418-9206-97be44f0abb6", "sighting--aad76ea9-ba9b-4f6a-a049-ab51ebded86e", "sighting--6bf5af7d-0c71-432a-bbca-ad0312fe4ec4", "sighting--39b79067-fa20-4a34-a699-95a95adfe024", "sighting--5fade6b5-c9c7-425a-9165-c3864371a7f0", "sighting--d2f6a08c-4f96-4039-bc9d-103892f40aaf", "sighting--e1599d1b-31a3-43c6-a89e-60a9aacb4256", "sighting--42765d37-5f3b-40a9-ae93-7658e76e074e", "sighting--b2465fe9-665c-402f-819d-d966cb1e28ae", "sighting--9032daa4-0181-407e-8f02-5ad283260ff6", "sighting--bb340bdc-fc00-4505-a47d-1349b4804798", "sighting--14a900ad-c7c9-43b6-9a87-17ea6bad4c60", "sighting--2fd27e2f-ee8d-4879-83d4-040ce5a0f84c", "sighting--ca4afaba-bdbb-4e54-934f-bda1cb31176c", "sighting--f6e2d1e5-a348-47c4-8777-2a2ad25ca4c4", "sighting--566b808c-0ae0-4c48-aefa-4a134179f405", "sighting--c72c1157-535d-4f2c-b45a-47acc7f7dfc1", "sighting--1c3bdc6e-2caa-47d3-a017-82f581e0f315", "sighting--3fe11577-a743-4a0a-9ce6-3df43b7fbdd7", "sighting--9d35654e-4169-4f35-8a82-aef7373cb24c", "sighting--4df3b866-47e2-4c53-8eaa-5116bf376600", "sighting--8424defc-9c3e-47d4-a22e-e53f23a2f908", "sighting--6679b040-6c1c-4114-bc0d-35301cf6dfc8", "sighting--f39e9910-08c0-4f37-9173-d204e1b795ac", "sighting--358fdee3-083b-4b46-9cf2-f36f903eaac7", "sighting--d23c581f-4b13-4c0b-9361-266b14f16993", "sighting--8a6c9184-abd2-4082-b2c9-89b83dc26d29", "sighting--f377104d-cba9-45ef-b98b-68f72defd039", "sighting--91300f50-32d2-4a98-91be-89782d5bc0f0", "sighting--4dd148b7-b687-4192-af7c-964b23d887d7", "sighting--857bbf14-9270-466d-ab65-7a768d3b8d27", "sighting--3ef52605-205c-4549-8563-5d593ab5cbf4", "sighting--c220efb4-94e9-4d94-a283-265b3402985a", "sighting--fff8cd9d-f6cb-416a-8164-a966613ccd6b", "sighting--372a563b-b467-4a72-a6e0-664a345cb060", "sighting--049d622b-5684-40d4-b583-be69ed06b60b", "sighting--a2a93035-3b43-4054-b252-c410c76c5688", "sighting--6fdf488b-361c-4b2e-9ce6-ab2e4d1ffae9", "sighting--79eecb70-17ba-4c11-9ee9-4254b3ae0613", "sighting--52d64b1c-c674-4b23-bd5f-52780dfd688f", "sighting--f29c517b-0a2c-44bc-ab09-3a7bfbf688c2", "sighting--7dcf5f94-10ea-4c43-a78b-9b5b05cd043c", "sighting--9eb83558-837e-4182-83f9-3c8b5285a23f", "sighting--01f53eba-2dff-4559-bdf2-b9d8c963481f", "sighting--80f7707e-d953-44d8-8e69-e26deba01518", "sighting--69c06031-1843-4fc7-8375-128ec2406e7e", "sighting--164a77fc-80d9-4fa9-966d-334965cd8126", "sighting--7c7cb4a6-d39c-4800-88bc-d9f61342a5e5", "sighting--2037dd84-0e32-4551-a9be-4fa873bc0608", "sighting--ed4ec275-c75f-4e3a-9211-5f61d3d0e780", "sighting--165366a6-7864-47f3-98db-ade08a8ab30f", "sighting--ea62a815-fb52-4047-9c4b-0e10cfe56cab", "sighting--3ea228b3-e0b6-409c-ba8e-4f63bb81af44", "sighting--a562eda3-95d1-416e-8191-0008408712c3", "sighting--3019e4be-98d9-48e8-8f9e-1daca4ede6ee", "sighting--91d917fa-b6f4-4a06-bef4-191179b9c980", "sighting--0957c940-fd30-4b34-88d4-bce064704e02", "sighting--86d8bfca-9281-4613-9e18-fa5d0ddc35b5", "sighting--ee431ee1-c6f7-4221-b5fc-11b0700bff9c", "sighting--9aaeb3ba-c1c4-4db5-81f8-c4cab5d1d196", "sighting--c983c63e-2acd-4bd8-b7a3-1660de823fd6", "sighting--ac605e67-7968-4037-b12f-1eba6cf35bd9", "sighting--00e504dc-b2f3-4431-a4a5-ee2d50ca2cfe", "sighting--f98dcd16-6c87-46a1-b4de-4116c2606458", "sighting--af30dd62-9859-4987-8590-73317c47d2e0", "sighting--8f08291f-8964-44d4-9360-5018af7140d3", "sighting--ad12715e-9798-4ae8-a715-2223f02fbee8", "sighting--452044c5-66b7-4888-99dc-81e58fef05f3", "sighting--10438d30-2db3-4a63-9a4f-e1b3dbd6c5be", "sighting--9255bc7b-9b04-4cb3-863c-259deacb488f", "sighting--3455ed2c-053b-4c58-a790-bb55852e4c3c", "sighting--b730f165-c2ad-4d5e-8e3f-8ac63c8e3c4e", "sighting--9050d202-88ce-4cce-a917-62ba75efc4ec", "sighting--b547cd61-a9b5-4f15-9756-234aabcbe9be", "sighting--b6ff7298-77a5-4bc0-a9c8-789a6300f64a", "sighting--ae75e11f-e0d0-423c-8541-736cee9cc04f", "sighting--71c100db-7e47-4cb0-b3a3-4b8ac6ec1985", "sighting--3d0b577f-f232-4c0c-8565-4f65f47dc8c6", "sighting--ed87392e-3f27-4ae1-949c-46d4d128456d", "sighting--d0b36d2f-e0ec-4c29-bc82-9887d45e9615", "sighting--72444754-b631-49a9-9116-dc00a14ce361", "sighting--7b94496f-5539-4e9e-ae0f-d7011b1afdaf", "sighting--bf9a9e09-6dd0-4547-b341-aae7e1e94fbb", "sighting--c1afcff7-dc2e-4581-8a70-2321f242aef7", "sighting--8d8c1aa3-3020-4fe5-8152-70215f62c5d9", "sighting--d0e09e91-c320-47f0-89cf-1dd3dae9087a", "sighting--3472bb53-2b6c-4c9b-bed4-f52853896c6d", "sighting--ea06fb02-1413-4982-9bd6-608276ed396c", "sighting--9899cb50-0125-4baf-bfab-6a8d00d66e54", "sighting--f5fa514e-abd8-4e88-beb5-793309a40c9b", "sighting--8a23cc9d-03a4-489a-b7f7-dd1fab76ac91", "sighting--b371e70a-0014-4b9d-8afe-95aeeb250209", "sighting--d7ea7c51-91e9-4e1d-bcc9-2c95c5c5bb84", "sighting--cf88ace2-50ee-4031-ba6f-9587b0c421f1", "sighting--d4b7acf5-6574-4d74-9bad-9319849e4336", "sighting--9171f82d-14c8-474b-93d2-08e911067365", "sighting--8a4bd236-0ba0-47ff-80ed-a4c2a9d0743c", "sighting--42d3a933-a58c-493d-bac0-9973ced1acd2", "sighting--cb660d9a-7a36-440e-9c56-fc3dac997e9f", "sighting--c32b146d-251e-4987-a61e-00443c757fee", "sighting--cab0d407-a507-4184-9a8a-6e4b1ea41925", "sighting--b9eb1c01-13e7-4faa-81f1-110b5ef240cd", "sighting--23b38e51-0451-41fb-97d1-bd2889e1d334", "sighting--afa4d3ed-1d19-43df-9222-38227f2dcf48", "sighting--46994cef-18d8-4c3a-8be0-d8abee44ab6b", "sighting--3afbd498-e288-4f92-9c09-d52be361956d", "sighting--c2bed533-d14e-4f4b-83fd-bc27bd25f4dd", "sighting--ccf419b3-e0b4-439f-b743-a819ea5be3df", "sighting--84d317ae-d94a-42c0-b644-d44cb4d5c055", "sighting--f10027f3-8477-4a4c-adfe-8cdc0ea34722", "sighting--3e83eaa6-ca8d-425e-aacd-c6848577de65", "sighting--c61b35bc-1a0b-47a8-96f5-766fcec32db4", "sighting--05149847-1dd9-4983-a2d6-c190130303b8", "sighting--35784123-fdb2-45df-8682-ae1b01b20855", "sighting--e090ee7f-e73e-413f-9b4f-74658720106d", "sighting--eb8f318d-439c-49a6-9623-3cbae9b7e728", "sighting--ddb34ed8-c410-4d10-8f82-938c8b93dd4e", "sighting--908597b7-e8f2-48e9-9442-08e4beba8691", "sighting--6cef6f2d-34b6-4ba5-972e-6b51a5712dc6", "sighting--cc8e84e8-6cb2-4491-8e57-fb201f4862cf", "sighting--d825435b-dfff-4aa8-91e7-96a650980581", "sighting--86e1b186-d291-4c12-95d5-8759c8b541de", "sighting--ad98ccc0-b292-493b-b018-6b316c1d8e07", "sighting--b329e04e-79f4-4725-87b6-7e4b3b88d1e6", "sighting--3914eb36-be72-4fc3-9f97-26b93c55ff55", "sighting--8920cc21-141b-4b03-8f70-6ed819af48e7", "sighting--8a8223bd-b97e-4bfa-b2e2-dcf94ef8c6b0", "sighting--135d20eb-88eb-49b9-a8f2-7b50502d5dce", "sighting--24ca1e47-4515-4274-9e48-903f8fc3b2f5", "sighting--ce41b66e-3a27-4666-81e5-98bda8583d91", "sighting--3986974c-c20e-4128-892c-518a3377d380", "sighting--f2ea70c9-2a43-47e7-9557-6978570b85b6", "sighting--3b7cc138-6d36-42df-a7c0-630d17c1370e", "sighting--07f4ec77-ac6b-4234-8e90-afd7c9430892", "sighting--f3256fbc-287e-4c92-8375-c16796daf2ad", "sighting--f472e360-33a1-46d1-9822-9b67ca2aa81d", "sighting--81ad0ff3-91de-4d2e-8288-a0fb0445769b", "sighting--be6dc327-c018-41d0-83c4-c4f2f8233fb3", "sighting--a131ad6c-c314-49e3-ab11-8da555fba7cc", "sighting--143279cc-07f0-447e-897d-189a0f7cdeaf", "sighting--28024bb3-b8ce-41b3-8a4e-0e34ab4a8ed7", "sighting--b9043efc-fc7f-495d-b84e-4f0bb1660a06", "sighting--4d8c052b-15ed-47b8-b0c4-7f5ea86f4581", "sighting--cc883e10-999a-48e5-b153-527a8589811e", "sighting--4ffc42fc-08f4-4623-88a0-2b01c7e859ac", "sighting--a67bfc15-36a8-4313-82ba-b300c62308ba", "sighting--09037821-5f24-4078-bc6f-3ac0bb5fc28b", "sighting--8c7baf4a-e79b-4ec8-acdc-8e89c59407d8", "sighting--4c0d6a12-ddb1-493d-bf78-9676fdae9d0e", "sighting--6b5c295a-3bfe-4e83-b3c7-7c427109158a", "sighting--afaeca18-d89d-43db-a662-9d834c79ae17", "sighting--e9847413-235a-46de-84ed-e3928600f5d8", "sighting--cd733284-caca-4abe-92d6-a5f24c8c1b63", "sighting--a6865519-bb48-468d-af73-2d7df1e6bb13", "sighting--7e05eeaf-90c9-42fe-bc52-7e0c9bba0853", "sighting--b0966b74-050c-46aa-b2d8-2ed7e7d86bce", "sighting--dc94af40-ec6f-4351-8216-2bfdc6ea7b5f", "sighting--a3ca9aa9-eff6-4804-ad29-14f7e9d28017", "sighting--bef76c91-6509-4b3e-917a-bf1eab9476a0", "sighting--2f587580-1b27-4df8-b660-be8c786ce449", "sighting--56cb06f8-09b1-4803-be08-5bf97bf52f74", "sighting--0c03141b-49f5-4ffa-985b-5b3793683d8a", "sighting--54099fd7-86ea-4bf8-b21c-9a358c126a66", "sighting--b75c9277-99b8-4736-a94f-bfda610eef7e", "sighting--91f7dc7c-2ad7-42ad-b16d-7c57e6193328", "sighting--b477ae77-7f15-493a-a7f6-36718925acb7", "sighting--64cc9339-fa11-441b-a0fe-a36223825a48", "sighting--de74e3f7-8386-458c-a4dc-6a91e1d77191", "sighting--85bea220-02dd-43ea-a4f0-c84d21e1fcbe", "sighting--b6342e3e-eef8-4ead-9562-906c6971ac5c", "sighting--4c1272af-9696-474c-ae9f-d13a75ab48ec", "sighting--78185daf-9e9d-49dd-9985-5effed626c1d", "sighting--4fcdd9aa-f3f7-42e9-a8f8-ab64a4d36ca6", "sighting--1e6fe8e0-6204-46c7-8a15-e410c7e68a36", "sighting--761a4808-e772-4c77-8ab6-333b0643489d", "sighting--f5c85065-828a-48a9-b53f-756f37f1a7cb", "sighting--547657b4-550c-492b-b7d5-b0dbe81ac462", "sighting--79181ea8-eb54-44e1-9199-03a7f26036d1", "sighting--fcca208a-59aa-41cf-94a4-b5190ab600c6", "sighting--b3c21ea5-abe5-40bd-833a-0a01b0d99574", "sighting--2e3caee9-3a3a-4600-bc5a-7910fe7ef5b0", "sighting--95838a05-a8da-4f39-a495-ee6172c85c4b", "sighting--9446d46a-2e4f-4e94-b12a-182164e243d1", "sighting--096facfb-8c52-4750-b977-b360f6f3270b", "sighting--e9d690c6-db58-470e-96f8-d88c6cf69ddc", "sighting--e877f352-30e9-4c00-a62b-4f1eb9a7670d", "sighting--3d3cd688-fa85-472f-8a69-2fe0f5d2bb82", "sighting--6d506f16-a4db-44c7-89ba-86428aad21ed", "sighting--7ebe6aae-a8c8-4e0b-89aa-bb63d1145c4f", "sighting--feafa5e8-6634-44b7-b757-b4db7b9ecc7f", "sighting--a2782422-5789-4fce-a0d4-bf47cdfe4197", "sighting--a32782a1-0820-492f-a635-16ff24adf9b2", "sighting--a395d0d3-b25a-47b0-9f93-a213b6356852", "sighting--1620b332-99b3-475e-996e-74ec1dd86741", "sighting--54350b97-fa42-4bf5-b495-e709e368d9ff", "sighting--6381e926-3360-4e94-b180-cd8c9fcaa993", "sighting--ff160ce7-9ec4-4b02-a925-94cea36ca856", "sighting--bf79380c-7910-450b-ac2e-50cfb7f3fc64", "sighting--9f0087f7-7ee9-42a8-9b17-befc446347a6", "sighting--35f07276-20a2-4fb4-b11d-373470628c61", "sighting--7bc05c78-9f2f-4a6f-b39c-51a4daaa5cd1", "sighting--2b76469e-3e27-410e-8bc9-5215a34b9b46", "sighting--5da6a7c5-47de-4eb2-ba41-9f8e4d7edebe", "sighting--df48113c-9c07-4c8f-ac9e-74232009129b", "sighting--f8d0935c-1b44-439e-b79b-691e8d1c9c7b", "sighting--63f62d37-a058-47a9-ab86-f8874fedd677", "sighting--14162b5a-474e-429c-bbdf-491ad0e95840", "sighting--2116c618-10ae-46cb-b600-cfb4f1e4111a", "sighting--9e7c986f-78a9-4272-8bd9-0f57c94dcdb7", "sighting--b1696f2e-bec8-4013-b725-969a0296640d", "sighting--9f2fe0ee-00d5-418f-a45e-a8fa36863bef", "sighting--cf2794b1-f709-4fea-9890-d2e6dfccc4e6", "sighting--5da0ce90-06e6-4e08-b823-cb7b29406277", "sighting--246ab939-d2cb-4e9c-9b62-98932bd559d5", "sighting--4368cb51-8b27-42b7-ad40-e0fce306e87b", "sighting--e8485879-8a76-4890-a417-a174d1309672", "sighting--ee2edf84-cc7b-4a07-931f-0caac5cf23e4", "sighting--c18ba3af-68a0-425c-8c92-6408ef91e923", "sighting--5cfcb138-d0cb-4086-842b-7cfd33222a46", "sighting--20c9c4cd-f008-447f-a171-adb1bbbc059c", "sighting--bf410c6e-d8ef-4d1b-a055-1c33281cb41d", "sighting--1c27599d-4834-408d-8c7e-110d27694df7", "sighting--4d4fddd4-7917-420f-a7eb-5769c39003b0", "sighting--5c7a233b-e94a-4358-bb15-51c0ef0acd11", "sighting--0ee11724-4c63-4326-9f11-3389ff367db2", "sighting--2379789f-9050-4ffa-9900-4a7fe9470f26", "sighting--9c5db148-b047-491f-8bd2-799266db1212", "sighting--a3fde91b-fb3b-4733-a513-e2995914e007", "sighting--9e99e0fa-fb67-449b-b4d9-5cb3952e2788", "sighting--e782d4f9-1c94-4226-89e9-7f592f8df76a", "sighting--91f63aea-0775-4f45-8c3d-1dc9e677d582", "sighting--d984d369-4172-48d4-afeb-81a01ec0886f", "sighting--05423944-6076-41f8-a997-fbfb31a5a3f4", "sighting--a54ef0ce-351e-44fd-b816-3102c3e60202", "sighting--dba1353a-baec-43d8-9f0c-404d78f7b47e", "sighting--70f81707-0237-49fa-b083-0aa9107f6786", "sighting--71840ad7-4bed-44b2-8ce4-6637c8ee41ad", "sighting--93e26111-64f9-4b07-b39e-8f4c7f6c44d0", "sighting--e3c3d6ea-d7be-4906-8349-aaa645bc6831", "sighting--425a074a-499e-4a62-88be-0da91fa0ac88", "sighting--6de592c5-cb98-48d2-b14a-fbf9fa81fe6e", "sighting--416a9154-0389-4206-adbe-81598ad40b93", "sighting--8d01bc87-f05e-4d6d-8ca5-a7dddda4d961", "sighting--81d5baea-1b65-4c59-9b37-6d83de319739", "sighting--c7afe385-4d8d-4087-b93c-0ca1681c8724", "sighting--94c541cb-273e-4b18-854e-936830ee5d57", "sighting--563447df-dbf7-47d1-843f-f2b738414659", "sighting--51164031-9acd-4a7a-887a-d85aa54c8a0e", "sighting--052c9a3e-1f57-450d-a585-5a9d8eb0a52d", "sighting--440744bb-3910-499d-bcc1-093da355bd61", "sighting--e9317fad-5f85-4379-a105-83abde660c34", "sighting--0187268a-c458-4ebc-bd7f-26b6f1b278ae", "sighting--809d5d16-0af9-4f38-93f9-f9c5a59438a7", "sighting--09772b88-1d0e-4d53-a735-afa4e319d5c2", "sighting--13ca6567-320b-4341-a595-57db41ec1be3", "sighting--1174b94a-fbff-4256-bf6d-197320b4ce2e", "sighting--f7b50fe8-f183-492b-ae1d-5fd1361d9919", "sighting--1991a5ae-4939-4ada-bd93-ad554f4ae7f2", "sighting--20bc53d7-abf6-4548-af76-b0e1a16444d8", "sighting--d94fd07b-fb10-4148-aaf5-3f369cfae8f6", "sighting--22bc497b-acf3-42fb-9d92-c6ad961a1be1", "sighting--94a0e4af-6af9-4ced-954d-a8def7f5d04e", "sighting--d92a1784-3693-4527-a92d-fba2ac10eb07", "sighting--bf59ceb7-c61c-40f0-b882-5ca46a2b7c34", "sighting--a0d45918-f78d-4ed7-885d-0c6d905a7591", "sighting--ea19ac74-feeb-4026-9ed8-f10b7ef071d2", "sighting--8dd1c0f3-69e5-4dde-91d1-7b7637495b4c", "sighting--72079a10-1914-4725-91f8-2dd664816202", "sighting--a196f1e1-193e-4384-9bcc-71218b370ea5", "sighting--7b471c30-3291-431b-9f50-c189ad807957", "sighting--3e6dbb86-fb67-4906-8d21-e599fdb556be", "sighting--4f329b28-0777-4a13-9ec5-d5fcc14191fc", "sighting--6daacd83-3b38-443c-8c33-53f776c70835", "sighting--556f82b8-c9b5-4564-9149-91ea00660e95", "sighting--4104190c-ab06-496b-983c-770898e7dee1", "sighting--88b0f092-e087-4465-bde2-18eacef25e4f", "sighting--0e9854f4-46b1-48a3-b822-5dd0ebd5f74f", "sighting--0890be79-42d7-47be-bc69-6c4655b8893c", "sighting--2e7d4593-968e-4ba4-92c1-a7afa3d85b45", "sighting--681a576d-b68c-4ebf-b58e-927994bc61da", "sighting--db3d175a-976e-4b3a-a1ab-7047b27318d7", "sighting--ca023ca4-37bd-4b22-adb9-9fa583494344", "sighting--b9da8a57-8191-4f86-8ab4-f30ae4b5e015", "sighting--0ece8a1d-9a9f-48ab-b318-6cf49617deba", "sighting--45a18d9f-4b70-4b9a-9f1e-82b95f81af71", "sighting--5328bc86-966c-456e-a7fd-53e37cbd14ed", "sighting--a6e89052-f512-439e-845f-f1d521fbe9af", "sighting--239f7c0e-0047-46cd-8a45-f92a78a23546", "sighting--3d36db0f-323f-4716-a1b7-67296899fc98", "sighting--111c32aa-c42e-4c32-95fd-00c3996272b8", "sighting--ff13948d-a55d-413f-959b-64eab7761ac1", "sighting--c7e14485-519e-4500-adf5-af624812197f", "sighting--df923c20-819d-4433-b9a0-1a02540415ac", "sighting--0b1acb89-d952-4ca6-94e9-7a2e8fc606c5", "sighting--bf5a5fc7-d36f-49d0-8297-1db7b4853122", "sighting--c57c021a-5944-43fd-8048-c5c4b2418301", "sighting--8e1b214a-f9ff-49e8-a324-c312e5b2d108", "sighting--b2ae1750-606d-4b99-8f56-14053fbe3370", "sighting--a5ceced1-7e43-47fa-b07d-acf3e4f82fc4", "sighting--fde7c827-0e83-4cb8-a493-92b82078ba4b", "sighting--962d8076-75c4-41e1-99e3-bbc404c89861", "sighting--62745340-1a98-4a2e-98ad-c339015796f9", "sighting--6c1cb59f-f37f-4919-8c1a-606727454b14", "sighting--17caa798-0426-4798-a297-b1d4dfca646f", "sighting--2163e05a-9a64-47d4-bef5-b4185703af20", "sighting--746a4184-a816-46b6-8b01-9b0dc76653fc", "sighting--0b7c4e11-34e1-4e21-b60a-73776c8809db", "sighting--7ec4447a-21fa-48b6-b792-aeedb13c6048", "sighting--8d70a78e-0a84-4694-a5c0-188225bd9598", "sighting--b6e24943-32ee-4963-9e8c-f2411347bc52", "sighting--37ab4a04-cb27-4504-a121-003c66542ded", "sighting--28e2e52e-4d31-4646-8e0d-0b4675ceefd2", "sighting--0f97e5cd-a123-4b38-b534-51bb195f74e4", "sighting--c3dbacff-97b8-41b7-8cc7-94bbf8e972ea", "sighting--019ca9ee-045d-4d7f-b8f4-2ccfeb44c148", "sighting--f00f64d4-b6cd-4888-a5a9-53f6e12ae526", "sighting--bf74bd20-1877-499d-bc50-4e4d19d7c2b7", "sighting--a3784f58-43d3-4f77-bd8e-6e4194ec9615", "sighting--8343c684-fe68-4b74-9306-ec4c85571087", "sighting--cbec5f11-bf83-4fd0-890e-642973b6617e", "sighting--73547b01-de4e-443d-b5d4-a2ac26249f5f", "sighting--c1b9f8d7-8798-48ce-b67a-e1808c60fa4a", "sighting--f1dfb3c8-7486-4e36-9136-07356eb6a8ec", "sighting--6ee54240-410c-472f-b35e-953277a6bf3e", "sighting--0514d2b3-73ad-4cdb-a20a-5b0e484410f1", "sighting--78a7c968-9797-49d9-9a94-6302f794d9c2", "sighting--4803754f-38ef-4eec-8c88-83da990e3575", "sighting--c2c6e524-32b2-4f1a-a95e-48b724435039", "sighting--d1d70f9b-845a-4d10-9a46-906d32bc5b7e", "sighting--3f5fde5e-a67d-47a9-b6de-448e4ee6d4cc", "sighting--dfa50ac7-4178-4b30-9268-094fcb11317c", "sighting--a17acd10-b8bf-4433-bb76-7ccf030029d4", "sighting--3c9f946b-8d81-43de-a1c3-b0f899053225", "sighting--fc407089-4992-4564-b92c-71496322d616", "sighting--0601fa53-ea3d-41ae-a58c-5dec614e2ef4", "sighting--3d5eab96-aec8-48d8-81b9-e1e0460e4576", "sighting--791c99b2-293a-4172-a9ee-7f488aae7a9f", "sighting--4f95082f-546f-4c87-b1e1-d6bca5de447a", "sighting--848cb998-5ef7-4488-ab00-33af9c71ed22", "sighting--7e951024-b3e5-4d58-895d-6f1978849134", "sighting--8daf48b2-b3be-47c8-80f6-c7ff9eaa5ea0", "sighting--480696d6-06b4-4795-84b1-f1fe9c8a2ada", "sighting--d3d356f5-8983-4938-add4-8c88617a7913", "sighting--3639b8f9-456a-4b3d-9c80-f39d06ded787", "sighting--08904acf-f700-4fcc-bf7c-e5ad072c7e55", "sighting--06630780-9ee1-4be3-ba7e-829f6ea1dd83", "sighting--966922dd-c419-4ba7-ad4f-50992faaf37c", "sighting--d8bf1481-df90-417e-a954-9ae6ece78446", "sighting--896af6ae-367a-403a-96cc-6c4cf0b1e6cd", "sighting--a6ca770e-fbc7-4717-9feb-9ff480ad953c", "sighting--c597688a-886f-44cd-b254-8341de508f7f", "sighting--30281ead-52f4-453b-a624-521862ea3233", "sighting--ae13ff7c-e609-452f-96bd-ab2de1bdea0a", "sighting--ed4e1f80-c75e-447f-9966-5d13b7367207", "sighting--d03c98a0-e186-4240-9369-3dd2a6beaac8", "sighting--a15646be-2314-4294-9dc6-fb60045e86c3", "sighting--16786452-c4cf-4f52-8580-fdabb416f937", "sighting--02a35e3e-01f5-4342-970b-1ce30290a740", "sighting--b887d4fa-8392-482e-a22f-afd5d9733b50", "sighting--8521ffd9-b5fe-4ae6-b34f-d9471dc2ca5c", "sighting--302bf2d1-8d45-4225-97e0-2b3f1c1d5fbf", "sighting--c690b814-4598-4550-b8ed-193d5419cac7", "sighting--1abc66c8-eedb-47df-9006-890e3b493788", "sighting--920a4e0d-4a01-48cb-80a4-cf89eb835ad2", "sighting--58ae7728-4368-4edf-9ab0-6cfc4c45fe48", "sighting--123eb36a-0536-4d23-9879-9c50bb4e9c05", "sighting--95ebd0ce-76cc-459e-b8a2-7e7b2fa8b514", "sighting--c4c80100-cae4-46d4-9d27-048d23a65ced", "sighting--28e4298c-9e50-46b8-b144-d674ce463070", "sighting--5a2026eb-c2d6-401f-80d0-06ed64aef72d", "sighting--d2463109-2a8e-4a7b-b66c-ea723ed86dd9", "sighting--fea3c63f-bf87-4eb0-a3e8-5436971267b6", "sighting--109aba08-5cdd-4004-b314-736d90c50400", "sighting--391be646-ec9e-4f2a-84e2-184ba82ad624", "sighting--775d7f55-dfdf-4918-b542-6d65b726e5d3", "sighting--1b3d5d1a-aef7-42f6-b9f8-8bc43faf7fb1", "sighting--46f97f45-5f7e-45f4-bfb5-4c45e71182e2", "sighting--b0d06932-978c-476a-a9fe-8ea2c4df4762", "sighting--e8d46b11-9e69-44c8-88cb-05451b373434", "sighting--ccac4da3-a8df-4881-b1e1-5cde321f7464", "sighting--93dd2594-2000-4f7b-9281-89b00fab35e5", "sighting--ad7113e1-8fd2-4647-afd8-c7750820871a", "sighting--846172ce-873f-442d-981b-67080d686559", "sighting--d7e129ea-6d7e-4fab-868e-669946c9e011", "sighting--569ab93c-a448-43d4-aa6f-11e920ddbd49", "sighting--08afc551-2d18-4110-ac50-5dc2d44a168c", "sighting--bc4b6859-8e89-4624-8250-9e8915c730b4", "sighting--47bf784d-8194-4d40-967b-af62331ba51a", "sighting--4907c280-f71f-4ea3-94e8-5631c03f7ac5", "sighting--b99a18e5-3909-4a75-9fc5-fdbaddbbd1b8", "sighting--a4469583-d485-4040-b229-772a28217e69", "sighting--aa919e65-138b-47d5-a16b-17aea67a3d44", "sighting--08ce0965-db53-4141-a45c-a6442c568411", "sighting--fbb3dc7b-181b-46c2-8968-ad5ab3f71000", "sighting--1b4c7064-2d94-4586-ba0c-2bc5093828d7", "sighting--d41e8bb9-4117-4209-8823-c3459104488c", "sighting--af6affbc-334f-4656-9d30-615ff44d87e1", "sighting--483f791e-373c-4a58-a652-ad28f444a3fb", "sighting--dd8b6cc1-9f6f-47cb-9197-d9ef014fa39e", "sighting--3fb32c4e-b32a-4ae7-b5e7-0a82fcf39b16", "sighting--5567c72d-1666-43eb-8c87-f06588dacded", "sighting--7c83f649-7c23-4559-998b-246332715cf7", "sighting--f2623d0a-e0bd-4c0d-be1c-25bc5c7fa801", "sighting--855f25a4-26ad-4f49-b55f-86e65898aaaa", "sighting--e31899ff-04f0-4db5-bd8c-7311da2002a3", "sighting--c5d93c12-c052-4386-a80b-c1f450b54ab2", "sighting--c5236315-32c2-490a-a53e-c278281fdcde", "sighting--c8680175-8e06-44b7-bd14-3ec5f97ae133", "sighting--c7a6cef1-edbd-4dc4-bb5c-db904394561e", "sighting--06ab73b8-4b52-43db-ba58-a6e55b1638ba", "sighting--aa2d0006-d3b9-4d9f-9c60-b75a854ad87d", "sighting--4434892a-1a55-4cc7-944d-033a596b48dc", "sighting--cc9e63bd-4937-4273-9d0c-29adbc79568e", "sighting--f30dcc23-0226-4bc9-ad60-ddecf9b21bcc", "sighting--12505250-bb1b-4544-9af8-49e2d21131ec", "sighting--12b00791-287d-4e3a-ae11-d2b6428c3940", "sighting--bd59b476-2bb2-4de0-b95a-8226fb5185c6", "sighting--7baef6ba-41e5-4b9c-ac54-8b2b706ca1a0", "sighting--d54b02fc-7fc4-4868-bfbe-31e5fb74cc1c", "sighting--699bb830-0477-4ece-8e0c-469c4c664314", "sighting--67e63a73-a321-4c02-9c65-6b70a990582f", "sighting--42e6d59a-b34d-443f-8ef9-ad3d0aac59f0", "sighting--a57e6840-dc3b-4c16-9503-1823cadd7837", "sighting--04d23346-4aed-4c20-8aa8-e80eaa12fc93", "sighting--fc1bd6f2-1ea3-4c85-93ca-215032bc440a", "sighting--558d0877-653e-4e55-bef4-03b728f110c3", "sighting--1a68674e-42b9-4f94-b388-0341d1c45029", "sighting--61b32370-9fb0-421d-aa23-1c60b46db906", "sighting--054f2172-8bc8-4c88-9f3b-047735630aab", "sighting--0bf2ec21-bc06-4b11-bbd4-7bddaeb31f43", "sighting--c08cd023-91c3-4a2d-b184-a385ba88b35e", "sighting--7e3f13ad-1510-444e-94d8-7bac553c3fd4", "sighting--2a31282a-3adf-4c6e-991f-983b9daf52de", "sighting--5148dd06-9be2-4fc3-a544-a5e5ae204d2b", "sighting--ae40e87e-c42e-4de1-85b9-78a800ed9d6c", "sighting--77495553-9d3a-4121-9d79-53c3979e2ac6", "sighting--0c3b11d5-5671-4db1-a6c4-be7ac7de5996", "sighting--7cb21f53-c2bb-46e0-8eaa-b3829989a833", "sighting--5e71acf7-d802-444b-89db-087e789b9425", "sighting--6576b575-2bb0-4163-b81f-53828bfa32cd", "sighting--9c5e4ab2-0fe9-4178-9443-b54e53317946", "sighting--f9c4fc8d-1394-4dac-8618-bd4863f6b871", "sighting--6cef4e91-45df-4e51-95d4-6dcdeca2c137", "sighting--fc43de9e-2218-4d68-9935-50aebf741059", "sighting--c84af6ae-1f24-49ca-bf4f-4c8f33658895", "sighting--6289c74b-4730-4e95-9b20-a2e831c46651", "sighting--c2d36074-f4ba-485a-acdc-b2f727feadff", "sighting--bda9b4bb-6fca-4785-8677-d932e9368f82", "sighting--9f22c17f-c1e0-4f10-bb14-699b7b94bac7", "sighting--324642c4-934a-42ec-977f-910751eabdab", "sighting--af1609cc-923f-464a-83a7-fe772eaa87e3", "sighting--f26e126d-0370-4583-bbeb-349fb1c08a0e", "sighting--a764eb10-0e56-4f6f-ae33-82096fd3abd4", "sighting--19c08f80-41ab-445b-8bb1-1953db307a87", "sighting--0cfa32c1-4939-456c-81af-a0e8de44c2ee", "sighting--e8a2b85b-d150-4c8e-81ee-9af926451fa2", "sighting--075ab010-e015-41a1-89c3-5f58a5d845fb", "sighting--ac2f390f-e016-4676-9ef9-b52be93a0fec", "sighting--fa2f9a63-fa34-4291-a8e5-2f233a56a522", "sighting--bd28e6fa-50e1-4a40-a7ed-f5078057e1d5", "sighting--3bc61a32-eac6-4c9b-bdbe-fbdbefde51e6", "sighting--9cea63ab-949f-45d7-8512-349172ef5e58", "sighting--3314dc97-c979-46f5-9562-ea31901603a5", "sighting--524985ba-9c72-490f-86c6-5bd4c488ac6d", "sighting--0d0ab759-82fb-4c6c-9676-30dec051b583", "sighting--9b8f6a6c-4c12-461a-8a36-a99ff563f882", "sighting--d704bbcd-a747-484c-a927-1cd5a8d5476e", "sighting--3c54089c-9d22-4ab1-a78a-8cb8598b1276", "sighting--60de67d0-f315-4049-af63-0fd21fde07a2", "sighting--3ff0881a-a454-40db-9b91-249b33aa693e", "sighting--727e0e7a-5863-49d6-875b-2e142db4f29f", "sighting--791b81f2-aaf1-449b-a8d3-100542d1b431", "sighting--fe6c6de1-75c1-4943-a5c3-5165f2a81cba", "sighting--26e868b6-97d9-4c5e-8941-f2fb4e6530d3", "sighting--a0313a52-0efb-45cd-a898-9d0ed6f04895", "sighting--a9dddb8f-fbb4-4e96-8bb3-9a3f5dacb2f4", "sighting--51c040f6-0e3e-4468-b07b-0764f409a798", "sighting--0b1ecc8d-bd2e-4430-a480-314d10fcc9d4", "sighting--ae981ad1-e667-494c-aac2-bba672dfff2a", "sighting--cb15c10e-30b5-4fba-af17-f4a7ffb6389b", "sighting--9254f457-3ffe-4db1-9abc-dd4325f5f987", "sighting--2d0ab109-b4a2-48c7-9adb-eb92a02131bd", "sighting--57cb0c6e-8fab-4d0f-99ae-f95b41e0b04d", "sighting--fa600779-20f8-416e-8be3-5e065223cd70", "sighting--4d6570f2-5c2a-45de-800c-8613584f48ca", "sighting--34db9486-a856-47e1-956a-5ea0d757f04a", "sighting--c7d1cc5b-f93c-4d81-a263-18e85e534dc0", "sighting--c5c13437-8056-4ebd-99c7-23c245dbef3f", "sighting--f9131f1e-5552-4d85-97df-be4b3b78a889", "sighting--05a34751-4d7e-4ab5-b5d0-f3e506b21ead", "sighting--eff96da3-012b-4293-8088-0b1b5f93286a", "sighting--f77624b6-99b4-44ba-9026-7a81166faa36", "sighting--3c0b4614-2618-4743-b531-7a5b4f64f9c0", "sighting--0bb78d9f-9fa9-43fa-860a-b61300999673", "sighting--43f629cf-98e9-42a6-94af-75faf356463a", "sighting--2f3dec96-06b1-4cbb-85a7-ac5d7d4858bd", "sighting--e9819972-4411-4467-aea0-334d2e627ae7", "sighting--7c3270a3-71cb-46c3-b1df-9b19de322fb6", "sighting--e966a322-32c4-4535-ba70-b93c842361c3", "sighting--9c0fe8d0-5d1d-4968-b6c1-78f02c4b93be", "sighting--0b42121d-3e0e-4cbf-a002-1f4a15a6272e", "sighting--3e431df2-16ce-41f3-bab8-3e0d538eeb58", "sighting--45f92433-cef8-4f54-9006-f45aa426e267", "sighting--7d13145b-c7f3-4b3b-ab9a-4dcb22d4b0b6", "sighting--75e16559-db74-44f8-bd3e-295db0e8e3ef", "sighting--24cf81fc-4888-4f58-b068-60a649392e76", "sighting--90f46fae-76e1-4bda-8782-fff601506c2f", "sighting--01ce00ee-4a5d-40b4-9bad-3e7a8e7d1350", "sighting--43d04f7c-d98b-42d0-8909-b6bcd893300c", "sighting--96f2c4f3-060e-4b9c-ac65-b95c5829a3a1", "sighting--fdfc7332-64ab-43f9-9047-760a11b9cb71", "sighting--76c0a706-846a-4cf9-9cca-6d25f7c62f50", "sighting--ac7e97a9-ee4e-42eb-8160-727224631a5b", "sighting--8cf58065-4674-4fb0-9633-653988c14dbf", "sighting--5a517a15-07d3-4b3a-9607-c66c66dd4252", "sighting--c8ac6825-b09f-4216-acfe-b033b67dc6f9", "sighting--01883aaa-1d53-492c-8c82-663bae760d2c", "sighting--cb46a402-7de0-4960-8929-95abfb9fb2e9", "sighting--ad0ec2d1-9734-43b0-98c6-8a4ee82fd6ac", "sighting--f0403e48-5139-4666-b848-f0e78e9ab4b8", "sighting--45dba1a2-8eee-4ded-bcbc-3d60d57838ef", "sighting--67a400fb-4de4-49cc-94cd-bc1e99df1065", "sighting--521ba71b-87f7-44cb-b7f8-b546864904ac", "sighting--836a467e-7f2c-4b05-9746-74fffec06bcf", "sighting--88b75672-94c4-440d-aa7a-bec676b6d2b5", "sighting--a1a3687f-007d-4e33-896c-7fb3efc4d456", "sighting--3df1da90-dc6e-4396-ae91-240cf7154372", "sighting--16f50be5-6cc3-4301-aa0b-86ef90f37849", "sighting--e27e07fc-9117-4d43-baf4-eef39e12fe86", "sighting--ec7f00b0-64fb-4a83-a073-2f56776686f0", "sighting--1b137b57-d7b3-4922-8492-b512a6ed529f", "sighting--56651b57-2006-476a-be37-297ff2d6f9e0", "sighting--a410bfcf-344d-46fa-8000-cd047fce20f9", "sighting--7550c33b-dad5-428c-9cec-d46ccedd6df7", "sighting--4a379bd2-4f59-444f-804e-8e62370860f8", "sighting--5c5635d7-ae9f-4a0a-baac-b4d482996303", "sighting--f080be42-5a40-4634-b37b-5356eb3c1d69", "sighting--a254b687-b2fb-4c17-b87d-4a68f1e42ff3", "sighting--6d822321-a5f3-4f0a-b3a8-86e674552190", "sighting--f4a197e7-43d4-4fd4-8e1d-dead0ef99bde", "sighting--9a9c1c78-679a-49c3-acea-ea460264680d", "sighting--bba55153-85df-48f6-8846-b48eaadbc889", "sighting--06a6864b-a631-4240-9eda-8c83be275b87", "sighting--13754102-ce39-450e-b1ed-afd97febefa9", "sighting--6c2593fd-4743-4262-b6f9-efe0f022a7b5", "sighting--71b61ca6-90ea-429f-bbdf-b577b8073b32", "sighting--f116c22e-c949-49c6-bc67-67ad3cc2db75", "sighting--587c99be-be31-4459-a37b-39f6fa49d7ab", "sighting--7a97c681-e98e-4164-bb53-2351aeca03cd", "sighting--5ce30148-a0f9-41d5-8cb2-7b5fbbee12ba", "sighting--88eff8f5-a4df-422b-b1fe-402c87203787", "sighting--bb438a02-d3e5-4557-b4b7-33ebb7b23c49", "sighting--ef1a6553-703e-4f34-a6fe-576c6a6c902e", "sighting--ad6ab156-7dd8-404a-99ef-40bf060adb7b", "sighting--1d1a5b68-901c-44d6-9d9b-64ce0376f295", "sighting--04823c3d-7e9c-4e6e-b871-c912b2c6a9ad", "sighting--f240885c-2b8a-4f12-a0e5-fe5dfff61508", "sighting--804c6754-e200-4148-8d3d-ab5782f561f4", "sighting--48b2c145-0e7a-416f-b4a1-f33eee567adf", "sighting--a25735f3-36b7-438e-a98e-b4d2bc6b9f04", "sighting--d012e81c-1c37-4ccb-a93a-8e7875a38acb", "sighting--d42a94f7-f3ce-4efe-b913-8f5151c17cae", "sighting--b998ef4e-0728-47d2-9695-96df1a697193", "sighting--e841734f-dca7-4523-8be6-9784fa965ae0", "sighting--b88c495d-e111-4f66-909b-bf3be0f7330a", "sighting--bf147203-b90f-4dc7-be86-bcbf620b3136", "sighting--49618698-8703-4343-b368-b424dacce2bb", "sighting--346eddf0-1e06-42d5-b5b5-96b742944257", "sighting--7c5655da-7e34-4a27-aa14-5701cabbf590", "sighting--4eb6bfeb-bba2-41e2-9cf2-4e1e2ae5b636", "sighting--d2cdfe36-9ede-47f4-abb3-30e857bd9033", "sighting--ed5d5029-a7c4-488c-abe6-26f90be02e53", "sighting--ccbb6daa-0813-49ea-8778-f64a5e1ded31", "sighting--08eef0c8-57c1-4211-9b40-eee5edb2a15f", "sighting--8eb204b4-dbd1-4438-a033-beee349bc77f", "sighting--95024592-03cd-4d8c-aad3-261ce2944d6a", "sighting--91da5c0e-d27c-485d-99c2-a0591c49dffe", "sighting--214dd066-5db1-4a2b-b728-7460b9a7ca20", "sighting--2926d115-fd98-4b17-a4bb-3b40531c3f2c", "sighting--f7e907ba-e1f0-402d-86d8-342537a2f033", "sighting--86ab4993-e977-421d-9059-1589abc87779", "sighting--2653620f-d439-4a2a-8464-77b99c6b7dc9", "sighting--eacd00ce-c2af-49ff-94ca-7c23a7b5a3ef", "sighting--abc2a5ff-b802-4141-8b28-d18ebff35b8f", "sighting--63526810-3c90-4572-bb05-fdfbdcc3871b", "sighting--bf4b6171-71e3-4f39-8e18-7d11ea20a96a", "sighting--df4f89fc-fb3e-4f74-882e-f58bb5c3be08", "sighting--65380efc-4678-4d36-b7de-e9aa8a34e1d5", "sighting--7892e91a-3a14-4e84-99cc-434126a358e6", "sighting--085802db-5c1a-49a0-9ab3-eee637a032f8", "sighting--4e6f09ef-6265-4425-a587-fcc697f86017", "sighting--4dc96ec2-a500-4275-b448-93148c2ae254", "sighting--a2b9b361-0078-48c9-b979-c79533ed2702", "sighting--f721baf2-a069-4311-acdf-a29d65a37ddb", "sighting--6ce091aa-5357-4b76-a711-578fa835583d", "sighting--10607843-5708-43b2-a2bc-bdb0a7d433b6", "sighting--c3fa03ae-2c61-438b-bbdd-26806340ec00", "sighting--c6e01a45-7745-4365-9b8b-1a5a34b0748d", "sighting--ae963dc0-5c28-4b45-9eb2-0c029124fbf4", "sighting--610f3692-c04c-4781-ab0a-5f69925013ee", "sighting--9daff9c4-57cc-4c5d-99c2-0f36f7e75a53", "sighting--0c6f2beb-14f4-4d3f-9503-0f3165bdd7d1", "sighting--c051e9a5-db05-4c27-abe6-ab2ab5dea178", "sighting--2329b9ca-9399-4898-9a15-66b7bd50090d", "sighting--26c70f0c-0c5b-425d-b058-02c8b7ab0902", "sighting--abb00fa3-f078-4c6b-b34d-a243c5820218", "sighting--85e800e5-67e4-48be-9c61-4194c6217db8", "sighting--38570278-b6be-4862-86ca-69cf44fde72d", "sighting--3e4c762a-277f-4db7-a909-33ec9c68a12d", "sighting--60cb3774-e9e7-433d-8df0-75e48c930c84", "sighting--ab19ca8b-efd0-4183-b008-5819ba2b2bab", "sighting--88864f80-9317-4f78-ad26-5411b949bf29", "sighting--a7022cf2-e9f9-4ea8-b6be-a2618c3df565", "sighting--3f1315e9-0ee3-4b70-82a9-f8b0b194be6a", "sighting--4eb26ff8-360c-4bbc-a303-adca275247dc", "sighting--f687faaf-d8f7-4d3e-909f-bbc6b52fbcc3", "sighting--8ccb5af3-df30-410a-9f5f-7b1e1cc01df5", "sighting--84bff603-7eb5-4f7c-86c6-aac02fe1361d", "sighting--1deaf8c1-c875-4bf1-8f83-fc4cc621b396", "sighting--24aad1ef-c993-4945-917f-22e6d2aa2c23", "sighting--95b645a4-014a-4dd2-a8fa-603ad873a871", "sighting--24d0619f-9aee-421f-abcd-b246d7d28a88", "sighting--f065b377-c0de-4d71-86b2-5b2ce8f5d56d", "sighting--e1cbb53d-a5ea-4fca-9523-13802e4e67fb", "sighting--c465b905-828e-49ba-a287-e10ee43c24b6", "sighting--ef1e7e72-6443-4832-9f3a-60b5d8fcc197", "sighting--fa4ad4e4-391d-403e-9bf1-0830e5a2be7e", "sighting--3acd15e9-5c2f-4125-88a7-a8f9ff22d5ae", "sighting--44867444-8f12-4851-84fb-adfba1b6fc43", "sighting--05f40dde-c446-4e59-ae24-7478cfdb141a", "sighting--5e548cbf-0c42-46c3-8bc7-6295b52f6016", "sighting--a22367c6-690a-4687-b5a1-d8cfbd6b9274", "sighting--0f38fc36-cebc-464b-be33-a2bc2bd96059", "sighting--09d9a04d-a62e-4751-803e-b2d55330ca41", "sighting--12d42381-f645-4538-917d-2fbf5c754e22", "sighting--b4de525d-5d86-42e9-91f3-cebee4d03680", "sighting--a102fa0c-5f86-4e60-a4df-c88342205252", "sighting--4b4e30e2-636f-4330-9603-e289f4e4ec10", "sighting--9b725b0c-466e-4ad2-ac15-336f46c8b82b", "sighting--41f0ddb2-01be-4368-8a8c-7895762127d0", "sighting--4aee0379-4a48-4c7b-b602-15bbb40f945f", "sighting--9bf512a0-975a-4d95-b230-f9cbec8e0bfc", "sighting--1a2c5185-3fe1-4b65-87a0-eb85af56e186", "sighting--f6f2f459-3699-4db4-994c-6a9b8b107563", "sighting--7851ab8e-46a1-4be4-93fd-0e53e6f66f55", "sighting--cc724585-67cb-4655-a1f0-2e0b1cd6bd81", "sighting--a817916b-d32d-4361-85af-5b70be31ec2b", "sighting--33706f30-0366-4966-ad94-72cab3d8863a", "sighting--7dd3ca93-b49a-4c63-bb93-fefc683f82de", "sighting--249b686e-12da-42e3-b3fa-1f4afb2ed4e7", "sighting--9e52644c-b918-4c38-b80c-2bd2ed90d8ab", "sighting--e2e71684-d644-48ea-a74f-ec5a4f14e086", "sighting--e141bf0f-037a-419a-9b0e-8d614faecb87", "sighting--220575bf-48ec-446e-905b-dacb760ef31a", "sighting--e58160d7-29a7-4315-9788-c0536af22550", "sighting--1fdb2dd1-6f01-4422-9832-5a5298e5c39a", "sighting--f2e99cef-74b0-4ae2-a413-a6a7e4d7d9ad", "sighting--05469224-4fbe-4d15-86be-c7b6100f7e77", "sighting--24f407c5-9bdd-4a2a-a9e7-94186497f853", "sighting--88b46356-bf95-49e1-9fc5-4702192a014f", "sighting--bdf1c443-49ff-4149-9ff8-e43f866e8b1c", "sighting--321b010c-1b04-4af3-abd5-f51f02ddb07b", "sighting--23f5f538-b217-49c8-8736-d32d666e2c77", "sighting--59e69914-9c40-402e-aee8-af5a3adec346", "sighting--c21346a3-0df1-4a01-84f3-a9718abfb1bd", "sighting--5df482dd-b337-4f31-b32a-5c09c3416b70", "sighting--48522eaf-08a4-418d-b374-863516d4dd9c", "sighting--d4da3ead-0db2-425a-a2df-1958b3332971", "sighting--2a3be315-4e44-4abc-ad2c-f1d620930213", "sighting--eef0f720-0d49-453f-81b9-ff6643254385", "sighting--085409ca-1816-4782-a35f-b2ed5e335f5a", "sighting--2abd1d38-6104-4bba-a6a0-e977aae22c08", "sighting--ffb47934-1e27-4741-90fd-35f10b4a932a", "sighting--13703de1-5391-47db-842a-6fc46be1f9f0", "sighting--0d15daf6-ee9e-4e70-a0cb-13e8ab9377a1", "sighting--04598187-f6ee-48ae-94df-66373618200b", "sighting--c2c597a1-0995-4b67-9627-d70927d4664a", "sighting--2791bc3c-95db-4a87-b59e-36d696122ecd", "sighting--b6e7d66d-1a1b-4302-b56e-aa8fa73341b9", "sighting--8fb97e21-9bb1-4d7e-8044-33f91eea8887", "sighting--4bda27c4-d8b5-4314-b1b0-4da14acb8870", "sighting--b828242e-b0e0-44b0-a200-ec281878f7de", "sighting--6ef0a2a5-5aac-41f1-8789-9a9856bb6724", "sighting--3a12a99b-8a9b-44fa-92fb-ce59056872f8", "sighting--b69f40ea-223e-41b1-81c7-d88c576b4dd7", "sighting--b19d6222-3a58-4d40-a0bb-3b0f4f294f5e", "sighting--986b1ce5-0d5f-4186-bbd4-39e3b4141177", "sighting--39cf587f-e4ff-4b6f-bf66-db0baeed78ed", "sighting--44ed4383-18d5-406e-bc22-c84e5fbfd025", "sighting--2b6dc503-78bb-4d5b-93cb-9f72909f66a8", "sighting--9f57f8c2-8a70-4ce0-8c8e-4d72f9118532", "sighting--67a80a8d-9383-415e-97d7-85ea29350140", "sighting--f16804d6-e4e8-4a6b-ae7b-20a570e82759", "sighting--c0e245cb-af22-42ff-b5f6-9be159a19afd", "sighting--26c65f49-b81c-4f83-b068-6bf6f2659800", "sighting--9570dd15-fa03-45c2-931b-5e0e6a70ad6b", "sighting--7a67b7d8-e249-49d7-9e3f-24349466a107", "sighting--073c588e-2d68-45a0-b7ed-8daf8e0008de", "sighting--3ece4c3e-7eb3-41e4-a37d-b3998ab34ca6", "sighting--c236822e-8af0-4cdd-9d6d-c0c98f108449", "sighting--ac313482-2ac5-4967-8f5c-bd3d785f5eee", "sighting--37d319f1-1af8-48b5-abc6-8234bb6c2fed", "sighting--cf61dd8d-a18c-490f-8aec-63407a4e3dc9", "sighting--1234703a-ab15-4bb0-878d-e05ec8e481b8", "sighting--c744afec-95a3-421b-b61b-1bc39c5de750", "sighting--47e5510b-0e7a-401d-b682-fabe8714f2bc", "sighting--1115b130-1999-4158-83ae-4649c484401c", "sighting--cd3a5f27-da38-4a6d-ad91-0832aee828ed", "sighting--b43dcc61-a882-45d2-bd58-31c5c5843b74", "sighting--bf32730f-51b4-4674-95a9-5457c0ce1a22", "sighting--8e379c83-808f-4cd5-ae9a-21178d050853", "sighting--aac56c3d-38bf-4ff1-b510-ca92270e812c", "sighting--f16daa37-6ff4-4048-b88d-1bae37bb9d7b", "sighting--fdce19ed-d45b-471b-b5ce-4679cfffa8c5", "sighting--a976f25f-6969-4df9-bda2-0d51dccd7edf", "sighting--4eb3ad33-fb95-4273-9ca3-e0e55af15989", "sighting--106f2efb-31ca-4080-af36-cc85b3fb7e0a", "sighting--aa8831f4-a414-4a25-9203-f2f9cc7a9e82", "sighting--637fa92d-a884-440d-b987-c460d795513c", "sighting--5a9ad38a-5ae3-4e0a-bd58-b4ae1a7a022d", "sighting--e432a808-24ed-4443-8b43-83179222784c", "sighting--8bf11f13-8c03-4d4e-a35b-312c8eb187db", "sighting--2c335a4b-7325-4bbf-94be-893830ee6286", "sighting--6f580022-3834-468d-b79c-4630bb93765a", "sighting--730267e9-64eb-46c9-9455-6b51b4c4efce", "sighting--58bb758d-28d5-4e1f-903a-9b0fc8b6f3f4", "sighting--1842c3d1-84f5-45c0-a5da-f0c545f6bb1e", "sighting--c02242ba-9fb0-4a9d-837f-133ded445a5c", "sighting--9753fd19-bbf0-4ef9-b382-03ef8f0546d4", "sighting--7abb8e45-9174-4ff0-a398-139e81ae4a46", "sighting--09a9089c-729f-4ee6-8977-e296cb238ca0", "sighting--ac9334f5-121d-4dca-999c-0231bc895a8a", "sighting--d02901c0-486a-4b83-8c84-838c321fecbe", "sighting--7c656ca2-8962-4f2d-bc44-006593dda9de", "sighting--b6e411b1-ff77-456e-a6aa-6b949a27c4cb", "sighting--436a1662-78d4-440c-ba08-2aebdd5e07e6", "sighting--fce5a87a-b11f-4f95-ad2b-78dd5ae1691f", "sighting--1793e38d-aea6-4f0e-8ae6-ae2ba56003cf", "sighting--4825a56a-b923-46db-8eb2-f1dc7a3d6ab9", "sighting--7460b998-08ee-4ef4-b7db-4902a4cbdc56", "sighting--fe4b5936-16ef-478a-9039-be684c031ba0", "sighting--28b652be-bd29-4f10-bdec-149338e350d8", "sighting--53ac0063-3d04-466c-9023-7d3966953cca", "sighting--f68d33f1-854f-4724-990f-df3df4aa6044", "sighting--1b3870ed-5583-4cc4-beee-802f5a98dfe5", "sighting--e9d606f1-a7b1-42de-a428-5d51f55447a4", "sighting--95d03762-6a99-47a6-9ba1-8d396f74c0f8", "sighting--cd553d3c-ad29-4315-97bc-8259bb2740d4", "sighting--a529dc2f-d6fc-4950-9706-5ac36d22ece9", "sighting--c9f8547f-2987-4cfd-aef8-671a70a6ea41", "sighting--e6007137-addc-4e2d-8920-e4c5a52e00a7", "sighting--e002600d-a0d8-4106-94f9-de02749f1100", "sighting--8d803f0a-4f91-4053-8838-03795df271e7", "sighting--86285a69-11e4-4746-9f7e-f2db46d515c3", "sighting--56aa7941-1dfe-4789-8385-8cfc7ac480f0", "sighting--bcd0561c-cb30-46bd-a465-6aaec5bd90b5", "sighting--1be59132-956f-4743-96e3-8bb58fd74610", "sighting--c66efd6a-9936-4a60-989a-9bbe630b004e", "sighting--f68a9e42-5168-4242-a5ac-280395c83449", "sighting--b6970f67-5877-4220-a137-4e4df6953d19", "sighting--d5d0e526-e9aa-4fc1-adb4-d5f4f2e86805", "sighting--bfda78b6-f598-4aed-9679-eb2b7320100f", "sighting--a0d1c14c-e615-4f16-ba9f-97e87c154ed2", "sighting--b5a4a344-f37a-4280-811e-760afc5b7c2e", "sighting--fd1aa5a6-eb88-4e57-92a1-475e4e43e347", "sighting--fdfc96ac-b1c1-4ee1-b25a-cb51dc98da29", "sighting--cf16312d-6063-4d33-9aa1-56ba90746aea", "sighting--53411b84-d256-40de-bd4e-9b9842b7247f", "sighting--c949d1be-3ca8-4bdb-a70d-16e3b31de51a", "sighting--bf7ada36-7e25-4b0d-aa33-3d22324b61f1", "sighting--1cb5d0db-a3b0-4c6c-b2bc-a1ffc27606b5", "sighting--4114461c-3053-428c-a990-70e8ba51d2e1", "sighting--d9b15c09-339a-4ffb-a139-4c51c0b856c6", "sighting--2803fe6f-717c-4c30-a0df-720d24c1a4ff", "sighting--9b663520-324b-403d-8095-c4f0ff0a1360", "sighting--0d343f30-ab50-4227-821c-51cd102522ed", "sighting--71bb9733-21ef-4581-abb8-8e64877d1eae", "sighting--fb1efffc-e9a2-498f-9698-6509bbc39e0c", "sighting--33332d17-1ab7-4ee9-b49d-20ebaf31cb67", "sighting--4bb16e93-f68a-4214-bb1c-d35a29f7832b", "sighting--7aabb277-5a2f-49ce-a4f2-0367b4d2fd7a", "sighting--d6c5e0b4-ba33-45d0-bdd8-f5c3d37af196", "sighting--7be3740f-ad18-4b42-a7d9-2293a2dd0e95", "sighting--9110b849-e3a3-4858-964f-1e1e3ebf31cd", "sighting--d343e41e-0873-4947-9248-c008b1537339", "sighting--1cfe9e6f-afe5-4931-b46e-e02c915a0492", "sighting--54dd362a-a394-4ec3-8e67-fcf9a5cda6fa", "sighting--ddb3d887-1011-4849-8c7a-4a15426a4b2b", "sighting--3795b4bc-b432-426f-9b6f-7b709ccc7dbf", "sighting--45402c0c-d411-4abe-a4d5-18589db63e7e", "sighting--03dc0c2c-afdc-40da-858b-51c705d934e3", "sighting--416fe50d-469e-44e6-aac1-6bf5f305d5bd", "sighting--a4bd57ef-27ae-416b-ae1a-043dab684550", "sighting--53135f0f-7309-484e-ab51-e108747f0b19", "sighting--89a93bfd-eb5a-46fe-965e-46bc6e1b6d94", "sighting--6d894761-b677-49f9-bcc6-7b93c289ac26", "sighting--b9f49617-470b-4fbd-a352-9f968fbac5cd", "sighting--90b9bf49-2b46-4188-afe7-c8719b8a45c3", "sighting--c02d341a-87c3-45c0-8530-cb2c6625020c", "sighting--50a18e02-08f9-4688-bda2-6c557c0ec9cc", "sighting--cc3d85b4-7b5c-4dce-8589-c3e24e12430c", "sighting--536b52c5-6522-402b-a20e-28d1b54c195a", "sighting--959bddbe-409f-4941-b554-458e4a1c39a9", "sighting--853c52d6-4ca5-498d-839c-33f0ce57fe52", "sighting--5d73c343-9343-4118-902c-d0b482c7de48", "sighting--12338168-0af9-47e0-878a-80801d1808f6", "sighting--cee0f31b-6d95-4d7b-a81a-3eddb024bf35", "sighting--5818a60f-80f7-4be5-8893-76926ff981cb", "sighting--11c0af32-ee81-4b95-9248-fe83872dfb10", "sighting--351534b2-5eb4-4b53-a615-88077f6df7a3", "sighting--34c712fc-16a9-4a26-8b80-f41f29cf0458", "sighting--61d45402-cbef-46c4-a469-d770afbe9787", "sighting--b509704e-fe9b-402f-bc14-4e8df613b8e4", "sighting--320cb417-8226-4dd4-9913-ba997c64f899", "sighting--4c81ba25-760d-43cc-9f2a-7ef76c754893", "sighting--4adf2105-5c1a-4e11-b48f-32744db93ce2", "sighting--e40822e4-2ff7-4b01-98da-4c0630f76f2e", "sighting--280222f8-5358-46a6-a014-277eb8fc6185", "sighting--42180ddd-e882-4104-8f5f-48d33c8afa3d", "sighting--7a1a6eef-66fa-459f-a0af-fc005fa34920", "sighting--a50bdb6c-93fc-4155-b9ea-ee3998e91cc5", "sighting--7a11c587-bcfb-4341-bdb9-76fc1ba3829a", "sighting--0f55210e-d837-49dc-84bb-82fba62d10d9", "sighting--74d94aa6-6016-4c45-8c0f-628b3af4163b", "sighting--2ffbc8d9-33f6-4596-a97c-5a436d3ade46", "sighting--228b0e58-e96a-4f1f-ba7c-3d61939872ff", "sighting--ce18d005-f2e0-459f-9460-21737582fc0f", "sighting--d468ca34-4f8e-486e-90ae-7414fd44b683", "sighting--603dd7a3-95e3-4e66-8c2b-5594ca68b053", "sighting--3a3b264a-4c4b-4d7d-a6c6-bec4bd0429fb", "sighting--7d850b71-ca8c-4fa8-acf0-290535383988", "sighting--569d477b-1670-4c09-976f-7e8ef3b47aca", "sighting--054d9241-c8cb-472f-8045-9fee1ae76da2", "sighting--7c22eb97-bf91-4d98-9721-feffbefc299a", "sighting--afebfe7f-f8e1-4643-b4cf-4a8d02f8e5fb", "sighting--0c1b16c9-d9e7-4c11-90bb-f323e8d0effa", "sighting--9f6b693c-e72a-4ee3-8c3b-2bf3175cbb3d", "sighting--8faafaae-9595-46d8-8fe5-6a1971d74490", "sighting--36afc24a-cd40-41b4-9d4d-ef0f7a7723cf", "sighting--980bfd81-2583-4afa-aaad-2ea1340ff434", "sighting--65de76a3-520b-4662-abdd-75f95cd1213a", "sighting--03ad9ad5-9cc3-4e37-8a31-3aa1ffe0d1af", "sighting--2d725067-3792-4841-8942-f3d64ce17c9f", "sighting--be369d79-fa1e-4d37-b278-d10867158739", "sighting--801c29e8-e817-4e23-922f-ed59c3f85c1c", "sighting--e56f4119-e618-4fdf-9770-395964dbe30b", "sighting--b303aa48-628e-43a6-8915-679ffab40de0", "sighting--08b003b6-04d4-46ab-896f-fbe361ea315e", "sighting--9c56e56f-085b-4336-b856-245a4b0914b0", "sighting--57aba821-a409-444d-b161-0ec630c1d252", "sighting--7bac2a39-c124-4d4d-a0fe-a1e3fdd54f35", "sighting--a6a9dea1-6eae-40aa-8a89-fbe46e88fba8", "sighting--26cbd96a-c462-4e83-bb79-bfc416a2fe62", "sighting--0b968857-0f35-46ab-9145-e6927a556676", "sighting--0efaf9c7-c858-46cb-8a5d-553cfa05a139", "sighting--19c577bf-198f-4d1c-a73e-5bf171ec5bd4", "sighting--58667eff-0d74-4901-a934-f4370c90712f", "sighting--b886190c-f14a-408f-83fb-c9984f0dbc1e", "sighting--8ee6912e-2615-460c-9607-5631d7dde90f", "sighting--ce78f2ef-c9f6-430e-a56f-c3ccc187b698", "sighting--456f971c-6a84-424b-8e78-b12e23b15311", "sighting--72a0d9fc-110c-4163-b595-7785d07b53e8", "sighting--bab8cf41-c069-40f0-a1f0-791567102f85", "sighting--b5d49ea3-841e-4cd7-b81d-d49bab7a7390", "sighting--35352019-64b4-413d-84cf-073e719ab35f", "sighting--78044f29-5699-4735-8620-6a0e7d3d0c03", "sighting--34fc6118-526a-4643-af81-99d374228857", "sighting--475d0c8b-7a41-4413-85cf-2c5545fd6217", "sighting--f7874e5b-ca88-45d2-9d1e-293e45ef1cda", "sighting--c0c86be2-f9e4-47db-824f-1a2c10f25dea", "sighting--27547e4f-ad2b-4c33-a25b-6c24c3eb9faa", "sighting--5e751a5b-5c3b-4dba-99c5-c340d6c1b875", "sighting--4c4e4dff-f439-439d-bc7e-0f119144e110", "sighting--b34f619b-a31f-497a-96d7-9fadad955ed4", "sighting--c9f98229-c66e-48af-a900-f430c68f4d5f", "sighting--9c328370-c9da-4baf-82c3-e9316d519efd", "sighting--510a1f25-8e36-4881-bf51-dde10142436d", "sighting--0b98da44-d128-42a7-863e-538ec407bde6", "sighting--01c3ccf8-23b5-4247-96f9-b9dfe766ecb3", "sighting--3d8f58a8-f58f-409c-9b39-be5cd33eb072", "sighting--fbe71d17-f21b-49ad-8bf8-0d23c0ab3c7c", "sighting--85748ace-55d1-4320-b1fc-0178ea74b9a7", "sighting--02225ea5-fdc0-4f51-8a7f-2954bfa58aab", "sighting--a51e7b30-48bf-4317-bedc-bf6efbbcda4f", "sighting--22b927ef-3490-46ff-9fdb-29432e94410a", "sighting--d07b2c66-b62a-473b-a10d-3464c8daa6df", "sighting--4fe962ed-d7f9-4baa-9f53-cbd271e51077", "sighting--547ebada-1354-43a8-8dc3-b2ad82ec0693", "sighting--2d8afbd7-bc2a-4ff0-9a94-350446bdbb3d", "sighting--454f41c8-6524-4372-82f9-bc074c9b3a7a", "sighting--9da2a4b9-4639-4186-a473-6a5719f1ba57", "sighting--dccfdb70-52e9-4c21-88a7-45444aa2edb7", "sighting--c36cf2ed-1edb-48ec-83a3-7e8dc8a463df", "sighting--47e69754-8fbd-438a-8f19-22b3d2ec6857", "sighting--a168d502-e862-4825-ac7c-82cfcf0789f8", "sighting--3d4dadaa-7149-415c-9377-a49f982d07a2", "sighting--3e637ce8-d927-4742-9383-b71fc7730c4d", "sighting--f963e769-ac63-46ff-961b-a0c26a3e4ec9", "sighting--521b2301-ec33-43a3-a64e-a9c0d8da73e5", "sighting--4f1fef69-1b80-42bc-8e7b-9da68c8791df", "sighting--6f6c5ef6-81b5-4fe4-a8a8-a8e7ebc60705", "sighting--05840bb0-939c-48c9-880e-1333348a7bc4", "sighting--d0ef8f80-d3cf-4bb1-b89d-ebf9f6928534", "sighting--9fba02bf-9c70-4b2c-b1e9-463c4ed1968e", "sighting--6fc5b161-22b4-4a73-b327-f3b0d24e648a", "sighting--2ba99544-851d-4e22-9c8d-5b086f7fb510", "sighting--69df3f6c-1927-4ab1-91b9-fe07288cd3a0", "sighting--fdfc3afc-9a24-4133-80e3-913f1387b2ff", "sighting--3a9be4b1-c25b-45cd-9245-eb3d9dc1a79d", "sighting--09736ff0-ebdc-4cea-890d-6b5f7e64d402", "sighting--c6737351-0b43-44fc-b0ba-e82ef63f5c3c", "sighting--3bb4f872-b50f-4961-8c99-73750ce6d31b", "sighting--d986d033-4562-4d1f-8c98-2e2297ca6b1c", "sighting--655240e4-8a32-4ad1-85e4-1a95f17614d0", "sighting--3d781936-8973-4dde-806b-4dcd3c028d8e", "sighting--ccd8721c-288a-4d12-ada7-f9530107868e", "sighting--326d33b4-5e09-44ce-b19e-9ba9a9d2d7c1", "sighting--ed0fa011-4711-4ead-8bc6-19116f91cbc0", "sighting--77cd1cc5-d1de-487c-899d-68bba13b46b1", "sighting--b143c38b-ff98-4e3f-8c97-e6d9ac0935b2", "sighting--0d42fc00-9dbb-45bd-8dd0-2bc821fe2527", "sighting--6126efac-4187-40f8-bb05-1cbd4e752e90", "sighting--26ad3428-e768-446a-b052-64bbc40ba65a", "sighting--92f5e851-f8e0-4bd2-8650-ac419fa0b619", "sighting--b7a528fa-257c-483f-beec-fb67f16a8c07", "sighting--134a2443-7c9d-43e9-bca8-39c6a52c71b2", "sighting--e14f7975-b867-42db-b5ba-ed4a1870d7a9", "sighting--88562508-4940-4d98-a0c0-72077fafc117", "sighting--7393cdb6-2f0a-457b-838d-96a60df9aaff", "sighting--450f23e1-8a73-489b-8da4-37cc23428a90", "sighting--4040b5de-4dc2-4cf5-93a9-d3d3cafc3e6d", "sighting--9026454d-ac22-46e9-b5c0-81384764c765", "sighting--96c1c1aa-043c-414c-9a9c-e4220082dbf8", "sighting--1be27f95-73f2-4b30-a099-4b7de34a787d", "sighting--977217af-5656-4ddc-a4c2-1eb7611f2c65", "sighting--1f42e4e7-3e71-44c9-b421-e7e9750e4f95", "sighting--0ea4f83f-2347-4a5a-a331-b03d5d54ba82", "sighting--96f2dfc0-268d-437a-a8e1-3facaa1e3b60", "sighting--116543f4-6a37-4913-ae2b-ac3cb9ba77be", "sighting--88e73ada-c3b4-4038-ab1f-57b81cdaa4c2", "sighting--19549d3f-9c49-4215-8327-ceb3bd4b094a", "sighting--e9510d77-1d04-4676-a69f-3b473dbbacf6", "sighting--7045af62-1080-4a22-91bc-ae1fdb71c332", "sighting--1ffa2e99-a379-456f-912d-c4eade9ce717", "sighting--50473ddd-9882-4e86-beaa-ded7219c4633", "sighting--344a795e-f4af-4cad-ae81-86d514641388", "sighting--66255127-2cee-4a11-9d10-41471b5f6d1b", "sighting--43bf0ef0-1e2c-42bd-9e14-c92e97611971", "sighting--738e9d85-c63e-4989-b9ad-cd38e4832823", "sighting--0a502325-cd28-4d9f-906e-4025bd621810", "sighting--a8f88a7f-17be-458b-a214-007e42307d7a", "sighting--98b76c7e-affe-49a1-923d-d5ace8813580", "sighting--596d4ebf-8ddb-485c-9f59-2cfe02df2bf6", "sighting--8478a69d-acf0-4bd7-af09-5ffcabf5d6bd", "sighting--9f289da5-acd7-45dc-b2fa-a48f2fe77bf5", "sighting--8d8175e9-ff9f-4e2a-8f56-7aefdf8ada32", "sighting--4342438d-4d79-46ae-bf94-a15df7758a52", "sighting--6db42816-9933-4380-baac-61651ee8877c", "sighting--3ba1e888-bfd3-4dbf-8851-310ce06e2c52", "sighting--313893c7-dcfe-4df1-9502-e87265e310b5", "sighting--b4b5daa3-428f-4273-b399-e7866021bbcb", "sighting--65ad69cb-146f-45ff-a296-861f6caa9674", "sighting--1164e2a8-2edf-4bd6-a0b9-9ec762aa21d6", "sighting--a0430e67-65ba-4b8f-9b99-6f66c588fcbb", "sighting--6eae1ebe-d953-4707-83eb-504b71e99435", "sighting--d0b68342-67a5-46ba-a613-c2dc7d406e5d", "sighting--235e158f-68a6-466a-bfb4-931bfcda4f68", "sighting--194e8976-7575-459e-a00c-74e46e281f86", "sighting--0b3b819d-5258-4433-8f96-a7893380f445", "sighting--7249e3c7-3f01-4e8b-a6d8-d81bbd98a166", "sighting--b9b3d89e-7154-4062-b31d-baf838862848", "sighting--019a049b-243e-4e22-96b7-c0ee529479db", "sighting--3ed8bc44-a87c-4814-bf04-7ec45fae5683", "sighting--f2a3a2eb-daba-4aaf-9d2d-ce049eaad679", "sighting--47952c89-59f2-421a-9765-9f665f05c6d6", "sighting--47046c01-7eec-42b4-896d-f3dff589d74c", "sighting--f22d73c4-29d9-4b7d-8243-7982f1c9e3bf", "sighting--6b2d8c48-31cf-433c-8807-a83b1d50ef7c", "sighting--75989825-392b-40bc-8bc2-049fe5b7ccbf", "sighting--65b81f01-1aa9-4239-9be3-eaddc2c99eee", "sighting--fc831d1a-7554-4ab1-a47c-f54bce57911a", "sighting--914e0d48-fb46-4d15-8b58-d810dc61052b", "sighting--5d07fb80-4fff-407f-885d-dfe5c833512d", "sighting--573f5ca9-8cea-4f48-87d5-2ef335453a2a", "sighting--72810785-406e-48f0-bbba-d39e2dfa573a", "sighting--8241739b-0ba0-4f56-a72a-a821452a2d47", "sighting--d6a8bfce-9337-4b16-8c5b-1b1b2a400f4a", "sighting--814507ef-fcef-4be2-8ed5-943e5d4adc17", "sighting--db82073e-b7bb-4d13-bfb6-c6d563381832", "sighting--39523c6b-36e5-4386-95bb-0688c938107b", "sighting--fb7dbb2f-ea8d-46cf-9453-764db2f7fe06", "sighting--0fc5dd88-8d33-47a1-8f92-e7b885a36de9", "sighting--8f17dce3-fdd9-4d71-9a3a-7533b3639216", "sighting--658cc975-ac8c-41c6-bdd9-11d4f05501bb", "sighting--6abf1ccc-a9b2-4d4e-a4bd-5833e8872748", "sighting--014accae-4ac0-4a13-9e64-0ede690fa500", "sighting--25a110ea-df4e-42bd-b786-0a41f921ebad", "sighting--4b1b1082-3805-49d3-a55a-c47d39fbfc29", "sighting--d6bdbede-4bab-461c-87da-3719f697ceb3", "sighting--69999a8a-538f-438d-9c64-d302f313946a", "sighting--515af40e-a4e2-4988-8c3c-14840f59c67e", "sighting--dc12abdd-b105-4bb4-a5ce-2df55232a04b", "sighting--94574c29-8058-4ffc-bd1a-f16a779fe3fd", "sighting--89e7b3f9-3370-4a3e-8ca6-d3a93a7ab942", "sighting--7be5e9dd-7086-489e-a91f-1e13ace69e89", "sighting--da37fe37-f653-4c30-af42-7329e6dc9bea", "sighting--f3a9b758-35da-4b56-b681-05f020d4b2f1", "sighting--524b4f7d-eca2-4310-be88-b6825d5fe0cc", "sighting--981cbfbb-a839-41d7-a91e-b653d1316039", "sighting--164a3aeb-2541-44f1-bd3c-4b65203abbaa", "sighting--4cb77cf9-b21b-427c-b66a-623368c3f96c", "sighting--0923485d-aae6-4101-8880-d59f9e85419a", "sighting--dd4c5f11-bab5-4e89-bd74-033bd450f358", "sighting--99ba1ebf-28e2-41d6-afc3-f14ed6a18ebe", "sighting--f6b34c92-bc92-4c93-9edb-ca5dd1f3dd57", "sighting--5892a5fd-0ecf-4f12-a7cd-a03427f74ff9", "sighting--f412437a-26b1-4e97-b223-a54b37c1b252", "sighting--09e18fb2-22ff-4dd1-a859-080d6eac8c96", "sighting--bb631243-7579-442f-9cd2-d40f8e9099cd", "sighting--640c2b8f-784c-4b29-a5b5-bddc36675be5", "sighting--106fb43a-1f85-4bc1-a455-f2ec9fc73ff1", "sighting--a3cb87d5-fc96-426b-8948-6e4c665ac352", "sighting--8a48fa75-9e0a-4e5b-9a75-9ad2dbecfc0a", "sighting--ce00bf78-3b65-4e71-bdc6-070f71a19678", "sighting--77d16cd3-8194-439c-81e1-dc410b96b611", "sighting--c19d28f9-b349-43d0-bd60-ee89aa5e751f", "sighting--430bdd3c-6da9-4a20-a1fd-90141fb1049e", "sighting--58a6d097-4dae-48d7-9010-8cd03cbaf953", "sighting--022b0ba8-dc8f-4ef1-851d-d1416a102f16", "sighting--81317a59-4840-414f-a957-cf3c6b12b731", "sighting--0e29b8c8-8c4d-4ba8-ae30-019fd5c8bd38", "sighting--7d9f47ac-fed3-415b-8554-13d58ec64140", "sighting--a2fce37c-45c1-4876-9d26-7850de40973d", "sighting--7fda8e86-55b3-4b9d-a645-0d51d81aeff9", "sighting--08cdbaa3-fc2e-4122-9b2a-c8f3cf512883", "sighting--48857183-99e1-4051-868c-b54fe25fe28c", "sighting--08c88106-6ef5-483a-9e49-f77921db43dd", "sighting--c9d6c3f7-05ae-4762-84dc-3ab62451b8fd", "sighting--1e1671ef-fd07-403d-bf3a-6f9db65b41e5", "sighting--07abdbd6-245b-4187-8a18-a7a6a3c7fcc2", "sighting--3fa224ad-2aa1-459d-9c71-29e24cbabd04", "sighting--e949e0c4-217d-4b59-b7bc-fa3711b71915", "sighting--9e7a0a54-8862-42bf-b662-a852dd9a80d3", "sighting--c98a2a55-7517-4b4e-90dc-214aadd48a74", "sighting--dcfffc29-9606-4b02-85a1-4e5b29290179", "sighting--d3df5e9c-249b-447a-a93d-bfda4f75ccf4", "sighting--8976f3d1-ebbf-4d2e-9208-00e3529c50de", "sighting--1fde5ed6-336a-432b-b061-298f29146217", "sighting--0b4bc742-c77a-494e-b5a8-f8b81dc24fd0", "sighting--c0e90abc-0821-410f-af0a-91fbbc920ab5", "sighting--e4acab53-f360-4491-b18d-02166fda531c", "sighting--859bd762-e380-4090-8092-03ad87ef98ae", "sighting--1486c39f-62b3-4696-a831-f981807cc46d", "sighting--aee06a04-46a6-422e-8bb6-2c1339f7c8d7", "sighting--ade42e56-4a6f-490b-9b9a-2e13bd4cc7b7", "sighting--3c9c2470-9854-4b80-8ef0-8468138829b6", "sighting--d8cebac1-9422-41c6-a193-533933fddc93", "sighting--91e9c80d-aea0-4bc1-8f11-e62ae458d3d4", "sighting--1a081479-25af-4168-8c50-87156e23fdc0", "sighting--78d21ae3-a298-48f7-9b50-40ba1f577046", "sighting--0a161a39-3b8f-426e-a212-b7fc21a306a8", "sighting--3cbe6e53-ba61-4361-b819-23ea0089d5dd", "sighting--48f80095-81ec-4599-a290-99b295c1ccbe", "sighting--7966a034-0921-48d4-b01f-615740937609", "sighting--1b9fe07f-c6df-43b1-b765-9d4dd4c47c47", "sighting--1ab3d6e6-5058-4654-a768-b2a4a546543b", "sighting--72b1f5ea-1f20-4692-abdd-6da632f54485", "sighting--c6f34d1a-d243-44e3-9197-103a33b785ba", "sighting--86bc2545-535c-4ec9-aac0-fe89ffe1f5b8", "sighting--8400fc89-7af7-4c06-a8b5-c23e90d3fe0f", "sighting--57759103-c1e1-4dc3-8539-8e3575189781", "sighting--500bfe1c-1c02-4bc6-a86b-7ce5732acffd", "sighting--eb90603b-a7d0-40c2-9408-25ad427d8204", "sighting--4935fa89-87e1-4ccc-a48b-a7f8a1487b20", "sighting--fb72ccdb-8a4c-4924-a387-654629a8d404", "sighting--2a64f01e-b6c3-4310-9d0d-cebfbb937050", "sighting--234c846d-b98e-4f28-aaaa-d2ca13918dfa", "sighting--eef94cad-e3fe-42f8-b8b8-ec11b58afd52", "sighting--22e70f86-a82e-44b8-8eff-d6ae0a8f0663", "sighting--f47b83d3-018c-4288-8400-ef81fe3e2a76", "sighting--22707bf4-d7ca-4268-93c9-6ebb31ca8eda", "sighting--5399e952-7e53-48cf-bfeb-c0e16e63f2de", "sighting--06253352-04a4-4885-a3fc-61b89e08f815", "sighting--7afa5dc1-779f-419b-a532-a3c8d9e0248a", "sighting--01e14846-e312-4658-b171-4c5b2cbdb741", "sighting--959895b1-6ac7-41a6-9c49-8c14108092f0", "sighting--9f3fd0f2-fabd-4a2a-8302-9bfc87928597", "sighting--721d0c70-051d-444a-95a0-059d91dfc638", "sighting--4ed4dcf8-a281-49ec-b96d-c2734384e046", "sighting--d01ce5d0-539b-406b-99df-b418cd3e65c4", "sighting--0b80a5c4-4c98-4a43-8dfd-c8c5e4798b16", "sighting--4efaf1e1-2328-46f7-8c59-c6ec2c5fe7f8", "sighting--6da7f53b-43aa-42cb-8aaa-03ccbac7c212", "sighting--51ede22a-b1ed-432c-bc58-38d4a6a431af", "sighting--4e70980b-8f5e-4cb9-a604-6a394a10a89e", "sighting--07ef292e-9405-44d6-92ce-bc089aaf161c", "sighting--05762712-c5d1-438c-ba68-9e12c3e15596", "sighting--8858a467-97aa-438c-abe4-baa5825f12aa", "sighting--df7dc9cd-4ac2-4a82-b8ff-bda7e2ecacce", "sighting--0cd6b5ca-a958-4fde-8f62-45112073952c", "sighting--73d33cfb-1ec7-4572-922b-ce9f9f45d508", "sighting--c6b8c825-7888-4745-832b-300fa5353275", "sighting--061d1d16-3cd0-417e-ac60-8e044f4530ec", "sighting--7d23fe41-258a-48fb-8937-28dafc32d85d", "sighting--e0a4d457-cdb5-4e05-aac0-207344fbc5ee", "sighting--9ccb8699-efdb-4974-a80a-8fbbeac633b1", "sighting--8439fcb0-b955-4897-963f-a622eeac4465", "sighting--67ca2089-ff57-4885-b174-b6bfde775403", "sighting--d73a700c-b723-42bc-b7c7-d7269d3b4890", "sighting--62363860-36b5-41a9-a549-ee5166254703", "sighting--69d282a1-d283-4ab5-9852-02bd69e5da11", "sighting--74484d77-f92e-4613-b5cd-f1a9d52996e5", "sighting--8918e791-c001-4c1b-a98d-2edd4f0a42e4", "sighting--0cb715a7-7474-444f-9775-de9f9384f1be", "sighting--d995533b-1786-46ba-8713-691f89c8e533", "sighting--426082ac-7d82-4ef9-a828-08db4b7e7d6b", "sighting--b88d5f5b-5351-4e56-af0c-52e6973e118e", "sighting--bd62b049-58b4-44ed-a078-874972ef3210", "sighting--7713c4e9-4b70-47f1-8a68-c81bd6bf4316", "sighting--57341bf3-1ae4-4a22-b073-866b5d86769a", "sighting--9d92f4f0-83fb-4eee-b0a3-7a5a791271a7", "sighting--20abfa55-a46e-477f-a754-4da006469c3e", "sighting--58ab9d70-d9fc-41df-a845-872abdbc46ee", "sighting--cd339257-b011-4432-a91f-0520ab7b3f91", "sighting--e014c8e1-c7f6-40e2-acc6-4c39e6e516ec", "sighting--8263d311-81ab-486b-a375-5e7898fed462", "sighting--c1e84aae-01ac-472e-89b7-246193137327", "sighting--36f91f44-90c6-44ee-8a94-5ca8e387ebcc", "sighting--84cc0829-248d-4dd2-a977-41a9db1eec40", "sighting--15f51c02-ecce-479d-87dc-bf456c1ae03d", "sighting--a3d2d29d-5a1e-4c50-810b-95d034d59ae5", "sighting--bd39b6ee-ab67-4220-9d67-da4392432fb6", "sighting--ee1ecf5b-2a04-437b-a8fc-3554e7367a29", "sighting--857b0e2c-323b-42e4-9121-6417a3d4ea02", "sighting--157ab2ca-c1e2-443e-a8a4-d5a1b9b4bf6f", "sighting--6f8a5897-1c01-41df-b738-27cc5d2f2996", "sighting--94fcf13a-b7fa-4984-b6e7-6feb2e72e0dd", "sighting--1d62325a-e128-403b-878a-047c412679a2", "sighting--401aa6b0-6b5d-48b5-95f3-2888a5c7397a", "sighting--30ee00fa-17fe-4a48-b4c1-c52a094e2930", "sighting--23558021-d0e1-4d7d-b863-61a3fd2e8807", "sighting--3d417fe7-9bcd-4179-bed3-c38e2c556827", "sighting--4da5d8ea-9695-4c8f-b55d-98e7755cb0a5", "sighting--674d774b-dc4c-4697-b1be-e9297d0a2fae", "sighting--17ae3f25-a9e9-430a-938b-94eb5e14c0db", "sighting--b16ef28c-7273-4750-9e81-76a5d2765c60", "sighting--309ef7a1-8e2b-4f69-b231-9556d74c69d8", "sighting--a18b667b-37b7-4585-9b57-e966cf9406f5", "sighting--70242741-b3b4-4c8a-8e3d-cb0fc90ad515", "sighting--9245473d-7984-489a-87af-2b17d158041c", "sighting--487f73c4-d702-40d8-ba15-c3705a3922c3", "sighting--cfca0666-bc4a-466f-991d-c3f4681e0781", "sighting--3e59570d-40e7-493f-81b0-daef4b1dabab", "sighting--bcf1546c-7593-4d3d-a6dd-e58afaa0ab8c", "sighting--1c448d95-9cfc-4cc1-82c0-ee55a58ed897", "sighting--869b97ff-f7ea-46dd-ba81-85f800950235", "sighting--9c72fef9-7a9f-4c24-ba71-0ebf00fd584e", "sighting--c82c17e8-e80b-4c40-90de-c261c69492d2", "sighting--4ee50545-531a-4c0e-994e-9412b5843adb", "sighting--6db09a74-b19e-4a0d-b75b-8bf071e7c5a2", "sighting--06389183-d11b-4bae-bea3-10bbca4cd919", "sighting--716938f4-4ffa-4787-8158-6eea7144a1f5", "sighting--55130db4-4fae-4589-ad33-feddce688851", "sighting--6535c2c6-c473-4a38-81e4-22c790b14159", "sighting--49ae1667-3b49-4d82-bcbb-505697b67bd6", "sighting--e04c7241-b028-404d-a9ef-7f8712da8f45", "sighting--91e72d16-66ab-4386-917c-93df4a731fd6", "sighting--d3ca865e-051b-47d8-bd32-5566a82b91fa", "sighting--8a99226f-cd6c-4a8a-bb22-ae5a9b7a9a8b", "sighting--2e6ac0e7-0e72-48fb-8ed6-ca6763610903", "sighting--4918d0f4-0264-415d-ba24-4c8cb69be595", "sighting--0882c7f6-8014-4c34-8e90-870c59e12898", "sighting--add3b1fb-9164-454e-bb37-5363e8a57e8a", "sighting--8f981233-dfdc-46a6-89b8-c38ebdbab671", "sighting--4cfbd54b-fefe-4e5e-b4b3-15839fbbb12f", "sighting--83fbeea4-d05d-4e06-abbc-8074ac4e4ab4", "sighting--89a6c89c-94ef-4b57-b5a7-7de8702ba2ee", "sighting--45ba0e5a-8554-44d6-8fb7-7fe8bebdde68", "sighting--6d485bdc-399f-4f23-a256-c29fd7f08681", "sighting--a81e3260-910d-4a9a-8692-02e383d79934", "sighting--52dcc118-37da-4aad-8e4f-7bd1dde50838", "sighting--37ec6d65-d986-4ce7-a43c-ef33710e8952", "sighting--c6823556-a81c-42ed-a3da-ac5b5d31080f", "sighting--117dac35-4e21-49e3-bcfa-405e60b820fc", "sighting--aecc4941-5745-4050-bc59-a90b13f5d01e", "sighting--b47a50cf-1b8f-4fcf-b4f7-25912b793746", "sighting--46af611c-e82a-4dd1-9d53-1a9039c8624e", "sighting--daf364f1-2368-4cba-938a-d7e28807b55d", "sighting--42022ded-1b90-434f-b59c-1c46a36fe4d0", "sighting--2f96d386-b35e-4dae-8084-ef4fce5c403c", "sighting--b644a98c-d59b-41a5-91d5-759d5a5fa559", "sighting--99409972-7c42-4f32-860a-a60086a1f281", "sighting--36c5fc11-63fa-404e-9cdc-5ac590a88975", "sighting--93e7da1e-5a5e-4bff-90e4-9ffdc39fb3bd", "sighting--4f4ab98e-c628-4476-87a8-093e058aca77", "sighting--99c5d1d0-5b42-447a-81ce-495dd3160392", "sighting--e1d6da6a-6264-44e8-9297-e5b7f075d06e", "sighting--5894b9da-eb0b-4a17-80fb-d3a326e9f4f3", "sighting--536edc68-49f0-426f-84bc-4fceec57956e", "sighting--545f0af7-c3a0-42c8-8148-7b734a5405e7", "sighting--c6f05cd2-a2b8-4e46-9be2-5b9fa88f967d", "sighting--4d1939b1-727c-4b90-92c9-77705a8b77b7", "sighting--f7f25be7-d193-4519-a221-fb0c7ea54679", "sighting--f0a3cc84-c2d4-4d16-a831-b24647e9e8f8", "sighting--870707a4-c2c6-4f0c-9371-ebd037ddea98", "sighting--75885df2-67cc-469c-af28-d8288e2a319d", "sighting--24376cf6-39e7-4a78-836c-9fe15b747de8", "sighting--be756036-6fe7-4057-b5c7-05ce559b84bd", "sighting--aadaba7a-4032-4325-98b7-2c3b91f544c2", "sighting--b42511f3-2a72-4c1c-a251-3a1e8572231f", "sighting--dc558d17-d622-49ce-884d-4cd13636a41c", "sighting--75fc2c2c-f888-4153-b9d2-dcf7cbc3961b", "sighting--348f3915-6395-4c41-8946-7bfc3c6c94c7", "sighting--07e0504a-06af-4253-99f8-87f737153427", "sighting--56833482-94ed-4d71-814e-6515fd2eced0", "sighting--2b01767e-d4b6-4be9-a9e9-682d598d3498", "sighting--b475d7ca-7d2b-4678-9f91-71d31e7f4416", "sighting--cf82db43-ffc4-42f4-8c1f-d85b3479f08c", "sighting--f54ba094-17bd-4f66-9c56-f1eb5cd326af", "sighting--0b348db3-f4f9-490d-bbb4-0483b7190a1e", "sighting--6c0ea21a-f33d-4a2d-9003-21e62aaf315c", "sighting--8fe90bc8-5ccb-45f1-b34b-cb0d3587270e", "sighting--e296e565-518c-4b2f-a8af-bb9497fb1bb7", "sighting--3032ece2-f333-463b-ba00-8995b61e2024", "sighting--c0209ab8-3ad0-41ab-b0ff-7068f060a827", "sighting--477bebdd-56f0-4ddd-87b1-9428a95a3e10", "sighting--62b5e086-339b-4864-a936-854b6d0f12bf", "sighting--ccac5b07-fcd0-4d38-84a2-3aa2f76ffb17", "sighting--90b06388-0757-4d4e-9516-c1ccbc9ff0d8", "sighting--9a1d571a-485e-47ca-9af4-f61b0fc06905", "sighting--5cb9dd31-fa5b-4d85-b167-f644cc1681af", "sighting--33c616a6-c460-481f-a2ed-577df3a8feaf", "sighting--ef2ee4be-8226-496a-9245-94b537df8145", "sighting--54d6e9f9-8dcc-45ae-bfef-1cb78d473e00", "sighting--9b0063ec-008b-4635-8743-a8bd40b14ebc", "sighting--9c8bac30-2975-407d-82b3-0cc78d3cee2b", "sighting--409ef334-722e-45db-8e22-ccb148bf0e78", "sighting--5ecc1e36-6c6a-4c10-a5e1-93bef2eef5ad", "sighting--ec917cda-ed98-460d-a65d-9f19b3da1608", "sighting--c67379b8-5591-4a4a-a63c-f341f3bd74fc", "sighting--212b8735-b0f7-43da-9727-5f7e296af6cd", "sighting--6e83a56d-357a-45d6-8313-78ea6e8a8b2c", "sighting--9f89c653-a51a-4c24-b8f7-377acadc38e3", "sighting--a95766c1-3527-49c8-87bd-ffb24d592f7b", "sighting--780b8873-01c5-46b3-9efe-ce82f68d0e3d", "sighting--bbc9c558-beb9-4c4a-ae09-c7f6fcbd97f4", "sighting--12531990-446c-4760-9474-a20b6dec6155", "sighting--f915bcbf-5bfa-4a61-a020-5d74e3df0af7", "sighting--9bf2370e-0e38-42fd-bf0e-e1bfa638d97f", "sighting--bb35638a-5def-4ff9-a3cc-f9ea5ce80e97", "sighting--0422beb9-84c4-4c46-8dc7-609ba36851d1", "sighting--c680d8ec-1c0c-408c-82dd-87117c856c1b", "sighting--31349fb6-5f29-462c-8437-d5aabfd25f95", "sighting--5ee5b413-b453-4d1d-b997-86db984d99f3", "sighting--ac2ca4da-1707-40a2-baa2-85116dfabc95", "sighting--472a761f-840a-4e76-ab6d-dc126fcf9626", "sighting--ee57a620-a682-4f04-8606-9a70e3887c43", "sighting--f7328d25-07a1-4659-8bc7-89e1143bdd79", "sighting--6e58b846-b8b5-48e2-b44a-1d1a6b9b1f4e", "sighting--e9f00d4c-8975-4f3b-bd11-acc0161726b2", "sighting--f3f530e2-7f30-4da8-b3c1-56ba954b42c9", "sighting--e1ddea60-f593-402c-b0de-21922d143f21", "sighting--68fc469a-73c2-4e8f-a793-923e95187d05", "sighting--112e408e-01fc-4ea3-a309-cbb8bbec042e", "sighting--1c047c0d-3464-48f1-b3c1-7adc54671318", "sighting--fa327150-1cb2-4bba-9fa9-25f73e9af5fe", "sighting--641e681d-689d-4cd7-b89e-a34e2369f9c4", "sighting--cb62364b-45fb-42a1-a31a-f3aa7848bd1a", "sighting--8400debe-a47a-4fa3-9c46-9dfd971c5dd4", "sighting--6f9061a5-ac3f-472f-a213-c22bf10c591b", "sighting--f3a751bf-b6cf-42d7-88e2-8ec329b4117b", "sighting--5986982f-cc48-4982-8644-b7e3282a45ef", "sighting--945bef0d-eb21-45f9-b57d-e998875b8810", "sighting--3f1fd7f6-26e4-4534-82b5-8cdd13f62c0b", "sighting--6682aa32-1300-493f-9603-68e365f16178", "sighting--1cd7e096-c3ce-4681-8969-560108b5620b", "sighting--ae0450d2-9eb0-46e2-a6a0-7a98e621690a", "sighting--2415cbce-4a75-4e04-8575-7f481dd85cc4", "sighting--fa1f4692-1ab6-4838-9c48-96cffdfd7851", "sighting--6454b002-f4c1-4ff0-83ad-b20013e4e1b4", "sighting--cb3502fa-ae47-4e43-9988-40ccd928af70", "sighting--ccab4e7d-5363-4112-b4f4-bfc7f8921bb7", "sighting--255a81b9-abde-40c9-bbe0-86710cebc507", "sighting--9c293a83-983e-477b-8e6b-3d3f7b91c6e4", "sighting--da2c75db-0bf6-4ede-b213-887fa1c3de4c", "sighting--3f7c96ac-dc30-4ae2-902b-5cecba1f06fa", "sighting--669bbc94-5aa3-4ae2-834f-330f0257e856", "sighting--9477b27e-ba8f-4fd3-85f5-402889867186", "sighting--42964589-f8f2-4bd9-8c0f-007df777107c", "sighting--491994b5-fa4b-45aa-ad6d-2339745bf123", "sighting--c2b93e41-d9b2-4922-a46c-35e9cbddad72", "sighting--45fbcef5-d42e-4142-be36-b3079e88f8d4", "sighting--e60e3ff3-22b9-4cf7-ab81-debbe444f209", "sighting--c6dcaa6c-088e-49ae-b0a0-b76c563a8e8d", "sighting--113e1dd4-299e-4c14-aabb-04059434aef9", "sighting--f0fd5873-b00f-4644-a2f3-60ea1fa1e737", "sighting--0f5754aa-3161-44ff-9b7e-d704ab42b65a", "sighting--a9ac827d-8012-4674-b411-974c8b2344e8", "sighting--8223aaf0-8232-4bfb-958b-7d7f49d297fa", "sighting--53ad1e3d-25c9-4378-bfbf-e0ed0bd4460f", "sighting--0e8da972-7c0a-4883-b29a-fec4d5626b55", "sighting--e32dadd5-ff8b-47ec-b564-5472a68a3bab", "sighting--eab4d1cf-d7b2-4e08-a826-36f825b7d670", "sighting--040a53cf-b64d-4e12-9c94-341b9eca747c", "sighting--a98a845a-f20f-4429-86f0-abcf19d0c60c", "sighting--a13c4f4e-1dd5-4ca6-921a-01321a795fed", "sighting--b0098c42-b41b-4d3f-a352-d6ece0134172", "sighting--576840f5-2520-4e78-ad3b-5acd3ef7495b", "sighting--5f79bb43-d8c6-43b1-8c9f-793d94652a5f", "sighting--76177532-3160-4678-8c08-cec1295218bb", "sighting--e3a3e55c-91df-4c00-86de-34ec898b0380", "sighting--f16940e6-203e-4a08-838e-9b02e8c9514e", "sighting--19a86e4a-832e-4d26-b81a-1d531cc2c6e7", "sighting--42965732-354a-47b4-a31d-2c1fa46b6f5d", "sighting--1fc1c055-a57e-40bb-8f99-1dd7555a9d4f", "sighting--53a47fc9-072d-4492-b7c9-f28cee1084b0", "sighting--9aff650e-683a-4216-939e-924ee33e704e", "sighting--cb039775-e690-4c16-84af-59f0f547d4d0", "sighting--6ce8a1c9-0922-4fee-9392-0d9956b85be9", "sighting--e1d9f697-b7c7-41be-901d-1f5f49a1fe19", "sighting--efa4d5fd-f69d-48a9-8300-77f10744ab62", "sighting--c822563e-3e68-45a1-9bf3-fdf644aa61b4", "sighting--141d3bf6-333a-4bed-8005-fb24061640e2", "sighting--ea0cef9a-f6e3-4ecf-ab02-1874ac50ceb8", "sighting--1488b80a-25f6-49d1-9a53-2b8d03a2b7c3", "sighting--62f9dde7-36c2-49b7-8eba-37d21940daf9", "sighting--1730b758-be2c-4307-969e-b8bee8ccf9ca", "sighting--2b8c3208-98b2-4fda-acf2-683cebea0d75", "sighting--f6fa73d0-efbf-4f91-b204-98e697d45b56", "sighting--b5e12272-400f-47ab-b43c-3a8a77b011ec", "sighting--43b656e5-4e71-4b03-8a63-feb28df1b5de", "sighting--be32e532-8e10-495b-bf8b-21dfa7d0fb11", "sighting--b19d66f3-9006-418c-b18d-b74dfe2dc7db", "sighting--ccc95144-cf78-4b71-bf67-3702a0811f9e", "sighting--3f4b91bb-e9d8-4e30-8dbb-add9433b99fb", "sighting--acdea209-4823-427b-865b-27b40e0a5ae7", "sighting--3aea7bb4-39fc-44e4-8f40-bc3650d98f73", "sighting--9aa6bec7-7746-4e7a-b065-cc625919a547", "sighting--c5b69054-b153-4b40-b551-a788872e7a66", "sighting--1d180cbb-ee62-40a9-b91f-75adba75a98d", "sighting--bf5bf0b4-e3d6-4596-8668-7067b68702f4", "sighting--8d1007bb-1f58-4486-b937-272c9eed8a57", "sighting--acff32cf-d94e-47cd-ba21-baebd4f78740", "sighting--9163a0ad-9289-42c7-a94b-cba6824d1636", "sighting--ed5c4081-b6e8-4956-9cc2-0482cc7f4ca3", "sighting--bd267d64-0d0f-459a-88a2-e54d13ca8315", "sighting--c3637e3e-afcf-405b-99c0-709401bbf125", "sighting--fa050158-893b-4da4-afee-b6ad6f8bfdfc", "sighting--95bf388f-e1b0-41d9-8556-8fadffd9ee5b", "sighting--b9ea9336-2372-47d3-8658-2397c2e971dd", "sighting--d886c41f-0d55-4cde-88b6-de090d2e6d3d", "sighting--4a4b1bad-501d-4c72-ab37-7a762cb2592a", "sighting--511e0c67-00db-4f40-8738-14337f472d51", "sighting--e3d833ac-6ec9-4665-bc3f-9b496caa19fa", "sighting--23e4f041-b1ae-43a1-b0d0-0bc2bebbfbf0", "sighting--281c1494-487e-495d-ad73-a61eb8ca91a2", "sighting--07d5e566-3fb1-4e63-a113-d11aac93a040", "sighting--6d44c448-2b57-4f65-b4b9-12154f9f4841", "sighting--ed1d2110-d524-4412-995b-452a47e0216b", "sighting--379c0355-137d-4cee-b2c5-7260e8f37b71", "sighting--8f44ee31-b6d8-4fe7-9fc3-f96cb5dce2d9", "sighting--0dbca3e9-c4cb-444f-b6b6-61d3f7566bca", "sighting--4c88ad29-8480-4006-a88a-3ad4a7bd10ff", "sighting--909f7e07-8ad3-4bc8-a156-a144e534c1ff", "sighting--d00a7671-7707-43e3-9db1-5ae10de41ac9", "sighting--e0dfc9c7-1a24-42d9-9af7-8d62d6f3f649", "sighting--dbde30e2-4516-42ba-a88f-14a88b122d15", "sighting--21bcdc01-1695-471d-a04c-e5b5373bf046", "sighting--8d90189b-5751-4b20-a15c-626468d20f35", "sighting--7693207e-d69c-49a8-b091-7337d9d8a8d4", "sighting--95a96e10-ac97-4926-93bc-adfd21f0bf97", "sighting--bd5edbac-900e-43f2-aec6-986b0b8b8b94", "sighting--4a2a50fc-0ca0-49c0-a9c6-2d6dd592013c", "sighting--5d706cc0-5190-4e16-8e5d-92290f95567a", "sighting--237fb2e7-9f49-420e-a3a3-0d3ba0e9244a", "sighting--3f91e673-67c5-4513-884a-f7540212f4a0", "sighting--3ee22056-b449-4654-8a1f-e24980dcd196", "sighting--3ca53f0f-be36-4658-8365-c16c0cc536ab", "sighting--fcf40641-2826-487b-80ec-4e83b4ff970a", "sighting--c28cd88d-b07b-4f47-93ee-3c1f77b435d7", "sighting--9e006182-27fd-4bcc-aae0-83f57ec88718", "sighting--74dc90f7-0869-4b16-9b31-4410a3dbf0ab", "sighting--9d399ca3-76e0-4f37-9c40-018105dba150", "sighting--99a223ea-7631-418a-85d0-9056a615bc70", "sighting--e3b3a2ca-6c10-4649-b133-862663447350", "sighting--c111bb33-7ba3-4791-acd2-06261033bc2d", "sighting--da095732-9a99-4acf-a5e3-9acd4f65fa0c", "sighting--06d85bee-dd29-42f9-87fe-7515ab3bdafb", "sighting--c8619c15-b9f7-4067-9643-cdbfdda07cc5", "sighting--ad0ef6fd-1d2c-4cd8-8565-e2e5c170693c", "sighting--92e1400f-e11d-42e7-be41-5e109388fe75", "sighting--27631b47-9ea6-4b0c-b04f-0a69d8f8c9a3", "sighting--9334be4c-9995-4a8c-8485-9b224679ed37", "sighting--43455173-1eab-4fa3-97a4-70bd982320c4", "sighting--3b362207-7216-432e-afbf-a70792c948e5", "sighting--afe64bc0-d3c6-437a-acd7-45b4613beabc", "sighting--6a1b1837-833c-452c-9f40-694fa7dec161", "sighting--c19dd88d-4d93-4f6e-b882-26764753712a", "sighting--f44741a1-260f-4303-902d-3f147c3bc97b", "sighting--ab3a4f49-2d7a-4d75-adbf-4765d399fc48", "sighting--d80d4236-e95f-4955-9b7c-4b9c66338f60", "sighting--d7a73e0c-5df0-431f-981a-a12613b46a1b", "sighting--228c9b1d-3b0f-407e-9c15-fcac0d60bf40", "sighting--91ceae5d-2152-4352-b76c-dea81e183648", "sighting--8cca1db7-cafe-4c8c-8857-66798240a373", "sighting--5ea062f9-fdfa-4e5c-b1b5-5dbf2b698841", "sighting--1b2ad9d0-f675-4b29-bcad-3bf77880b9cb", "sighting--e50eac2e-4bd3-446d-a221-90a14e24f446", "sighting--50105b8d-46ce-4868-aad5-d8e14420218b", "sighting--e561bbc4-d57b-425b-a09e-3ba5b40606d5", "sighting--a5ecd6a6-491f-4966-9474-974859ec9619", "sighting--dadf1e8a-e93b-40f0-b588-d57f9e078018", "sighting--3101508b-d75b-4126-b147-9b77a590b652", "sighting--6a4929e5-c6d3-48dc-bc3a-3fac9ae748fe", "sighting--0949e6df-7b90-46ef-865f-b839b68126f5", "sighting--6270f439-0ca4-4def-a0f4-51e74b284d5b", "sighting--8ac5fcde-a1cc-4a34-b70d-bc421e2ecb75", "sighting--46dc4bae-48db-448d-8f14-f493c33e7b1c", "sighting--6576da64-1033-49c8-9cff-a7c995947f7a", "sighting--524bbdd4-81f1-4937-b644-09f322b0eb5d", "sighting--007e8a19-b7a9-4c66-afa9-6f6c7f18407c", "sighting--225d5590-3209-4fd5-931c-cee30a4c7299", "sighting--b7647e6a-d41b-4520-909b-d8f1824c5a91", "sighting--1692fc82-1b91-4827-9f23-298f7bf5a3cc", "sighting--aca595e1-c840-4bfb-9bf1-c50c13cdc1b6", "sighting--20644c48-e613-4666-a101-e70909492f70", "sighting--5ff64dc4-d113-420a-b27b-4a21eccb849f", "sighting--eb070931-b5b1-4c38-8c76-07c3f05c4210", "sighting--927984fa-b9c0-42ca-a31b-4fb9848ebde0", "sighting--ebe8e75a-13b8-4638-b3b3-823682731909", "sighting--fb5c8672-03a1-45cc-b1a6-4a5e1cf7588f", "sighting--e6253f54-e4ba-43f2-bc78-a9daa8a1738f", "sighting--555427fe-6633-47f2-a4a9-906aaef4c530", "sighting--7a87d33b-43ee-4c5c-8e16-f5279a3522e7", "sighting--0436d397-1bab-40e4-8ea2-b0057df73835", "sighting--acf00609-751d-4859-b751-4af8fadb2a02", "sighting--68d0ef07-7af4-4b86-8146-284856cb2f4d", "sighting--597f1bed-2675-4b8d-b4f7-78d38cf103e4", "sighting--b1a6677f-47d7-41ac-ad39-a228906321bc", "sighting--0a3b7708-6958-4274-af3e-df50a0c5b401", "sighting--e60ffac1-a405-4e6b-a8d2-9d5b9445f278", "sighting--f6023abd-0069-4975-b18e-f4209f67bfcf", "sighting--d4741806-132b-4aad-8777-e3676d24f537", "sighting--e287cfa8-aa47-4b0f-988f-48c949cdee1d", "sighting--39b749c8-7073-4c9b-b0e2-0700bd1cab68", "sighting--a8b509c5-6a6b-420f-9fbb-b13fe1b231dd", "sighting--aa028f15-9f41-4681-b9e7-cceb176e307c", "sighting--893a0cfb-b20f-472d-9b05-c456c5abefcb", "sighting--996a7998-fd42-437a-8c3a-8854bb14b005", "sighting--387a8f35-c569-47d9-8a84-d061339f9d78", "sighting--171e4763-7305-4efd-aa39-79f101f07f0a", "sighting--d7454eed-0651-49ce-9608-fb2c76d57602", "sighting--555f4ddb-9700-4ed8-abf0-f450828a8ce8", "sighting--73ccd9d3-052b-4478-ab25-91ed69260b60", "sighting--babc17ba-290c-49be-94af-39bb11feeab8", "sighting--d7542f91-6e45-475d-8976-b058d0010824", "sighting--535239eb-a78f-44b0-a117-d540b5fbc601", "sighting--977dde05-0675-4181-9c94-b7889f06392b", "sighting--e3d4118a-bee9-4551-8e51-548590332c7e", "sighting--bd75c4d8-b080-4519-aa26-b0df30ad18e0", "sighting--c5d753ff-c91f-4325-acea-03531593a332", "sighting--c8f624f6-3414-4d6a-891b-bd584edcf24e", "sighting--c19ff626-f237-478e-a341-805a5ccc0bbd", "sighting--9bcfd660-c1b7-4a63-bdab-67971088a9ed", "sighting--703a65f0-db2f-45c3-8606-ce2d74a6524e", "sighting--48d0392d-5aa3-47cf-b421-a7d109380d22", "sighting--6971a08a-c834-4c22-9957-d6693d01cc17", "sighting--8546815d-fe3c-49ac-9049-dd44b827a59e", "sighting--8ce5c843-d707-476d-bc4d-3b3d7ebc8c94", "sighting--a37b4c3d-5e07-49b3-b22f-521d014191ff", "sighting--ec4c5b94-c754-4f04-8226-6604bfd63fb0", "sighting--4c293742-b78c-478b-9e9a-29d27a4ebd84", "sighting--22348c48-df9a-4120-9b56-a575bedf3a1b", "sighting--fa6120d0-6e2d-4375-b7e4-27925db17291", "sighting--b3ef04c7-40ee-4bd0-8272-03ca0537c2a9", "sighting--a656592a-7467-489e-bb57-941713127212", "sighting--dc59112e-161d-4774-bba2-bbf2a1e4e2e2", "sighting--bc7587ac-de1c-421d-ac97-aad38cd319f7", "sighting--d52a092e-9811-4a8c-b752-27aaf4cd8ea4", "sighting--7694863c-84b9-4d4b-a40d-218cb5f23f47", "sighting--b210fa96-2744-42dd-bffa-b8ae9a33d502", "sighting--16b39c36-0fd8-4f7b-858a-a182ed080579", "sighting--70eb7e36-8a47-46bd-8cf4-57bf022fa0dd", "sighting--1b77378b-3b73-4321-b885-e3638ad2b0c5", "sighting--26a38407-81e0-4e84-9169-e266937a2ff8", "sighting--b078aace-2b3c-431d-90f1-34bf10ce5298", "sighting--96088885-aa87-4645-b55d-c4b865621842", "sighting--9cca62bc-0641-47b5-bc47-20d821341e86", "sighting--6b0e45aa-095b-4038-af73-3190bfd7e80d", "sighting--19ac83dc-5229-480b-abae-bfddb16a5ac9", "sighting--3e4e0d96-ecdc-4079-af8d-d2aed98b0d9d", "sighting--14d05049-01db-43a2-a72b-d8df20afdcf2", "sighting--15b26a2f-25c1-4810-b216-f9c3feb27add", "sighting--c22f91c0-b219-4e66-a39c-f7cc27fa61a0", "sighting--35d3418d-2936-40c1-89a9-1161e2d5fb78", "sighting--02bcf708-48f7-43e7-84f1-f17d272e06da", "sighting--3376d652-ef3c-4555-b5dc-65f858da6804", "sighting--7745fd61-a674-4188-a7cf-b37738159ff5", "sighting--2ec5a639-9919-416b-88da-dd2d00300da2", "sighting--1b712820-5b16-4167-91fb-335b9ca4f547", "sighting--0039cc97-7d56-4761-a27b-d394e3c1a1fa", "sighting--53220a44-43a6-41d1-822f-65744a50dd80", "sighting--d316d6df-e5db-47a5-b419-95b465502349", "sighting--0307ba70-abf0-4eb9-ad00-74d3f4ca899f", "sighting--bb3031b0-c6b2-490e-aceb-fb254720f3fa", "sighting--0a40c722-f15e-4d90-a383-389bf0bb52f0", "sighting--5f0a5f19-0c74-49a2-b43c-67ff8cc09ead", "sighting--f838590d-c783-4769-a2ca-9cbdc2f705a1", "sighting--242c7be8-71fb-4fd5-ae60-b7a964428ce6", "sighting--7fb8c2b4-c857-4a92-aa67-777755d5d5ce", "sighting--82e9889f-714a-4bba-9c96-7216feb4c111", "sighting--e7459139-a837-4e5d-986b-bcc31dd1b096", "sighting--e9a90791-3cdb-43d0-90d6-c8971072aaaf", "sighting--4e5a42fc-4806-4363-8f8e-fed747b846ec", "sighting--1292b719-afdb-463f-b20d-d98f584bbc03", "sighting--37ba5b78-5d61-4bef-9069-330f94d646f3", "sighting--71cff72c-d949-426f-9d89-abb4ac6fb6a2", "sighting--68a6f2bc-4a60-478a-8bbc-41fb8cb9fa36", "sighting--a9d91f74-9717-488a-96c2-fbada88d6ceb", "sighting--8a0c8f8d-0515-4402-bb9c-a3eba9fae592", "sighting--dff09fc6-4e05-43ad-88ae-c7b35e2ab9bd", "sighting--985e876c-b251-409d-a735-4ddf5dbcbfe1", "sighting--ec25e392-ac07-46cc-a79f-1191fdfe58da", "sighting--579998ca-5888-4027-bc82-68d4dd5972be", "sighting--450e0f15-895a-45e0-b441-9787008dd070", "sighting--948a8885-ab18-461d-8263-888d4f0c52ce", "sighting--61207eb6-cdca-4112-8054-4ad6004583f4", "sighting--c979377e-a6c0-43e9-9d83-35453f7e6f55", "sighting--dc542f5a-84c9-4a7e-b91c-0b5c338fd3e8", "sighting--e553c6b3-4b51-40c3-9dc9-aba16d87d97e", "sighting--164f6662-b3ce-46c3-8587-45e4c859f659", "sighting--fe4bb5a4-c897-4d7a-b011-f491d7af1872", "sighting--7f0de784-79e3-4159-9b78-40122d6a80ab", "sighting--19a74761-4582-4960-9324-57e9762909ea", "sighting--74c4c03e-320f-425f-b104-efd38cc85a14", "sighting--61bc6ef1-c7f2-4d73-b73d-054872872fdb", "sighting--a7b65cd6-f1ec-40ac-ac9a-5707c0730e21", "sighting--25eab96c-b08c-4af3-a999-aeb2707a26f0", "sighting--649887ca-5fcd-4d17-b700-594026e97eb4", "sighting--cd81cd8c-88c9-4b4e-a3de-de5803d26684", "sighting--6d8e5eda-628d-459d-b4d6-0b3f0e05ffd8", "sighting--aa47d18d-583c-40c7-89e5-015a9779ea48", "sighting--b501cc40-adc6-4130-a507-d06ff72f361d", "sighting--ed777d0f-093c-4a24-978a-4ab02635d9ae", "sighting--22e4aa4c-6635-40f1-929d-58f96d24662f", "sighting--df30ef22-36eb-479e-8bc7-4caa162c24f8", "sighting--e926067f-e1f1-473b-b6d1-7069a696c713", "sighting--3bb42a0c-d52f-4e3e-bf7b-57942c11c3ff", "sighting--f2a45c13-560b-41b5-9908-cbc00d75f701", "sighting--0e97375f-95b2-4785-b2fa-c20e7dc4d670", "sighting--8d3c4d92-62e4-469f-800a-d2b91f248499", "sighting--ff1ca4d0-20bf-4e76-8cc6-26701d4cb81c", "sighting--1699361c-2e5c-4f04-91dc-e723b0e9df51", "sighting--735710e8-cb4b-4fae-9da8-394cfdafbd6d", "sighting--060282e8-2173-4673-90f1-01a35f3e1c23", "sighting--0560a18a-4a44-411c-acd1-b12ef1aef70d", "sighting--88a20486-9bd2-4d2b-9153-59f224463f46", "sighting--a52cb17c-393f-4be4-bd35-aa66e73fd4b1", "sighting--60f3588c-6c66-4e8d-b86b-d35ca4d83fca", "sighting--7a1f92f7-cd47-4c46-a2ed-d8e707aa0744", "sighting--ff09e1f6-6e70-40c5-a5a6-9481d164cecf", "sighting--4f5026e6-d19a-4c38-9eb8-8e2f9e2e944e", "sighting--62e34a44-255e-49bb-b1da-2b5f2102d74f", "sighting--9c92933a-ea75-46fe-9e4b-a19a42fea07d", "sighting--39d68a66-b941-4f53-8e55-104c57841d22", "sighting--da2c6b88-ba7e-4359-8f60-3a001d856a37", "sighting--dacb4c39-2c12-4b27-ae6a-5148157c363e", "sighting--0a62170e-5071-4c3f-9d15-ca67805fb359", "sighting--5b54a5a9-f579-4fce-a29e-a726de7bd8b9", "sighting--bb7ab2f8-bcb7-4ae1-a2ef-edff2f8c1864", "sighting--00e2bdbb-ad8c-4d78-8ade-79bb8651cd7d", "sighting--99b43bfc-d08e-46d3-a38f-77ee0ec029e6", "sighting--c82b621b-579b-4e4a-b693-b4dcf4dcbe99", "sighting--775c984a-f851-4cfe-a063-7d29b5e87ba4", "sighting--2deb2aca-9a35-4425-a7e3-099b203b37e2", "sighting--afcfac65-1118-4140-9a2e-19d99ed937be", "sighting--21826636-7292-436e-8915-90bd77610b48", "sighting--aec59451-94ba-4fd6-bbf3-99166a22d686", "sighting--a3d937be-8739-4b66-aada-23a34e4e8b76", "sighting--a5770174-483d-4e94-b436-f6fb4f07f2e9", "sighting--2d50ea20-dbe0-4524-b663-6b2b254b6f40", "sighting--d32578f3-0716-4273-bff1-98c6e830eec3", "sighting--f2bfbe85-d52d-4fb9-ac84-f78122ff7fb8", "sighting--2af1a9ae-a240-4bf7-baa2-97e7221f2d9d", "sighting--4e33b36e-f3f2-4680-b561-b8dfd2b1002f", "sighting--04be613b-42e7-4e6b-b7ea-0b08a92d3f11", "sighting--8bbe5c48-6780-49b7-becf-3a5c14a69fce", "sighting--519ecf72-cfc2-410a-94cc-3bcc71fea981", "sighting--fef3ecf0-271f-4280-9b31-1b2367bd6d2b", "sighting--65243196-d91d-49d1-96ff-e0e4ce3202a9", "sighting--cfb0a454-0172-40ca-886d-1e97c14d9992", "sighting--ad5a178d-4d61-40b7-b68f-a9b46959533b", "sighting--335e870c-1abf-4565-8d63-42cd71104967", "sighting--eee2eb7b-ff47-4d53-a036-996fba30075d", "sighting--3638342a-9866-4b00-81e9-428bedef12a8", "sighting--8d7f779f-8c35-4462-a041-7f40153e2c29", "sighting--d707c12c-3d8b-4b11-8875-dcda72c27cd4", "sighting--6bdc6ce5-370c-40bb-8e95-ad1e55678847", "sighting--6927adbc-bd4d-4f09-9349-a6e7d09cfd1b", "sighting--532b56ae-35db-413e-819b-f9da3b34216c", "sighting--0a422293-7cb3-4322-b24b-c852deb720ac", "sighting--44541eb3-3c9e-46db-99c5-6efa55886cea", "sighting--4252f6d5-6e5f-4717-b9ce-57d3c44c9cc8", "sighting--78b26849-0d84-4366-b952-a9f89b713cc2", "sighting--f7914dc5-ce35-4273-afa5-60e8b9a49577", "sighting--bcaec562-1ea9-47ba-aca3-fc40012f790b", "sighting--4f18aa86-3735-435c-b73e-be05704247e2", "sighting--ad6f805e-2986-499e-b9df-3a49a265244e", "sighting--c4aa06d4-e793-4948-b27d-3a9af8e01a38", "sighting--a292920f-d178-4496-a5b8-a755c50ed280", "sighting--44fe9d62-9c1a-4ca1-b97f-88e5d18c1e94", "sighting--da9ae3ef-9a1a-42f0-9a05-7d34bece5215", "sighting--3538948e-f710-47c6-9d59-821af0500f52", "sighting--d9cc9ff3-a94b-4d53-8785-0301c0e24013", "sighting--d0e9db2b-1618-4001-a569-791fb23452fd", "sighting--2975e8e3-6b1f-4636-98be-9f44d01631d3", "sighting--e2ce4477-c901-4ee3-9219-797dda057646", "sighting--b763e1aa-81d4-48d2-9155-4af8410c5967", "sighting--fb52817a-f5bb-48db-8c43-2754d4ce3707", "sighting--4624aef4-b02d-4cb0-b044-b3fd6fc9211c", "sighting--2a7c52d2-6256-4d21-b041-7d6057e8fa5e", "sighting--8a6bce22-3468-4b05-bd9a-252083297ee7", "sighting--462f5d04-6783-4ceb-b511-135b2c4164dc", "sighting--00b817cc-6fbe-4fb3-9deb-a0987f023003", "sighting--bd458bbf-774f-451b-8763-8d2f73429341", "sighting--c94877cf-c459-4bc5-b7fd-f5df71f73e5e", "sighting--74019017-5374-4a82-a223-7002b8144801", "sighting--1323493e-8766-4d71-bc76-c12aee7eb1c4", "sighting--4f3b26bc-9b99-485a-8e22-93acb814ee2f", "sighting--5ffed652-b63b-4de7-8de0-7f5099283300", "sighting--a929ecaa-dcf7-4261-99f7-ce90705a21ca", "sighting--88d42668-5440-4a88-a17f-5edb422777c6", "sighting--b3c4fe64-30c2-4e1e-acb8-6bec25e1ed03", "sighting--b8f31b7f-1b44-49e4-ac61-6f20356d4ef8", "sighting--66fe6c81-a853-46d9-a81c-d5b1dda75761", "sighting--db610fdb-0b29-4ac2-953c-3ff6d8ac7174", "sighting--6887995f-c3da-41bf-a79d-9261ea6c7b6c", "sighting--ce7fc020-adf4-4fc7-975e-0a301438e213", "sighting--f266e2a6-59e6-4f1e-a3d3-05d970296855", "sighting--9ea5d569-68d7-4f21-88f9-607956ac9a24", "sighting--62575220-9ba3-4922-93bf-455e19c5e44c", "sighting--48946370-91c5-40b0-8fc8-d3e9b4bf2f39", "sighting--025cbcc5-c2af-4f35-bfc8-8a9bd175696a", "sighting--ba08a9cc-4093-4242-9a3b-de8ddb8576d5", "sighting--bf6e0582-7e44-46d4-a382-e85dca6c8a28", "sighting--9aa7831c-a165-4a56-aa18-68556f897013", "sighting--8298f37d-0c88-4859-9b57-91a2ab2cd30a", "sighting--4dc85f69-a2b7-4336-b3b3-7e53c909c16a", "sighting--f5345ab6-e6c0-4708-ac67-d6c3fdb63f41", "sighting--75860514-6aed-4573-a4f5-ae44186b3114", "sighting--fa7f95bf-980c-4a00-9912-99cf1b148b4c", "sighting--205c2270-087a-4bb3-a03e-55306c2f77ec", "sighting--9948f8f2-b732-4ab8-91a1-1d53f090348e", "sighting--15fe0ef5-1172-45b2-be3a-8ea3b1536e6b", "sighting--95711f4a-568d-4795-bd3d-9392acd4d043", "sighting--2593db12-f1a6-4244-8b25-84cb8e1c3772", "sighting--83c8cd22-3006-4b82-a918-5b0db864fc9f", "sighting--bf794c58-7879-45ad-b58a-30a1258ab8a0", "sighting--00d6efa7-f6bb-4f3b-8fa1-5024a70783a6", "sighting--699fe205-0fd0-4aa9-8aef-9b29e62c4618", "sighting--32e7ced7-e5ee-4606-acf5-52b02a70ea0f", "sighting--93349af5-338e-441e-8c1d-f876f32b5772", "sighting--a94438de-a568-4e6a-a05c-f7768d3050ca", "sighting--7cdf858f-d4bb-40b2-be31-1ae7a6b91ae9", "sighting--3f2703a2-215c-4dba-8ae5-c0f1a2303733", "sighting--28e8abbc-b033-4748-b835-1a8e4afaac1f", "sighting--1e1da3e3-b1e1-48c6-a564-623ed356aa4c", "sighting--9be30459-ec7e-4a62-a507-3d173c7acedb", "sighting--64644082-c6dc-4d38-af32-986e4653250b", "sighting--0ec7cd5e-3521-4875-b49b-39ba32bb8efb", "sighting--a0102b3d-87df-46a6-bc5d-edaed263d0d6", "sighting--204889f4-67ab-4938-b92e-e6fb1fdc97d4", "sighting--10a06988-6bee-41a4-bd92-9da9651d31ac", "sighting--bba55e4f-a62f-456d-8271-2272c147e90f", "sighting--ee1ea0e1-61ea-4528-a2d4-d62b1973542e", "sighting--12f9d8ff-7ae3-496f-9b76-ac74c20166c9", "sighting--96443554-7cb6-4666-af44-bd74746a1518", "sighting--8ddb037f-b3a6-45ed-9867-adb7b4f822ce", "sighting--90315626-65ca-46b8-8221-8282cbe97039", "sighting--a76f3329-addb-4627-8bed-43777b5a315f", "sighting--65da2b98-563b-4569-bef6-f2713c6f0529", "sighting--76ce88a8-e8dd-4768-9751-e1c4893400ca", "sighting--4df89eff-8a73-43ee-b3c0-077b7b9fefd3", "sighting--3bb490b0-dc23-4526-a6aa-868ed2c884c1", "sighting--6a51985d-bd8e-4c94-9d2a-f769f195ce3d", "sighting--bb5bf3fa-e2b0-4add-80af-e2aa55a9d1a4", "sighting--7a8f8a3e-6f97-4ddf-8295-ef7a9b06dd59", "sighting--25913db6-264e-4599-8823-fc28c3a5fce1", "sighting--32bf7752-85ea-45b0-8a21-95fe412d79d6", "sighting--a4156dc2-c7ae-4bd4-90bd-2bad18cb8193", "sighting--7fb6cdbc-4664-4d79-b2a0-cb21e47979ad", "sighting--ff6860c9-73db-42f7-9249-5ac305228c77", "sighting--2755a7f8-0dcf-4449-bd50-62afc07e0251", "sighting--a4eab564-24d5-4831-89a5-2a16f55c4a32", "sighting--efd6018c-3463-4af5-8c44-7b91082c9cd9", "sighting--bad8f185-35bb-49b3-afbf-c1d13d5e9eb8", "sighting--f4443a3e-7575-4077-b5ab-2061b1044feb", "sighting--4b0051e9-8518-41f1-9ff3-22531ffd6871", "sighting--9c293141-2790-46ca-9b4e-86165832ed4a", "sighting--149fa8c9-91d3-422d-8e74-f9ce7d30b39a", "sighting--c324141e-21c0-412c-a08e-67901838f659", "sighting--d7c61e8f-af82-47a4-8beb-2dd75251ecf7", "sighting--f010528b-351e-434d-a945-eea6836791cc", "sighting--22882610-2a40-42ff-9ca3-df410237dcc7", "sighting--f092c05a-353a-4bf9-9da5-3dad329b31da", "sighting--6b6900c2-ed60-4c5b-864a-5d82b1d44fe3", "sighting--887ba1f5-5092-4e1c-bff4-c295aaba03ae", "sighting--dbb5b624-e1dd-45d5-b651-f27a4e494551", "sighting--33b92757-eb92-4848-b668-fd809f7bf447", "sighting--d6c0e513-ffc5-4647-b47d-e32aeb676f52", "sighting--ea58600a-3fe2-4944-b446-24750fa2f409", "sighting--6a908455-3544-4ac7-ba52-92b1872897d6", "sighting--7f036dd1-ec18-4b2b-a7f1-60cd4f72cd1c", "sighting--bd74f3a0-779a-4e83-8e6f-47836cbd026e", "sighting--dc63d5bc-d674-43d2-a0ed-8530249080d2", "sighting--09ca8445-11a3-4320-9e5e-9ca33a845bf1", "sighting--ba393b8d-dab5-4e60-ab48-70fbb208038d", "sighting--1c906ac9-6d78-403a-9750-b9aaefd442a6", "sighting--8697c878-bd2a-427e-a629-5d8359f59f35", "sighting--864c5874-62f6-411d-9c54-80b94df306cf", "sighting--ef8133d6-cb26-4ea0-9f1c-61a8159758cd", "sighting--5c63beb6-084c-48ae-a326-2b9b43f3a78a", "sighting--9fb4391d-191d-4cf5-803e-0c0e928fd61d", "sighting--d3c5efa5-daf3-4eac-8694-6153f7cb4cff", "sighting--f951e920-02f2-4378-a374-4c7c44673ae9", "sighting--29c2a439-5438-46a2-a1de-33041922de05", "sighting--3d1c0389-c85b-40d6-8e6f-e3baef84b9c0", "sighting--a7c01118-85b2-40dd-9831-49eaebf0ffb5", "sighting--5fa24ec2-7830-4e28-8907-0bb88367e59c", "sighting--7a12368b-4575-4719-912e-993c518acc0c", "sighting--4b6d2ba6-9556-42cb-bf0c-1a681cb5ccee", "sighting--c3c8eabb-9937-4a11-a025-e0fb9a1883f0", "sighting--a858ef4e-d084-4f86-969f-f0edeb2205c3", "sighting--e950d093-a26f-4d18-abda-9062ee978ce7", "sighting--5ab08a4a-1070-4242-9f6c-b3cb7d455686", "sighting--ea60c3a1-59e4-43e9-9b6a-c96952be7aac", "sighting--37a3e3a8-8b57-4109-a503-69c8281ce7b6", "sighting--a354b3b3-bae5-42a5-9beb-70d4ccb14d64", "sighting--10eff18d-2177-474d-973e-345d34382a15", "sighting--93ce1028-2433-4580-8b36-2c2f003c6174", "sighting--35419c8a-4c29-49aa-80ff-3696efe8c870", "sighting--989e3ca0-538d-4db3-be8c-236429eebca5", "sighting--d2b267d7-214f-4478-98f0-22cb1251d6cc", "sighting--686e3026-4001-48ae-8064-8417a0c62f32", "sighting--20beb4a6-8f42-45be-b008-a82e2df6bf19", "sighting--b19a459c-eff6-48d5-9395-5598d50d6ca4", "sighting--bf95e170-76e7-4fe8-abe3-dcc4b723500d", "sighting--a365040c-e8de-4b6f-a9a6-5abd7f52c8c9", "sighting--b0133f85-63f3-429c-aefc-c09990577260", "sighting--e1b7cb5d-a459-45b5-9d51-08ee0a96abca", "sighting--5e69cda6-5ca0-4280-90a7-030741c86806", "sighting--56754a34-9d3e-485a-96a9-7ac098ad83ea", "sighting--ca57bbb8-7e27-4940-9a7d-19f2446488cd", "sighting--8108744a-ec3b-4bfd-bce9-d889bed42c5c", "sighting--cda36b86-8e6b-4926-97db-28ba5a740e39", "sighting--ead820e2-5fbc-4c37-8765-5ff1f0ff36f3", "sighting--6eff9aad-6609-4b73-8fcc-184e0b41648e", "sighting--f57ca8cc-8b7e-4aa0-998b-96aa3bf93738", "sighting--3bfe6d28-3f6d-4120-801f-7954360e6907", "sighting--96d6d485-b4f9-4c35-a9da-1731f9e82132", "sighting--cde55726-d57d-4803-942f-1cb039924fce", "sighting--f643c219-7bc6-463b-bc07-02c254826f5b", "sighting--cded626b-3a85-4452-96ed-9dafb3559423", "sighting--3b22ee5f-b465-439a-9bf2-fc544094d465", "sighting--f84785f4-ec2c-441a-b65e-0821567d1f76", "sighting--d4d97ed7-5044-4e70-877a-56d91f3d8e30", "sighting--f45f9f78-b2cf-4c14-b7f3-a222992fe8fd", "sighting--e3c6a819-b7a2-4530-b83c-b046ea78318d", "sighting--6805e983-7066-4c00-b437-bf148f5e9560", "sighting--3dfdfa4f-9b92-496c-93cd-495ed8c92ae0", "sighting--5b3e3575-8656-47c5-b433-3ac80e9d5b9b", "sighting--ba138f5d-e03c-4359-a25c-f73d8697006a", "sighting--e084102e-f18f-4284-9b64-3ef96a669db9", "sighting--600f8b55-6379-4528-83e8-2c9427a753ca", "sighting--92331bf3-ab3c-4a12-b17f-acdeb983a41c", "sighting--422a0248-ac0e-4f6c-949c-a92e83fd11af", "sighting--c9d34652-59c9-4857-869a-b866db09d247", "sighting--a8ec2698-7d92-42c6-bbec-678b443d3505", "sighting--3850b6f3-8cab-471b-a809-57dacb392fea", "sighting--edadefdf-9daa-47a6-936a-4dd4d5a5aa39", "sighting--044e51fa-4a8a-4a8c-9c12-e7ee6f62a4b0", "sighting--da55fe5f-7124-4700-bf35-8adf1011833c", "sighting--e78b210a-dc4f-40a5-9ec8-b138399c38d1", "sighting--828e17d9-0acc-4364-b8c4-ade3d7522e62", "sighting--a2a12e08-046e-43e5-9628-336980225e77", "sighting--01657cbb-61ee-414a-a0ef-dde9deaed6d7", "sighting--252fc06b-3b47-4cb0-b3ac-c849b157df4c", "sighting--dceb56eb-00a6-43f4-8f65-25d770a2884e", "sighting--43783eae-ed0f-46a7-8762-5a125b11842a", "sighting--8a80659c-c3c3-49d8-9efb-6633df061fb8", "sighting--c10c60c0-2851-439b-98e1-90269c97ffe1", "sighting--1050ed74-c569-4cb4-8490-e2086a240208", "sighting--d3fe1b14-d4f8-4051-8b71-3e466f7d276c", "sighting--424a134e-facb-40f4-95db-584a1e6608d5", "sighting--e20247ca-6bc2-4932-9fca-668989b6b6fd", "sighting--9fba3ebf-10b9-4924-becb-717c51132cf5", "sighting--8c967053-c79d-4837-9afd-40a70fd29982", "sighting--d1ef5624-eb7d-4533-81d1-740665765a6f", "sighting--ece37373-4a63-41f8-b927-4faad252e8f4", "sighting--149f793a-aff1-46cd-9f6e-29812e6e74cd", "sighting--09d88d82-8dbd-4cd3-baad-58559db389e1", "sighting--2bb4abc7-655b-4567-8b54-da27e1926dc1", "sighting--15dbb144-ba21-4411-b723-e7b45293e120", "sighting--762964a7-dbac-4020-9235-8e5ca3dbf1dd", "sighting--08ca35bb-1022-4109-ad06-5fc6c5347202", "sighting--67843c53-ba86-47f2-821f-453c2197b150", "sighting--d7dedf63-bad1-4161-8f7f-512b85b4dd08", "sighting--482a92de-4fa5-43b7-827e-afd0d9ad82e9", "sighting--33dee6e3-2ca8-4ea8-a18c-b32cbf0d15d3", "sighting--7d626f75-dc88-4ea4-9e05-558762161ccb", "sighting--cda4bb44-6497-41db-b28b-c0a11ff9f2e3", "sighting--e93ed804-88d0-4ca8-b1ab-1c5507feb684", "sighting--36514179-cbde-440b-920d-5dddc1c364df", "sighting--1917591e-ee05-46c2-978b-57a8c072effa", "sighting--5fc0affc-2ae2-4f5b-80e8-96132fe15efb", "sighting--37928b0d-0434-45f9-9474-3f295cd03f85", "sighting--ccae4388-fdf8-4521-ae56-9e423b3e3dac", "sighting--7f2dba1d-788f-48d0-baf5-9ce581e37b8e", "sighting--0f34d8bf-0714-4cab-a95a-974758086daf", "sighting--8edb2225-d85c-4404-ba60-e9fa828d55de", "sighting--49906914-f863-4098-80d2-8b9bedbc1966", "sighting--17f9e0ca-24ed-4f0d-ad8f-38a41119ab15", "sighting--7b5c0f59-9ae7-4360-962c-d6f5f9dc4d12", "sighting--27abc078-cd5f-48e6-806f-22df7d637054", "sighting--284fd391-a6b7-4b21-b244-f1a35c0f1d4f", "sighting--a80a4f19-e6fe-486f-b191-6800fd53f7e8", "sighting--e7621275-12c3-4c67-b3a1-6c58f71db8e9", "sighting--7e57f32b-e663-46d8-b9b6-5c934b6b9b54", "sighting--32171b37-394f-45d9-a82b-48c3a9ae8232", "sighting--cbd077f2-14cb-48ad-a8e3-8d03cf337aac", "sighting--a7e15c52-38ec-4c19-91ee-99a0a1c2855d", "sighting--81a5b285-5160-4598-83d9-f86133bd9cf8", "sighting--91790a3d-cc61-4d40-bd56-c0aec5cce58d", "sighting--eb23c68c-5d91-4d40-b1ce-151f8c9a6241", "sighting--65fdc7f8-5db1-45fc-91c9-4177fd8b19f1", "sighting--1b8281c8-d713-41cd-a98b-15457ad75a9c", "sighting--29ad693c-13cb-4dc7-b3c6-b712718c7d68", "sighting--884b2ee5-f55a-4209-8e7d-cb57b2f42b32", "sighting--1b51b176-28d5-4cb6-90eb-3e0580e616f6", "sighting--dd0bfa7f-7aaf-4b0f-be3d-a5a3b8082c77", "sighting--5db13430-51ce-423b-a1bc-a644d17c7517", "sighting--5db5b014-f467-4d0c-9408-6ae7a62120e7", "sighting--06b090ed-28f2-4303-8f61-cf0e682364d3", "sighting--be0d0a81-46df-4609-b22d-738e066af514", "sighting--5a9440d7-69b1-4f1a-ac25-c6814d4955d3", "sighting--f56cf019-1fda-49c5-b748-c8fd7438bb41", "sighting--c0cc3fdc-91a0-48dc-911f-9e7977ae15b3", "sighting--10283023-3f95-45f9-806d-630c32323333", "sighting--b9d60953-a309-4aff-8464-072f12148d02", "sighting--f3727aaf-2614-40fe-81a3-b8178464cde6", "sighting--eeddd70b-f38d-4f7e-844f-00f044da4c8a", "sighting--6834648e-de18-4308-84ce-ddb41f990426", "sighting--73c8146c-88cb-4462-9d09-e1e10523e8f7", "sighting--275fdf47-803a-4e28-89a5-0ca4302d77d9", "sighting--87ec6c4d-2dc6-4c13-83ce-da341a6efc4a", "sighting--d1a76e9b-abbb-4b2c-9dbe-bab43d331467", "sighting--0fabd526-e3a7-44bb-a5aa-d40db4ff722b", "sighting--d0f3e328-cfee-4ad4-a0be-39ec9fe261e1", "sighting--5327754f-5560-4f43-a5aa-b0eb8a847c3e", "sighting--48da1544-fb9c-4ceb-9372-7d90f1417458", "sighting--4c7adb58-d0b6-4444-9301-f3500c6df8b7", "sighting--54a0236e-7251-4209-a654-d06335456129", "sighting--3040545b-98cb-4a42-afbb-f31c03d5cc2b", "sighting--eb96a529-c2b7-4ce4-863c-cf185b66d32d", "sighting--fe83ac03-fee3-4cd8-83b7-33c795b36ff6", "sighting--734f3663-0e5a-4ae0-899e-aab35f63aef2", "sighting--358c1adf-9cb6-40a3-92b9-94f573c89e4a", "sighting--70136fc5-d04a-42ad-81ca-4edb7a8139dd", "sighting--2e71ef57-3350-497e-bd38-f34f59eea720", "sighting--ddc968f8-0bc4-40b5-83c8-20daaaa853e6", "sighting--4b9672b0-431d-4697-8e10-d6ec042516b6", "sighting--053a6141-90e7-4f80-b932-9d97b3fb8db9", "sighting--3c289e55-82f0-47b0-976d-fcde17addb6d", "sighting--7aa6b292-a158-44e1-a249-94b82eec4cf2", "sighting--a18a650a-30ba-4f86-b9b4-113f8c01a86b", "sighting--361fff84-c82f-4b4c-a4bb-bbd8681222f3", "sighting--26df75d7-0ffe-4920-9a5f-d3bdfeb7c790", "sighting--df8e58fe-588f-4684-bdab-b554ca54a163", "sighting--1291400e-30a3-4eba-8d9a-5f3fc0d2e878", "sighting--c29a09a6-da0a-43b9-815b-d8bf1e5fb553", "sighting--9352d5f7-5dc4-4070-a734-2a2839dfc780", "sighting--ef6564ed-97ae-4782-b0cb-61eb4a67ee62", "sighting--7487a573-7f0f-498c-b784-d6a1437aa44e", "sighting--4dc9f299-30e7-47fe-a06c-4dfc9524f8fc", "sighting--e617a681-6e88-4d02-b265-921b197a5e99", "sighting--4813bcb8-fc6d-47c4-b68f-b02be44222dd", "sighting--4a0fd1ea-43ff-4485-aee3-2a203b4d6432", "sighting--168253d3-06cf-4d6d-8787-5d9b62253529", "sighting--71711e6c-2f25-4e5c-9f0e-3284c41fd185", "sighting--74c897ce-d274-4745-a00f-78236bae6ae7", "sighting--55995ac8-3885-45cb-b764-c2068e7cc9b1", "sighting--0dccda15-b6af-4f43-850d-3487e43b0e24", "sighting--42b8cfed-9cae-4dea-b563-06c2aa457f11", "sighting--b3f04449-096e-48e7-b36f-8c08d5a87835", "sighting--f9c52dd3-533b-4e05-a76e-642f34d249ed", "sighting--a2161a45-3d71-423d-948e-3868d83c359b", "sighting--3308fa00-5bb3-485e-b604-9fa18ff04632", "sighting--a784487a-19b6-453c-bb58-9fbba7f43b9e", "sighting--e051a00f-7f5b-4efd-9442-7d23cf7bf862", "sighting--66ed6f66-78ad-403a-b166-ae8d7448c246", "sighting--a18bc1ae-031c-4aea-8a3b-6caeaabe6cab", "sighting--e4c61928-bc74-462d-acb3-da42ff33aca2", "sighting--3ecf7bed-6c84-4f28-8c99-4106657bf82c", "sighting--f2103842-d4a0-48de-95a0-a2655e7ddf25", "sighting--de22af2f-be06-43b9-8429-91fb4f4a3881", "sighting--02e07a6a-d4aa-4b6f-9d10-72ee894d4d6b", "sighting--0cbd37fd-340e-4b09-8656-6bf282f45f25", "sighting--89c0fe1a-a131-494c-9d27-a2b525927d1b", "sighting--d656b52e-0b92-4758-9469-7981c3a2ea6c", "sighting--038fe6aa-9ec9-44d5-81c1-73a7644eb94f", "sighting--bd588d0a-c67e-44fd-b85d-f81c0909801c", "sighting--613c7c31-27c0-4479-a9fd-e23632265976", "sighting--a5b66e4f-d292-408f-9d5f-248ca0922f96", "sighting--fba794fb-fdb5-43fc-8fb4-2bedf291da99", "sighting--4b429795-b8f9-4410-b7c4-888282c31986", "sighting--acd86de1-65f2-42e8-a2f9-aad74d0e68d0", "sighting--fe3ad02f-5f75-4611-a6ac-1490e589de54", "sighting--bb3d80c7-a102-45b5-8280-06645d37851c", "sighting--80616020-890f-4362-8fb3-37aab8781ace", "sighting--6f5fd3fe-7cc6-4d30-8b80-07a02e406e53", "sighting--311711fb-e0a0-4c77-97a4-a3c1a11856a9", "sighting--cb9cadb8-0c67-49e2-bf00-704166f57706", "sighting--19b39f98-8641-40da-8ee1-f4e459e6529c", "sighting--0fdbf6eb-51c7-4c35-ade7-218c3b28ca8b", "sighting--dcd13f60-1b74-4b47-b20a-158f5ad449ce", "sighting--71a5d668-a91e-49ec-8bc9-7750b17be1d3", "sighting--1ec54c56-50c9-41a2-82a3-64726b6f9d27", "sighting--5d00d36f-fd1c-4765-ad1c-bbae4ff1d3f9", "sighting--c5444239-ac8f-4910-980d-74e92378a2d5", "sighting--66555179-b467-493d-a58b-ada8092ce042", "sighting--69d3713e-aec2-4dfe-9f93-cf06836398f0", "sighting--6d8e3735-07f4-455f-bb63-cbd985f624e7", "sighting--82de6ac3-40f9-4f4d-8784-3c439bfda4f3", "sighting--12280d57-b0b0-491a-b317-953665d1c202", "sighting--284199e0-bda5-4e95-b4ee-67094440ca21", "sighting--618e77b9-24bc-4eac-a6e7-fc4ee3721ec2", "sighting--496f85bd-2793-4169-b7b4-62c9298178c7", "sighting--61f226bc-876e-49bd-a88a-4af7a12bb578", "sighting--977e2bf4-ee85-488d-8703-76e2f9de3fc4", "sighting--db588eda-68d4-4176-92c7-41a15df1c930", "sighting--f96ba3d9-f3d6-46cd-83d6-845cc220e313", "sighting--c95316fd-2337-4475-af43-0e1117000fdb", "sighting--d651aea0-0b78-4f8f-8105-004e1e6ddac2", "sighting--633e0e72-4675-4604-9ce2-91d0e771acf8", "sighting--c05f066c-f149-4679-98ad-f22d5db91e90", "sighting--4b196b11-ec2b-481f-b29b-a97f8073076e", "sighting--7a840a61-f5de-4191-bf55-e15abd871fb9", "sighting--55942cf9-fe29-4f67-ad3b-3704a5860a76", "sighting--d3488f35-d955-41e1-90f0-91ee3c360347", "sighting--ab335972-588d-48cd-b866-62cab7846884", "sighting--3b043c4c-b761-4184-b611-88afe51b7b2c", "sighting--adda798d-c506-4edb-a208-5d4a02d80236", "sighting--674fb579-1dd4-4d00-a1dc-2177d1a76b4b", "sighting--bf56f7d5-33b8-4352-ac42-b02eb6bd65f7", "sighting--63c2284f-4f56-4a4b-a829-bcb6dfd48c67", "sighting--8b918e37-c119-45a0-8811-6572569a6ef1", "sighting--70c09876-f3f6-4b12-996d-6abf7e18231c", "sighting--40954b10-2fd7-4b61-9ad1-200083cfd529", "sighting--27afecee-d55b-47fa-ba10-339eaca3f819", "sighting--99de63a0-1be9-441f-aa68-920554767326", "sighting--1bb1ef95-c546-4a51-8e60-303ad64d95ed", "sighting--08b2da6e-3076-4c81-8758-3a3dd7608fa0", "sighting--2da66261-fd79-4bc3-86b8-5c87e7dbcc6e", "sighting--cf7de938-41dc-4485-bf90-c985fd38cc7d", "sighting--7fa52e12-7074-4f4c-8ea0-507480ba3c7d", "sighting--d79c1921-2210-4946-8991-144fb758d252", "sighting--78ffa02c-238d-4549-973a-47ac4f3a7a8d", "sighting--45715576-149b-49da-b357-15c0f277d3bc", "sighting--3ef4a85c-047c-4d96-921c-b4cb730337b2", "sighting--ba18fc99-23c3-44a6-b30e-a51b9002096a", "sighting--a6189692-5e62-4a4b-b56f-cf30ae105c48", "sighting--5d0fb0a9-e6cd-4679-983e-a651d2477bc6", "sighting--de0044e3-aeaf-4ba1-8b73-059deca43497", "sighting--e56c02b3-7776-410b-ba02-e9372a655c0d", "sighting--f8b03d11-f8bf-4c22-85b5-936016ff49d6", "sighting--7bb6c6d5-1156-4078-a77f-7f35e0dbfe3b", "sighting--6ccec93e-c1a9-4fe4-bc0f-cfe7ecc26537", "sighting--c0420007-027e-48f0-8eb2-57d2d217bd85", "sighting--13abc2ba-ad8b-4be9-8f63-395636fc5921", "sighting--e407e048-3a28-41c6-b811-5f14ec6c116b", "sighting--c54eaf07-b1e4-46e6-b7a0-d61a679feecf", "sighting--8069cd9c-9a8e-4032-b072-1f12d8c84962", "sighting--1e87953e-1949-4031-bea0-93904e4cfad9", "sighting--941b8abf-890d-4fea-a2a6-44c1d31fcf77", "sighting--f2ff3783-b4d9-45e0-b843-041fb3de8bee", "sighting--537d1800-34c5-45d6-b15f-67579baeec72", "sighting--92439766-b0c3-4a36-bcc2-8f32d2751b3a", "sighting--bb0d3423-2b3c-46a7-923f-6fd0dad9d0f3", "sighting--08e60314-bc6a-474c-ad23-1702025ef21d", "sighting--90ccd7cf-3b6c-4f72-ac9d-1a73026bed91", "sighting--3ba1143c-52f6-49a6-aefc-aa7e144b4b8a", "sighting--b1d15c63-5f05-4ff5-8de4-31ae36be379b", "sighting--d6353bda-4d42-4dfb-a3fc-29865653c63f", "sighting--76ec34e6-9241-4b3f-8a99-f0b2c87d1558", "sighting--d16c0e98-6478-4a7a-a9bf-346e29225b8e", "sighting--d9135b22-fa7c-43ce-ad16-7609ab296798", "sighting--0e70b3be-99e5-4387-a26c-085c954a1efa", "sighting--205c2616-67f0-4f11-b8f9-78ca9a362dd2", "sighting--4e195d71-ad81-4b44-ac3c-5e3d58232de2", "sighting--4a9a9d38-699c-44cc-9a97-5628c4a52e4e", "sighting--485f0f07-61ff-41e3-9455-f8e37c96bca7", "sighting--94e7e429-c156-4990-b3c4-35e33ff65663", "sighting--7b962c67-5a00-4c1a-bc84-c23982e54c99", "sighting--afb8dcce-1c92-4cef-89a8-4d6958912c6f", "sighting--6e2b9a3c-afaa-4a66-9142-a95a82b6d757", "sighting--01c68b0f-1619-49e1-9570-a502c85fde4f", "sighting--c63781fe-8f47-4543-99fc-4e44dcffc523", "sighting--db2914f3-7fea-4b9c-9bc5-49ed80bb0ae0", "sighting--53ba5365-f662-452f-a750-08a1ea8e4e7e", "sighting--04aa3319-adc0-4bc7-9a08-af055ad55365", "sighting--54564814-f9cd-4a6f-b6c7-bc052e39eb1e", "sighting--ba8e8677-4576-477f-8516-d606621fbf55", "sighting--9233d968-640a-43b5-8577-1144e2a20fe3", "sighting--b61bb4b4-713c-46f7-bc7c-e763317f2b26", "sighting--bf65ff01-8827-40c8-800c-89bddff6feb9", "sighting--f5ba052d-34eb-4f59-8844-204e1ce0d3fb", "sighting--ed16c10d-661d-4a94-9583-b2993e7881c6", "sighting--efb6d392-0c4d-497a-8cbd-63e6420f5f59", "sighting--f5f3b5f1-a829-463e-bd97-0ebb19338aaa", "sighting--4d6a2510-b871-428f-ae7b-027a84ab4b0e", "sighting--1da2eb54-1069-4315-a774-adea3e045b6a", "sighting--171b0171-31a9-4d73-acb8-691686afd90f", "sighting--a18db876-ed07-4d70-b8d1-877fdb9eda42", "sighting--8edade22-9e89-4945-9746-2550bca2a52b", "sighting--d76d710a-6603-4526-a9e4-b492dfc44960", "sighting--5a750c4a-9b24-4d6d-ba96-1a3d16afc41a", "sighting--cf303ead-ea37-4716-85a5-60dcde2649c9", "sighting--5872bb1f-2528-46c4-b114-2f86aa5b2bcc", "sighting--e5b710b2-6d8f-4465-8cd6-b9a515792172", "sighting--c496e5b8-868a-4fd8-b1e6-abf294a22f87", "sighting--b0a1e89c-35de-4bd6-ac5c-265df15e27ce", "sighting--2360ca66-59f2-4e91-93ca-c3da196d8cdd", "sighting--cf98c4e0-0259-4013-8ecf-4724446ce95f", "sighting--26c1a15a-4276-4752-abdc-793290f015ba", "sighting--81efa67d-a06a-4ca6-b8e2-1a66eda22e99", "sighting--5ba5c9de-8c31-486f-b3ba-1788d0737559", "sighting--901e3967-d530-49f7-8474-6c1fe560c379", "sighting--dfeebdc1-5bee-4638-bbb7-d947a2291c5c", "sighting--7d9dd2df-db1c-4488-8180-8a4bde0827d0", "sighting--8703cf66-cb62-4ec9-a961-b3f265bd1f80", "sighting--460e7009-0a71-4ee0-b341-f434b807ba30", "sighting--9ce84c6b-7232-4b53-bb50-8f2ed43088b4", "sighting--94d068fc-47a1-4080-af76-d46ed229b4bd", "sighting--7186738b-31a3-4411-b634-313facf258e7", "sighting--4575a4d4-3ab5-4789-8912-150455ded241", "sighting--84fb19bd-0ad1-4601-920a-eff15b41f56d", "sighting--2e9dc902-5ae9-4995-a9a3-21f6b89cc16f", "sighting--2cff97a3-0fa9-4bbe-a7db-074b21b51cb9", "sighting--1edddb99-f31a-4b0f-8bba-98e7f1775580", "sighting--8ae81ed2-e903-4f19-8cc4-8c8695649f34", "sighting--58613732-ada3-4866-949f-3ac504f7b44f", "sighting--f8ec7712-b737-4ae8-88ca-3571b2484091", "sighting--1b747f8e-605d-4a20-8f3e-c81e9e14bd6a", "sighting--21ec8968-eb3c-45ce-9e54-d29d0165d920", "sighting--d4700ea0-4d6c-42ca-9eba-5a878d8d93c7", "sighting--eeab8ec6-e7b5-411b-8cfb-cd6acc704744", "sighting--58dc4fb8-7d18-4529-ae52-c498ea5baa88", "sighting--71d50147-44c5-4a1a-b036-078cb29b1438", "sighting--a632a90c-decb-41af-9ad6-7407aca929ef", "sighting--4ccd42f7-bd00-47d3-bf07-1cb58235e2e5", "sighting--be82cff6-5a23-4c97-9dfc-5a71c1148e58", "sighting--b49f854b-52e6-4c09-81e7-dc515ee1561a", "sighting--1f1819c9-e08b-4f10-912c-525eee612eca", "sighting--83d21123-9fb2-4147-a9d9-80ecf64174ee", "sighting--3d15b48e-37a5-4f65-8910-c5aa6a365677", "sighting--a015f1ef-b3af-4d0d-a07c-9756bcf275f3", "sighting--3ce7f60e-567b-49a3-afc2-edf43ddd6bd5", "sighting--11401d6b-d15c-42f7-94a5-6adddfca10fb", "sighting--77900295-61f6-466f-9a2a-807338633bb7", "sighting--42c0a90b-a95a-4c4a-a963-0439cabf9b7e", "sighting--d8fe60e2-0031-4e3b-8346-a3d5c9a080c6", "sighting--cfb9974b-3f9c-4e7f-9588-662b6bc2c98d", "sighting--d9eec6bb-3c56-4e0f-9210-5f2873f32fa0", "sighting--59c3fc9d-af0e-4421-856e-a4839b1ad5d8", "sighting--549d73ef-3507-40c2-bcf3-026cc9eea32b", "sighting--b00a6064-f509-4171-a4b9-09864664baa1", "sighting--3d4122b7-3b58-40d5-818d-373fdab414ce", "sighting--a56d874e-c703-4164-b050-0bc2580f93c7", "sighting--7843417f-6c1a-4cb1-aaac-91c8cca2d2ac", "sighting--d9f07488-133b-416a-99fb-a466e5adac47", "sighting--67140e85-f054-45d8-96e8-d0b1007ffd5c", "sighting--3098a189-2d64-4b8f-a27d-96b7d9b7be3f", "sighting--5cabf07e-fb5c-4834-981c-e94e05817b84", "sighting--a69efef4-7cc4-4824-a216-2afd958a0283", "sighting--ba5e5a5d-facd-468c-80fb-ad2507c652e1", "sighting--bc0f8da0-9d47-4631-9217-5ea9ca778053", "sighting--49596184-d714-46f3-866f-0cad9bf6bbfd", "sighting--a9879b74-da00-420d-9cda-e6a4ae369ce1", "sighting--d6daad5c-d79a-4e35-a5d2-a958b0c695c3", "sighting--dc9d7431-e841-4f2e-8a21-58e0487f1e30", "sighting--b7a29e5a-a1d7-4714-9ee9-bc337943a129", "sighting--7386f29e-2a0f-4578-be07-fe96ab6f5ac6", "sighting--6cfa6a34-dfa5-4667-813a-d183465ff13d", "sighting--7cbf1014-8bac-4faf-a6d3-d5e7215fcca7", "sighting--6a0ed05e-4b86-4357-958b-ad4fe9424081", "sighting--f9a63811-19d1-4104-aeb7-374e2b325b4d", "sighting--9b41bbaf-ca5f-4ac0-af51-f13969b328f8", "sighting--cb542acf-0663-4887-94c0-1170824f9829", "sighting--fc0735e1-f4ed-4d1a-b466-57e34bfc3410", "sighting--4e513864-8cf6-4f2b-84f5-ec1d60d5cbd4", "sighting--61b9b94c-cacf-44e7-a750-f18ec28d403f", "sighting--7c55195f-9f12-45f6-b1ef-faa893c697ba", "sighting--e5a0eb69-5d8d-410c-a8ba-5b55aed9fd12", "sighting--29945ee7-a188-48ca-906b-ffcbb15ed9eb", "sighting--aedb4d0c-2fa3-48cd-9526-2c28c04323ff", "sighting--5003628e-a22f-4288-b2bc-f9f18a6b451b", "sighting--8ceef44f-8b15-4d60-b520-34231aac328b", "sighting--86f8a3d3-b500-467c-90c0-e94cc4bb68f6", "sighting--0d3da4d7-a2d6-4563-bbca-d195dd285115", "sighting--1350868c-3c86-4127-995b-265235451dbb", "sighting--589f4c7c-886b-4c4e-bc58-a2fed194fc8e", "sighting--b79354a5-4ee4-45c9-aa20-713b0722437a", "sighting--7c58ae96-e2bd-4f34-9edb-8d5059d73182", "sighting--e1540b77-a22f-4b59-aa3d-571520f26139", "sighting--1da5a09c-0406-4a7f-bc6a-cfe0c15dcee3", "sighting--5bfa2b7d-f7a6-4440-9593-44068c9d090e", "sighting--65149aa6-8ae4-4299-b934-f4d3f4146174", "sighting--b248032e-4dd5-4cef-a5e9-40e3254f2e78", "sighting--0b32281f-6a50-4a5a-8109-b154fc4e4b94", "sighting--43c53719-2a13-4a9f-8aa6-736efbcd5c7d", "sighting--6d4c740e-4648-419c-b08b-d474be4e8cd5", "sighting--241ee042-108a-452f-be24-6a260b684949", "sighting--c7a0a4b8-1ec6-4089-84a0-494aef4050a8", "sighting--d9cac8c2-3e1d-4626-8da0-72e6719cd6cf", "sighting--b901c7e2-fb6e-44f9-9c9d-66fce2eb3c39", "sighting--3d4f1320-c4a9-44e0-9102-39822b6cc746", "sighting--dc91784f-3131-49cc-9316-2347589e496c", "sighting--6f4e3724-a762-402d-b038-f6e73c6cce4f", "sighting--ddce2206-6c59-4924-ad6f-8e4763a064f4", "sighting--de5e1274-b880-4a83-a1e4-14d2dc15bf75", "sighting--d5d8c5db-5122-488d-a9a2-62ae57ac8873", "sighting--a2d1a8e7-8762-4b64-bbbb-f58011adc6ca", "sighting--9a61a807-8203-4d77-bd67-4cb87ed078b0", "sighting--50e9d417-0070-466d-a4f5-adb37db8af11", "sighting--d1cf98b7-e755-43b7-9e4c-3852dfc2dc67", "sighting--ffae0bce-9083-45fa-b706-3a8e19d035d9", "sighting--45791467-2e47-4f0b-8ee5-6e96bce7f737", "sighting--f7e5ecfd-8c1e-463b-9820-5aee6cad6d16", "sighting--45299ea7-8959-40b9-8617-ef0dd68d238b", "sighting--23f8d8dc-d0fb-4c53-aab2-cba1efcfe219", "sighting--36ae3991-2cb2-46bf-879f-894ebce5935a", "sighting--241a0e78-d994-4779-8b12-f3ba12e57707", "sighting--4c3930f6-f864-433e-b48a-7b816722232f", "sighting--3cbfd180-d227-4957-80f0-3d6eb829ad77", "sighting--7c4b76b7-d1d2-4fa3-9094-e96f4726d832", "sighting--d8c09abb-717e-415a-b339-3e059474501e", "sighting--9ebff443-1364-413f-86d8-568f4ed83a24", "sighting--6650afb2-fb73-4853-b5df-15add729af94", "sighting--1d0c2d7b-fa23-4b98-b119-2f83685cd7ab", "sighting--f4b38e09-3e33-48be-9463-6e7c583c5cb7", "sighting--52c3ca07-0e19-42d5-86c3-d9b20cd5dd56", "sighting--a4349edb-81e6-4073-bf58-a5fe4afba006", "sighting--5c67d37d-c12a-4a41-b4da-e019927bcd98", "sighting--542956fe-a59e-41dc-8412-40692cfbb0b4", "sighting--dcff3a1c-2bab-4c47-816d-7c4cff2d3730", "sighting--e2a860fb-eb70-45fd-bb0c-1d604cf2ab8e", "sighting--d0c57edc-0569-479b-b39b-ebb0dd94cdc5", "sighting--f15fe405-451a-4573-b2b4-69bca9b26706", "sighting--a88e271e-384d-4a26-b308-c144ba52905b", "sighting--bf3ae01f-a747-4eb3-9297-26545d42cda0", "sighting--71551811-95df-4074-89d8-23c9fc755dc8", "sighting--2ee718bd-4e15-462e-8569-645ec3ea9db5", "sighting--9c36fb5c-5444-4ed8-b1be-4f9fbd354359", "sighting--8dc52485-f764-4e36-a630-62121cadb87e", "sighting--a0a5971a-c431-4083-997e-98a0ed1169c4", "sighting--b4eff682-a736-40e9-a1da-51edcf299b58", "sighting--7ae01de1-1e78-46c4-b328-551d8b6749a3", "sighting--4a17a28b-85b3-4e28-b862-dac174f9ee40", "sighting--b500f574-ceb1-41f9-a0c4-2e4496b2d9c8", "sighting--d6ce1ed6-edec-4d03-b64c-8c94d3773341", "sighting--2fa9e51d-ea3e-49f3-9413-fa80a7b39dca", "sighting--083227f8-fe95-466a-a7cb-0c8d026f36af", "sighting--607fd923-0de6-4168-be7a-34b01774865c", "sighting--16276e6f-0c0c-4280-90fd-652415956ef0", "sighting--c6ac0f4c-b405-43a9-aa6d-bd37cbc8b23b", "sighting--07e35553-a2ee-4775-9c74-b2d037dcc533", "sighting--f0221e59-a500-4eec-bbad-1bef87c14520", "sighting--ae64e894-3975-431e-b09b-3628e5b9dd37", "sighting--becb5e38-6228-4ac7-8ad5-ab2eda5c5b12", "sighting--1d460fef-5272-4ef3-bcd8-95dc2651dd9e", "sighting--b1d66e16-8df5-4853-8d61-9b4433e8b455", "sighting--112fc761-ddba-4912-9fe3-c70a74241822", "sighting--c07af1cd-2229-4be5-927c-c01eacf4a7a6", "sighting--074089c0-c83f-4849-8540-f4d9a88dfaf4", "sighting--99cf5fbf-fdd4-4531-a7e4-a05d45b78655", "sighting--3695a7be-2df2-42d4-bf22-b3c204a472a1", "sighting--3beef217-ee02-44e5-aa1d-7cd63c37c9f3", "sighting--ece98873-dc01-43aa-a423-a05d7a49adb6", "sighting--a208efa9-f89b-433e-8e25-2a180e842727", "sighting--a42c64fa-9a65-4131-8357-36e68cb51818", "sighting--b7e8c305-d2e2-448c-93fc-eb38f7cab355", "sighting--50f6e58c-ffe6-417a-ba2b-46960aeedc8d", "sighting--3e34397c-720d-4d70-8942-ba47844e775d", "sighting--cb7b96d7-e94c-4fa6-9824-873425d0489c", "sighting--a856b32d-971a-4b33-863b-3d3469c3f861", "sighting--6dbcb957-d52c-449b-967f-93582c6739e2", "sighting--11863b5a-bfbb-4ed3-b82b-528a4a3f17c6", "sighting--5aba9209-1f81-406d-bb49-fffa95bc2e3e", "sighting--380cd1a7-29cb-4bde-a334-7d686b2dafe0", "sighting--89b8082b-2acf-40a8-a5e9-deb3bb5b0c8e", "sighting--1d72436c-c3fb-4328-9932-f87047cd8d08", "sighting--ff3e7b77-e0ad-4834-8f27-8f5fcbc66921", "sighting--962fe386-95c6-4e83-9525-368dc81f2ac3", "sighting--9f808567-44c5-4b65-b846-b39d89b4e5f3", "sighting--2b69a8d2-c12c-408b-a12d-37be37aac12e", "sighting--70b033a2-6f7e-44c7-b601-11b422720109", "sighting--45f32bc6-98f9-4d8d-86d8-cf908a8e81b5", "sighting--213bdacf-693f-4ed3-8efa-c4cbf93809e1", "sighting--45ee27ec-ad70-418e-ae97-ee2c5c33a568", "sighting--ca07f689-c2cb-4286-a003-32cca99e9506", "sighting--ff33cb2d-2688-4dd3-a7ef-e796ea946fef", "sighting--0b651ae4-f1d5-4485-b282-b97221d66174", "sighting--eebd56fa-e1e1-4080-b52a-ef4b640eb868", "sighting--635dae2a-9fc5-45f5-a1ac-17b8b5c3e45c", "sighting--de213719-2003-435d-992b-5206256799a2", "sighting--b205a497-81ab-4a3e-9914-0d173811efc5", "sighting--01c0044e-3ef1-4846-995d-67d628760b2a", "sighting--f6586390-8682-4b3d-ba29-ffed8ecba5e0", "sighting--bf1595fe-68c7-48b8-b446-51177f8d4d70", "sighting--a2f8d8f9-a3b0-4e1f-9fe2-f982a69258d8", "sighting--a5d924cf-4603-4ad1-8c94-614740fdf92b", "sighting--78ba3a05-1b98-47e8-860f-163de0adc236", "sighting--00767901-52b7-460e-8f8b-ab6b8884b852", "sighting--23c525f1-d2ed-4049-a9cb-b381c95dfc57", "sighting--7f6cc77a-7979-4d6c-a145-46f0d4ce8bdb", "sighting--8b920cb6-3693-4ecc-a381-296b6f08ec4f", "sighting--b11317a3-7b83-4a78-8ccd-611d1901c470", "sighting--4afb77f6-ccb7-4434-861d-45040d41fabe", "sighting--313d38c8-cf4b-4496-859e-a694021c9022", "sighting--f3bfe681-c868-4352-9e3c-8462e65d95a9", "sighting--2b3275ed-9a5d-4f34-a678-977f4b4fd591", "sighting--b0390052-6b1a-4299-baed-5048a5b847d5", "sighting--b99f3755-ecac-49d3-adf0-99a55f3c7398", "sighting--98228e2b-d52a-4252-86bc-72524dd2b3d3", "sighting--ba7ef7a2-ef71-463a-9c47-1bed91878b84", "sighting--14c5f2b8-e52c-40e2-9bb8-97f0a8fa7446", "sighting--7961f4cd-c76a-44fc-b6ab-44dd0747eb30", "sighting--55f0e891-de45-429b-be41-264ff3ee479b", "sighting--a3835023-1f54-4935-9347-3082815aa15a", "sighting--f879e05e-7bde-4326-9b59-7ddb67346b15", "sighting--1c94f64c-4ef3-42a7-88b9-b806c018021d", "sighting--a2d8f108-5c97-4f7c-93c5-ced611029f26", "sighting--ca361704-a892-4392-a503-b12a2d25d5fb", "sighting--ac82735c-38d1-4c8b-9409-b604f1907373", "sighting--40e3d90e-2bae-4ec5-98e8-9b02d25b3669", "sighting--e50e5dc1-45d8-4d6c-95b8-a7e178fefd90", "sighting--254dacb4-5965-4100-8cca-38d808d8412d", "sighting--03d53e76-2b7c-466a-9c0b-c8a92188a864", "sighting--8d377e09-dd8c-4037-b626-3ea43b09445e", "sighting--3ce913b8-dd3f-4515-9ba2-aca2cbd28fcc", "sighting--1a59e3b7-9ca6-4a0d-ab78-9eba91d175ea", "sighting--98063775-5c65-4592-80f5-4a1f6087c6e2", "sighting--3f3230be-9631-4428-af9a-9174e5bd3490", "sighting--5de63f6f-8231-42db-bfa0-7b69dbae9267", "sighting--942b468d-0801-4ebf-acb2-93decc4a86c8", "sighting--a2050b24-875b-49e3-a7d8-be624ceac658", "sighting--0cf9b537-d734-43b6-9971-623a522541c6", "sighting--b5ca4f33-a76e-4e41-9bf2-4bfcbaf90ac4", "sighting--3a012c8a-e6b8-4f6d-bff8-4a3eaae7eb83", "sighting--0ecabef2-adf1-4013-b21d-7233609a3b91", "sighting--769bafae-8bc6-4c57-bbb6-4a82e377eb35", "sighting--9f873936-f118-4005-8890-8ba428937c06", "sighting--1896ad74-899a-453c-8f4e-bc8968757c9b", "sighting--a11c5f6a-92f2-46ba-8e92-dfeea922af84", "sighting--a854c727-7369-43be-9f95-94600d0e9db2", "sighting--8b8b4001-0a77-4e33-aca3-c1d14ad1a524", "sighting--2d631a40-83b3-4c57-a91b-65eb43d03abe", "sighting--1bca912f-6229-4cf1-89d3-b99f35bd7bcf", "sighting--654b290c-7f9d-4fb6-b5f4-755891da1bbf", "sighting--a5c60d56-002e-4409-a0a8-e24f2ac44d30", "sighting--85be2b20-a852-44a8-a404-4ce503080bba", "sighting--725640e3-02b8-49fc-9dde-2cf22436f08c", "sighting--cca37a91-4404-49b7-aaf3-106676c2d5b3", "sighting--c520fdf9-fba3-4d70-acd1-a16e266d0b6d", "sighting--5ac1297d-35f4-404a-b51e-219372d4e45e", "sighting--8f870c20-d0aa-4540-ba6c-79d2eb1ef800", "sighting--45a62414-cfe2-494d-9d27-cf22ccf72390", "sighting--9339104d-d0d5-444f-bba1-930ae944a99f", "sighting--9edf9902-ce46-4e0f-bf31-152628c31730", "sighting--32757d53-ec2b-4ab0-a68a-013b9d5ff553", "sighting--08a05a79-9f25-47a6-a113-91933735220e", "sighting--5243c5b1-3d03-4839-89cc-fdecdcc77157", "sighting--9e64c039-869c-4ff2-855e-5debdbf6b8fc", "sighting--de8733f2-bcc3-43e9-a054-c6df237d137f", "sighting--bbbeebac-4443-4e53-a593-85bff34ccc36", "sighting--3634766a-2031-42c1-afd3-35c0888e2d60", "sighting--d5172a71-4310-4c38-bf06-555db9581494", "sighting--8bb40700-b439-4a59-ab47-f360c7cf63f7", "sighting--55928a6e-7707-43f5-8586-827e557741b5", "sighting--8d133c58-33f7-421c-a62c-a8bf2dc577a7", "sighting--0c9a81c4-65dd-4cf3-ad34-2475ffaeb91d", "sighting--d02ed52e-ac81-429c-87e3-48928cdecee9", "sighting--8df538a6-1203-429c-ba1c-2ac2fb78dbb1", "sighting--30c53894-820a-4cf4-8f83-de2188b77d39", "sighting--a74ae222-e743-4d65-89cd-a4788dd8efbe", "sighting--037d81f2-7681-4fd6-9f42-d8a3c4574f3f", "sighting--4ef13275-31b3-42ca-9960-262659f573f2", "sighting--aa21cf90-01a5-419d-9d1a-72b408efedbe", "sighting--a952f2e4-7db2-47db-9e5c-c896db33ee78", "sighting--e0254da2-d1b2-4ec1-af12-1f2ad2eaba24", "sighting--503bf00f-e07c-4657-93e1-0345701f12ef", "sighting--436f27a0-6907-4226-817a-ae815f80f893", "sighting--ff365fe9-f932-4bf5-bdda-8be96f0a3a49", "sighting--b320ef0e-c1aa-44f2-9cda-c45b9b2b8436", "sighting--3420f43e-85a5-44df-b3a0-699469d44917", "sighting--69387259-182e-432f-97ed-2ebe22a5fa6e", "sighting--3d4ce4ef-3bd2-464d-b769-92b96334522b", "sighting--67217834-1bf7-4bb6-bee8-251efb176a88", "sighting--85bff486-bd2c-45c1-a5ef-248cdccdf172", "sighting--3048d179-ba9b-40b3-a3f3-65f80567dea2", "sighting--7d5f2b23-7fad-40ee-9758-41f486aaf1da", "sighting--2c97033b-80a2-4125-8dc8-63cfcb6d2e16", "sighting--a9c2e969-e6e0-406d-ad8e-e24c1b97cef3", "sighting--b66e47ed-29bc-4e6b-8864-19bd6a25c728", "sighting--74d59c36-f9c4-422b-894a-2687049d8813", "sighting--81a95c6a-9151-44e7-9025-2a29aae99a7a", "sighting--9cd13a6e-8c59-4bd9-924a-efca22c59320", "sighting--ca3ca706-923e-46d9-a15c-92086b8405a0", "sighting--6e52c638-890f-44cc-a4ba-dbb47f7a4578", "sighting--8e7367a3-47ac-427e-b035-446bb594737e", "sighting--c21f60b8-f6c5-413b-b6c4-0b050a3829fe", "sighting--9802ebea-f286-49de-acf2-daf69fded7b5", "sighting--567591d4-7b43-42a3-a190-44b92f9a3b21", "sighting--e0060bed-85d8-4cca-b250-1f92090ba7f2", "sighting--c7edff5d-93f0-4833-a42b-5f8273fdbd49", "sighting--6cc58350-fc49-4ed2-9668-425bf58d5adc", "sighting--69e6e78f-414e-4612-be13-42d4fd33c664", "sighting--b4463e62-57b6-44b4-8edc-c654f0d9ec9d", "sighting--ebfb3cca-8cdb-4379-8ed6-f1834d2b0182", "sighting--d43ab5f3-07d4-4ef4-8469-0e96232c72a4", "sighting--370fc91d-4792-4682-88fa-724b7886f589", "sighting--76c9f80f-8923-4623-ba78-29bc3ba00e15", "sighting--63ce757c-ac4a-4423-99e6-bf54251f4740", "sighting--9eecfd36-fb04-4b92-b429-3c862b31ef53", "sighting--9304fbbe-9478-4898-873a-754784215075", "sighting--e5ce572d-51cf-47fe-9565-198252b157bf", "sighting--55248b7a-c4a9-4069-8bd3-a3d6d4537ff7", "sighting--9d9e2973-73b3-4490-b8b5-218303f2eb69", "sighting--bca1944f-1c1a-45fc-baf0-84d571b7c863", "sighting--3b48ac21-965a-414c-9c66-a5268e02fd27", "sighting--60ebaad0-c789-442f-ae30-e35a6d726934", "sighting--c4d0fbdf-cc90-4c05-a473-bfa46fd9d23e", "sighting--babe8fd3-de38-422d-8166-1c08e3bbe1cf", "sighting--6704c7a7-5bc4-4875-aae4-7486ed629399", "sighting--3c7980c5-95bb-43d3-9c41-8ee0568e5ab6", "sighting--891a213d-1f0e-436d-b840-78a1798e6d7a", "sighting--a48b9d35-cfe6-437b-ac0d-0a89e4a700eb", "sighting--3d60311d-53f4-4c62-a3ff-17b76569031e", "sighting--5ed110bd-b2cd-4d60-916e-f8821db15208", "sighting--9f0144c0-503a-4f64-a0c3-6709893c5685", "sighting--63ac9f7f-f524-447b-afa4-7c27a8380557", "sighting--c017de33-f7da-49cf-b411-18e8ab386364", "sighting--873384d8-51f4-466e-9d32-32356a8a565f", "sighting--51e57c0f-ca00-45c0-8597-484f30073171", "sighting--513532e0-619a-4abd-a463-e36d5ae00566", "sighting--7a6741aa-42db-4c3c-9991-58c632a4f64a", "sighting--83c079c5-3e7b-45f1-9fe7-30a67929fad2", "sighting--ed6aaa99-1205-456e-a2ae-237590970ce2", "sighting--7cf2e65b-ff73-4376-8227-977bf6fac51f", "sighting--40798c3b-9a8b-4a8a-b9c7-d1e1640dcb17", "sighting--4dfdd28e-305b-422c-b125-b218630f6a5b", "sighting--2f70a128-9f95-4492-9e62-b965381a41dc", "sighting--a962f1b4-c719-47db-a616-3d1891fedda0", "sighting--a478bc54-fd1a-417e-bf6f-d31e49f56206", "sighting--b2fa2b37-b732-4840-ac5f-99c8737fa8fe", "sighting--ae109470-099e-446f-ba45-2ad3f15e7e9b", "sighting--29f5724b-5df2-436b-8e3e-0eb8a6286513", "sighting--09ad7532-6c3d-4e62-83aa-c7a314fc9431", "sighting--83e4fcd2-0ab8-48f1-b93e-d48e302f53fe", "sighting--53e02e4d-977a-4ae3-a26c-f4bfbea04192", "sighting--df9f8237-5c5e-4ccf-9c07-2fe615a9f5e6", "sighting--dd0e0715-c4c9-4174-b155-525d57d29c23", "sighting--a3d64500-9483-4a85-ba41-367ab4fd1ed5", "sighting--51357657-48ea-4d93-98ef-5e161b03f95a", "sighting--f5d82a19-04b6-44c3-a4b2-93d91cb48fdc", "sighting--d21e944c-c48b-4220-a7c2-f01949b8f82c", "sighting--e6f365f9-5cd0-4c45-99bf-b8861bc99d94", "sighting--f8a1169f-7f9b-4fe7-add1-5520e88c9c36", "sighting--ea0fe230-6b22-4e31-bee1-9c5152126272", "sighting--7ee1519f-284f-4085-bd96-f6dcdd118001", "sighting--f2cd21de-4280-491f-a8b3-900fd9935cdf", "sighting--f6046d60-8cd7-4420-8078-a5c0012f45ad", "sighting--7c137536-eaef-4c75-bf5a-c3dd07779b3d", "sighting--65d2abc3-f08a-4ab1-91e9-d4897afaf9c9", "sighting--fa9c3c13-49e5-49db-92c5-ecf97f1955b4", "sighting--f48022ee-4fe1-42b9-a47c-8d930c50a3fc", "sighting--ede44d37-91ca-43bb-87de-deed0353674b", "sighting--6919a32b-11f0-4f33-9336-3a24b8eeabcb", "sighting--d3db6c28-9600-4a7d-bbdf-f7fbf4b17691", "sighting--332bd4b7-894a-47ad-ab30-0feb44958c93", "sighting--6ae97cda-49e8-456a-afb4-4e3f0deb9b83", "sighting--53f21757-32da-49cb-abcd-c113d5264d71", "sighting--1eaae1a2-5721-4831-8dce-cb54218b297a", "sighting--a189fc47-d367-4999-bedb-8aa079977329", "sighting--3eaa3c1d-dbbc-41b6-9d7b-a6aaa4594bdf", "sighting--5b567258-348f-4f11-bdb2-d011c96136b6", "sighting--613aabf2-1e2e-484a-87df-280ebd414b58", "sighting--de89ebdb-891d-4e5e-962c-8cb5b9191cfd", "sighting--03f2d553-ff70-4bd4-ab2c-6acdc911450a", "sighting--92b243b2-360b-4289-a501-ccf8f7bf5437", "sighting--fe2a68c0-6e56-4ae4-9713-852b5c8a130b", "sighting--9d769f79-6a36-46ad-ada7-111329aae98f", "sighting--f240bcba-1d7f-467e-8858-3141ea07ecd8", "sighting--32b1f983-82c3-4e1d-ab17-2e1d90090137", "sighting--33417526-90aa-4aea-ad3a-f6019d309779", "sighting--ab8bc6be-a28c-4a69-b681-ee582bededc3", "sighting--7ed4ae09-62ae-4ff9-acb1-9e19700f0e87", "sighting--258cd0aa-5fc4-4a84-945f-8ee7a4996676", "sighting--17fa0bf7-e6e1-45c5-b28a-b52e7946f1a9", "sighting--ff8f6798-1750-4b34-a031-688e1df33c25", "sighting--baeb3ec9-2b83-4f48-867c-d4978ae6b5ad", "sighting--919536e8-1f0d-4f0d-977e-d355c2a0aa5e", "sighting--f45b0fa2-8933-4900-b4ec-d63e5b4a995f", "sighting--ddfe6b68-6266-42a2-bf4d-bf2d399026d4", "sighting--64965709-4770-48cc-adbb-dedc4afb13e2", "sighting--4033e115-051d-480b-a336-ae392564b00f", "sighting--59ed5985-4a62-4039-b557-5473e69cb7e8", "sighting--f89fe2cd-3722-4886-af03-ba89b2d82607", "sighting--a42c747c-db22-40f9-9f98-ac7897abd441", "sighting--1c826cdc-7238-4da3-91fe-ea3801bb843a", "sighting--87e51511-b5d9-4f40-b172-ae7cfc12d2b2", "sighting--2ca023c4-e8a7-4d1d-979c-ffd8ad4e3a48", "sighting--f5aa60f2-e832-4500-8032-b21ded45cd45", "sighting--be456abb-177b-4e8c-b38a-1b98f7962e1f", "sighting--5b833042-40ba-454e-8ae3-3b0776d86131", "sighting--d92a620e-15d9-4db4-861e-c34be9ac9d36", "sighting--d6f13c79-3207-4b96-81da-6859a7df1910", "sighting--692c39ff-f888-4b38-8503-c5654fc9d435", "sighting--65d42b1f-0cd6-4d11-a7d7-5c215f19a2c5", "sighting--336e7c55-a16d-4dea-b9fc-14549012c24b", "sighting--e784363f-611d-479d-8bd4-9222b6d5e568", "sighting--60521fc4-e4a1-4d8e-bf1c-567ef2062997", "sighting--43b385f7-2b58-4779-b73f-88eb3a6d5c9c", "sighting--1d17d1c2-9fb2-4f75-993e-9e03b91648a0", "sighting--58e20775-809c-4ee0-afaa-ff08c831f050", "sighting--d456f1d6-3ebc-4017-957e-56558ad77df9", "sighting--238865e2-d068-47cf-be46-ca9a121061b9", "sighting--e9791236-7eb6-42b5-9191-5e6ce186a2d6", "sighting--bf7e2d38-935e-49b2-a531-d6336f5dc0d7", "sighting--e2dd2169-6d54-4e7e-8728-755e20e43a5e", "sighting--2d11fe10-19fc-44e0-a21b-7c64b174de82", "sighting--3ad0e013-61e9-4688-9d70-a676150c89cc", "sighting--8b500691-0402-4f00-964c-def7da741db3", "sighting--0d68a1cf-36a2-4a79-8bf8-a5075758bed8", "sighting--266ebfbd-8df6-45d6-97b9-9820d8295fa7", "sighting--150e0f14-2eb3-4240-93a6-f2bef5d6b976", "sighting--a98de698-13d5-4092-81df-b8b31aad7fd6", "sighting--7a8f45b8-69c8-4c34-87f8-fb333ec64ca2", "sighting--3eefce54-1ce5-4901-87c7-88a621b55140", "sighting--f066950a-14b9-4039-a70b-beda1b3cf66f", "sighting--2a668c83-4868-4d2f-8629-6a051c9e524c", "sighting--ae31e40d-8881-4a0a-9e1b-a3cfaa0622c0", "sighting--88b1883b-4a0a-4e03-a055-c0034abe6baa", "sighting--b5201a51-8c08-46a8-b2bc-7d74b5af7900", "sighting--cac8ea73-b10a-43bd-b4fd-5eb5e3634fbb", "sighting--3bd22a3a-ecfe-4bcb-b9e0-d7e87e7e10c5", "sighting--a989d9e1-24ca-47e4-89bc-53d23b26e3a7", "sighting--3b706c28-e43b-4bed-8417-e85e7a1a6929", "sighting--8b857e68-89d7-4e3c-b0d9-023e708d8779", "sighting--15d53dae-3b27-4727-a9a1-3857855328a4", "sighting--8fb5d3bc-bd8f-4850-8009-31ed360ad27a", "sighting--9d413d1b-26cd-4add-9f87-760262f336cd", "sighting--1be6e353-fd5e-4ece-be13-3f71cfb80c4e", "sighting--909008da-70c7-413f-b174-b0475cbdcf24", "sighting--c81df3d1-9e2e-4b51-a332-ac824459ad8d", "sighting--b8ab150e-98f1-435f-bd97-9064ffaa8959", "sighting--9f4919d7-8e3f-444a-a2ed-b54881528ccf", "sighting--0ae4760b-59a4-43ba-b1e5-7ed15ec77431", "sighting--0bd7bcc8-819f-45f2-9c39-74575392e6d9", "sighting--d20676d7-8ab1-420a-ad46-4096fad7c143", "sighting--1e550d09-d552-43bb-aff9-262c88b64238", "sighting--e4873f6e-0c35-4d59-851a-93880b75a690", "sighting--f6f6d7e8-82e1-4ba8-8ddf-debbd86fdfc7", "sighting--ffcbce85-108f-4f6c-ba20-60db9b3d903a", "sighting--fccbe0e2-aa6f-4d7e-a22b-cca786802125", "sighting--cd308b47-a8cc-47b8-9d0c-ed516e6fa96e", "sighting--2e4fdc7c-13e7-4f29-99c7-6ea0f56a1228", "sighting--512ce2d4-ba0d-4f23-89a2-ae6889867b7f", "sighting--fbd9fbdf-fac6-435c-b4bd-e37ff44794fb", "sighting--3f40591c-569f-449a-876b-9112d10abd68", "sighting--f4589c22-0e12-4a5c-bbe8-a4fdc611b48f", "sighting--38b3cf66-4f0d-4582-9bfe-65923238a18c", "sighting--b923e41f-4e70-4afa-8376-cda19d99b72b", "sighting--080f1073-5ed3-48b6-9a58-9df6473d558c", "sighting--46761e9f-e0e8-4419-916d-10141ecd0d97", "sighting--141ae0f4-1d5c-463c-a5c2-418779faac11", "sighting--2d20a239-a223-414f-9efb-f6772c679f96", "sighting--c4211e43-6634-4dda-a778-805d1f15ef31", "sighting--c7324ffe-0808-4e14-af6d-f70ee4df42a9", "sighting--c7bfc4fc-0de0-4b14-8e24-8dbd20adb842", "sighting--de6fff29-e6fa-4164-a68e-74df4e302e82", "sighting--855d03ed-8e5c-4d6e-b50e-3fa7e4192083", "sighting--ed81c62e-e8c0-4c58-8d9e-f48e509e8b9a", "sighting--16deefd2-2390-4cbf-89a0-f061a062272c", "sighting--b274b717-d310-4d34-a7bf-7f0af4b90231", "sighting--0b69ec56-b5af-4012-aaa0-95847a6c57b0", "sighting--2908cb15-6bcc-49f9-883d-e93605b2c796", "sighting--e529a542-268f-4d50-a235-909993136519", "sighting--eda7ebc8-746f-4086-a6c8-c676b93385d9", "sighting--718fc23a-baa9-4818-8853-95f7b7fc8a2d", "sighting--af3f7cfa-3424-40f5-9933-f6579bc17e55", "sighting--5dcabc61-abae-4365-b822-00d1aebee5e4", "sighting--086c8f4b-9242-493e-af97-bb89c8c7eb6b", "sighting--66e29c6e-e325-40e3-9df5-84a147121804", "sighting--23fc7fb8-2297-401e-92b4-9541bb9205d7", "sighting--3ef63902-b77b-4e84-b1df-b0757e99ff24", "sighting--a948675f-4630-4c86-bcf6-7ec854cd171e", "sighting--080fc1cf-096f-4912-b573-d4ec54170c17", "sighting--7a2245ea-239c-4add-91de-ec9ebe417803", "sighting--9c146569-b73b-4817-843b-5953add76792", "sighting--819a0b82-30f3-4c41-9a6e-86df2e9f03c9", "sighting--73ec1588-fb5d-432f-be78-070aa193cf64", "sighting--5f645fca-0098-4eb9-8e87-8dfe701bc584", "sighting--0d0657e3-d14a-4a44-9c81-940d72d57425", "sighting--daf1e501-ac82-4729-b1fb-28f183c57f19", "sighting--3d64a5ef-cff9-49d3-a6bf-d7fe58441415", "sighting--dfbf8907-c819-4b77-8b10-dc0bf2c68d90", "sighting--18bf3927-63a1-494d-9b2e-96c4a94eb2fc", "sighting--db0d6b6e-fb82-4079-badd-fc4c9a1f4bc1", "sighting--345729ef-1149-43cb-996c-e8f56f8d903f", "sighting--b88b6cb1-2961-45f6-aa33-210c1ec99841", "sighting--f3911b19-a8bf-4bf0-a640-a928e2b33d75", "sighting--49f18cb9-7f6c-49f6-a97d-42c29ecf6e16", "sighting--8526fcaa-7095-4929-9c92-a4a32d10a786", "sighting--1d2aef76-bfed-49a4-bdd4-9305d046fbcf", "sighting--72297f5f-e73a-4534-9b2f-3aad14006b8f", "sighting--30b2d17e-faa8-45d3-a4d4-14e40def824f", "sighting--6069a7e5-9d66-4063-9955-a53f7e3527c6", "sighting--34a57ab7-d7a3-4fb3-a275-bde9bfd00e74", "sighting--2a1d2175-66fc-4502-bdbf-4dfd77779bbb", "sighting--0719151e-504d-44ca-ac70-27a0f6e40bc5", "sighting--51c7716b-652b-41f9-92fe-090f03817118", "sighting--aaa1e27a-793d-4a86-905f-b6be3306a638", "sighting--b255d99a-b32a-4a55-8815-bd73c1094e7e", "sighting--68986788-17c5-4977-a981-43ad34e471a5", "sighting--32419bbe-3ca2-41c1-a57a-24eab728c50a", "sighting--e0421b6d-3b45-46f9-85d9-b8860a19cbb0", "sighting--0b0f6ff4-b1b3-441f-9d1f-7dbf47b01157", "sighting--f312b5bb-0993-4d2d-af8f-de9d9bf4f188", "sighting--84c84a4d-7e69-4494-9fef-4d25d2625c4f", "sighting--087a3eeb-22e5-43e8-8188-3bab5be08946", "sighting--30dea5e3-de45-4909-8e25-d6f521c86e61", "sighting--49b7eb82-affd-4b19-a768-0ebcc839f767", "sighting--0d7d27b0-3ae6-4f65-b1cb-32e544c5ae5e", "sighting--31b24d5c-f4fc-49c7-846b-f968f96bcb2a", "sighting--5f3b6ac4-23b6-4b7c-9f91-951351837703", "sighting--089ee843-ffa1-4de5-8e97-e3af618d305e", "sighting--ce54b8d9-716c-4fdc-bd99-79d7b33df594", "sighting--7024a3e5-b2a3-431f-a739-d915edcdfc3b", "sighting--fd9da780-db59-4981-b028-099026f542f1", "sighting--681bfb8e-6c5f-4058-befc-b4dae87d058c", "sighting--ba23eeed-d113-4d57-a7dd-f00f9a21dea0", "sighting--c2a861dc-4a31-4775-b1e9-284ba45603ab", "sighting--7cbd72b0-4e47-401a-82bf-929bb79755d2", "sighting--916d70d6-2994-48a1-a8d2-799fe133a5df", "sighting--cbc23265-4eb0-4491-bc6f-418c712dd1a3", "sighting--9babb4d9-1848-4f59-a86b-35fcd00e0a7f", "sighting--55f54a0a-b0ef-46a8-abfe-e89ff8bf5102", "sighting--923930f8-67cc-4d9b-bac0-39027faf8d5d", "sighting--96357faf-5442-419a-b748-dfda32d602a6", "sighting--ed2f2c31-8c01-4560-b409-118ee043c5e9", "sighting--88869fef-9422-40be-8222-414ec7e9263e", "sighting--d18fc3e8-01e4-4954-8dd6-380de73789d9", "sighting--83fd1da8-58f8-413a-bfc9-d562fe14775e", "sighting--d9e0e07b-6821-4aab-9c0c-c1f7a444b490", "sighting--a186dbe7-b6bc-462f-94fd-ccaac20d3ec7", "sighting--f4e4ef5e-61b9-4769-808b-2785e8630213", "sighting--ba7b0306-e188-41bf-89da-6dea7841fc93", "sighting--83b685a9-753f-4c54-817f-6188cd148ac8", "sighting--5278e4ed-a054-4b48-ac9f-3200dc10a69d", "sighting--390a2867-b8e0-46a2-bfb5-d5aba7d533f3", "sighting--fd96596f-b784-486d-92b9-3b53de093673", "sighting--cd4f8add-06af-4d78-8acf-9e01eec60995", "sighting--8e022d5a-46ff-4966-a247-013a3782e133", "sighting--6bd18380-da03-4b2c-9b0d-5b18cc876de0", "sighting--f45f821a-05bc-46fe-946c-024fdfa68f20", "sighting--aae9596d-e3d9-4712-a296-eed7da718a56", "sighting--0bf6a0fe-b2aa-4aa3-8e57-ebe6d6809666", "sighting--dec90e2e-c1fb-4a43-bb1b-c35305333bd8", "sighting--2d13a46b-ca2b-4feb-acf7-dfa405c5bc45", "sighting--06ecd2e9-b92c-4792-96b5-6e005beeb1a4", "sighting--fe25fe20-0a79-4dec-a099-868c1ca9fd69", "sighting--2c01a598-14f7-47ba-91d3-3baf3f837045", "sighting--73afcf84-ee3d-4a67-a05f-560f771bac73", "sighting--37405bbd-468b-4166-a28b-719b7f5908c6", "sighting--9a7e3122-26ec-42f0-8bb6-bf65b6168045", "sighting--045c32be-248a-484f-9319-c304f46d5ba6", "sighting--c08a8e4a-bb54-4014-9716-5de99ed509e7", "sighting--a0a273f6-1d02-4e0b-94e9-f3836628b2a1", "sighting--c3d2888e-16d0-4f77-aba9-280fa4100e96", "sighting--3bc34638-b649-4dd7-a818-dd0d143df505", "sighting--efae5846-fb16-4d0c-b039-d8ffdfe02abb", "sighting--c523b6b6-50c6-479c-a1e8-ac2744400f85", "sighting--e37bff63-a552-41d6-980b-b9eeb40faecd", "sighting--22f0f6e8-11db-4596-85f2-4806b04cffeb", "sighting--332a7265-1464-427f-b924-be35623e5b06", "sighting--934ca4a8-502d-424e-87aa-157b54ee5407", "sighting--e3779c9c-2352-4705-adb0-2c4873d7018f", "sighting--dc6b6ed1-ab02-42cd-87e0-b6cd174a86c7", "sighting--4bbabcaa-4f3f-4f9e-b2ef-c5c2b309b063", "sighting--5997ef56-792c-43fa-9f64-f59d45048755", "sighting--85dfb2c6-32ff-402d-a4b3-df26554d8b2f", "sighting--4f0a7bbd-75a3-4f57-ae18-9e4ce5735ee0", "sighting--9c017ac0-82fb-43d4-aeaf-d5a7b3d595c1", "sighting--49b4138f-bbb4-4ade-a1a1-c7fc2539c534", "sighting--ce9fd0a6-da9f-4869-b0e7-c49714677fa0", "sighting--c3e9654f-6aef-427f-9fe3-a1c99d90c117", "sighting--295016e5-7d02-47dc-97da-6e958d25afc4", "sighting--2012f3c0-0169-4e22-9cfa-00fdcfaffbf7", "sighting--aa4b396c-1682-4117-b508-b05c709974cd", "sighting--f5c6bbea-f53a-4edb-b9c2-4114589b3553", "sighting--14cf7fd5-d23b-462e-aa34-a59fca188bb1", "sighting--ed0051b7-5dc2-4da9-b7b0-c429828d3b5d", "sighting--60fe99f9-3e4b-432f-b227-4f6b97773c6e", "sighting--3eafac88-8745-4388-8b8a-07f129521f3f", "sighting--11e67032-c0bc-4faa-a3c4-0feed676e099", "sighting--a6ccedfd-56b4-4c2c-8a82-73f5cb96305b", "sighting--2eca466c-cb07-4ad9-b093-0c69574d877f", "sighting--a5a768d6-0b3b-4cd4-ac56-677950a024e5", "sighting--b04529ab-13f0-4393-93d5-18d25567c0c9", "sighting--4e4a4309-a842-4a77-a533-52c14d996c16", "sighting--4ca13706-df3f-43ee-b720-68f0950183b5", "sighting--4a3f980a-76c2-442e-a390-c5e359e868f1", "sighting--9933fdb9-c6f3-4591-8511-f81bf1960fb6", "sighting--e1a35c0a-46af-4b09-b9cb-de6c793e5fbc", "sighting--dc40881e-0449-429b-954d-0228d1ea2feb", "sighting--6c0c9cce-170a-463f-887a-0ab782ac60f5", "sighting--23ff82e0-c0a3-4342-b1f3-d64caed1c0a6", "sighting--a790c06c-8890-4cf3-8d2d-b415f51b76bf", "sighting--c12ddf65-d6e2-47e7-8588-b9bfd4a30383", "sighting--dd2e54a0-e94c-4aec-b013-5464bc2893dc", "sighting--0c2b76cf-6d91-485f-b331-964b2824cce7", "sighting--51a59873-ddf1-49b5-b043-774c99bc76a3", "sighting--d051f883-3721-4c02-9ec4-ae175e284202", "sighting--fb75e733-fdbd-42be-b0e0-6b62d6714d5d", "sighting--2eee8590-c79d-4e28-a369-ac49db66fe30", "sighting--3f114503-6459-430d-b0f5-b73d1cb86178", "sighting--9ad2cecf-97a8-4610-b4ba-a8519c00e907", "sighting--8300c91f-71c4-4f0c-b934-70d95696c3f5", "sighting--9c663ecf-5feb-4d2f-a803-69e4e99f7c52", "sighting--eb1cce0b-dd6a-4f87-a9f7-9465be3e386e", "sighting--95b84fec-68c1-4458-b7ad-cd91b33c06fa", "sighting--10186779-6146-44e3-9328-5ca5031933df", "sighting--7fae2e02-a20f-4050-b51a-33a100c0ce5f", "sighting--991debb8-c08f-453c-afbb-1b1ad72e317b", "sighting--19c26e66-fe98-4cf8-a491-ea47c4a32ffe", "sighting--73743eba-5d99-4e3c-bea7-6606597479c3", "sighting--1884c084-6513-483d-895b-643985abaf43", "sighting--0f06ebce-9c82-4566-a88d-70dfcbc0a602", "sighting--8ccfc010-f055-4e37-b579-49cc48180f03", "sighting--04c95c1a-8fe9-42d3-a82a-269392affaba", "sighting--53e06b89-41bc-43fc-8465-653544e966b6", "sighting--8243b460-c0cc-4c29-b6d4-fc785c97ef8e", "sighting--a6e6b9fd-2403-493c-8da1-fb3c5a292b4e", "sighting--3a2d25f2-a42c-4f86-9ce9-9a6d65b9f5fd", "sighting--ff50fdd7-6ada-487e-86fe-7c886f331936", "sighting--d07059cb-06fa-4253-bf63-dc11516fd485", "sighting--f829262d-8670-4039-a04d-c0861265054a", "sighting--6d9ba07c-b7b3-4d80-9c5f-9777c0620d1b", "sighting--a3eb4344-918e-4d66-b47e-8b20325786bc", "sighting--8baf21b2-8778-4afb-94c0-ef8cb1feaf6a", "sighting--f2bc132e-93c0-4a1e-8744-0927050cf33b", "sighting--f3fea95d-4210-4ef8-ae80-09418fbed15d", "sighting--bb2008ff-7152-4257-b424-2f562610da1b", "sighting--104a7cbf-c068-4557-ba82-33a86ff2956e", "sighting--62d5be87-3d11-4dc5-9373-e2969203bd5d", "sighting--4c22490f-98ae-43d1-a736-3576de145346", "sighting--432c520b-2112-401b-8f3c-d8e46a5fbc29", "sighting--af013d54-3483-49b8-90de-595fe49f4e7e", "sighting--ab3344a2-1c6e-4e48-938a-2135d01ed2ad", "sighting--3cdff778-14d5-42a6-99fc-016633ae4fa9", "sighting--c1d81923-0f51-465b-9769-a9c67b2802e4", "sighting--fee03b2f-da02-4280-a039-7719e4fba095", "sighting--46d7be0e-f857-44a9-9ed8-33c0c54dd621", "sighting--1a3e4736-e84d-4366-8866-d7e9764174cc", "sighting--91b3aa8f-a03c-45cf-8a3c-5ee7b7cedb08", "sighting--6b894cbd-7638-482c-8caf-731618f05a6f", "sighting--03dc0099-a4bf-41c2-babc-8ec70b85244f", "sighting--7e82bcde-375e-45fd-8870-bcee4a59c2ab", "sighting--86b6edaa-599c-48b4-8607-4533b217a5af", "sighting--36e87c90-f897-4410-b3de-46d6be798995", "sighting--6ec939b3-2692-4431-81ba-6d2f0ed0b69c", "sighting--ea2c0f99-88a4-444f-b4a4-e17d5078769b", "sighting--d1f7326b-b514-4abc-98a0-5cd863be901e", "sighting--d9fb0ad0-efbe-48b6-adc4-2d6bccc6032b", "sighting--fda7bed7-88cb-48b7-9cbe-404cc2c27bc1", "sighting--b1374ae2-1fa9-4da8-86d1-f6dbdf31ff8f", "sighting--ca988096-d7d5-4177-9296-fa61c5e623b2", "sighting--500002e8-dad9-4b69-add2-13b48523337d", "sighting--a9bb79ba-77bb-4684-8381-03c7bb19fafd", "sighting--596897cb-926e-4e4b-8398-59d01ef834f3", "sighting--65626af9-a159-42c0-9ef5-d330a0b94f22", "sighting--c01ab2bc-a6fa-4c68-85f1-e4a76b613645", "sighting--1235ac36-8eca-4231-bfba-5b418a7588bf", "sighting--c23eac03-9016-4f79-9964-1759e8f609e8", "sighting--95a329c6-45ae-439a-9bb1-61cb1220cc55", "sighting--b1719659-ff19-463e-8be7-1fee3855bed9", "sighting--e9d277d5-3d3a-4a9d-b3ac-992f764e7a6b", "sighting--341acd23-ab62-47f3-b11c-8c59a66c141d", "sighting--769f6b8b-8ba1-4011-8d28-3d2e09ab2b2e", "sighting--1dd788e2-fb05-49bb-9996-6dfd30072836", "sighting--7bbb5502-5aff-4bdf-b583-2d86a39b56be", "sighting--e589004f-2622-4aca-929e-9db3850d77ad", "sighting--20c20d1b-e6da-48b5-9939-449505b8fc25", "sighting--a4e48cd8-4351-45ce-926f-45f0aac26e61", "sighting--15b91bb9-8603-4b7e-9612-e81d9a9a3dfc", "sighting--37d84dfd-1c76-4163-b144-9fad547e126b", "sighting--3dfb1744-393b-4775-9574-b4b700606f93", "sighting--a025b567-4ddd-4d1d-9127-517bfe2ce3fa", "sighting--3c4e8e05-8863-407b-86d4-d833f8b145af", "sighting--13654032-d359-4f52-a27b-9cfb2e4ee24c", "sighting--9889747f-fe1e-4a14-88cc-5cf8b08b0480", "sighting--34558a30-d6ed-4894-ba18-2f4346e7e648", "sighting--a6ffc904-4d7e-437a-bedc-c9968bbbfa65", "sighting--f5600c2e-87c6-42c7-8cd9-991a48ab3e8e", "sighting--0f7c418e-4c40-48eb-9770-a8e305eea9c9", "sighting--b97f814b-b39a-4bce-b112-c672b6cb168a", "sighting--bce4127f-c875-4e1a-ba10-e3e1f5394585", "sighting--3833c240-b9e5-4579-ac9f-a2f99acf9097", "sighting--cede2433-1102-4b99-a2c7-7cde7b2ffc4f", "sighting--13a095b3-678f-4797-b111-86d4f8ab0d2e", "sighting--29876d57-98dd-4738-bd19-217bb50bb413", "sighting--c030a8a0-49d3-435e-8f29-f9d96d11f82a", "sighting--e4e28243-567c-4ccd-8747-38198a8efe68", "sighting--92ff8897-57f0-4adc-bd43-b924f24c78d9", "sighting--728cf16a-b6bb-4676-9932-9d631234b089", "sighting--a58414f9-230c-4c1b-8eaf-7164bc520a06", "sighting--1fba3473-c565-4a1b-a36b-507def3e8bf2", "sighting--286cc27e-3160-4fc6-be16-6cfed4a48f93", "sighting--c2f37723-5ce0-46f2-916d-c62a15422eb8", "sighting--7065da86-789c-46f2-9e9d-cdf2e4e6b7f3", "sighting--0a42b509-0222-41c1-9bdb-0612d9b5382b", "sighting--9cb7072c-9caa-4acb-b746-47c7b3861fbf", "sighting--1e4d42ee-df11-4f7b-b16e-a3276ce8700c", "sighting--645b729f-d9d2-425d-acbb-86d19ad032c2", "sighting--0df8d12c-1891-4648-8999-16581491dd89", "sighting--39da550d-9276-43f9-a6d1-1e6f85166eb7", "sighting--b77c5e7b-3cf7-4353-9608-7368f1f7aafd", "sighting--0ba96c95-1dfc-492f-8fc1-495ad81a5e88", "sighting--715f3435-2342-4cbf-9c9b-cd698e8e0fa7", "sighting--02950586-56a1-48ed-9f4e-a81bd2f63c19", "sighting--fad2c72f-e45a-4d61-812f-d637d7434383", "sighting--c0306c8d-4924-4670-9e42-e6abadd4cb99", "sighting--7d349add-2046-4e27-a8eb-0ee12671de44", "sighting--735766df-9c04-4be3-ba10-d18ec96105a5", "sighting--9d05f39e-12d5-4199-9fae-c770390b10d8", "sighting--864a4c1f-6238-4836-806f-6fe4be53dde8", "sighting--243bb248-ef25-4b52-a8a5-d0e897a248a1", "sighting--53a7f0f9-d70c-4121-adb0-e52a538d0136", "sighting--88974d07-7f07-43ee-8fe5-aeb30a0770fa", "sighting--8cf4cef6-58e1-4545-b3e8-21c259368658", "sighting--69c562bd-ede5-4636-afc0-57ca7f056c5e", "sighting--f96e480c-c178-4224-8775-9ceaa18952e7", "sighting--5e8ed50a-5010-490d-8d70-8ca8f0b9dc7b", "sighting--ccfc3273-db21-4939-b6f8-6716f1b18d0e", "sighting--43e74dfe-1b8f-44f5-a2aa-b024d9df8ca0", "sighting--277114de-a70d-470e-9a6b-5c7cec6285c2", "sighting--4f170bc3-ce25-4128-aff2-3d06c1af8920", "sighting--3431de5d-b9a9-41dc-aabf-fae3303f0115", "sighting--a10b5712-cd97-40fe-92c4-01334e4846a2", "sighting--9a313b59-8ddd-4812-b9ae-4e4b28bd5b4e", "sighting--c9d567c0-226b-44e3-a853-737f2294bf39", "sighting--24432075-eaf4-4876-9be9-3766c8d48aa5", "sighting--b5952059-a5c6-4949-aec3-a9ef07f244ae", "sighting--a2f0731a-3b28-442c-afb6-e5540da46620", "sighting--f19108a9-0b42-480f-b98c-4d2bc85749b1", "sighting--eb9e82b6-46b7-4a6d-afbc-95a9b0c8c442", "sighting--55dc468f-9c00-4af1-86cd-3f38d0735dc6", "sighting--75d625a2-be18-449f-9593-045f6e27dca2", "sighting--82ec3c37-2c78-4b34-bbc3-2257da65f087", "sighting--02939b03-65f0-48e8-8fda-ad24dce40c14", "sighting--b4b47592-8207-49ea-a44d-4f7862b3c6d6", "sighting--7571086e-eff3-4505-af8e-67204777bfda", "sighting--14c727f5-5d7e-454b-b71e-fd02543796e6", "sighting--f535ba09-2c01-4e17-b2e5-2c194e9620d7", "sighting--19bd2377-38c3-4366-b6dc-9bcfe8c33325", "sighting--07530f6b-1f80-4169-ad01-1aa4cd0f7851", "sighting--63b14873-fd81-49fe-9047-8591fdf2e6a2", "sighting--a44ed014-00ed-46b1-b19d-976a646106b4", "sighting--7c18b036-9b1f-4b4e-85fd-966562cbe15e", "sighting--7144495b-eb19-474c-84a0-29a2c2ef4ae3", "sighting--a3187029-2619-4961-893d-8d5ebdf78738", "sighting--b17ef6f3-caf4-4301-a1aa-dbc8690c16bc", "sighting--57f3ea31-c06c-412f-aa4d-242c6dce7cd8", "sighting--f6481ac5-bbda-4e55-8303-f13fa12b36e5", "sighting--4d757a3d-76a0-4740-8afe-b510d101df2c", "sighting--523dd495-d439-41a0-86f5-3cccbe66a655", "sighting--b4be690c-35ad-42b3-a7df-b5ffa5391d28", "sighting--639b3254-8a0c-4866-b94f-ec1b2d5b553d", "sighting--f861783b-40ae-4d90-b517-b3c752da2a66", "sighting--e1cd2160-7132-486f-8fb3-c5893b8cee4a", "sighting--bae3cc8f-8a97-40e4-87cb-32cf1cb40017", "sighting--819dc1f9-77d7-4015-b6c4-3d3f92614b9f", "sighting--389f8b05-7720-4d95-b335-d286c75a8def", "sighting--56fe45ea-7136-439a-aa41-b15eccd93863", "sighting--38a6314f-3602-4115-a038-25c4934656e7", "sighting--e148d039-4f27-44f3-9f8e-536be15ad004", "sighting--0b889b87-50cf-40df-9fc4-62015ed19976", "sighting--967490a7-0083-47a9-975e-1876668ff71c", "sighting--2a313154-dd52-462c-ab79-d353860da9fd", "sighting--5d0bea47-df3a-4d09-b9a6-475bf09ca47c", "sighting--57bb90a1-77a7-43bf-893a-505c2ca74f13", "sighting--04603626-692c-4063-a5e3-8066574fd49c", "sighting--8254e070-f5a1-4d77-a7e7-152153d85783", "sighting--83f7adb7-ae04-409e-bfc2-6ecd3c44a4c3", "sighting--5ab56a98-f1c3-4a2a-b7a7-b508c0b09681", "sighting--be0b6442-882b-45b4-b159-180927a84b26", "sighting--6168bcec-efbd-4e0e-95de-1b079913e5bb", "sighting--266507e5-160d-42b9-b06c-f14fe0159bfc", "sighting--5beb3b60-d878-4b18-83c3-04a00b5e384c", "sighting--a62dd6fc-e74d-41fd-8f8a-7ab67b6dc555", "sighting--29522911-a80c-4482-b882-25a7a984bf46", "sighting--4070ae02-47c6-46b1-83f2-a530fa19e403", "sighting--cd75b2fe-0caa-4d74-b565-934027161479", "sighting--ececb8a3-f5bb-4d94-b60f-0593b14b83c4", "sighting--d417b0f5-f45a-4543-be41-e4ae094c6c66", "sighting--5aef4372-7f63-409c-aab9-6501cee3e008", "sighting--c117e113-dce3-41dd-80c2-331b6e0e8be9", "sighting--8ab904d8-d0fb-4244-a562-6a5a7b5bea4a", "sighting--99ed7980-46a0-4cff-920d-c3c030265f7f", "sighting--89cd1d9e-ed31-44d6-a8f7-d46d06091c49", "sighting--bae74f6a-7462-4a87-ba69-e3e83d99d851", "sighting--904970cf-d544-47d9-abe2-9a09070f9e91", "sighting--48b2b22f-51fa-4973-958a-2848ac7818a4", "sighting--08ada500-52c2-450b-9236-dbd562047bdd", "sighting--fef3b566-eed2-433a-9b2f-011f64ee9f64", "sighting--ed978496-5964-4e4c-9573-bfd6081de660", "sighting--64f8b0b4-b23f-4d81-ac34-e609e4fb1ec9", "sighting--d3f7b2d2-37b0-4d45-95d6-7506c46afaba", "sighting--dc08c611-0537-4407-bd25-524a5b317333", "sighting--43f0c943-26bc-409b-9e23-abec40bc2902", "sighting--2c9552fb-2f89-4573-a6d9-c6c85249ad4c", "sighting--1bf3dbe0-a045-4e49-a9ca-2f140ac0e3cc", "sighting--f7d63c37-75da-4223-adf1-f30c5196f442", "sighting--edb6b55e-03a7-4ba4-9c60-ed8f38c62b13", "sighting--00e51fbf-96d8-4041-8e47-391ab9571f0e", "sighting--6c92a9c8-ac87-45df-8695-ca6b0e668833", "sighting--8cbffc1e-4ed7-419b-a8d9-60297404f489", "sighting--8c4bee77-ea8c-43bd-95e2-ec4cea935e9e", "sighting--a6d0e9ac-34dc-4a1b-ae8a-90202e969871", "sighting--9988e54e-604f-4645-aa24-b5c64ce3cd38", "sighting--bcde5ea4-58d0-490c-969f-128e9c3f6064", "sighting--9e7637d5-c904-4b25-b2d0-4294cd4b8d3e", "sighting--49f39751-82d7-4740-b0ce-73cf478a4c20", "sighting--b5ecba5a-d703-4cac-a5d8-a111d8c47a01", "sighting--c1c703b3-8954-4b3c-984c-cb887816bfe4", "sighting--f4bf0c53-a0f8-4d02-913c-1e6675d94327", "sighting--bf1ac4d1-1ce0-4d66-9ef2-5233a72f4969", "sighting--a6fea55a-15d4-4e69-8663-36d009d54ec1", "sighting--2e7d00e9-b60d-47bf-b398-0ed1182f1904", "sighting--5a7a17a4-8e45-4dc8-858b-fce511880e18", "sighting--6c9f7f25-2380-40b5-8720-877f5b2351b9", "sighting--2cc3278c-c403-4cb2-8066-24ed1e9323fb", "sighting--e2d73cc5-7055-491b-9275-1198cff9d96e", "sighting--48481eda-2eb4-4631-845d-ff34a485e467", "sighting--e03bf047-733e-4c2d-94e6-d76c80fd6095", "sighting--d866cda7-ac48-4585-91da-047fa17fdaf0", "sighting--ecebdecb-0420-4513-834c-277c30f61bb5", "sighting--a33afcbe-8702-406b-868f-8c14b895cb03", "sighting--f106ba3b-dbee-4b5c-a78a-01716d7e8e22", "sighting--8427a827-632b-4d8a-baff-31be86b4670f", "sighting--6c53fc2d-31ae-4a8d-a800-552d0e38c309", "sighting--76fdb4a7-224f-4f0e-9f78-3269415cd632", "sighting--6492ef6f-959b-4f22-baea-3350bfab7e7c", "sighting--cba90e1e-6ba1-4606-8047-1ea0fd393089", "sighting--e775110c-0f02-4422-a435-7f0f6d26609a", "sighting--acba6aa8-64fc-4640-96c8-1b52921d0450", "sighting--945799a5-b795-4eba-a35d-9d6e4986d183", "sighting--2fc191cd-2457-413b-8575-ed668a1b8e05", "sighting--1a0fd3f2-8b64-49ad-ba0a-b2ecf1e42c60", "sighting--8da4eb32-d3ff-4abf-bff7-1cb64454eb3c", "sighting--d102fe23-013f-4bb8-941d-54d9e9286d2b", "sighting--d5ed4ff1-dedb-4b27-95f7-2240c985edac", "sighting--700f4b41-6541-4936-b815-02520a86898d", "sighting--ef8b75c3-a5c9-4b69-8099-1cdc2bec64c7", "sighting--7245c924-9c4a-4ce1-80c9-d0336477474e", "sighting--ebe2db67-e233-4c12-934a-8963e1567670", "sighting--4550058e-ba57-49c5-87b6-06a3404438ba", "sighting--5082f0c6-ee0d-4f47-8084-2069ef76e800", "sighting--a3085f21-a08f-4471-bdf3-b4faa4d3e1d1", "sighting--87387e34-43c9-478f-b216-23fef6fd9e06", "sighting--86f68fd7-c410-42de-b13c-40832931f97c", "sighting--82e07ede-14e4-40d1-b6d2-629d533d5637", "sighting--2e6b27f8-f2e0-48ae-a86c-bfc88f684ef9", "sighting--6fe52012-28af-4f53-8033-d28e6daae7cc", "sighting--ab7da503-f1be-42be-9e09-7da8477dfdf2", "sighting--f76e6e5a-f9dd-46c3-b025-e942e0c6ca8d", "sighting--a8768b33-9cff-49a8-a73b-870c6b423ef2", "sighting--be6652e4-3d47-4cf6-b8a1-f8bdf7dc6e8c", "sighting--75744664-46ac-4ff9-934c-8de5b5260c40", "sighting--3dfef380-16db-48d5-b99f-1ca3256ab189", "sighting--24b91d2d-aad1-4fe2-a896-ebde8b00c2c4", "sighting--45617d78-fbf3-4c4e-bfc2-afeba41b5100", "sighting--2d7f1e32-8cb8-4592-a5c6-ad5a66ab76eb", "sighting--055146cd-fe11-490f-968a-0cd49d43ee22", "sighting--9064a8a2-e6fb-4087-a1ba-43edb9daca68", "sighting--9004238e-0035-4fac-8296-abd49c9d7197", "sighting--c9bb6f9d-9db4-4b15-92d4-935673d906f0", "sighting--36b5c009-bd33-4514-b184-4d208324c486", "sighting--21800085-7ee4-4ef6-bcfa-a387d6d8f0cd", "sighting--2fedf9ed-6ce7-4075-aac0-0d7e4ba92ba3", "sighting--393e3ec7-9ff3-486b-b13d-a1fd4403e0ea", "sighting--383c9b22-e5ca-4f6f-9c74-799a551f431b", "sighting--a99f2787-cee6-42c6-aebc-1a21144d4b18", "sighting--77e16b3b-3190-4cf6-89ff-d4e86d1db667", "sighting--8aca8f83-918c-4f8b-ad34-82527e63a36d", "sighting--ffeb1eec-da55-4f2c-81ed-a1962692d0b4", "sighting--1ca4b493-b146-4fe2-adf2-170eae7d545b", "sighting--5193fdbc-7936-4138-93cc-efe74272ec9f", "sighting--27d579dd-43fa-4547-b478-8774d10a8eca", "sighting--541d7144-5af6-4a24-af39-fe006eabe630", "sighting--90f36d6c-c808-45ff-b2d9-b36ff94a65e2", "sighting--4fb31591-6b4c-4b0e-8d90-87309f1f7236", "sighting--1d1bcb4e-50d9-4241-8421-98677b8d28c3", "sighting--3524c405-1d7d-425e-a171-032f574b1e3b", "sighting--95394ae4-bcc1-411c-8096-389af57d613a", "sighting--28418672-77b7-47f1-9743-e557b2f90c27", "sighting--d260fda0-421d-4088-ab12-e0cda3c0f100", "sighting--0c346ad9-3ef1-4dc6-967f-0d4abedfb767", "sighting--4550db18-cd38-4a6b-a134-d14d7efcbf0a", "sighting--847c6f2e-e916-4697-941f-63ffff23691c", "sighting--5d5a6b1e-a0a0-4bef-aa49-12f1e464dbfe", "sighting--6462ee1c-680a-443d-905f-adca3df1afa0", "sighting--ec908ce7-7dff-4a65-87a0-af6e6eb85409", "sighting--6b608d09-960c-462b-b97d-56d274656495", "sighting--fa47f55e-6059-4a14-b26f-b1cdaa274c5a", "sighting--516fcbd0-6dd0-4e9f-a977-a0fa0fcdb515", "sighting--097b083f-5ba8-485d-af69-241b5b670851", "sighting--864b2973-8dd5-4611-9b50-8d37028843b6", "sighting--57f6330b-3890-4e37-b56a-8299f92e974b", "sighting--9352560c-7cc7-484d-a20a-75ce16b76540", "sighting--1fc2440f-b500-439d-b25e-eef4d80fc78c", "sighting--af07ab09-ee41-4815-a621-bc5e3481d7a9", "sighting--0c65c276-7973-4b84-b7fe-accca8e1de85", "sighting--41ab477b-db5f-4c1c-9364-4ca35409c055", "sighting--e0967447-2e3b-48a0-b811-360ce22a5299", "sighting--5d6eb4ec-3fd2-413d-81cb-09ac2a99f5b5", "sighting--d5c8b58b-98af-4a2d-8ed4-ba51e3f29849", "sighting--51d9fc4e-20ce-4683-986a-a2411d84169a", "sighting--94117b20-d91a-433c-9231-71cb2c0ac689", "sighting--83937fe6-edbf-4f61-9e36-aa3967c00a72", "sighting--13c49279-9524-42b9-ab12-2603a6d9eff6", "sighting--cfee74f0-da72-4850-bb71-b8beccf2fa0b", "sighting--d9e15569-7c5e-4c61-97e6-f6690492111b", "sighting--37b1b45e-5ce0-429d-9b15-5fdd5192ffd2", "sighting--9ddbe1cc-8ab3-4b7c-a2ac-0d994ac44cf1", "sighting--fff51d8c-084e-490b-a700-3362b0d9f831", "sighting--f0ca1d0c-f391-4fce-9c90-05ac325f398b", "sighting--b6adafe6-7926-4be9-a16d-c9dd78605112", "sighting--5c12576b-9776-4a39-a5bf-6edfed492b59", "sighting--ae30bf26-a02e-441a-ae4e-038c7432ca2d", "sighting--74a322ea-3ce7-413f-b056-86330adf0563", "sighting--8f80940d-274f-42d1-8698-2a46a15693d4", "sighting--3a28ff3b-b45f-46ba-a7d2-0ad1c4ad53fa", "sighting--49ba20e3-d704-4e5f-9c05-10b16b97be18", "sighting--674543fd-9257-4c60-ab7a-f93030bc38b5", "sighting--c0664107-1a71-483d-adbc-69adf6ca8a62", "sighting--e0d1fb0b-0f97-4a2a-83e4-879ce0fc8846", "sighting--0ca62fb5-2a1a-40a0-a305-38a9c9a82b3e", "sighting--1c83200c-3fba-4687-a3b8-0de8f97b88b5", "sighting--279022d0-2650-4261-9737-84882b57177c", "sighting--cc58be2f-0931-44fb-a6a5-21c50f2b004a", "sighting--c9629efc-2c21-445f-b98d-b5ebad1c7deb", "sighting--165cbb3b-384e-4faa-8326-c509880b3ed6", "sighting--2acaac7c-6931-4c75-a611-e9e987195002", "sighting--9bc5e82d-cc89-45e9-aab2-6da6e36b8a0a", "sighting--8bf12758-dbf6-4a74-b99f-d0261f6ff83a", "sighting--ff08c193-e900-4a4f-bf09-14092bd74c4b", "sighting--f2f7e1d2-093e-4798-9de4-6f011d4bc304", "sighting--6ed4c454-a2b0-4b14-8017-7d7986e88db7", "sighting--b3eb5c8b-4877-40cd-ba9a-6c2931b75dc4", "sighting--b2e5a3d9-ef78-4bd0-b684-3234c367e822", "sighting--0592c58c-809c-4336-a2c5-7c71fc76ee24", "sighting--c2c9f0f8-f574-4e21-96ab-45ad355aaf57", "sighting--88cf00f6-1d47-443c-987c-72c81987b196", "sighting--2b8293ea-401a-47ca-a917-ea4e04be6cea", "sighting--75824a5a-3877-4077-b8c4-5de7b5aef6b6", "sighting--950aad5d-553c-4d24-92c7-ec74fe7605e2", "sighting--cc95a029-03e1-41aa-be1c-c8274f43eceb", "sighting--ca56631e-1630-4431-8618-0db58727e0f3", "sighting--3a3c9308-88df-4bc3-ba0e-491e0b5cba0f", "sighting--321853c5-16c6-4730-9b98-af2b16eb2b79", "sighting--52ff06be-48ec-4c44-ab77-3f4fda0efed1", "sighting--a7687d57-d573-4e7b-9aee-4a045954b0cf", "sighting--461b4ddc-7c23-4b8d-958b-9def1ba7ebf2", "sighting--e719df1f-e393-4764-a686-79a4cd614e03", "sighting--58afee89-2b37-419e-bcbb-6119f086e4df", "sighting--ef8e81f1-a252-4e15-b0d7-6d6edf879be2", "sighting--7794a21f-51ae-48a4-ab96-166f298cbeb5", "sighting--0bad0042-8c80-4c54-85c4-00d9c7f81af8", "sighting--9a7f0bc1-9aa8-47f8-863d-f3945f9a7da9", "sighting--d19aa32b-efde-4645-8f72-d854000601ed", "sighting--af8ca7bf-f09a-4d75-aca8-119cd79d89a2", "sighting--7bd95110-8341-4a63-abdc-e11de1390653", "sighting--3b08486d-a7bf-41e0-aedc-c0d002de92a3", "sighting--1cd82402-6486-49a5-82b2-850829342af9", "sighting--30148f74-26c3-41b8-b1f8-849d23559e9c", "sighting--fe736769-70a2-4a41-8f1a-048820242ccb", "sighting--70a37d26-f295-4c32-9480-60f4802278de", "sighting--637f14a8-b574-4a14-8d5c-a1fd9eea8f3b", "sighting--8a6545a4-65d1-4a2a-82e4-4b5316d98add", "sighting--78f55918-538f-404f-96de-fd5444a4966d", "sighting--cf7a3400-9345-4b4a-85e7-fd84a43499d5", "sighting--d1e10daf-e5f8-41b6-98c3-71a7cce16f64", "sighting--d7ba2756-c552-4bf5-85b9-69e84266fe51", "sighting--7f8a95e7-b433-4740-ad74-ac3226f5dc09", "sighting--5c9882c3-171c-4a57-966a-f5d74aad2e1e", "sighting--788ac1df-d0bf-4efe-ad91-baa4eceed270", "sighting--e866f3e0-8fd1-4f72-ad48-40ad566b8b6c", "sighting--ba9e1ea4-71d5-4b60-a378-d598047e68ef", "sighting--40e0c6f0-cc75-4f5d-b957-e11d06341264", "sighting--ebb20ec7-c7de-41ce-9987-d09a1e48a410", "sighting--c2ed5808-6269-4801-a142-fd5ff7f3fb6a", "sighting--12def6fd-91d4-4335-ab92-c9ebb398cfd7", "sighting--6f79c441-b329-455c-9754-d6a032c460c7", "sighting--3d08d761-e885-4947-a408-dbb23e706fef", "sighting--89282870-e3c7-4ebc-9abd-50211a530688", "sighting--0a795f3e-7500-4dd6-b3e2-87ba3c5e5c4d", "sighting--23aaa220-7c0b-4d0c-9790-258aef58592c", "sighting--32983fcd-322d-4edd-87ab-d80c2579a491", "sighting--5f7d2b03-f9c2-4575-864b-4880e35fb245", "sighting--7e9ffdc1-8de6-48d5-bfc6-7d511bc254d3", "sighting--99a6d889-0e12-494b-a161-6c1eba832f62", "sighting--1fcd28be-cc32-4040-8bbc-e9b258b431c0", "sighting--8a5cb50b-5439-4628-9930-e33c1781288d", "sighting--e3b72fcd-96be-47ef-a396-a10d07cec608", "sighting--0762a98a-7d13-4b4f-8110-8ef5ba882fd0", "sighting--b866e0b9-cead-4298-bdc6-79fba6f2e932", "sighting--85567330-cd7c-4bef-9130-ab68c2d7eed1", "sighting--9b384978-c38d-470d-b634-0c30676fe4df", "sighting--c15ef610-f0c4-47e2-8041-54c407947b10", "sighting--71abca5d-d8f4-4ce0-aa8d-753849dc152d", "sighting--ed1c3d50-dc48-4078-b319-7999a60c8e5c", "sighting--e470546e-cafe-4baa-8646-5636ddc50b27", "sighting--2861b937-30fe-4181-b7c2-4f6e9ac81910", "sighting--3fb5b25b-d970-4f7d-b7fb-8210eb735736", "sighting--c2db4fc3-8e1b-4680-a1ce-5f5ca1d3b8ef", "sighting--6f3faed4-545e-4366-af47-9089e382f7f4", "sighting--98560356-c8ab-43e3-a24f-751af0782d45", "sighting--83bcb898-d73a-4f79-9533-dd6d3be2a355", "sighting--e09dbb8f-8428-4af3-ab14-ecb809489531", "sighting--35962a6b-bfa9-4803-84ac-8e5ce21bc8dc", "sighting--fca0fb52-827a-4a4f-9648-b3047ea7b5b6", "sighting--4f011889-51df-4214-baca-7b08a351bf52", "sighting--38a26b15-1f64-436f-8367-ac83620cf029", "sighting--613fdc23-0bf9-4e6e-9935-f1cadbcd8091", "sighting--3db4a7ae-8b67-4c42-b67d-bc39a935539c", "sighting--041cb1f7-9a4a-47e0-9b63-3cfcf699e761", "sighting--8c118e51-fed8-43af-bf62-65e2230be009", "sighting--ce3fe4d9-3274-4c66-852a-d30bf3c3eee4", "sighting--a357f2f4-a079-4d56-9ce1-19d0a59a4415", "sighting--afb2cc2c-35ec-4658-80d6-b91a32ca7193", "sighting--7282f5ee-dff9-44fb-bf53-0909e6b41d99", "sighting--9a0d76e0-6c3a-4d8b-b96b-8441b5334a7f", "sighting--7a38f6c1-69d6-4b2a-a4ae-910e77f717d8", "sighting--7870b268-6b2b-4ad8-8ce3-1dbc9b686ec6", "sighting--bda02adf-513f-4660-a952-3afc8ec50322", "sighting--97b7179f-5f96-4573-9fe8-ed27de4c342f", "sighting--bb550d58-17f6-4219-8a94-9b1e541f1034", "sighting--5ae79e13-10ef-473c-8ae0-2e720d792ba7", "sighting--bfd8bbd5-3811-40f7-a46a-a5da4dfa4800", "sighting--67e52d87-5437-435a-b252-2f8a6b42c669", "sighting--e7886bcc-cd33-4b59-987e-34bc45726d7f", "sighting--3d79a2f1-c354-4da6-9e7b-53461c3dd6ae", "sighting--3a6e26ba-e195-4f4f-a608-1a0a1ff550aa", "sighting--a50d69b5-588b-4276-8cab-f6c4e68e48b8", "sighting--7bcb3a82-f792-4c93-aa40-a36388a55e1f", "sighting--946bd670-ae65-45a3-b0fa-52ea9734d072", "sighting--513d3b52-1baa-41aa-aca8-f241ff7b70b8", "sighting--0cc2de1b-eae4-4ac4-b9cb-57e6e98b4ba3", "sighting--2afd75eb-e379-4530-9eac-1c8b0934c51f", "sighting--57419778-24c9-47d9-b542-a7994d13ea3a", "sighting--d1869e27-83ba-4db4-b119-241a33474885", "sighting--5a3f29d2-0ecb-48d0-b6f6-d336d138599a", "sighting--2d1c6f24-aa38-466b-ad2b-c5cf0c128ccf", "sighting--db373cc5-a388-40eb-9495-3c74b022c5fe", "sighting--d793e35a-8048-47d3-bff8-71beccf7829b", "sighting--33e73091-6429-46fa-bbdb-4350f9dc7810", "sighting--d73078b5-f276-45bc-97b3-f3c30f739442", "sighting--df04453a-ade2-4f0b-a69f-9038e9c6c18a", "sighting--bb56d6a0-7d5b-41b8-8473-4bf637bc7596", "sighting--c5ea7687-4e4b-46c4-a2ab-6154017619e3", "sighting--2c73ee7c-2123-4a95-999c-d09572d81cee", "sighting--ec1ddcb6-33c0-4acd-b343-8c9a8aafe3b2", "sighting--61a58623-18a3-41c8-a2b3-037c00feee9f", "sighting--531de6bb-8f01-4e24-bed8-3b0a786224b5", "sighting--c87dd411-2ad7-4fef-a53c-7274b3709f69", "sighting--3c7cd9fd-fbb5-402b-922b-afeee7100934", "sighting--f460ba4b-4f92-4dc6-8340-1b78fc9e26e5", "sighting--722bf4e9-8de7-4420-8f77-e64563d316fe", "sighting--745695bf-739f-4cd4-aa5d-e6eabe8c08c8", "sighting--95065bdb-48d9-4d9e-a3e9-d68a442e463e", "sighting--98a393cd-a0e6-42cf-b95d-8f88bf9adfc7", "sighting--a5df3040-e5e7-411a-b17d-9b14933a8e9c", "sighting--3f9b90a8-9efb-4c40-9d9f-ee7a9423a139", "sighting--c3618db4-31cd-4b18-bc8e-d2fee42c7828", "sighting--c507ade4-16e5-498f-91df-c4b3ad97452b", "sighting--3332c170-94a9-4d95-afb7-b2ea30d5e785", "sighting--4a3f4f9f-cbe6-496e-ab23-04182fc12d43", "sighting--9a9c067b-a0ca-4a07-ba1d-efabf77d57d1", "sighting--f69a110f-ac72-479a-90e2-7120efbff886", "sighting--6eb8a128-f81c-4d7c-99a0-fc0000679da8", "sighting--bf59b8fb-b539-4bd2-b7d7-c858f348258f", "sighting--bd8f89f7-eda1-4d86-8d38-53cf5bb76104", "sighting--74ff3070-6534-4263-a553-1025fd6b4c75", "sighting--133832d7-e7b4-427a-aae8-4d7b6d7ccee7", "sighting--e84e1d0b-bb85-4479-8f68-442db4ba7de4", "sighting--a3b7ed6d-f104-4aa6-9862-4b9f19e7d9f0", "sighting--02e9428c-3894-42a5-980d-437feca059e1", "sighting--9f9e0349-0909-480b-90e3-3a7c038e47d9", "sighting--c191e7ac-039c-486d-a446-ec11086853f7", "sighting--80967b6b-44e2-4aaf-a023-5f535ac0689d", "sighting--dee52b3b-c932-4f0c-8846-54889d4f5b2c", "sighting--855588ec-3ff5-4b9d-b46a-047146ad79b2", "sighting--6d10b88c-fa6c-4f68-a86f-ae86eeb9fc05", "sighting--2f69f6bd-cf6e-418c-9bf7-72a553789b21", "sighting--56cc9682-ecea-4068-8a89-bdecbe5fd445", "sighting--a361e0cd-ce19-4618-ac41-08fb7b7b92df", "sighting--715d6116-b91c-4a01-a20c-c9cdeded0de0", "sighting--8d2cf955-6966-47de-a3f2-5d6844693284", "sighting--27ae18e6-b5b8-430f-a77f-b08b46821f28", "sighting--b7214878-4a67-4c68-a980-5ba434f35221", "sighting--d530983f-3919-4df4-bf3a-049c1f9f8c61", "sighting--a0714936-6c44-4b84-a427-f99b00926567", "sighting--0e6e2b2c-de6d-4824-837a-b6549c7cfcad", "sighting--63463350-1917-437a-85ad-66eb8bad3ffc", "sighting--994b3294-529c-4534-9f2f-4a5a776f7dd2", "sighting--6fc224ea-bd49-4350-87c4-e4b1b8dda500", "sighting--e0360383-d43f-4d61-b8da-15c77e5ded44", "sighting--479ca0ad-823d-482d-ac1f-613d12700a33", "sighting--12e16e3a-6bf9-45a6-811a-2ecddc1d0772", "sighting--28494e34-1de2-42c4-be7a-2d84bc39afc5", "sighting--8625d369-8eb8-4343-8214-21dc36ef7950", "sighting--59dc2c8c-7e43-417e-9c5d-dfeb683a768b", "sighting--0414a64d-2b9d-42dd-8ac8-11122af01e08", "sighting--e64f3695-04e9-4d36-819c-b6ff7cf744d1", "sighting--e878d6b1-00ba-4b38-b69a-b5ab1e250d59", "sighting--2c093551-f4e8-4dd7-913e-f832098341e7", "sighting--2f2214a8-bc7c-4c4f-96ba-c2ab65b964e4", "sighting--3ea51aed-4609-4dcb-82fe-e27d84925c9a", "sighting--6a84dd4b-35c3-4cdb-95b1-b19831c5a46b", "sighting--56c8bc04-94fd-4442-9cb5-3a3540d444c5", "sighting--f0b2997d-cd39-46da-8758-8d7f59efe39c", "sighting--ec484381-158c-4d7d-b5b3-b1b269182a22", "sighting--c81ab1a4-5bd6-4e47-976b-1231c15ec6fb", "sighting--2c9f769d-e324-49db-9a37-e94ea586d734", "sighting--c5b9b320-89a6-48ee-a840-db5476f3381a", "sighting--6e6235ce-5629-44b9-8d08-2df40943da41", "sighting--49637066-1282-48e6-860c-049fe5c6c46e", "sighting--cef36878-14c1-414b-80a1-28f1d74cb64d", "sighting--46aefbc6-cea3-4def-81ca-c309ec467e46", "sighting--cffa6f75-bf45-44f0-97b3-871e6becd1cf", "sighting--ed0986fb-ec3d-4a65-9511-955a05be40de", "sighting--58e6875f-f05f-4315-817e-f101746cb49e", "sighting--d5f80bb0-b2ac-44e1-90ee-0bf6225aca74", "sighting--f8d50dc5-39e4-4959-a956-8c058b3e00c2", "sighting--93e9c86a-c206-4bc8-9f53-aa37fa0c60c3", "sighting--7e9ab661-b18b-4791-a5ec-ff0ab79ab99a", "sighting--4f0cd7cd-7e7c-433e-930a-ec83a3bc977f", "sighting--e89d3a54-c0e9-40b8-bc54-4f91edef4cdc", "sighting--731557a6-909b-44a2-a45b-4eb414cff691", "sighting--4b64c881-1e62-4df3-b6f6-d1b65924ade6", "sighting--2614c3b1-5492-40ee-bc67-54eafc1fc6e6", "sighting--e070539c-828b-44b8-a8f6-ce212de5905c", "sighting--d2205954-0770-4788-aa83-59c567b31d92", "sighting--594cd1de-c867-4558-91a4-bc6ee6463f61", "sighting--6f53e12b-a919-429e-a670-036cfef27912", "sighting--24d3e7c3-7e0c-4037-b31b-2bda779f78b7", "sighting--9dd6155a-cdcb-4bb6-b096-105c691d6bf9", "sighting--4ed31dad-524a-450a-a1fb-180b0b8c9994", "sighting--b1fcf2e9-a1e7-497e-8f24-a589e41ed26e", "sighting--82a2fcca-22f8-4ec8-9f69-9ea4e99d4f27", "sighting--0db94122-e104-4b62-9270-925198176332", "sighting--ae1b2cbb-5a65-46bd-a11c-740ee61d3145", "sighting--632e71e8-60ef-480b-8994-647feff16010", "sighting--65373ec3-d3fe-4610-8096-7515b775338e", "sighting--0e78f710-bbd5-4d5d-a93d-7135906e046e", "sighting--d1abbd79-92b5-453a-8ffa-41f33f56e6db", "sighting--efaed874-6624-4dd4-960a-828529ac8134", "sighting--a0c9c290-b2e2-43b8-aa1f-8f037ca287b1", "sighting--b645ec09-bb10-4e02-9582-f788c4ccee64", "sighting--e81288a4-d869-4b1b-b794-f5476bb8afbd", "sighting--99bf96b6-e4b7-486a-9396-df3a6b01cd13", "sighting--8e92a78a-57d7-4f26-af14-b88a0f2f2c76", "sighting--44d50a22-cf47-4eec-bed2-6835e350cba9", "sighting--fd0e175d-d5d3-4c1b-a3f3-14f12579c8d7", "sighting--800b82bd-ee94-4d9a-9061-10b5344370c0", "sighting--e2f39244-eafb-4bf0-abb5-a50923a8c847", "sighting--0b329887-966e-454a-9067-51e159a4e348", "sighting--71820dc9-f8eb-4f4c-9fb3-e1b684c6947a", "sighting--04becf23-1f61-44b1-b991-8185d33dd362", "sighting--3781ff85-d823-4571-b197-af968055ef3c", "sighting--e0ac96f9-6c8a-44ed-9bcc-45c8d2bc75b6", "sighting--8c93e903-3027-4766-ba5a-5bce5d231643", "sighting--d73b22f5-8296-43bd-8727-3ce1453e3881", "sighting--ea0c74e0-1beb-4037-8534-90d894a34c45", "sighting--55b60bdf-7609-482b-ad13-718f5d1efc94", "sighting--c41a0640-4453-475b-a5bb-2f491d31dcf2", "sighting--a8e48dab-5cd9-4fb8-9ce9-8de496c5de5f", "sighting--a3696156-f550-4a60-8210-af2f3882909e", "sighting--208b57c1-2564-454f-991f-be1e3b6bb75d", "sighting--237a8abf-27c9-46c5-8b4e-95bad1885032", "sighting--ca50c16b-4083-4764-8589-bb410129ccaa", "sighting--8b13c519-2069-4da5-aee5-6f4a981c3371", "sighting--18ae8298-6223-4ed5-8be3-486e9947bac1", "sighting--a83ce7fe-9276-48b3-9ada-6746e227a16a", "sighting--8c3cfc19-7b04-455d-95a1-b6c8fe0b68bc", "sighting--6c49ac76-82e2-42de-a6a8-ed48473fc2cd", "sighting--1b40980d-9d29-45fc-8872-d4cf89f648ae", "sighting--789329db-ae3f-40dc-a8d8-23e3c25e245d", "sighting--85d306a9-ecf4-43a2-90b2-b5e71e414549", "sighting--9902a4d4-81d2-453f-9403-f23e9bbe7419", "sighting--e6008b65-2a06-4abb-972d-dadf3c60d540", "sighting--6e76d706-9226-45ad-8d15-be70bf7af38c", "sighting--b7ab582b-af40-4140-ab2e-7ad0cf089cfb", "sighting--7d7a9734-1a25-4513-8502-cffc548176fb", "sighting--a638dc7d-c424-416d-a117-d9a1cc357a9b", "sighting--cafb2c72-2619-4ad7-bfdb-1b402ab08ac8", "sighting--24e7b433-649c-46fd-b72b-a4108908c2b1", "sighting--e6602018-7796-438c-bbe0-6c3fc4b58095", "sighting--71b0f262-f8d4-460c-8e0a-fd379294899b", "sighting--d4096b0e-01c7-4edf-bdda-c2a14dd8d40c", "sighting--055a157f-b4cc-4149-b837-e873512f0693", "sighting--cf1f1956-f229-4d73-97e5-5c518fdc58b3", "sighting--48da8c5e-fa7f-48db-98e8-68f841f55c51", "sighting--39081c11-7d25-4b06-b74e-11b1e44a694d", "sighting--a33509ac-f81a-46f2-8486-a9c7356aeed3", "sighting--272b33e5-22b6-465e-9395-63a946ced1f2", "sighting--80bb0c7f-291e-4a5f-abc2-69992e1a621c", "sighting--59b67b2d-b1db-4f1f-bc35-4a94c820a082", "sighting--3f9c3345-a982-4e82-aa21-504472c0d968", "sighting--c54f1e72-ba6b-4d4f-badb-bdcf04b73516", "sighting--473f02f2-c599-4fac-9d3c-f7ab4cd967ad", "sighting--c1357add-acd0-4f03-8b32-6686526c92ec", "sighting--cc2c194a-6eec-40bf-a23d-b09ddf24ad42", "sighting--58fe20ad-f66b-413c-87cd-d140159b4d72", "sighting--f3d083b8-22d8-4a25-9e8f-be66b2f67d32", "sighting--49ddce8a-7edc-499c-8cc9-868600cdcce8", "sighting--2a15823a-21f1-4cb9-aa87-1f8ab904dff8", "sighting--f6d8e763-a9f9-4e11-99b1-8b1a75afcd8d", "sighting--2046e24b-f1b2-4e39-94ac-b5d3afd7e063", "sighting--c0ab28bd-ad51-4d55-bcd1-0e240d74b73e", "sighting--1c3855fd-0656-45ed-9d42-1ab981d03277", "sighting--cd825db9-75d7-450f-ba94-aaeaf130e39a", "sighting--a7f3405f-9758-4d36-b00b-57dbc179dba2", "sighting--a4eeefba-fcc1-4253-853f-158d51880af8", "sighting--c2d14972-f8b6-4924-b008-3833886a2db8", "sighting--4b940ea2-38f4-414b-93f3-36be285e93a8", "sighting--fa21776d-ad89-44aa-bdc1-946f18ffde72", "sighting--8a3f5301-92f6-49cf-b2bc-8849ea9524f9", "sighting--e1c3b940-fc52-46a4-8db6-7bd872c5477d", "sighting--3bd04744-25fc-4da6-8adc-46379f7bc77d", "sighting--cb5892bd-15d1-4e24-8297-5a90826b88a8", "sighting--5bba2492-a6c6-4dba-807b-189f4958694c", "sighting--38104389-cd7f-4a76-8795-bf302c3c3ce5", "sighting--55b1fe3c-4dfa-4bf6-a6c1-52a62d0e3efc", "sighting--81ff0437-1dd1-4215-87f0-a831ba3d32f0", "sighting--b924d667-0deb-48aa-9771-e012580bf38b", "sighting--25e2bfa5-d26a-495c-b4c9-59a2620f27aa", "sighting--cc0eb9c8-45c4-4b49-8f6f-d96325724361", "sighting--a0a6b9b1-94ec-4a1e-ba8d-46b97eff97f8", "sighting--a011417f-6684-4163-8e9e-9b1fd2c70226", "sighting--e5bf5d5c-5a7a-4baa-9f18-4e61100b0191", "sighting--65b99890-2410-45ca-b1a2-4a3d8d1f3454", "sighting--7e64506d-a5d5-4468-b224-601e6fd49ea0", "sighting--6e68a829-b1de-438a-affd-8ccc5b298c17", "sighting--37533b10-0887-423c-b4e0-d9caba917e0b", "sighting--10759785-18b1-4733-a26e-828c3cc455b1", "sighting--bf9edf7b-f20f-4895-b340-994790ad60ea", "sighting--a650707c-a441-4a00-8460-b6722e04113e", "sighting--ec726297-c5e6-48d9-94df-a54c8f2ee123", "sighting--db7e06de-5e04-48dd-9802-3f66da3f2819", "sighting--93e0289c-d3dc-4276-b110-240e7b6ff24a", "sighting--778013b7-451a-4e58-898e-5e418d1a6510", "sighting--361b4c30-89b7-45c1-8619-a3b07cb73216", "sighting--d3b0cbb7-87d9-4526-8716-8e77774a0d7a", "sighting--14e725e6-2da9-4f16-8845-f556566c926c", "sighting--17de5778-dc86-412a-8544-968a4ca246a3", "sighting--a68efba9-c962-4c1e-8aee-63a57e8b7940", "sighting--5961d3a8-ec2d-4b6a-b1b2-581595b50631", "sighting--84085084-9aa1-43cc-adc9-2b4660dfa56b", "sighting--65bde073-320c-42ba-93df-49893e467577", "sighting--72a255ad-2a60-4e10-859a-391895f0d9ce", "sighting--faa9fa39-9b08-41a4-a6cf-90a42c224af8", "sighting--8d4afb84-9fde-4d7e-bd7e-47b95a6e50fe", "sighting--5d44925f-071f-4dfa-a13e-b51f6bc44be4", "sighting--07be93ae-923c-4956-ac4e-cc0b122b6b46", "sighting--46b342e7-4580-43f7-a066-f8e295cc8476", "sighting--3e714ac5-e8f8-4477-a2f3-b68ce9df8015", "sighting--00763adc-90a7-4548-8899-f47d565f50f9", "sighting--14d66dbd-a6e9-403a-b1fc-d6de188ac2b0", "sighting--62d5cfea-c92b-461d-8aeb-b090aece520c", "sighting--fd632d4f-821f-40ab-b44d-118046e2d0a5", "sighting--d702d286-459c-4417-8434-d93e06a4fb8f", "sighting--9f81e43f-ea05-41d5-8c88-9abbffe801aa", "sighting--c342c8af-9724-4ada-b01f-f05836705730", "sighting--07cdda6f-454e-45ac-b5ac-000b783c4631", "sighting--e7a5be7f-d309-490b-98c8-683018618b93", "sighting--1733dbee-fef5-4232-9a56-77f70f546a03", "sighting--0e3284a9-6a73-4bb0-886d-73e2567f2659", "sighting--3e35f107-ec9a-4081-a537-54cc70176d73", "sighting--b125ea53-2db1-452f-98ee-a81d833ebb2c", "sighting--9a539d39-d1d6-460c-bcfd-ccce08f9cd6f", "sighting--c5ae29c3-48f0-487c-8a7b-fb991ea1743b", "sighting--a6e89266-e4af-4f48-9fc6-d162fe546bb1", "sighting--c91cd590-1f10-4ed5-ac2a-60e3132107d8", "sighting--7b1e35fa-760d-471e-9ffe-4a2250eb77ee", "sighting--7859c900-893c-4f15-9e58-b0ec371d330c", "sighting--b23db2a0-3957-41ac-9336-12f7cf0c77ba", "sighting--9eb3289d-a9ae-4d0c-a4e0-7e49eccf8ca2", "sighting--e3c38b69-ca60-4889-9788-7ea1bfe3b75d", "sighting--2f9cd926-a3c8-466f-af35-6642e4743b4d", "sighting--8255f6d9-6d7e-44b8-91eb-a0102d5e18ab", "sighting--42b7ba30-5bec-4295-8b1e-b459f762dcb5", "sighting--6cc6d3aa-a32b-47b8-bd92-4a8bf873f92c", "sighting--411936f2-2958-4e48-a6e5-40e60e5df51d", "sighting--72ac8c2f-8b43-4bf5-b303-3efff5d0f1e4", "sighting--46f98024-ca2c-4551-a81f-0a0a059528b3", "sighting--bc21ba93-424d-495c-a959-847996355798", "sighting--1c2db166-4343-4893-8b5f-db85e04dc557", "sighting--413595e2-0cea-4b11-8a19-6392a339b458", "sighting--6857f0cd-625d-41e6-b9fe-5c5a521e1c6a", "sighting--86a09b58-1d3c-42cb-b26a-7b219ee5b661", "sighting--5a683438-7ee8-44be-a0ac-d9d4ce5013e1", "sighting--248db340-5e0d-4032-870f-9a4bb2add216", "sighting--e65d20a4-6425-4a20-b375-6d0e968966b4", "sighting--9be4ab15-9058-456b-955a-ce6a94e465d3", "sighting--9ac41467-6ba2-4750-b4dc-e21c57bcd51d", "sighting--e3848620-ea6b-4112-a356-2127e19ec11c", "sighting--79f57f4d-7251-4ec3-ac98-aae534886af0", "sighting--bd1f4028-8835-454c-a9e7-b6e81f0c45a2", "sighting--a02bc0a8-673f-466f-acab-dbfe7c6e2017", "sighting--6d326d65-ca12-45f6-a022-1d96116b90ee", "sighting--0d34ede2-a724-452f-ad61-863ccd038eea", "sighting--7cfd0fb9-567c-4abb-8caa-c2023b15587b", "sighting--dfb0110f-5362-456d-ab9c-b2346018ee97", "sighting--d3b40478-64c8-4384-b9fb-188631c0d76c", "sighting--fde4b5ef-93f2-43e4-b986-747b921b4c30", "sighting--30c6aa17-9d5d-48c0-8c3b-da034405b98e", "sighting--97d2c9c2-1463-48a9-a2f8-15cac1cac128", "sighting--984fc156-9f53-46c6-9935-1bed44c618a5", "sighting--06822d29-e04c-48c9-ad41-413f51426bfa", "sighting--ec583ef8-b8ed-47bc-8b05-acc81dbcea4b", "sighting--1cc6c58e-d060-49a7-92c1-fbebf4e858b9", "sighting--86abaf23-a195-4d16-a858-a154d732d849", "sighting--5db8fc4b-eb99-4929-b3df-17ebb8709b46", "sighting--41eddf4f-979c-410b-be30-258aee21131b", "sighting--7b379d62-cfe0-4d98-995c-5bbeca6b815b", "sighting--1e5c0c42-8c27-4b18-a909-70944d485254", "sighting--eb9542ff-1faf-488e-ae79-97f573c5aabe", "sighting--cf2741f3-d131-4509-bd0f-b549a236520c", "sighting--db62c841-efe6-45c3-82e2-cf2caef77662", "sighting--cb9de590-f5dc-489e-bc20-8e42964ebf33", "sighting--763e3d94-a5e1-4a72-9441-ed1f6b6b10a5", "sighting--30b1f50b-650a-4d4c-bb75-83bd45fef517", "sighting--120bd810-f897-4e47-a4db-9f12fb44021c", "sighting--80e0802a-ce18-40b0-af9e-00810f534a12", "sighting--85ddca9b-713c-4fa2-9752-883105b6c703", "sighting--f861b158-d7f1-43f0-8dd9-d2a84d499692", "sighting--a7bb68c1-573d-416f-8763-3ffb4d43a1a8", "sighting--2320e29b-d770-4cb2-879b-c41a6f670d80", "sighting--200b3dec-f5b1-431d-860f-192671b91587", "sighting--b463ac0f-358e-4199-bd5a-15bf6b4e2481", "sighting--c9198dec-b3be-4d66-81d1-c2c3b9b84afc", "sighting--518534a2-0fdd-4cd6-93f3-a98fc8b22fbd", "sighting--4c54c37d-d8cf-425e-bdc3-ccba6cc6485a", "sighting--1fac862a-6525-404c-9d06-21171e8e1e6f", "sighting--76c4e041-93d5-4991-bbd7-1d6e6cb34517", "sighting--e149e614-c993-487d-8202-241be94ebb46", "sighting--6080083d-fa03-4c5b-878c-8bab59bdf02f", "sighting--bbe02a29-3a63-4707-b4d6-59b09b19644c", "sighting--30cca0e3-15b6-437a-8b5f-ec5a96ca1ae7", "sighting--205d561d-0629-405c-b595-6f94b8d08a59", "sighting--2bc96df3-b7a6-4812-aa6e-5acd7b4121cc", "sighting--a4d461e0-7e8f-4aa7-a623-e0dc71565c24", "sighting--a455bc35-dd71-4a84-a0f0-b065fbee8697", "sighting--6dbf2252-e5ca-47ba-99b0-f467be178f6d", "sighting--538a2e2a-fb25-4019-85be-ef3523ce74d1", "sighting--7067361d-95e7-4c3a-bf34-bd010376936c", "sighting--a5d081c7-6cae-46f9-9a94-3b6f416a0777", "sighting--69e7d708-48c5-4593-a020-3d13198ad807", "sighting--38346bd3-7bc1-440e-9d7f-d3319994eeda", "sighting--79157327-77ff-4e9d-b026-235bcd15a84a", "sighting--3938562c-5b90-4a2e-8070-e2badfd1d413", "sighting--6f336a6a-0b81-4240-96c6-ae5bcd7f5f30", "sighting--1ca01886-f9f9-4b42-b310-814ee1de3506", "sighting--733c6b43-eee5-4c60-a954-78c1dd230dc9", "sighting--a60bb7d1-f952-45b7-bd89-5e8e1739f7d2", "sighting--3be70b91-d16e-4b81-853d-a374d49452b5", "sighting--745eca07-06ae-49f5-8005-781ff5b09520", "sighting--39a08f46-f2cd-440a-85e7-b462cb7dec13", "sighting--4adb3f70-7d59-4b87-b11b-10e085a867cc", "sighting--c7789818-782c-40b1-a29f-2868a998a584", "sighting--e9b37f9b-7717-4a2e-8e2d-e4fca2b4c3b3", "sighting--0d91789d-ce9b-4efa-9324-23b1ebefcc06", "sighting--c8435d9b-b5ff-43af-8fbf-c4878e0a3a70", "sighting--8b75de0c-976d-4e59-b2b2-ec0e8b281103", "sighting--e48475c2-fe6c-4e79-8230-b32affd2d140", "sighting--f8c8ca12-2d70-474f-a565-cfe1d28764ce", "sighting--141943d4-e5e4-4335-9944-6e43ac312b83", "sighting--1d75e59b-e3ee-4683-a301-5c0523e89b2e", "sighting--8571a906-3f59-4d36-9ec8-b5be2c5626ad", "sighting--ab003e88-f3ff-4653-b56a-36034ee4addb", "sighting--4b6af4f1-db7d-4c07-a306-b2bee08de519", "sighting--d3bdf7aa-8339-466d-be32-e6fc4ac6acef", "sighting--64bba187-4400-4afc-bf13-6d9dba37763a", "sighting--daca62eb-0b40-447a-b914-5eebe2b413c5", "sighting--7cc67960-cb23-4ee4-8432-c090704585a0", "sighting--af9d0da0-42cf-4839-a0d6-0bab4886c392", "sighting--d0b25898-9d58-4c26-969e-78e36b17e0b3", "sighting--b539d9e8-8a66-436d-b0af-7554af3213c0", "sighting--1a9e056b-849c-4afe-99bb-5be56233bc70", "sighting--09738060-78b8-4da4-9986-5e7da97c8036", "sighting--4a99363b-f422-4638-aef6-72c944425bc3", "sighting--0f50483d-8729-4d63-8295-c7368294c9ba", "sighting--e417be13-caf6-4406-bf67-93e7adaf235e", "sighting--ea85ff60-05d4-4687-9e15-00bca9576133", "sighting--4c32fc99-7eee-4f0a-90ef-06a092a31c24", "sighting--462b569f-083e-4f77-bece-6e8e1617da97", "sighting--6466f97e-e282-426e-88e5-65522882baab", "sighting--3de64e5e-8ada-4303-b56f-79589bd1cc17", "sighting--e6a1040d-3885-4a08-a8f4-f4f68fb1bf00", "sighting--9c111cc4-0c2b-4d17-bdee-b4d683cca984", "sighting--2e98ead3-ebb3-4583-a38b-a681a34ae11a", "sighting--b2c914bd-ca55-4714-a963-03da4de37f2e", "sighting--b26d02b3-203a-4673-a6a4-6358efc8998e", "sighting--f8076971-a6ec-4054-9c15-fd9ba23c0f3e", "sighting--6563c6dd-de70-44ee-b3ef-0773941076ed", "sighting--f19b8d72-68d1-453c-aa26-6fd9e7c15adc", "sighting--153fc2df-414f-47a0-a003-20f29d18f469", "sighting--19fe88dc-33f8-401e-92aa-b61c4476d82d", "sighting--f023404f-9bd0-477b-9395-20b62504ece4", "sighting--7165f658-302e-49fa-a1bd-324549bccab8", "sighting--45de1dc3-1a82-4dd2-a36c-0c0117a6ede8", "sighting--c728d80b-7658-440a-83fc-85c5ba56574b", "sighting--0794b2f5-883c-422b-a2e9-3fe688ec9910", "sighting--5981490e-0e56-46e3-9e55-b2cb3a5b5800", "sighting--f5efba52-f4a2-47bd-9073-b69f242ef1d4", "sighting--56d4217c-cecd-41e3-8751-7345e77d6a7d", "sighting--9ec5ba91-8687-4d7f-8165-966e6cb2138c", "sighting--535208f1-f6c5-4c93-b1eb-d53c8773589e", "sighting--79d7590d-bc24-4659-90e9-25ab5b16e2cd", "sighting--a3ea1726-021f-4541-a6d4-cae88f722935", "sighting--f8d3d02d-fd89-4e1c-9527-c15e0d925bc2", "sighting--96f04a5b-8f32-44c3-9741-77de8f20740a", "sighting--b5c5d619-820e-41db-95fd-00e346273652", "sighting--1d9f145f-0414-4f15-bd30-4b945b96a7c3", "sighting--4ef79ccb-dcab-4d5d-8775-ed77222d7f49", "sighting--0687422a-d868-4c76-aac0-9b3b04084ad5", "sighting--57113395-52a1-4212-b9d2-58e2b88b81a5", "sighting--cd565cc9-507d-4a36-ad09-bed9be6646c6", "sighting--29d888d3-a2c0-49ad-9515-94ec46843ec5", "sighting--662e3c86-641a-4388-b219-af65896d8955", "sighting--9c7fcb1f-0870-4651-aaf3-56bf35f9e00a", "sighting--01052f06-0dff-4d38-9ba9-7ab531cd1025", "sighting--f4508d76-df2d-46f8-a6a1-073c442cb561", "sighting--e3293a09-b950-4893-a621-0ce3618448ae", "sighting--b878138b-70c0-42eb-aa07-04a84ea8b6de", "sighting--67d94242-4eca-4d80-86d3-d6f8968e063d", "sighting--971c172f-5fc0-4b1b-9bec-3637ff083ba3", "sighting--583a3d5a-55a9-49b2-8a1a-a9d2c95300ca", "sighting--2a001e5c-a31c-4ab2-99de-4ab795d58d6d", "sighting--16c606f1-7265-45f8-ab4a-2455bf2af142", "sighting--3f2b4b98-5625-4e31-a089-7b12102ef566", "sighting--be171123-5bbc-4c15-8494-643883a16ec4", "sighting--dd5e53f3-0b7a-442d-8f1e-c444a37d0ea3", "sighting--0279b140-fb73-4bcb-840f-f16da6ee53c1", "sighting--aeeb1a49-ab56-4efc-9207-b99ecc2197f1", "sighting--922e957c-81f4-4c30-b5a3-32947a1cd5e6", "sighting--e984781d-47d3-4abe-8535-a154ae132605", "sighting--5c73145c-1264-45c9-aec5-101bc02805b9", "sighting--ed7fe5e8-4f38-4135-8c53-7cd62ba4e0bf", "sighting--2c123782-c4c4-4b92-9863-7fe87430cf2f", "sighting--04a1c80e-c54d-4867-baa6-6d01c9e4e25b", "sighting--3bedfc41-1a27-4e3a-87f7-cfefa54291e1", "sighting--b301f669-0039-4c9e-98b4-f2d444730a81", "sighting--97d77e4c-46e3-4312-87e9-9fb8d02a8a47", "sighting--6e7888c3-74f4-4244-b666-c7b36f5304a8", "sighting--74602938-0169-484b-a942-97872c2423f1", "sighting--6a3124c0-44cd-4d93-9aa6-5093010401de", "sighting--ba1dadae-3da5-4629-8ca1-e7cc2e9b3a66", "sighting--03c1103d-b3f6-4821-9195-3c9af5e31310", "sighting--a79414a8-fe0a-4874-a7b3-4ced1c7849df", "sighting--254362a0-4b36-48cc-85c2-da60ceb6d91f", "sighting--6059b02c-0d6a-41ca-afd5-2b3162ec6cba", "sighting--9d97a861-b741-47e1-942f-deffb604355f", "sighting--3a7e719d-5a2b-4c43-b355-f7b08b5429ce", "sighting--48206754-733b-4b71-ac2f-c86f0764ea00", "sighting--20b6f038-d322-4fbd-928c-54a3c23c4f5e", "sighting--feb34654-6b17-45ad-9b15-57760a20bb23", "sighting--8f92e218-35c7-4c13-b2db-56a681fed884", "sighting--d6b8ee97-de04-4cb4-b457-637b2558e3c4", "sighting--865aecc0-e6a4-4140-ade7-4a9c62bec0e2", "sighting--63cc1fbf-ac56-4299-a031-7c6048cccde8", "sighting--92a1dc37-9457-4e25-ae5c-8a3ee2fe069d", "sighting--cb354883-2eef-44d0-a0e0-9a72b4c462b2", "sighting--22f0d22d-216a-4ffb-84d7-92cc2ed3947e", "sighting--af88a13a-bd10-460e-8fd4-bcb31c7009a6", "sighting--af1e6409-057f-4606-8994-3b259b2d475f", "sighting--24a9725f-1fc4-4f22-b27f-ba3568a2582d", "sighting--d8916065-4efc-41b7-a972-cc0c1e2291c6", "sighting--e649a750-7039-4a84-a8ff-35b93a7fef31", "sighting--6658e332-78d1-4a2e-91ed-5ae8edbe4cfa", "sighting--cd15ae74-c741-4fa1-9e65-be52e88580cd", "sighting--008351b3-efb3-4b02-87a2-3016edae456d", "sighting--94b8ffd9-b273-482a-b221-330f189b6483", "sighting--84bae00f-28d7-4129-92ee-c01e6d1bb62e", "sighting--a46592d0-722b-4b41-9afe-3cb34773f393", "sighting--21798107-c977-4a3a-905c-72aedbb2a22c", "sighting--eb701307-f36a-47ff-97ea-97e674163b88", "sighting--7d4f096a-7b68-4b9b-8041-2758b28a68bd", "sighting--cdbd735f-fe19-4250-a269-b7c37436e795", "sighting--f0b625ed-7f1c-47a8-b80a-0f51147aa187", "sighting--ab922947-fcc1-4336-b136-e8343f316ce9", "sighting--10546744-5746-45fc-8930-501ea7b2a5a0", "sighting--7a3b9949-03c0-4074-b58a-4e70b26595ff", "sighting--5345ab2b-f5c5-402f-a60b-82bb4d477edd", "sighting--8fbed6b3-85a7-4425-bb70-35b9ccc75e18", "sighting--6ba55a82-0bc5-402a-86ca-254a7d1211b3", "sighting--9cdad59a-5c42-4520-bd11-22a5c613c27d", "sighting--66913633-97d2-4f36-b15f-3c57fd0e60bd", "sighting--05e41e29-b9e6-4454-92ad-782cfceae84f", "sighting--7ed65778-9684-45cf-be7f-789f173b8e4a", "sighting--d22c41af-35e0-4037-a723-1ffc7fef6e14", "sighting--317aaa21-0d82-4ff5-8c5f-aef81e8167f2", "sighting--993c89a5-7760-4540-b539-65e2a0553923", "sighting--cc64e3c9-c145-40d1-b179-0c3689828b91", "sighting--80631937-d2c0-49ce-841e-5e22c7ab1e56", "sighting--e6f9b833-72e5-423e-b0cc-9b918b0cd7cc", "sighting--7527a460-4a92-4bd7-9996-776b62eabcff", "sighting--b139f113-4a50-4d73-ae6b-8859d5e0f30b", "sighting--fea9a9d1-043f-46cc-96c1-01cf5049b3db", "sighting--9f77a848-c8a5-43a0-8a3c-670edc944a0d", "sighting--41df361d-56fe-4fa0-99db-a3eecfc7b262", "sighting--990191b1-b289-4101-bf18-48fea593d7ca", "sighting--affb0e46-076c-4ba4-aefe-cb9941ac33bd", "sighting--09d1636d-1a7b-4096-9108-a4bcec3018b7", "sighting--f8775beb-b55c-4a71-9ece-d869f47daf03", "sighting--97a7eb7d-ff57-41ae-a28e-8f6fe9bc8431", "sighting--e0092ade-90e4-4092-aedb-23e89d59c490", "sighting--eeb636cf-e0e0-41cb-91a0-f5e3ed7d572e", "sighting--0059b7c1-2bb5-4a83-84de-2aaebfd6aca1", "sighting--95d6e4cc-b881-42d2-83f6-127c19b8670e", "sighting--02b601e1-e9f1-49bd-b134-c01775bec254", "sighting--41c59f38-7f72-48db-a961-0eb4ad4cd85d", "sighting--0579da87-a04b-4f22-b149-6c8890c0afe1", "sighting--81f0dfea-4274-45aa-b261-edf1f6100732", "sighting--b2bde821-386d-4969-accd-fc770104c9ca", "sighting--af26af09-c36b-4eb9-a64b-508bbdb180d9", "sighting--ff0bc21c-8767-4f6e-94eb-44bf41e50544", "sighting--eec05a13-9001-4eab-8225-765a82a2b713", "sighting--10f15c65-955f-4d9d-aae8-fd1906c84ad8", "sighting--4557e184-0b64-4bac-bbc0-7b1b8d1ccff7", "sighting--444c2817-2eeb-4050-86d5-61a0a294de27", "sighting--cae6691a-4637-49e0-bbb9-8dbef0d75806", "sighting--0029d49b-a4b5-4501-80df-5bd325aa0e2f", "sighting--9f11a2a4-493d-483e-8637-193605cbbe1c", "sighting--22871ec5-f4d1-4ff0-852a-ab4140d899b2", "sighting--b94fcb97-f652-48e1-8ff5-014d8063f520", "sighting--a6c701aa-b120-40b8-b01f-b051b8e01da2", "sighting--08705a52-205c-458f-98b1-a16b15fd0cd3", "sighting--642fcbe5-1037-49e6-8c06-97da904ffdcf", "sighting--6e7e67ce-eb52-4352-a8b6-d3cf3a14faf0", "sighting--a0351101-6318-437d-ad0d-8829fe2dfa6e", "sighting--80b670f4-de9c-4a9e-a915-4a309de97ee5", "sighting--b9bb1716-d76b-4bc4-b553-309987ae8d0e", "sighting--50569034-a455-42b2-a638-cca19e8aad77", "sighting--fef819aa-9033-480e-813a-6da8d9194db7", "sighting--8e30dbdc-c8b5-484a-afe2-9a686e68a824", "sighting--d0106832-31ba-4593-a151-efd738bb09af", "sighting--1493bf04-e3e5-4a2a-81cb-f7a75af96da9", "sighting--80c6c457-458f-41bd-b8ed-a8fc01d0b1a3", "sighting--e1e6d04f-733b-4d34-8782-4133ccc2347b", "sighting--014c1aca-47f8-459d-82d0-09bfe7d34c1e", "sighting--2dc31134-0b8b-4ee8-be36-dc1e13721cfd", "sighting--6da16ced-1b97-4e66-aaf2-03e023d9a9ba", "sighting--d406ba68-4ea3-42cd-9671-05e2982c898e", "sighting--e1c41785-de1d-4d39-8d24-ed9badf84b92", "sighting--7d4b00b1-48d0-4909-925e-ae77fd583dcb", "sighting--a06e755c-33c2-44d3-a3d2-4466be793016", "sighting--a6a6cb7d-ce2b-4f29-bab6-2c3873843d2c", "sighting--19adb6be-d787-4eb6-be6a-5aeedec01ce9", "sighting--1ceda4be-64dd-4c26-9889-c52d9bef50d1", "sighting--e389039f-c016-4503-ab01-64575bc58902", "sighting--73f1dda6-09a9-40ef-ad1f-9c891ea6d617", "sighting--f4170f2a-8b45-4912-abaa-794fa37c3db2", "sighting--272db7a6-14bd-41b0-92f3-c764ce717c63", "sighting--06d01699-4e1c-4989-a2d4-21ba9e08f026", "sighting--ef4f493f-41c3-42f7-8593-add7acdd56bd", "sighting--1a313ea2-8b5f-422b-a51b-e30dd682bc24", "sighting--9ebf77fe-534b-473a-aded-e96a034a5856", "sighting--70a0ab2b-d5cd-4a00-bb63-3dc35d21b6f7", "sighting--122cc513-b12d-4a89-8506-29e2476303b9", "sighting--0722443d-908f-4fb7-8ff7-ca73b3a87556", "sighting--75e2f873-308f-4c6a-b23e-1a99fb6b4fe6", "sighting--17fd119f-b430-4e4d-b8af-7c7638db3926", "sighting--fc0adfe5-06d5-4922-b500-ae232469a5b7", "sighting--6b333b2b-f4cd-4dbb-9d91-c19fca9310a3", "sighting--8b67437f-965a-4c21-a5e6-68e22ff6513c", "sighting--649e7605-4a1f-42a8-ab5c-5a886f7268bd", "sighting--afb13b29-a81b-4e81-b646-6d8a46ab1b67", "sighting--6f71a8ea-88bb-4e0e-ad19-785671329538", "sighting--e312f9bf-1105-4386-88f9-e939ae75fe60", "sighting--e3dc5b8b-bc64-4fd0-aec8-1472f62534fa", "sighting--ffa11a50-0a71-4d82-8a5b-ded1315deaa8", "sighting--f596976a-2802-4d03-913c-47ff248e79c8", "sighting--c167b98f-93b5-484f-86d7-5a65547e189a", "sighting--e063ebb6-c29d-43d8-a037-5c4c9f85adf7", "sighting--df2abdf7-7ec1-4f19-9a66-d9e823fa4085", "sighting--a02740af-427a-4ec9-b0a3-39f800b6cc1a", "sighting--1b66c947-9450-471f-9f3d-2958eadb7f7a", "sighting--6849ab9b-0304-4479-8529-14af20de4304", "sighting--c267633c-648a-4232-9191-2d3a78fdf7fe", "sighting--b60b2896-dcc3-4f4c-9e94-39b8d2af28d6", "sighting--3c6463f8-183c-4573-8825-6c59ba677d95", "sighting--cc56868c-2fe1-47e6-bc7c-aed0c5f0f77f", "sighting--69ab2172-3d8c-4a85-9393-fdbc3988def7", "sighting--ab06da98-7435-45d0-a11f-5eee402ea171", "sighting--dcdbcfcc-e3da-41e4-a20e-8af118f9e7df", "sighting--46141473-f03a-4ece-aa0d-973c8c30033d", "sighting--4744cc47-5927-4c02-8733-6dc6d012d56e", "sighting--387bc8dc-edf9-4502-b86f-203c5f662935", "sighting--3af9ea7b-faa8-43eb-badb-0fbba6495b53", "sighting--48f1f3c4-fc1b-449a-8d41-e995cd1bc0e0", "sighting--8b78c72a-e3eb-45c0-98b3-0a6ccfea9a9c", "sighting--8eb45f9f-b839-4558-b5d4-ce46a2096dae", "sighting--123c7d4e-f192-4e27-850b-f4e51e591217", "sighting--0c20ecf8-9d95-406d-8486-413cb5d258ea", "sighting--4dca0fdb-1166-45a2-b53b-2687fe1bed7a", "sighting--593837d2-5c9b-4779-9ba4-0e93d0fa1d95", "sighting--01dec263-3f8b-4eab-8758-f95ce2e91346", "sighting--b3ab4718-a03f-404c-ab8b-6cccda99286a", "sighting--c4c43b50-494b-4719-a8df-bf767dd72802", "sighting--d743f9ed-dfd1-4308-ab46-84861b216d97", "sighting--9e19736d-5334-4613-b38d-7b38d7c968d3", "sighting--0cca2fa2-94a6-4e98-817a-d2c2286a88dc", "sighting--03c0bedd-2ec1-4795-87a8-d461867952ae", "sighting--6abf07db-034f-4d6e-bbac-300cdc25d0df", "sighting--24e5f279-5094-4f86-b5da-578dc3fc9196", "sighting--50b93ffd-ddc4-456d-b2c2-1175770838e5", "sighting--fa4ee307-1993-4b82-b9d4-46703a3b8182", "sighting--412a3653-adb3-423c-8949-2f10e4ab50cc", "sighting--d6ce4168-ddc0-434b-a489-38732cf909e5", "sighting--522bfa0c-3b2f-456c-938e-6e4e569298d4", "sighting--d731804f-8549-427e-92e5-18449c04e19d", "sighting--b60d9097-48d8-442a-88af-e33fb734c86e", "sighting--740b8e6f-6dc1-46ce-bca6-fc49d90c2d7e", "sighting--a6133e1f-6a2f-40bb-a0c3-0e461e2900e9", "sighting--b52d895c-35fa-4325-8a42-9d10e3013c02", "sighting--46287cd1-5adc-4359-9fe6-d2b8625ff8c2", "sighting--6cc3fdde-068e-477d-a6a6-6bbe07b22417", "sighting--c96f95d5-ad77-4bdf-9335-c3279ac6f254", "sighting--9afd2038-a210-4e4e-8560-e619ce910a02", "sighting--2b5458fd-b30e-44b1-9158-3896161994f6", "sighting--9c3e7b07-ec53-47ce-9490-e0ba8677d295", "sighting--6b5dbc4d-ee1d-4244-abf0-25817d3542da", "sighting--22ea28d4-dac5-45f8-a24d-707dcd90cc45", "sighting--ca694d55-e4c3-4f01-b05e-f1b52b9ba1b8", "sighting--2de2c97a-9b53-453a-af59-66b65e90ad89", "sighting--264899ca-d17a-4a30-9ad3-8a0fe11da5a1", "sighting--5216c0cf-228f-4065-ab7f-381aca5ea42e", "sighting--c6ad63e6-e2ef-4505-8f17-11672acf38ff", "sighting--80a9d06d-778b-4d4b-8c4b-5589a1babf3c", "sighting--750a274d-bd09-4463-aaaf-c317e6261190", "sighting--0a987331-1fa9-44d4-ad8a-cd7f8a53e4cf", "sighting--4d87cc0a-f14e-4709-9c48-c349ff37d4cf", "sighting--a1025c84-566e-4ea5-8177-415c5e6a9a8f", "sighting--20315806-ee2a-4d54-ab69-45a8fa20bb2d", "sighting--a676cd31-5cae-46e8-bcd3-3cd062da1ff4", "sighting--5a8eab34-bfd9-438c-89f9-8b91c091cb9d", "sighting--bf5331d4-c25c-486f-80cc-837c9d9afa18", "sighting--5bb49f0a-68ed-43a6-9439-83cb2f4abba0", "sighting--8d9650fe-169e-41ce-9eb0-9285679a101f", "sighting--9d221ef0-dca0-43e0-b615-33711262b154", "sighting--f5a74317-8a21-4e77-a148-95cecd6460ef", "sighting--6177d63e-dea5-49e4-b13b-1607af89fff5", "sighting--d80ecfc7-bf89-49b2-acea-19a3b06a70e3", "sighting--5f33665f-4d5f-44b5-89c2-53ef05244326", "sighting--a449f236-36f0-4617-9bf4-70906f9c490c", "sighting--6828a6a0-bddb-43dd-94a3-f7b83340746a", "sighting--44b3e47e-9737-49d1-8e4d-be40b892d277", "sighting--32fa1108-4699-4164-a970-cc9b6de30f6b", "sighting--b5e73444-a93b-4e07-b415-083f30a5d492", "sighting--e80017d2-588f-4b5f-acac-ecd877a046fe", "sighting--cd4a837c-709d-4a7f-ad2d-a2b9ec7aeff1", "sighting--d69c07ea-016d-4b85-8727-9516a7bde148", "sighting--6cd1c64a-13be-425d-a58b-cb7b878feece", "sighting--69bb16dc-8958-4f7e-a671-b29884f6327e", "sighting--cab4589d-a7f1-4af8-94ea-f135cf66332b", "sighting--c6cf0230-47a9-4679-b4d4-ccb910ef438a", "sighting--76436ac8-c38d-4726-bfc4-b4cb9491c8fc", "sighting--8534b77f-88d9-41b9-b8ce-d4806d70b413", "sighting--895aa2bd-e5f0-484f-8ab3-6bd7553f57d0", "sighting--0ad2550f-01f9-4528-ba44-e0fe7b73cbd8", "sighting--af333423-33db-47d5-bd1a-cad457457797", "sighting--16321441-56fb-4592-a8d5-72f41cdaabb2", "sighting--9805f4e3-3bf2-4fed-a1a0-4833c2f7843d", "sighting--55f5296a-654d-455d-8e5b-214f8629a1ce", "sighting--ce87604a-e27b-4e4f-a2fc-8c4cb58a2109", "sighting--4cc5195e-d4c9-49c4-b8f8-d1f1373bcda1", "sighting--c7219c14-9779-400a-9a85-eb90d0031ea3", "sighting--a4acc521-501d-4682-9c7e-68177c5aca84", "sighting--dfe1c0ce-ff84-4a5c-9454-690907aa1e69", "sighting--b1777beb-cf19-4682-8772-ee0599617804", "sighting--4a798213-84ba-4542-80b3-eaf5f146b1f4", "sighting--93766c40-cafa-4e57-b432-97446f3bc3a3", "sighting--0a6632b3-3d44-4e32-bc54-dec0e1b1a9f6", "sighting--62231408-bf16-4a2d-9b46-454e7740a7a5", "sighting--22163ef6-3b37-42ab-9892-f54d2903f214", "sighting--2fbee996-b6b8-4dd8-a40e-b8392ba5156f", "sighting--463472c5-0eb0-47c1-864c-402c1bd721d8", "sighting--e5673f72-8f2a-44ee-877b-464ff2cf265b", "sighting--3af1fc90-8590-421d-bfae-d4a4f02f98d3", "sighting--486752dc-eefd-4154-8204-c6affa66460c", "sighting--365d1555-8fd2-4edb-87c9-1a5f521f2929", "sighting--66680d68-ce8f-4635-aefe-dbdb3fa39422", "sighting--90e6edd6-8475-484d-aea4-207e4c8028eb", "sighting--311ba8ff-6480-44d0-a800-c3bf53bc775d", "sighting--31a2ffa5-200a-4b9e-b728-9b79c26369a9", "sighting--8ec23f15-8514-464c-b5d6-d366174bed3d", "sighting--13005e1a-9ce0-4319-b581-a827f86945b1", "sighting--204fb5ed-aba0-4513-8304-5855f42a46d1", "sighting--e6da0d1e-55cb-49b0-9496-327c43a49bbc", "sighting--5e874386-e104-4078-a5f5-6cee3e42891b", "sighting--2bb74992-203c-4b95-b7dd-24100d8c69e5", "sighting--d3d5d1e8-01b2-4c8f-b534-068a9c8fc19b", "sighting--08b4fb62-8756-42be-ab2d-7a7018b91961", "sighting--583a6b1b-9924-43f4-a303-6dd28e2ea6e3", "sighting--942fb3dd-8ff3-41d1-9f06-a2cac66e6d67", "sighting--ffec79b1-b57f-4e6f-8f15-70a6a5e1b9b0", "sighting--10e703d1-a610-4905-a57c-e558b5286507", "sighting--db0f4a38-b73a-43df-b6b5-4d88ef18ceef", "sighting--39b411cd-9271-40f2-84cd-2b136d2d9ad1", "sighting--525ddd82-9e0f-4f27-aad3-f917387740a3", "sighting--596b19c4-d0bc-41ec-ae0d-b84f0b674b14", "sighting--001c6654-c343-47d7-a74e-c8db754c8f62", "sighting--fe136270-bcdc-44ed-8b19-6b3c27bdbc7d", "sighting--0beb26c7-bdf2-47ed-a16a-d931f7055ccd", "sighting--fa7770c0-a3a6-4bf6-aa56-2d0ac461951d", "sighting--44310fc5-a00b-4a6e-9244-febaae659b70", "sighting--2401ed7c-b791-4dc0-9ab1-5d1953fc0d79", "sighting--f2fa3735-dcff-4fe7-bd13-a91a24f6c4d1", "sighting--b587320f-455e-4351-b995-0b6587967cbc", "sighting--89e9f6e2-5f1b-4181-b67f-04d49c5e81cf", "sighting--d91da06f-bf6c-4f2b-a059-39854d1424b8", "sighting--77a7a1a8-8fc8-4c98-8afa-9ff70283f90b", "sighting--23147e91-9d39-49d8-8f39-bd872b72ef39", "sighting--c23fb764-3183-44af-83c6-78cdf3153efe", "sighting--711a0532-8e20-4df2-9a57-3d0928a16ac8", "sighting--373a0c53-68b3-4c89-91fe-c818f6c0f6d6", "sighting--012df871-aabd-4d30-820c-108bde7263b0", "sighting--fd61217c-5ff3-4804-b4a2-bdb943466355", "sighting--82d01a6c-89c8-4bb2-b720-6865877ee7d9", "sighting--7458c8c8-4f20-46b1-8151-19a8985f55ce", "sighting--b6442457-829c-42ee-ad2e-49148b5f6c8f", "sighting--8fdc7fbd-a865-43d6-bbbe-08e7603fd423", "sighting--c3f7916c-ef3a-4179-beb6-a50fb0cb98c1", "sighting--0e50cfc7-f264-432e-8eda-32dfc0aa653c", "sighting--0b85baaf-756b-4a4f-982c-6600a6a93821", "sighting--c9981871-7844-4cb0-843a-ed6005ecd863", "sighting--2a9b43d7-43a8-4e3e-8c3d-2380cdde30a3", "sighting--157352fc-2bb9-4144-b726-f71e32306501", "sighting--f65d41ea-d2eb-47b4-bff3-7a62fa873573", "sighting--4f8a50ba-4f84-426e-b3b6-c17df0541c69", "sighting--52d3f89b-6a25-47f7-85a1-2411b5faa1e8", "sighting--e783db59-9b6a-41d9-b36d-7df0b7034307", "sighting--9ef06f57-7393-40cf-af13-cf4c0d2c9043", "sighting--af335a45-e257-445f-967b-2e3b52578cb7", "sighting--81b78194-decc-4d46-a455-7579d4250701", "sighting--31728fc4-b2cc-47aa-b7c8-4db44e4891a7", "sighting--1a5d4e7e-7659-4f46-b11e-3cf2068190e3", "sighting--13ff86d6-1b54-45a6-aae6-2bd94bd0a7e3", "sighting--284a6e47-24d9-441c-a34d-b691ba106735", "sighting--c8ce0b0a-5136-4d21-8675-0e421095927a", "sighting--bdbe09d0-19ee-4573-b5c9-336a8fa22fe4", "sighting--f1fdc1ff-51b8-4604-92fd-e56e35aacd11", "sighting--22136342-fc4b-42fe-9ddc-658c93666a29", "sighting--0077fe5c-f54e-461b-9a00-b644dfd7d5b6", "sighting--62779fa8-2d2e-4ad5-945c-5056e4825460", "sighting--7ee704bd-4ec9-42cc-9163-e828e70e8118", "sighting--00416108-e524-4105-9b7f-0c6ff7453e65", "sighting--e2ce6a42-9ae4-47a2-a146-b9ff8c36c80a", "sighting--1173be5b-4813-4895-b9d4-2a7799e085a8", "sighting--5a8de0e1-2d36-4c14-a7b7-ef8e04c55f00", "sighting--b6a9c657-89dd-47a4-9ab0-9df5e056c05a", "sighting--f9620608-2d19-42f1-a857-f64906d9f7b2", "sighting--d383bb37-2071-48cd-87a5-d8da060b886b", "sighting--381c7d6b-ba94-4482-a3d0-8aadfb5bafd5", "sighting--6f1c840b-d185-4365-b352-75caca5777a5", "sighting--0cf85a40-4e8c-4355-9eb8-4e85c972f4a9", "sighting--7f05073d-e3e1-4e97-90a4-0ed3641ffa4c", "sighting--6873582c-91e0-4dea-ab65-9e5ee572cdbd", "sighting--5b396f6c-ec10-4e62-ad9d-c0653e92a93b", "sighting--cb80e0e1-3486-4461-9272-19c1a7c3bbf1", "sighting--403341ac-3874-4e2b-ad90-0fb8c4c8b549", "sighting--b30faa4f-93eb-4e1d-a229-88c11b981375", "sighting--9678814e-0db0-47d5-861e-80ac5ea5df0b", "sighting--624074a2-d5cf-47ce-af9b-c14d205776e7", "sighting--d751af39-e096-49c4-ba8b-a83b327bdd0f", "sighting--c55ef713-f2af-409e-a4bf-2266b7f052a3", "sighting--621cbdc4-1a61-4bef-9122-6012fb49e7ea", "sighting--e9cf8b27-4279-4757-9137-f9ee802c4572", "sighting--42b0af1b-5608-4436-b111-7b0641734f64", "sighting--b165e6e8-b567-4b57-b28c-6a08c5d78955", "sighting--1a6f340e-30e8-4cae-b44a-fb3a2ae0481c", "sighting--5bbadff3-5b77-4b77-823d-833082dcf87f", "sighting--2c6974d7-edc6-4c56-ac13-7bf591556c1a", "sighting--32646c95-cb83-4441-afea-4196bbc006d1", "sighting--920cabab-9415-465f-9abf-461def0b3040", "sighting--e215748c-6011-48d1-a5e7-715b7e63e2b1", "sighting--bb83d8e3-b837-42be-87c9-314c3071afa1", "sighting--cf23737e-3d4c-4cd4-b7aa-cef7b2c353d0", "sighting--fe1a9203-e16b-4013-8b4f-12ce031a55f7", "sighting--37ecc31a-69ac-4248-a500-928f185a778c", "sighting--604a37c9-d87c-4450-9e5e-29ea3869bc3e", "sighting--d132aeda-5483-4aef-90ef-2f5aadbda1c9", "sighting--bd9b70ca-7b0a-47e6-93d6-591ae06059ba", "sighting--f6e345bc-bff6-49fa-ad75-c3151dffa04c", "sighting--8e836c47-6779-4fe8-bd44-f3c27e52b52f", "sighting--9b4bb76b-c4f9-46a8-acf5-4f77a24c8804", "sighting--3fae6470-d695-480c-baa3-30df6f7c9b54", "sighting--278e28d9-a0d3-4728-a256-c02049843340", "sighting--09b071ac-fb33-4c1a-8ca9-08cdef38f409", "sighting--127c687d-8a9d-4343-8c88-8f311ddba752", "sighting--48bbc1df-cff6-402e-b669-05646285b3c8", "sighting--ee738017-ca65-4967-8df6-bccd9dfe1bb0", "sighting--d4382ac9-3617-4bc6-bba3-6f06b174931c", "sighting--4f41229b-97c3-4d1f-a322-e9d1bb3d1418", "sighting--7b6f1854-2c72-455f-a990-1219e68961e1", "sighting--1605c66e-519d-4c86-8752-06f071bfdd02", "sighting--ffe2d866-1d93-46bf-934b-9fac82500357", "sighting--0a5e3e98-d09b-4204-a36b-810a979c8617", "sighting--db9a3544-b492-4c32-bc87-4d8b11cfc1da", "sighting--90913b22-57c3-4012-a1f5-bf08db26c2b2", "sighting--ca4bdfda-5509-420b-805d-e91f8f1a6953", "sighting--19044f44-3f64-4b67-8670-be46c65405d5", "sighting--549e417c-ec0c-409b-aa4f-9681f9f71c8a", "sighting--290c4658-d6bb-452a-b665-346d3c08f44a", "sighting--de0449aa-077c-4341-b33c-01bd2e103f75", "sighting--983ffe38-5d06-492d-ba82-2568afb91db2", "sighting--a1eca8cd-5530-45e8-bd3a-8e5af2a1bdd5", "sighting--4edf9a60-6c33-44bb-bbc2-257311df4889", "sighting--d34ab85b-ba69-41a3-bb73-85c21d0dd829", "sighting--dbde439c-db21-4d20-9d4b-7a32dfcc6e58", "sighting--49723f7d-cd83-4392-b63c-5cc0e3bf38c4", "sighting--5ed01e88-82ff-40fd-8a15-cfb46b84f471", "sighting--68fc90f7-6c13-4726-a7cd-9d7a96f0d923", "sighting--c47951e1-885f-48ea-af36-6bf502ef959c", "sighting--b192652b-6cb1-412b-aa6f-ebc965ca2730", "sighting--d41f9a21-8d5c-44f5-a402-e3f3e24aad1f", "sighting--dad52483-c0a1-4396-9fbb-42854a27b39f", "sighting--22981e71-9031-4154-91f0-3ab9a1afd358", "sighting--4770d45b-769b-45e4-a2b4-9102b151c021", "sighting--68b0484e-2649-4966-afbb-35b41144dbf3", "sighting--c7c53d11-f7b9-4dbf-8ea0-73252288545d", "sighting--d8d9019a-7a80-43ca-874c-dbc4542146e9", "sighting--8a85475f-d8d0-4b24-ba86-5e4386bd38a6", "sighting--b316884f-7174-4693-8990-6b0637101e23", "sighting--daf9a8f2-cb0f-42e7-b5e8-1e58f97a8687", "sighting--a10bf9d6-3792-456b-abbd-143b2e6b5c14", "sighting--8bd9ef2f-79e6-46ff-81b5-bff45e0b6e0c", "sighting--d9809be0-a775-44c7-976b-a553b691e28c", "sighting--42babc44-f62c-4e1d-a396-b42361a17a04", "sighting--b4951e3d-9880-4802-b3cf-aa7d465555d0", "sighting--409393a8-7ad2-40d2-bc0a-87db832de5f6", "sighting--692f63a5-e172-492c-a422-b427cea37156", "sighting--3251859e-e87d-4ef4-ac00-d01b58dfe009", "sighting--c1ce873f-9e55-43e9-8104-f03666ea26d8", "sighting--19008829-857a-4976-97a3-6695e6fe737a", "sighting--4b79779c-95ee-4d08-b36f-ae67846ba5e9", "sighting--9d4b82fd-4c69-43ba-8cc9-4e863d6d0d7b", "sighting--656d391b-50ee-440d-a92e-9048ddf8b18f", "sighting--001b9e2e-9d40-479d-b118-d68eb61edafa", "sighting--d95cce11-a872-48ea-92ce-ee1b8b861c0b", "sighting--d4ab97b5-f9a6-495e-917b-19d2d50660f6", "sighting--0dfabd18-ba82-4c09-8bd7-a7d7f2f69875", "sighting--3c208e25-5cf7-448b-9cc1-b7ba7bf5689a", "sighting--bc203cc1-be1d-4f29-9756-296f221ce718", "sighting--b34a27c9-5baa-4cf7-9a65-09ba99348247", "sighting--1b6fb06d-fb83-446e-a66e-346f1c577123", "sighting--ab34dcf7-d2a9-49fa-b4b2-10f85c58382a", "sighting--d2cf7498-51bc-4e2d-9116-0a12381070bb", "sighting--7ee6e41a-5caf-46e7-b537-856ecf07f6c2", "sighting--3c7431c4-030c-46d1-a875-300de8a2cc81", "sighting--9f921483-45f0-4c93-a84c-52544c73916b", "sighting--6a6190df-e275-4e49-b5d7-6a607db5b637", "sighting--190bd31f-605d-40db-8b5b-5b03eaad7d1d", "sighting--43e3c21b-54f8-4818-93d4-be4a83f16b16", "sighting--e6f68d18-aaa5-4b75-9e1b-6e26ca4b96a1", "sighting--ea0af7f9-9910-49c5-9d51-d50dbd79ad41", "sighting--ff5d1ab5-5b37-4ab1-8283-7f3e8ec912e5", "sighting--f4a03521-5515-4970-91ee-22857048abb9", "sighting--cf6a70f8-ccbe-4859-8ff8-369f555fe725", "sighting--90caa1ea-99b8-4dcd-af6d-03a512315b01", "sighting--ed566ea1-9949-40a0-a5c5-8074722d4fc6", "sighting--7b610490-e992-4a7e-938e-a21f71ca648b", "sighting--aef3951b-9b79-4b49-95fe-0b80c431c90b", "sighting--bab32ef9-815d-4b98-9224-10468e98d6d0", "sighting--98696335-4155-422a-aa35-7a695c654d76", "sighting--b01ddef7-cc27-4b7a-8998-413f209b6d56", "sighting--ed018ffc-e70a-4ec6-9e7e-ac2718da29c2", "sighting--66fe1141-4b09-406c-a0da-4e8a523bdba3", "sighting--f7b0a2c9-3901-4986-a26a-465cc2eb182d", "sighting--4f86a623-03b7-4aa9-a9f9-bee1c86961b1", "sighting--a94d4e93-66c1-4232-9f74-1a7c129826c1", "sighting--596f31aa-c26f-4e0c-a7c3-bb91a24db56a", "sighting--c0e154d9-bc41-4ef5-8ef9-9d4fa32e2820", "sighting--df2f7cb0-5cf1-489f-939b-5cf5aa0ee83d", "sighting--1232f9c7-f54f-4eab-b479-09498694db14", "sighting--c242927e-d047-4a5a-aeeb-9ff05bf03906", "sighting--6495831a-09b8-4c2b-b2ca-e823f3cae1e6", "sighting--f1d97d91-2e25-410d-a69e-44b1b69e4b66", "sighting--d262239e-c483-421e-a99d-4c20fb952486", "sighting--1173b9cc-e304-41f8-b19f-35a27938436a", "sighting--25c63d31-8830-470a-a77a-3abd415a4730", "sighting--3990f5ae-6771-4171-aa0d-407fcae7b1d4", "sighting--e80f1102-e25f-4d33-974c-54ff13dad7f4", "sighting--b6b19d87-41f2-406c-bd84-7621be704579", "sighting--85fda0f9-5f40-4af1-8cdd-818d92f5f5d0", "sighting--74b5e11f-9eca-4517-9dcf-e69b8d05d247", "sighting--88a72752-95d7-450e-b8ab-be0539a66f98", "sighting--994b44c2-6226-4c4e-b867-301e8b7ed6fa", "sighting--bdcbc98a-4461-46f1-8e61-8222f5c300ca", "sighting--5825f514-8d8f-42f7-a2c3-e1b9d41d33bd", "sighting--fa30e066-c5d7-4869-8024-b45b9a2f950d", "sighting--7c84e2ec-1302-4e1d-bb36-0cac36226150", "sighting--cf98e874-5b21-4a14-8f64-5264a7ece445", "sighting--2e8db302-bc98-434b-961a-a76d46c60c86", "sighting--cdc731bd-62f7-4c9b-8d0b-d6d0c0b64c77", "sighting--8a48c703-dabc-4348-9f41-70361c47b51d", "sighting--a2264d78-3062-48d6-8849-49c325269857", "sighting--3501dfc4-c63b-43e6-8237-9de5d39393b4", "sighting--8e6f36b9-86d9-44f6-92f2-6d0391f4f103", "sighting--dfd677ed-4948-4dca-9ea3-0f63490ad018", "sighting--16ce4e76-2a67-4d19-84bc-7de7b9eebfd7", "sighting--5eb1249c-02ca-443d-9c1b-45ebac06bf90", "sighting--019f9d05-44c8-43b6-9a0d-e09ee9314246", "sighting--9c6713c6-3830-4ad7-ad76-ad3f84a3d30b", "sighting--6cc6d1d3-72e5-4926-9d2a-0538d3f838a0", "sighting--62da6b7f-95e1-4bb3-83f0-9b4872618a2c", "sighting--d4e1022a-99b5-4e4e-9271-fef218a665f7", "sighting--149cfa64-7f66-4287-bdf3-017d3cc5a502", "sighting--a5930484-96c9-43b7-92b0-a243e4fcff66", "sighting--82b9bf61-1511-43f3-af96-f5f974fb1e8e", "sighting--b6201a70-f167-4b3c-b1a3-93464065a48c", "sighting--1d0fc93b-b8f6-4caf-841d-37532740eedf", "sighting--62e8d3e0-ed53-4392-9802-5f448513e368", "sighting--84c99476-fab9-4bb1-957e-51bd2896e88b", "sighting--983a8e20-d14c-45eb-b6d3-45efb557a03c", "sighting--36ab6c28-ed24-4c6a-83c5-58ab37f38867", "sighting--28146955-e8f5-46ff-b6ba-509814d71d92", "sighting--baf63731-66ec-40a4-91be-a66f0d397e4f", "sighting--01818d85-43d7-4cf4-87f9-f09ef437930b", "sighting--4cf56a47-dabd-4dc6-a24b-2aff8d9266b5", "sighting--480011f0-072c-4175-91d7-137595344350", "sighting--0db1aef3-14aa-4df2-aaf3-b9e7affd0e8f", "sighting--dd18d169-c9bb-419d-accb-75a234d63f61", "sighting--f9184f34-1cbd-4acc-bfe9-f2153c0869ca", "sighting--ef38f4e4-6a10-42b5-b6a8-c1c975b8d585", "sighting--f3a0f70b-f43c-4846-acd4-07ceb3aee257", "sighting--f4375960-9568-4c4d-a3db-e81f797b6283", "sighting--b44ceae7-adf4-4a2d-a6ed-4a63592fbba6", "sighting--9e20e226-336b-4252-8b50-c3b8faf1b2b1", "sighting--6cc53a89-a144-48b0-ba76-4a5d72703870", "sighting--8a0ec634-8216-46f1-abd0-910974fa31e6", "sighting--31316a2d-b374-430d-b028-7d382124d0db", "sighting--ce648989-73a2-4d15-9864-d9b08f5e8b02", "sighting--a10c0034-99c0-46d7-8c29-55899c14bb4c", "sighting--2d68ad4a-34a0-45e6-a80f-3452fb031ad8", "sighting--3442097c-8412-4e86-8617-075d252c60d2", "sighting--d0e70bb5-7741-45dc-8f62-6a6a8fa8e43f", "sighting--2951b90c-83c4-41af-b5b8-e49e19daf5b5", "sighting--673333fa-bf27-48ed-9ed6-ffd0b63831ff", "sighting--e5fb704a-0e0f-4eed-a0ff-82c17ebbfe95", "sighting--8007d291-1184-4536-81cf-d8add2a0fa8e", "sighting--efe4878d-8d45-4a68-8919-529003660302", "sighting--cacb2b08-47ab-4bc7-9519-f967e38881a8", "sighting--bf5e6365-38f4-49c0-baf2-19dbb5463d06", "sighting--f459d6ba-4c1c-4e72-ad38-838d184a9659", "sighting--2d05dbac-c754-43c2-a5fd-8327ca36a440", "sighting--320eb48d-5cf2-43b5-a4b4-8f2580c688ad", "sighting--8c92b782-1062-42e4-86de-994e3b6a6f0e", "sighting--6dc63b86-0ba1-4070-b2ec-b4f865a80121", "sighting--9b9f5a57-2376-4171-b908-4c3f745ed922", "sighting--1b1b1f99-2e5c-4c44-92d3-fa90783421bd", "sighting--b0a5bbdf-70cf-4969-ad1f-6e662a3671d5", "sighting--19365d09-6faa-496e-9e68-f1b47ce7c5b8", "sighting--54ba2497-4a47-4d62-813b-a24862807780", "sighting--0f7b0703-98c7-4ea5-a8ac-2e5c915ba5ee", "sighting--1e051699-c30e-4f35-b243-0ebeea54eb3e", "sighting--f68954f1-4e4b-4c81-9ae2-a68f3f6e4b5d", "sighting--fa099e4b-3233-4028-b59e-c4cb910a0697", "sighting--6603fdac-4055-4e02-81be-376fc4e8acad", "sighting--eab019a3-3b95-4db6-a2d5-ddfb3e429244", "sighting--cf0fb48d-0d54-40c0-aae2-7627f0f972d4", "sighting--db2ca11e-6548-4f78-baac-cf5aec2705d2", "sighting--4028d2b1-adb3-4d58-b27f-88e93e65a822", "sighting--e0763052-e675-4cdb-a95f-3bbd2d47375f", "sighting--927da9f8-fcb4-472a-a96e-a230ffe52071", "sighting--081bd75e-902d-42cf-9361-2f78ca32eec6", "sighting--6f88a085-71d6-435d-a0d6-2b3454bc4a1d", "sighting--397a908e-3797-4dd8-b118-f5c10f808b9f", "sighting--c1a87d6d-86aa-46f8-9c56-75860bf3fe16", "sighting--f8b9cf6e-6fd6-41ea-b74f-6d18003250c5", "sighting--15bcf24c-eaa8-470d-afb8-02d97bc13c1d", "sighting--f9590811-5915-4500-8ae5-0c4690e9dc75", "sighting--9b5c53bf-c519-4884-bce7-4b58b66ecc5d", "sighting--45566e63-fca3-45b2-9d34-516f0185ef71", "sighting--2a31a540-b74d-4113-ae39-a423820affef", "sighting--b9751ae6-6613-4a0c-bfe5-13d05afe68fd", "sighting--42ee5b11-9d14-41ff-a150-211be880409e", "sighting--c6174762-df62-4e76-9cc9-7c2edcc07ad7", "sighting--a9493d11-73e8-45bd-a9f2-6f0a41581876", "sighting--a49bd0a8-3cd1-43e4-8b4a-60b0d40575c1", "sighting--f4eadfd9-2c18-4510-a603-de56f73617dc", "sighting--7530363d-b5b4-4633-96a2-e8cf9f7f04ff", "sighting--594fd183-cae2-4efe-8cf8-11e63b9a56ee", "sighting--1cc6565c-35d0-4b28-99b4-d2ca83de590b", "sighting--8a76336c-7a25-482f-b241-8350e0bd05d5", "sighting--f079bceb-908b-4aaf-a0e2-105ab9dd6f74", "sighting--8267de06-4ca7-4e3b-9462-24fabca64316", "sighting--b0a4dd21-022c-4dec-804e-eea7f9728958", "sighting--1656fdef-81c8-4fe1-b93e-7fa6d2827144", "sighting--04af4d3a-33f3-402f-8eae-694735a18054", "sighting--e054e4dd-1d0d-401b-b230-8e82cd6e3f68", "sighting--4029bd39-0a76-4f30-89ad-b086a45e334f", "sighting--5d9b12d4-2ab5-4986-8e85-bf36d90c2eaf", "sighting--7cb0b767-c6d1-4421-a257-0119a5845be0", "sighting--15d0386e-7b47-4805-a510-03a2b5edc66e", "sighting--f95455ec-16eb-48f1-b241-d40318cae32e", "sighting--b4490470-f74d-4d68-8e3e-1bcf64ef9dc4", "sighting--57e9550b-43a2-43e8-a2b8-03352cae3e8d", "sighting--be02c33a-8b3f-4714-9fdf-1fb7d17854b9", "sighting--8fec28d5-1032-4065-9830-2c7e8ee8693a", "sighting--8ac74f0d-69b9-44f1-8859-d5911d827ded", "sighting--ed3b51ea-83fe-417d-a607-f5ab520b6e58", "sighting--db7b5b89-e5eb-4617-a68c-437926ae15ba", "sighting--631aa0b9-51af-41b5-bbb9-b42c8e5e9c8a", "sighting--12bddaa3-e3d4-43c8-ba98-0a352c58d0b6", "sighting--b991c201-adfe-431f-b150-3a6283a5bc72", "sighting--d1b6be81-1b8f-4763-b2ae-a02bf71af50b", "sighting--442581e7-2231-49df-9cc0-dd2659f9b58f", "sighting--6251e724-363c-4e68-8028-1b43c0b17b7f", "sighting--3f2aeec6-c768-4aa1-8559-d2d01d1423a1", "sighting--b3d1e5ba-a198-4ab0-bfcb-4a72265e0c56", "sighting--3ac847cf-d5fd-41ac-b854-5ffc3421c280", "sighting--12303885-05a3-479f-9d4b-8f7c15ccb648", "sighting--79eebb38-5807-4de8-b210-05d9b6f0c927", "sighting--d105c328-e3a0-4d99-bb1f-270ecca4832b", "sighting--6c3bad86-d9fe-45d1-a306-faae163a6cdc", "sighting--42ab72e9-3e15-489d-a419-20e34bc276c3", "sighting--f056ddc4-156a-402e-9186-b5fd4f3e2ee3", "sighting--26cf88d3-89d6-48de-a69f-9bfe428b7491", "sighting--54f834aa-8d96-4930-a5bc-e1701b060dbb", "sighting--08938c0f-a703-442a-9163-7d8fc27f1655", "sighting--7848fc1b-daa8-4f12-8a52-b377c04b118f", "sighting--60d5dab3-4d17-4d8f-bd84-d25b02bcf5b5", "sighting--486c1823-e65b-498d-9566-9421c49590e3", "sighting--eb069b02-a3a6-42f9-857a-3b7e5008a5b9", "sighting--c79e1752-ca95-4317-a5f3-9711b0d1c7ac", "sighting--6a5c8a31-86c8-49d8-9d09-462ed7b63886", "sighting--fedf9080-632f-4537-a35f-c83523347588", "sighting--b9dd797d-b902-4fd1-9f6e-cb6969d4614e", "sighting--8d925d5d-e44f-45d7-8e1d-af08c8e96442", "sighting--2fc7209e-f2fc-4e80-b163-9885f7138ec0", "sighting--01988a01-c6c3-4355-95e4-986b7ab19e01", "sighting--9281b840-ff4e-4662-a9c2-6e51efffaf71", "sighting--1d5571de-8b43-437e-9e42-fd3c383795bd", "sighting--7c37ab7f-7f86-48c8-8552-3330887fdedf", "sighting--68f359d3-4bd2-4d71-819d-aafffef72624", "sighting--2f09a52e-75c5-488b-8f44-3cc6930868ef", "sighting--1b758e28-52ef-442a-9f72-b2bfda1682ae", "sighting--871f812b-0dba-4308-b2be-b47f818e3503", "sighting--8658e579-86a5-4963-92b3-61a119fc8d00", "sighting--7ae6545e-6f71-4539-b061-157767cd5779", "sighting--5ccc78e0-da01-497a-863f-6066f1496e26", "sighting--96e24892-59f5-4e6d-8b33-3d726b48de3a", "sighting--8dbe5fac-024d-427d-8028-83292cc36dba", "sighting--650f091a-a4a7-4572-b208-d2b937f4c0a9", "sighting--346e1b91-de88-4bba-ba6a-cd2d2ecedd9e", "sighting--d32e46f7-7cae-40c8-a88b-27195be879c4", "sighting--416e3197-15c0-451a-bc7c-dc05afa0143e", "sighting--75a1b9a3-350d-4be9-95dc-66740e9643d2", "sighting--706fd5f3-298f-434d-a560-ce23f8e050f0", "sighting--a553da9d-dbb8-49d0-91b9-e93e9308dbdf", "sighting--1f7471b4-7247-46ac-9727-15c1cbcaed94", "sighting--10567779-842b-47a4-bcc4-db5bf2ee44fc", "sighting--ed25beee-7e04-4bce-9436-539544c13814", "sighting--613d381a-3bfb-4a93-86e0-d3bf37fca99b", "sighting--1d5cf404-4974-4b6e-944c-de608fc88a1e", "sighting--c1026e09-bf05-48ef-842b-716ceb6f8dda", "sighting--5853ead8-cda9-4539-a6ff-134d8d4f3cf0", "sighting--05bd2c56-c53e-448a-962f-7c5bb1470026", "sighting--53396855-d4f3-4986-b4e5-00be1c6f20ee", "sighting--79a01280-1e48-4ef7-91f2-161ae295d0b2", "sighting--902b07c8-291d-424b-b3d9-a3efbdba3dd1", "sighting--f136a933-55f9-486e-8d92-8cafbd2064a9", "sighting--ed7ee018-38e2-4457-b2ff-df812d2cdf79", "sighting--f52daff2-7591-4b70-aa84-1174fee78681", "sighting--bff974ea-a759-492e-9750-768721ab8079", "sighting--dc89fe2e-5840-48ed-b214-76f84e61ae9f", "sighting--c48d9fe1-5736-432b-9713-291f263a2636", "sighting--2c9018af-efaf-4d89-baff-fedbdf2a14c9", "sighting--e4f46ce2-c040-4033-b543-021e6f5df82f", "sighting--dea42f89-1574-45a0-b287-731764bb9528", "sighting--419171b5-c629-4685-9d04-ef1058fe5a54", "sighting--db8c4453-4d77-4c01-946c-6fcbfbe9e334", "sighting--0e572845-cb71-4531-8be9-68997d060a45", "sighting--008a466c-b90d-4067-bb37-5259a2d23c9c", "sighting--8e5441a7-dcd5-47b2-8d7b-a773293632de", "sighting--c0371ff6-314e-4543-b8ce-10b8d1fee1db", "sighting--2bbddb2a-8ec8-4961-842e-794360051dfa", "sighting--9a481000-e949-4e68-a47e-b6db1234aa88", "sighting--2a609ace-91f7-4dce-bf39-59ab9c428bde", "sighting--d3839c56-7724-4f6e-8dc3-a7c7f648c1cb", "sighting--131fec38-9de7-4236-93d5-4b770c525d36", "sighting--5374ea10-63d1-44b9-87cd-3ce53dd0cea0", "sighting--b5b05d39-0e9e-48e3-bd66-aed3ff6cdc73", "sighting--9501d163-8685-4682-848c-b609c78920fe", "sighting--6a2a8cc6-a572-4732-84c9-d75591c8fc9b", "sighting--f58b363e-192f-48e2-815f-49477b3c3a86", "sighting--cf0aca67-a8f6-4142-a39e-916daa46419a", "sighting--fe798329-9513-458f-a006-470750b4687d", "sighting--d5a2458c-5cd6-409a-aa2c-170a3e1de3eb", "sighting--91a5294f-1394-43fc-9a93-07294cfb3d5f", "sighting--a568dc13-9653-4a2e-8179-bd557eea0307", "sighting--2c10b600-2447-40a0-bf74-fea00d7b5077", "sighting--c9db82c8-49cb-47e6-83b8-f387905ba575", "sighting--42969633-c6cc-40df-b133-bcf963c335a0", "sighting--150c6cb3-49ea-4e1d-ad88-4acb961ab506", "sighting--f12cd0aa-40c7-4492-b16f-1cde47c26bb8", "sighting--a22b6323-2848-474b-a033-4b53d57ef55a", "sighting--4ad1ae37-a174-475f-8e58-b0f8b575f577", "sighting--23d631cf-68de-4811-aba2-4d77b03549be", "sighting--a58efdd4-966e-4ddf-a77f-2c2ce6084cef", "sighting--81cb35f9-660a-469c-a259-daea7b2c0a99", "sighting--44a1ce64-a5f6-4641-b9bc-eb7df1d948f6", "sighting--da8aff4d-43dc-41ca-9875-8d91ede2b8a8", "sighting--22d344c4-d8d7-47d8-9da0-851f265c216d", "sighting--07d2b858-9a89-4134-8ae8-e9db46ba9895", "sighting--80b43f53-2247-48b2-b4a3-8909c292014d", "sighting--000e05cd-2f3b-41cf-87fa-113c6f833c7d", "sighting--628a7ae8-72ca-4050-b2a3-c8b144880625", "sighting--0d8c460a-59db-4217-b4cf-31a540242403", "sighting--9a8ce4db-91d0-4a9e-8bf2-27b121a0b8c2", "sighting--e70f8808-4176-40a3-a8d5-13850cc57b07", "sighting--464ca6b6-e5f7-404a-aee6-5efa5b5ee242", "sighting--edf76b3e-77ff-46f9-9334-c295e5359e02", "sighting--c65e6042-0871-4730-8767-effe04496a8f", "sighting--37335775-c292-4b53-9165-13b406d18bf4", "sighting--91d5430d-e1d0-494e-9658-af2401355a4a", "sighting--87404072-0504-4f44-928f-e99b48adcff6", "sighting--c0d8a275-6c32-4823-80ad-11941a43aa77", "sighting--2bdfbdff-45a0-4621-9765-3a9b5ec8511d", "sighting--a5610e28-7c64-40b6-87d9-97e4b9d028e6", "sighting--5e7213c2-09fc-461a-a53d-97befdf11144", "sighting--8ddd78a6-98f9-4362-a62b-7ac88ce22aa9", "sighting--8f91063e-2da8-4da8-b9f2-0fc6e34282a5", "sighting--7b629e46-465f-4e41-bec9-5c2190dd3751", "sighting--6afd8923-981e-41a1-b7cc-02d9a1789333", "sighting--a8192796-529f-4921-b9f8-ad6e0d2b2eb1", "sighting--85423c99-6f3c-4a30-bd1a-f3c8f7e87b69", "sighting--36fe88e2-a328-4c40-95dc-4944eaed8840", "sighting--dd7e6998-ce1e-4225-8f39-f0548e636106", "sighting--24b714d0-2bd1-4bf0-99ca-285156a42d39", "sighting--e5c9e113-cea6-4e22-a72a-0de534d055fc", "sighting--331ecc21-3889-45ab-82cd-ded79858e0a5", "sighting--4d590fd1-b881-489a-8332-ba62e42d55bf", "sighting--e0d2016e-77d2-4a38-818f-5e5c7ae2d9a1", "sighting--bb740f74-2762-4e38-b587-af091f71fdd4", "sighting--4e226acf-ff51-475f-aeee-92d745c76281", "sighting--6bc2b540-c216-42d1-adda-3feceb4f44d1", "sighting--ebb01564-2eb5-463e-bb6d-a6fc709f3c19", "sighting--50b3edf9-fd77-48ee-b2c1-5d2e850630e9", "sighting--3820c37c-99f8-4870-878b-4343acefee64", "sighting--14f9d56b-22ac-4952-8a05-392946331b36", "sighting--fdd8d66b-68e2-4f86-8d3c-5b4514ee4734", "sighting--7eb2f468-4e72-4b87-825d-1a4cc986ebc7", "sighting--77fb376d-2945-4a1e-a271-45c5ac370e9e", "sighting--d9c28d84-2bc8-4bf1-ad0b-9e018ab4b39f", "sighting--a2a5411a-3934-4e8b-923e-a62f85c2c04f", "sighting--5f1a3f20-736a-4218-ad3a-2ac5e17d8619", "sighting--df460887-fa5f-48cd-8cf4-40be3c20257a", "sighting--f1997e68-77c6-4c4c-bbd8-97323884d58b", "sighting--beebaa02-b8ed-47bc-9632-e54c654cbd35", "sighting--7a291197-0959-40e0-951d-804710fb4ced", "sighting--d89acb68-589e-475a-a9e4-90ab082f5fab", "sighting--ea5fc8a3-704b-402d-9cde-29bdba146947", "sighting--a0a7cb46-508f-4e2e-a681-ec7efb89ff8e", "sighting--b1072f56-bc1e-4c23-b6f2-4a0b7c5f1ffd", "sighting--903f7748-ccad-4f19-b33e-2781e437bf34", "sighting--55e92585-d96c-46b2-b49b-3fcc6e820afd", "sighting--d195e41a-3f12-4dc7-950c-ef8e960cb430", "sighting--fb5d1ef1-d6b5-40c8-aea3-b0a456fac314", "sighting--14ee685f-3936-4f36-a73e-11477d8bc481", "sighting--cd0fb663-2099-4448-b4ad-ddbf7fb4904c", "sighting--bcdf6a27-9f72-4848-9935-ead50f1b5c3b", "sighting--3c90c003-2131-4d94-834a-2962f08c52cc", "sighting--3cb8c218-fa2e-419f-a722-00a06573a810", "sighting--3cd07e18-12dc-407e-b25f-544b32356db9", "sighting--b0cb3e51-fc04-4eea-bd9c-a21c9bd9543a", "sighting--c73a6ffa-cf16-4db8-a28d-500f15f31cad", "sighting--79354fc8-1938-45ed-9f75-ba1da8db129a", "sighting--ea2ea16c-879d-448b-8ed4-7d024a7ab3f2", "sighting--d0834658-9413-4be6-95ba-a70b262940f9", "sighting--f53f78da-540d-4208-a292-50616949a5e5", "sighting--8d8ab7a1-c388-4d0c-b904-3869fa5d8a4e", "sighting--a07c5113-2eeb-49cd-a30d-1fd3abc3efd6", "sighting--991d0536-2807-4068-a7fc-276da57b8c6b", "sighting--2c3db04a-6731-4cfc-903d-e506ac7b51a1", "sighting--de8f3d85-389c-410d-b263-01448fdd43db", "sighting--49dc96e5-f161-423e-934a-e5b0f8112093", "sighting--c3bd20b1-316a-4abe-bdde-caf62d63a3f7", "sighting--84e74173-9bdb-4772-9f63-95f1d8ae0317", "sighting--a5cb8f79-5dcc-40d4-b301-feebe23b6d12", "sighting--fee12603-9d04-4ceb-ba31-62c8fe282356", "sighting--665eb0f4-ff3d-4347-840e-65edcbf41c44", "sighting--d15dbd34-116c-4cb3-b894-a28e13e5811d", "sighting--be8a599c-e418-4306-bd68-ba82810b751e", "sighting--448d3659-d767-4917-8826-75e335200241", "sighting--a3a1ecb5-f812-42f1-aad2-5d749cfa0768", "sighting--0d8deaad-99d6-401a-b3e3-a89e0b37ffd9", "sighting--a2f57c46-08bf-4af7-9911-42c304d28efa", "sighting--6b1e2c91-837c-4b85-8f38-c59bbb44d83e", "sighting--35f5859c-912b-412c-8a4d-101455dac28f", "sighting--f66d94bd-f0f8-4611-98fd-23b651b1751b", "sighting--821383de-2362-482a-bbb9-3aab574849ea", "sighting--7038c8c2-ed64-46fc-a0b5-e8a93a9b2e25", "sighting--f5c124fe-ffd0-4a5a-af38-bcc0eb692edc", "sighting--253788cb-e44a-43e4-84bb-27b962101780", "sighting--ba1aed37-c371-4ec1-8132-dd3141faea74", "sighting--0d7ac5a2-e160-41af-a632-a137f09c288f", "sighting--95cec422-3e94-480a-b938-13c7852b748f", "sighting--6abec5a6-3aec-4193-875f-9e6a105f0956", "sighting--f5f87941-7d0e-418a-8988-643a6a831edc", "sighting--630fb5ec-f687-49f6-ba9d-b46dc52a864a", "sighting--65c80a2e-8ffc-40f9-9216-0bb28da094e7", "sighting--ae202428-17c4-43db-b907-037e86836f47", "sighting--9042214e-8cbb-42ce-8007-6190d9fb692d", "sighting--c15fc8e6-e103-40c6-9aeb-71af6193d4fe", "sighting--6b836b31-48ea-499c-a312-48fa13878945", "sighting--5de5c099-c431-4c67-ac0a-249cbacd177d", "sighting--7e2dd4f4-713d-4446-aa59-b3d81661e44e", "sighting--cb54454b-650e-412a-8615-74ecfce58b7f", "sighting--42a32f3e-c033-4870-a058-6e19d6e4c862", "sighting--40df716d-be78-4638-b706-b9c4c6a66ccf", "sighting--5891b3fb-2f33-4574-9e70-93fc0fa49e0b", "sighting--765385ab-61a8-4c23-9bdb-e6cb75393533", "sighting--7033812b-d601-4cf2-9f0c-c2fba3f17b70", "sighting--82319406-f8d7-4a9b-bff1-22ebfb14ec0f", "sighting--2377edab-3051-41f6-94a6-772f2589ea1a", "sighting--1494ac52-bac6-4912-9f4d-a9e5d5303b47", "sighting--66498579-0915-4419-833d-aeda256318fa", "sighting--9036e1a6-e92e-4fb1-8a3f-6269bc7985a3", "sighting--f585ee47-fec6-41ee-9bcd-af1ce562288d", "sighting--49c85b29-4a00-4f68-a87a-33196e2c4a4f", "sighting--7bb1ec67-4978-41f4-9fce-b3ca78d13d2e", "sighting--5965d498-aec2-4309-ba04-42ffe609c155", "sighting--a0a36683-f21f-4e78-9484-34ad933412db", "sighting--d623cca1-843f-4ad6-b609-41f39b039eff", "sighting--c6822c71-6213-406b-8219-71350e9acf8a", "sighting--257eb637-3f95-4e32-8245-2152eb064983", "sighting--cb2c4c4a-b97c-43fb-a7cb-e94fafed9d5a", "sighting--722447b4-80f3-49b6-a776-a4f2dc57e89e", "sighting--324586eb-744f-4324-8702-7dd3e385dd40", "sighting--b74661cb-c8ec-40ca-a293-52401f508c1e", "sighting--2eb388d3-cbf3-42fd-94d9-45dec9aff196", "sighting--289a25f8-e314-41dc-b1e9-70d4a48f9091", "sighting--3d5b0e17-2193-49da-b7d4-3f8c874bab9b", "sighting--b9cd7790-af21-4b62-858d-3089045f4478", "sighting--f342b518-c64b-4099-9fc3-0fd3b3c91bcf", "sighting--893f7a03-6065-4176-b685-e7df53c39907", "sighting--267096f9-f64a-40cf-85ea-badccfda3944", "sighting--a85c8b3a-a961-4212-91bf-2c50420cc8cc", "sighting--db5afdb9-41e3-4a24-b6f8-1623a5e14758", "sighting--41c1aa4c-82ac-4ffe-8c12-08af1dfd76a0", "sighting--97856e8a-d510-4b92-bc6e-b615b340b2ef", "sighting--af09eaaa-4bbf-42f3-a086-0221bd3310a1", "sighting--5431eafc-bc92-4f24-80a0-511cd34e14d0", "sighting--62e25616-0e87-495f-8a38-c46085dee6fb", "sighting--b0f09067-1372-46d4-b9ba-39e89684a9d0", "sighting--612e9937-6dc0-4ec3-a343-a63ff0212972", "sighting--c266295c-b91c-4575-af53-505eab4ce56d", "sighting--9cebe5cf-8fa5-4501-bb26-7cfc9e22ae70", "sighting--58c1db2e-de5e-43b1-a5b3-e5bf1e0b29ab", "sighting--89222bc3-6a1e-40f2-b162-11278aca1627", "sighting--eee90fbd-4600-413a-ad8c-7066c4779e5e", "sighting--19756b3e-b055-43b0-98cf-e8b0b1ec1a18", "sighting--810cffaf-bc71-4ee8-9940-1bd27f3e3873", "sighting--57522381-e714-49bb-9766-3773eccb4778", "sighting--baf79616-3f4c-4a02-9868-141dfe2820ca", "sighting--05aa83c0-d92d-45ba-b57d-be0026a0a010", "sighting--8f6c3233-8db0-4d45-a38f-134c83c30e29", "sighting--ee4287d3-f809-4d51-a613-b92de9f9fa44", "sighting--4c5d797e-ddba-4d60-8d24-a158201ba143", "sighting--04252154-d196-4bd5-afd0-bbfb1396bc3e", "sighting--be493aa0-db0f-4cb0-8e78-5175d69cf711", "sighting--1fc29479-6064-44ac-b1f4-56840cf586be", "sighting--8c04f980-a508-46ae-b316-091360ad2eba", "sighting--4a89f97a-cfb5-4f55-899b-55bf4e710aad", "sighting--9da83f3b-f5bb-4826-9001-0f370cb2348d", "sighting--487d74f4-c5de-4475-bccc-60180c00d777", "sighting--d60df2e3-3e1a-4d99-9802-519287614284", "sighting--2d57204d-283d-47cb-960a-3ed0c5f7755d", "sighting--6fc46e7f-7d9f-412d-a392-ccd4c1c96376", "sighting--5e44dac2-7220-4336-8daa-d656a2d3f86d", "sighting--150a3da8-c51b-46b0-a6b7-103f2f099b31", "sighting--f0e2d35d-d63c-4c1b-a6da-1b5eae60f857", "sighting--d9cf0269-dafb-406d-b365-bf51bff6df85", "sighting--290874c2-f682-4597-bb41-bb8cd0154d0a", "sighting--486ab0bd-7b3d-4716-8fea-4f0fb43b00be", "sighting--cf16b9d3-2915-4b76-9407-5d3f80eb1fab", "sighting--e8c25c51-132b-42ff-a380-8b5c3c1f3adf", "sighting--ff3ac1e0-ce4d-4fd7-9fa1-1fdea3a2d943", "sighting--29d5cbbe-a591-491e-9f98-db47223b3270", "sighting--6f4af645-274e-41f4-9b26-3f46c71c9664", "sighting--e956a236-6100-43fe-b219-1e2406146365", "sighting--706c27f9-aa95-4192-9bd4-38ac08db3d5e", "sighting--44ca782e-bdd5-4e8d-90b0-f5796efa681f", "sighting--7c16df35-39fe-4ed5-b5dd-48fe61da6098", "sighting--cdc36c73-08cb-4957-b32b-5a5e93f4d9e6", "sighting--c0c69c4e-aba7-46dc-a9bb-46785f7b04ab", "sighting--a3131cb6-63ab-4208-8877-fff755024bb3", "sighting--25dd7583-d95c-4f13-898b-52a5b5966310", "sighting--12014708-b14e-41ce-9023-d5f1376fc56c", "sighting--9dd2558c-fbff-4c14-b89d-25eda26751d9", "sighting--1ad60925-697a-4e39-a49d-8da1d0c30c64", "sighting--fda007ce-f418-4301-b741-55cb8d535d9f", "sighting--345aeb6a-abfe-4ee3-b3bd-0af12900ed23", "sighting--cbd73cd2-69f4-44f3-aaba-178dc7aa921d", "sighting--ace370aa-56f1-4ea5-9cdb-556923c33579", "sighting--d190ed46-daa8-45bb-9d88-10baa7dcadeb", "sighting--829d2436-8ff4-434a-a6f8-7af499072e34", "sighting--331bfd9c-ad10-4f6d-aba0-7d8e66c1b258", "sighting--1f8acb00-31cd-4029-bbe9-200090630a74", "sighting--defc5dfb-6c94-48e6-8ad8-90c0d9053b5a", "sighting--12442ba2-fe2d-462e-9f7d-4dd9623829cb", "sighting--6ba67fe9-4272-4856-8cd5-6b02dbcd9608", "sighting--f29c4dc2-062c-4b4d-852d-e2bee6aae9fe", "sighting--e53ffe37-1b17-4412-8dd9-0d69d647cae0", "sighting--631f97ea-e60d-49af-9822-885f239e0e1b", "sighting--f620f8e5-0c5f-487e-89a7-c2e75c3f51e5", "sighting--c6069457-d130-492d-96c0-8620c211ee9e", "sighting--06693e5c-4b33-4923-a653-a74ea89111c8", "sighting--e12ba52f-188f-497d-8b97-dc66c60a5f11", "sighting--983ad56e-c167-4d2a-aed4-9920cdd71bdb", "sighting--819ef028-fcf1-4691-ac26-bae21d77d4db", "sighting--3f9739ce-0a47-48cb-b0d8-fdce1360348d", "sighting--31592356-0dc8-4013-b4e7-5fe39488cbaf", "sighting--776716a2-4c3a-46f8-830c-7f5c0a07c555", "sighting--d1be6806-9d0b-42a6-8c7c-b8c2c11ea312", "sighting--b4a160b7-1c14-4e4f-ae5d-192d89da56a9", "sighting--92c67f15-8dd9-4961-8647-a7643641ddb1", "sighting--06652f93-6c91-4e2b-9d0c-425b41b84b82", "sighting--b4c65ae2-8278-4f92-98d2-f934c218e5b7", "sighting--4a65acf4-db90-405b-ab95-761e0f2c8f0b", "sighting--6c2961b7-60ec-4aff-b019-c5cfa6309225", "sighting--f789b158-2117-4a8e-9922-e2195a3b509e", "sighting--317582d8-1930-4e28-842d-94019db07681", "sighting--36b922f8-0290-470e-ade7-647318dd9326", "sighting--3be5ac74-1d44-4340-b7e5-199d2ae451a8", "sighting--38100d15-aae8-4d57-93ae-b9a3e2b5f79a", "sighting--0585daa8-7a29-4cf2-ae73-7f03f8c0bcd7", "sighting--daec011b-35f7-4d87-bd15-37a43505ce6b", "sighting--ef6a36b8-79c8-4976-abc9-ce56dc6ff5dd", "sighting--c873acb3-9d55-4a03-9bcc-f46cf296efc3", "sighting--e89bb452-55d4-4dc6-8fbc-8cf283ed2e8e", "sighting--d465b2ef-2ca5-4536-8469-791286224172", "sighting--e8e4b495-5be0-468c-82f2-2978c7ff8421", "sighting--bdac6cba-459b-4906-b8be-14af59bd00d0", "sighting--45eceabc-6009-46be-918f-14f5a1395938", "sighting--c6cc80c6-efa8-4cbe-820d-6a259b7f68f6", "sighting--5136511b-5ffb-4a05-8e99-963a0b7ee3dd", "sighting--e3417dd4-eaa8-430f-953b-483ca341deb9", "sighting--3c91cb63-9d83-421a-ad3a-451ecb2695cf", "sighting--313bb026-5047-49c7-9219-dedc033e28c1", "sighting--46b4536c-8122-4428-b986-80059934418f", "sighting--23f1e761-4172-4624-9857-f903ac30435b", "sighting--3fb7d2d7-870e-4d7c-b9e5-1dfda7842b07", "sighting--8fcc77c9-f16c-4ecf-ab18-6367ed110d18", "sighting--de776c14-acbb-4afc-a2eb-76b54ed9da6d", "sighting--9be3e036-f72a-45a9-95fe-332c56e791a0", "sighting--96034bae-4743-4cb6-b818-7297de649a80", "sighting--88bb51b1-9841-4adb-a9d2-8f152f2351c0", "sighting--bbb2a7a1-8938-4445-a035-4de7c6e626bb", "sighting--ca657e96-3ceb-498d-855c-b3675f11b0cb", "sighting--7760a8d6-2f80-4975-bb90-79638d88896a", "sighting--db71e4fa-a442-4da7-ab7d-7c4f634e72c2", "sighting--5c55f354-db80-45ae-bba3-87a4e26749b1", "sighting--950cff02-3c2e-4de9-8578-4ba29674eeb8", "sighting--960fb944-4790-4b1a-ac9f-669516db5eba", "sighting--1d974a37-25b5-4d27-81fc-5e69f7ed0d2f", "sighting--f07d190a-7ba1-46b4-a7a0-18be3b802108", "sighting--4e316faa-7966-4150-ad92-dfd8ab718f08", "sighting--ddf2c2c3-7a2e-405a-a0e7-eef988a18ff1", "sighting--d9be51b4-9f18-4c6e-9f98-ea8579fec5f7", "sighting--f1bea257-635c-4074-ae0b-f17eeebee14b", "sighting--533f3206-51fa-4d90-b0d3-75efd40c0e85", "sighting--4853e187-a0ec-46b2-a27a-704aa0ad63b9", "sighting--c4967e14-9f7f-4fd9-9c7d-e61c7eacf440", "sighting--eb98719c-198b-4e70-98b3-bc942eac4382", "sighting--bc51c772-e2c6-46d5-8e20-9b98bad99a9d", "sighting--a03018f8-8ca6-4674-8fc8-58b99f397629", "sighting--00d981f9-fce3-4015-807a-02e48d7dbe3f", "sighting--87810fb4-74e7-4336-8a97-b82550103bb6", "sighting--228d9cf3-3053-433b-bf45-b6e6568e4325", "sighting--e279191c-7e75-4e2d-8635-fc1d70b3b347", "sighting--dec0021e-0a21-4051-88b5-0a75b2fef1d8", "sighting--c9a64803-2b94-4ffc-b55c-d8b41e49cd8e", "sighting--5fca1d2a-3f7c-4c7f-8fd7-ae18d0678686", "sighting--4e0394ae-65ff-44af-9de7-336e2b7b5b7d", "sighting--c1e1b044-e2b2-443c-9074-2eb846b0f36b", "sighting--d604b43e-cf49-4d02-b680-a57cd62be1e2", "sighting--4a0596f8-9ed0-44bf-9461-2284618c5afa", "sighting--4470919d-4188-43ea-8da6-89a2b4b92707", "sighting--6174b145-9829-46bf-b6e6-b1f62db5ae40", "sighting--9ff007ab-23e0-4354-9089-a47f7e420183", "sighting--ab1a8f79-7d51-4d42-8859-c1288d76582a", "sighting--74ef9042-10f4-4a94-86a7-7b559b9386af", "sighting--f76c1814-aa1a-479b-8338-00bfdff25562", "sighting--e833e50a-16d0-4773-a49c-15a4baab97e3", "sighting--4b17520e-321a-4494-8207-d97b870356d3", "sighting--72a2a285-a2f4-46f8-916a-697599cfba91", "sighting--deb096a2-0e74-4415-8377-d4db55fa1c3c", "sighting--1e648054-31f1-4a76-8d8e-e198cd345642", "sighting--62e231f6-ed73-4f80-8c61-a72a4934f7ec", "sighting--f0481d6d-1576-418a-8cb8-35a49a2a939e", "sighting--a5db801d-7d30-4c34-b51f-ac1ec4107259", "sighting--fc7613ac-fe46-43b0-819c-5202dd6a5aa1", "sighting--273f0c7b-bc5c-45bd-b052-5720d2678b43", "sighting--8d223977-8a3d-4602-b024-46fbab3c6cab", "sighting--5838869e-c483-422f-9b79-50961497f0b4", "sighting--03826fcb-729d-4d35-b4db-c10a447c775f", "sighting--0d04b65c-deee-4e07-9ddc-09926105b424", "sighting--429965a3-9dea-4cda-a2db-9909773486e0", "sighting--adad251e-bbe1-44e7-baeb-253c9797e6af", "sighting--0a7bb671-b0a4-4599-8fac-90a58928c093", "sighting--6bca4194-7077-48a9-b1c5-b16db2bc3a12", "sighting--72b7f8d9-4811-4149-ae06-44e426d5e848", "sighting--408634ef-e274-457e-b866-c0f468f0e177", "sighting--c9ce82ea-2bbc-44e3-9145-4e613de7378a", "sighting--750c0cdd-2675-4c04-b839-541a6194bf67", "sighting--4ed0dcb1-f065-44cd-8f94-788cff1842c8", "sighting--6e42f8f7-b956-40c4-9965-4890f62bae3c", "sighting--3daa91e6-c41a-4e55-ada3-71ec8608b487", "sighting--4690194a-1cfb-4954-84f5-66bbd4de4d69", "sighting--3577cd48-ee00-4c75-bea1-f92421953994", "sighting--ad2f6d20-270b-4c2b-8f91-11825622956b", "sighting--b07d1143-2e82-4feb-b69c-485a4d41551f", "sighting--ed29ad34-fa15-4c56-9a10-e10620e34774", "sighting--e4d3f508-6327-4266-80dc-10a406be9550", "sighting--732406b0-3f28-44fd-8144-c0dcf3b85b6e", "sighting--173330c3-4c18-40b9-8af9-acb572a6a17e", "sighting--1096ec13-02c5-4e09-8e81-ce7d7c8771e7", "sighting--fd5e2f77-8431-4c01-a375-110b1e96ad4d", "sighting--0c763410-bff3-44f7-9bf7-53c98586cb9f", "sighting--fcd5c34c-3909-4475-b3ea-62b654626c2f", "sighting--9e5b03df-8abf-45cf-b020-eea3bbb77cd8", "sighting--361e77c7-d034-4a32-93e4-b2dc101a2b59", "sighting--65512ee2-8d88-4569-863f-ed423b5133b3", "sighting--9041e36d-cebb-41ec-99cd-a82b7bada9b2", "sighting--14ee2744-0992-47b4-b995-9d324ecf2765", "sighting--15ec4d09-2eab-4e5f-b25f-dcc56c46d5c6", "sighting--265d85ae-dfd3-4295-9253-54dee7a05434", "sighting--24c2898b-db59-40f0-999a-539c8807b688", "sighting--ef8d90fd-02d5-4cd6-8a0f-849152327647", "sighting--b6d40993-bb88-4c67-a969-9459d7e430e8", "sighting--5c26caf2-f7f8-4d2f-8601-38350fcd427a", "sighting--f675d1be-df95-40e5-8582-98bb6c6b3ccd", "sighting--f96e0079-fd22-4d05-bb9b-eda2749a493a", "sighting--c2bc630f-687e-48db-9c21-ec07d0969a01", "sighting--6f84fe08-f9ae-4ec2-a6e1-42eb7a580e59", "sighting--d8429998-ddc6-481f-8e25-2aca42b6d1ce", "sighting--bf156a05-5957-4926-9366-18fa9b423bea", "sighting--6f897db9-31b0-4d35-92bf-7b28288a1ef7", "sighting--01c65e85-36ed-49cb-b117-c811e56ecd6d", "sighting--d66ca96c-dd76-4db5-937f-10c5b9a33287", "sighting--d568166e-8e0d-4d10-8cdb-0156a397817e", "sighting--e73a9f0b-46de-4527-b60e-ad0cac5ba2f6", "sighting--7fc849fc-28a4-462e-91f2-17f0948735c7", "sighting--68838d91-358d-411d-831d-42a5b8772fe1", "sighting--13ee1b01-3eff-4756-b05a-18540b6629c2", "sighting--116d5721-0d06-410c-990c-e2747f32f15e", "sighting--a5d7662d-70b8-426b-8835-bc48239d82d5", "sighting--fcb9ab42-b79b-4084-af02-4aaef2d94379", "sighting--28292887-32b4-4923-86c0-7ff2324e68a2", "sighting--4bcef5b1-fe63-4219-a524-0efd80e43c57", "sighting--9475fb97-404c-451e-85e0-c7d2ce1e3067", "sighting--37811644-4d8c-428f-b107-dfbb41c39f90", "sighting--84d9d6ce-3240-4838-bdf0-74cd0a8ecefa", "sighting--f27e5f70-5262-4796-b91f-1104bdf532f4", "sighting--adcd170e-e194-4f18-a9c7-566d05981562", "sighting--c1b8c1e6-fa08-4db1-bdef-426405005958", "sighting--44ec6e27-efa5-4bc9-bdb2-264db11f493b", "sighting--e4466b3f-a41f-4418-9b30-c11b5cc2adc2", "sighting--1f8ee7ee-5641-4cfd-99cd-a7e24ebfb992", "sighting--50bd9ec5-8542-4c5b-8c2b-24a179f6c004", "sighting--9ee07d19-965a-48f7-b5f2-62ced1e363f4", "sighting--250796e6-8a42-4986-8edf-aab56feb3017", "sighting--f1e9c9b3-8316-4b5b-8b9a-71cd500a7dba", "sighting--1477b371-0f6b-496c-a851-5166f7135097", "sighting--beb110d3-b704-4405-bf6d-660a4728579b", "sighting--38a26f29-7530-42ec-80f2-a1b776c6e705", "sighting--05206fa5-01ed-4fa0-87e6-7967869af5a0", "sighting--2bd17d67-b157-460f-8f99-a5bcfe5a27d3", "sighting--f228732d-68a7-4a04-ba79-f7a74b93c818", "sighting--999745f7-bdc1-4834-8f56-9703193f988e", "sighting--2fd22a65-d4b6-4b75-8d6f-5c26cdf4c426", "sighting--d83964fd-642d-43b7-af50-9b5e4c3495f2", "sighting--d0922180-4621-4f57-86bf-31686ef5f1b7", "sighting--5eb1c58e-25e6-459a-9bce-cf2aa0e6e482", "sighting--cb3d3aae-df06-4853-a19a-a8048a6a9b3b", "sighting--ee079eb1-2292-4e73-9921-e1eecf892f18", "sighting--d18c0749-d0d3-439a-b7ca-4e9dba577018", "sighting--35dbb375-e715-443f-84ce-79be92c1ff66", "sighting--997010ee-b08e-423a-a98e-bc3bc0a31b12", "sighting--50b9896c-f008-4bd7-a415-ee58070c1ae0", "sighting--4850fc24-b332-4e12-9641-1c97dd0d465b", "sighting--b300dbda-fe6a-499d-af3f-5438c76baf98", "sighting--f219204c-007b-4bb6-a28e-b6dbef14957e", "sighting--2bb85feb-cc4d-4cf2-a13b-8b0bb8d25708", "sighting--82955fd1-37ef-4f5f-9f97-52f14615bce4", "sighting--5086653a-b880-4412-aa87-dd67040bf820", "sighting--1fbc89d3-7436-4cdc-bb24-9a02efa10cb6", "sighting--5a146405-6bee-426c-b8f6-1a112e94a6e9", "sighting--a1cc595e-b4c5-4b89-95aa-4cbdc25d6c5c", "sighting--49b8989c-76eb-449b-93a6-66b581706679", "sighting--f721779e-6c5b-49b6-9756-b93104c0156a", "sighting--beb10713-b509-4434-9d33-7721e881376b", "sighting--1534bfed-e0f1-4fc6-9953-380fb686e885", "sighting--f825b80f-ec57-4687-8917-1c41de0f73f2", "sighting--a44cdfc8-1a20-4f79-9d05-4a4d0a0d2904", "sighting--381e552c-b0c8-4589-9352-a1b5aca9066b", "sighting--3ddc38fb-26c9-4681-90f2-b832e7ce9382", "sighting--b0d78e94-e50f-4acb-a5b0-48bd5483dbe7", "sighting--760a444d-045c-4e7c-8b88-185db2da2783", "sighting--41497659-d301-4e13-9db8-2af2edf7442e", "sighting--87532abd-d713-4484-b4b9-c85ada50993b", "sighting--d822fdaf-8aa2-4345-b446-ed6796a73999", "sighting--9c06ed6b-c16e-4106-81e9-170acd959b52", "sighting--c2bb22b3-b309-4556-a572-5b2248d522d0", "sighting--ceea0fa3-001f-4f27-a0ee-4f1881e7cc4f", "sighting--248b894d-c066-4332-a7fe-c6a349169970", "sighting--ff6ef29a-c01b-449d-b5ba-9f9072be6d11", "sighting--54caabec-9f75-4252-97dc-63b03fd23678", "sighting--7f2e4063-c164-4a13-b398-26d720f8700d", "sighting--05b2d55e-b168-41de-a862-884578a657cd", "sighting--795d77d6-88f4-42fd-b51b-8af233cc6eea", "sighting--29ada75e-e8d9-4cc3-97ee-de816214f592", "sighting--9580021c-ef57-4b77-a4fb-6d827c530ddf", "sighting--9732853f-925b-4855-8c49-dcc43fedb3d9", "sighting--4f2723e8-21f7-46ff-9717-85cc1d33f0f5", "sighting--3cef75e4-f587-4977-98b1-e9db7e04b641", "sighting--8a3358b6-1ec9-4e0d-a9ce-666165d80358", "sighting--4589d043-bc94-400e-8b06-c10244e6d081", "sighting--f163e3fc-c644-4eed-be9c-685684dfdf30", "sighting--b44f1e55-c680-49b6-a3d2-5f5972295220", "sighting--aaed67fc-f72a-4cae-8ebc-afd4c8083298", "sighting--b66fe215-f2d8-4043-9320-352d49edffd2", "sighting--020d83b7-6ab2-4888-8853-1c96d74fb2a7", "sighting--d0e37add-bd7c-41f4-9eb1-6cd4afd913dc", "sighting--b36959c1-0d4e-42f9-a1b2-eca5466c3817", "sighting--285d49fb-a58c-4ba3-9ed5-29cba0b6d925", "sighting--bdd9cb26-1caf-450b-9dc7-3cb6dc5af94c", "sighting--27fe84b4-ebb2-4047-97dd-233c88ef3f94", "sighting--5ba07319-c671-41cb-8e9d-eece4662b3cc", "sighting--c2161d86-00ee-4f13-affd-b30cffc0e3e6", "sighting--d7704318-0b2f-40a4-aa93-f7e1b8c98a58", "sighting--e71c27e4-5590-4c98-87ce-1865959e1695", "sighting--a833e36d-3385-444c-8822-314a7c1d1b1e", "sighting--6832c655-37fc-41da-97d2-6a4e284451e5", "sighting--593e62b9-10e8-48d0-be40-3207bd57e6db", "sighting--b0ed5db9-75a2-4cc6-b624-bccd834e4a79", "sighting--6ea91894-1ea3-4fc3-bd5b-c72f8792fd07", "sighting--03ac0947-1cdc-4b29-aac4-d571158e08cf", "sighting--ff6a4464-8bbc-4f68-adc9-cf8e277380ba", "sighting--79e87c89-2ec7-444c-9a2b-24b9e8cb9ef6", "sighting--a7224cb5-1433-490d-ba38-e523779a9d87", "sighting--c3032de7-4b82-4320-93dc-f597a156cd7a", "sighting--6bc12ede-c3f1-46ad-8d0a-91e2adf103a3", "sighting--4a945915-8827-495c-b56e-71c34af1dab0", "sighting--05848404-0be2-4313-a2fb-ceccf30f087c", "sighting--e89f9607-d2fb-4898-9b5d-2cd56a111736", "sighting--da1da5ad-63a6-4ad2-9c76-8965e8a6ac5f", "sighting--03c165ac-a12d-4230-bcbd-895a2d7f6fc7", "sighting--d0770db2-5164-4a66-b734-0049a5d635b4", "sighting--8aee843c-1bc0-43e6-b7d8-7c6f69ef8d29", "sighting--bfb8a2dd-ed11-468d-b897-c251df8ad927", "sighting--db6e5e2b-875a-4562-981f-7fc10b536a37", "sighting--9def2261-101f-4ef8-9f13-6c3899161dbb", "sighting--4adee709-18dc-415c-834c-8ed1263b5f09", "sighting--204dfce3-a22d-4f7f-96ac-c316962ba31a", "sighting--d54d9b06-596f-43e2-982a-f7b60c219adb", "sighting--456b1a8d-aa03-4999-8d58-97c4cdd600e4", "sighting--1125ac07-fc7a-4805-aac3-723770ac0c62", "sighting--36bbd7d5-6e88-427e-a8a3-c4f87b94e3b8", "sighting--f30c8d6a-ff48-4f76-ad75-ae2a70a6555f", "sighting--275613a4-d7a0-46ee-9c03-d656c3af06d6", "sighting--988f3a0e-199d-4552-bd3e-7012ae9eb1f2", "sighting--95161c99-7191-4c4f-acae-f3e502563305", "sighting--ca36ef06-bb77-4ef3-9842-a5d906fba40b", "sighting--ce8b8a17-87a3-4bdd-8ecc-c4570aaad1b8", "sighting--203585b6-fe4c-4a11-9844-c953e9d5d265", "sighting--50585482-c4e6-439e-bbc2-f7cba86cd91c", "sighting--753b08e1-0107-4e0d-abe6-66612aead782", "sighting--a8f9a198-63fd-495d-acb4-312addbbb6be", "sighting--7069a29d-226f-4861-bab1-489c32affcc2", "sighting--0c101a78-5c71-4b48-857a-d6b882d88294", "sighting--f3f07b8b-bba6-4f81-bd43-54a137af9c26", "sighting--4e307d59-43cc-478a-ae8c-4e08e26ea681", "sighting--f6c49351-316a-42e3-ba03-4f583dba9222", "sighting--c4ea2967-381a-4fa5-9ab2-d70ef73cff0f", "sighting--dcd289c3-a6a0-4284-addc-447833f80d70", "sighting--9709f5f6-7202-4920-838b-c5364481b12e", "sighting--ab26e6d9-e77e-482d-b55a-9f5beccf5f3d", "sighting--40887424-ecb3-407f-ad94-ac8c476bf66d", "sighting--1ebcfcc7-3c88-4f40-9d27-0ee782b38fc9", "sighting--b79fb8b0-fdff-4e17-840c-68e91d52f43b", "sighting--bbe67d54-888a-4da5-9ed7-a26f57b49443", "sighting--f245a02d-b8ef-4fdd-843a-f326ba9168cf", "sighting--40dd8b34-b873-4835-9e4c-b22734825105", "sighting--d55987c3-f3d7-494a-b9c9-9604b9a4ff7e", "sighting--39c48888-8d05-41e1-9484-096a077143e7", "sighting--5d294401-c8dd-43ad-a14e-6d4ba24adc06", "sighting--fe3a3c54-0a83-48ea-9f3a-b125d1e71fc1", "sighting--4a53a878-d2c1-4c96-87e1-e7b3d1cc50a3", "sighting--30148af4-720d-41c7-a155-44849bd87ec6", "sighting--b29f93ad-2f72-4a41-bdba-064088fc8add", "sighting--166a375b-7fe3-4077-a087-23fb9f72ca82", "sighting--ca24c17a-a90c-4218-9f1e-3a62c1f4f947", "sighting--34012ccc-6acd-414b-a6ea-2917ee3cf896", "sighting--c70503b9-2ffd-439f-b15e-19408551e5aa", "sighting--69c6888d-e320-406b-bec6-21114e99fffa", "sighting--a31690c6-4505-441b-8a42-dc2b28e3fd93", "sighting--48468958-8a2f-4618-88a5-472ac554f50b", "sighting--1e581aaf-736e-43b9-b67a-6cad679eee9a", "sighting--8fbb9bba-9a7f-40f4-b4c4-7b4b8acf23a4", "sighting--4485669d-72e5-4ae0-a2d5-4b2e42f61129", "sighting--5471cd82-dfdb-4ffc-9c4b-0ed1a8fc8729", "sighting--49401f6c-fca6-498f-b6f3-4940ec3f4dfd", "sighting--05cb9aac-23b6-47db-8c5d-731f6d1f582b", "sighting--d2a9c9ee-6e1b-4fa6-80cd-bd2be709dce5", "sighting--382ebe93-3a98-4fec-b000-7eaadf906a65", "sighting--f9e19624-3531-4a51-a389-b542d1591cfc", "sighting--1e43502d-cc41-4a58-8383-5fbd8105cfe2", "sighting--2105fb38-bbc2-4765-bf12-5d9f1f1fdab0", "sighting--e14160e1-201b-4efa-a802-6bd4d1ce5042", "sighting--8dd24f56-d06f-4069-8d5f-cca44971622c", "sighting--f816a32c-f2a8-4cbb-bac2-0a58cf494788", "sighting--6c01ea63-f120-46c4-8aa7-a2c9e75f5bbb", "sighting--5b2d19e9-a5ec-4a6d-8090-3ec401bb0b68", "sighting--c4e6ef91-6449-496b-8245-54bb156e4569", "sighting--7bbc0c01-b692-4b4c-9f94-d8bb626c68b4", "sighting--deff4be2-28fd-4a6d-9a68-096d0ad53eeb", "sighting--d86c7bb6-7012-421a-b0bf-45da1aea4d24", "sighting--b6ee1eed-8598-4962-8f68-74d6b274df01", "sighting--0696d975-d8da-4442-ba4d-d4fbcbe3e949", "sighting--c46226bc-37b7-40b7-a173-229a8d77819f", "sighting--cae4d612-964e-455b-adb4-5bdae6ddcbc2", "sighting--e12ccfde-9d81-4573-b39a-ca9785b4a4dd", "sighting--90833017-cd00-4e61-93f7-ff23ecd3f151", "sighting--92326c36-f9ed-4fd8-baea-f73d2994f54d", "sighting--c729ff67-fee7-4542-b657-af6a46dfc92a", "sighting--b14a076f-8b18-4bda-8779-e8ab52915662", "sighting--817db331-6bb9-4636-85fb-282d91335305", "sighting--d80263a8-c916-4c7e-8bfc-dfb12c4c2cc0", "sighting--86fb40e0-0586-4516-a799-a7c33b68e856", "sighting--677a3157-7fb9-44bb-9b06-83bce115b2fd", "sighting--d9016f62-a916-4d96-aaf1-315f6c7cecea", "sighting--c39b76ea-4029-4a07-814c-e38798c7af1f", "sighting--f208ab18-eace-45c2-80c4-55c07431cc73", "sighting--e2eebc2d-b110-487a-864b-84d4e9c75221", "sighting--a397db60-3f13-41b4-9ef9-6c403b9de19d", "sighting--0cf862a4-4ad2-41b2-a5ce-0cc4e5203143", "sighting--466c61c6-f32d-4414-aa5a-4f9b25cda660", "sighting--2f48b107-424f-4edf-9ed4-e45a6eea93e0", "sighting--f4a7e4a2-8159-4dfd-bc3c-fe804d1f2397", "sighting--2c7c32e0-488d-48ac-9c06-a7e92f7925de", "sighting--95f6e80a-63c7-494f-b4f8-53d336ffe41e", "sighting--8f470a56-2dc8-4dd2-a6c1-4f718bcab0ab", "sighting--158d4ff3-13ce-4fa4-be25-61e50c344b56", "sighting--38da251b-585a-4dff-b82c-32d14654e351", "sighting--17b123e6-2b41-46d0-bde4-d20819ac0524", "sighting--3a95b0c0-2f64-4a7f-9899-f86ceb63d60b", "sighting--290312cf-078c-42cd-8737-747dc2fa5ae3", "sighting--3d7e06b2-feaa-4856-bc03-ed7bd992455b", "sighting--998253f2-ee1b-4f44-975a-36e31ee6a88d", "sighting--190dc5a5-f5fd-43ac-8655-7d5f0e0738a5", "sighting--5975c1a7-7070-46a0-b8a1-1816e5bcf6af", "sighting--3b8a8d0f-1727-4f49-bf68-eae95256031e", "sighting--8c62503d-229d-4388-886b-08431a8d79af", "sighting--018d9cf1-eca9-4360-92e0-d35f38a5a1ac", "sighting--41b6a03c-d5c5-4604-80e5-61a75952bb6a", "sighting--5255d7f1-ee5c-48e4-80b3-24450a896293", "sighting--d16c41b1-6e27-423f-b615-1c9a8461b49d", "sighting--70a9c634-2c5a-4802-a399-763a1b1f6c99", "sighting--67169690-8808-4fa4-ac66-f3ca1bb4b6ee", "sighting--30914ad5-920e-42c7-a141-843e4d112dfb", "sighting--f8fe5694-2d60-4e37-b00b-cd0ece495080", "sighting--acd6cb18-b56a-4193-8aef-604f5fc47296", "sighting--d16e7595-09f9-47c7-b4a4-e60c050520d3", "sighting--f4ceb0ec-135e-4473-b4d5-69106d73c4ff", "sighting--6b0fc947-7628-457b-8ab2-f20118a0dc9c", "sighting--9f06a220-cb13-47a2-980d-de647e82cd2e", "sighting--753234db-e56b-4571-8b59-8ed824fabd19", "sighting--96a0255a-f18d-4895-bc59-e3c552dfee15", "sighting--9c146c75-40b4-4cbe-bdd1-d3505401e483", "sighting--459d135d-9e46-472b-9b59-39b2f1e30101", "sighting--220d79d9-0cfc-4832-8a7a-9efc22d956fe", "sighting--f7ad17c4-285b-407b-b66d-337a44fe16af", "sighting--68de0bf2-d541-4654-9cb1-4e595bd1b80d", "sighting--bb56a2a2-11f2-4c32-81d3-5c4665af1c0d", "sighting--3422df9a-52ab-4b29-82e4-62bc8e7bd9fd", "sighting--cb1a24c2-a4c1-4ef5-948b-ac7bb6e7f581", "sighting--8f745044-79f9-438c-a5b5-14398eb376f0", "sighting--a1096be0-fa7f-421a-b66d-1077e671c255", "sighting--fbe2b485-d4a3-443c-8372-625654c56a59", "sighting--a06f1c04-81f5-4286-b46a-1c549a03d20a", "sighting--ed394a59-8a3a-44fc-941d-cf587b2c2039", "sighting--21b2d8b7-8038-4246-abea-f0b1f2cbf5cb", "sighting--df425d5c-07de-4ea0-ae73-234756a9eb4a", "sighting--4e047b91-350c-4f2c-bc28-cd74761080db", "sighting--86806a19-a149-4f31-9f69-0382f3d959c4", "sighting--27dbb62e-4ae8-4c9f-99d7-811f7a2dfab4", "sighting--e7588df9-9b1e-425a-91dc-ebb5e6bc559f", "sighting--af9b0f47-ad08-43de-89f4-5668dcec221b", "sighting--1cb47498-8c8e-40be-8de8-e26f730f6495", "sighting--fee2d130-a2d6-40ec-a1a2-9d97c8056a74", "sighting--1a1545c4-1730-4d95-a1a0-00bfff6345cf", "sighting--98022ac0-4a65-43d7-ae25-015d8878d7db", "sighting--da24dd0c-30f6-499e-b152-e5be7678edc9", "sighting--ae24837f-500d-4c91-aed2-c6e0aff7e0bc", "sighting--9435fc94-1ddd-4ca1-82bb-4165aca85fe4", "sighting--41333aee-596b-4ff7-85e5-55b1de73a73d", "sighting--ed69e0a8-cbcd-4a14-859c-2c64446d1a8f", "sighting--b60454e6-ebea-471e-ac82-6190a2a8c87c", "sighting--6da14087-3f27-456e-86b7-8962ee27f945", "sighting--9ab16dfc-1f17-4472-854e-46a130cbd55e", "sighting--00a22aac-5ba0-4820-a0f5-1a9a1e84d5c6", "sighting--f123d44f-715e-4998-b842-593439d071e1", "sighting--5bb782fc-5cbb-4fc7-b773-d9ac5a7a8cae", "sighting--f93cd65d-0bbd-42ab-ab4f-d977c5e68e97", "sighting--b1c57b2d-9a30-48c8-8d3e-d8fed207aeef", "sighting--d9be2c0c-ab1c-42ee-b365-0bbd1756b0ff", "sighting--2bc282fd-6fd5-47ed-b08c-31cdba2c883f", "sighting--7efc951c-67b3-4f37-b540-80a84dce3fd7", "sighting--5c1506d5-e47b-4d1c-9693-c4c410771ade", "sighting--ca516d3f-1f68-43a8-a39c-82abba5866a6", "sighting--b830dbaa-cd4d-48c8-91fa-0ac0fc3a78ba", "sighting--d8ef3d80-7642-4813-9f6a-ba1d65849a2d", "sighting--d1e0265e-cee8-4db2-91cb-67c940f71efe", "sighting--56206813-b4e1-4b83-82bc-511c107eb764", "sighting--c0378346-d955-4967-8340-9592fdd19416", "sighting--fbfef360-8f81-41f3-b1a0-8f0b9d10fa0f", "sighting--95e0e6a4-8b8e-4814-8881-64ae07c3004e", "sighting--88ae5b90-b291-46c1-bd2a-515bda4b4709", "sighting--a263e8e4-54a8-4c3c-927d-21dd3e977750", "sighting--25dc2502-078f-4edf-a47e-c6f89467404f", "sighting--0e2f7891-5b10-49d5-9b5c-cb8fb1b26eb2", "sighting--b3ceaf3d-e89b-4c26-8bf6-fa06919a7fdd", "sighting--7145c10f-7bdc-43e9-9b4b-56940a718ed9", "sighting--4568100b-f95c-47dc-b27d-4de53cd16dd3", "sighting--3e230e54-d484-47e3-9a65-af167a8bf130", "sighting--6d7f1eb0-ad55-4b95-a42a-c6be303814a9", "sighting--cc44b952-2758-416f-9169-cdf729261886", "sighting--e64a1c91-5251-43d2-a826-cac348daf404", "sighting--2fcf086c-614b-4326-85ca-1db1ba5dc402", "sighting--4859a1b3-966b-4630-b6d8-833edc51a30b", "sighting--553a1e3b-85ca-4064-b38d-4c6bd4eedd1c", "sighting--6bde2def-a1d9-4912-bcf2-d376927a9bbc", "sighting--ca5456ef-c05d-4489-8f38-bbaaeee2f6a7", "sighting--14e6dcff-e112-4f88-a5e2-538a72d70e81", "sighting--ad031430-ed61-4d65-a2bf-fbb9529ba61e", "sighting--2306c0f1-0661-461e-b5a9-419d63fce233", "sighting--c5dfe5a7-ee3f-4fb1-92d0-2611cafb0a84", "sighting--78355b71-4929-4fb3-83c6-6409778b17f6", "sighting--fa78e28a-90ca-401a-a3d7-6828a588c1b5", "sighting--772dbcd8-513a-40f0-96aa-e75c567c6c66", "sighting--ce235e7b-c154-467d-b1de-78c71242bc39", "sighting--d0df7c72-8d40-4ccc-99ed-9749a62a9a90", "sighting--3e5d98f3-77a7-48ff-9c3d-8f24b7a16e0d", "sighting--8b84ef18-6131-4e1a-8f4e-42492c3563d3", "sighting--318a84e7-b74b-4413-bd1e-b0ad94912956", "sighting--706763b9-88e8-4cd5-99bd-e62f7f7967ea", "sighting--b503f1f2-5b02-4939-af9d-43e607c08c93", "sighting--3caa18a3-14fa-459f-8dc9-ce3a06fb90a9", "sighting--d5a63a23-813f-40a7-875d-3cf26710d391", "sighting--c55f3a2b-2503-4ed6-ad43-921dc5b70ab3", "sighting--544c5f3a-d1b6-4757-8750-ae54cc59e98a", "sighting--e9183e61-5937-4f68-8d57-4bb2b7026de5", "sighting--e3d4cb5e-a600-4b4b-887a-6a6836f421bd", "sighting--618bbcf4-f9d7-4d2f-8004-da3257dc8546", "sighting--ec6c03f8-db36-453f-be70-79c737352204", "sighting--96480df9-ff7c-46e7-b99a-dbb11d4d3456", "sighting--f52b88b5-7dda-43b1-99e5-2f20f541d935", "sighting--4cde2d84-bdf6-4314-a3ae-32aec0f52a67", "sighting--11e828a7-c94f-4767-a1ac-7e74273c0a0f", "sighting--70097602-5ef9-40bd-baa3-6487a4dd8edb", "sighting--902cf859-544e-472c-97a0-10b49f65f073", "sighting--cadc67a7-2746-4bfd-9ac0-73ae9126f5ac", "sighting--b9b0888d-1360-4884-895b-70fc321277ba", "sighting--0a279fe0-137d-4026-b620-cccdb95f4968", "sighting--df3fc921-bbe1-4742-8549-048781ec39fb", "sighting--3e93d9ce-a82d-454b-9cca-fa7877101981", "sighting--ee492a14-eea3-464e-a491-a84427c81d0f", "sighting--02df9525-5f93-4f80-a416-7a9ee5dfdf43", "sighting--17a1ae37-45f4-4c19-8e6f-04ad89791f2f", "sighting--5c4d1625-ccc6-4e2a-88b1-0ab48095cf95", "sighting--9dc6ff9a-4fdb-4fba-8179-7b3df8de2209", "sighting--e9339cca-e940-4d46-9463-8058fa0e0428", "sighting--053e8689-2d02-458b-a2a0-4faa30399342", "sighting--e1554c1f-9d1d-4fcf-b6f4-30062f765a7e", "sighting--3fcfca03-9f44-4a5d-badd-dc4358ac424d", "sighting--17851291-d6a2-42c6-b97b-1a54ae199b76", "sighting--f229af80-4629-45d4-86a7-8f182a36db0e", "sighting--a8875ffb-dfe5-4d4e-8f72-db6e619cea54", "sighting--0f5abd17-cc06-48bb-8410-0b5744312ada", "sighting--68ba126e-5242-4f00-ac60-9bda4f8a267f", "sighting--207aa05a-2d85-429e-b0fa-c132e1e17a16", "sighting--7dae43c9-996b-4753-b4a2-be4f49e22cc3", "sighting--66bed54e-9327-4751-8cac-467faed7f0e0", "sighting--735fd485-7918-4e6b-8172-5d7eaee0db40", "sighting--1b0abb69-cbb6-4caf-9f82-9f918f3c042f", "sighting--6616ee05-88ac-44d1-acd5-acfc076afaa3", "sighting--0b97179f-c4be-4487-87c4-70a577ab3a03", "sighting--af822af8-8f3d-421e-89b4-15e2ab2bc1ed", "sighting--8cb16e49-795b-4f8b-8e33-a2381e397dd6", "sighting--674e07fe-66f0-4530-9fd4-ad101ea97502", "sighting--3ba0b595-1c5a-4988-8110-5a093755a1d5", "sighting--5d03913c-09c8-4f05-b32f-2aead774b40a", "sighting--e71faf84-8e15-44f3-9389-ad250a401167", "sighting--e8f89eed-c626-4092-8a48-31cefb9cdbba", "sighting--e9a9c755-3145-4f44-9e1f-6ecdb51692d0", "sighting--9e46a5b2-9c9a-4707-8fb8-844b3fa23224", "sighting--81024a29-07b3-435c-987f-21c984ad3c00", "sighting--b4177f54-8669-4717-adb7-0a3620cc5353", "sighting--f310b8f4-e82b-4b0a-9b4b-bdd7f2d92537", "sighting--bd0c357d-635d-40d4-b283-90a04be0340a", "sighting--d729ac61-9355-419b-bef2-4907edd026b1", "sighting--40b93959-86e4-4f43-9667-a1009add732a", "sighting--a6b326a1-8129-4e91-87d5-861bbf283afb", "sighting--1b3c29ae-7fef-44d9-a230-ea4f90e63feb", "sighting--537f02af-c02b-457e-816e-b7bb6f197dc4", "sighting--fa48f23f-23a5-484c-b0b1-e2c57141e49d", "sighting--9db70d1a-066c-4a3f-a600-77dff69927e8", "sighting--05487750-f085-4a23-ae9e-26f3c8ef1a55", "sighting--ac57863e-fc5c-4b00-baa3-fea6cfd5c1ea", "sighting--a4f0475f-9087-4c67-8890-7e9443a3944b", "sighting--bdda8970-75fa-4d3b-9cae-d8e4619b32a8", "sighting--3f2356f5-22ea-4ae0-9273-4716237e876f", "sighting--412ad072-7a4f-4980-bfa8-116ea64a8b28", "sighting--ac899a9a-4aff-476f-9ff6-3b063060c499", "sighting--e114576c-b965-45a8-b7df-6a88d0c5ce92", "sighting--2db795ba-182a-483c-be65-cd53108b0262", "sighting--33318558-8092-4679-9c2d-0e86c50e04a4", "sighting--228dde7e-ec46-4bcc-b912-1f3fd1769035", "sighting--9860d676-c5d1-45db-b0c4-55b71dadb3f2", "sighting--5be3b7f9-7a6d-4ffc-89d6-0b31d4a403a8", "sighting--9e04c773-f025-4d1b-9555-bead675d20ce", "sighting--e21c5eda-0187-479a-9588-be902649444e", "sighting--9255c4c2-2dee-43b8-87b1-1df42ee4a5a2", "sighting--4f0de1a5-44d3-4c58-bacb-fc18e70e96a0", "sighting--a4cf85fa-0ed9-42b2-8c89-64db45732dd2", "sighting--4e56cb37-180d-4839-9518-04da583c26e2", "sighting--546ce9af-b3f7-40af-96d4-84c2fce0d208", "sighting--f9e27ec4-7da2-458c-8a9a-31bdf9e22591", "sighting--b1b9b234-d11b-4817-b772-37a6346a6019", "sighting--37446f3d-e0fa-4dfa-bcac-0f30dac40c58", "sighting--b087e5ac-0d64-44f0-be37-55bb1e7b215a", "sighting--495cf923-c572-4670-a40f-d93c407d1765", "sighting--56be7ce5-baf9-4017-8620-d8628f9c04d8", "sighting--56f660d4-4796-4cbc-a1e9-3311b78e6f69", "sighting--03afb5bc-3b9d-4841-8616-b767bad931d9", "sighting--94d77171-0bcd-4e57-9c11-47b10f8aa368", "sighting--7d727c46-9a06-4d4b-95be-58674794ed7e", "sighting--63848c91-5427-4566-946f-8048e0dbd600", "sighting--ed91cb0c-ee2d-4fb3-a667-c8a8095d6853", "sighting--938483a3-a666-42af-ad11-34727a32ee4f", "sighting--add8842d-a616-4ee3-9d78-0f7769a82ae6", "sighting--09790c6e-34c9-4c0e-b191-37c82a3b82e6", "sighting--e3d3b972-d629-4f4b-9f9a-092be8acb54a", "sighting--bfd6fc32-1600-4603-8922-971a0c9b1ac9", "sighting--2cab45b9-daf4-4dc1-a953-106e8b43ef9b", "sighting--fa3b886d-3772-41df-a3a0-0afe3e283a90", "sighting--feb0bb92-6901-43e7-b5bd-ed0beaada375", "sighting--cbfa6eb6-8d7d-440f-a3be-89a2fcb546b7", "sighting--facef057-3ddb-4914-9838-13ead11d98d6", "sighting--e7fb23c8-ea54-4027-a1a3-44f524faaa2e", "sighting--3f72524a-83ef-4d59-84fa-1c8d76358df5", "sighting--c6b8f7bf-4ab5-4768-b229-d8c65335b82e", "sighting--191ee015-2e6a-4e23-b018-1c1468616385", "sighting--378742dd-3e4e-49a6-9257-05467c7b6202", "sighting--a9cf9e88-51df-4e0e-b7ac-a2e1ec477dc3", "sighting--5cfd4cbf-be1a-4c40-a66f-e805b788ffc4", "sighting--1836e2f3-e329-420e-a872-616b14646147", "sighting--bf099497-5d94-4d4b-b1f1-631b2e29d778", "sighting--3ad05a49-a375-460a-bac1-a04fb3cbe23a", "sighting--c6319f1c-435f-4177-a26a-9b6ed33f9007", "sighting--fdd05e5d-7cb4-4dfb-9614-a2daf586e6ac", "sighting--28531376-ced8-49ff-8092-c964ad35c130", "sighting--bd2c186d-7202-46db-b4f7-cd0631374bce", "sighting--3d24e282-ebd0-475e-8708-098372c16020", "sighting--e47e67a8-342f-4e46-b3df-9056f9ffda53", "sighting--2bbaee7f-b33e-469e-a9d6-926a9b6f2347", "sighting--1e8f358c-bfe8-433d-9491-07d7debf841c", "sighting--fe5fe88f-aa77-46cb-92fc-e2a1852a44fa", "sighting--3d6f66fc-e934-4868-9975-8a74882a6629", "sighting--0656dfc9-3738-4b83-9171-4dc7eefccd7c", "sighting--86d81873-4d15-4474-a9b7-0e97809041e9", "sighting--f020c322-0f22-44a5-88fc-f7eb3bd80246", "sighting--7d2bb0dc-c3f4-4224-8993-32c6567b6ff3", "sighting--13458f0a-73eb-441e-b533-63788e8ef29a", "sighting--9029b356-2725-44e9-bc96-7af6d21f4ac5", "sighting--6e345e4e-1053-4657-ae67-6627c1a0dc11", "sighting--044caa6e-1aa2-442d-ad51-87adc8e82ba9", "sighting--251fd693-6cc6-4143-b032-dcbaa946bfa5", "sighting--38e29e30-7f61-4928-a21f-53fc5de31482", "sighting--e5d8a40f-5ba8-4e83-8767-990c3c2fdc5a", "sighting--5ec1b7a9-c869-4402-b337-2c1ef7eb3f99", "sighting--a4fe684d-d86a-46f4-a509-6851d4830244", "sighting--c2492a30-bbb1-4ffe-a0fc-9dbbf3e7504d", "sighting--920bd50d-89aa-47c4-a9fe-abee40cbc638", "sighting--bfd5ee88-e849-45cd-b797-5c20d60c1e33", "sighting--a729ee38-7f79-43da-9f1f-d0cdb04cc89e", "sighting--fcfa01d5-3841-424d-bf60-27c9fcfafaf4", "sighting--cec9f196-4e83-45ee-8d45-3e2ad36ae0ac", "sighting--627d9458-7303-4fb4-83be-cd750b4f8154", "sighting--f1052524-73bc-4de7-8b88-dad497f0bb62", "sighting--417d65de-1bfc-48f2-8d73-3f579c5b7149", "sighting--09217f00-5e39-4e4c-983a-431f3339eeec", "sighting--5820f6c6-42a8-4c11-a35d-0b4484347c01", "sighting--6d0e2cf4-9f2f-49f6-bb99-6ef58fae14c5", "sighting--e41acfa0-9c07-4ec3-8fe3-9c3fd9158312", "sighting--eaacad91-8afc-426f-b412-d688ce5f1fc6", "sighting--e6eaebe3-f171-4845-9e00-75ea719dca99", "sighting--00893a34-287b-4e94-98c3-ee6152fd3012", "sighting--c73028e0-12e6-416b-92f4-578b4e9b69d8", "sighting--69c399da-8c25-4cc4-a315-ef6733c60d48", "sighting--4748f816-ceb8-4776-901f-344b97dc2111", "sighting--53ee9a3a-60c3-410f-80ee-39e4effd2e1f", "sighting--7a6e906b-85e3-4271-9f1e-f5d3c5a80de1", "sighting--c4a8976c-6cfa-410b-b78e-e99f228061bb", "sighting--201fe693-6d45-4e50-8c4f-cfa1b20f547d", "sighting--67fcc953-3254-44a1-b57d-46f579a468c9", "sighting--e7d98137-7041-42db-b971-40ef81adea4c", "sighting--95215b3a-9ab3-40a4-bd01-615ade13ee7d", "sighting--408bcd0a-671b-4348-8f35-4acdc4d2d26f", "sighting--4b5e2321-df1b-4a6b-a4a9-f726be4f023d", "sighting--395ef600-8e34-443e-ab33-c1a9fdbc1940", "sighting--b94674b1-dcba-4722-b547-eddaf70caa76", "sighting--7e509500-6edf-4339-b076-0dd786ca3de4", "sighting--099c3674-1592-4c8c-9ee7-0ebcec62face", "sighting--00f9b1c4-7cce-49bf-8440-557992141107", "sighting--0ecd91a3-d5a5-4856-9648-7f63c6ed5161", "sighting--ca0a5d50-2d9c-4f34-a2c7-5a58f5d4b300", "sighting--55248ad3-2e2e-4884-b669-6234a43aacbe", "sighting--e7dd9dc9-e267-414b-bf32-cf12d7d87ff3", "sighting--8be81e7c-6a80-446f-a5fa-573f62d37a1c", "sighting--ed10197f-5b0f-4cfc-b72e-5afb37f1341b", "sighting--03000516-aac7-4a84-b4ce-43e78b101192", "sighting--7a860271-c687-41e6-9f23-08afd3468869", "sighting--5019c62e-5e3c-4081-b8c2-b95ace807eba", "sighting--d4be7582-e0e8-4e43-8b59-567743250eb3", "sighting--0a32ac7c-5322-4db7-8e51-a1084650a6a8", "sighting--c534a947-406c-4294-b773-28111f7109ac", "sighting--70b1718a-d3df-4dea-913f-6c7db1810729", "sighting--89a15e86-e496-412d-8064-2819956194f1", "sighting--a46ca6b9-dc3a-46a9-bf92-7c44a0fb5cb5", "sighting--99152c4e-9d81-4242-834c-7010a47f67ba", "sighting--6e3742ae-7aa2-4a9a-8e30-52c26ec65487", "sighting--ddaecbc2-4848-46cc-b12d-c904c03c9c6d", "sighting--c7d4f3f2-2dcd-4a93-9a1d-9cf157b7dfa2", "sighting--8fb75281-f20b-45ef-aaca-4edfef67adf6", "sighting--bf1d3429-a65f-4f76-a0f7-550a9dc1ff65", "sighting--690cd683-5748-4294-8121-ed380ab6df7e", "sighting--d0fbbc01-47fa-4d1b-99b0-4534d61a0fc5", "sighting--eaf182d2-99c1-42f8-827b-93ac144cf558", "sighting--de7295b2-0c80-4d60-a2b7-39704af5d0b0", "sighting--257ce176-397c-4056-b79b-30d1f4b7d433", "sighting--ab3fd9ce-b60b-4e3a-9233-ce17989e1ced", "sighting--b06bb52c-5e73-4590-8702-53af84b26c04", "sighting--695612a5-faaa-436d-81f3-d87f60a16a1a", "sighting--5a26cf35-de90-4260-89b3-75d807a96623", "sighting--16e6503a-701c-4172-ad6e-a491df85d7bf", "sighting--777361c1-7aea-4fc1-bc82-a7df9707c87a", "sighting--2dff4be1-357a-4ebc-910b-f2533492f694", "sighting--a4dfacbe-4535-43f1-8307-23cb74ff65a6", "sighting--ae06897f-779e-4385-ab75-f8c66baa3e3d", "sighting--4cf688d5-18d5-4ec9-b60e-71161e5f9d5e", "sighting--0a646920-1089-452b-af32-24d9301fac90", "sighting--db023425-885c-40db-927a-9d29be6f18e8", "sighting--b0a7df31-620b-4b4b-b8a5-d4f1b07c3c26", "sighting--eb7fc423-65fe-4b52-8b00-66afcc7735fe", "sighting--968519bb-b66e-4b42-bd07-e9a8a428f885", "sighting--eaa1929f-22ae-4d81-9889-565807c26cc8", "sighting--4ed32b17-1c82-4a16-83e6-0afecf50736c", "sighting--5e44b9ba-7654-4981-9e2c-ab147f3b1aa6", "sighting--85fc192e-01e5-4546-a017-96587ec07fd9", "sighting--3a18d2c9-6850-492e-9aa6-92f8b842719e", "sighting--b396da24-96e2-42e0-a8f9-9c314880fe55", "sighting--8fcee0a7-eb9a-4526-a84b-ede39a291cb7", "sighting--9cbe9523-8ee5-4d71-8a1f-bdf9fda1e0b0", "sighting--8aaf8b04-d5c5-4f9f-b4e8-a64c8524c1d5", "sighting--bab13e34-f9c0-439d-a805-31998a42a71a", "sighting--b0c28ae8-0557-4832-a0c0-a163c99da390", "sighting--287ee56e-a739-4eeb-94fc-5f1c74d33f72", "sighting--f94dc61b-5667-4823-a160-0651b6d10589", "sighting--aa4e6358-4281-44da-a012-e1d6c567e67c", "sighting--f22c074e-5dd5-45a3-b571-7a1ec48ea99d", "sighting--2a585f30-a984-4bdf-bdc8-71e5f0064770", "sighting--5fdd4a31-2c64-46df-a7d2-15842149d579", "sighting--e33cea58-1bea-4d2d-b5f2-35af30aca947", "sighting--f7fe5cbe-3a9b-4c8f-af56-367f07ea2fa4", "sighting--e794efcd-41ff-4e23-adab-ddb5e46b3186", "sighting--31d8b9e8-7320-494f-a1a0-52bddc360b7e", "sighting--dfeff341-aa94-45c3-889b-6d2b6eb7736b", "sighting--75df17b4-18da-4b5b-862f-c7b51ef27f0c", "sighting--8d188998-a9ad-4da8-9395-3ea2948e5b00", "sighting--6032413d-71e0-4f9c-93d6-1e98d1ed279a", "sighting--4be69c7a-9533-459d-be15-d3c643132910", "sighting--08b3c024-ab30-42e6-ab04-bf4646b374bd", "sighting--49f2f4ef-f140-426a-94b5-97b54bfba3bb", "sighting--4654dc8b-27a4-43a3-b57d-52c5148135b7", "sighting--bc351116-8b70-4ddb-bbd1-68e17ccd6abb", "sighting--b7e2bbd3-0cf9-4c16-93cd-266dd80a9eab", "sighting--9ed2dea3-b837-40d0-964b-57e7ca1e76af", "sighting--786380e5-de1a-4c98-a718-e51308e7e3e7", "sighting--076ba2b9-65a7-4f77-89e3-867a678eaeda", "sighting--3c555ad4-8c39-42f4-97ef-c8d660693d00", "sighting--a7d0e1b9-4d66-4601-a888-d668767a11fb", "sighting--423131b3-b6ec-42fd-b99d-440e5abb082e", "sighting--fe0a002e-f8da-4885-8d58-1239cad6035c", "sighting--b1c1d939-86bc-47d5-9697-e60f5139be89", "sighting--aa804267-98d8-435d-bdf6-e9d83041e921", "sighting--18bfbecc-fdf7-4743-92c5-a5b5859c370f", "sighting--3357f521-8072-49ca-915e-5deddaad5f88", "sighting--ea506324-622c-47d0-a2ec-c85f6d3a25f9", "sighting--a6b47c9e-fe76-4b9f-b410-92b701e32ff1", "sighting--adec37c8-43d0-4fcd-8481-2132d1ca10a9", "sighting--769aa057-d615-45a0-9494-ee8353678da9", "sighting--3f4c8785-6154-4f47-8d76-a9f86bb66353", "sighting--25feadee-6ed6-4f2d-ac44-927c3f138218", "sighting--18bd2cdd-18e1-4b6e-8917-2fe7bd2a569f", "sighting--882c5bd9-0830-464c-80a5-caf795088c6d", "sighting--c62916fa-31f8-4a1d-ad7b-155c87fbc267", "sighting--57238046-c7bf-4a14-8e75-8e0a7b38083b", "sighting--6a73e589-9474-4974-b099-0df3ebb76c93", "sighting--8eed3c25-5734-4a12-ba34-8f24cc8c5df9", "sighting--23049237-5105-494f-9a4d-85c24db487a2", "sighting--1bca75ae-6bb7-4c1f-b08c-a67ac9f6009c", "sighting--44dab8a0-8639-421f-ab5c-eea25fa2978b", "sighting--2cb60541-4a52-4d70-97a6-c4481abfb0b8", "sighting--e84055b8-4560-434e-987d-d67929c52eb2", "sighting--019a4f80-b999-4643-8f89-89d684260364", "sighting--d2cfaaba-a6f7-4d3c-b97f-13fb6d02dd02", "sighting--dfce488b-35bb-4c39-b72f-7f8c87b9c606", "sighting--f0ab0ffb-4d71-4e9d-957c-0189ccc3dae3", "sighting--b5613afb-1511-4632-ba35-91a33896e8e4", "sighting--c5180c35-0831-4d34-966f-13ccfd53dbfc", "sighting--8467b909-ab2f-4638-b507-20e54dd6dd43", "sighting--fdb0828c-40c4-4cd4-aaad-c1bbe94cc197", "sighting--1e23b39b-380f-4225-9b10-0f4f3e53f06d", "sighting--92901de0-13e0-4227-8fd8-52166d6c5d60", "sighting--81e10837-7cd5-4374-b8ee-9042d7b7e346", "sighting--4bcf4436-8192-45b1-b701-39c5ebfbf80b", "sighting--d796ba13-0e79-4212-8ae2-47456b66de58", "sighting--853d0c61-04cf-4de2-a5f8-fd2bc6f3a46d", "sighting--63ce6382-9cfe-4736-9d82-f9b309ca3488", "sighting--7646d662-0387-4ce5-ac79-985c151a1e4c", "sighting--fc37115b-802d-40c4-ae6c-f2534a90b835", "sighting--0eb55ffb-7ecc-47ec-af1a-12a21b7a1d3b", "sighting--78c3521c-ad27-4fc6-a068-ce4e74bed87d", "sighting--4b7cf57f-4c78-4479-a8a2-daa1eb9e35c8", "sighting--a12bae67-7c12-47be-ad8d-1cacb950ebfa", "sighting--83905ee6-4962-4a5e-bb7e-1cf790298865", "sighting--3c42e3ab-cb61-44aa-becf-7f9e97352070", "sighting--ffc68409-c33e-4a49-93e4-d3648d730ac5", "sighting--320fa32d-966b-4423-b447-76baf17ad3b2", "sighting--bb36d3b5-27d6-47cc-b4da-b455492b1f29", "sighting--fa29eb57-68f3-49f8-ad7c-624a54f017dc", "sighting--09a9d82e-69cd-42c6-a6e7-e42648f1d824", "sighting--b1f2b480-98fd-4ca8-817d-4731cc43c8f6", "sighting--e014281c-a955-42cd-9fe5-88498decee10", "sighting--461413f9-911b-45b1-b49e-4e767638687a", "sighting--a4e612a6-f007-4125-b7e0-edf28a3151c9", "sighting--66883905-8f7d-4914-a8c9-033984d56ebe", "sighting--2f9d07ab-0b1a-444e-8da8-e3df57596565", "sighting--c663af09-3ea6-4a2c-ab2c-db5bb73d901f", "sighting--2b5e5c32-812c-4ebe-a340-b2c50591d5a6", "sighting--440d1aa4-d673-4fac-9082-bc7c6405d1b1", "sighting--fac75033-26db-4338-92ac-91539c4af1e7", "sighting--50db5fa7-ebca-44a4-9e48-a6d765bc16d0", "sighting--a5ee8cce-ada6-45bc-8adc-7a563241f28c", "sighting--b31a52ce-a7a1-46fa-90f3-cb2f40560de9", "sighting--90749382-adcd-417f-acc6-6bc39e17938c", "sighting--1d2bf8ca-56bb-4fd6-83d0-902c849d4330", "sighting--e1f4f335-43d2-4903-94f1-4a5a55265ccb", "sighting--ce268bc5-a38d-43e2-87e7-be27bded7756", "sighting--5ef4c127-4f14-4a70-a05e-4b8e213bb040", "sighting--26b69de4-3310-44c3-bc5f-bc1b9adba4a8", "sighting--c482ccee-d1c7-4fb9-a2d5-ef40619c775b", "sighting--15ad89fe-4de8-4565-9398-07b54a0f76b2", "sighting--137e8ca2-b369-4a51-9b7c-4094b79ee722", "sighting--c8158107-7fdb-4afa-bbe2-6acf55108ef8", "sighting--7ea4eb64-c06f-4623-84d5-5302a721a615", "sighting--e1264925-f40f-4332-aced-fabab14241e9", "sighting--dd277f73-a83b-4d7b-b0a8-ecc86f884942", "sighting--8bc1f987-a838-425b-adbc-f14b3a6c13bd", "sighting--4f772ccf-1368-483f-bddf-c5ef68a2a47a", "sighting--f247f815-1ef0-4919-b1cf-cb3fb24887b0", "sighting--1a6d101b-a70c-4288-8384-e9a04992931a", "sighting--13884eb6-e266-4634-89ef-a42e634d92d2", "sighting--5c810ecf-ebb6-41fe-b35d-730b82c3bb60", "sighting--7ef901e9-a87d-4b83-8065-7fcf869d8eb3", "sighting--ab934e33-381c-4ad2-80f3-7843b18cac5d", "sighting--0913e345-3b09-4c2e-90b1-ad3acd761163", "sighting--70a1d335-c54f-446d-a6a1-2b968797b78e", "sighting--f1b88bd2-1a09-4f2d-958e-93e98da5903d", "sighting--5e504b57-fef5-4468-8763-00f6f6c0e3fe", "sighting--7bbf6eca-ef69-451f-900a-18dd7ae658b6", "sighting--a3fd17d5-a299-4b43-89e7-91ec2785fbf9", "sighting--c053b33a-483b-413a-9043-783f02f611bc", "sighting--492a8188-607b-4fc2-8b14-30846aee35a7", "sighting--bf6a464f-b4e9-450b-bdc6-23df58651d4e", "sighting--5c1561e2-57b1-4330-9634-de093c157bac", "sighting--edc326a2-37ce-4c5c-aece-6a12d650b236", "sighting--44d65fd3-ddce-4cf2-9689-37beb8279fc4", "sighting--dcfe99f1-b662-48ed-85e1-fbfb696cf082", "sighting--367ca446-47c8-4a90-a4e3-442748cf4da4", "sighting--67f495d7-56fa-4a40-8691-397620503e77", "sighting--20f2e65b-1cd0-4339-8577-80773a21a903", "sighting--375187ee-d817-400d-901d-5b2d07477417", "sighting--3c8f91eb-a367-41eb-b298-9c96297cee3b", "sighting--7b4a5af4-8ef0-4239-b6e4-72bcf295410a", "sighting--f0f1b9e7-6f0a-4cb8-ab9b-0491edd3e3be", "sighting--758735f7-7dea-4063-9fae-32cc383c49fb", "sighting--bc665a5c-2983-4d85-920e-f287ebcaf708", "sighting--3e27041b-0946-4460-b503-03be9babc8e4", "sighting--fc86105c-07a9-4025-a57d-361b31268519", "sighting--e69b3df9-2f69-4d86-bfb7-256b22318855", "sighting--f0b59a68-06db-4674-bf24-9d5f06f4817f", "sighting--7939babb-771c-4b70-8f2c-b006727beffa", "sighting--f596cb0e-924c-4fca-b94c-f55718e582ef", "sighting--4fa91109-69b8-40fa-b67c-3c2c70740bbd", "sighting--08f1fe04-948a-4830-80cc-78a741cb5a23", "sighting--52df699b-9ab1-45cb-9d87-a6e9757a4de7", "sighting--2eb1b1ee-7851-414b-8530-e3feb9987dea", "sighting--dfc2376d-9fa0-4592-8a6a-2727dcd55230", "sighting--33e473b8-4e46-4e24-9ffa-e4082771d400", "sighting--d633a547-c71a-4bca-92be-6903eb3af6b2", "sighting--b3883698-f5a9-4042-983d-e749cabd05da", "sighting--2dd97d24-1121-4fdf-8083-6b541eb98f59", "sighting--3f6bb2d1-da67-4821-a998-52452da380ae", "sighting--a6beef05-f785-4b68-ab47-a449aa3b7ed9", "sighting--cde0a0c7-34ca-42e0-84e0-51f409cfbb53", "sighting--0060a152-0572-4af0-bf1c-fd77a53e4ee7", "sighting--d7669482-1733-425f-b997-a8f35ad47fa4", "sighting--2dab3fa1-07b4-4bba-9899-c286b90cfa78", "sighting--2356f5ee-cd27-4c1e-94f8-31e98bc660e5", "sighting--87269e2a-784e-4b99-acf2-ed172ddf1176", "sighting--088202e9-79cc-4c64-91ce-6b3cfe31713d", "sighting--68f14ce5-9aad-4473-914c-9092ac28f531", "sighting--159a9b4c-68d2-48bd-a1ce-c26c2e85e6ba", "sighting--8a3ea6f6-119c-4526-9ffc-a435e7c95874", "sighting--46d29714-eb9d-4640-9ada-853ac8ce09d4", "sighting--3c88c51b-647c-47b0-8e76-7bd46cd1dc3a", "sighting--f1ec1d70-839f-4230-ae37-4c3031212254", "sighting--1e4cfa19-e1e5-4da8-8158-994ea1ea6c5f", "sighting--6c7d7586-1949-4bb0-ad6d-2cf24a04e283", "sighting--8e96da26-242f-4460-9966-296866ebe053", "sighting--efff76a4-dc09-4995-9ac8-edcc25a195ea", "sighting--b8bd9151-b4ff-4293-8625-60b153ebc433", "sighting--ab0360a6-c0b6-4b8f-af0b-3f83f71aa801", "sighting--2e337d16-0c48-4295-ab05-5f3bcae8b4e5", "sighting--3081fc01-25e3-4c5a-8035-ab036149eb79", "sighting--6323fbd2-2f36-4bdd-9630-bb582dbd6f80", "sighting--44f066a6-34dc-4b23-a4ed-55fe3dc91f1d", "sighting--9d7dacb5-6661-46f4-acfc-17959b5ba531", "sighting--5d0672b6-c243-45ac-90fe-32b1cf3fd705", "sighting--306aafa4-e617-4550-9c83-c4978bd9e0fe", "sighting--4f7b30e5-47e5-445f-85f0-735a91b7f7c4", "sighting--b71895b2-9c53-474b-ac11-5872d5f043ec", "sighting--9b927ad8-0555-442d-acb2-ed8f88eed531", "sighting--6e84b7d1-4b3e-49d9-a851-7e5c75178914", "sighting--298f7073-56eb-45ce-b906-22e5811fe7f5", "sighting--073bdbb0-7326-43bd-9deb-d23109c6ee6d", "sighting--31af371d-c4c2-489b-b545-a42ce4489034", "sighting--a78f8dbd-cfba-4a61-bba0-2c8fe2ddcd03", "sighting--2b724a2f-ea86-4631-ba6f-cdc834cbb03a", "sighting--4806a9e2-4bf3-4a3e-a9bc-f0ca9002514c", "sighting--d483b031-b79c-42d7-a9d7-698a78ec331b", "sighting--7fc9f951-e6b5-4c73-abd0-113102d40f1e", "sighting--6e312d0e-ba61-47a9-9403-64fc6f5e6dfd", "sighting--40212365-9440-40a2-8d5c-07524ff57d75", "sighting--3cf5b795-9df9-4446-96fc-8e3de184c75f", "sighting--4952d1f4-f8e8-4211-acde-d6be6e1249ca", "sighting--81892327-8137-422e-b4f4-84a2ecb05e64", "sighting--df9572c8-026b-4ce0-9fd7-b06c73adf15a", "sighting--6d2cb6b9-56c1-4f51-87bc-415aa821349d", "sighting--e31e8029-a822-4ada-9700-0c51da234e7b", "sighting--433ec33f-7e02-410c-902f-a30932f738e5", "sighting--732ecd94-4ffc-45b0-b1d3-c30feb722fd0", "sighting--da3ac519-3684-44f7-9963-14a44bdda4c7", "sighting--a5a9a340-cdf6-49b4-9748-d46e27732f9b", "sighting--32e28944-de6a-4d6d-b2dc-52a7b18a43b3", "sighting--3b972356-b157-4f40-90b7-85303e89aa49", "sighting--3e138678-dba9-4ffb-b1a6-8a1198382990", "sighting--88507362-a07e-41ee-a895-47259e720bd8", "sighting--903e323f-26f9-4102-a331-e590ae65461b", "sighting--22e95abc-d2b0-456e-aa83-88816e865f6b", "sighting--9ec196f1-1898-4ebb-8ae8-d7481c7182f4", "sighting--c05fbf39-ce80-4063-b083-ec2606893725", "sighting--b8c44350-fe7e-445d-9328-feb677df0de9", "sighting--b3c80f9c-8085-4cf1-86f1-880e1e04f098", "sighting--96219cf4-84a1-4322-92b1-0b3c0ecf022d", "sighting--c86ba3a1-3a66-4148-98cb-11216a2957bf", "sighting--c18f91de-1866-4d90-82a6-7284dcb81d20", "sighting--75d8530b-35b3-4acc-aabe-c988d97f05fc", "sighting--81a83ec0-4386-4588-9c37-7a22c9cc1441", "sighting--4f9202de-7e82-46a5-a5c5-58bd28e477d5", "sighting--36905094-bead-4533-a0f7-1c05df82b16e", "sighting--c5533056-3765-4fe5-97b4-68f514844b73", "sighting--55f75e73-3ae9-4e63-86f4-9cde9a6dfb35", "sighting--58d80f3f-7a6b-4d2b-ba6c-994d62d71688", "sighting--d904f49a-ca4c-41dd-8a96-02784dda5a6d", "sighting--5224b35d-4eec-4052-8fd9-18447395a04d", "sighting--03605bd9-fd6e-45a6-b7cf-5262e98793f1", "sighting--a1707598-d1f7-4404-8c0f-8e59b73d35f0", "sighting--d129afd2-317c-4169-bff2-a3968f5bffa1", "sighting--ec89b8fb-d636-42e8-880e-412cdd64c170", "sighting--c31d7c67-54cd-4660-9ec3-0481d00a0639", "sighting--a6672de4-318a-4c7b-a4fd-f50ebcdc8b52", "sighting--afc3c627-8bf8-47ce-a5b3-61bf371323af", "sighting--545963ba-2e78-4061-992c-3bf130485e30", "sighting--ce770539-3d22-46e9-b630-0b1a21ccf864", "sighting--e41f2b2f-ab57-48f5-aca4-d4a458d46f63", "sighting--6d9508d8-100d-4026-84e3-0f997dc199f5", "sighting--06779d25-77b9-4b1b-a632-a9de02196bd3", "sighting--941b094b-02f6-4a4c-9d73-7db0bb7582b7", "sighting--b17287fc-8bc1-402e-a8ab-69c5153a2d77", "sighting--04621cfb-5803-4b1e-b35e-3b5777f7f104", "sighting--a58292f8-e4c4-4dce-8f7f-b3b9555b8380", "sighting--32e222f5-adee-4298-90c5-dbd972f7c1db", "sighting--97efc073-064b-4a5d-9a6c-e32d31c0f68c", "sighting--5da1143a-284f-4a2e-9785-17be55bf4b11", "sighting--2c54a603-552e-4eb2-b3fe-1f330491362b", "sighting--d765ec3c-865d-4a65-a14f-f1a795dff8d8", "sighting--9b466283-6bcc-49a0-9a15-6f7ba51fc066", "sighting--5589a0ff-763e-4e82-bc3e-3fece19f48fe", "sighting--a18de099-025b-4f82-91e1-2b2c0feffb42", "sighting--f4186baa-b56d-4be3-a968-58a8e021f639", "sighting--15502819-18da-4a7a-8be7-8348de434316", "sighting--bf816193-50b7-4496-9d96-d33fc46384b8", "sighting--7bdad155-45da-485c-969e-762ec2551c5c", "sighting--b3930a69-d076-4433-a073-d931f0d23814", "sighting--ee2b02fb-3c88-4a22-8ace-7f46867550df", "sighting--87449e93-a310-4ea0-9fbe-0a9979c23ee1", "sighting--8cca2eed-3056-44fe-8171-dbd7bce87885", "sighting--5c598d60-a0cc-4fb5-ad6b-82af3d89c80d", "sighting--3067b9cd-caaf-4b67-a6fc-539bb62466ee", "sighting--f827cad2-6a65-4718-b6c1-29c9a84ab757", "sighting--0b58ceed-0552-4215-87b8-1bdfa47d89a5", "sighting--77d70529-c6f0-416d-a67d-a8ff45589932", "sighting--1669fa6d-be4b-43b0-ae2b-93fb1ac21f83", "sighting--03994805-bb72-4d6c-a17f-3b52abb88364", "sighting--ea3c3aae-d7b5-4d96-9b59-23aa84d5e7bb", "sighting--6898b595-d687-4390-907a-667935253611", "sighting--a7ea1bde-aacc-49a2-b744-92e41a1b4991", "sighting--8a1f371a-3b27-459e-8e7d-a69a2686bcbb", "sighting--bfc8faa0-eadc-4488-9c72-407956f6bdde", "sighting--61d4e54d-0cab-4f44-a4e9-9787b39a3a9b", "sighting--a8fb436a-1feb-4d9d-8944-9f92df5a2b07", "sighting--b105bc87-e5d6-4c96-a5eb-eafca7684e82", "sighting--ee2ee6d9-022c-43d3-9f4e-b4349f0cfc17", "sighting--f6ef9304-53c4-49ef-9c69-3be5eb596522", "sighting--0ae6c9ed-9dd6-47c4-938a-92ae64433901", "sighting--fe57bef9-8e25-43bd-9466-ded4a9c0e639", "sighting--900f9654-4727-4083-bbba-d99c92fac964", "sighting--b329bb9d-c4f7-4897-8e90-7bea65755a65", "sighting--a0e84e9d-80f9-497a-a872-efb2c93e8c43", "sighting--af0679bf-6bb5-4002-8572-df99cb8f37f1", "sighting--7f64320a-47fc-40cf-9422-f5913e95b77e", "sighting--afc8ccc2-4204-4f6c-9471-055d9d65075d", "sighting--2f2bd005-5be0-4f82-b859-16ea46328e51", "sighting--2d26d4f7-d0d7-41ef-88f9-5f280f57a504", "sighting--35f768ac-d751-4ec4-bb54-b058c8d33d2d", "sighting--8251d5b5-fb4d-4c9c-90bf-29eb5f8a03bc", "sighting--d7159562-d4cd-4581-91da-9944ab07e688", "sighting--49b70e70-0e22-4038-96ad-75ef29dcadb8", "sighting--c92f586a-5208-4a80-a6c6-c2c9f0274843", "sighting--274cd945-5303-49a0-a616-9dd6acf565fa", "sighting--59b05b2f-965b-4bf4-b1e7-c32369a71bdb", "sighting--69a16365-4e01-4250-8824-999b9e472cd3", "sighting--59659f7b-b0ec-455e-a156-2fce9fc92e42", "sighting--5b065abc-902b-4cf9-950b-e9d34ed4c3dd", "sighting--dfe855bf-5786-445c-a2e8-bbaa560ab964", "sighting--57e0b5ff-a968-4983-8de9-620535186bc2", "sighting--6fa7d5f0-a773-480b-9ff9-ef2fe11214c1", "sighting--a7dcb0e5-ce5c-4e46-ab26-29ae4435b152", "sighting--6b5effb5-ac82-4f33-8020-76702104963d", "sighting--01756d85-f217-41f6-88dd-5a072451dea0", "sighting--7f783a7f-86e2-4322-ac52-1a5928a4e366", "sighting--8ab43839-54fa-4cdf-8cef-db22e111fd76", "sighting--5d3dea20-75ef-411e-992b-9e5effa5e515", "sighting--fd38f3d0-2686-4f3b-b35c-129dc1f63998", "sighting--05a35a4f-b89b-4814-9252-28f33ad46b47", "sighting--7d520ef4-b3bb-4c47-8a51-86bfd12423d2", "sighting--96585ec6-308f-40ff-8e2d-711b56c6b6b2", "sighting--ab6f33e8-a4fa-42e3-82e6-2e67e6561c9a", "sighting--70302020-0675-471f-bf5d-5f342f4af590", "sighting--167d4ada-148d-4de1-a45d-121c54497826", "sighting--0aa29a4c-f7e4-4680-9dc3-53adcc576108", "sighting--5eaa7bcc-f59d-41e1-ab56-aede0fe42731", "sighting--b1a0a4c5-34bd-4558-92b3-287ed2e6e99c", "sighting--21f429a8-e021-41e0-ab5f-739260bf45fa", "sighting--b905f006-25b1-41c0-8d11-cad4324b3c8f", "sighting--fa1fbed9-231a-4d22-94cd-7bb85543f849", "sighting--107cadff-adb2-4c71-86ba-628d7afc630f", "sighting--3db58525-6d67-4100-9b58-53e85d93f207", "sighting--df5024b9-9dcc-4048-9fcf-5db04362a5f3", "sighting--95b7c9c2-e92d-4e14-a0f0-17a3a9cf1872", "sighting--37325992-f3d8-43d2-834f-938190aacaa8", "sighting--af5d5656-69a8-40a2-9907-06bbcf9fc034", "sighting--3bb719bb-1543-4f53-9524-d08d60e7b87c", "sighting--b7441f70-5ca8-4817-883f-30762693b501", "sighting--9fe842a5-2207-447c-8cea-ce6cefc46eb5", "sighting--7d4a2a91-a157-46f6-a25d-3d3a131449ee", "sighting--d8ac0276-61bb-4e95-b5d1-df6c91defb67", "sighting--06a53da3-9626-4a16-ab92-884927480fe0", "sighting--f43e956d-9ba6-4f39-9132-98f3603317c0", "sighting--47d5719a-1c9e-419d-a372-c3b70bb06902", "sighting--dc2be8a2-a73b-4934-abef-7448dc402c9e", "sighting--9aad3bfe-7472-41a3-9e5b-fb917d5fc7f6", "sighting--929fba46-619b-432d-a061-baf1427fca85", "sighting--66bb09ab-7c5b-4c48-8c30-5540948c9b06", "sighting--c3468374-7734-4a71-80e8-80073e84eed1", "sighting--45db135c-c2e5-40c0-a660-24d243547fff", "sighting--1a6f58c4-eb71-431c-85a2-b1e6f35bc6be", "sighting--59df3607-1115-43da-b35a-f9b4e35ab370", "sighting--a2c63bde-69cb-4288-81a0-a270c117db62", "sighting--e275bfa6-d7c6-465a-9883-37abdc8cb71c", "sighting--f2bf12cd-2376-418b-af18-55209dc41216", "sighting--99097b9d-7a80-4dd3-a649-d98c3ebc5add", "sighting--01e5f7f8-5359-4f4c-babe-57f57002dc4e", "sighting--6e61d83a-ceb4-486d-aeea-96499038af6e", "sighting--b7e61c18-ed9b-49be-b111-dad08c963a4f", "sighting--f6b19b6b-5cdc-42fe-9399-f7b0b62a8c55", "sighting--aa335710-f35d-434b-a5a7-a40f8d3fb056", "sighting--93925c0a-26bf-4470-a4b8-c9ddb5f47db4", "sighting--fc925b7a-51f7-4502-a06e-b03a3a010954", "sighting--d71e8b18-501a-480a-9e86-2387140a858c", "sighting--44597560-f781-4f52-84a1-6173fc9715e7", "sighting--da141c6a-02f7-4314-b3ae-df76c12313bd", "sighting--504e78dc-4d25-4739-bcf5-2aff11369b9b", "sighting--8f93b806-1f76-4083-89cc-2b95d4adc920", "sighting--fd0f30fe-db18-425a-92f9-826c5e9fc82d", "sighting--f1c153de-617e-45b3-b4b5-981001f8fcd6", "sighting--62507010-734c-4a4b-935d-01cddfd0ac32", "sighting--8058e7c8-349c-4fee-8788-fc3d6b9945c7", "sighting--d53b771c-c898-4655-8b2c-7ddf986ab2e1", "sighting--cebfa2f7-2af5-4679-abcf-331f6f4c6779", "sighting--72b61a1c-59b7-41ae-a091-bac2143f5561", "sighting--ba80edea-8243-4182-b8ff-d905d65198e0", "sighting--803c38f9-c7cd-4664-b915-aa54cc53de1e", "sighting--33db673a-57e5-416d-977c-f2e9bc6e8eb7", "sighting--80a022ef-69b3-4223-b632-1afd78b680a8", "sighting--2bd51912-2018-4b59-92b8-519a5fd9bf0e", "sighting--87afac6e-b8c1-4255-92a0-d7c728594d08", "sighting--02b806b2-7440-4acb-a98f-2c556531e6c6", "sighting--75b37cb0-6e86-45b5-b15e-a83b6dd32bfc", "sighting--218d99cf-6f51-4836-b616-ead08b17f717", "sighting--5a1914ab-affe-4499-99b9-2cc9520038df", "sighting--2f39c8b5-8baa-4059-b487-498dc0d73eb3", "sighting--98a859d2-e588-4ecc-a63f-c0232a1413d7", "sighting--7fa6aebf-a824-48b0-a3af-2bd66410c569", "sighting--48eb869c-e933-445d-b442-f71a5399e800", "sighting--81e8b2d0-ea53-40fc-9ee8-ad1996847bfc", "sighting--ba487a3e-70e9-4a54-8c7f-e7198165416b", "sighting--5193661f-1611-428c-b0e4-45f25a7268cc", "sighting--34c4bb37-0906-4fbc-b4fc-bc0a3797ffc2", "sighting--8e4b0c88-6490-4bbb-8af8-da7a0b2585fa", "sighting--4187c8b0-03c3-4f79-ac62-27a3fa469d94", "sighting--437f42a5-ce1f-40f2-b629-becd1a89915f", "sighting--9bee5cbe-5bf3-4d8c-8660-e11ee87687c3", "sighting--6a898cfc-aaa2-42aa-a86a-56774896eea8", "sighting--890231f1-5922-41bb-8268-ab680be06ffa", "sighting--b3738b91-c82b-4268-b950-d285c5dad214", "sighting--1217c063-e170-447a-9c21-f96fea466d0d", "sighting--c1b18981-8551-4db1-994f-266a08cde7b9", "sighting--99027e5a-c594-4490-8dc7-c90c3c8b0b32", "sighting--84a05a8b-ef5e-40f6-9146-8f2a13037433", "sighting--19fbffe6-cf46-4aee-beb1-af778844b30a", "sighting--ab5b3217-aceb-4d6a-a1a9-3e2504b79f22", "sighting--804d6fce-a963-46d8-89f2-da72b4b3e536", "sighting--bb814b81-fa80-45ab-9462-c3a6a5a616ad", "sighting--6aeca919-e3a6-4b03-8ff1-9dc2472b8fdb", "sighting--96d76a7c-f978-46d5-bbbe-43e81f667f37", "sighting--956f1d34-bab5-483a-bf68-0a7b7b80af88", "sighting--5acbabcf-929d-4306-a925-d2989dfeeb0a", "sighting--0aba93c6-8a4d-4316-866f-891d21aafd06", "sighting--4634aae1-901d-4aa4-ace8-3c63ab44b4fb", "sighting--d31d54d5-e46d-48de-80a0-d59ec9320e3b", "sighting--1eaeb5a9-ea9e-4f5b-ac99-4b018f6a38f3", "sighting--7d6dbe7f-76db-497d-960a-2678bc60f552", "sighting--97546f44-a197-4efa-81ff-cbc497644080", "sighting--1266a8c7-3a8a-4b09-93b2-16c35aa2f8a5", "sighting--28c0c4ec-3a78-489b-b2f9-db51ed8a6f15", "sighting--a8de2126-f2f3-4944-89df-ad42f419df23", "sighting--a0d72ae1-f1f6-45ca-8459-c8b18e608830", "sighting--438dbcdf-6f6e-4707-be62-852a83aae39a", "sighting--28f53510-d175-4e66-841d-67603003fabb", "sighting--5a6a7614-0087-47c9-9708-7a00abfd9f7a", "sighting--30da2669-f373-44fa-8b36-41c72613371c", "sighting--39d3ddd5-526d-41f9-a072-18bd17774c80", "sighting--15c58337-0d48-44b5-9178-1d7cd2c1097e", "sighting--80b213a1-6ac8-4ea6-b7fe-310f5ec63da8", "sighting--b7c4c33c-961c-4932-80e1-baf65345f924", "sighting--63b68336-3d85-4103-9589-240b61a16a3b", "sighting--5cd8c345-6358-4afa-bbd0-557f0f17cadc", "sighting--89b4ebdd-1931-4309-9c3c-b315e461b672", "sighting--5cfd90f5-c407-4a12-8b71-e70dd23574c1", "sighting--196e610f-50d7-49e5-8519-4db2205757cb", "sighting--a080998e-277d-4f7d-8878-01f1b2efc075", "sighting--60dabd1f-e8ce-4e43-b3fa-ef76254441a7", "sighting--db2464c2-31f4-469c-b0b4-e81dce3784ca", "sighting--ec930416-d339-483d-816b-8145cc1ca825", "sighting--5dd6863c-9776-48c6-a44d-0b7f0dac7951", "sighting--920de7e9-ec90-45f0-9959-15aec8ba6ddf", "sighting--f54b21b7-b430-4c5d-b943-a5054e329f09", "sighting--eec5c699-41cc-43b9-9d39-1384f62cde21", "sighting--6abde964-b5ab-42f1-ac9b-28c2ba9d1f58", "sighting--021cb50d-e0db-454f-98b7-685db1831918", "sighting--ec7500c6-4ac4-4d2c-83ff-eab85656adb6", "sighting--ccfbe1e0-ba9e-4237-939a-e9a5f1f6aaa3", "sighting--2b7eff12-bd28-4f6f-8209-7322bf4b0f4a", "sighting--22cf2229-fbbe-414e-ae11-5f7a356a9df3", "sighting--a50e4a60-a80c-4f3b-9ff5-fe1737892e98", "sighting--a2818768-fd51-4ef8-a5f9-86a5b7e96ff3", "sighting--2cec66df-ea28-4e00-a986-c89d2fcd0189", "sighting--47a0c779-4a83-4cdd-9792-c77df869662c", "sighting--84b628f6-dcd3-43fe-ba24-5ca3a28bd3be", "sighting--1f0b7ea7-5f62-48ef-9676-cd3958c678f8", "sighting--45ea55c3-7256-4939-a46a-f296cb6da668", "sighting--3ca1a1a8-904b-4211-a0cf-0d4ce657838c", "sighting--dcdd96da-e316-4b08-aa77-b5759b28a264", "sighting--1bb6b072-4446-42ee-ae27-c6fbca3aca4d", "sighting--4ba5390b-d39d-479f-997b-85537116b94b", "sighting--941c12e6-8c14-4a38-a895-5869a9e3ca2a", "sighting--d99a39f4-c5f0-4183-9fa1-371d20f3f66e", "sighting--d68b475a-97a3-4dc6-9140-c686b0434ee8", "sighting--6df17056-7ac5-475c-b898-e4b4fef59029", "sighting--861977c2-403b-40b6-819d-bf326a75ce06", "sighting--b7965593-5c55-4f6a-9373-31f94e4d72d1", "sighting--5331051e-868c-4538-9e5b-e702084f3a1b", "sighting--c3c8c593-3479-465e-985a-ab7e0e27e8d8", "sighting--ab514087-d504-42f8-a1da-e44c85ea6e38", "sighting--fad1188c-45d7-40a3-bf75-cd7968acd2b5", "sighting--2b54337f-6f7f-4c9b-ad9d-caeb44ff6dc2", "sighting--02ad6dad-9460-4bbe-adb1-81f09129eedb", "sighting--c215e0db-7e24-47b9-9539-3800aadb1314", "sighting--b4ba46b5-6c35-415a-b93f-99ecb34e2ab2", "sighting--4700d480-c1eb-4940-b89b-12ee2c9b8ca6", "sighting--a9524fa5-83f0-4f5d-b1f6-50aedf023874", "sighting--59d2bcc5-cb3d-4b38-a9a2-5bd3b0263336", "sighting--975ff783-e72b-4d43-a668-2d53ed94fb99", "sighting--ea1134e5-6abf-4957-a90b-5315697c3c77", "sighting--be68aa07-0429-4d26-b804-5fd79ba85972", "sighting--80a94e9a-6f8e-4dba-bb60-126518c17e17", "sighting--1c260f50-63a7-4c8a-8d44-ab4cc6797918", "sighting--9568f137-3397-405a-826c-99ec1539899e", "sighting--46d7223b-9502-4953-84fa-73f2d3fd4fc9", "sighting--c39ecb49-c2c9-47ab-984e-e522297d7d89", "sighting--8b20a5fb-506a-429f-aadb-54b6f40cd13d", "sighting--086cabcb-c82e-409d-9a11-aa8b55482e24", "sighting--14250ca6-8ef7-4b04-b853-77765f680245", "sighting--52068acf-b169-496a-affb-ca3600960c7a", "sighting--62f33361-6364-4133-a4af-404903c72dc6", "sighting--122da555-2442-4484-8e8f-043b7059af6b", "sighting--b73b848c-985c-45e4-83f1-d363a32dfcd9", "sighting--8842c5e6-a0db-470a-88b7-13bed665c968", "sighting--c8d98ecd-6254-43d7-b972-0cbc941d1898", "sighting--e9987292-8b83-40f3-9198-e02a32d9f57c", "sighting--2916d892-183b-4769-a193-9ec8dcfeeb37", "sighting--5a255072-f213-455f-9333-687776e1df70", "sighting--eaf2ad3b-4c77-4a14-87c2-891417b79afa", "sighting--95907842-e66a-45f8-b50c-45750d971989", "sighting--ef349b0d-c6d7-4e0e-a9e5-ae4445a12f77", "sighting--4b9e8ca6-b331-4f76-ba78-f72689ee5742", "sighting--77d7bc14-3a22-4954-ab25-fe1b83c8e37b", "sighting--b5b6d289-d5f6-43cd-931d-690d514fa574", "sighting--1b47d00c-8faf-4271-a971-d56b39c6cd25", "sighting--4932cb4b-e4ea-4f37-8921-64ebff81a276", "sighting--e86c4dc3-f98c-4182-ac3e-7a47e39b2b36", "sighting--11e0fbe3-b03e-4145-bf25-994f46b538b1", "sighting--a3142e5d-257c-4891-a219-8aa0650a3bc6", "sighting--6db9a30b-c67c-49e1-a1e6-bce29add8b02", "sighting--3997ed08-42ec-481b-abe7-9dea0a48820c", "sighting--6ad6b049-d610-4868-831f-f9573dfb4b2c", "sighting--5557fd85-8683-49f0-8cf1-b4f14c7faf1b", "sighting--46953515-aba8-4fae-9b77-a03b4eca20a8", "sighting--23a40740-0469-4253-8b85-612202653d92", "sighting--28627b94-796a-4ce0-9dda-5746e0e7504d", "sighting--23e0a6df-b1d4-4d31-a34b-2c93de80f197", "sighting--13ac748a-510d-4a23-b4b1-8177c88f722e", "sighting--6a51c803-a679-4b7e-a97b-b04c926cbeab", "sighting--c7d5be99-7c7f-46d2-ac68-052672b23a05", "sighting--773c042b-7381-4244-8667-dd35e703f6f2", "sighting--93d653df-db31-4536-bc00-a7c78bf638b9", "sighting--e42b889b-4afc-45b9-9bbd-d1bd46ba8738", "sighting--8c74f14e-e952-4b23-95ea-7795435733f2", "sighting--40c38490-cc61-451f-8b0e-ddeecfb69a32", "sighting--fcdb2620-9eb7-4ad5-97a7-b17ca609571d", "sighting--2bdae7d5-ef09-4046-9d99-f582cc7983ee", "sighting--66308036-32a9-4e5a-8654-edb008ddac9e", "sighting--d38e80d7-add3-43bc-a0c8-cc474de66643", "sighting--d735655f-52ac-442f-8e9b-95c251767c27", "sighting--b66bccbe-24ae-4ce4-bba9-d5b176be2f1d", "sighting--67a375a5-4fdc-4eae-9d29-1a8fbeefe3dd", "sighting--df353295-2fdf-4ad4-8c5a-d8675042148e", "sighting--9c64808b-b274-46b8-9f60-e8c57ab419fc", "sighting--721c03c5-cbf4-4869-9299-54e23650c756", "sighting--1a5a6610-205f-47ef-b303-e63c4c3bf53f", "sighting--c85afea0-6bac-49a6-ad12-a1721785e23d", "sighting--652511a8-64c9-4619-aff9-276d36735e44", "sighting--df8a42f4-08ab-4e0b-9782-e8ef4aa8e5fd", "sighting--f30afa9e-856d-40de-bbe6-78ad6f7f3b69", "sighting--10e21a2e-319a-4310-ace8-b68df18945c7", "sighting--16ee1a69-e467-4dfd-bdd9-79dcbe922d0f", "sighting--16006faf-19ec-4c9c-a1be-1e78a2929c3d", "sighting--0bc17c38-dc33-4bd9-b767-74c4f9293528", "sighting--2093619a-94b7-4271-908b-a8615a5c25e1", "sighting--12b76c96-ea63-429f-9694-6890b12b0ab7", "sighting--aa6443ef-bcb3-4437-9311-2c54ce9740dc", "sighting--11966f4b-60c6-45c6-8a41-baf9b96fa6ab", "sighting--06205221-143d-4f4a-8ccf-2a11c16a860a", "sighting--bd556070-a109-4175-8756-f0751e378f30", "sighting--adc7cdb8-fcdb-4dc0-a973-b85cdef2621b", "sighting--de4943c4-7ded-4c41-8b33-194d9fe70df1", "sighting--95f15715-c2f1-4403-bc3f-5f025d0ae9b5", "sighting--9b058fb1-265e-45fa-b4cc-829955e1ae12", "sighting--e7352f19-18b4-4a93-85d3-b76dbcfa5b1f", "sighting--f1b3fba0-b0b1-4a38-9ebb-038897ea06e3", "sighting--3f639e24-c272-4032-8812-ae2459c76af4", "sighting--ddb64cba-0b21-4f12-b3dd-54a0e5e6110f", "sighting--0e6a7497-ff8c-41cd-b9f2-2be2eb3ff028", "sighting--64629f4e-9ced-437a-970f-a79f677d561a", "sighting--257f56b2-7c49-41f0-b2b3-6194b1d3acde", "sighting--44b8d8c0-cadf-4007-8af6-1e584927049d", "sighting--0a43d78f-c24e-45bb-bcd2-159b54a3d3cf", "sighting--3a123fec-c49a-4d46-a45f-a537eb3e2c22", "sighting--9fa8036f-654e-4361-972d-b11974f9cec5", "sighting--8c57921c-cdf2-4cdb-9f1c-57dab5fab029", "sighting--8e1bb8a2-0cf0-44af-8d73-b38afa47c2a5", "sighting--f8016a93-da51-4d20-a47f-96e3f67fef7f", "sighting--df6dc05b-e97b-432e-ac51-4d2d97cbfdb2", "sighting--1ed8b9b7-3322-4712-8131-825a53f1ee3d", "sighting--c01da206-41a7-4107-9c21-b6915b615f18", "sighting--dcda217f-0aa5-400b-a0d6-1417a69a77f6", "sighting--2ac23a75-2203-45fa-b825-f9678e109200", "sighting--93d9e354-5c29-4ca3-9437-abaaa0ed83f0", "sighting--a5c41d72-096d-42be-970b-b31b4606d455", "sighting--32e578ad-4f44-4032-bb24-c4a963b42477", "sighting--2b3aa3da-06a4-402e-9cc9-8d63c80957f0", "sighting--37530100-7190-40f0-9ffb-f3343246bd53", "sighting--0f40a548-c788-4024-ba8d-e89a6df5757d", "sighting--9eef8475-24a1-4d7e-be22-e465fa322c95", "sighting--143822d9-d7bf-4921-94ab-53bbe954dabe", "sighting--defbcc3f-bb22-4eff-a38a-eabccbb6da48", "sighting--713b12a4-9892-499d-a571-d1308b7b8bec", "sighting--b1648c0a-f433-40b4-9d33-5b126dfd8ca6", "sighting--17f41935-4bb4-4b47-9967-8f34905ed5ee", "sighting--b8fb88bb-0064-4d88-ad6e-982c586b2312", "sighting--f1a39cb4-da8b-4d4c-b00a-6d6c6a88da00", "sighting--0a1cf8aa-1fcf-4872-bac9-7ec27eae5456", "sighting--3fd18dfe-abef-4ffd-8202-50fc09c0898c", "sighting--d8941f84-fa68-4b10-b1b4-c45cf674c61a", "sighting--2602d9c8-a722-4ded-8475-28e8cb15a2af", "sighting--1b6358c9-25ea-4b18-8f16-06577b9691fe", "sighting--930857cc-8447-482f-85c3-d2a793357910", "sighting--911c4ad9-c9fd-47f6-83d5-683c99cb9fff", "sighting--a0d56553-7e48-44b8-8e63-2e35ddc6e6f2", "sighting--767931d8-335c-4d23-8638-179aa6d7e51a", "sighting--910b4f2c-7159-4f6b-9dad-012c14dde4f3", "sighting--46db2b3f-9cd6-4ff0-9cb6-ac6f1411a277", "sighting--3f7d34ab-f40f-4bc1-8812-36ae50060552", "sighting--744f2f8e-84ea-4269-afdc-75849437e384", "sighting--ac0894a7-ac11-41da-a1d7-f7cbb466c57b", "sighting--61c1b89b-4ba6-436e-a027-6021dde00278", "sighting--9c996d35-f656-4bcd-bd28-d637b487b38c", "sighting--9fabc7e5-51ec-46f2-911c-dd1b3bc0477e", "sighting--9b4bcbbd-8498-443d-9a31-615c2d7c0529", "sighting--fba0a867-1d5a-40f6-857d-8758c61b2322", "sighting--463f1eb2-2fa8-42ba-b5c2-bd19097ebbd4", "sighting--9d408fe1-8c81-4363-86d7-ff3797c3b8c5", "sighting--f36ce856-661b-4324-bc9a-a16771c7d933", "sighting--940c864f-f4af-4420-b9bd-e872444ce473", "sighting--79870655-290e-4fe5-99bd-cf15aa6d5646", "sighting--5888f891-d0a9-4ab3-b6e5-79def44e800b", "sighting--5badd854-3dcd-41eb-8b2d-a5d4e724fbe7", "sighting--8088958a-a3fc-49a4-864c-fe65a6a68aef", "sighting--ae1d24d8-273e-483f-9a53-237fa326f149", "sighting--373733f1-b9ae-4e8a-b3c4-750da0f56c56", "sighting--eb5ca38c-fe7d-4b72-b569-34a0a7b9fe80", "sighting--d8f9b213-6df4-437b-9683-857378432e05", "sighting--c215655b-20d7-4435-ba6a-e70344203e7f", "sighting--1df8b861-772f-4420-96d3-8d0d66f412d6", "sighting--71fc7314-5f7e-4da0-82cd-66b7cf55ced5", "sighting--c041de1f-35e6-4f4f-8e60-8fb8c63c2128", "sighting--d56ce19c-66ed-436c-a50c-7b3f5edefd9c", "sighting--aab20dc4-c416-4afc-9e4b-cea932ffc758", "sighting--f56f9d11-8ac2-451d-be7d-1de378f1c17d", "sighting--73222bd2-2c14-47cc-aeaf-dc75638ec220", "sighting--e391299c-6530-4b93-9e4b-2f9552c5929a", "sighting--85219489-5eed-4acb-b9cd-6af22f44cc37", "sighting--4e2fa3d9-c67a-4bf8-b0a0-2095fd544bed", "sighting--c71ef0bd-aab1-4d4c-994b-6a29b2b951dd", "sighting--bbc8ff96-8053-4a86-9d6c-78439ecb9d8f", "sighting--4056f576-1a38-4684-8870-60ad4ea632b4", "sighting--d9388405-3494-4e0a-a48a-7e8ec4e05122", "sighting--07c437b8-4bcf-4bde-bc65-cd66c72ff1af", "sighting--47200c49-68a0-4348-b7a5-6d3169253b11", "sighting--f3dd6607-794c-49b9-959a-a8af15c775c9", "sighting--ef9318ca-1c9a-4205-a0ec-e9b6ba6b83af", "sighting--76082413-d196-4382-bfde-19a8022a20f4", "sighting--8fc2f877-09ca-4a4d-b36a-75832473775f", "sighting--68b02bfd-a143-4859-b625-31ae07ab320a", "sighting--bfd008af-d10f-488f-a4b7-805cdd480258", "sighting--f1ab9b21-6080-4448-b8c4-03ea90c7eaf9", "sighting--b734262b-c867-4c98-9bf2-ab8a59fc2934", "sighting--b5ec0658-9429-44c2-ae3a-ab270e6bcb1c", "sighting--bc08918a-c022-44b6-8ca5-5365c74e2181", "sighting--e3f603e4-d634-4210-9e59-c11752cc7417", "sighting--9e3e08b4-66cd-4344-b753-72f213c57061", "sighting--b14a9d6c-5907-46ff-bd69-fc3682a5bc81", "sighting--522d41c6-b1e7-4616-88a5-3856f0c2953c", "sighting--ab48e848-54f8-4ca3-a9cd-e513872d84e4", "sighting--7acca128-e9ab-4cbc-bcb5-7e48c0e91102", "sighting--bca21069-376f-407c-8454-1918ae3c21ec", "sighting--dbc026c5-8f3c-411e-9a21-aff87b053d8c", "sighting--5aab26df-a76a-47e4-8b2f-ca2eba071d41", "sighting--7fb3ffa9-402b-4b16-885f-7363c4c7b237", "sighting--c17ae350-01c0-4b9f-a062-7333a7e903ff", "sighting--1e271618-7031-4dc5-b7fd-d691002be229", "sighting--3b15d092-ebb7-45f1-9a1b-44b130d34ea7", "sighting--7037e950-42f7-464b-a28c-1d219e148d1c", "sighting--6d7a4d91-80f4-4c31-88f5-14f4f60c10a5", "sighting--23949098-0de7-4489-b770-8788d1cb1f8f", "sighting--34b1f284-e45e-4efa-9fb0-53b8c368dc69", "sighting--ab0c7b72-6af9-4025-9e55-c7a67f46c245", "sighting--a39a2e13-cb78-4fee-83e4-e2a7037c8eac", "sighting--a7ff4f19-87af-42bf-bbae-473513e459d6", "sighting--7543d719-b815-47a4-aecc-6f9cffcc872f", "sighting--67a32ec3-6e9d-4e06-a29d-98cef373cbf0", "sighting--cf521b9e-177e-45d5-a1b5-e588b266f94f", "sighting--e3ec8881-b6ed-4dba-8c5b-5be1aff903be", "sighting--389a5c93-b50f-46a4-a2e2-a343f1551ec4", "sighting--385f60e1-a2f7-44ef-bdec-11df47e31268", "sighting--0d6d30ad-4e00-4a8c-b1e1-9e30e450784d", "sighting--eed91115-bed5-4302-b62c-db3a2f3d28f5", "sighting--5e7a6512-54cb-4cd8-a458-e91eb5f187b6", "sighting--5e7f9f9a-a01c-4b43-8ec1-90e44a7ce0ca", "sighting--6e50a4ce-0454-4710-a248-1108ee2bbb80", "sighting--b3de0b6b-7b45-4219-aac4-354a682142fa", "sighting--c82aaf68-2a25-43ce-9a74-1d7bbe74d557", "sighting--a33ab3c9-8e06-40fc-800d-35a89c752994", "sighting--4eb01502-c674-415c-b300-0549a141b5ca", "sighting--51202136-d44a-422c-8102-3bfe79fcec0b", "sighting--1f4defa5-66a4-415a-a9c6-9c63cfa84a24", "sighting--abb54740-637d-4f4c-ac17-6064c69255f1", "sighting--5d3ee744-7840-42ce-86e8-5af9661a48c9", "sighting--a87ff886-905b-443a-bfa9-7cdb4156db1d", "sighting--4dde7de9-75ef-4d8f-b064-005b8b41ed32", "sighting--71b7a782-67eb-40d5-9eb5-570261f9e25a", "sighting--29c6779e-b009-41dc-8856-82557efa4923", "sighting--06e5a626-cbf3-407f-bddc-8536400391c0", "sighting--1812a2f2-cce9-4e0d-9a0d-c760061f53e1", "sighting--4ac2a937-7e31-458f-a8f4-7fa84348b124", "sighting--6ad5398e-c2e3-4b29-a080-65212fe68773", "sighting--810b3c42-c9d4-4320-8b53-f529e6ec1579", "sighting--a20ca5a5-a4b2-434c-ace9-e3ee7f6b5ba1", "sighting--50626690-7359-4308-9775-b84286638b7c", "sighting--891d087d-b50b-4dd5-bb41-026af0e85aad", "sighting--df922586-9df9-41b9-92d1-f2c11d2a1c76", "sighting--5becfda1-5c58-41de-bca2-55a25c9fee2f", "sighting--c93586e4-bf62-481c-a79e-01d10cc59881", "sighting--5f603fac-f969-4924-a516-757be17a25b7", "sighting--a544e989-0c07-4f42-9e91-3b1645527a68", "sighting--095b0d09-fac5-4ed0-b400-0eedccf19f01", "sighting--b9b2acf5-9534-43fe-86a3-d4032354a12e", "sighting--b5325702-684f-4ccd-9e41-a8d4232c510b", "sighting--7b91c054-0341-49d1-ab77-183510bcc06d", "sighting--fe9d82eb-f5bd-435e-84f5-3b46234d3bcd", "sighting--1a4d9e78-5378-4110-86f8-63381d362b57", "sighting--13ab6fc8-b220-470d-974c-c8f142fcfeaf", "sighting--dad88fd0-a69d-4056-b343-1e8eb8acd4fc", "sighting--2b29dd69-f223-4f05-8b8d-f8d51fbf03f0", "sighting--c7c2d2ce-5058-4fa6-b5b7-2bf5ec6583ee", "sighting--9a51c6f2-bdfb-4cc3-91b3-24770b7d787e", "sighting--240371c8-1928-455c-9d99-ce60ee3f42b7", "sighting--b59e0cb7-7fdf-4e31-947d-acbbe65244d4", "sighting--17edc33d-dbce-4f9d-bb29-ffeb3bbde356", "sighting--70668138-c2b6-4ffb-9409-280f00306e30", "sighting--2fa13846-c38b-4bed-bd06-762c11193bfd", "sighting--2d892f89-08a0-4dda-a344-8d929a55b44a", "sighting--a5432f70-6a34-4bcb-a593-bb59b2c7a370", "sighting--afe7aef5-7c50-434c-b00a-a40d36292ee4", "sighting--13d17ea8-0803-4a5f-87af-785f9fd54777", "sighting--75c55a43-5de4-4528-b04c-8bc47c7ddae9", "sighting--58c698c7-434d-4c42-9272-26710b9082c5", "sighting--2205203b-dc8e-41ac-91e3-bdd0b12155e6", "sighting--e9ba468d-15bf-4756-ab99-002075093bfe", "sighting--760116cb-c359-4f9c-bbfa-e4bf449b5a49", "sighting--907f3c50-0294-4273-9efe-b6e08687373b", "sighting--fea06f99-dc01-44da-a952-7058be7c160d", "sighting--bb6763cf-e8b4-4ca6-8657-baa496e642dd", "sighting--2e4acaf1-84a1-4b08-9055-63b0365df9b0", "sighting--1c0fbe2d-9e30-4150-9346-daf673e0eaeb", "sighting--5595a287-ba50-4164-87f3-ef1b26f3c89e", "sighting--a26a04d7-c49f-4192-84a6-a61c2999b62f", "sighting--10d82447-c3f8-4756-b125-2d932c076456", "sighting--89e0ec8d-e7df-4eb6-927a-ea4fda4d8e5f", "sighting--07559758-f816-4a72-b463-91f13bb65444", "sighting--4b1c7545-0995-454c-a6b9-9cdd5c81a641", "sighting--7599613c-c396-4f96-9701-e34bb0e1d6cb", "sighting--c257e5ba-da5e-4758-b4f0-31227074042b", "sighting--1601d297-b8b4-44b4-8559-f6234909c1c1", "sighting--7ab0a69c-dda1-456b-a1ee-016e71d4795c", "sighting--0b013685-aef1-4011-bd0f-9275a5f7ff03", "sighting--75cd0a77-1f92-4d40-9c4f-7e2bd40d0930", "sighting--08f965cc-cd85-4714-b86f-dccb68383d14", "sighting--ed207dbd-ef03-4a04-b27c-ce93f867d3d9", "sighting--da1550da-4dfd-4602-bac9-3202cb715c6e", "sighting--dc489323-02e3-48ed-bb85-2707c6c837b1", "sighting--f765669e-4d5c-40cc-b091-871fc8de7ad8", "sighting--e8e0523e-1a28-4ebb-98ca-bb488d3ce9fc", "sighting--9e059fbc-3397-4875-82d2-15ebd2eefe55", "sighting--1f6a36e1-875e-45bb-9a5e-8d27c7738ff4", "sighting--62484da4-b4ab-441d-adf6-b73f00071b82", "sighting--349a2406-76bc-44f3-8e4b-44ee2ad918bc", "sighting--a5ac53ac-e344-4022-94a9-6b1c7ce8ffaf", "sighting--d4aabab8-61e0-4dad-9814-e59d41883000", "sighting--b9c84d14-8def-41d2-aaaa-5d6907d42535", "sighting--8efdfb6d-ae88-4cba-8d3e-224eb08ac00b", "sighting--0e9f5d14-fd32-4562-b4ae-0fffe1df3515", "sighting--10bb908b-8d13-4b74-8481-2b61dc3bca6c", "sighting--90bbc001-084f-4596-a01c-2d747db1493b", "sighting--a24c52e9-5ced-428d-84dd-c93b5cd9ebff", "sighting--8fc5e10b-d410-4132-af38-e2d7de460765", "sighting--8e826bb6-a14e-4a99-8076-b3eff115485f", "sighting--ce0ac21a-200e-4919-b7cb-70a40ce11e4b", "sighting--ef6b4190-3015-4c00-81b3-693d88c4fe42", "sighting--55b23fb0-4bb2-48b2-bf86-69e0b6b76dd4", "sighting--8f778ae4-3459-412b-9457-47e45e18e02c", "sighting--c3a1a149-e360-45fe-8561-4c9928e76db8", "sighting--609e2743-b9b7-4ee2-ae3a-ea69c83acea8", "sighting--1663f8cf-f2b3-4f0c-8dd7-00b69b6ffdbe", "sighting--e37aed24-5104-4721-a9f4-495e9ddc5349", "sighting--8329885c-0293-4b0f-98fe-872705339873", "sighting--1266a782-b3b6-4fd2-9cd6-11ac77c312e7", "sighting--582de987-a580-47d7-b1e2-368fc1a0a5c9", "sighting--3f5c728c-9724-4463-a896-388b01e57369", "sighting--36b9be12-8819-4d00-99a3-fe9ecf85f947", "sighting--db2e5f88-203e-4d1d-9142-309dd81eabed", "sighting--8a9019d6-73b5-4410-a917-2c757c9e4cde", "sighting--931384e3-b527-4ede-ab0d-686d43c3af41", "sighting--064db484-b137-4213-88be-0962a90768e3", "sighting--1ee30c3d-5301-4304-9d1d-652c34c4df6c", "sighting--c0c821b1-b8ae-48b1-be94-709c3a05e09a", "sighting--bceeda37-b173-4eaa-bf70-8b5ac1c3cabd", "sighting--56caf1ae-38e3-4cfd-871c-07520c82e77d", "sighting--8162ced0-bfd8-47c3-891f-c02d4bc8cada", "sighting--b9f55bd9-443e-47fd-9fba-3a6e56fa0e2f", "sighting--9f27fd24-8ad0-4113-9527-5e36fa4fc6cb", "sighting--56570a9e-69e9-4802-a997-685050fab0d7", "sighting--98456f9c-4ec1-4a69-b1b9-5223215576d4", "sighting--82216206-9785-49e2-b4d1-70ae9de331b3", "sighting--d06e6cd6-13cd-4b99-8624-905e4e610879", "sighting--0590dc75-7b00-4c9c-ac18-3c4901229107", "sighting--820f1526-9fc9-44f4-a3ec-4a72a0834777", "sighting--e7d39804-e7bf-4c5f-b42d-a6ed571c9b93", "sighting--87ed9561-be58-43f6-97a1-9e531ec05f93", "sighting--ceb6ee52-414b-4f46-9789-03c4ead00b26", "sighting--2ec8b187-301c-4b15-a531-e5307edb6e4e", "sighting--31cc7ef0-089a-48ea-b2d5-89b5edc84922", "sighting--05523295-a820-4faf-bf5f-42881b86a386", "sighting--1d422bd3-659c-4bdc-8127-75d689667d80", "sighting--7203a725-4ba5-4bdf-9687-0d598c18f05b", "sighting--5c54995a-1070-4646-8163-7587453c1b45", "sighting--2b3d8fbf-353a-4e56-b4c1-e06e78619701", "sighting--49a648ea-aad1-42e1-add8-a6b048ec9579", "sighting--081c7425-268c-4798-af1c-bef3a852caac", "sighting--612b7a83-c822-4186-bf95-f3bd73d6da83", "sighting--514abe26-ac25-4ffe-84d0-e8a66b19018e", "sighting--c926feba-dc15-449e-939b-8c5440bed924", "sighting--088ea9c6-70cc-484e-912f-a72663e42586", "sighting--5485e79a-8602-4143-9b2c-46a9ac7bd2d5", "sighting--1565ea79-1a54-42ec-b1ac-65c0e5fec2e0", "sighting--ffbf06cc-dce1-490b-a4ec-3045d239041f", "sighting--f34614c9-f934-4f9b-8bc5-547262be4b25", "sighting--bfcf2b5a-496f-4fb5-adff-b2a20f635bc5", "sighting--3bc88825-da25-4685-90cb-6f9b69176c61", "sighting--a0ade25c-2b46-4749-8c37-e57f442f3353", "sighting--06dea94d-0b3c-4556-9177-7f8494a808a8", "sighting--a81e0985-c136-416c-bb4c-255e098cbe54", "sighting--43bb3363-c5c2-49f6-8a02-fa1cae77a2c5", "sighting--89203796-9eff-4cd3-a733-e273a822e2e4", "sighting--df539c29-2d49-4636-bed5-4102fd29f7d3", "sighting--62987e39-aaee-4f4b-9e4e-d4a4b921c54a", "sighting--6bea5bb2-12ea-4fcf-80cd-a553ede1b2e1", "sighting--6ed1a0db-6ab7-4ca8-ac72-0fd0c3f42939", "sighting--c641d601-6f72-4d20-a90e-e041c2c3b95d", "sighting--6dfe1a0c-1f80-4b1f-bfa8-e9671e6add5d", "sighting--6f77a4f9-13e6-4ea7-b6d2-d0966423e676", "sighting--f8847a0e-365d-4af1-b3ba-60678efc43a1", "sighting--f9a46a94-5bbb-4277-afba-8b062869f206", "sighting--f31b6da2-c51d-41e6-98af-99212d3ba5e0", "sighting--ca9fbb1b-2d9f-4b1e-81ca-c5db585ccd09", "sighting--55fea59a-a65e-4220-8170-581d063b2c79", "sighting--a9ffa78c-150e-4605-b204-0995f297569e", "sighting--ab9c518f-6fec-408e-a876-cf152a55fcc4", "sighting--fa2fa010-2716-4230-ae4f-91e1a16e5f77", "sighting--8cfe64bd-3316-4de0-b084-1332422e10a7", "sighting--db9dd6fe-456e-45b4-9ce2-47165bcf0721", "sighting--553aa87e-dc3a-4121-b9f0-38d2104328f5", "sighting--7a2af309-f068-462c-8e25-26f2259881e2", "sighting--6a968fe8-8950-4be1-8530-aa3fdddbca4c", "sighting--c610ceed-6106-4d19-bfff-0dbd2ab0ad8f", "sighting--d9fd5c50-ef27-4bcd-96f2-84c52c213189", "sighting--4ac6ae45-8b8a-40a8-ae0a-c81be65e226c", "sighting--b4ff2df2-5d22-490c-866a-a11100e10887", "sighting--bbd91809-9aae-45a9-bf24-fcf089f92f55", "sighting--bc3025c5-6e82-4eab-b1ab-fa029429a863", "sighting--39ec09ae-97be-404d-abbd-8f15c28cf7ea", "sighting--6b98b01f-d887-41df-8ebf-1f26a361674d", "sighting--bf0e1d43-78df-4fad-9d05-271eb9778c27", "sighting--153c4b49-bed5-4abf-816a-626dba054b8c", "sighting--9b327905-1512-4863-a17c-f3e799a5e2ff", "sighting--5a561a17-8376-4959-b2ac-aa03e3836352", "sighting--3299558c-60de-4b04-b455-10dc3649d620", "sighting--79ddd1aa-3e3a-4bd5-9a87-1c68faf127e9", "sighting--33d2995e-0b68-4c74-ad96-e0042170d469", "sighting--60aacf47-7f70-42a3-9357-126984606aac", "sighting--435f1718-da83-43c1-8b9b-eaddb73b6970", "sighting--ecf0419f-e945-4b09-a4fb-ec39d83a172c", "sighting--41c2930a-ebfe-4de2-8e92-30685a48855d", "sighting--f118ef0d-adb1-48ca-81cf-c8f980e65ad5", "sighting--aa3640ee-9abb-4ee6-8bf4-e1a8a7f55606", "sighting--ea7fff53-2b03-4c50-b6f4-eb24be703a23", "sighting--e739e62a-ca40-4248-aab3-29d1fc06e68c", "sighting--75e83156-28b4-4514-8aa7-62e6d3e59040", "sighting--598534f9-137d-4da8-8082-b2b7a547a5b0", "sighting--9bccee65-d11f-4453-8685-e96573a3e092", "sighting--cb5f99f4-cdfb-4a35-93d2-4166780b1bf9", "sighting--a5407dd3-2eba-4196-a6a1-4b46a2344c91", "sighting--3b9077c4-8705-4127-8423-e606d9478f79", "sighting--56cf614a-c256-47c5-b9a0-ced2b47c70b6", "sighting--1e3aea17-1b8f-443b-9ee5-5a0fe4671149", "sighting--a41a5f75-fb0a-4f40-9e2b-e12fe7eaa815", "sighting--d3f0b0bb-4003-4a34-887a-5f30d3c2da48", "sighting--db92114e-8f19-45af-8e4f-a843d212ef84", "sighting--e1ee9504-c312-418d-bf5c-86d715376005", "sighting--ee1526b7-db32-4153-9ef4-049b4afaea24", "sighting--bbd5fa16-1d46-4582-909e-3a6dac69f457", "sighting--997a41bb-e107-4176-9c65-0b74a6ceef3b", "sighting--d58b9107-21e3-4a6d-bf6a-6fb9c2e4f078", "sighting--d0a1cbcc-73cd-457b-b0a7-9d0e461b761f", "sighting--37e18670-d393-4715-8ba6-5765d2e2f3dd", "sighting--2798212e-75c3-46b6-9000-02d0b280e8a1", "sighting--f07a8ee9-a9fc-4522-852a-f9f842692e2e", "sighting--d2f95094-502e-4608-9159-ae0ee2588dad", "sighting--42796763-908b-4216-97ef-0c411a664b60", "sighting--c8cee20d-c13f-45a3-9680-b2c96a439c46", "sighting--badee526-b73f-4a23-9fa6-ad8865bd428a", "sighting--2a56aa2b-d814-4f73-8eed-d9209cf2a414", "sighting--754ac461-a475-4430-ad20-a8cd1cb22831", "sighting--36e9ae18-734a-44e6-9f79-936968b9c84c", "sighting--b2d3574f-99df-47a3-bed8-46c36f8a2bff", "sighting--a14b0cec-9c5b-4545-a5ee-60bc6882431e", "sighting--25ee58e7-cf4e-4992-ae5d-781e13f9a7d2", "sighting--9b5e4fb6-e8ca-4553-9f88-4d658a2031ad", "sighting--792caf64-b522-48f2-863d-8267d65b0aa0", "sighting--fdf0aaae-492b-4beb-a921-c66716a159e2", "sighting--b6b35c07-f9fe-4959-9762-00eeb976575d", "sighting--d4c1d04a-5fde-4004-a741-2f3cdbdd1b6b", "sighting--8f67e596-e706-48a4-b2dc-e98b8f2877c3", "sighting--9e231a88-888f-4628-ba46-4b776929a26d", "sighting--b91983d7-5dbc-4f77-b1f7-2f2d182f734d", "sighting--47ee3f03-8744-4256-8ee5-97e07a877407", "sighting--e55af219-b0d5-4fc8-b694-078344017fdc", "sighting--1a7a527c-76af-4cea-82eb-59ce2c7ed4f8", "sighting--c71bc3a9-95f6-4ca4-b3c4-3176c6c23baa", "sighting--26bbb56c-f2f0-44d1-86b7-88609d28cc97", "sighting--6758636d-a19c-4473-a993-8da801d71728", "sighting--a23f44e7-3b50-450f-8e7e-8b57a981b34a", "sighting--8f04fbd7-4643-4cfb-b4a0-7e0eefde8435", "sighting--b6c79889-a5b7-401d-8f6e-a25ac977515a", "sighting--be4ed60d-2cec-405e-af29-319f65a2dfe5", "sighting--4d9aaa75-abb0-48ae-93b8-91fdb2a6ea09", "sighting--f87b167f-f568-48a6-a8b5-cf8fc7331a1f", "sighting--70cb2472-96d9-4b61-b1de-fdacb247ac4a", "sighting--3e82c446-1574-4723-82c7-38449a42c1ae", "sighting--61506df0-f3e0-4985-bfdb-a9ca282a0494", "sighting--9c19fd85-dce5-4051-8cd2-e69fd3cb333a", "sighting--7562bfc4-90c9-4b2f-b410-7738587b6db5", "sighting--e919203b-d75b-4c4c-ab3a-abdddb7a20dc", "sighting--cbfc1467-3f78-428f-a1dd-bd1afd719690", "sighting--f1ea5259-aa39-4640-98ef-1403b8a4d721", "sighting--ccc4b77c-c0d7-4797-8aed-f0185d85b399", "sighting--4e1f6d56-0e11-4053-b9ed-9155ac82278e", "sighting--63e03814-b70a-4f73-84be-adf52e883bdb", "sighting--62c50b2c-4150-4aa1-906f-e8ff24392437", "sighting--2dcebab3-5777-41ff-9a13-35b2fe4a6d7d", "sighting--4e393fd8-4224-46f8-bacc-035144439dce", "sighting--4d33edb0-7d39-4869-acea-e247cffb1634", "sighting--0a6a78ad-a9ef-4f53-9cb5-90fd5b982c41", "sighting--26d93925-3849-4355-8646-83e2e1474a24", "sighting--fec92d7b-9009-437c-b73d-64dc5c6b9015", "sighting--ab9c0df0-4e8d-48e5-be33-45ed6c9b7b00", "sighting--1e15dc9c-e4df-4a56-8392-400fa41989e2", "sighting--a970ec19-c2ee-4dbc-8715-2a2ad6f0ac86", "sighting--63772303-f829-4492-b705-a536b3a06d7e", "sighting--e0761e7c-d241-4c18-959b-553946da2e2f", "sighting--903f968d-69e8-4df4-9152-ce3517012db9", "sighting--3f4e77c3-5af1-4dc0-a880-44b1b5f7e7f6", "sighting--edfc1724-4283-403b-a25f-d5d32210ee4e", "sighting--089639f3-1fa4-438d-a753-e48f641e3d65", "sighting--c25fbda4-2d36-4bdc-b793-cbeaa6eec2dc", "sighting--5eb5fffd-2e3a-462e-ac4a-b49048af0949", "sighting--dc261daf-6ed3-45d1-96a0-a330a0665011", "sighting--b6b532dd-f2d0-428f-8264-7c0474233c5f", "sighting--98576b11-0662-48e8-996d-85c3ba2effcf", "sighting--46314bbe-3e03-47f6-9d0c-f2be858a177a", "sighting--56ca12b7-b50a-42b9-9817-63ef9d3fee6a", "sighting--f73c6b6b-072b-43e4-af0c-98020eba2399", "sighting--6396b0a8-cb46-4b1c-bf1b-b562288c8d39", "sighting--c3f5d2af-b0e9-4ae9-b12d-7b962121abdb", "sighting--d2790f77-4f89-4648-84d8-0be34e59dbef", "sighting--b1a70a29-4ea0-4ab3-8618-485a8522deb4", "sighting--0cffd03b-ec04-4e0b-bfe6-35fe46a3214b", "sighting--bc5ed6fe-2542-460e-9c68-34d3a81ecb9e", "sighting--7d2eaf2c-a5df-4108-b7b3-a38c63b12ed4", "sighting--b47e3d61-b05a-492c-8b18-c98d7585f3a1", "sighting--0086d403-a123-4503-ba2c-81ddbe14f1d7", "sighting--22091769-1e5c-40a0-9f9f-443f15ffc33d", "sighting--ed628a76-76a3-4856-b410-b9a7cd9b298e", "sighting--deee118b-7472-40e6-b480-fbb52a348326", "sighting--203883d2-969f-4cea-8682-c9d30a599c98", "sighting--38c5d16f-bb7b-4072-9a9d-1cbe19f2842c", "sighting--24e5f5a2-6eb6-4215-bbbc-16f4ed42de4e", "sighting--8cc265b0-c6cd-4634-af9b-41bf0a29f391", "sighting--b434579a-3fb3-4f42-8e94-9853b3391b15", "sighting--b7a71639-b2f8-47fa-9438-d6cda6435d0e", "sighting--3699bba6-ec48-42f4-80e7-ae4bc8a41447", "sighting--0b0b9a4b-38af-4bd6-9778-e966621bcbcd", "sighting--0172e37e-64d8-4f55-95de-9d6c7e9f091c", "sighting--132f1229-2030-45cf-8703-a82d376fdbf2", "sighting--ee29ecf1-84a1-4fed-ae3d-97f46047511c", "sighting--691295d2-3750-4b36-9c1e-9806ed72e1cf", "sighting--370c21b9-a150-4e98-8de2-7d60bdb0d1db", "sighting--80b1c3d9-afd7-46fa-9515-215422d9a728", "sighting--013911f0-e2b5-4666-84d9-a6e93aea24d0", "sighting--1e051baf-b360-485e-bc8e-a2600de8a230", "sighting--a8efa416-f5fc-44ce-b542-5c7ac26f1bb8", "sighting--3d25a9ea-d08f-4cc1-a4a5-b73d12c83dc7", "sighting--349673e4-506a-4721-82f4-85c3b414cc1e", "sighting--a182d111-0365-47b1-a73a-4b2affbd3665", "sighting--d3ac9482-236f-4edc-9155-38c3dc4b3483", "sighting--1c060ac9-bf58-4855-b113-03f8bb528753", "sighting--88eca600-ee6b-4a0e-86c8-998f90198fd3", "sighting--b778d22c-764c-4822-8173-4b47e00c5450", "sighting--4c8fbe29-c2f9-4fb3-8c23-1fdd84271364", "sighting--57c5a135-2d25-433e-978a-e117eb34b9e5", "sighting--0781dbd8-df0d-4cf5-a64f-5a2dcabe4e5b", "sighting--306cedda-7756-4b05-bf99-460d379f5002", "sighting--b695140c-d52a-4d94-88c2-d07ce69e3f88", "sighting--c31c9a65-4372-4e4d-93f3-21ed84ccc057", "sighting--4b0417b6-31f3-4dab-9a5e-51768b8e94ad", "sighting--845aacd7-1ca6-4d28-a2bf-06083989012b", "sighting--13978876-3bda-45b3-be2b-92608d3bc5bd", "sighting--09cb4d2a-e6df-4c5d-8793-b9e954583ac8", "sighting--55e5c5e7-5960-4a53-a6cb-379f95051db3", "sighting--a3a8f118-ccf9-4597-8f02-8d3e157e6396", "sighting--00b3ed7f-1e04-4a42-ad9f-405c134b1d5f", "sighting--45571bc8-4477-44e7-be58-9e8965034f4f", "sighting--515508b2-94f3-4e23-8f37-9d2795120c4c", "sighting--ac523b35-8783-4620-a8c3-e84fb4ac4450", "sighting--a6dc71b5-96ba-4d32-8d9d-eda368b4d33d", "sighting--abd0cc9f-8f18-42b2-be2d-b2f7888683fe", "sighting--6224645e-61c6-4dbf-9917-9444d4fb8309", "sighting--955fcc0a-baf4-4b48-93da-3d35cc0212b7", "sighting--b470d222-be17-4e5b-8f27-8dbb4ce904bd", "sighting--9d6aa9ca-f222-41fd-b4aa-b5f061ed4241", "sighting--a6fc399e-b17a-4db5-89e0-d5fbdcd8936b", "sighting--3f3a9510-f8b5-4057-8a22-836db9a10f8e", "sighting--85a0cf7e-0763-4f3a-b571-8c4f52051d00", "sighting--466fc54f-09d6-48dc-95e0-ef7648e6bba6", "sighting--4a11203d-77b6-4313-bd6c-1e5ff6329668", "sighting--0e0a0f22-7d30-422b-8738-f047e9af3b39", "sighting--9964b176-7cd5-4d1e-88ef-28699f2894ca", "sighting--85eed4e3-f214-4cd5-8b3d-8e91b2d885d5", "sighting--6ec0575d-8967-45c2-9fb6-fac8cad1576b", "sighting--cac31255-9e32-4fe0-99cb-cfc0f10eb5fa", "sighting--5e221080-cea2-4751-b7dc-d024a5cf3b9c", "sighting--8b007ec2-d568-41ea-8713-8a6e11e74fbf", "sighting--53f59fed-9ff0-40b9-9f48-5cd1642d9e5c", "sighting--d548cd86-85c9-40f6-a965-21f08ed39dff", "sighting--87ae21b3-068a-47ca-8675-9fe83c1b709a", "sighting--490faba3-3ade-4f50-8599-fe53be4627b8", "sighting--55881a1c-b9ec-4341-b9c0-87abe18018ff", "sighting--d3e0679e-c8ce-4fcb-8544-9a1291931ff8", "sighting--4bdee77d-3eff-4cb3-8932-41351bdb28a7", "sighting--02d86929-26e6-4337-83b0-22543a765494", "sighting--8c9135a9-b05f-43b2-88a8-71910a800087", "sighting--b8ac98e9-1346-475a-a920-28b325eba8fb", "sighting--2577a4f5-411b-409e-8c06-01165c18fd64", "sighting--d883c07a-b48a-4734-a775-530bd9611bb1", "sighting--09d39491-1a01-45ec-a26d-2657509d02ae", "sighting--0eae4b1e-0ad7-4a7a-b7ca-ae3716a29507", "sighting--5a1def4d-917b-4d50-82f4-2eb757f292cf", "sighting--2d02164a-e681-40c0-98f7-619ec24cca63", "sighting--6a869859-62d9-4183-bf17-df5ffb7de593", "sighting--90be5134-57aa-490c-9c4e-c26c151c0862", "sighting--401c8d5e-eb33-4926-9bbe-a09aa5473ca4", "sighting--496d32b2-c40e-4056-ba5e-ba6f8cfb906a", "sighting--884d6d05-b43f-4178-9a2b-f3624bfc6449", "sighting--d0c60ee7-4a2d-414e-ae2e-5d94ed4cebbd", "sighting--5508ff9a-2b6c-4cc7-bdee-7905836e37b8", "sighting--57ef07ef-bba5-4872-9b9c-3c6b9b16554a", "sighting--062047f4-157b-4859-93ba-b73817a36e81", "sighting--a2acf2ac-3149-4743-a79f-20e538ad44bb", "sighting--1fffadde-321c-4e78-b191-097921b6dc33", "sighting--c6d9e221-ec34-4639-975f-f0285da0af59", "sighting--93c7a738-0546-4d40-9b87-73e77b96220f", "sighting--3f3db7be-e137-4fc4-b76b-00f98cf99dff", "sighting--53ad5052-48e4-4a65-a495-1378e8a346cc", "sighting--a838a827-190d-49dc-9fa5-6f7ba94d7bf1", "sighting--74886e7e-370b-4741-8791-2e59a40050cc", "sighting--6509bed7-232b-45b8-81ff-50cb8b7b25be", "sighting--1c6cc7e3-aeff-491b-98b5-8bac37efe96e", "sighting--fdfeb724-a048-4cb3-a4b0-b78694d7d3ae", "sighting--510cb085-5a1b-4d27-99aa-e3ba6d31961d", "sighting--4c9da94c-7c1b-4576-a380-95197498b351", "sighting--7db51547-661d-40a1-9837-3f6a09b00736", "sighting--e3a212aa-543b-4c69-b2a2-7d0b90fc7265", "sighting--417113b0-59f5-42a6-8101-0655eb0882db", "sighting--cec1c05b-71e2-48a5-a57a-c95d3f598a4c", "sighting--8272941a-4232-4995-aefe-da028d5e3a5d", "sighting--c06f86fa-320d-4bcc-9976-66b242e4ea59", "sighting--e0377d6f-2bde-4308-a9d3-3c7547366e30", "sighting--05472d27-e300-4f14-8341-c66ecbb30c1f", "sighting--26e1c270-e71f-41f0-b79e-a06fa770eb48", "sighting--3f286418-3f87-45a4-85bd-9c3f04db25a5", "sighting--4d5b6eb7-bfa7-4900-8b81-b67250329a40", "sighting--1c1c6340-f64d-4667-8e50-de26f6ff01b5", "sighting--a1baa43b-233e-44c8-a39d-ffc07476ec01", "sighting--ca4d49cc-1780-42b7-896d-cb450ed12a0a", "sighting--398bd06c-10f8-425c-bdff-98e88ee705de", "sighting--e6545f6b-f5c7-428f-9781-288a494486e2", "sighting--11ea000b-4326-4eb5-90ee-6e24017e3215", "sighting--2e2fccd8-9ea7-42f4-947a-a76bc037ebaf", "sighting--419c6040-cd8c-404d-a806-db6d2a57753f", "sighting--adbd5539-0e29-41b3-bf1d-8eb5a855a312", "sighting--7c379312-620d-4953-8bca-79d295251ec7", "sighting--3c109d94-25ee-418a-ae65-b71db9b1a203", "sighting--b1947efd-36e7-4324-a4fe-f852098d639c", "sighting--09c9fb2e-5f40-409e-9ebd-754db4317535", "sighting--3cbb6a84-ed2e-4c2d-9167-11d5961cfdc9", "sighting--2745de94-54e7-4915-8245-da4a86f07c0e", "sighting--3b52e368-afdf-451e-9a0d-73d89533f6b2", "sighting--cffb72a8-48a5-44fc-94e6-0df5cd92062a", "sighting--36df82ee-8bdc-4e91-bab2-6b93765f2302", "sighting--62621e0f-b948-4ca0-af57-4c28268796c7", "sighting--6e86851e-dafc-4dcc-9ab9-ef4713ed4c98", "sighting--a6f665f5-4a5b-42c5-8601-9474cab8e4d3", "sighting--99b9e8ea-2bf4-44d9-a23b-8e6a9e5993c1", "sighting--03a11284-12d3-48e3-8078-19e38e2f7029", "sighting--28d1fb88-e651-46ff-8c84-8e0f76ae6fdd", "sighting--e9c58e62-4834-4d2d-ba06-ea775bd8d8fc", "sighting--50b3a91d-5738-4edd-b130-899fb7f5c891", "sighting--0898edfa-ef41-4475-a158-62a20e3ccc46", "sighting--1e1e39de-dd2f-4870-a17d-ad4dad7fc484", "sighting--1aaf9a3d-4b10-469a-b6a7-577a77c00916", "sighting--1ed1da52-4a2a-4573-bffb-a8444bb0faf4", "sighting--3f5ad8eb-7fba-40d7-87c6-9ffe0675054e", "sighting--408b6120-d11e-4ed6-b2a5-aa7b41c258b4", "sighting--b4c5c824-d0de-437a-85da-06d31e0ed4d3", "sighting--56b0fa4d-6776-40d8-ae6b-c4e441d0c265", "sighting--c2fa9d3b-7472-40c9-b207-86e7ad578ae3", "sighting--e68ee518-5ce0-4053-8fa0-d676c6cbb2a9", "sighting--ef984d49-452b-4dac-af79-ef1cf68221aa", "sighting--074a46e0-5d6c-423d-9b6d-b789cd33f3e5", "sighting--b79dbb16-92b1-4a37-b829-acd9e74957b9", "sighting--12788286-07b7-49d0-bc24-a6ef485b22ac", "sighting--b3022b56-be1b-481b-b771-7b37a5444f73", "sighting--9c3b7bd3-7dcd-48d7-a51c-7b3036c37741", "sighting--5dacaad6-c248-47dc-b9ef-a060fbc0ff9c", "sighting--313384c3-34bb-4265-8f3a-a5391ff66654", "sighting--1a49e664-d1ef-4d79-bf35-40296a404f78", "sighting--e3ef8f94-64c2-4021-aefa-7ba13a3dd736", "sighting--9c4bf793-bd2f-4f40-94de-e471a4b9edb7", "sighting--4740418c-5d36-44fb-bd9e-4e08c371b750", "sighting--10e248b9-74df-4c98-8a68-707abe2ca389", "sighting--7cb033ff-74c8-4495-9781-501badc52a6c", "sighting--92f0fd85-6595-4a0d-be9a-7df54e5ea8dd", "sighting--f51911bc-b274-438c-9d99-5f5c29ddf805", "sighting--c1f6d8ca-5855-481c-828c-5b84e593c1c3", "sighting--fbefafec-bd87-4f35-95e9-215ca956f054", "sighting--de03f761-28fc-4bd5-8bff-dcc2cd3fa310", "sighting--cabe04cf-7faa-4b04-810b-a96229e0a2ab", "sighting--f7afe6b4-81fe-4103-9d4b-eab90e835278", "sighting--283e0ddc-ec17-4245-b7b3-070af2a1abd4", "sighting--ef5dc103-2485-4f23-8351-78b82c784340", "sighting--6a40c07c-66f1-4a99-a5a9-34960cdab942", "sighting--865d6a81-1573-43df-a631-3a1ef4bac7cf", "sighting--8cb39cfc-6b8d-428d-876f-46c6b454f2f7", "sighting--68c10196-38f3-4c8d-b18e-970dcb15703a", "sighting--2c5d01bd-82c0-4dc0-81de-73f6ec070c3d", "sighting--72d3a4d3-9247-4254-99a9-3dba2c734598", "sighting--3e1ecc0c-9a1d-41ff-9936-5911a24912e4", "sighting--f62dbf84-4186-4627-a37a-2781ee3fa5eb", "sighting--08a7989c-2d0b-41f2-b33c-805f80650c03", "sighting--3a398b99-8af6-4aed-9598-b6c834e38ae7", "sighting--48d03494-3b2a-40b2-91e2-d39320eb5889", "sighting--06dbebfc-fd50-4147-9bb4-40e995f08764", "sighting--209f1c63-61fb-49f3-8b9a-eb79b8b27404", "sighting--ffa04041-b9a0-4d16-81b4-be8f4d8f7782", "sighting--fbc7388b-028d-455e-8434-662f982d4cce", "sighting--7b1b676d-a37c-47fa-9e2f-7e03c88000ea", "sighting--7b7fe649-99d1-4b8b-9e3f-f103a20facbc", "sighting--8756b070-c4f4-4e6d-8ac5-21e228d5d8af", "sighting--4c2c5485-b215-4e9d-91eb-fc90cf451104", "sighting--bc489e57-7ba2-43bf-8fdc-3092823caa33", "sighting--2c96e45c-fcdb-4960-8301-5491ebc3f198", "sighting--af1b7468-473e-4d60-a1fb-091af23f1c27", "sighting--7415cc8c-842c-4c10-935a-4d43398c21dd", "sighting--b64e7df1-6232-4bed-b74c-81c8e99923ff", "sighting--37ffecf1-58e9-4f9d-aefb-95b6cf10639a", "sighting--06769e70-a443-4131-9c8d-9a2b61c9f33f", "sighting--f61e119d-1f11-4a82-af17-6acd82c62857", "sighting--607528c0-7784-4698-9af4-30af25277b37", "sighting--d6656252-624d-434a-8190-0d57314a2eeb", "sighting--93e9b2e2-a834-4664-9ac3-055060bb712d", "sighting--8f817e21-ed35-48c8-ad47-3582f71e29e7", "sighting--78fc1df2-e9fb-4479-ad25-a477dcd4f1d0", "sighting--354113cf-b428-4c9d-a729-df2ca73de032", "sighting--8df0d80c-bde9-4e19-876c-1b5100bf9a38", "sighting--7eced1e2-a17b-4ea2-8ce4-7e32801838a2", "sighting--a8d8b167-31e7-437b-88d2-14900ee3dc7a", "sighting--f7f2aac9-6146-48df-a92d-003ac753c56f", "sighting--9b7ac7ec-b8f2-4bf7-aa12-5d5c2e8f5af6", "sighting--87b22376-b4a6-4ebd-bfbb-21909168aa3d", "sighting--fe13ce02-f0a3-47c9-b365-7986f44e43f0", "sighting--557c6a4d-85be-41ec-82ff-de123291712f", "sighting--3513529d-4981-47e5-be4e-9c9b5493d57d", "sighting--19e01c26-2063-463f-b2c3-ff40bff6d384", "sighting--db4d4234-dbaf-44a2-bf6b-a2a9d1048338", "sighting--506ff0c7-e7f1-4ab7-bfea-00b2df09fc96", "sighting--2e807af7-8bb5-4d8a-9310-583b2b177a22", "sighting--f2bd7985-4892-4c29-8006-db3a5db0d8bf", "sighting--049ae8f7-71f7-49a5-804f-1e31aaa9f42b", "sighting--9b1a0125-97bc-4e80-a4aa-c49a4f37d0bb", "sighting--67624983-5c9d-4cef-88d4-967040035831", "sighting--f91dddb4-07b7-4342-99cb-b1bb416bbf37", "sighting--a9314629-0145-45b6-be14-6cc6cc88cab5", "sighting--5a9777ad-cfe3-433f-901e-f08a668a4cee", "sighting--74f3ea4a-d138-42e6-8aa2-b033b35f151b", "sighting--1f060927-83b4-46ea-8bf9-2f0dd3df660d", "sighting--c826a67b-c5ae-439b-904c-43e4e25ba61c", "sighting--500d74d8-3764-45b3-9ed2-d5521af5b04d", "sighting--9f1b978c-b183-44f8-8603-7ca551ae4d08", "sighting--8c47e6e2-a0ca-4d6f-a440-3597b40924c7", "sighting--edfc8b84-e9e7-4043-bf88-f56b79168bbf", "sighting--40f463c6-2d18-4efb-9089-1c025be780fd", "sighting--369a736b-5dc4-430c-a2fe-f84b15229862", "sighting--a90554e5-9b34-4757-b983-cc99e7d31666", "sighting--f5143db8-c5c0-4a2a-a6e7-141ea1d07cb4", "sighting--cfa09535-638c-42e2-878e-bfbea9a7c92e", "sighting--349703ba-db79-4af7-8b6a-4a1058c201b4", "sighting--56731e86-9786-4d32-a30d-64bab9e10d2e", "sighting--3a1ecd67-33f1-48c2-8612-7b273b031d00", "sighting--a02bfe4f-e284-4fab-9745-19af21c6767e", "sighting--89534268-c255-48e0-bef4-74dc89628295", "sighting--d5242125-246d-4fb9-981e-4ea148abf4bc", "sighting--a7fca23c-a494-4278-b463-a9cc10a3faaf", "sighting--b16ff287-da26-4f83-993b-a3569647c815", "sighting--c58a4cfd-6503-4263-af13-e68158d274e3", "sighting--6e6fee7f-2da4-4be5-8770-625183a84c66", "sighting--50652dd6-8e61-480c-af66-53e2aa8d2872", "sighting--90ab2bd4-9a4f-4652-b848-f57d09d417de", "sighting--17b08363-c14e-4454-9ed3-66e4cd599abb", "sighting--0d2c0b2b-1270-44e6-a308-73cfb6f095c6", "sighting--71150454-bc4b-41c1-a69d-d3c90418cd95", "sighting--0bd1b2bc-96f9-4310-bc15-8099e0b9a426", "sighting--a709cf10-0df1-4a77-8ec4-747cfe633ab9", "sighting--5eb74b0f-7887-4053-b0e2-c1714912d4fb", "sighting--adf520e7-b325-4532-b76b-649d75291e97", "sighting--12a31c32-a6b3-4efa-a5ab-792efb9b5d34", "sighting--598cc40f-0751-4484-bee6-47af0bca135a", "sighting--4d2379d5-2e7f-47db-a85c-a00108105d00", "sighting--9b8787cd-80ef-4425-9c22-30f3c36b1f99", "sighting--0a3c14eb-389b-4e3d-919d-559700dd5f21", "sighting--2ec18519-a542-4d41-ba96-37d657079523", "sighting--52d1b8b2-7bb8-4b43-bc8b-8e92de048c8c", "sighting--6db61dcb-cfc7-45e1-9b10-273524e5033a", "sighting--f92e255c-cee2-4874-8607-e0bfe4606868", "sighting--00716db3-9d70-4b6e-a319-8e4ca7073a7e", "sighting--e7d99504-64f9-44c9-9e66-474ef1b1b51f", "sighting--a56abc76-e21a-4aa0-8c83-925c5c19e9b4", "sighting--f90a0f9e-7154-4ce5-a9ea-226fc1253282", "sighting--9ed17d6a-3bec-4dcb-a9ba-5d275c9ced4b", "sighting--a62a4c2c-61f1-4d88-af90-e8aa714f083c", "sighting--04e5b725-ea3f-4c20-a0b3-8c5d960c5731", "sighting--c8751909-0088-4208-aade-e1451d24174e", "sighting--3a86f6fc-e448-47ca-97c1-2df08ba871b4", "sighting--a9322821-23ba-4de3-99b0-11fe2b58fdd5", "sighting--4c396e62-a189-43c5-9033-f5230e2703c8", "sighting--fc2a72ac-e33a-41fb-b3f4-29dec5f8ccb5", "sighting--19cfedea-861e-4090-bab1-64b1b4c18840", "sighting--8619d779-158d-4fdd-b585-ef6fbb21ae54", "sighting--d4a6e6a0-c0a6-4fec-91a0-a0d88d54b5c8", "sighting--42b58ad7-dcfb-4565-80ec-5e4abad2364a", "sighting--29ba8173-4447-4a70-a5ef-092eb88cfaa6", "sighting--1e8f5597-1b8f-49b3-9d7d-929497177d53", "sighting--84e45fd7-af70-49d1-81fb-7822562ee447", "sighting--12c8bf6e-d21d-4adb-85bf-3d213644f5fc", "sighting--59080d30-995a-4d67-8e38-2672f9df261e", "sighting--bf3d1bfe-bdd6-4121-b796-e49c7e0620ef", "sighting--faee19f6-a1c0-4714-9ee9-8f1a2b797512", "sighting--25d3d059-48f2-4443-8957-968e9bec1352", "sighting--87a42d0f-d0f4-4715-836e-9ab0694f305c", "sighting--a20ef221-12f4-40d2-92f3-0f2addb61d0e", "sighting--2deb6f76-5840-4132-a17a-0dd4659ab655", "sighting--9bbd3420-2482-4ada-9502-9e6abd06d440", "sighting--9a3dd339-690e-4841-86e1-53ef8a2f3600", "sighting--236c2a87-9b0e-4385-b92c-30a61e9b3bc8", "sighting--89016932-bb3b-4599-98c8-2f38a0acb3cd", "sighting--d0f0fe62-96a0-4cdb-a06b-7792b70866d6", "sighting--04c12572-7067-45e2-bb61-d2330663c049", "sighting--b175266b-cc04-44d7-9c4c-0eaeb07eeea9", "sighting--b57ee0ed-dbab-485d-b3cf-6add4795e87d", "sighting--1cf3ea61-f419-455b-94c2-a77a4727fff3", "sighting--78f81561-225a-4a45-b684-e33dc970cc73", "sighting--0003630e-a0ea-496d-8500-3cbd6dcc02ff", "sighting--db56f0d0-a3c0-4c06-b30f-0fc4bc6c3c04", "sighting--f23c8bd9-290f-494f-8a87-328de9629a8d", "sighting--072461ef-fdb2-4a86-814d-73a22901e2da", "sighting--45ef0161-697e-46e5-91aa-6d7dfc4d010a", "sighting--1e17aeef-697a-4b30-8fd6-559869915d6b", "sighting--b6f1197c-1421-4f92-a81f-ce4db3ef5a0c", "sighting--26795671-d7fd-4a26-8d56-d5be8d08c317", "sighting--ef2101c5-9a61-4e6d-9b86-5b54fb8213fa"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-31T11:00:01.628Z", "modified": "2026-07-31T11:00:01.628Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}